pk2win Privacy Policy —
Your Data. Your Rights.
Our Responsibility.

This Privacy Policy ("Policy") is issued by pk2win ("the Platform", "we", "us", "our") and applies to all individuals who visit, register on, or use any services provided through pk2win.site ("the Website"). It sets out the types of personal data we collect, our purposes for collecting and using that data, the circumstances under which data may be shared, and the rights available to you as a data subject.

pk2win is committed to handling your personal information transparently, securely, and in accordance with applicable international data protection principles and the regulatory requirements governing our platform's licensed operations. This Policy should be read alongside pk2win's Terms & Conditions and any game-specific or promotion-specific terms that may apply to your account.

By registering an account on pk2win, making any deposit, placing any wager, or accessing any part of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, and use of your personal data as described herein.

For the purposes of this Privacy Policy, pk2win acts as the Data Controller in respect of personal data collected through the Platform. As Data Controller, pk2win determines the purposes for which and the means by which your personal data is processed. pk2win operates under international gaming license oversight and is subject to the data protection obligations prescribed under the regulatory framework applicable to its licensed jurisdiction.

Where pk2win engages third-party service providers to assist in the operation of the Platform — including payment processors, KYC verification services, game software providers, and customer support tools — such third parties act as Data Processors and are contractually bound to process your data only in accordance with pk2win's instructions and applicable data protection obligations.

pk2win collects only the personal data necessary to provide our gaming and betting services, maintain account security, comply with legal and regulatory obligations, and improve the quality of your experience on the Platform. The categories of personal data we collect are set out in the table below:

pk2win collects personal data through the following channels and mechanisms:

• Direct provision by you: Information you submit during account registration, KYC document upload, cashier transactions, live chat conversations, and any other direct communications with the Platform.
• Automated technical collection: Technical data collected automatically when you access the Platform, including IP addresses, browser information, device identifiers, and session behaviour — collected via server logs and browser-based technologies including cookies.
• Third-party verification services: Identity and age verification data may be cross-referenced with third-party KYC service providers who validate CNIC authenticity and perform sanctions screening.
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT processing gateways when you make deposits or receive withdrawals.
• Game providers: Aggregated game session and outcome data received from certified game software providers including WM Live and slot/fishing game studios integrated into the pk2win Platform.

pk2win processes your personal data for the following specific purposes:

5.1 — Account Management & Service Provision

To register and maintain your pk2win account; verify your identity and age (21+ requirement); process deposits, withdrawals, and bonus credits; deliver the gaming and sports betting services you have requested; communicate account status updates, transaction confirmations, and relevant platform notifications.

5.2 — Regulatory Compliance & KYC

To fulfil our obligations under applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and international gaming regulatory frameworks. This includes identity verification, sanctions and PEP (Politically Exposed Person) screening, transaction monitoring for suspicious activity, and maintenance of records required by regulatory authorities.

5.3 — Security & Fraud Prevention

To protect the Platform, its players, and the integrity of games and betting markets against fraud, unauthorised access, account takeover attempts, collusion, bonus abuse, money laundering, and other prohibited activities. Technical data and betting pattern analysis are used for this purpose.

5.4 — Responsible Gaming

To monitor account activity for indicators of problem gambling, apply responsible gaming measures activated by the player (deposit limits, session reminders, self-exclusion), and maintain self-exclusion records to prevent excluded individuals from accessing the Platform.

5.5 — Customer Support

To respond to support inquiries via live chat and email, investigate and resolve disputes, process formal complaints, and maintain records of communications for quality assurance and training purposes.

5.6 — Platform Improvement

To analyse aggregated and anonymised usage data for the purpose of improving Platform performance, game availability, user interface design, and the overall player experience. No individually identifiable data is used for platform analytics where anonymised data suffices.

5.7 — Marketing Communications (With Consent)

Where you have explicitly opted in to receive promotional communications, pk2win may use your contact information to inform you of relevant bonuses, promotions, new game releases, and special offers applicable to your account. You may opt out of marketing communications at any time by contacting support or adjusting your communication preferences in your account settings.

pk2win processes your personal data on the following legal bases, depending on the specific purpose:

• Contract Performance: Processing necessary for the performance of the player agreement between you and pk2win — including account management, transaction processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and gaming license conditions.
• Legitimate Interests: Processing necessary for pk2win's legitimate business interests in fraud prevention, platform security, responsible gaming enforcement, and service improvement — where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific consent — including marketing communications and the use of non-essential cookies. You may withdraw consent at any time without detriment to your account status.

pk2win does not sell your personal data. We do not share your personal data with third parties for their own marketing or commercial purposes. We disclose personal data to third parties only in the following limited and controlled circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT TRC20 processing partners receive the minimum data necessary to process your deposit and withdrawal transactions.
• KYC Verification Services: Third-party identity verification providers receive CNIC data and related documents solely for the purpose of verifying your identity and age in compliance with regulatory requirements.
• Game Software Providers: Certified game studios and live dealer operators (such as WM Live) receive session data necessary for game operation and outcome certification.
• Regulatory Authorities: pk2win will disclose personal data to its licensing regulatory authority and to law enforcement or government agencies when required to do so by applicable law, court order, or regulatory directive — without prior notice to you where legally required.
• Legal & Professional Advisors: Data may be shared with legal counsel, auditors, or compliance consultants under strict confidentiality obligations where necessary for the conduct of pk2win's business operations.
• Business Succession: In the event of a merger, acquisition, or sale of all or a substantial part of pk2win's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections and prior notification where practicable.

pk2win uses cookies and similar browser-based tracking technologies to enable essential platform functionality, maintain your login session, and — where you have provided consent — collect analytical data about how the Platform is used.

