pkpuls Privacy Policy

pkpuls operates as Pakistan's trusted online casino and sports betting platform, providing a fully localised gaming experience to Pakistani players across Karachi, Lahore, Islamabad, Faisalabad, and beyond. In the course of delivering these services, pkpuls necessarily collects and processes certain personal data relating to its players and prospective users.

This Privacy Policy sets out, in clear and plain terms, the data processing practices of pkpuls — what personal data is collected, why it is collected, how it is used, with whom it may be shared, how long it is retained, and what rights you have in relation to your own data.

pkpuls is the data controller for all personal data collected directly through the pkpuls.net platform. Third-party service providers — including payment processors such as EasyPaisa, JazzCash, HBL, UBL, Meezan Bank, and MCB — operate as independent data controllers or data processors in respect of the data they handle within their own systems, and their respective privacy policies govern that processing.

pkpuls collects personal data across several categories, depending on how you interact with the platform. The table below summarises the categories of personal data collected and the context in which each category is gathered:

pkpuls does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond CNIC identity photographs for KYC purposes), or health information — except where you voluntarily disclose health-related information in the context of a responsible gaming self-exclusion request, in which case that information is used solely for the purpose of processing your exclusion.

pkpuls collects personal data through the following channels:

• Direct submission by you: when you register an account, complete KYC verification, submit a deposit or withdrawal request, contact customer support, or update your account settings.
• Automated technical collection: when you visit pkpuls.net, our servers and analytics systems automatically log technical data including your IP address, device information, browser type, and session activity. This data is collected via server logs and first-party analytics tools.
• Cookies and similar technologies: pkpuls uses first-party cookies to maintain your logged-in session, remember your preferences, and analyse platform usage patterns. See Section 07 for full details of our cookie practices.
• Payment processors: when you complete a deposit or withdrawal via EasyPaisa, JazzCash, or a linked bank account, those providers share a transaction confirmation and reference ID with pkpuls to reconcile your account balance. pkpuls does not receive or store your full payment credentials.
• Identity verification partners: during the KYC process, pkpuls may use a third-party identity verification service to cross-check the CNIC information you provide. That service operates under its own privacy policy and data security standards.

pkpuls uses the personal data it collects for the following specific purposes:

• Account creation and management: to register your pkpuls account, maintain your profile, and provide you with access to all platform features.
• Identity and age verification (KYC): to confirm that you are at least 21 years of age and that the identity information provided at registration is accurate, as required by our licensing obligations.
• Transaction processing: to process PKR deposits and withdrawals via EasyPaisa, JazzCash, HBL, UBL, Meezan Bank, and MCB, and to maintain an accurate record of your account balance and transaction history.
• Anti-money laundering (AML) and fraud prevention: to monitor gaming and financial activity for indicators of money laundering, fraud, or multi-accounting, and to report suspicious activity to relevant authorities where legally required.
• Customer support: to respond to your queries, resolve disputes, and provide account assistance through live chat and email channels.
• Platform improvement: to analyse aggregated, anonymised usage data to improve the pkpuls platform, optimise game performance, and enhance the overall player experience for users across Pakistan.
• Responsible gaming: to monitor gaming behaviour for signs of problem gambling and to administer deposit limits, cool-off periods, and self-exclusion requests where you or pkpuls initiates them.
• Marketing communications: to send you promotional offers, bonus notifications, and platform updates via SMS, email, or push notification — but only where you have opted in to receive such communications. You may withdraw consent at any time through your account settings.
• Legal and regulatory compliance: to fulfil pkpuls's obligations under applicable gaming regulations, AML laws, and data protection requirements.

pkpuls processes personal data only where a valid legal basis exists for doing so. The legal bases relied upon are:

• Contract performance: processing your identity, contact, financial, and gaming activity data is necessary to deliver the pkpuls services you have contracted for by registering an account and accepting the Terms & Conditions.
• Legal obligation: processing KYC documents, AML monitoring, and regulatory reporting is required to comply with pkpuls's legal obligations under its operating licence and applicable financial regulations.
• Legitimate interests: processing technical data for platform security, fraud prevention, and service improvement is carried out on the basis of pkpuls's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: processing your data for marketing communications is carried out solely on the basis of your freely given, specific, and revocable consent. You may withdraw marketing consent at any time without affecting the lawfulness of prior processing.

