Section 01
1. Data Controller
pk92.bio acts as the data controller in respect of all personal data collected from players and visitors of the pk92 platform. When we refer to "pk92", "we", "us", or "our" in this Privacy Policy, we mean pk92.bio and its operating entity responsible for providing online casino, sports betting, and related gaming services to players in Pakistan and internationally.
As data controller, pk92 determines the purposes and means of processing your personal data. We are committed to handling all personal information transparently, lawfully, and in accordance with the principles of data minimisation, purpose limitation, and storage limitation as recognised under applicable international data protection frameworks.
Data Controller Contact: For all privacy-related queries, data subject requests, or concerns regarding the handling of your personal information, please contact pk92 support via the email address published in the footer of this page. pk92 will acknowledge all privacy-related communications within 5 business days.
Section 02
2. Data We Collect
pk92 collects personal data from players through several channels — directly during registration and account usage, automatically through your interaction with the platform, and occasionally from third-party verification and payment service providers. The categories of personal data we collect include:
| Category |
Data Points |
Source |
| Identity Data |
Full legal name, date of birth, CNIC number, nationality |
Player-provided at registration / KYC |
| Contact Data |
Email address, Pakistani mobile number, city of residence |
Player-provided at registration |
| Financial Data |
JazzCash/EasyPaisa number, bank account details, USDT wallet address, transaction history |
Player-provided during deposit/withdrawal |
| KYC Documents |
CNIC scan (front and back), proof of address, payment method verification |
Player-provided during verification |
| Technical Data |
IP address, device type, browser, operating system, session data |
Automatically collected |
| Usage Data |
Games played, bets placed, deposit/withdrawal patterns, pages visited, time on platform |
Automatically collected |
| Communications Data |
Support chat transcripts, email correspondence, feedback submissions |
Player-provided via support channels |
Sensitive Data: pk92 does not deliberately collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data. Where health-related information is voluntarily disclosed in connection with a responsible gaming request (for example, a self-exclusion citing a gambling problem), that information is processed solely for the purposes of player protection and is not used for any other purpose.
Section 03
3. How We Use Your Data
pk92 processes your personal data only for clearly defined purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The primary purposes for which pk92 processes personal data are as follows:
- Account Registration & Management: To create and maintain your pk92 player account, verify your identity, and manage your account settings and preferences.
- Identity Verification (KYC): To verify that you meet pk92's eligibility requirements, including the minimum age of 21, and to comply with our anti-money laundering (AML) and Know Your Customer obligations under applicable gaming and financial regulations.
- Payment Processing: To process your deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, card payments, and USDT. Financial data is shared with payment processors only to the extent necessary to complete transactions.
- Service Delivery: To provide access to pk92's full range of services including cricket betting, live casino games, slot machines, and promotional offers tailored to your account activity.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, money laundering, and other prohibited conduct on the platform.
- Responsible Gaming: To monitor account activity for signs of problem gambling behaviour and to administer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion measures.
- Customer Support: To respond to your queries, complaints, and support requests in a timely and effective manner, and to maintain records of communications for quality and compliance purposes.
- Marketing Communications: To send you promotional offers, bonus notifications, and event-specific updates (such as PSL season promotions) where you have provided consent to receive marketing communications. You may withdraw consent at any time.
- Platform Improvement: To analyse usage patterns and player behaviour in aggregate, helping pk92 improve its platform, fix technical issues, and develop new features that serve Pakistani players better.
- Legal & Regulatory Compliance: To meet our obligations under applicable gaming licence conditions, financial crime legislation, and any lawful orders from competent regulatory authorities.
Section 04
4. Legal Basis for Processing
pk92 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual Necessity: Processing is necessary to perform the contract between you and pk92 — specifically, to operate your account, process payments, and deliver our gaming services. Without this processing, pk92 cannot provide you with a functional account.
- Legal Obligation: Processing is required to comply with pk92's legal and regulatory obligations, including KYC/AML requirements, gaming licence conditions, and responses to lawful regulatory or law enforcement requests.
- Legitimate Interests: pk92 processes certain data on the basis of its legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and service improvement. We ensure that our legitimate interests do not override your fundamental privacy rights.
