pk15 Privacy
Policy

pk15 is an online casino and sports betting platform operating at pk15.pro, serving players across Pakistan. pk15 is operated by a company incorporated and licensed under an international gaming jurisdiction. For the purposes of this Privacy Policy, pk15 is the data controller — meaning we are the entity that determines the purposes and means by which your personal data is processed.

This Privacy Policy applies to all personal data collected through the pk15 website, any associated mobile applications, live chat functions, email communications, and any other channel through which you interact with pk15. It covers all products and services offered on the platform, including cricket betting, live dealer casino, slots, virtual sports, and crash games.

By using the pk15 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how pk15 processes personal data, you should discontinue use of the platform and contact our support team to discuss your options, including account closure and data deletion.

pk15 collects personal data in three ways: data you provide directly to us, data generated automatically through your use of the platform, and data obtained from trusted third-party sources as part of our verification processes. The table below summarises the categories of data we collect and the primary source of each:

pk15 uses personal data only for specific, documented purposes. We do not process data in ways that are incompatible with the reason it was originally collected. The primary purposes for which we process your data are:

• Account Creation & Management: To register your account, verify your identity, maintain your player profile, and provide you with access to all pk15 products and services.
• Payment Processing: To process your deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, and USDT. Your financial data is shared with payment processors only to the extent necessary to complete your transaction.
• KYC & Fraud Prevention: To verify your age and identity in compliance with our international gaming licence obligations, to detect and prevent fraudulent activity, money laundering, and bonus abuse, and to comply with applicable financial crime regulations.
• Platform Operation: To operate and improve the pk15 platform — including resolving technical issues, optimising game performance, and ensuring the integrity of sports betting markets such as PSL cricket and other events popular with Pakistani players.
• Customer Support: To respond to your queries, complaints, and requests submitted via live chat, email, or any other support channel. Support interactions may be recorded for quality assurance and training purposes.
• Responsible Gaming: To monitor gaming patterns and identify indicators of problem gambling. Where our systems detect behaviour consistent with harmful gambling, pk15 may proactively reach out to offer responsible gaming tools. This processing is carried out in your interests and is a condition of our gaming licence.
• Marketing Communications: To send you promotions, bonus offers, and platform updates — but only if you have provided your consent to receive marketing communications. You can withdraw this consent at any time from within your account settings.
• Legal & Regulatory Compliance: To comply with our obligations under our gaming licence, anti-money-laundering regulations, and any lawful requests from regulatory authorities or law enforcement bodies.

pk15 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform our contract with you — i.e., operating your pk15 account, processing payments, and providing gaming services. Without this processing, pk15 cannot provide you with its services.
• Legal Obligation: Processing required to comply with our legal and regulatory obligations, including KYC verification, anti-money-laundering checks, tax reporting, and compliance with gaming licence conditions.
• Legitimate Interests: Processing carried out for pk15's legitimate business interests, provided those interests are not overridden by your rights. This includes fraud prevention, platform security, internal analytics, and improving our products. pk15 has conducted a balancing test for each legitimate interest processing activity and is satisfied that our interests do not override player rights.
• Consent: Processing based on your freely given, specific, and informed consent. This applies primarily to marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

pk15 does not sell your personal data. We share data only where necessary and only with the following categories of recipients, each of whom is bound by appropriate data protection obligations:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, and cryptocurrency payment processors receive transaction data necessary to execute your deposits and withdrawals. They receive only what is required to process the specific transaction.
• Identity Verification Providers: Third-party KYC providers who assist in verifying your identity documents and confirming your age. These providers operate under strict data processing agreements with pk15 and may not use your data for any purpose other than verification.
• Game Content Providers: Third-party software providers who supply casino games and sports data to pk15. These providers may receive anonymised gameplay data for the purposes of game performance monitoring and RTP auditing. They do not receive personally identifiable information.
• Fraud & AML Screening Services: Compliance technology providers who assist pk15 in screening transactions and player behaviour against money laundering and fraud risk databases. This processing is a condition of our gaming licence.
• Regulatory & Law Enforcement Bodies: pk15 will disclose player data to regulatory authorities, licensing bodies, or law enforcement agencies when required to do so by law, by court order, or by the terms of our gaming licence. We will notify you of such disclosures unless we are legally prohibited from doing so.
• Group Companies: Where pk15 is part of a corporate group, data may be shared with affiliated group entities for internal administrative and compliance purposes. All group entities are bound by the same data protection standards as pk15.

pk15 uses cookies and similar tracking technologies on its website to ensure the platform functions correctly, to improve your user experience, and — where you have consented — to personalise the content and promotions you see. A cookie is a small text file stored on your device by your browser.

pk15 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the pk15 website to function. They manage your login session, maintain your basket during a deposit flow, and ensure security features operate correctly. These cookies cannot be disabled as the site cannot function without them.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, your chosen game lobby layout, and whether you have dismissed certain notifications. Disabling these cookies will not break the site but may reduce your experience.
• Analytics Cookies: These cookies collect anonymised data about how players navigate the pk15 platform — which pages are visited most, where players drop off in a registration flow, and how long sessions last. This data helps pk15 improve its products. Analytics cookies are only set with your consent.
• Marketing Cookies: These cookies track your browsing behaviour to allow pk15 to show you relevant promotions within the platform. Marketing cookies are only set with your explicit consent and can be withdrawn at any time.

