pkshaan Privacy Policy — How We Handle Your Personal Data

This Privacy Policy ("Policy") applies to all products, services, and digital properties operated by pkshaan, including the website accessible at pkshaan.im and any associated mobile or web applications (collectively, the "Platform"). It governs the collection, processing, storage, and disclosure of personal data relating to users and visitors of the Platform.

By registering an account with pkshaan, accessing the Platform, or submitting any personal information to us, you acknowledge that you have read and understood this Policy and consent to the practices described herein. If you do not agree with this Policy, you should discontinue use of the Platform and contact our support team to arrange closure of your account.

pkshaan is committed to handling your personal data with transparency, integrity, and the highest standard of care consistent with applicable data protection laws and our obligations as an internationally licensed online gaming operator. References to "pkshaan", "we", "our", or "us" in this document refer to the legal entity operating the Platform.

pkshaan collects personal data in the following categories:

2.1 Registration and Identity Data

When you create a pkshaan account, we collect your full legal name, date of birth, residential address, email address, and phone number. We also collect identity verification documents such as a Computerised National Identity Card (CNIC), passport, or other government-issued identification as required for Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance.

2.2 Financial and Transaction Data

pkshaan records all deposits, withdrawals, and betting transactions associated with your account. This includes transaction amounts in PKR, the payment method used (for example JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20), transaction timestamps, and reference identifiers. We do not store complete bank card numbers on our servers — full card data is handled exclusively by our certified payment processing partners.

2.3 Technical and Usage Data

When you access the pkshaan Platform, we automatically collect certain technical data including your IP address, device type, operating system, browser type and version, session duration, pages viewed, and features used. This data is used for security monitoring, fraud detection, and platform performance analysis.

2.4 Communication Data

If you contact pkshaan support via live chat, email, or any in-platform messaging tool, we retain records of that communication. This includes the content of your messages, timestamps, and any attachments you submit. These records are maintained for quality assurance, dispute resolution, and regulatory audit purposes.

2.5 Responsible Gaming Data

Where you use pkshaan's responsible gaming tools — such as setting deposit limits, activating cooling-off periods, or requesting self-exclusion — we record these preferences and their activation dates. This data is treated with additional sensitivity and is used exclusively for the purpose of honouring your responsible gaming elections and complying with our operator obligations.

pkshaan uses the personal data we collect for the following purposes:

• Account administration: Creating, maintaining, and securing your pkshaan account, processing deposits and withdrawals in PKR, and delivering the gaming and betting services you have requested.
• Identity verification and AML compliance: Verifying your identity as part of our KYC process, screening against sanctions lists, detecting and preventing money laundering, fraud, and other financial crimes as required under our operating licence.
• Legal and regulatory obligations: Meeting record-keeping, reporting, and audit requirements imposed by our licensing authority and applicable law. pkshaan may be required to retain certain data for defined minimum periods regardless of account status.
• Customer support: Responding to your queries, resolving disputes, investigating complaints, and improving the quality of our support service based on interaction records.
• Security and fraud prevention: Monitoring Platform activity for suspicious patterns, protecting your account from unauthorised access, and maintaining the integrity of pkshaan's betting and gaming environment.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how members use pkshaan features and to prioritise improvements to the sports betting and casino product.
• Marketing communications: Sending you promotional offers, bonus notifications, and news about new pkshaan features — but only where you have explicitly opted in to receive such communications. You may withdraw this consent at any time through your account settings or by contacting support.
• Responsible gaming: Monitoring betting patterns to identify indicators of potential problem gambling and, where appropriate, proactively reaching out in accordance with our responsible gaming obligations.

pkshaan processes your personal data under one or more of the following lawful bases:

• Contractual necessity: Processing required to perform our contractual obligations to you — primarily operating your account, processing bets, and facilitating financial transactions in PKR.
• Legal obligation: Processing required to comply with applicable law, including AML regulations, KYC requirements, and data retention mandates imposed by our licensing jurisdiction.
• Legitimate interests: Processing necessary for pkshaan's legitimate business interests, including fraud detection, platform security, and aggregated analytics — provided these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and certain optional analytics features. You may withdraw consent at any time without penalty to your account standing.

pkshaan uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that help us deliver a personalised, secure, and functional experience.

Categories of cookies used by pkshaan:

• Strictly necessary cookies: Required for basic Platform functionality — login session management, security tokens, and language preferences. These cannot be disabled without impairing core site operation.
• Performance cookies: Collect anonymised data about how visitors interact with pkshaan pages (pages visited, errors encountered, session length). Used exclusively to improve Platform performance.
• Functional cookies: Remember your preferences — such as odds format, preferred payment method, or responsible gaming settings — to personalise your pkshaan experience across sessions.
• Analytics cookies: Help pkshaan understand aggregate user behaviour patterns. Data collected is anonymised and used for product development decisions only.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair Platform functionality and may prevent you from accessing your pkshaan account.

pkshaan does not sell your personal data. We share personal data only in the following limited circumstances:

• Payment processors: We share transaction data with certified payment service providers (including JazzCash, EasyPaisa, and our bank transfer partners) to process deposits and withdrawals. These providers operate under strict data processing agreements and are prohibited from using your data for any purpose beyond executing your transactions.
• Identity verification providers: pkshaan works with licensed KYC/AML service providers to verify identity documents and screen against watchlists. Document data shared with these providers is used exclusively for verification purposes.
• Regulatory and law enforcement authorities: pkshaan may disclose personal data where required by law, court order, or a valid request from a competent regulatory or law enforcement authority. We will inform you of such disclosures to the extent permitted by applicable law.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of pkshaan's business assets, personal data held by pkshaan may be transferred to the acquiring entity. Members will be notified of any such transfer and the applicable privacy arrangements.
• Fraud prevention networks: pkshaan may share data with industry fraud prevention networks to protect against account fraud, identity theft, and related criminal activity — acting on the basis of legitimate interest and applicable regulatory frameworks.

pkshaan retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to overriding legal, regulatory, or contractual obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account membership and for a minimum of five (5) years following account closure, in compliance with AML and gaming licensing record-keeping requirements.
• Financial transaction records: Retained for a minimum of seven (7) years from the transaction date in accordance with financial regulatory obligations.
• KYC and identity documents: Retained for a minimum of five (5) years from account closure or the conclusion of any regulatory investigation involving your account, whichever is later.
• Support communication records: Retained for three (3) years from the date of the interaction unless the communication forms part of an ongoing dispute or investigation.
• Marketing consent records: Retained for three (3) years from the date of consent withdrawal to demonstrate compliance history.

When retention periods expire and no overriding legal obligation requires continued storage, pkshaan will securely delete or anonymise the relevant personal data.

As a pkshaan member, you hold the following rights with respect to your personal data. To exercise any of these rights, contact pkshaan support — requests will be acknowledged within 5 business days and resolved within 30 calendar days where technically feasible.

• Right of access: You may request a copy of all personal data pkshaan holds about you, together with information about how it is being used.
• Right to rectification: You may request correction of inaccurate personal data or completion of incomplete records at any time through your account settings or via support.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention requirements (see Section 7).
• Right to restriction of processing: You may request that pkshaan restrict processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request your personal data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including profiling for marketing purposes. pkshaan will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

pkshaan implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• Transport Layer Security (TLS 1.3) encryption on all data transmissions between your device and pkshaan servers.
• AES-256 encryption at rest for sensitive data stored in pkshaan databases.
• Bcrypt password hashing — your pkshaan account password is never stored or transmitted in recoverable plain text.
• Multi-factor authentication (MFA) available on all pkshaan accounts as an additional layer of access control.
• Role-based access controls limiting internal staff access to personal data strictly to job functions requiring it.
• Regular third-party penetration testing and security audits of the pkshaan Platform and infrastructure.
• 24/7 automated anomaly detection monitoring for suspicious account activity, unusual login patterns, and potential data exfiltration attempts.

While pkshaan employs industry-leading security practices, no system can be guaranteed impenetrable. We encourage all members to use a strong, unique password for their pkshaan account, enable MFA, and report any suspected unauthorised access to our support team immediately.

pkshaan is strictly an adult platform. All casino gaming and sports betting services on pkshaan are available only to individuals who are aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21.

During the account registration process, pkshaan collects date of birth and conducts identity verification to confirm that all members meet the minimum age requirement. Accounts where our verification process identifies that the registered member is under 21 will be suspended immediately, any funds returned where legally permissible, and the data deleted in accordance with our legal obligations.

If you believe that pkshaan has inadvertently collected personal data belonging to a minor, please contact our support team immediately so we can investigate and take appropriate action without delay.

The pkshaan Platform may contain references to third-party services such as payment providers or licensing information pages. pkshaan is not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party provider whose services you use in connection with your pkshaan account — particularly payment processors handling your JazzCash, EasyPaisa, or bank transactions.

pkshaan reserves the right to update or revise this Privacy Policy from time to time to reflect changes in applicable law, our data practices, or Platform features. When we make material changes, we will notify registered members via the email address associated with your pkshaan account and post the updated Policy on this page with a revised "Last Updated" date.

Continued use of the pkshaan Platform following notification of material policy changes constitutes acceptance of the revised terms. If you do not agree with any changes to this Policy, you should cease use of the Platform and contact support to initiate account closure. Your right to request deletion of personal data remains unaffected by account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pkshaan handles your personal data, please contact our Data Protection team through any of the following channels:

• Email: support at pkshaan.im — subject line: "Privacy Request"
• Live Chat: Available 24/7 through the pkshaan Platform — priority hours 9 AM to 1 AM PKT

pkshaan will acknowledge all privacy-related requests within five (5) business days. Complex requests — such as full data access exports or deletion reviews involving regulatory retention obligations — will be resolved within thirty (30) calendar days of acknowledgement. We are committed to resolving privacy concerns fairly and transparently without requiring escalation to regulatory bodies wherever possible.