- Consent: Where pk92 relies on consent as the legal basis for processing — particularly for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Withdrawing Consent: To withdraw consent for marketing communications, you may use the unsubscribe link in any pk92 marketing email, or contact pk92 support directly. Withdrawal of marketing consent does not affect your ability to continue using your pk92 account.
Section 05
5. Data Sharing & Third Parties
pk92 does not sell, rent, or otherwise commercialise your personal data to any third party. We share personal data only where it is necessary to deliver our services, meet legal obligations, or protect the security of the platform. The categories of third parties with whom pk92 may share your data are:
- Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Visa/Mastercard card processors, and USDT blockchain networks receive the minimum financial data necessary to process your transactions. These providers operate under their own privacy policies and data protection obligations.
- Identity Verification Providers: Third-party KYC and AML screening services that assist pk92 in verifying player identities, screening against sanctions lists, and meeting regulatory compliance requirements.
- Gaming Software Providers: Casino game studios and sports data feed providers that power pk92's gaming content. These providers may process limited technical and usage data as part of delivering game content.
- Analytics Providers: Platform analytics tools used by pk92 to understand aggregate usage patterns and improve the player experience. Data shared with analytics providers is anonymised or pseudonymised where possible.
- Regulatory & Law Enforcement Authorities: pk92 may disclose player data to gaming regulators, financial intelligence units, the Federal Investigation Agency (FIA), or other competent authorities where required to do so by law, court order, or gaming licence condition. Such disclosures are made only to the extent legally required.
- Professional Advisors: Legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations and who assist pk92 in operating its business lawfully.
Third-Party Responsibility: pk92 requires all third-party data processors to implement appropriate technical and organisational security measures and to process your data only in accordance with pk92's documented instructions. We do not permit third parties to use your data for their own independent purposes.
Section 06
6. Data Retention
pk92 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, and to meet our legal, regulatory, and contractual obligations. The general retention periods applied by pk92 are as follows:
- Active Account Data: Retained for the duration of your active relationship with pk92, plus a minimum period of five (5) years following account closure to satisfy gaming licence and AML record-keeping requirements.
- KYC & Identity Documents: Retained for a minimum of five (5) years following account closure or the completion of the last transaction, in compliance with applicable financial crime regulations.
- Transaction & Financial Records: Retained for a minimum of seven (7) years to satisfy financial record-keeping obligations under applicable law.
- Support Communications: Retained for three (3) years following the resolution of the relevant query or complaint.
- Marketing Consent Records: Retained for the duration of your consent plus three (3) years, to demonstrate compliance with consent requirements.
- Technical & Log Data: Retained for up to twelve (12) months for security monitoring and fraud detection purposes, after which it is deleted or anonymised.
Upon expiry of the applicable retention period, pk92 will securely delete or irreversibly anonymise your personal data. Where data cannot be immediately deleted due to technical constraints, it will be isolated from active processing until deletion is carried out.
Section 07
7. Data Security
pk92 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security programme includes:
- Transport Layer Security (TLS): All data transmitted between your device and pk92.bio is encrypted in transit using TLS 1.2 or higher, ensuring that your login credentials, payment details, and personal information cannot be intercepted during transmission.
- AES-256 Encryption at Rest: Sensitive data stored in pk92's databases — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
- Access Controls: Access to personal data within pk92's systems is restricted on a need-to-know basis. Staff members with access to player data are subject to confidentiality obligations and undergo regular security awareness training.
- Two-Factor Authentication (2FA): pk92 offers 2FA for player accounts to provide an additional layer of protection against unauthorised account access.
- Intrusion Detection & Monitoring: pk92's infrastructure is continuously monitored for suspicious activity, unauthorised access attempts, and anomalous behaviour patterns that may indicate a security incident.
- Vulnerability Management: pk92 conducts regular security assessments and penetration testing of its platform to identify and remediate security vulnerabilities before they can be exploited.
Data Breach Notification: In the event of a personal data breach that poses a risk to your rights and freedoms, pk92 will notify affected players as soon as reasonably practicable, and will report the breach to the relevant regulatory authority as required under applicable law. Notifications will be sent to the email address registered on your pk92 account.