pkpuls does not sell, rent, or trade personal data with any third party for commercial purposes. Your personal data may be disclosed to the following categories of recipients, strictly on a need-to-know basis:

• Payment processing partners: EasyPaisa, JazzCash, HBL, UBL, Meezan Bank, and MCB receive the minimum data necessary to process your deposit or withdrawal transactions. These providers operate under their own regulatory obligations and privacy policies.
• Identity verification services: pkpuls's licensed KYC/AML verification partner receives CNIC data and verification photographs for the purpose of confirming your identity in compliance with licensing requirements.
• Game content providers: third-party game studios whose titles are available on pkpuls may receive anonymised session data (e.g., game ID, session duration, wager amounts) for the purposes of game performance auditing. No directly identifiable personal data is shared with game studios.
• Customer support platforms: pkpuls's live chat and support ticketing provider processes communication data on pkpuls's behalf under a data processing agreement that restricts use to support delivery only.
• Regulatory and law enforcement authorities: pkpuls is required to disclose player data to licensing regulators, financial intelligence units, and law enforcement agencies upon receipt of a lawful request or where disclosure is mandatory under applicable AML and counter-terrorism financing legislation.
• Legal advisers and auditors: in the context of a legal dispute, compliance audit, or regulatory investigation, pkpuls may share relevant personal data with its legal counsel or external auditors under strict confidentiality obligations.

In the event that pkpuls or its operating entity is acquired, merged with, or transferred to another operator, player data may form part of the transferred assets. Players would be notified of any such change prior to their data being transferred, and the acquiring entity would be required to honour the commitments made in this Privacy Policy.

pkpuls uses cookies and similar tracking technologies on pkpuls.net. Cookies are small text files placed on your device that help the platform function correctly and enable pkpuls to understand how the platform is used.

The following categories of cookies are used on pkpuls.net:

• Strictly necessary cookies: these cookies are required for the pkpuls platform to function and cannot be switched off. They include session authentication cookies that keep you logged in during a gaming session and security cookies that protect against cross-site request forgery.
• Functional cookies: these cookies remember your platform preferences — such as your preferred language and display settings — so you do not need to re-enter them on each visit.
• Analytics cookies: pkpuls uses first-party analytics to understand which pages and games are most popular, how players navigate the platform, and where technical errors occur. This data is aggregated and anonymised and does not identify you as an individual.
• Performance cookies: these cookies help pkpuls identify and resolve performance bottlenecks in the platform, particularly during high-traffic periods such as PSL match days and major casino promotion events.

pkpuls does not use third-party advertising cookies or behavioural tracking cookies that follow you across external websites.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your pkpuls account.

pkpuls retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law or regulatory obligation.

When personal data is no longer required and no legal obligation requires its retention, pkpuls securely deletes or anonymises that data in accordance with its internal data lifecycle procedures.

pkpuls implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or destruction. These measures include:

• Transport Layer Security (TLS 1.3): all data transmitted between your device and pkpuls.net is encrypted using TLS 1.3 with 256-bit AES encryption — visible as the padlock icon in your browser.
• Data-at-rest encryption: personal data stored in pkpuls's databases — including KYC documents, CNIC scans, and financial records — is encrypted at rest using AES-256 standards.
• Access controls: access to personal data within pkpuls's internal systems is governed by strict role-based access controls. Only authorised personnel with a documented operational need may access player data, and all such access is logged and audited.
• Two-factor authentication (2FA): pkpuls strongly encourages all players to enable 2FA on their accounts. Platform-side authentication systems are also protected by multi-factor verification.
• Regular security assessments: pkpuls conducts periodic security reviews and vulnerability assessments of its platform infrastructure to identify and remediate potential security weaknesses proactively.
• Incident response: in the event of a personal data breach that is likely to result in a risk to your rights and freedoms, pkpuls will notify affected players without undue delay, and will report to relevant regulatory authorities as required by applicable law.

pkpuls's primary data processing infrastructure is hosted within secure data centres. Some third-party service providers engaged by pkpuls — including game content providers and technical platform partners — may process data in jurisdictions outside Pakistan.

