At pk40, the privacy and security of every Pakistani player's personal information is a responsibility we take with the same seriousness we apply to financial security and fair gaming. This Privacy Policy explains in clear terms what personal data pk40 collects, why we collect it, how it is stored and protected, who it may be shared with, and what rights you hold over your own information. Please read this document carefully. By registering an account on pk40.club and using any pk40 service, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.
Your data stays secure. All personal and financial data processed by pk40 is protected by 256-bit SSL encryption — the same standard used by Pakistan's leading commercial banks. We do not sell your personal information to any third party for commercial purposes, ever.
pk40 is an internationally licensed online gaming operator accessible via pk40.club, providing Pakistani players with PKR-native sports betting, cricket wagering, casino games, and live dealer tables. References in this Privacy Policy to "pk40", "we", "us", or "our" refer to the pk40 operating entity responsible for determining the purposes and means of processing your personal data.
pk40 acts as the data controller in respect of all personal information collected from players and visitors to pk40.club. As data controller, pk40 is responsible for ensuring that personal data is processed in accordance with this Privacy Policy and all applicable data protection obligations under our gaming licence jurisdiction.
If you have any questions about how pk40 handles your personal data, you may contact our support team via live chat, available 24/7, or via the plain-text support email address displayed in the footer of this page. We will respond to all data-related queries within five business days.
pk40 collects only the personal data that is necessary for the purposes described in this Privacy Policy. The categories of personal data we collect are set out in the table below.
| Category | Data Types | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, CNIC document images | Account registration, age verification (21+), KYC compliance, fraud prevention |
| Contact Data | Pakistani mobile number, email address, city of residence (e.g. Karachi, Lahore, Islamabad) | Account communication, support, promotional notifications (where consented) |
| Financial Data | JazzCash / EasyPaisa account number, HBL / UBL / Meezan Bank account details, PKR deposit and withdrawal history | Processing PKR deposits and withdrawals, anti-money laundering checks |
| Gaming Activity Data | Wager history, game session logs, sports betting records, PSL bet slips, bonus usage | Account management, dispute resolution, responsible gaming monitoring, regulatory reporting |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps | Platform security, fraud detection, geolocation compliance, service optimisation |
| Usage Data | Pages visited, features used, click paths, session duration, referral source | Platform improvement, personalisation, aggregate analytics |
| Communications Data | Live chat transcripts, support ticket content, feedback submissions | Customer service, dispute records, quality assurance |
pk40 does not knowingly collect sensitive personal data beyond what is strictly required for identity verification and regulatory compliance. CNIC data is processed solely for KYC purposes and is never used for profiling, scoring, or any commercial purpose unrelated to account verification.
The majority of personal data pk40 holds is provided directly by you during the account registration process, KYC verification, deposit and withdrawal transactions, and when you contact our support team. This includes your name, mobile number, CNIC details, and payment account information.
When you access pk40.club or use any Platform feature, we automatically collect certain technical and usage data via server logs, cookies, and similar tracking technologies. This includes your IP address, device identifiers, browser configuration, and a record of the pages and features you interact with. This data collection is necessary for the secure and functional operation of the Platform.
In the course of completing your KYC verification and screening for anti-money laundering (AML) compliance, pk40 may receive identity confirmation data from third-party verification service providers. Such providers are bound by strict data processing agreements with pk40 and are prohibited from using your data for any purpose other than the verification service they are contracted to provide.
When you make a PKR deposit or withdrawal via JazzCash, EasyPaisa, or any supported bank, pk40 receives transaction confirmation data from the relevant payment processor. This data is limited to transaction reference numbers, amounts, timestamps, and the account identifiers necessary to match the transaction to your pk40 Account.
pk40 uses the personal data we collect for the following specific purposes:
pk40 processes your personal data only where a valid legal basis exists. The primary legal bases on which pk40 relies are as follows:
pk40 is required by the terms of its international gaming licence to verify the identity of all players before processing withdrawals. CNIC-based identity verification is the standard adopted by pk40 for Pakistani players, as the Computerised National Identity Card issued by NADRA represents the primary government-issued identity document in Pakistan.