Section 08
8. Cookies & Tracking Technologies
pk92 uses cookies and similar tracking technologies to ensure the proper functioning of our platform, to remember your preferences, and to understand how players interact with pk92.bio. The types of cookies used by pk92 are:
- Strictly Necessary Cookies: These cookies are essential for the operation of pk92.bio. They enable core functions such as session management, login authentication, and security controls. These cookies cannot be disabled without affecting the functionality of the platform.
- Functional Cookies: These cookies remember your preferences — such as your preferred language, currency display, and game settings — to personalise your experience on pk92.bio across sessions.
- Analytics Cookies: pk92 uses analytics tools to collect aggregate data about how players navigate and use pk92.bio. This data is used solely to improve platform performance and the overall player experience. Analytics data is anonymised where technically feasible.
- Security Cookies: Short-lived cookies used to detect and prevent fraudulent login attempts, bot activity, and other security threats to the pk92 platform.
pk92 does not use third-party advertising cookies or cross-site tracking cookies for the purposes of serving targeted advertisements on external websites. You may manage your cookie preferences through your browser settings at any time, though disabling strictly necessary cookies may impair your ability to use pk92.bio normally.
Section 09
9. Your Privacy Rights
As a player on pk92, you hold specific rights in respect of your personal data. pk92 is committed to honouring these rights promptly and transparently. Your rights include:
- Right of Access: You have the right to request confirmation of whether pk92 holds personal data about you, and to receive a copy of that data together with information about how it is processed.
- Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by pk92. You may update certain account details directly within your pk92 account settings.
- Right to Erasure ("Right to be Forgotten"): You may request that pk92 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the processing is unlawful. This right is subject to pk92's legal retention obligations, which may require us to retain certain data for prescribed periods.
- Right to Restriction of Processing: You have the right to request that pk92 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
- Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to Object: You have the right to object to pk92's processing of your personal data where that processing is based on legitimate interests. You also have an absolute right to object to the use of your personal data for direct marketing purposes.
- Rights Related to Automated Decision-Making: pk92 may use automated processes for certain account-related decisions such as fraud risk assessments. You have the right to request human review of any automated decision that significantly affects you.
Exercising Your Rights: To exercise any of the rights listed above, please contact pk92 support at the email address in the footer of this page. pk92 will respond to all valid data subject requests within 30 days of receipt. We may need to verify your identity before processing your request to protect against unauthorised access to your data.
Section 10
10. Minors & Age Policy
pk92 operates a strict 21+ age policy across all of its services. pk92 does not knowingly collect personal data from individuals under the age of 21. Our registration process includes age verification steps, and all accounts are subject to KYC age verification before full account functionality is granted.
If pk92 becomes aware that personal data has been collected from an individual under the age of 21, the relevant account will be immediately suspended, all funds will be handled in accordance with applicable regulatory requirements, and all personal data relating to the underage individual will be deleted from our systems as soon as technically practicable.
21+ Only: If you are a parent or guardian and believe your child under 21 may have registered on pk92, please contact our support team immediately at the email address in the footer. We will investigate and take appropriate action without delay. Gambling can be addictive — please ensure minors in your household do not have unsupervised access to your pk92 account.
Section 11
11. International Data Transfers
pk92 operates as an international gaming platform and, as a result, some of your personal data may be processed in countries outside of Pakistan. This may occur when data is processed by our third-party service providers — such as gaming software suppliers, KYC verification partners, or cloud infrastructure providers — who are based in other jurisdictions.
Wherever personal data is transferred internationally, pk92 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy. These safeguards may include:
- Data processing agreements with standard contractual clauses that impose binding data protection obligations on the recipient.
- Transfer to countries that maintain an adequate level of data protection as recognised under applicable international standards.
- Binding corporate rules where transfers occur within a group of companies subject to shared data governance policies.
By creating an account and using pk92's services, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan as described in this section.
Section 12
12. Changes to This Privacy Policy
pk92 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our gaming licence obligations. The effective date at the top of this page will always reflect when the most recent revision was made.
Where changes to this Privacy Policy are material — meaning they significantly affect the way in which pk92 processes your personal data or the rights available to you — pk92 will notify registered players via email to the address on their account and via a prominent notice on pk92.bio prior to the changes taking effect.
Your continued use of pk92.bio following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. pk92 recommends that all players review this Privacy Policy periodically to remain informed of how their data is being handled.