pkshan Privacy Policy

1 Data Controller

pkshan ("we", "us", "our") is the data controller responsible for the personal information collected through the pkshan platform at pkshan.org. As data controller, pkshan determines the purposes for which and the means by which personal data is processed in connection with the platform's operation, player accounts, and associated services.

This Privacy Policy applies to all personal data collected from individuals who access or use the pkshan platform, including registered account holders and visitors who browse pkshan.org without registering. By using pkshan, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Privacy Policy should be read alongside pkshan's Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and pkshan.

2 Data We Collect

pkshan collects personal data through several channels — directly from you when you register or use the platform, automatically through your use of the website, and from third-party service providers where applicable. The categories of personal data we collect are detailed in the table below.

3 How We Use Your Data

pkshan uses the personal data we collect for the following specific purposes. We process your data only where we have a lawful basis to do so, as set out in Section 4 of this Policy.

3.1 Account Registration & Management

We use your identity and contact data to create and maintain your pkshan player account, verify your eligibility to register (including age verification confirming you are 21 or older), enable you to log in securely, and send you account-related communications such as deposit confirmations, withdrawal notifications, and security alerts.

3.2 Identity Verification (KYC)

To comply with our responsible gaming obligations and to prevent fraud and money laundering, pkshan conducts Know Your Customer (KYC) verification on player accounts. This involves reviewing the identity documents you provide — including your Pakistani CNIC — to confirm your identity, age, and address before processing withdrawals or if triggered by unusual account activity.

3.3 Payment Processing

Your financial data is used solely to facilitate PKR deposits and withdrawals via your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or general bank transfer). pkshan does not store full payment credentials. Transaction data is retained for financial record-keeping and audit purposes.

3.4 Platform Delivery & Improvement

Technical and usage data is used to ensure the pkshan platform functions correctly across different devices and connections, to diagnose and resolve technical issues, to optimise loading times, and to improve the overall player experience based on aggregated usage patterns.

3.5 Fraud Prevention & Security

pkshan analyses technical data, account activity, and transaction patterns to detect and prevent fraudulent behaviour, unauthorised access, money laundering, multi-account abuse, and other prohibited conduct as defined in our Terms and Conditions. This processing is carried out in the legitimate interests of pkshan and its player community.

3.6 Responsible Gaming

Account and usage data is used to support pkshan's responsible gaming programme — including monitoring for signs of problem gambling behaviour, enforcing deposit limits and self-exclusion requests, and providing players with session history and activity summaries. For more information, see our Responsible Gaming page.

3.7 Marketing Communications

Where you have provided your consent, pkshan may use your contact data to send you promotional emails or messages about bonuses, new games, and platform updates. You may withdraw your consent to marketing communications at any time by contacting our support team or using the unsubscribe option in any marketing email. Withdrawal of marketing consent does not affect the lawfulness of processing conducted before the withdrawal.

3.8 Legal & Regulatory Compliance

pkshan may process and retain your personal data as required by applicable law, regulatory directives, court orders, or in connection with the investigation and resolution of disputes and complaints.

4 Legal Basis for Processing

pkshan processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil pkshan's obligations under the Terms and Conditions you agreed to at registration — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and regulatory reporting duties.
• Legitimate Interests: Processing carried out in pkshan's legitimate interests — such as fraud prevention, platform security, and improving the player experience — where those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw your consent at any time without affecting processing carried out prior to withdrawal.

5 Data Sharing & Third Parties

pkshan does not sell, rent, or trade your personal data to third parties. We share your data only in the following limited and controlled circumstances:

5.1 Service Providers

pkshan works with trusted third-party service providers who assist in operating the platform. These include payment processors (JazzCash, EasyPaisa, and banking partners), KYC verification service providers, game studios supplying casino and betting content, IT infrastructure and cloud hosting providers, and customer support platform providers. All service providers are contractually required to process your data only as instructed by pkshan and to maintain appropriate security standards.

5.2 Legal & Regulatory Authorities

pkshan may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other governmental authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of pkshan, its players, or the public.

5.3 Business Transfers

In the event that pkshan undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. pkshan will provide reasonable notice of any such transfer and ensure that the receiving entity is bound by privacy obligations no less protective than those set out in this Policy.

5.4 Aggregated Data

pkshan may share aggregated, anonymised statistical data about platform usage — for example, the total number of active players in a given month, or average session duration — with partners or in published reports. Such data does not identify any individual player and does not constitute a disclosure of personal data.