8.1 — Essential Cookies

These cookies are strictly necessary for the Platform to function correctly. They enable your login session to persist across page loads, maintain your PKR balance display, preserve your game state, and ensure that security measures including CSRF protection operate correctly. Essential cookies cannot be disabled without preventing core Platform functions from working.

8.2 — Analytics Cookies (With Consent)

Where you have provided consent, pk2win may use analytics tools to collect aggregated data about page visits, navigation paths, session durations, and feature usage. This data is used solely to improve the Platform. Analytics data is anonymised and not linked to individual player accounts.

8.3 — Cookie Management

You can manage your cookie preferences through your browser settings. Blocking all cookies will affect Platform functionality, particularly session management and game continuity. Most modern browsers (Chrome, Firefox, Safari) provide granular controls over which types of cookies are accepted.

pk2win retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active account registration on pk2win, plus a minimum of five (5) years following permanent account closure, in accordance with AML regulatory retention requirements.
• KYC & Identity Verification Data: Retained for a minimum of five (5) years from the date of KYC approval or account closure, whichever is later — as required by applicable anti-money laundering legislation.
• Transaction Records: All financial transaction records including deposits, withdrawals, and bet history are retained for a minimum of seven (7) years for regulatory audit compliance purposes.
• Support Communications: Live chat transcripts and email correspondence are retained for a minimum of three (3) years from the date of the communication, for dispute resolution and quality assurance purposes.
• Technical & Log Data: Server logs and access logs are retained for ninety (90) days and then deleted, except where specific log data is required as evidence in an ongoing security investigation or legal proceeding.
• Self-Exclusion Records: Records of self-exclusion registrations are retained permanently or for the duration specified in the self-exclusion order, to prevent reinstatement contrary to the terms of the exclusion.

pk2win implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures are reviewed and updated regularly in line with evolving security best practices and threat landscapes.

Despite these measures, no Internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, pk2win will notify affected players as soon as is practicable following the discovery and assessment of the breach, in accordance with applicable notification obligations.

Subject to applicable law and regulatory constraints, you have the following rights in respect of your personal data held by pk2win. To exercise any of these rights, contact pk2win's support team via live chat or email:

• Right of Access: You have the right to request a copy of the personal data pk2win holds about you, along with information about how that data is being processed. We will respond to verified access requests within 30 days.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held on your account. Account name changes require supporting documentation consistent with your CNIC.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to pk2win's legal obligations to retain certain categories of data (particularly AML and KYC records) for the minimum statutory retention periods.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while a disputed accuracy claim is being investigated.
• Right to Data Portability: Where processing is based on your consent or contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of pk2win's legitimate interests, unless pk2win can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Parents and guardians who believe that a minor may have accessed or registered on pk2win should contact our support team immediately. pk2win will take expedited action to investigate and resolve such reports. We strongly recommend implementing parental control software on shared household devices to prevent underage access to gaming platforms.

As an internationally operated platform, pk2win may transfer your personal data to countries outside Pakistan in connection with the provision of our services. Such transfers may occur where our servers, payment processors, game providers, or KYC verification services are located in jurisdictions other than Pakistan.

Where personal data is transferred internationally, pk2win implements appropriate safeguards to ensure that your data receives a level of protection substantially equivalent to that which it receives under the data protection principles governing our licensed operations. These safeguards include contractual data processing agreements with all third-party service providers, incorporating appropriate data protection clauses and obligations.

The pk2win Platform integrates services from third-party providers including game software studios, live dealer platforms (such as WM Live), and payment processing services. These third parties operate under their own privacy policies, which govern their processing of any data they receive in connection with the services they provide to pk2win. pk2win is not responsible for the privacy practices of third-party service providers beyond the contractual data processing obligations imposed upon them.

The pk2win website does not contain links to external third-party websites. Any website that claims to be affiliated with pk2win but is not accessible through pk2win.site should be treated with caution — please verify you are on the genuine pk2win platform before providing any personal information.

pk2win may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, our data processing activities, or improvements to our privacy practices. The current version of this Policy, including the effective date, will always be available on this page at pk2win.site/privacy-policy.

Material changes to this Policy — particularly those that affect your rights or the way in which pk2win uses your personal data — will be communicated to registered account holders via a notice on the Platform prior to the change taking effect. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with any material changes, you may request account closure prior to the effective date.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about how pk2win handles your personal information, please contact us through the following channels:

If you are unsatisfied with pk2win's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction applicable to your situation, or to the gaming regulatory authority overseeing pk2win's licensed operations.