pk86 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how pk86 ("pk86," "we," "us," "our") collects, processes, stores, and protects personal data relating to players, registered users, and visitors to pk86.bio ("you," "your"). It applies to all personal data processed in connection with your use of pk86's online casino, sports betting, and related services.

pk86 is committed to handling personal data responsibly and in accordance with applicable data protection principles. We operate a KYC-mandatory platform, which means identity verification data forms a significant part of the personal data we hold. This Policy explains exactly what we do with that data, who we share it with, and how long we keep it.

By registering an account on pk86 or using pk86 Services, you acknowledge that you have read and understood this Policy. If you do not accept the terms of this Policy, you should not register or use pk86 Services.

2. Data Controller

For the purposes of this Policy, pk86 acts as the data controller in respect of all personal data collected through pk86.bio and associated Services. The data controller is responsible for determining the purposes and means of processing personal data.

If you have any questions about this Policy or wish to exercise any of your data rights, please contact us using the details provided in Section 17 of this Policy.

3. Data We Collect

pk86 may collect and process the following categories of personal data:

3.1 Identity Data

• Full legal name as it appears on your identity document
• Date of birth
• Nationality
• Government-issued identification numbers (such as CNIC number)
• Copies of identity documents (CNIC, passport, driving licence)
• Selfie or biometric image for identity matching

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address and proof of address documents

3.3 Financial Data

• Payment method details (JazzCash account reference, Easypaisa number, bank account identifiers)
• Deposit and withdrawal transaction history
• Source of funds information where requested

3.4 Technical Data

• IP address and geolocation derived from IP
• Device type, operating system, and browser
• Session start and end times
• Login timestamps and authentication logs

3.5 Usage Data

• Pages visited on pk86.bio
• Games played, bets placed, and outcomes
• Interaction with pk86 support including chat logs and email correspondence
• Responsible gaming tool usage (deposit limits set, self-exclusion requests)

4. How We Collect Data

pk86 collects personal data through the following means:

• Direct provision: Information you provide during account registration, KYC submission, payment processing, and support interactions.
• Automated technical collection: Cookies, server logs, and analytics tools that record device and session data when you use pk86.bio.
• Third-party KYC providers: Where identity verification is conducted through a third-party verification service, that provider may supply us with verification outcome data and document check results.
• Payment processors: Transaction confirmation data from JazzCash, Easypaisa, and banking partners used for payment processing.

5. Purpose & Legal Basis for Processing

pk86 processes personal data for the following purposes and on the following legal bases:

• Account operation and service delivery: Processing is necessary for the performance of the contract between you and pk86. Without this data, we cannot operate your account, process bets, or handle payments.
• Identity verification (KYC): Processing is required to comply with legal obligations applicable to online gaming operators, including anti-money laundering (AML) and counter-terrorism financing (CTF) requirements.
• Fraud prevention and security: pk86 has a legitimate interest in detecting and preventing fraud, money laundering, and account abuse.
• Responsible gaming compliance: pk86 has a legal and ethical obligation to identify and assist players showing signs of problem gambling. Processing responsible gaming usage data supports this obligation.
• Marketing communications: Where you have provided explicit consent to receive promotional communications from pk86, we process your contact data for this purpose. Consent may be withdrawn at any time.
• Legal and regulatory compliance: pk86 must retain certain data to comply with financial recordkeeping obligations applicable under relevant laws.

6. KYC & Identity Verification Data

Given that pk86 operates as an online gaming platform, KYC data — including copies of your CNIC, passport, or other identity documents — forms a particularly sensitive and significant category of personal data processed by pk86. The following specific commitments apply to KYC data:

• KYC documents are stored with AES-256 encryption at rest and transmitted only over TLS-encrypted connections.
• Access to KYC documents within pk86 is restricted to authorised compliance personnel on a strict need-to-know basis.
• KYC documents are not used for any purpose other than identity verification, age verification, and regulatory compliance.
• KYC data will not be sold, licensed, or provided to marketing or advertising entities.
• Where a third-party KYC verification provider is used, that provider is bound by contractual data processing obligations consistent with this Policy.

Players in Pakistan should be aware that identity document data, including CNIC numbers, is treated as highly sensitive information by pk86. We do not transmit CNIC numbers to any third party except where legally compelled to do so by a competent authority.

7. Payment Data

Payment processing at pk86 is handled through third-party payment processors including JazzCash, Easypaisa, and partner banking institutions. pk86 does not store full payment credentials directly. Payment processor references (such as masked account identifiers) are stored to support transaction reconciliation, withdrawal processing, and refund operations.

Financial transaction records — including deposit amounts, withdrawal amounts, dates, and payment method references — are retained for the period specified in Section 10 of this Policy, as required for financial compliance and audit purposes.

