pinkpk Privacy Policy — Your Data, Your Rights

This Privacy Policy ("Policy") describes how pinkpk ("we", "us", "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "your", "player") who access or use the pinkpk online gaming platform at pinkpk.org, including all associated mobile applications, customer support channels, and promotional communications.

pinkpk is Pakistan's premier online casino and sports betting platform, serving players across Karachi, Lahore, Islamabad, Faisalabad, and beyond. We take our data protection responsibilities seriously and are committed to handling your personal information with care, transparency, and respect in accordance with internationally recognised data protection principles.

By registering an account with pinkpk, accessing the platform, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described herein. If you do not agree with any part of this Policy, you must cease using the pinkpk platform immediately.

For the purposes of applicable data protection legislation, pinkpk acts as the data controller in respect of personal data collected from players and visitors through the pinkpk.org platform. As the data controller, pinkpk determines the purposes for which and the means by which personal data is processed.

All data protection enquiries, subject access requests, and privacy-related complaints should be directed to the pinkpk Data Protection team using the contact details provided in Section 15 of this Policy. We are committed to addressing all privacy-related communications promptly and in accordance with applicable legal requirements.

Where pinkpk engages third-party service providers to process personal data on its behalf, those providers act as data processors and are bound by written data processing agreements that require them to implement appropriate technical and organisational security measures and to process data only in accordance with pinkpk's documented instructions.

pinkpk collects personal data across several categories depending on the nature of your interaction with the platform. The following table provides a complete overview of the categories of personal data we collect and the contexts in which they are typically obtained:

pinkpk does not intentionally collect special categories of sensitive personal data (such as data relating to health, religion, or political opinions). However, where a player voluntarily discloses health-related information in the context of a responsible gaming support request (for example, disclosing a gambling addiction), that information will be treated with the highest level of confidentiality and used solely to provide appropriate support.

pinkpk collects personal data through the following primary means:

• Direct Submission: Information you actively provide during account registration, KYC document upload, deposit and withdrawal requests, customer support interactions, and completion of responsible gaming tools such as self-exclusion or deposit limit requests.
• Automated Technical Collection: Data collected automatically when you access the pinkpk platform, including IP address, device identifiers, browser fingerprint, cookie data, and session logs. This data is collected via server logs, cookies, and similar tracking technologies as described in Section 11.
• Payment Processors: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT, limited transaction confirmation data is shared with pinkpk by the respective payment processor to confirm the transaction status and credited amount.
• Third-Party Identity Verification Providers: Where pinkpk uses licensed third-party KYC and AML screening services to verify the identity documents you submit, those providers may return identity match scores, watchlist screening results, and document authenticity assessments to pinkpk.
• Game Providers: Third-party game providers (such as PG Soft, Pragmatic Play, and Evolution Gaming) operating their software within the pinkpk platform may pass game session data back to pinkpk for the purposes of displaying game history, calculating bonus wagering progress, and resolving disputes.

pinkpk processes your personal data for the following specific and documented purposes:

1. Account Registration and Management: To create and maintain your pinkpk player account, verify your eligibility to register, and provide you with access to all platform features.
2. Identity and Age Verification (KYC): To verify that you are who you claim to be, that you meet the minimum age requirement of 21 years, and that your account is not being used for money laundering or fraudulent activity.
3. Payment Processing: To facilitate PKR deposits and withdrawals via your chosen local payment method, including JazzCash, EasyPaisa, and Pakistani bank transfers, and to maintain accurate financial records.
4. Provision of Gaming Services: To operate and deliver the casino, slots, live dealer, cricket betting, and all other wagering products available on the pinkpk platform.
5. Responsible Gaming Compliance: To monitor gaming activity for indicators of problem gambling, to administer self-exclusion and deposit limit tools, and to comply with responsible gaming obligations under our licensing conditions.
6. Fraud and Security Monitoring: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, account takeover, and other security threats to pinkpk and its players.
7. Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance with account-related matters in both Urdu and English.
8. Marketing Communications: Where you have provided your explicit consent, to send you promotional offers, bonus notifications, and platform updates by email or SMS. You may withdraw this consent at any time.
9. Legal and Regulatory Compliance: To comply with applicable anti-money laundering (AML) laws, licensing requirements, tax obligations, court orders, and requests from competent regulatory or law enforcement authorities.
10. Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the functionality, user experience, and product offering of the pinkpk platform.

