Privacy Policy

pk2car ("we", "us", "our", "the Platform") is committed to protecting the privacy of all individuals who access or use its online betting and live casino information services. This Privacy Policy ("Policy") describes in detail how pk2car collects, uses, discloses, stores and protects personal data relating to users ("you", "your") and sets out the rights available to you in relation to your personal data.

This Policy applies to all data processing activities carried out by pk2car in connection with your use of the Platform, including account registration, betting and gaming activity, payment transactions, customer support interactions and any other engagement with pk2car's services or communications.

By accessing or using pk2car, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.

This Policy should be read in conjunction with pk2car's Terms & Conditions and our Responsible Gambling Policy.

For the purposes of this Policy, the following terms carry the meanings given below:

The Data Controller responsible for the personal data collected through pk2car is the operating entity behind the pk2car Platform. For all data-related inquiries, requests or complaints, users should contact pk2car using the details provided in Section 15 of this Policy.

Where pk2car engages third-party Data Processors (such as payment verification services, KYC providers or analytics platforms), those processors act under written contracts that prohibit them from using your data for any purpose beyond the services they provide to pk2car.

pk2car collects personal data from you in the following categories, depending on how you use the Platform:

pk2car does not intentionally collect sensitive personal data (e.g., biometric data beyond liveness checks required for KYC, health data, racial or ethnic origin) unless this is strictly required by the KYC process or applicable legal obligations.

pk2car processes personal data on one or more of the following legal bases, depending on the specific processing activity and applicable data protection law in the Operator's license jurisdiction:

• Contractual necessity: Processing required to perform the contract between you and pk2car — including account management, transaction processing and service delivery.
• Legal obligation: Processing required to comply with anti-money-laundering (AML) regulations, KYC obligations, tax reporting requirements, or orders from competent authorities.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gambling monitoring and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes such as marketing communications, personalised promotions and non-essential analytics — where you have provided explicit, informed consent and may withdraw it at any time.

pk2car uses the personal data it collects for the following specific purposes:

• Account management: Creating, maintaining and securing your pk2car account, including authentication and password recovery.
• Identity verification: Conducting KYC checks as required by the Operator's AML and responsible gambling obligations. This may involve sharing your data with authorised third-party KYC service providers.
• Payment processing: Facilitating deposits and withdrawals via available payment methods. Payment references familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are referenced as contextual labels only and their mention does not imply data sharing with these providers unless you actively use them to transact.
• Fraud prevention and security: Monitoring account activity, detecting suspicious behaviour, preventing multi-accounting and protecting against cyber threats.
• Responsible gambling compliance: Monitoring betting and gaming behaviour to identify signs of potential problem gambling and enforcing deposit, loss and time limits where set by the user or required by the Operator.
• Legal and regulatory compliance: Retaining records as required by applicable law, responding to lawful requests from competent authorities, and reporting suspicious transactions under AML obligations.
• Service improvement and analytics: Analysing aggregated, anonymised usage data to improve Platform performance, user experience and content relevance for our Pakistani user base.
• Marketing communications: Sending promotional offers, bonus notifications and platform updates — only to users who have opted in and only via the channels they have selected. You may opt out at any time.

pk2car does not sell your personal data to third parties. We may share your data with the following categories of recipients only where strictly necessary and on the basis described:

• KYC and identity verification providers: Specialist third-party services that verify submitted identity documents and perform liveness checks. These providers act as Data Processors under contractual agreements.
• Payment processing partners: Payment service providers that process deposit and withdrawal transactions. These providers receive only the financial and identity data required to complete the transaction.
• Cloud hosting and infrastructure providers: Third-party services that host the Platform's servers and databases. All such providers are bound by data processing agreements.
• Regulatory and law enforcement authorities: Where pk2car is legally required to disclose personal data to a competent regulatory, law enforcement or tax authority, it will do so in compliance with applicable law. pk2car will, where legally permitted, notify affected users of such disclosures.
• Responsible gambling organisations: Where a user has been enrolled in a self-exclusion programme, limited data sharing with recognised exclusion registries may be required to enforce the exclusion.
• Corporate transactions: In the event of a merger, acquisition, restructuring or sale of all or part of pk2car's business, personal data may be transferred as part of that transaction, subject to equivalent privacy protections.

pk2car operates internationally and your personal data may be transferred to, and processed in, countries outside Pakistan and outside the jurisdiction in which you reside. These jurisdictions may have data protection laws that differ from those applicable in Pakistan.

