pk15 Privacy Policy — Your Data, Your Rights, Our Obligations

This Privacy Policy ("Policy") is published by pk15 ("we", "us", "our", "the Platform") and applies to all personal data collected through the pk15 website at pk15.bid, its sub-pages, mobile browser interface, account management portal, live chat support, and any other service or feature offered by pk15 to registered and prospective users ("you", "Player", "User").

pk15 is committed to handling personal data responsibly, transparently, and in compliance with internationally recognised data protection principles. This Policy describes the categories of data we collect, the purposes for which we process it, the legal bases upon which processing rests, the rights available to you as a data subject, and the technical and organisational measures in place to keep your information secure.

By registering a pk15 account, accessing the pk15 login portal, or using any feature of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, please refrain from using the pk15 Platform and contact our support team to close your account.

For the purposes of this Privacy Policy, pk15 acts as the data controller in respect of all personal data collected through the Platform. As data controller, pk15 determines the purposes and means of processing personal data submitted by Users in the course of registration, account use, and any other interaction with the Platform.

All data-related enquiries, access requests, and complaints should be directed to the pk15 support team via the live chat function available at pk15.bid, or in writing to the contact email address displayed on this page. pk15 undertakes to respond to all substantive data subject enquiries within 30 calendar days of receipt.

pk15 collects personal data in two principal categories: data that you provide directly, and data that is collected automatically when you interact with the Platform. The specific categories of data collected are as follows:

3.1 Data You Provide Directly

3.2 Data Collected Automatically

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, game sessions accessed, time spent on Platform, login timestamps, and navigation paths.
• Transaction Data: Deposit and withdrawal history, bet records, game outcome logs, and bonus usage records.
• Cookie and Tracking Data: Session cookies, preference cookies, and analytical data as described in Section 9 of this Policy.

pk15 collects personal data through the following primary mechanisms:

• Direct Input: Information you enter during account registration at pk15, profile updates, KYC verification submissions, deposit and withdrawal requests, support chat interactions, and responsible gaming tool configuration.
• Automated Collection: Technical and usage data gathered automatically via server logs, browser cookies, session tracking, and analytical tools when you access the Platform.
• Third-Party Sources: Identity verification and anti-fraud data received from licensed KYC and AML service providers, payment confirmation data from JazzCash, EasyPaisa, HBL, and other payment processors, and blockchain transaction data in respect of USDT TRC20 and Bitcoin transactions.

pk15 does not purchase personal data lists, scrape data from third-party social platforms, or collect data from Users through covert means. All data collection is limited to what is necessary for the purposes described in this Policy.

pk15 processes personal data only where a valid legal basis exists under applicable data protection legislation. The legal bases relied upon by pk15 are as follows:

• Contractual Necessity: Processing required to perform the contract between you and pk15, including managing your account, processing deposits and withdrawals, and providing access to games and the sportsbook.
• Legal Obligation: Processing necessary to comply with legal obligations applicable to pk15 as an internationally licensed gaming operator, including KYC verification, anti-money laundering (AML) screening, and regulatory reporting requirements.
• Legitimate Interests: Processing conducted for legitimate business interests of pk15, including fraud prevention, platform security monitoring, customer support quality management, and responsible gaming programme administration, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing of optional data — such as non-essential cookies and marketing preference data — where you have provided explicit, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

pk15 processes personal data for the following specific purposes, each of which is supported by one or more of the legal bases described in Section 5:

• Creating, verifying, and managing your pk15 player account, including authentication at the pk15 login portal.
• Processing deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, USDT TRC20, and Bitcoin, including confirming payment ownership and preventing payment fraud.
• Conducting identity and age verification to enforce the pk15 21+ age policy and comply with applicable KYC obligations.
• Performing anti-money laundering screening and detecting suspicious transactions or patterns consistent with financial crime.
• Providing and improving customer support services, including live chat, account recovery, and dispute resolution.
• Administering bonuses, promotions, and the pk15 VIP loyalty programme in accordance with applicable terms and conditions.
• Monitoring game sessions and platform usage to detect and investigate cheating, collusion, and violations of the pk15 Terms & Conditions.
• Administering responsible gaming tools including deposit limits, self-exclusion, and cooling-off periods.
• Analysing Platform performance and user behaviour to improve technical functionality and user experience.
• Sending transactional communications including account notifications, payment confirmations, and security alerts.

