Privacy Policy — How pk194 Protects Your Data

01 Who We Are

pk194 (referred to throughout this policy as "pk194", "we", "us", or "our") is the operator of the online gaming and sports betting platform accessible at pk194.org, including any associated mobile-optimised interfaces. pk194 operates under an international gaming license and is the data controller responsible for the personal data collected through the platform.

This Privacy Policy applies to all individuals who visit, register on, or otherwise interact with the pk194 platform, including players based in Karachi, Lahore, Faisalabad, Islamabad, and all other cities and regions of Pakistan. For any privacy-related queries, you may contact us at [email protected] — response times are typically within 24 hours.

02 Data We Collect

pk194 collects the following categories of personal data. Only information that is necessary for the stated purpose is requested.

2.1 Identity & Registration Data

• Full legal name as it appears on your CNIC or passport
• Date of birth (to verify you are 21 years of age or older)
• Pakistani CNIC number or passport number
• Residential address, including city (e.g., Karachi, Lahore, Islamabad)
• Gender (optional, for personalisation purposes only)

2.2 Contact Data

• Email address (primary communication channel)
• Pakistani mobile number (for account security and transaction alerts)

2.3 Financial & Transaction Data

• JazzCash account number or registered mobile number
• EasyPaisa account number or registered mobile number
• HBL or UBL account details (last four digits and account name only)
• Meezan Bank or SadaPay account identifiers
• USDT wallet address (TRC-20)
• Deposit history, withdrawal history, and transaction timestamps
• Outstanding balances and bonus wallet balances

2.4 Gaming & Behavioural Data

• Games played, bet amounts, win/loss records, and session duration
• Sports betting selections including cricket, PSL matches, and other markets
• Bonus offers claimed and wagering progress
• Responsible gaming settings applied (deposit limits, cooling-off periods, self-exclusion status)

2.5 Technical & Device Data

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session tokens and login timestamps
• Device fingerprint data used for fraud prevention

2.6 KYC Verification Documents

• Scanned copies or photographs of government-issued ID (CNIC front and back, passport)
• Proof of address documents (utility bill or bank statement dated within three months)
• Selfie photograph where required for identity confirmation

03 How We Collect Your Data

Personal data is collected through the following channels and mechanisms:

• Direct submission: Information you provide when registering your pk194 account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or completing any form on the platform.
• Automated collection: Technical data collected automatically when you access the pk194 platform, including IP addresses, session data, and device identifiers, via server logs and analytics tools.
• Cookies and tracking technologies: Data collected through cookies, pixel tags, and similar technologies as described in Section 7 of this policy.
• Third-party verification providers: Identity and age verification data obtained from KYC service providers and document verification platforms used to fulfil our licensing obligations.
• Payment processors: Transaction confirmation and status data received from payment providers including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT processors.
• Fraud prevention partners: Risk signals and device reputation data received from fraud detection service providers to protect the integrity of the platform and its players.

04 Why We Use Your Data

The table below summarises the primary purposes for which pk194 processes your personal data:

05 Legal Basis for Processing

pk194 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Player Agreement, including account management, gaming services, and payment processing.
• Legal obligation: Processing required to comply with our international gaming license conditions, including KYC verification, anti-money-laundering (AML) checks, and responsible gaming monitoring.
• Legitimate interests: Processing carried out in pursuit of legitimate business interests — such as fraud prevention, platform security, and improving user experience — provided these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent, primarily for optional marketing communications. You may withdraw consent at any time by updating your communication preferences in Account Settings or by contacting [email protected].

06 Data Sharing & Disclosure

pk194 does not sell your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate confidentiality and data protection obligations:

6.1 Service Providers

Third-party companies engaged by pk194 to provide technical or operational services, including KYC verification providers, payment gateway operators (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, USDT processors), cloud hosting providers, fraud detection platforms, and customer support tooling. These providers act as data processors and are contractually prohibited from using your data for any purpose other than delivering the contracted service.

6.2 Gaming Content Providers

Game studios and live casino content providers whose games are hosted on the pk194 platform may receive your player identifier and session data for the purpose of delivering their game content, managing game state, and calculating payouts. Game providers are contractually bound to data protection standards consistent with this policy.

6.3 Regulatory & Legal Authorities

pk194 is required, as a condition of its international gaming license, to report certain data to the licensing authority, including information relating to suspicious transactions or activity that may constitute money laundering or other financial crimes. We may also disclose personal data where required by a valid court order, subpoena, or other legal process issued by a competent authority.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the pk194 business, personal data held by pk194 may be transferred to the relevant successor entity. You will be notified in advance of any such transfer that materially affects the handling of your personal data.

07 Cookies & Tracking Technologies

The pk194 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session, to detect fraud, and to understand how players use the platform so that we can improve it.

7.1 Types of Cookies Used

• Strictly necessary cookies: Essential for the platform to operate. These cookies maintain your login session, store your language and currency preferences, and keep your gaming session active. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to understand aggregate player behaviour on the platform — such as which pages are most visited and how players navigate between sections. Data collected is anonymised and aggregated.
• Security cookies: Used to detect and prevent fraudulent login attempts, account takeovers, and bot activity. These cookies may collect device fingerprint data.
• Preference cookies: Store your choices such as deposit limits, responsible gaming settings, and notification preferences so that they persist across sessions.