pk15 does not use cross-site tracking cookies that follow you across unrelated third-party websites. Our analytics and marketing cookies operate exclusively within the pk15.pro domain.

pk15 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with our legal obligations. When data is no longer needed, it is securely deleted or anonymised. The following retention periods apply:

• Account Data: Retained for the duration of your active account plus five years following account closure. This retention period is required by our gaming licence obligations and applicable financial regulations.
• KYC & Identity Documents: Retained for five years from the date of verification or the date of account closure, whichever is later. This is required by anti-money-laundering regulations applicable under our international gaming licence.
• Transaction Records: Retained for seven years from the date of each transaction. Financial records must be retained for this period for regulatory and audit purposes.
• Betting & Gaming History: Retained for five years from the date of each gaming session. This data may be required to resolve disputes or for responsible gaming monitoring purposes.
• Support Communications: Retained for three years from the date of the final communication. This allows pk15 to refer back to previous interactions when handling follow-up queries.
• Marketing Consent Records: Retained for the duration of your account plus three years, to demonstrate compliance with consent obligations. The underlying marketing preference is updated immediately when you change it.
• Technical Logs: Retained for 12 months on a rolling basis. Server and access logs are used for security monitoring and fraud detection.

pk15 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include:

• Transport Layer Security (TLS): All data transmitted between your device and pk15's servers is encrypted using TLS 1.2 or higher. The padlock icon visible in your browser's address bar confirms this encryption is active during your session.
• Data Encryption at Rest: Personal data stored in pk15's databases is encrypted at rest using AES-256 encryption. Even in the highly unlikely event of a server breach, the data would be unreadable without the encryption keys, which are stored separately.
• Access Controls: Access to pk15's internal systems is governed by role-based access control (RBAC). Staff can only access the data necessary for their specific job function. All access to player data is logged and reviewed in regular audits.
• Two-Factor Authentication (2FA): All pk15 staff with access to production systems are required to use 2FA. We also strongly recommend — and make available — 2FA for all player accounts.
• Penetration Testing: pk15 conducts regular penetration tests carried out by independent cybersecurity firms to identify and remediate vulnerabilities before they can be exploited.
• Incident Response Plan: pk15 maintains a documented incident response plan. In the event of a data breach that poses a risk to player rights, pk15 will notify affected players and the relevant regulatory authority within 72 hours of becoming aware of the breach.

As a pk15 player, you hold a number of rights over your personal data. pk15 is committed to upholding these rights promptly and without unnecessary bureaucracy. Your rights are summarised below:

To exercise any of these rights, contact pk15's support team with your registered username and a clear description of your request. pk15 will acknowledge your request within 48 hours and will respond in full within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

pk15 operates a strict 21+ policy across all its products and services. The platform is not intended for use by, and does not knowingly collect personal data from, any individual under the age of 21. This is a firm requirement of our gaming licence and a core commitment of our responsible gaming programme.

pk15 deploys age verification checks at registration and may conduct additional age verification at any point during a player's time on the platform. Where we have reason to believe that a player is under 21, the account will be immediately suspended and any balance held pending age verification. If verification confirms underage access, the account will be permanently closed and any deposits returned.

pk15 also recommends that parents and guardians in Pakistan use parental control software to restrict access to online gambling sites on shared or family devices. A number of free parental control tools are available for both Android and iOS devices commonly used in Karachi, Lahore, Islamabad, Faisalabad, and other Pakistani cities.

pk15 is operated under an international gaming licence, and as such, some of the data processing activities described in this policy may involve the transfer of personal data to countries outside of Pakistan. This includes transfers to our gaming licence jurisdiction, to third-party payment processors, and to KYC and compliance technology providers who may be based in various international locations.

Where personal data is transferred internationally, pk15 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. These safeguards may include:

• Contractual clauses that bind the recipient to data protection standards consistent with our gaming licence obligations.
• Transfers only to countries or organisations that have been assessed by pk15 as providing an adequate level of data protection.
• Technical measures, including encryption of data in transit and at rest, applied to all cross-border data flows.

pk15 reviews this Privacy Policy regularly and may update it from time to time to reflect changes in our data processing practices, changes in applicable laws and regulations, or changes in the products and services we offer. When we make material changes to this policy, we will notify you in one or more of the following ways:

• A prominent notice on the pk15 homepage or within your account dashboard.
• An email notification sent to your registered email address.
• An in-platform notification displayed when you next log in to your pk15 account.

The "Effective Date" displayed at the top of this Privacy Policy reflects the date on which the most recent version came into effect. We encourage you to review this policy periodically so that you remain informed about how pk15 is protecting your data. Continued use of the pk15 platform after a policy update constitutes your acknowledgement of the revised terms.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how pk15 has handled your personal data, please contact our support team. We are committed to resolving all privacy-related queries promptly and transparently.

You can reach pk15's privacy team via the following contact details:

• Email: [email protected] (plain text — not a clickable link)
• Platform: Live chat available within your pk15 account dashboard
• Response Time: We aim to acknowledge all privacy queries within 48 hours and to provide a full response within 30 calendar days

If you are not satisfied with pk15's response to your privacy concern, you have the right to escalate the matter to the relevant regulatory authority under our gaming licence jurisdiction. pk15 will cooperate fully with any such regulatory investigation and will provide you with the contact details of the relevant authority upon request.