pk12 Privacy Policy

1 Overview

This Privacy Policy governs the collection, processing, storage, and disclosure of personal data by pk12 ("we", "us", "our") in connection with your use of the pk12 platform accessible at pk12.bet, including all associated web pages, features, tools, account services, sports betting markets, casino games, and payment processing functions.

pk12 is committed to handling your personal information with transparency and in accordance with internationally recognised data protection standards. Our practices are aligned with the principles of the General Data Protection Regulation (GDPR) and equivalent data protection frameworks applicable to online gaming operators holding international gaming licences.

By registering an account on pk12 or by continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the pk12 platform immediately.

2 Data Controller

The data controller responsible for your personal information is the pk12 operating entity, which holds an international gaming licence and operates the pk12.bet domain. As data controller, pk12 determines the purposes for which and the means by which your personal data is processed.

Where pk12 engages third-party service providers — such as payment processors, identity verification providers, or game software suppliers — to process personal data on its behalf, those parties act as data processors under binding contractual agreements that impose equivalent data protection obligations. pk12 remains the data controller in such arrangements and retains responsibility for the lawful processing of your personal information.

For all data protection enquiries, including requests to exercise your data subject rights, please contact pk12's designated data protection contact as described in Section 14 of this Policy.

3 Data We Collect

pk12 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and from trusted third parties where necessary for verification or fraud prevention. The categories of personal data we collect include:

pk12 does not intentionally collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless specifically required by our responsible gaming obligations — for example, where you voluntarily disclose a gambling-related health concern to our support team.

4 How We Use Your Data

pk12 uses your personal data for the following defined purposes only:

• Account creation and management — to register your pk12 account, verify your identity, and maintain your account in good standing throughout your relationship with the platform.
• Service delivery — to provide access to casino games, live dealer tables, slot titles, sports betting markets (including PSL, cricket internationals, football, and UFC), and all other pk12 platform features.
• Payment processing — to facilitate deposits and withdrawals in PKR via JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, Visa, and Mastercard, and to maintain an accurate transaction record for your account.
• Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance — to verify your identity, assess transaction risk, and meet our obligations under the requirements of pk12's international gaming licence.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, multiple account registrations, bonus abuse, and other prohibited conduct as described in the pk12 Terms and Conditions.
• Responsible gaming — to monitor gaming patterns that may indicate problem gambling behaviour, to apply deposit limits and self-exclusion restrictions you have requested, and to contact you proactively if our systems identify concerning account activity.
• Customer support — to respond to your enquiries, resolve disputes, and improve the quality of our 24/7 support service.
• Marketing communications — to send you promotional offers, bonus notifications, and platform updates, but only where you have provided explicit opt-in consent to receive such communications. You may withdraw this consent at any time through your account settings.
• Platform improvement — to analyse aggregated, anonymised usage data for the purpose of improving the pk12 platform's features, performance, and user experience.
• Legal compliance — to comply with applicable laws, regulatory requirements, court orders, and directives from competent authorities in the jurisdictions in which pk12 operates.

5 Legal Basis for Processing

pk12 processes your personal data under one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual necessity — processing required to perform the contract between you and pk12 (i.e., the Terms and Conditions governing your use of the platform), including account management, service delivery, and payment processing.
• Legal obligation — processing required to comply with applicable laws and regulatory requirements, including KYC, AML, and responsible gaming obligations arising from pk12's international gaming licence.
• Legitimate interests — processing carried out in pursuit of pk12's legitimate business interests, including fraud prevention, platform security, and internal analytics, where those interests are not overridden by your data protection rights.
• Consent — processing carried out on the basis of your freely given, specific, informed, and unambiguous consent, most notably in relation to optional marketing communications. You have the right to withdraw consent at any time without detriment.

6 Sharing Your Data

pk12 does not sell or share your personal data with third parties for their own independent commercial purposes. We may share your data with the following categories of recipients strictly as required for the lawful operation of the pk12 platform:

• Payment service providers — JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, Visa, and Mastercard, to process your PKR deposits and withdrawals. These providers receive only the financial and identity data necessary to complete the transaction.
• Identity verification providers — licensed KYC and AML service providers that assist pk12 in verifying your identity using your Pakistani CNIC, passport, or other supporting documentation.
• Game software providers — licensed third-party casino game and sportsbook software suppliers who may receive anonymised session data necessary for game delivery and integrity monitoring.
• Fraud prevention and risk management services — specialist providers that assist pk12 in detecting and preventing fraudulent account activity, bonus abuse, and money laundering.
• Regulatory and law enforcement authorities — government bodies, regulators, courts, and law enforcement agencies in jurisdictions where pk12 operates, where disclosure is required by law or by valid legal process.
• Professional advisers — lawyers, auditors, and accountants engaged by pk12 who are subject to confidentiality obligations and who process personal data only as strictly necessary for the provision of their professional services.

All third-party data processors engaged by pk12 are bound by contractual data processing agreements that require them to implement appropriate technical and organisational security measures and to process personal data only in accordance with pk12's instructions.