7.2 Managing Cookies

You may manage non-essential cookies through the cookie preference centre accessible via the cookie banner displayed on your first visit to pk194.org. You can also configure your browser to block or delete cookies; however, please note that disabling strictly necessary cookies will impair the functionality of the pk194 platform, including your ability to log in and maintain a gaming session.

08 Data Retention

Personal data held by pk194 is retained for the following periods, after which it is securely deleted or irreversibly anonymised:

• Account and identity data: Retained for the duration of your active account plus five (5) years following permanent account closure, as required by our gaming license for audit and AML compliance purposes.
• Transaction and financial records: Retained for seven (7) years from the date of the transaction, in line with standard financial record-keeping obligations.
• KYC documentation: Retained for five (5) years following account closure or the last verification event, whichever is later.
• Gaming and session logs: Retained for three (3) years from the date of the session, used for dispute resolution and responsible gaming monitoring.
• Customer support records: Retained for two (2) years from the date of the last interaction, unless the matter relates to an ongoing dispute or regulatory inquiry.
• Marketing consent records: Retained for the duration of the marketing relationship plus one (1) year following withdrawal of consent, as evidence of the consent and its withdrawal.

09 Data Security

pk194 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and pk194 servers
• AES-256 encryption for sensitive data stored at rest, including KYC documents and payment identifiers
• Multi-factor authentication (MFA) for all staff accounts with access to player data
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Role-based access control ensuring that staff can only access the player data necessary for their specific function
• Intrusion detection systems and 24/7 security monitoring of all production infrastructure
• Secure data destruction procedures for physical media and digital records at end of retention period

Whilst pk194 takes every reasonable precaution, no online system can be guaranteed to be 100% secure. You also have a responsibility to protect your account credentials and to notify pk194 immediately if you suspect any unauthorised access to your account.

10 Your Rights

As a player on the pk194 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Data Rights Request".

• Right of Access: You have the right to request a copy of the personal data pk194 holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: If any personal data held by pk194 is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal obligations — for example, pk194 cannot delete transaction records that are required to be retained under its gaming license.
• Right to Restrict Processing: You may request that pk194 restrict the processing of your personal data in certain circumstances, for example whilst the accuracy of the data is being verified.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for personalisation purposes. You may also withdraw marketing consent at any time through Account Settings.
• Right to Lodge a Complaint: If you are dissatisfied with how pk194 has handled your personal data, you have the right to lodge a complaint with the relevant supervisory authority in the jurisdiction of our gaming license.

All data rights requests will be acknowledged within 72 hours and resolved within 30 calendar days. Complex requests may take up to an additional 60 days; you will be informed if this is the case.

11 Children & Minors

The pk194 platform is strictly intended for adults aged 21 years and above. pk194 does not knowingly collect, store, or process personal data from any individual under the age of 21. Age verification is a mandatory step in the registration and KYC process.

If pk194 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, any deposited funds will be returned to the originating payment method, and all associated personal data will be deleted as promptly as technically and legally possible.

If you are a parent or guardian and believe that your child has registered on the pk194 platform, please contact [email protected] immediately. We take underage access extremely seriously and will act on all credible reports without delay.

12 International Data Transfers

As an internationally licensed gaming operator, pk194 may process and store personal data on servers located outside Pakistan. Where data is transferred internationally, pk194 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that described in this policy.

Safeguards for international transfers include contractual data protection clauses incorporated into agreements with all overseas service providers, the use of cloud infrastructure providers that maintain internationally recognised security certifications, and ongoing monitoring of the data protection standards applied by all third-party processors.

By using the pk194 platform, you acknowledge and consent to the transfer of your personal data to countries outside Pakistan where necessary for the purposes described in this policy.

13 Third-Party Services & Links

The pk194 platform may reference or integrate with third-party services, including game content providers, payment processors, and analytics platforms. Each of these third parties operates under their own privacy policies, and pk194 is not responsible for the privacy practices of any third party.

Where pk194 engages a third-party processor, they are required under contract to process personal data only on the documented instructions of pk194, to implement appropriate security measures, and not to engage sub-processors without prior written authorisation from pk194.

Players are encouraged to review the privacy policies of any third-party service with which they interact independently of the pk194 platform.

14 Updates to This Policy

pk194 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, updates to our gaming license requirements, or changes in applicable law. The effective date shown at the top of this policy will be updated whenever a material revision is made.

For material changes — those that significantly affect how your personal data is used or your rights in relation to it — pk194 will notify registered players via email at least fourteen (14) days before the revised policy takes effect. For minor or administrative changes, the updated policy will be published on this page without individual notification.

Your continued use of the pk194 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not accept the revised policy, you should stop using the platform and request account closure by contacting [email protected].

Previous versions of this Privacy Policy are available upon written request submitted to [email protected].

15 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the personal data pk194 holds about you, please contact our Data Protection team through the following channels:

• Email: [email protected] — Subject line: "Privacy / Data Rights Request"
• Live Chat: 24/7 support available directly on the pk194 platform
• Response Time: All privacy-related requests are acknowledged within 72 hours and resolved within 30 calendar days

Our support team is based with full awareness of the Pakistani market and player context. Whether you are reaching out from Karachi, Lahore, Faisalabad, or Islamabad, your query will be handled in clear, plain English by a team member familiar with local payment methods, banking practices, and user expectations.