Privacy Policy — pk6816

1 Introduction

This Privacy Policy ("Policy") is issued by pk6816, accessible at https://pk6816.cam ("pk6816", "we", "us", "our"). It sets out how we collect, handle, store, use and protect personal data provided by or collected from individuals ("Users", "you") who register an account, visit the Platform or otherwise interact with our services.

pk6816 is an English-language online entertainment information platform targeting adult users in Pakistan. We are committed to handling personal data responsibly, minimising the data we collect to what is genuinely necessary, and being transparent about how that data is used.

By creating an account on pk6816 or continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and consent to data processing as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and close your account.

2 Definitions

For the purpose of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could be used to identify a living individual, directly or indirectly — including but not limited to name, email address, postal address, national identity number, IP address and payment details.
• "Processing" means any operation performed on Personal Data, whether automated or manual — including collection, recording, storage, use, disclosure, erasure and destruction.
• "Data Controller" refers to pk6816, which determines the purposes and means of Processing Personal Data collected through the Platform.
• "Data Subject" means any identified or identifiable natural person whose Personal Data is Processed by pk6816 — in practice, any registered User or website visitor.
• "KYC" (Know Your Customer) refers to identity and age verification procedures required by anti-money laundering (AML) obligations and platform eligibility rules before a User may access full Platform functionality.
• "Third Party" means any individual, company or body other than pk6816 and the Data Subject, including technology partners, payment processors and analytics providers.
• "Cookie" means a small data file placed on your device when you visit the Platform, used to support Platform functionality, session management and analytics.

3 Personal Data We Collect

pk6816 collects personal data in the categories described below. The specific data collected depends on how you interact with the Platform.

3.1 Registration Data

When you create an account, we collect: full legal name; date of birth; email address; residential address (city, country); chosen username; and any other information you voluntarily provide during the registration flow.

3.2 Identity Verification (KYC) Data

To fulfil age verification and AML obligations, we may collect: a copy of your Computerised National Identity Card (CNIC) or passport; proof of residential address (such as a utility bill or bank statement); and a selfie or liveness-check image for facial comparison with your identity document. This data is processed solely for verification purposes.

3.3 Financial Data

When you make deposits or withdrawals, we collect transactional information including: payment method type; transaction amounts in PKR; payment reference numbers; and bank account or wallet identifiers where submitted. Full payment card or bank account credentials are processed only by authorised payment technology providers — pk6816 does not store full card numbers.

3.4 Usage & Technical Data

When you access the Platform, we automatically collect: IP address; browser type and version; device type and operating system; session timestamps and duration; pages visited; game or betting activity logs; and referring URL. This data is used for security monitoring, fraud detection and Platform improvement.

3.5 Communications Data

When you contact our support team via Live Chat or email, we retain a record of the communication including the content, timestamps and outcomes. This enables us to maintain accurate support history and resolve ongoing queries effectively.

3.6 Preferences & Consent Records

We record your marketing communication preferences, responsible gambling tool settings (such as deposit limits and self-exclusion elections) and any consent you provide or withdraw in relation to data processing activities.

4 How We Collect Personal Data

Personal data is collected through the following methods:

• Directly from you: During registration, KYC submission, deposit/withdrawal requests, support interactions and optional preference settings within your Account.
• Automatically through Platform use: Via server logs, session tracking and cookies as described in Section 10.
• From Third-Party verification services: Where we engage identity verification technology providers to cross-reference submitted documents, we may receive a verification outcome and associated metadata.
• From payment processors: Transaction confirmation and status data is received from payment technology partners to reconcile deposit and withdrawal activity on your Account.

5 Data Processing — How We Use Your Data

pk6816 processes your personal data for the specific, legitimate purposes set out in the table below. We do not use personal data for any purpose incompatible with the original purpose for which it was collected without obtaining your further consent.

