Privacy Policy

01Introduction

This Privacy Policy ("Policy") describes how pk488 ("we", "us", "our" or the "Platform") collects, uses, stores, discloses and otherwise processes personal data relating to individuals ("you", "your" or "User") who access or use the pk488 website at pk488.cam and any associated Services.

pk488 is an English-language online gaming information platform designed for Pakistani users. We publish educational content on sports betting markets, live casino game categories, bonus term analysis and responsible gambling guidance. We are an informational platform and not a gambling operator. We do not accept deposits or place bets on your behalf.

This Policy applies to all personal data we process in connection with your use of the Platform, regardless of the device or method of access. It should be read alongside our Terms & Conditions, which govern your overall use of the Platform.

We are committed to processing your personal data in a lawful, fair and transparent manner consistent with applicable data protection principles. Where you are based in Pakistan, we also acknowledge the applicability of relevant local privacy and data protection norms, while noting that a comprehensive dedicated data protection statute is still developing in Pakistan. We apply internationally recognised data protection standards as our baseline.

02Definitions

The following terms carry the meanings set out below throughout this Policy:

"Personal Data"

Any information relating to an identified or identifiable natural person, including but not limited to name, email address, IP address, device identifiers, location data and financial account references.

"Processing"

Any operation or set of operations performed on Personal Data, whether or not by automated means — including collection, recording, storage, use, disclosure, erasure or destruction.

"Data Controller"

The entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, pk488 is the Data Controller in respect of Personal Data collected through the Platform.

"Data Processor"

A third party that processes Personal Data on behalf of the Data Controller under a written contractual arrangement that imposes equivalent data protection obligations.

"Cookies"

Small text files placed on your device by a website to store information about your session, preferences or browsing behaviour. See Clause 10 for a full breakdown of cookies used by the Platform.

"KYC"

Know Your Customer — the identity and age verification process conducted to confirm a User's eligibility before certain account features or limits are activated.

"Applicable Law"

All statutes, regulations, orders and legal instruments applicable to the User or to pk488 in their respective jurisdictions, including privacy and data protection legislation.

"Services"

The information, guides, comparison tools, responsible gambling resources and all other content and functionality made available through the Platform.

03Data Controller

pk488 acts as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, we are responsible for ensuring that our data processing activities comply with applicable data protection obligations and that your rights as a data subject are respected.

Where we engage third-party Data Processors to assist in delivering our Services — such as hosting providers, analytics platforms or payment reference display systems — we ensure that appropriate data processing agreements are in place. Those processors are permitted to use your data only in accordance with our documented instructions and not for their own independent purposes.

04Data We Collect

We collect Personal Data through several routes, depending on how you interact with the Platform. The categories of data we collect are described below:

4.1 Data You Provide Directly

• Registration data: When you create an account, we collect your full name, date of birth, email address, chosen username and password (stored in hashed form).
• KYC verification documents: To verify your identity and age, we may collect copies of government-issued identification (such as a CNIC or passport) and proof of address (such as a utility bill or bank statement not older than 90 days).
• Support communications: When you contact our support team, we record the content of your messages, the email address used and any attachments submitted.
• Survey and feedback responses: Where you voluntarily participate in user surveys or provide feedback, we collect the information you supply in those responses.

4.2 Data Collected Automatically

• Device and browser data: IP address, browser type and version, operating system, device type, screen resolution and preferred language.
• Usage data: Pages visited, time spent on each page, navigation paths, search queries entered within the Platform, content interacted with and links clicked.
• Session data: Login timestamps, session duration and logout events.
• Cookie and tracking data: As described in detail in Clause 10 below.

4.3 Data from Third Parties

• Fraud and verification services: We may receive data from identity verification and fraud detection service providers to supplement KYC checks.
• Analytics partners: Aggregated, anonymised analytics data from third-party analytics platforms to help us understand how users engage with the Platform.

