pkzz Privacy Policy

This Policy covers all personal data processing activities carried out by pkzz in connection with the Platform, including but not limited to account registration, identity verification (KYC), payment processing, customer support interactions, responsible gaming assessments, marketing communications, and platform analytics.

This Policy should be read alongside the pkzz Terms & Conditions, which govern the overall contractual relationship between you and pkzz. In the event of any conflict between this Policy and the Terms & Conditions on a data protection matter, this Policy shall take precedence.

By registering a pkzz Account or continuing to use the Platform after being presented with a link to this Policy, you acknowledge that you have read and understood how pkzz processes your personal data as described herein. If you disagree with any aspect of this Policy, you should discontinue use of the Platform and contact support to request account closure.

pkzz acts as the data controller in respect of personal data collected through the Platform. As data controller, pkzz determines the purposes for which and the manner in which personal data is processed. pkzz's international gaming licence requires the platform to maintain records of processing activities, to implement appropriate technical and organisational security measures, and to respect the data rights of players at all times.

For all data-related enquiries, including requests to exercise your data rights as described in Section 10 of this Policy, you may contact pkzz's designated data contact via the channels listed in Section 13.

pkzz collects personal data through several channels. The categories of data collected, and the circumstances in which they are collected, are set out in the table below:

pkzz does not collect special categories of sensitive personal data (such as biometric data, health data, or religious beliefs) unless specifically required by applicable law or licensing obligations, in which case the Player will be informed at the point of collection.

pkzz uses the personal data it collects for the following purposes:

• Account Administration: Creating and managing your pkzz Player Account, including processing registration, verifying identity, and maintaining your account settings.
• Payment Processing: Facilitating deposits and withdrawals via your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or other accepted methods), processing PKR transactions, and maintaining accurate financial records of your Account activity.
• KYC & AML Compliance: Verifying your identity and age, screening against relevant watchlists, and fulfilling the anti-money-laundering and know-your-customer obligations required by pkzz's gaming licence.
• Platform Security: Detecting, investigating, and preventing fraudulent activity, match-fixing, bonus abuse, unauthorised account access, and other prohibited conduct on the Platform.
• Responsible Gaming: Monitoring gaming activity patterns to identify potential problem gambling behaviour, applying responsible gaming tool settings you have configured, and fulfilling pkzz's duty-of-care obligations under its licence.
• Customer Support: Responding to your queries, complaints, and account requests via live chat and email.
• Legal Compliance: Meeting pkzz's obligations under applicable laws, regulatory requirements, and the terms of its international gaming licence, including mandatory reporting obligations.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the pkzz Platform, game lobby, payment flows, and user interface.
• Marketing Communications: Sending promotional communications about pkzz bonuses, new games, and special offers — but only where you have opted in to receive such communications and in accordance with the legal basis described in Section 5.

pkzz processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between pkzz and you as a registered Player — including account management, payment processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with applicable laws, regulatory requirements, and pkzz's gaming licence obligations — including KYC verification, AML screening, and mandatory reporting.
• Legitimate Interests: Processing carried out in furtherance of pkzz's legitimate business interests, including platform security, fraud prevention, responsible gaming monitoring, and platform improvement — where those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in relation to optional marketing communications. You may withdraw your consent at any time by updating your communication preferences in Account Settings or by contacting support.

pkzz uses cookies and similar tracking technologies on the Platform to ensure the website functions correctly, to remember your preferences, and to analyse how Players interact with the Platform. The categories of cookies pkzz uses are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without breaking the Platform's functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred game view, and responsible gaming tool configurations, so you do not need to reset them each visit.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and use the Platform, enabling pkzz to identify performance issues and improve the user experience. pkzz uses privacy-respecting analytics tools that do not share identifiable data with advertising networks.

Most web browsers allow you to control cookies through their settings. Disabling cookies may affect the functionality of certain parts of the pkzz Platform, including login persistence and responsible gaming tool settings. pkzz does not use cookies to deliver third-party advertising or to track players across unaffiliated websites.

pkzz does not share your personal data with third parties except in the limited circumstances described below. In all cases, data sharing is governed by appropriate contractual safeguards that require recipients to protect your data to standards no lower than those applied by pkzz.

