Your Data, Your Rights

Privacy Policy – How pk804 Handles Your Personal Data

pk804 collects some personal information when you register and play. This page explains exactly what is collected, why it is needed, how long it is kept, and what you can do about it. No legal maze — just clear answers written for Pakistani players.

Last updated: 1 July 2025
pk804

Privacy at a Glance

Six things pk804 wants every Pakistani player to know about how their data is handled before reading the full policy.

Your Data Is Encrypted

All personal data you submit to pk804 — registration details, CNIC uploads, payment information — is transmitted and stored using industry-standard SSL encryption. Your data does not travel or rest in plain text at any point within pk804's systems.

We Do Not Sell Your Data

pk804 does not sell, rent or trade personal data to third-party marketing companies. Your information is used solely to operate your account, process your PKR transactions and comply with applicable platform obligations. That is where it begins and ends.

You Can Request Data Deletion

Every registered pk804 player has the right to request deletion of their personal data. Once you close your account and any mandatory retention period has lapsed, pk804 will remove your identifiable data from its active systems on request submitted to support@pk804.ws.

Minimal Third-Party Sharing

pk804 shares data only with the partners directly required to run the platform — payment processors (Easypaisa, JazzCash, banks), identity verification providers and game software suppliers. No data is shared with advertisers or data brokers.

Cookies Only Where Needed

pk804 uses cookies to keep your session active and remember basic preferences. Analytics cookies that measure how the platform is used are also present. Marketing cookies from third-party ad networks are not deployed on pk804 pages.

Simple to Contact Us

If you have any question about how pk804 uses your data, want to access a copy of your information or want to correct something on file, emailing support@pk804.ws is the fastest route. pk804 commits to responding to all data-related requests within 5 business days.

pk804

01Who We Are

pk804 is an online gaming platform operating at https://pk804.ws and serving registered players in Pakistan. When this Privacy Policy refers to "pk804", "we", "us" or "our", it refers to the pk804 platform and the entity responsible for processing your personal data.

pk804 is the data controller for the personal information you provide during registration and throughout your use of the platform. This means pk804 determines the purposes for which your data is collected and the manner in which it is processed. If you have questions about data control at pk804, contact support@pk804.ws.

Plain language: pk804 is responsible for your data. We decide what is collected, how it is used and how long it is kept. This policy tells you all of that — clearly.

02Data We Collect

pk804 collects personal data in two ways: information you provide directly, and information that is collected automatically when you use the platform. Here is a breakdown of both categories.

Information you provide directly to pk804:

  • Full legal name as it appears on your CNIC
  • Pakistani mobile number used for account registration and payment method verification
  • Date of birth (used for age verification)
  • Email address (where provided)
  • CNIC number and document image (where requested during verification)
  • Payment method details — Easypaisa, JazzCash, NayaPay, SadaPay or bank account details in your name
  • Any information submitted through support conversations or complaint submissions

Information collected automatically when you use pk804:

  • IP address and approximate geographic location derived from it
  • Device type, operating system and browser version
  • Session timestamps — login time, session duration and logout time
  • Pages visited and features used within the pk804 platform
  • Betting and gaming activity including game sessions, bet amounts, wager history and bonus usage
  • Cookie identifiers — see Section 8 for full cookie details

pk804 does not collect payment card full numbers directly. Card transactions are processed by PCI-DSS compliant payment processors who handle sensitive card data on pk804's behalf under their own security frameworks.

03How We Use Your Data

Every piece of data pk804 collects is used for a defined purpose. The table below maps the main data categories to the reasons pk804 processes them.

Data Type Purpose
Name, CNIC, date of birth Identity verification; age verification; anti-fraud and AML compliance; withdrawal processing
Mobile number Account registration; two-factor security; payment method verification; support communications
Email address Account notifications; bonus offer communications; support responses
Payment method details Processing PKR deposits and withdrawals; verifying payment method ownership; fraud prevention
Betting and gaming history Account management; bonus wagering tracking; responsible gaming monitoring; dispute resolution
Device and session data Security — detecting unusual access; platform performance optimisation; fraud pattern detection
IP address and location Geographic access controls; fraud detection; regulatory compliance

pk804 does not use your personal data to build profiles for sale to third-party advertisers, and does not use automated decision-making that produces legally significant effects on your account without a human review step where material interests are at stake.