7 Data Retention

pk12 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account and identity data — retained for the duration of your account relationship with pk12, plus a minimum of 5 years following account closure, as required by AML and gaming licence compliance obligations.
• Transaction and financial data — retained for a minimum of 5 years from the date of the relevant transaction, in accordance with financial recordkeeping requirements.
• Gaming history — retained for the duration of the account relationship and for 5 years thereafter for regulatory and dispute resolution purposes.
• Support and communications records — retained for 3 years from the date of last interaction, unless a longer retention period is required for dispute resolution or legal proceedings.
• Marketing consent records — retained until you withdraw consent or for 3 years of inactivity, whichever occurs first.
• Technical and log data — typically retained for 12 months for security monitoring and platform maintenance purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with pk12's data lifecycle management procedures. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

8 Security Measures

pk12 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• SSL/TLS encryption — all data transmitted between your browser and the pk12 platform is encrypted using industry-standard Transport Layer Security protocols.
• Data encryption at rest — sensitive personal and financial data stored on pk12 infrastructure is encrypted using AES-256 or equivalent encryption standards.
• Access controls — access to personal data within pk12's systems is restricted on a strict need-to-know basis, with role-based access controls, multi-factor authentication, and audit logging applied to all administrative access.
• Penetration testing and vulnerability management — pk12's platform infrastructure is subject to regular independent security assessments and vulnerability scanning.
• Incident response — pk12 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, pk12 will notify the relevant supervisory authority and affected individuals in accordance with applicable legal obligations.
• Staff training — all pk12 personnel who handle personal data receive mandatory data protection training and are bound by confidentiality obligations.

9 Cookies & Tracking Technologies

pk12 uses cookies and similar tracking technologies on the pk12.bet platform to ensure the proper functioning of the site, to remember your preferences, to maintain your login session, and to collect analytical data that helps us improve the platform for Pakistani and international players.

The following categories of cookies are used on pk12:

• Strictly necessary cookies — essential for the platform to function correctly, including session management, security tokens, and load balancing. These cookies cannot be disabled without impairing your ability to use pk12.
• Functional cookies — used to remember your preferences such as language settings, display options, and responsible gaming limits you have configured on your account.
• Analytical cookies — used to collect anonymised data on how users interact with the pk12 platform, including page views, session duration, and feature usage. This data is used solely for internal platform improvement and is not shared with advertising networks.
• Security cookies — used to detect and prevent fraudulent activity, including bot detection, multiple account monitoring, and suspicious session behaviour.

pk12 does not use third-party advertising or behavioural targeting cookies. You may configure your browser settings to block or delete cookies, though doing so may affect the functionality of the pk12 platform. Your continued use of pk12 following the display of the cookie consent notice constitutes your acceptance of our cookie practices as described in this section.

10 Your Data Subject Rights

Subject to applicable law and any overriding legal obligations that pk12 must comply with (including AML and gaming licence retention requirements), you hold the following rights with respect to your personal data held by pk12:

• Right of access — you have the right to request a copy of the personal data pk12 holds about you, along with information about how it is being processed.
• Right to rectification — you have the right to request correction of any inaccurate or incomplete personal data held on your pk12 account.
• Right to erasure — in certain circumstances, you have the right to request deletion of your personal data. This right is subject to pk12's legal obligation to retain certain data for AML, KYC, and gaming licence compliance purposes, which take precedence over erasure requests where applicable.
• Right to restrict processing — you have the right to request that pk12 restrict the processing of your personal data in specified circumstances, for example while a rectification request is being assessed.
• Right to data portability — where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object — you have the right to object to processing carried out on the basis of pk12's legitimate interests. pk12 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent — where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time through your pk12 account settings without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact pk12's data protection contact using the details provided in Section 14. pk12 will respond to all verified data subject requests within 30 calendar days of receipt. In complex or high-volume cases, this period may be extended by a further 30 days with appropriate notification to you.

11 Minors & Age Policy

pk12 operates a strict 21+ age policy across all account registrations and gaming activities on the platform. pk12 does not knowingly collect personal data from individuals under 21 years of age. Age verification is conducted as part of the mandatory KYC process applied to all new accounts.

If pk12 becomes aware that personal data has been collected from a person under 21 years of age, the relevant account will be immediately closed, all funds will be returned (excluding any winnings generated in breach of the age restriction), and all personal data associated with the underage account will be deleted from pk12's systems within 30 days, subject only to any retention obligations imposed by applicable law.

12 International Data Transfers

As an internationally licensed online gaming operator serving Pakistani players, pk12 may transfer personal data to and process it in jurisdictions outside Pakistan. Such transfers may occur when personal data is processed by pk12's game software providers, payment processors, or identity verification services operating in other countries.

Where personal data is transferred internationally, pk12 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. Safeguards include standard contractual clauses, binding corporate rules where applicable, and data processing agreements with all third-party recipients that impose equivalent data protection obligations.

For further information on the specific safeguards applied to any international data transfer, please contact pk12's data protection contact using the details in Section 14.

13 Policy Amendments

pk12 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes to this Policy will be communicated to registered users via the email address associated with their pk12 account, or via a prominent notice displayed on the pk12 platform, not less than 14 days before the amended Policy takes effect.

The effective date displayed at the top of this document reflects the date of the most recent revision. We recommend that you review this Privacy Policy periodically to stay informed of how pk12 is protecting your personal information. Continued use of the pk12 platform after the effective date of any amendment constitutes your acceptance of the updated Policy.

14 Contact & Data Protection

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have concerns about the way in which pk12 handles your personal data, please contact us through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 on the pk12 platform, staffed on Pakistan Standard Time.
• Response Commitment: pk12 acknowledges all data protection enquiries within 48 hours and provides a substantive response within 30 calendar days.

If you are not satisfied with pk12's response to a data protection concern, you have the right to lodge a complaint with the supervisory authority responsible for data protection in the jurisdiction applicable to pk12's gaming licence. Details of the relevant supervisory authority are available upon written request from pk12 compliance.