At pk40, the privacy of every player across Pakistan is a foundational commitment — not a checkbox. This Privacy Policy explains in plain legal terms exactly what personal data pk40 collects, why we collect it, how we use and protect it, and what rights you hold over your own information.
Our Commitment
This summary highlights our core privacy principles. The full legally binding policy is set out in the sections below.
pk40 collects only the personal data that is strictly necessary to operate the Platform, verify your identity, process transactions, and comply with regulatory obligations. We do not collect data for its own sake.
pk40 has never sold and will never sell your personal information to third-party advertisers, data brokers, or any commercial buyer. Your data is yours — we are custodians of it, not traders of it.
All data transmitted between your device and pk40's servers is protected by industry-standard SSL/TLS encryption. Sensitive data at rest — including payment details and identity documents — is encrypted using AES-256.
You have the right to access, correct, and request deletion of your personal data held by pk40. Subject to legal and regulatory retention obligations, pk40 will action all valid data requests within 30 days.
pk40 uses cookies and similar tracking technologies only for essential Platform functionality, performance analytics, and fraud prevention. Marketing cookies are only placed with your explicit consent.
pk40 retains personal data only for as long as necessary for the purposes it was collected, or as required by applicable law. Account data is held for a minimum of five years post-closure for AML compliance.
pk40 ("we", "us", "our", or "pk40") operates an internationally licensed online betting and casino platform accessible at pk40.bet (the "Platform"). This Privacy Policy describes how pk40 collects, uses, stores, discloses, and protects personal information obtained from players, visitors, and any other individuals who interact with the Platform (collectively referred to as "you" or "User").
pk40 serves players across Pakistan, including in Karachi, Lahore, Islamabad, Faisalabad, Multan, Peshawar, and other cities. We are fully aware of the trust you place in us when you share personal information, and we treat that responsibility with the utmost seriousness.
Scope of this Policy: This Privacy Policy applies to all personal data processed by pk40 through the Platform, our mobile interface, customer support channels, email communications, and any other service operated by pk40. It should be read alongside our Terms & Conditions.
By registering for a pk40 account, using the Platform, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.
pk40 collects personal data that falls into the following categories. We collect only what is genuinely necessary for the purposes described in this Policy.
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC / passport number, photograph | Mandatory (KYC) |
| Contact Data | Email address, mobile number, residential address | Mandatory |
| Financial Data | JazzCash / EasyPaisa account reference, HBL / UBL / Meezan Bank account details, transaction history | Mandatory |
| Technical Data | IP address, device type, browser type and version, operating system, session logs | Automatic |
| Usage Data | Pages visited, games played, bets placed, session duration, click patterns | Automatic |
| Communications Data | Support chat transcripts, emails sent to pk40, feedback submitted | Where provided |
| Marketing Preferences | Opt-in / opt-out status for promotional communications | Optional |
pk40 does not knowingly collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data) unless specifically required by applicable law or regulation.
The majority of personal data pk40 holds is provided directly by you when you: register for a pk40 account; complete identity verification (KYC); make a deposit or withdrawal; contact our support team; participate in a promotion or survey; or update your account profile.
When you access the pk40 Platform, we automatically collect certain technical and usage data through cookies, web beacons, pixel tags, and server log files. This data is collected to ensure the Platform functions correctly, to detect and prevent fraud, and to improve user experience.
pk40 may receive personal data about you from the following third-party sources:
Third-Party Data: Where pk40 receives your data from a third party, we will handle it in accordance with this Privacy Policy and the terms under which it was shared with us. We do not purchase personal data lists from data brokers.
pk40 uses personal data collected from you for the following purposes:
pk40 processes your personal data on the following legal bases, depending on the nature of the processing activity:
Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, contact us at [email protected] or update your preferences in your account settings.
pk40 shares personal data with carefully selected third-party service providers who assist us in operating the Platform. These include payment processors, KYC verification providers, cloud hosting and infrastructure providers, fraud detection services, and customer support software vendors. All service providers are bound by data processing agreements that prohibit them from using your data for any purpose beyond the specific service they provide to pk40.
pk40 may disclose personal data to regulatory bodies, law enforcement agencies, or other governmental authorities where required to do so by applicable law, court order, or lawful regulatory request. We will notify you of any such disclosure where legally permitted to do so.
In the event of a merger, acquisition, sale of assets, or other corporate restructuring involving pk40, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer and any material changes to how your data is handled as a result.
pk40 does not sell, rent, trade, or otherwise commercially exploit your personal data. This is a firm and unconditional commitment. Your data is shared only as described in this Policy and never for third-party commercial gain.