04Legal Basis for Processing

pk804 processes personal data under the following legal bases:

  • Contractual necessity: Processing your name, mobile number and payment details is required to operate your pk804 account and process your PKR deposits and withdrawals. Without this data, pk804 cannot provide the service.
  • Legal obligation: Collecting and retaining identity documents, transaction records and betting history is required to comply with applicable anti-money laundering, know-your-customer and responsible gaming obligations. This data is not optional.
  • Legitimate interest: pk804 collects device and session data under legitimate interest to protect the security of the platform and prevent fraud. This processing does not override player rights and is not used for purposes beyond security and platform integrity.
  • Consent: Where pk804 sends optional marketing communications — such as promotional emails about new games or bonus offers — this is done only where you have opted in. You can withdraw marketing consent at any time by contacting support or using the unsubscribe link in any marketing email.
pk804

05Third-Party Sharing

pk804 shares personal data with third parties only where operationally necessary or legally required. The categories of third parties who may receive your data are:

  • Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT networks and card payment processors receive the minimum data necessary to execute and verify your PKR transactions. Each processor operates under their own data protection framework and handles payment data as a data processor on pk804's instructions.
  • Identity verification providers: Where document verification is required, pk804 may use a third-party KYC (Know Your Customer) service to validate CNIC authenticity. These providers process submitted documents under contractual data protection obligations and do not retain data beyond the verification purpose.
  • Game software providers: Pragmatic Play, PG Soft, Habanero and other certified game providers may receive anonymised session data (game sessions, bet counts, round results) for game performance monitoring. They do not receive your personally identifiable information.
  • Regulatory and legal authorities: pk804 will disclose personal data to law enforcement, financial intelligence units or other regulatory bodies when required to do so by applicable law or a valid legal process. pk804 will not voluntarily share data beyond what is legally required.

pk804 does not share data with social media platforms, advertising networks or data brokers at any point. Any third party that receives pk804 player data is bound by contractual data protection obligations that align with the standards set out in this policy.

06Payment Data Handling

All PKR financial transactions on pk804 pass through PCI-DSS compliant infrastructure. pk804 does not store full payment card numbers on its own servers at any point. Card data is tokenised at the point of entry and handled entirely within the payment processor's compliant environment.

For mobile wallet transactions — Easypaisa, JazzCash, NayaPay and SadaPay — pk804 records the wallet account number and the account holder name against your pk804 profile for the purpose of verifying that deposits and withdrawals are going to and coming from the same verified individual. This record is retained for the duration of your account and for five years after closure in line with financial record-keeping obligations.

Bank IBFT details including account title and IBAN are stored with equivalent security to other personal data on pk804 and are used solely for withdrawal processing and compliance verification. pk804 never initiates a debit from a bank account without an explicit deposit instruction from the account holder.

07Identity Verification

pk804 may request identity verification at multiple points in the player journey — most commonly before processing a first large withdrawal, when a deposit pattern triggers a compliance flag, or as part of a periodic account review. The documents most commonly requested are:

  • A clear photo or scan of your National Identity Card (CNIC) — both sides
  • A screenshot or statement confirming that your Easypaisa or JazzCash account is registered in the name matching your CNIC
  • In some cases, a brief selfie or live photo check to confirm the CNIC belongs to the person submitting it

Verification documents submitted to pk804 are reviewed by the compliance team and, in some cases, processed by a contracted KYC verification service. Documents are stored securely and retained for the period required by applicable AML regulations — typically a minimum of five years from account closure.

Verification requests are a routine part of responsible platform operation at pk804. A verification request does not indicate that your account is under suspicion — it is a process that applies equally to all players who reach the applicable thresholds or are selected for periodic review.

Important: pk804 will never ask you to send identity documents through social media, WhatsApp or any channel other than the official support email or the secure upload tool within your pk804 account. Any such request from another channel is not from pk804 and should be treated as a scam attempt.

08Cookies & Tracking

pk804 uses cookies — small text files placed on your device — to make the platform work correctly and to understand how it is being used. Here is a breakdown of the cookie categories in use on pk804:

Cookie Type Purpose Status
Essential / Session Keeps you logged in during a session; maintains your bet slip and game state; enables secure page navigation Required
Preference Remembers language preferences and interface settings you have configured on pk804 Required
Analytics Collects anonymised data on which pages are visited, how long sessions last and which features are used — used to improve pk804's platform. No personally identifiable information is included in analytics data. Optional
Security Detects unusual login patterns, CSRF protection and session integrity checks Required

pk804 does not place third-party advertising cookies or retargeting pixels on its pages. You will not find your pk804 visits reflected in targeted advertisements on other websites as a result of anything placed by pk804.

You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent the pk804 platform from functioning correctly — you will not be able to maintain a logged-in session. Disabling analytics cookies will not affect your ability to use pk804.

09Data Retention

pk804 does not keep your personal data indefinitely. Retention periods are tied to the reason the data was collected and any legal obligations that require it to be kept for a minimum period. The general framework is:

  • Account data (name, contact details, preferences): Retained for the duration of your active pk804 account plus five years after closure. This covers the period during which a complaint or legal claim could arise from your use of the platform.
  • Transaction records (deposits, withdrawals, bet history): Retained for a minimum of five years from the date of the transaction, in line with financial record-keeping requirements.
  • Identity documents (CNIC, verification records): Retained for a minimum of five years from account closure under AML obligations. After this period, documents are permanently deleted from pk804 systems.
  • Support correspondence: Retained for three years from the date of the last message in each conversation thread. This allows pk804 to reference prior interactions if a related issue arises.
  • Session and device logs: Retained for 12 months in active systems and then archived for a further 24 months before deletion. Used for fraud investigation purposes during that window.

