PK9 Privacy Policy — How We Protect Your Data

1 Who This Policy Covers

This Privacy Policy applies to all individuals who interact with PK9 — including visitors to the pk9.cx website, registered account holders, players using the PK9 mobile app, and anyone who contacts PK9 support. It covers data collected through all channels: the desktop website, mobile browser, the native app and direct communication with the support team.

By registering an account or using the platform, you confirm that you have read and understood this policy and that you consent to the collection and use of your data as described here. If you do not agree, you should not register or use PK9.

2 What Data We Collect

PK9 collects personal data in several different ways depending on how you use the platform. Below is a clear breakdown of every category of data we may collect:

We only collect data that is genuinely necessary for the purposes described in Section 3. We do not collect sensitive data such as biometric information, religious affiliation, political opinions or health records.

3 Why We Collect It

Every piece of data PK9 collects serves a specific and legitimate purpose. Here is a plain-English explanation of why each category is needed:

• Identity and contact data — Required to create and verify your account, confirm you are aged 18 or above, process withdrawals to the correct person, and send you account-related notifications such as security alerts or withdrawal confirmations.
• Financial data — Needed to process your PKR deposits and withdrawals accurately, maintain a correct account balance, detect and prevent fraud, and provide you with a transaction history. Payment method details are handled by third-party processors — PK9 only retains reference data.
• Gaming activity data — Used to calculate your account balance, track bonus wagering progress, identify unusual betting patterns that may indicate account misuse, and improve the platform's game and sports offering based on aggregate usage trends.
• Device and technical data — Collected automatically to maintain platform security, detect multiple accounts registered from the same device, identify fraudulent login attempts, and ensure the platform displays correctly on your device.
• Communication data — Retained so that the support team has context when you contact us about a previous issue, and to maintain a record of any commitments or resolutions agreed during support interactions.
• Cookies and session data — Used to keep you logged in during a session, remember your language and display preferences, and understand which parts of the platform are most used so we can prioritise improvements.

PK9 does not use your personal data for automated decision-making that produces significant legal effects without human review. For example, a decision to permanently close your account based on suspected fraud would involve a manual review by the compliance team, not a fully automated system.

4 Payment & Financial Data

Given that PK9 handles real-money transactions in PKR — including deposits via JazzCash, Easypaisa, Raast, bank transfer and cards — financial data deserves its own section. Here is exactly how it works:

• When you initiate a deposit through JazzCash or Easypaisa, the transaction is authorised within those apps using your own credentials. PK9 receives a confirmation and a transaction reference from the payment gateway — it does not receive your JazzCash PIN or Easypaisa password.
• For bank transfers, PK9 receives the transfer reference and amount. Your full bank account details are not stored in PK9's systems beyond what your bank includes in the transfer notification.
• Card payments are processed through a PCI-DSS compliant payment gateway. Card numbers are tokenised by the gateway provider and are not stored by PK9.
• All transaction records are retained for a minimum period to support dispute resolution, fraud investigation and financial reconciliation. The specific retention period is described in Section 8.

5 Cookies & Device Data

PK9 uses cookies and similar technologies on both the website and the mobile app. Cookies are small data files stored on your device that help the platform work properly and remember your preferences between sessions.

The types of cookies PK9 uses include:

• Essential cookies: Required for the platform to function. These handle session management — keeping you logged in while you navigate between pages — and security tokens that protect your account from cross-site request forgery attacks. These cannot be disabled without breaking the platform.
• Functional cookies: Remember your preferences such as display settings and language choices so you do not have to reset them on every visit.
• Analytics cookies: Collect aggregate, anonymised data about how players use the platform — which pages are visited most, where players drop off, how long sessions last. This data does not identify individual players and is used solely to improve the platform.

PK9 does not use third-party advertising cookies or tracking pixels that share your activity with external advertisers. You can manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to log in and use the platform normally.

Device data — including your IP address, browser version, device model and operating system — is collected automatically on each visit. This data is used for security purposes, specifically to identify suspicious login attempts and detect the use of multiple accounts from a single device.

6 How Data Is Stored

All personal data collected by PK9 is stored on secure servers with access restricted to authorised personnel only. Servers are protected by firewalls, intrusion detection systems and regular security audits. Data at rest is encrypted using industry-standard encryption protocols.

Access to player data within the PK9 organisation is role-based — meaning staff can only access the data that is necessary for their specific job function. For example, a customer support agent can access your account details and transaction history to help resolve a query, but cannot access the underlying payment gateway data or internal security logs.