05How We Use Your Data

We use the Personal Data we collect for the following purposes:

We do not use your Personal Data for automated decision-making that produces legal or similarly significant effects without human review, except where this is expressly permitted by Applicable Law or where you have given your explicit consent.

06Legal Basis for Processing

Every processing activity we carry out is grounded in at least one of the following legal bases, consistent with internationally recognised data protection principles:

• Contract performance: Processing is necessary to fulfil our contractual obligations to you under the Terms & Conditions — for example, creating and managing your account, processing your requests and providing customer support.
• Legal obligation: Processing is required to comply with applicable legal requirements — including KYC and anti-money laundering obligations, regulatory reporting and compliance with court orders or law enforcement requests.
• Legitimate interests: Processing is necessary for our legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. Our legitimate interests include improving the Platform, preventing fraud, ensuring platform security and conducting analytics.
• Consent: Where no other legal basis applies, we rely on your freely given, specific and informed consent. You may withdraw consent at any time by contacting us or using the opt-out mechanisms described in this Policy, without affecting the lawfulness of processing prior to withdrawal.

07Data Sharing & Disclosure

pk488 does not sell, rent or trade your Personal Data to unaffiliated third parties for their own marketing or commercial purposes. We may share your data only in the circumstances described below:

• Service providers and Data Processors: We share data with trusted third-party providers who assist us in operating the Platform, including cloud hosting providers, analytics services, identity verification partners and customer support tools. All such providers operate under data processing agreements that impose data protection obligations consistent with this Policy.
• Legal and regulatory authorities: We may disclose Personal Data to government agencies, regulators, law enforcement authorities or courts where required by Applicable Law or a valid legal order. Where permitted, we will notify you of such disclosure.
• Fraud prevention and security: We may share data with fraud detection agencies, security researchers or other platforms where we have reasonable grounds to suspect fraudulent or criminal activity, to protect our Users and the integrity of the Platform.
• Business transfers: In the event of a merger, acquisition, restructuring or sale of assets involving pk488, Personal Data may be transferred to the relevant successor entity, provided that the successor commits to maintaining equivalent data protection standards. We will notify affected Users of any such transfer where reasonably practicable.
• With your consent: We may share your data with third parties in any other circumstances where you have given your explicit prior consent to that specific disclosure.

08International Data Transfers

The Platform is accessible from Pakistan and other countries. Our infrastructure and some of our third-party service providers may be located in jurisdictions outside Pakistan. When we transfer Personal Data internationally, we apply appropriate safeguards to ensure that your data receives a level of protection consistent with this Policy and recognised data protection standards.

These safeguards may include:

• Standard contractual clauses or equivalent data transfer mechanisms agreed with our Data Processors.
• Transfers only to jurisdictions that maintain adequate data protection frameworks as recognised by relevant authorities.
• Binding internal policies governing the treatment of Personal Data across group entities where applicable.

By using the Platform, you acknowledge that your data may be transferred to, stored in and processed in jurisdictions outside Pakistan. We will always take reasonable steps to ensure that any such transfer is handled securely and in accordance with this Policy.

09Data Retention

We retain Personal Data for no longer than is necessary to fulfil the purposes for which it was collected or as required by Applicable Law. The following general retention principles apply:

Following the expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in a manner that prevents re-identification. Where data must be retained beyond these periods due to ongoing legal proceedings or regulatory requirements, we will document the legal basis for extended retention.

10Cookies & Tracking Technologies

pk488 uses cookies and similar tracking technologies (including local storage and session storage) to operate the Platform, understand how it is used and improve the user experience. Below is a breakdown of the cookie categories we use:

You can manage or withdraw your consent to non-essential cookies at any time through your browser settings or any cookie preference interface available on the Platform. Disabling certain cookies may affect Platform functionality. For detailed guidance on managing cookies, refer to your browser's help documentation.