Aggregated Data: pk40 may share aggregated, anonymised, and de-identified statistical data (such as platform-wide betting volume or user demographic trends) with third parties for research or business purposes. Such data cannot be used to identify any individual player.
Cookies are small text files stored on your device when you visit the pk40 Platform. They allow us to recognise your device across sessions, remember your preferences, maintain your login state, and collect analytics data about how the Platform is used.
You can control and manage cookies through your browser settings. Most modern browsers allow you to block, delete, or restrict cookies. Please note that disabling essential cookies may prevent you from accessing certain features of the pk40 Platform, including the ability to log in to your account.
pk40 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to applicable legal and regulatory minimum retention periods. The following retention schedule applies:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | 5 years from account closure | AML / regulatory obligation |
| Financial Transaction Records | 7 years from transaction date | Legal / tax obligation |
| KYC Documents | 5 years from account closure | Regulatory obligation |
| Customer Support Records | 3 years from last interaction | Legitimate interest |
| Technical & Usage Logs | 13 months from collection | Security / fraud prevention |
| Marketing Preferences | Until consent is withdrawn | Consent |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with pk40's data disposal procedures. Where data must be retained beyond the standard period due to an ongoing legal dispute or regulatory investigation, it will be held until the matter is resolved.
Subject to applicable law, you hold the following rights in relation to your personal data held by pk40. To exercise any of these rights, contact our Data Protection team at [email protected]. We aim to respond to all valid requests within 30 calendar days.
Identity Verification Required: To protect the security of your data, pk40 will verify your identity before processing any data rights request. We may ask you to confirm details held on your account before we can action your request.
pk40 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:
While pk40 takes all reasonable and practicable steps to secure your data, no internet-based system can guarantee absolute security. You play an important role in your own data security by maintaining the confidentiality of your pk40 login credentials and notifying us immediately if you suspect any unauthorised access to your account.
The pk40 Platform is strictly intended for adults aged 21 years and over. pk40 does not knowingly collect personal data from any person under the age of 21. Registration on the Platform by persons under 21 is a breach of the pk40 Terms & Conditions and is strictly prohibited.
If pk40 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the associated personal data, and — where required — refer the matter to the relevant regulatory authority. If you believe that a minor may have registered on the Platform, please contact us immediately at [email protected].
Parental Controls: pk40 strongly recommends that parents and guardians use appropriate internet filtering and parental control software to prevent minors from accessing online gambling platforms, including pk40.
As an internationally licensed operator serving Pakistani players, pk40 may transfer personal data to, and process it in, countries outside Pakistan. This may include transfers to service providers located in other jurisdictions where pk40's infrastructure, support operations, or licensing authority is based.
Wherever personal data is transferred internationally, pk40 ensures that appropriate safeguards are in place to protect the data to a standard at least equivalent to the protections described in this Privacy Policy. Such safeguards may include standard contractual clauses, data processing agreements, or transfers to jurisdictions that provide adequate data protection standards under applicable international frameworks.
By using the pk40 Platform and providing your personal data, you acknowledge and consent to the potential transfer of your data to jurisdictions outside Pakistan as described in this section.
pk40 reserves the right to amend, update, or replace this Privacy Policy at any time in response to changes in applicable law, regulatory requirements, Platform functionality, or our data processing practices. When material changes are made, pk40 will notify registered players by email and/or by displaying a prominent notice on the Platform prior to the changes taking effect.
The effective date displayed at the top of this Policy will be updated whenever changes are made. Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must stop using the Platform and may request account closure by contacting [email protected].
If you have any questions, concerns, or complaints relating to this Privacy Policy or the way pk40 handles your personal data, please contact our Data Protection team using the details below. We take all privacy enquiries seriously and aim to respond within four business hours.
If you are not satisfied with pk40's response to a privacy complaint, you may have the right to lodge a complaint with the relevant supervisory authority or data protection regulator in your jurisdiction. pk40 will cooperate fully with any lawful regulatory investigation.
For responsible gaming concerns including self-exclusion requests, deposit limit adjustments, or gambling harm support, please visit our dedicated Responsible Gaming page.
Play with Confidence
Now that you know exactly how pk40 protects your personal data, join over 500,000 Pakistani players who trust pk40 for secure cricket betting, live casino, and slots — all in PKR with full local payment support.