When a retention period expires, pk804 permanently deletes or irreversibly anonymises the associated data. Anonymised data — records where no individual can be identified — may be retained indefinitely for aggregate statistical purposes.

10Your Rights as a pk804 Player

As a registered pk804 player, you have specific rights in relation to your personal data. These rights can be exercised by emailing support@pk804.ws with the subject line "Data Rights Request" from your registered email address or mobile number.

Right to Access

Request a copy of all personal data pk804 holds about you. pk804 will provide this in a structured, readable format within 5 business days of a verified request.

Right to Rectification

If any personal information on your pk804 account is incorrect — name spelling, contact number, etc. — you have the right to request a correction. Corrections affecting identity data may require re-verification.

Right to Erasure

Once your account is closed and any mandatory legal retention period has passed, you can request deletion of your personal data. Mandatory financial records cannot be deleted before the statutory five-year period.

Right to Restrict Processing

You can request that pk804 limits how your data is used — for example, if you believe the data being held is inaccurate while a correction is being processed. During restriction, pk804 will only store your data, not use it.

Right to Portability

You can request a machine-readable export of the personal data you provided to pk804 in a structured format. This covers registration data and account preferences — not generated records like bet history logs.

Right to Object

You can object to processing based on pk804's legitimate interests — for example, security profiling. pk804 will assess the objection and cease processing unless there are compelling reasons that override your interests.

11Children's Privacy

pk804 is strictly an 18+ platform. pk804 does not knowingly collect personal data from anyone under the age of 18. If pk804 becomes aware that personal data has been collected from a minor, the account will be closed immediately, all data associated with the account will be deleted, and any funds in the account will be returned to the verified payment source after deducting any amounts that cannot be returned due to transaction finality.

If you are a parent or guardian and believe a minor has created a pk804 account, please contact support@pk804.ws immediately. pk804 will treat all such reports as high priority and process them within 24 hours of receipt.

pk804 uses date-of-birth collection at registration and reserves the right to request CNIC verification at any point specifically for age verification purposes. These measures exist to protect minors — not as administrative barriers for adult players.

12Security Measures

pk804 applies the following technical and organisational measures to protect the personal data it holds:

  • SSL/TLS encryption: All data transmitted between your device and pk804's servers is encrypted using current TLS standards. The padlock in your browser's address bar confirms this is active on every pk804 page.
  • Access controls: Personal data is accessible only to pk804 staff who require it for their specific job function. Broad internal access to player data is not permitted. Access logs are maintained and reviewed.
  • Secure password storage: pk804 account passwords are hashed using a one-way cryptographic algorithm. Even pk804's internal systems cannot retrieve your plaintext password — which is why support staff will never ask for it.
  • Anomaly detection: pk804 monitors login events and transaction patterns for anomalies that may indicate unauthorised access. Unusual activity triggers automatic account protection measures and manual review.
  • Vendor security requirements: Third parties who process pk804 player data under contract are required to maintain equivalent security standards. This is a contractual requirement, not a recommendation.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that affects your personal information, pk804 will notify affected players through their registered contact details within the timeframe required by applicable data protection law, and will provide information on what data was affected and what steps are being taken.

13Updates to This Privacy Policy

pk804 may update this Privacy Policy when platform features, data practices or applicable law changes. When material changes are made, pk804 will notify registered players through their registered mobile number or email address before the changes take effect, with a minimum of 7 days' advance notice for significant changes.

The "Last updated" date at the top of this page will reflect the date of the most recent revision. Continuing to use pk804 after the effective date of a Privacy Policy update constitutes your acceptance of the revised policy. If the changes are not acceptable to you, you should close your account before the new policy takes effect.

Non-material changes — such as corrections to typographical errors, clarifications that do not change the substance of how data is handled, or additions of explanatory text — may be made without prior notification, though the updated date will always be changed to reflect any edit.

14How to Contact pk804 About Privacy

For any question about this Privacy Policy or how pk804 handles your personal data, you can reach the pk804 data team through the following channel:

Email: support@pk804.ws
Subject line: Privacy Policy Enquiry or Data Rights Request
Response time: Within 5 business days for all data-related requests

When submitting a data rights request, please include your registered mobile number or name so pk804 can locate your account record. For security, pk804 may ask you to confirm your identity before processing sensitive requests like data deletion or access exports.

If you submit a complaint about pk804's data handling practices and are not satisfied with the response, you have the right to escalate the complaint to the relevant data protection authority in your jurisdiction. pk804 will provide information on the applicable authority upon request.

Your privacy is protected at pk804

Play at pk804 — Where Your Data Is Safe

Now that you know exactly how pk804 handles your personal information — what is collected, why it is used, and how you can control it — you can play with full confidence. Your PKR, your data and your account are all held to the same standard: properly secured, clearly explained and yours to manage.

18+ only · Please gamble responsibly · All transactions in PKR (Rs)