8. Sharing & Disclosure of Personal Data

pk86 does not sell, rent, or trade personal data to any third party for commercial or marketing purposes. Personal data may be shared in the following limited circumstances:

• Payment processors: Transaction data is shared with JazzCash, Easypaisa, and banking partners solely to process deposits and withdrawals.
• KYC verification providers: Identity document data is shared with our third-party KYC provider to conduct identity and age verification checks.
• Fraud and security services: Anonymised or aggregated data may be shared with fraud prevention services where there is reasonable suspicion of fraudulent activity.
• Legal and regulatory authorities: pk86 will disclose personal data to competent authorities where required to do so by law, court order, or regulatory direction. pk86 will endeavour to notify affected users of such disclosures where legally permissible.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of pk86's assets, personal data held by pk86 may be transferred to the successor entity, subject to the successor being bound by data protection obligations at least equivalent to those in this Policy.

9. International Data Transfers

pk86 may process or store personal data on servers located outside Pakistan. Where personal data is transferred to jurisdictions that may not provide equivalent data protection standards, pk86 implements contractual safeguards — including standard data protection clauses in agreements with processors — to ensure that your data continues to be protected to the standard described in this Policy.

10. Data Retention

pk86 retains personal data for the following periods:

• Account data: For the duration of the active account relationship, and for a minimum of five (5) years following account closure, in accordance with financial record-keeping obligations.
• KYC documents: For the duration of the account plus a minimum of five (5) years post-closure, as required by applicable AML compliance frameworks.
• Transaction records: For a minimum of five (5) years from the date of the transaction.
• Support correspondence: For three (3) years from the date of the last interaction, unless a longer period is required for the resolution of an ongoing dispute.
• Marketing consent records: For the period of marketing engagement plus three (3) years following withdrawal of consent.
• Technical and session logs: For up to twelve (12) months from the date of collection, unless retained longer for fraud investigation purposes.

Upon expiry of the applicable retention period, pk86 will securely delete or anonymise personal data so that it can no longer be attributed to an identifiable individual.

11. Cookies & Tracking Technologies

pk86.bio uses cookies and similar tracking technologies to operate the platform and improve user experience. The following categories of cookies are used:

• Essential cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cookies cannot be disabled without impairing platform functionality.
• Analytics cookies: Used to understand how players navigate pk86.bio, which pages are most visited, and where sessions originate. Analytics data is aggregated and does not identify individual users. These cookies can be disabled via browser settings.
• Preference cookies: Store user-selected platform settings such as display language. These cookies can be cleared via browser settings, though doing so will reset your preferences on next visit.

pk86 does not use third-party advertising cookies or behavioural targeting cookies. No player data is transmitted to advertising networks for the purpose of targeted advertising.

12. Security Measures

pk86 implements the following technical and organisational security measures to protect personal data:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and pk86 servers.
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records.
• Role-based access controls restricting personal data access to authorised personnel only.
• Multi-factor authentication required for pk86 administrative systems.
• Regular security reviews and penetration testing of pk86 platform infrastructure.
• Incident response procedures for data breach detection, containment, and notification.

While pk86 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You also have a responsibility to maintain the confidentiality of your pk86 login credentials and to use secure devices and networks when accessing your account.

13. Children's Privacy

pk86 does not knowingly collect personal data from individuals under 18 years of age. The platform is strictly for adults. Age verification is conducted as part of the KYC process. If pk86 becomes aware that personal data has been collected from a person under 18, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has registered an account on pk86, please contact our support team immediately at [email protected].

14. Your Data Rights

Subject to applicable law and regulatory retention obligations, you have the following rights in respect of personal data held by pk86:

To exercise any of the above rights, contact pk86 support at [email protected]. We will verify your identity before processing any data rights request.

15. Marketing Communications

pk86 may send promotional communications — including deposit bonus offers, free bet promotions, and platform news — to players who have provided explicit consent to receive such communications at the time of registration or subsequently through account settings.

You may opt out of marketing communications at any time by updating your communication preferences in your pk86 account settings or by contacting support. Opting out of marketing communications does not affect transactional communications, such as deposit confirmations, withdrawal notifications, and account security alerts, which will continue to be sent as they are necessary for account management.

16. Changes to This Policy

pk86 reserves the right to update or amend this Privacy Policy at any time. The most current version will be published at pk86.bio/privacy-policy with the effective date noted. Material changes will be communicated to registered players via the email address associated with their account. Continued use of pk86 Services following notification of an updated Policy constitutes acceptance of the revised terms.

17. Contact

For all privacy-related queries, data rights requests, or concerns about how pk86 handles your personal data, please contact the pk86 support team. Support is available 24 hours a day, seven days a week in English, with Urdu-friendly assistance available on request.

Contact email: [email protected]

Please include "Privacy Request" in your subject line and your registered account username so we can identify your account and respond efficiently.