6 Data Retention

pkshan retains your personal data for as long as your account remains active and for a reasonable period thereafter, in accordance with the following retention guidelines:

• Active Account Data: Retained for the full duration of your account's active status, plus a minimum of five (5) years following permanent account closure, to satisfy legal, regulatory, and audit requirements.
• Financial & Transaction Records: Retained for a minimum of seven (7) years from the date of the relevant transaction, consistent with standard financial record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years following account closure or the completion of the KYC process, whichever is later.
• Support Communications: Retained for three (3) years from the date of the last communication, unless the matter relates to an ongoing dispute or legal proceeding.
• Marketing Consent Records: Retained for as long as necessary to demonstrate consent and to handle any related complaints or regulatory enquiries.

When your personal data is no longer required for the purposes for which it was collected and the applicable retention period has expired, pkshan will securely delete or anonymise that data in accordance with our internal data disposal procedures.

7 Data Security

pkshan implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• TLS/SSL Encryption: All data transmitted between your device and pkshan's servers is encrypted using TLS (Transport Layer Security) protocols.
• Encryption at Rest: Sensitive data stored on pkshan's systems — including identity documents and financial records — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personally identifiable player data is strictly limited to pkshan personnel who require it to perform their job functions. All staff with access to sensitive data are subject to confidentiality obligations.
• Secure Password Storage: Player passwords are stored in hashed form using a one-way cryptographic hashing function. pkshan staff cannot view your password in plaintext.
• Intrusion Detection: pkshan employs network monitoring and intrusion detection systems to identify and respond to suspicious activity on its infrastructure.
• Regular Security Reviews: pkshan conducts periodic reviews of its data security measures and updates them in response to emerging threats and industry best practices.

8 Cookies & Tracking Technologies

pkshan uses cookies and similar tracking technologies on pkshan.org to enhance platform performance, maintain your session, and understand how players use the site. A cookie is a small text file placed on your device by a web server when you visit a site. It does not contain executable code and cannot access other data on your device.

8.1 Types of Cookies Used

8.2 Managing Cookies

You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use the pkshan platform — you may not be able to log in or maintain an active session. Performance and functional cookies can be disabled without significantly affecting core platform functionality, though some personalisation features may not work as expected.

9 Your Data Rights

As a pkshan player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with your account username and a description of your request. pkshan will respond within a reasonable timeframe.

10 Minors & Age Restriction

Age verification is a mandatory step in the pkshan account registration and KYC process. If pkshan discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all data associated with it will be reviewed, and the account will be permanently closed. Any balance held in such an account will be handled in accordance with pkshan's terms regarding ineligible registrations.

If you are a parent or guardian and believe that your child may have registered on pkshan, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

11 International Data Transfers

pkshan's primary player base is in Pakistan and our platform is specifically designed for Pakistani users transacting in PKR. However, some of pkshan's technical infrastructure, game content providers, and operational service providers may be based outside Pakistan. Where personal data is transferred to a recipient in another country, pkshan takes reasonable steps to ensure that appropriate data protection safeguards are in place, including:

• entering into data processing agreements with service providers that include binding data protection obligations;
• ensuring that recipients implement security measures equivalent to those applied by pkshan; and
• limiting international transfers to only those that are operationally necessary for the delivery of the pkshan platform.

By using the pkshan platform and accepting this Privacy Policy, you acknowledge that your personal data may be transferred to and processed in countries other than Pakistan as described above.

12 Changes to This Privacy Policy

pkshan reserves the right to update or amend this Privacy Policy at any time. The effective date at the top of this page will be updated to reflect any changes. Where a material change is made — one that meaningfully affects how your personal data is collected, used, or shared — pkshan will provide advance notice through one or more of the following channels: a prominent notice on the platform, an email to your registered address, or an in-platform notification.

Your continued use of the pkshan platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Privacy Policy, you must cease using the platform and contact our support team to arrange account closure and the handling of any remaining balance.

We encourage you to review this Privacy Policy periodically to stay informed about how pkshan protects your personal data.

13 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way pkshan handles your personal data, please get in touch with our support team through the following channel:

Email: [email protected]

Support Hours: 9:00 AM – 2:00 AM PKT, seven days a week.

pkshan aims to acknowledge all privacy-related queries within one (1) business day and to provide a substantive response within five (5) business days. For complex data subject access requests or erasure requests, we may require up to thirty (30) days to respond fully, in which case we will notify you of the expected timeline within the initial acknowledgement.