Your personal data belongs to you. This Privacy Policy explains precisely what information pk37 collects from players, why we collect it, how it is stored and protected, who it is shared with, and what rights you have over your own data — all in plain language alongside the required legal detail.
Before reading the full policy, here is a plain-language summary of the six most important facts about how pk37 handles your personal data.
pk37 collects personal data that is strictly necessary for account registration, identity verification (KYC), payment processing, responsible gaming compliance, and customer support. We do not collect data speculatively or for purposes beyond those stated in this policy.
pk37 operates under an international gaming licence that imposes specific data retention and verification requirements on all licensed operators. Some data collection — including identity documents and transaction records — is not optional; it is a regulatory obligation that pk37 must comply with to maintain its licence.
pk37 does not sell, rent, or trade personal data to third-party marketers. Data shared with third parties is limited to payment processors (JazzCash, EasyPaisa, HBL, UBL, SadaPay), game software providers, and regulatory authorities — and only to the extent necessary for those specific purposes.
All data transmitted between your device and pk37 is encrypted using industry-standard TLS/SSL protocols. Data stored on pk37 servers is encrypted at rest. Access to personally identifiable data is restricted to authorised pk37 personnel on a need-to-know basis and is subject to internal access controls and audit logging.
You have the right to access, correct, and in some circumstances request deletion of the personal data pk37 holds about you. You also have the right to object to certain processing activities and to withdraw consent where consent is the legal basis for processing. These rights can be exercised by contacting pk37 support.
pk37 sends promotional emails and SMS messages only to players who have opted in to receive them during registration or account settings. You can withdraw your marketing consent at any time through your pk37 account preferences or by contacting support. Withdrawal of marketing consent does not affect your account status.
Summary Notice. This Privacy Policy applies to all personal data collected by pk37 through the pk37.org platform, including data collected during account registration, identity verification, gameplay, payment transactions, and customer support interactions. By creating a pk37 account, you acknowledge that you have read and understood this policy.
1.1 pk37 ("we", "us", "the Platform") takes the privacy of its players seriously. This Privacy Policy sets out the basis on which any personal data we collect from players, or that players provide to us, will be processed by pk37.
1.2 This policy applies to all services offered through pk37.org, including the casino, sportsbook, account management system, payment processing interface, customer support channels, and any promotional or loyalty programmes operated by pk37.
1.3 pk37 processes personal data in accordance with the data protection requirements imposed by its international gaming licence and applicable data protection principles. These requirements include the lawful, fair, and transparent processing of personal data; the collection of data for specified, explicit, and legitimate purposes; data minimisation; accuracy; storage limitation; integrity and confidentiality; and accountability.
2.1 For the purposes of data protection law, pk37 is the data controller in respect of the personal data of its registered players. This means pk37 determines the purposes and means of processing your personal data.
2.2 If you have questions about how pk37 processes your personal data, or if you wish to exercise any of your data subject rights, you may contact pk37 using the details set out in Section 14 of this policy.
3.1 pk37 collects and processes the following categories of personal data:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, passport number, gender | Registration & KYC verification |
| Contact Data | Email address, mobile number, city of residence | Registration |
| Financial Data | JazzCash/EasyPaisa mobile number, bank account details, USDT wallet address, transaction history | Payment processing |
| KYC Documents | Copies of CNIC, passport, utility bills, source of funds documentation | KYC/AML verification |
| Technical Data | IP address, device type, browser, operating system, session duration, login timestamps | Platform use (automatic) |
| Gaming Data | Bet history, game sessions, wins, losses, responsible gaming tool usage | Platform use (automatic) |
| Communications Data | Support ticket content, live chat transcripts, email correspondence | Customer support interactions |
| Marketing Preferences | Email opt-in status, SMS opt-in status, promotional interest signals | Registration & account settings |
3.2 pk37 does not collect special category data (as defined under applicable data protection law) unless specifically required to do so by its licensing authority in connection with a particular investigation or compliance obligation.
4.1 pk37 processes personal data only where one of the following lawful bases applies:
5.1 pk37 uses the personal data it collects for the following purposes:
Marketing Opt-Out. If you no longer wish to receive marketing communications from pk37, you can unsubscribe at any time via the link in any marketing email, by adjusting your account notification preferences, or by contacting pk37 support directly. Opting out of marketing does not affect your account or access to pk37 services.