pinkpk processes your personal data only where a valid legal basis exists for doing so. The primary legal bases relied upon are as follows:

• Contractual Necessity: Processing that is necessary to perform the contract between you and pinkpk — including account registration, payment processing, game delivery, and customer support — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable law — including KYC/AML verification, regulatory reporting, and responding to lawful authority requests — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing conducted for fraud prevention, platform security, responsible gaming monitoring, and anonymised platform analytics is carried out on the basis of pinkpk's legitimate interests, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for the purpose of direct marketing communications is carried out exclusively on the basis of your freely given, specific, informed, and unambiguous consent. You retain the right to withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

pinkpk does not sell, rent, or trade your personal data to any third party. We may share your personal information only in the following limited and documented circumstances:

• Payment Processors: Your payment details are shared with the relevant local payment provider (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay) or USDT exchange partner solely for the purpose of processing your deposit or withdrawal transaction.
• KYC and AML Compliance Providers: Identity verification and document authentication data may be shared with licensed third-party KYC providers and international AML screening databases as required under our licensing obligations.
• Game Technology Providers: Your game session activity is shared with the relevant third-party game provider (e.g., PG Soft, Pragmatic Play, Evolution Gaming) to the extent necessary to operate their game content within the pinkpk platform.
• IT Infrastructure and Cloud Providers: pinkpk uses reputable cloud hosting and cybersecurity service providers to operate its platform. These providers may process personal data on pinkpk's behalf and are bound by strict data processing agreements.
• Legal and Regulatory Authorities: pinkpk may disclose personal data to competent law enforcement agencies, courts, tax authorities, or gaming regulators where required to do so by applicable law, valid legal process, or our licensing conditions.
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all of pinkpk's assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections being maintained.

pinkpk retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with pinkpk's data destruction procedures. Where data must be retained beyond the standard period due to ongoing legal proceedings or regulatory investigation, it will be held in a restricted state and processed only for the purpose of those proceedings.

pinkpk implements a comprehensive, multi-layered information security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data in transit between your device and pinkpk's servers is encrypted using industry-standard TLS 1.3 protocols, ensuring that your login credentials, financial data, and personal information cannot be intercepted during transmission.
• Encryption at Rest: Sensitive personal data stored in pinkpk's databases — including identity documents, payment details, and account credentials — is encrypted at rest using AES-256 encryption standards.
• Two-Factor Authentication (2FA): pinkpk offers optional two-factor authentication for player accounts, providing an additional layer of protection against unauthorised account access.
• Role-Based Access Controls: Access to player personal data within pinkpk's internal systems is strictly limited to personnel who require that access to perform their job functions. All access is logged and subject to periodic review.
• Regular Security Audits: pinkpk's platform undergoes regular penetration testing and security audits conducted by qualified independent cybersecurity professionals.
• Incident Response Procedures: pinkpk maintains documented data breach response procedures. In the event of a personal data breach that poses a risk to your rights and freedoms, pinkpk will notify affected players without undue delay in accordance with applicable regulatory requirements.

Whilst pinkpk takes all reasonable and practicable measures to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your pinkpk account login credentials. If you suspect that your account has been compromised, please contact our 24/7 support team immediately via live chat or email.

Subject to applicable law and certain conditions, you hold the following rights in respect of your personal data held by pinkpk:

• Right of Access: You have the right to request a copy of the personal data that pinkpk holds about you, together with information about how it is processed. pinkpk will respond to verified access requests within 30 calendar days.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held in your pinkpk account. Many data fields can be updated directly through your account settings; others may require verification.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. This right is subject to overriding legal retention obligations.
• Right to Restriction: You may request that pinkpk restricts the processing of your personal data in certain circumstances, such as while a dispute regarding data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on pinkpk's legitimate interests, including profiling for responsible gaming monitoring purposes. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact the pinkpk Data Protection team using the contact details in Section 15. We may request proof of identity before processing your request to ensure your data is not disclosed to an unauthorised third party. All requests will be handled free of charge unless they are manifestly unfounded or excessive.