During the KYC process, pk40 collects a clear photograph or scanned image of both sides of your valid CNIC, a selfie or facial photograph for liveness verification where required, and in some cases proof of address or source of funds documentation for enhanced due diligence on high-value accounts.
All KYC documents submitted to pk40 are encrypted at rest using AES-256 encryption and stored on secure, access-controlled servers. Access to KYC documents is restricted to authorised verification personnel and compliance officers only. KYC documents are never shared with any third party except where required by law or for the specific purpose of third-party identity verification as described in Section 3.3. CNIC images are retained for a minimum period of five years from account closure, as required by our regulatory obligations.
CNIC Security: pk40 will never ask you to share your CNIC details via live chat, SMS, or any channel other than the secure KYC verification portal within your Account dashboard. If you receive any communication purporting to be from pk40 requesting CNIC information via an unofficial channel, please disregard it and notify our support team immediately.
All PKR financial transactions processed through the pk40 Platform — including JazzCash deposits, EasyPaisa deposits, HBL, UBL, and Meezan Bank transfers, and all corresponding withdrawal transactions — are recorded and retained as part of pk40's financial records and regulatory compliance obligations.
Transaction data is processed solely for the purposes of completing the relevant financial transaction, reconciling account balances, generating player account statements, and fulfilling AML screening obligations. pk40 retains full PKR transaction records for a minimum of seven years from the date of each transaction, in compliance with applicable financial record-keeping requirements.
pk40 does not store full bank account or mobile wallet credentials on its own servers. Payment details are tokenised and processed through PCI-DSS compliant payment gateway infrastructure. pk40 staff have no access to your full JazzCash, EasyPaisa, or bank account credentials.
pk40.club uses the following categories of cookies and similar tracking technologies:
You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your pk40 Account and using the Platform. Detailed instructions for managing cookies in all major browsers are available in your browser's help documentation.
pk40 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Personal data is shared with third parties only in the limited circumstances described in this section.
pk40 engages carefully selected third-party service providers to assist with specific operational functions, including identity verification, payment processing, fraud detection, customer support infrastructure, and platform analytics. All such service providers are bound by written data processing agreements that restrict their use of your data to the specific service they provide and prohibit any independent processing for their own purposes.
pk40 may disclose personal data to competent regulatory authorities, gaming licence bodies, financial intelligence units, or law enforcement agencies where required to do so by applicable law, court order, or in connection with an investigation into suspected illegal activity, AML obligations, or gaming licence compliance requirements. pk40 will disclose only the minimum data necessary to satisfy the specific legal obligation and will, where legally permissible, notify affected players of such disclosure.
In the event of a merger, acquisition, or sale of all or a material part of pk40's assets, personal data held by pk40 may be transferred to the successor entity as part of that transaction. In such circumstances, pk40 will take reasonable steps to ensure that the successor entity is bound by privacy obligations no less protective than those set out in this Privacy Policy, and will notify affected players of any material change to data controller identity.
pk40 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following standard retention periods apply:
Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with pk40's data disposal procedures.
pk40 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:
Notwithstanding the above, no internet-based platform can guarantee absolute security. Players are reminded to use strong, unique passwords for their pk40 Account and to enable two-factor authentication via the Account security settings.
As a pk40 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team via live chat or the support email address shown in plain text in the footer of this page.
The pk40 Platform is strictly for adults aged 21 years and above. pk40 does not knowingly collect any personal data from individuals under the age of 21. If pk40 discovers that an Account has been registered by a person under 21, the Account will be closed immediately, all associated data will be securely deleted, and any funds held in the Account will be handled in accordance with our regulatory obligations.