11Data Security

pk488 implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure. Our security measures include:

• Encryption in transit: All communications between your device and our servers are encrypted using TLS (Transport Layer Security) to prevent interception.
• Encryption at rest: Sensitive data stored on our systems — including passwords (hashed using a one-way algorithm) and KYC documents — is encrypted using AES-256 or equivalent standards.
• Access controls: Personal Data is accessible only to authorised personnel who require it for legitimate operational purposes. All access is logged and subject to review.
• Regular security reviews: We conduct periodic assessments of our infrastructure, code and third-party integrations to identify and remediate vulnerabilities.
• Incident response: We maintain a data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected Users and relevant authorities as required by Applicable Law and within the timeframes it prescribes.

While we apply robust security measures, no system is completely immune to risk. We encourage Users to maintain strong, unique passwords for their accounts, enable any available two-factor authentication, and notify us immediately at the contact address in Clause 16 if they suspect any unauthorised access to their account.

12Your Data Rights

Subject to Applicable Law and certain limited exceptions, you have the following rights in relation to your Personal Data held by pk488:

• Right of access: You may request a copy of the Personal Data we hold about you and information about how we process it.
• Right to rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to erasure ("right to be forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing is unlawful. This right is subject to legal retention obligations that may require us to retain certain data.
• Right to restriction of processing: You may request that we limit our processing of your Personal Data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to data portability: Where processing is based on consent or contract performance and carried out by automated means, you may request that we provide your data in a structured, commonly used and machine-readable format for transfer to another controller.
• Right to object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Rights related to automated decision-making: You have the right not to be subject to a decision based solely on automated processing — including profiling — that produces legal or similarly significant effects, unless this is necessary for a contract, authorised by law, or based on your explicit consent.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us using the details in Clause 16. We will respond to your request within 30 days of receipt. Where requests are complex or numerous, we may extend this period by a further 60 days, and we will inform you of any such extension within the initial 30-day window.

13Minors & Age Restrictions

The pk488 Platform is intended for adults only. Access to and use of the Services is strictly limited to individuals who are at least 18 years of age, or the higher minimum age required by the relevant gambling operator or licence jurisdiction.

We do not knowingly collect Personal Data from persons under the minimum age. If we become aware that a minor has provided us with Personal Data, we will take immediate steps to delete that data, close the associated account and, where applicable, report the matter to the relevant authority. If you believe a minor has accessed the Platform and provided Personal Data, please contact us immediately using the details in Clause 16.

We strongly encourage parents and guardians in Pakistan and across all cities — including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — to use parental control software and to monitor their children's online activity. Please visit our Responsible Gambling page for guidance on age verification and child protection tools.

14Third-Party Links & Platforms

The Platform may contain references to, or contextual descriptions of, third-party gambling operators, game providers, sports leagues (including Pakistan cricket, PSL, ICC tournaments and other sporting events) and payment services. While we take care in the information we publish, pk488 has no control over the privacy practices of any third-party websites or platforms.

This Policy applies solely to Personal Data collected by pk488 through the Platform. If you follow a link or reference to a third-party website, we strongly recommend that you review that website's own privacy policy before providing any personal information. We are not responsible for the content, privacy practices or data handling of any third-party platform.

15Policy Amendments

pk488 reserves the right to amend this Privacy Policy at any time. Where changes are material — for example, a change in how we use your data, a new category of data being collected, or a change in our legal basis for processing — we will provide reasonable notice by publishing the updated Policy on the Platform with a revised effective date, and where appropriate, by direct notification.

Non-material changes (such as corrections of typographical errors or minor clarifications that do not affect your rights) take effect upon publication. Your continued use of the Platform following publication of any revised Policy constitutes acceptance of the revised terms. If you do not agree with the changes, you should cease using the Platform and, if applicable, request Account closure.

We recommend that you revisit this page periodically to remain informed about how pk488 processes your Personal Data.

16Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a complaint about how we have handled your Personal Data, please contact our Data Protection team using the details below:

We will investigate all complaints promptly and respond within the timeframes set out in Clause 12. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

Users across Pakistan — whether in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar or elsewhere — are welcome to contact us in English with any privacy concern. We are committed to addressing every enquiry with care and transparency.