pinkpk uses cookies and similar tracking technologies on its platform to enhance your gaming experience, maintain session continuity, and collect analytics data. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the basic functioning of the pinkpk platform, including maintaining your login session, remembering your language preference, and ensuring platform security. These cookies cannot be disabled without impacting core functionality.
• Performance and Analytics Cookies: Used to collect anonymised data on how players navigate and interact with the pinkpk platform. This data helps us identify areas for improvement and optimise the player experience. These cookies do not identify you personally.
• Functional Cookies: Allow the platform to remember your preferences (such as game lobby layout and notification settings) to provide a more personalised experience across sessions.
• Marketing Cookies: Used only where you have provided explicit consent, to track whether promotional campaigns are relevant and effective. Marketing cookies are not used to share your data with external advertising networks.

You can manage your cookie preferences through the Cookie Settings panel accessible from the footer of the pinkpk platform. You may also control cookies through your browser settings; however, disabling strictly necessary cookies may affect your ability to use pinkpk's core services. Cookies set by third-party game providers are subject to those providers' own cookie policies.

The pinkpk platform is strictly intended for adults aged 21 years and above. pinkpk does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory step in the pinkpk account registration and KYC process.

If pinkpk becomes aware that personal data has been collected from an individual under 21 years of age, the following actions will be taken immediately:

• The associated account will be permanently closed without further notice.
• All personal data associated with the account will be securely deleted, except where retention is required by applicable law.
• Any funds deposited by the underage individual will be returned via the original payment method following identity verification of the true account holder.
• The incident will be reported to relevant authorities where required by applicable law or licensing conditions.

Parents and guardians who have reason to believe that a minor has registered a pinkpk account or accessed the platform are strongly encouraged to contact pinkpk's support team immediately. pinkpk also recommends the use of parental control software to restrict access to online gaming platforms for minors.

As an internationally licensed online gaming platform, pinkpk may transfer your personal data to, and process it in, countries other than the country in which you reside — including countries that may not provide the same level of data protection as your home jurisdiction.

Where such international transfers occur, pinkpk ensures that appropriate safeguards are in place to protect your personal data, including:

• Transferring data only to countries recognised as providing an adequate level of data protection by relevant international standards.
• Where transfers are made to countries without an adequacy determination, implementing standard contractual data protection clauses with the receiving entity that impose equivalent data protection obligations.
• Ensuring that third-party processors located in other jurisdictions are bound by data processing agreements requiring them to maintain security standards equivalent to those applied by pinkpk.

By using the pinkpk platform, you acknowledge and consent to the transfer of your personal data to pinkpk's international processing infrastructure as described in this section. If you would like further information about the specific safeguards applicable to any international transfer of your data, please contact the pinkpk Data Protection team.

pinkpk reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or platform functionality. The most current version of this Policy will always be available at pinkpk.org/privacy-policy.

The "Last Updated" date displayed at the top of this document indicates when the most recent revision was made. For material changes that significantly affect how we process your personal data or that impact your rights under this Policy, pinkpk will take reasonable steps to notify registered players in advance — typically by email to your registered address or via a prominent notification on the platform.

Your continued use of the pinkpk platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes and your agreement to be bound by the updated terms. If you do not agree with any changes to this Policy, you should cease using the pinkpk platform and may close your account in accordance with our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way pinkpk processes your personal data, you are welcome to contact our Data Protection team through any of the following channels:

• Live Chat: Available 24/7 through your pinkpk account. Our Pakistani-based support agents handle data protection enquiries in both English and Urdu.
• Email: [email protected] (plain text address — not a clickable link; please copy and paste into your email client)

When submitting a data rights request, please include your full registered name, your registered email address, and a clear description of the right you wish to exercise or the concern you wish to raise. To protect the security of your personal data, pinkpk may request additional identity verification before processing your request.

pinkpk aims to acknowledge all privacy-related communications within 5 business days and to provide a substantive response within 30 calendar days. For complex requests, we may extend this period by a further 30 days; in such cases we will notify you of the extension and the reasons for it.