If you believe that a minor has registered an Account on pk40.club, please contact our support team immediately via live chat so that we can investigate and take appropriate action. pk40 supports the use of parental control software to prevent minors from accessing online gaming sites. We encourage parents and guardians in Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan to make use of such tools.
pk40 sends promotional communications — including information about bonuses, PSL cricket betting promotions, new casino games, and platform updates — only to players who have explicitly opted in to receive such communications during account registration or via their Account preferences. We do not send unsolicited marketing messages.
You may withdraw consent to receive pk40 marketing communications at any time by: (a) updating your notification preferences in your Account dashboard; or (b) clicking the unsubscribe link included in any pk40 promotional email or SMS; or (c) contacting our support team via live chat with a request to be removed from marketing communications. Opt-out requests are processed within five business days. Withdrawal of marketing consent does not affect your ability to use any pk40 service.
Certain non-promotional communications — such as deposit confirmations, withdrawal notifications, account security alerts, responsible gaming reminders, and KYC verification requests — are sent to all players regardless of marketing consent status, as they are necessary for the operation of your Account and cannot be opted out of while your Account remains active.
pk40 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory obligations, or operational requirements. Where amendments are material, we will provide advance notice to registered players via the mobile number or email address associated with their Account, or by prominent notice on pk40.club, a minimum of fourteen days before the amended policy takes effect.
The "Last Updated" date at the top of this page reflects the date on which the current version came into effect. We encourage you to review this Privacy Policy periodically. Continued use of the pk40 Platform following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how pk40 has handled your personal data, please contact our team in the first instance via the 24/7 live chat available on pk40.club.
For formal written privacy complaints, you may reach our data protection team using the plain-text support email address displayed in the footer of this website. Formal privacy complaints will receive a written acknowledgement within two business days and a substantive response within fifteen business days of receipt.
If you are not satisfied with pk40's response to a privacy complaint, you may have the right to lodge a complaint with the data protection supervisory authority in the jurisdiction of pk40's gaming licence. Details of the relevant supervisory authority are available on request from our support team.
Summary: pk40 collects only what is necessary, protects it with bank-grade encryption, never sells it, and gives you clear controls over your own data. If you have any questions or concerns about your privacy at pk40, our support team is available around the clock during Pakistan Standard Time.
A clear summary of the rights you hold over your personal information — and how to exercise each one.
You may request a copy of all personal data pk40 holds about you. We will provide a full data export within 30 days of a verified access request.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without delay.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
In certain circumstances, you may request that pk40 restrict the processing of your data while a query or complaint is under investigation.
Where technically feasible, you may request your personal data in a structured, machine-readable format for transfer to another service provider.
You have the right to object to processing of your personal data for direct marketing purposes at any time, with immediate effect upon receipt of your objection.
Six concrete measures that make pk40 one of the most privacy-conscious gaming platforms available to Pakistani players.
Every byte of data exchanged between your device and pk40.club is encrypted with 256-bit SSL — the same standard used by Pakistan's leading commercial banks and government financial portals.
Your JazzCash, EasyPaisa, and bank account credentials are never stored on pk40 servers. All PKR payment processing uses tokenised, PCI-DSS compliant infrastructure — your full payment details are invisible to pk40 staff.
Your CNIC verification documents are AES-256 encrypted at rest and accessible only to authorised KYC compliance personnel. They are never used for profiling, advertising, or any commercial purpose beyond identity verification.
pk40 has a strict policy against selling, renting, or trading player personal data to any third party for commercial purposes. Your data is used only to operate your account and fulfil our regulatory obligations — nothing else.
The pk40 Platform undergoes scheduled third-party penetration testing and security audits. Any vulnerabilities identified are remediated on a priority basis before they can be exploited — keeping your account data safe.
pk40 sends promotional content only to players who have opted in. You can withdraw consent at any time from your Account dashboard or by contacting support — no waiting periods, no complications.
Over 850,000 Pakistani players across Karachi, Lahore, Islamabad, and Faisalabad trust pk40 with their data and their PKR. Explore our full gaming offering — from PSL cricket betting to 3,200+ certified casino games.
21+ only. By using pk40 you confirm acceptance of our Privacy Policy and Terms & Conditions. Please play responsibly.