6.1 pk37 does not sell, rent, or trade personal data to third parties for their own commercial purposes. Personal data is shared only with the following categories of recipients, and only to the extent strictly necessary:
6.2 All third parties who receive personal data from pk37 are contractually required to process that data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable data protection law.
7.1 pk37 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting obligations imposed by its international gaming licence.
7.2 As a general principle, pk37 retains player account data — including identity records, transaction history, and gaming activity logs — for a minimum period of five (5) years following account closure. This retention period is determined by the record-keeping requirements of pk37's licensing authority.
7.3 Where a Player has been self-excluded from pk37, their self-exclusion record is retained for the duration of the exclusion period plus five years, to prevent re-registration in circumvention of the exclusion.
7.4 Marketing preference records are retained until you withdraw your consent or request deletion, subject to any minimum retention period required by applicable law.
7.5 Following the expiry of the applicable retention period, pk37 will securely delete or anonymise your personal data.
8.1 pk37 implements the following technical and organisational measures to protect player personal data against unauthorised access, loss, or disclosure:
8.2 Notwithstanding the above, no data transmission over the internet or electronic storage system is completely secure. While pk37 takes all reasonable steps to protect your data, we cannot guarantee absolute security. Players should also take responsibility for maintaining the security of their own account credentials.
Account Security Tip. Enable two-factor authentication on your pk37 account to add a layer of protection against unauthorised access. You can find this option in your account security settings. If you suspect your account has been accessed without your permission, contact pk37 support immediately at [email protected].
9.1 pk37 uses cookies and similar tracking technologies on the pk37.org platform. A cookie is a small text file stored on your device when you visit a website. pk37 uses the following categories of cookies:
9.2 pk37 does not use third-party advertising or retargeting cookies that track your browsing activity across other websites.
9.3 You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent your ability to use the pk37 platform.
10.1 You have the following rights in relation to the personal data pk37 holds about you:
10.2 To exercise any of the above rights, contact pk37 at [email protected] with the subject line "Data Rights Request" and include your registered account details. pk37 will respond within 30 days. We may require identity verification before processing your request.
11.1 The pk37 platform is strictly for players aged 21 years and above. pk37 does not knowingly collect or process personal data belonging to persons under 21 years of age.
11.2 As part of the registration and KYC process, pk37 verifies the age of all players. Where age verification reveals that a player is under 21, the account will be immediately closed, all transactions will be reversed where possible, and any data collected will be securely deleted subject to any regulatory reporting obligations that may apply.
11.3 If pk37 becomes aware that personal data has been collected from a person under 21 years of age without the appropriate verification having been triggered, it will take prompt steps to delete that data and close the relevant account.
12.1 pk37 may transfer personal data to service providers located outside Pakistan, including cloud infrastructure providers and game software suppliers. Where such transfers occur, pk37 ensures that appropriate safeguards are in place to protect the data — including contractual clauses that impose data protection standards equivalent to those required by pk37's gaming licence.
12.2 Personal data is not transferred to third countries for the purpose of evading data protection obligations. All transfers are made strictly for the operational purposes described in this policy and are subject to the safeguards described above.
13.1 pk37 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our licensing obligations. Where updates are material, pk37 will notify registered players by email to the address on file, with at least 14 days' notice before the updated policy takes effect.
13.2 The current version of this Privacy Policy is always available at pk37.org/privacy-policy and is dated with the effective date of the most recent revision. Continued use of the pk37 platform following the effective date of an updated policy constitutes acceptance of the updated terms.
14.1 If you have questions about this Privacy Policy or about how pk37 processes your personal data, please contact our data protection team:
Email: [email protected] — Subject line: "Privacy Query"
Response time: pk37 aims to respond to all privacy queries within five (5) business days.
14.2 If you are not satisfied with pk37's response to a privacy query or data rights request, you have the right to escalate your complaint to the data protection authority in the jurisdiction of pk37's licensing authority, or to the dispute resolution mechanism established by that licensing authority.
14.3 pk37 takes all privacy complaints seriously and commits to investigating each one thoroughly and responding with a substantive outcome — not a form letter.
Your data is handled with the same rigour as your payouts. pk37 is a licensed platform — certified games, protected funds, and a privacy policy you can actually read and understand.