Where personal data is transferred internationally, pk2car takes steps to ensure that adequate protections are in place, including:

• Executing data processing agreements with all third-party processors that include standard contractual clauses or equivalent safeguards.
• Using reputable cloud and hosting providers with internationally recognised security certifications.
• Applying encryption to data in transit and at rest regardless of the jurisdiction in which it is stored.

By using pk2car, you acknowledge that your personal data may be processed outside Pakistan and you consent to such transfers as described in this Policy.

pk2car retains personal data for as long as necessary to fulfil the purposes described in this Policy, or for longer periods where required by legal, regulatory or contractual obligations. The following general retention principles apply:

• Active accounts: Personal data is retained for the duration of your account's existence on pk2car.
• Closed accounts: Following account closure, transaction records and KYC documentation are typically retained for a minimum of 5 years to comply with AML and financial record-keeping obligations. This period may be longer depending on the Operator's license jurisdiction requirements.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications. Opt-out records are maintained indefinitely to prevent re-enrolment without re-consent.
• Support correspondence: Retained for up to 3 years after the relevant interaction is resolved, unless part of a legal or compliance investigation.
• Technical / log data: Typically retained for 12 months before anonymisation or deletion.

Upon expiry of applicable retention periods, pk2car will securely delete or anonymise personal data such that it can no longer be associated with any identifiable individual.

pk2car uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies may be used:

You can control cookie settings through your browser's privacy settings. Disabling certain cookies may affect the functionality of the Platform. pk2car does not use cookies to collect sensitive personal data such as financial credentials or KYC documents.

pk2car implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration or destruction. These include:

• Transport security: All data transmitted between your device and pk2car's servers is protected by 256-bit TLS/SSL encryption.
• Data at rest: Sensitive data (including KYC documents and financial records) is encrypted at rest using industry-standard algorithms.
• Access controls: Internal access to personal data is restricted to authorised personnel on a strict need-to-know basis, with role-based access management.
• Two-factor authentication (2FA): Available for all user accounts and required for internal staff accessing sensitive data systems.
• Regular audits: pk2car conducts periodic security reviews, vulnerability assessments and penetration testing of its infrastructure.
• Incident response: In the event of a data breach, pk2car will take immediate remedial action and notify affected users and relevant supervisory authorities as required by applicable law.

Subject to applicable data protection law in the Operator's license jurisdiction, you have the following rights in relation to your personal data held by pk2car. These rights may be subject to limitations where legal retention obligations apply.

1. Right of Access: You may request a copy of all personal data that pk2car holds about you, along with information about how it is processed.
2. Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
3. Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent (and no other legal basis applies). This right does not override legal retention obligations.
4. Right to Restriction of Processing: You may request that pk2car restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being verified.
5. Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request that your data be provided to you in a structured, machine-readable format.
6. Right to Object: You may object to processing based on legitimate interests or to direct marketing. Where you object to marketing, pk2car will cease that processing immediately.
7. Rights Related to Automated Decision-Making: If pk2car makes any automated decisions about you that produce significant legal or similarly significant effects, you have the right to request human review of that decision.

pk2car is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18, or the higher minimum age required by the Operator's license jurisdiction. Age verification is conducted as part of the account registration and KYC process.

If pk2car becomes aware that personal data has been collected from a minor, the relevant account will be suspended immediately, the data will be securely deleted, and any funds associated with the account will be dealt with in accordance with the Operator's terms and applicable law.

Parents or legal guardians who believe a minor may have registered on pk2car should contact [email protected] immediately (plain text — not a link).

pk2car reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices or the services we provide. Where material changes are made, we will notify registered users by email or by displaying a prominent notice on the Platform prior to the changes taking effect.

Your continued use of pk2car after the effective date of any revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically. The effective date at the top of this document indicates when the current version came into force.

For all privacy-related inquiries, data subject requests, complaints or questions about this Policy, please contact pk2car using the details below. The email address is provided as plain text only and is not a clickable link.

If you are dissatisfied with pk2car's response to a data subject request or privacy complaint, you may have the right to lodge a complaint with the relevant supervisory authority in the Operator's license jurisdiction. Details of the applicable supervisory authority are available on the Operator's official website.