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Legal Basis for Processing

pk6816 processes personal data on the following legal bases, which are referenced in the processing table in Section 5:

1. Contract Performance: Processing is necessary to fulfil our contractual obligations to you — including registering your account, processing payments and providing access to Platform services.
2. Legal Obligation: Processing is required to comply with applicable legal obligations, including KYC identity verification, age verification, AML monitoring and record-keeping requirements under the laws of the jurisdiction in which pk6816 operates.
3. Legitimate Interest: Processing is necessary for our legitimate business interests, including fraud prevention, Platform security, responsible gambling compliance and improving user experience — provided those interests are not overridden by your fundamental rights and freedoms.
4. Consent: Where we send optional marketing communications or carry out non-essential data processing activities, we do so only on the basis of your explicit, freely given consent, which may be withdrawn at any time.

7 Data Sharing & Third Parties

pk6816 does not sell your personal data to third parties. We may share personal data only in the following limited circumstances:

• Technology and Service Providers: We engage third-party providers for identity verification, payment processing, game delivery, live dealer services and Platform analytics. These providers act as data processors and are contractually bound to process data only on our instructions and to implement appropriate security measures. They may not use your data for their own independent purposes.
• Payment Processors: When you make a deposit or withdrawal, relevant transaction data is shared with our payment technology partners to complete the transaction. References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah in this context are for user familiarity only — these providers do not endorse gambling and data sharing with them is solely for payment processing purposes.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, courts or other competent authorities where required or authorised by applicable law — including in connection with AML investigations or fraud reporting.
• Corporate Transactions: In the event of a merger, acquisition or business transfer involving pk6816, personal data may be transferred as part of that transaction, subject to equivalent data protection obligations being imposed on the receiving entity.

8 Data Retention

pk6816 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active Account Data: Personal data associated with an active Account is retained for the duration of the Account relationship and for a period following Account closure as required by the applicable legal and AML retention obligations.
• KYC and Identity Documents: Identity verification documents submitted during KYC are retained for the minimum period required under AML regulations in the relevant jurisdiction, typically a minimum of five years from the date of submission or Account closure, whichever is later.
• Transaction Records: Financial transaction records are retained for a minimum of five years from the date of each transaction to satisfy AML and accounting obligations.
• Support Communications: Customer support records are retained for a period sufficient to manage ongoing service delivery and resolve disputes — typically up to three years from the date of the most recent interaction.
• Consent Records: Records of consent given or withdrawn are retained for a period sufficient to demonstrate compliance with consent obligations.

When personal data is no longer required, it is securely deleted or anonymised in a manner that prevents re-identification.

9 Data Security

pk6816 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:

• Transport Layer Security (TLS/SSL) encryption across all Platform connections, including during login, registration, payment and KYC document upload flows;
• Encrypted storage of sensitive personal data at rest, including identity document data and financial information;
• Two-Factor Authentication (2FA) availability for User Accounts to reduce the risk of unauthorised login;
• Strict access controls ensuring that personal data is accessible only to authorised staff members and service providers who require it for their specific function;
• Regular review and testing of security infrastructure to identify and remediate vulnerabilities;
• Incident response procedures to detect, investigate and notify relevant parties in the event of a data security breach where required by applicable law.

10 Cookies & Tracking Technologies

pk6816 uses cookies and similar tracking technologies to support essential Platform functionality, session management and analytics. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are required for the Platform to function correctly. They enable session authentication, security checks and basic navigational functions. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: These cookies remember your preferences — such as language settings, responsible gambling limit selections and display preferences — to provide a more personalised experience across sessions.
• Analytics Cookies: These cookies collect aggregated, anonymised data about how users navigate the Platform. This information helps us understand usage patterns and improve Platform performance and content. Analytics data does not identify individual users.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access and suspicious login patterns. These are strictly necessary for Platform integrity.

You may adjust your browser settings to block or delete cookies, but please note that disabling strictly necessary cookies will affect your ability to log in and use the Platform. Marketing or tracking cookies from third-party services are not used by pk6816 without explicit user consent.