Where personal data is transferred internationally, pkpuls ensures that appropriate safeguards are in place to protect that data to a standard equivalent to or greater than the protections afforded under this Privacy Policy. Such safeguards include:

• contractual data processing agreements incorporating standard data protection clauses binding on the recipient;
• transfer only to jurisdictions that maintain adequate data protection legislation or that are subject to binding corporate rules;
• regular review of the security posture and compliance status of international data recipients.

pkpuls will never transfer your KYC documents, financial records, or CNIC data to any international recipient not bound by an appropriate data processing agreement and security obligations that match or exceed those described in this Privacy Policy.

During registration, all users are required to provide a date of birth and to confirm — by completing registration — that they are at least 21 years of age. KYC verification using CNIC further confirms age eligibility before any withdrawal is processed.

If pkpuls becomes aware that it has inadvertently collected personal data from an individual under the age of 21, that account will be immediately suspended, the personal data will be securely deleted, and any funds associated with that account will be handled in accordance with our regulatory obligations.

If you are a parent or guardian and you believe that a minor in your care has registered on pkpuls, please contact support immediately at support@pkpuls.net and we will take prompt action to close the account and delete the associated personal data.

pkpuls respects your rights over your own personal data. Subject to applicable legal exceptions — including those relating to AML obligations and the prevention of crime — you have the following rights in relation to the personal data pkpuls holds about you:

• Right of access: you may request a copy of all personal data pkpuls holds about you, in a readable format, at any time.
• Right to rectification: if any personal data pkpuls holds about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure ("right to be forgotten"): you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations.
• Right to restriction of processing: you may request that pkpuls restricts the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: you may request that pkpuls provides your personal data in a structured, machine-readable format so that it can be transferred to another service provider of your choice.
• Right to object: you may object to processing of your personal data where pkpuls relies on legitimate interests as its legal basis, including profiling based on gaming behaviour. You may also object to direct marketing communications at any time.
• Right to withdraw consent: where processing is based on your consent — such as marketing communications — you may withdraw that consent at any time through your account settings or by contacting support. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact pkpuls at support@pkpuls.net. pkpuls will respond to all valid data rights requests within 30 days. In some cases — where requests are complex or numerous — pkpuls may extend this period by a further 60 days, in which case you will be informed of the extension and the reason for it.

pkpuls may send you promotional communications — including bonus offers, PSL cricket betting promotions, casino game launch announcements, and loyalty programme updates — via SMS, email, or in-app push notification. These communications are only sent where you have explicitly opted in during registration or subsequently through your account settings.

You may opt out of marketing communications at any time through any of the following methods:

• logging in to your pkpuls account and updating your communication preferences in the account settings panel;
• clicking the "unsubscribe" link present in any marketing email sent by pkpuls;
• replying STOP to any marketing SMS sent by pkpuls;
• contacting customer support at support@pkpuls.net and requesting removal from all marketing lists.

Opting out of marketing communications will not affect the delivery of transactional communications — such as deposit confirmations, withdrawal notifications, KYC status updates, and account security alerts — which are sent on the basis of contract performance and are not subject to marketing opt-out.

pkpuls reserves the right to update or amend this Privacy Policy from time to time, to reflect changes in our data processing practices, changes in applicable law or regulation, or changes in the services we provide.

When a material change is made to this Privacy Policy, pkpuls will notify registered players via email to the address associated with their account, and will update the "Effective Date" shown at the top of this document. Where a change significantly affects your rights or our processing of your personal data, we may also display a prominent notice on the pkpuls.net platform for a reasonable period following the update.

Your continued use of the pkpuls platform following the notification of a Privacy Policy update constitutes acceptance of the revised policy. If you do not agree with any update to this Privacy Policy, you should cease using the pkpuls platform and may close your account by contacting customer support.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pkpuls handles your personal data, please contact our dedicated data privacy support team:

pkpuls aims to resolve all privacy-related concerns promptly and to your satisfaction. If you feel that your concern has not been adequately addressed, you have the right to escalate your complaint to the relevant data protection authority or gaming regulator in your jurisdiction.

pkpuls takes all data privacy complaints seriously and commits to investigating every complaint thoroughly, providing a substantive written response within 30 days of receipt, and implementing any remedial action necessary to address confirmed breaches of this Privacy Policy or applicable data protection law.