7 Who We Share Data With

PK9 does not sell or share your personal data with third parties for their own commercial use. Data sharing is limited to the following categories of third party, all of which are necessary for the platform to operate:

• Payment processors: JazzCash, Easypaisa, Raast, and banking partners receive the transaction data necessary to process your deposits and withdrawals. Each of these providers operates under their own privacy and security policies.
• Identity verification providers: Where enhanced KYC (Know Your Customer) checks are required — for example, to verify your CNIC before processing a large withdrawal — a third-party identity verification service may be used. This provider receives only the documents and information required for verification.
• Game content providers: The studios and providers who supply PK9's slot games, fish shooting games and live casino tables may receive anonymised session data (such as game round outcomes) as part of the technical integration. They do not receive your name, contact details or financial data.
• Fraud and security services: PK9 uses third-party tools to help detect fraud, identify suspicious betting patterns and protect platform integrity. These services process data within secure environments and under strict data processing agreements.
• Legal and regulatory obligations: In cases where PK9 is required by law to disclose data — for example, in response to a valid court order or formal investigation — we will comply with that obligation. Where legally permissible, we will notify the affected player.

Any third party that receives player data from PK9 is contractually required to handle it securely, use it only for the specified purpose, and not share it further without PK9's authorisation.

8 How Long We Keep Data

PK9 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or to meet legal and operational obligations. The general retention periods are as follows:

• Active account data: Retained for as long as your account remains active on PK9.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction to support dispute resolution and financial audit requirements.
• Identity verification documents: Retained for a minimum of five years from account closure or the date of the relevant verification, whichever is later.
• Support communications: Retained for two years from the date of the last interaction in a given support thread, unless the matter is subject to an ongoing dispute.
• Gaming activity logs: Retained for a minimum of two years for responsible gaming monitoring and fraud investigation purposes.

When data reaches the end of its retention period and there is no ongoing legal or contractual reason to keep it, it is securely deleted or anonymised so that it can no longer be linked to you as an individual.

9 Your Rights

As a PK9 account holder, you have the following rights in relation to your personal data:

• Right of access: You can request a copy of all personal data PK9 holds about you. We will provide this within a reasonable timeframe after verifying your identity.
• Right to rectification: If any of your personal information is inaccurate or out of date, you can ask us to correct it. You can update basic contact details directly in your account profile, or contact support for changes to identity or verification data.
• Right to erasure: You can request that your personal data be deleted. We will action this where there is no overriding legal obligation to retain the data — for example, financial transaction records may need to be kept regardless of a deletion request.
• Right to restrict processing: You can ask PK9 to stop using your data for certain purposes while a dispute or review is ongoing.
• Right to withdraw consent: Where processing is based on your consent — for example, receiving promotional emails — you can withdraw that consent at any time by updating your notification preferences in your account settings.

To exercise any of these rights, contact PK9 support via live chat or the email address shown in the footer. We will ask you to verify your identity before actioning any data request to protect against unauthorised access to your information.

10 Children & Minors

PK9 is strictly an adults-only platform. Registration is not permitted for anyone under the age of 18. PK9 does not knowingly collect personal data from minors. If we become aware that an account has been registered by someone under 18, the account will be closed immediately, balances will be frozen pending review, and any personal data associated with the account will be deleted in line with our standard data removal process.

If you believe a minor has registered on PK9 using false age information, please contact support immediately with relevant details so we can investigate and take appropriate action as quickly as possible.

11 Security Practices

PK9 takes a layered approach to platform security. The measures in place to protect your personal data include:

• SSL/TLS encryption on all connections between your device and PK9's servers, covering all pages, login flows and payment processes.
• Password hashing using bcrypt or equivalent cryptographic methods — passwords are never stored in plain text.
• Two-factor authentication (2FA) available for account login — players are encouraged to enable this for an additional layer of account security.
• Session management controls that automatically expire inactive sessions and flag logins from new or unusual locations for additional verification.
• Regular internal security reviews and penetration testing to identify and address vulnerabilities before they can be exploited.
• Staff access controls ensuring that player data is only accessible to team members who need it for their specific role.

Despite these measures, no online platform can guarantee absolute security. If a security incident occurs that affects your personal data, PK9 will notify affected players promptly and take immediate steps to contain the breach and prevent further exposure.

12 Changes to This Policy

PK9 may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes to the services we use, or to keep pace with evolving best practices in data protection. When significant changes are made, registered players will be notified via email to their registered address and/or a notice displayed upon next login.

The updated policy will always be published on this page with a revised "Last Updated" date at the top. Minor wording corrections or clarifications that do not affect how your data is actually used may be made without a separate notification, though the "Last Updated" date will still be revised. We recommend checking this page periodically if you want to stay fully informed.

Continued use of PK9 after the effective date of any updated policy constitutes your acceptance of the revised terms.

13 Contact & Data Requests

For any questions about this Privacy Policy, to request access to your personal data, to request corrections or deletions, or to raise a concern about how your data has been handled, please contact PK9 support. The support team is available 24/7 via live chat within the platform after login.

You can also reach us by email — the address is shown in the footer below. When submitting a data request by email, please include your registered username and a brief description of your request. We will ask you to verify your identity before processing any request that involves accessing or modifying account data.