11 User Rights

Depending on the data protection laws applicable to you, you may hold the following rights in relation to your personal data held by pk6816. These rights are subject to applicable exemptions, including legal retention obligations.

To exercise any of the rights listed above, please submit a written request to [email protected] with sufficient information to identify your Account. We will acknowledge your request within 5 business days and aim to respond substantively within 30 days. We may request identity verification before processing a rights request to prevent unauthorised disclosure.

Where your request involves deletion of data that we are legally required to retain (for example, KYC records under AML regulations), we will explain the relevant retention obligation and, where possible, restrict further use of the data pending the minimum mandatory retention period.

12 KYC, Identity Verification & Document Handling

pk6816 operates a Know Your Customer (KYC) verification process to confirm the identity and age of registered Users and to comply with anti-money laundering (AML) obligations. The following principles govern how we handle KYC data:

1. Secure Submission: Identity documents must be submitted only through the Platform's secure HTTPS KYC verification flow. Never send sensitive documents through unsecured chat, personal email or social media channels.
2. Document Authenticity: All submitted documents must be genuine, unaltered originals belonging to the registered User. Submission of forged or altered documents is a criminal offence.
3. Access Restriction: KYC documents are accessible only to authorised compliance personnel and, where required, authorised third-party verification providers. Documents are not shared with any other third party except as required by law.
4. Retention: KYC documents are retained for the minimum period required by AML regulations applicable in the relevant jurisdiction — typically a minimum of five years from Account closure or document submission, whichever is later.
5. Pakistani Identification: For Pakistani users, accepted primary identity documents include a valid CNIC (Computerised National Identity Card) or a valid passport. Proof of address may include a recent utility bill or bank statement bearing your registered name and address.

13 Payment Data & Privacy

When you use payment methods available in the pk6816 cashier, the following data privacy principles apply:

• Payment transactions are processed by authorised third-party payment technology providers. pk6816 does not store full bank account numbers, card numbers or full mobile wallet credentials on its own servers.
• Transaction metadata — including transaction reference numbers, amounts in PKR, method type and status — is retained by pk6816 for AML compliance and Account reconciliation purposes.
• References to payment providers familiar to Pakistani users — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are made purely for user context. These providers do not endorse gambling. Data shared with them in a payment context is governed by their own privacy policies, which users should review independently.
• Payment data is shared with payment processors solely to complete the requested transaction and for fraud prevention monitoring. It is not used for marketing or any secondary commercial purpose.

14 Children's Privacy

The pk6816 Platform is strictly for adults aged 18 years or above (or the higher minimum required by the operator's license jurisdiction). The Platform is not directed at minors and we do not knowingly collect personal data from individuals under the applicable minimum age.

Where we become aware or have reasonable grounds to believe that a minor has registered an Account or submitted personal data, we will immediately close the Account, void any associated wagers or balances, and securely delete the data. If you believe a minor has accessed the Platform using your credentials or another Account, please contact support immediately at [email protected].

15 Amendments to This Privacy Policy

pk6816 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law or Platform features. Where material changes are made, we will take reasonable steps to notify registered Users through email or an in-Platform notification at least 7 days before the changes take effect, except where immediate amendment is required by law.

The effective date at the top of this Policy reflects the date on which the current version was last reviewed. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy.

The current version of this Policy is always available at https://pk6816.cam/privacy-policy. We recommend reviewing it periodically.

16 Contact Us — Privacy Enquiries

If you have any questions, concerns or requests relating to this Privacy Policy or the personal data we hold about you, please contact us through the following channels. To exercise a data rights request (Section 11), please submit your request in writing with sufficient Account identification details.

This Privacy Policy was last reviewed on 1 January 2026 and supersedes all previous versions. The pk6816 Terms & Conditions, available at /terms-conditions, apply alongside this Policy.