• Payment Processors: pkzz shares necessary financial data with payment processors — including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — to facilitate your deposit and withdrawal transactions. These processors receive only the minimum data required to complete each transaction.
• Game Providers: Game studios and software providers whose titles are available on pkzz may receive technical session data necessary to deliver their games. These providers do not receive your identity or payment data.
• Identity Verification Services: KYC and AML compliance requires pkzz to share identity documents and personal data with authorised third-party verification service providers operating under appropriate data processing agreements.
• Regulatory Authorities: pkzz is required by its gaming licence to disclose player data to licensing and regulatory authorities upon lawful request. pkzz may also be required to disclose data to law enforcement agencies in response to valid legal processes.
• IT & Infrastructure Providers: pkzz uses third-party cloud hosting, database, and security infrastructure providers to operate the Platform. These providers process data on pkzz's behalf under data processing agreements and are not permitted to use the data for their own purposes.

pkzz retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by pkzz's gaming licence, applicable law, or legitimate business need. The following retention periods apply:

Upon expiry of the applicable retention period, pkzz will securely delete or anonymise your personal data in accordance with its internal data deletion procedures. Where data has been anonymised, it may be retained indefinitely for statistical and analytical purposes in a form that no longer identifies you.

pkzz implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your browser and the pkzz Platform is encrypted using TLS (Transport Layer Security) with 256-bit SSL certificates. This applies to all page loads, login sessions, payment transactions, and account management actions.
• Encryption at Rest: Sensitive personal data stored in pkzz's databases — including financial data, KYC documents, and account credentials — is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to player personal data within pkzz's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Password Security: Account passwords are stored as salted cryptographic hashes. pkzz's systems never store or transmit your password in plain text. pkzz strongly recommends that all players use a unique, complex password and update it regularly.
• Infrastructure Security: The pkzz Platform is hosted on secure cloud infrastructure with DDoS protection, intrusion detection systems, and regular security patching applied to all server components.
• Incident Response: pkzz maintains a documented data breach response procedure. In the event of a security incident that poses a risk to your personal data, pkzz will notify affected players and relevant regulatory authorities in accordance with its licence obligations.

As a data subject whose personal data is processed by pkzz, you hold the following rights. To exercise any of these rights, contact pkzz via the channels listed in Section 13. pkzz will respond to all verified data rights requests within 30 days.

The pkzz Platform is strictly intended for adults aged 21 years and above. pkzz does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory step in the pkzz registration and KYC process, and pkzz will take all reasonable steps to prevent minors from accessing the Platform.

If pkzz discovers that it has inadvertently collected personal data from a person under 21 years of age, it will immediately suspend the associated Account, delete the personal data in question (subject to any mandatory legal retention requirements), and refund any deposits net of withdrawals already processed.

pkzz reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, pkzz's data processing practices, or the Platform's technical infrastructure. The date of the most recent revision is displayed at the top of this page.

Where changes are material — meaning they significantly affect your rights or how pkzz processes your personal data — pkzz will notify registered Players by email to their registered address and will display a prominent notice on the Platform for a minimum of 14 days before the revised Policy takes effect. Minor amendments may be made without advance notice.

Your continued use of the pkzz Platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with the revised Policy, you should cease use of the Platform and contact support to close your Account.

For all privacy-related queries, data rights requests, or concerns about how pkzz handles your personal data, please contact pkzz through the following channels:

• Live Chat: Available 24/7 directly within your logged-in pkzz Account. Live chat is the fastest route for urgent privacy concerns, including suspected unauthorised access to your account.
• Email: [email protected] — for formal data rights requests, KYC document queries, and detailed privacy enquiries. Please include your registered username and a clear description of your request to enable efficient processing. pkzz will acknowledge all privacy-related email enquiries within 48 hours and aims to resolve data rights requests within 30 days of receipt.

When submitting a data rights request, pkzz may need to verify your identity before processing the request, to ensure that personal data is not disclosed to or deleted at the request of an unauthorised party. This verification step is a data protection measure, not a barrier to exercising your rights.