pk15 does not sell, rent, trade, or otherwise transfer your personal data to third parties for commercial purposes. Data sharing is limited to the following categories of recipients and circumstances:

7.1 Authorised Service Providers

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and cryptocurrency exchange service providers receive payment data necessary to process deposits and withdrawals on your behalf.
• KYC & AML Providers: Licensed identity verification and anti-money laundering screening services receive the minimum identity data necessary to fulfil verification checks required under our gaming licence.
• Game Content Providers: Casino game providers such as Pragmatic Play, NetEnt, and others receive session tokens and game outcome data for technical integration purposes. No unnecessary personal data is shared with game providers.
• Platform Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity service providers process technical data in the course of maintaining the pk15 Platform's infrastructure.

7.2 Legal & Regulatory Disclosure

pk15 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or our licensing authority's regulatory requirements. Such disclosures will be made only to the extent necessary and with appropriate safeguards where permitted.

7.3 International Data Transfers

As an internationally operating platform, pk15 may transfer personal data to service providers located outside Pakistan. Where such transfers occur, pk15 ensures that appropriate safeguards are in place — including contractual data protection clauses consistent with internationally recognised standards — to maintain the security and integrity of your personal data throughout any transfer.

pk15 recognises that a significant and growing segment of Pakistani players prefer cryptocurrency deposits for the financial privacy they afford. The following data practices apply specifically to cryptocurrency transactions on the pk15 Platform:

• USDT TRC20 and Bitcoin deposit wallet addresses are generated uniquely per transaction and are not reused across sessions, limiting the linkability of individual transactions.
• Blockchain transaction hashes and wallet addresses are recorded in your pk15 account transaction history for the purpose of dispute resolution, AML compliance, and withdrawal verification.
• pk15 does not proactively disclose cryptocurrency transaction data to third parties except where required to do so by applicable law or our licensing authority.
• Cryptocurrency deposits and withdrawals carry no platform fee at pk15. Network gas or transaction fees are borne by the User and do not constitute data processing charges.

pk15 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your session security, and to understand how users interact with the Platform. The categories of cookies used by pk15 are as follows:

• Strictly Necessary Cookies: Essential for the operation of the pk15 Platform, including maintaining your logged-in session, storing security tokens, and enabling core functionality. These cookies cannot be disabled without disrupting your use of the Platform.
• Functional Cookies: Preserve your preferences such as language selection, display settings, and responsible gaming limits across sessions. These enhance your experience but are not essential to core functionality.
• Analytical Cookies: Used to analyse aggregate and anonymised usage patterns on the Platform to identify areas for improvement. No analytical data is linked to identifiable individuals without explicit consent.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair your ability to use the pk15 Platform including the login portal. pk15 does not use advertising or behavioural tracking cookies for external advertising purposes.

pk15 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to comply with applicable legal and regulatory obligations. The following retention periods apply as a general guideline:

• Account Data: Retained for the duration of your active pk15 account relationship, plus a period of five (5) years following account closure, as required for regulatory compliance.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction in accordance with anti-money laundering record-keeping obligations.
• KYC Verification Documents: Retained for a minimum of five (5) years from account closure or the conclusion of any associated investigation, whichever is later.
• Support Communications: Retained for three (3) years from the date of each interaction unless related to an open dispute or investigation.
• Technical and Usage Logs: Retained for a maximum of twelve (12) months from the date of generation for security and fraud analysis purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with pk15's data destruction procedures. Data retained for legal compliance purposes is not used for any commercial or marketing activities during the retention period.

As a registered User of pk15, you hold the following rights in respect of your personal data. These rights may be exercised by contacting the pk15 support team at any time via live chat or the contact email displayed on this page. pk15 will respond to all valid requests within 30 calendar days.

pk15 implements a multi-layered technical and organisational security framework to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. The security measures in place include:

• Encryption in Transit: All data transmitted between your device and the pk15 Platform is encrypted using 256-bit TLS (Transport Layer Security). The presence of HTTPS in the pk15 address bar confirms active encryption at all times.
• Encryption at Rest: Sensitive data held in pk15's database systems, including identity documents and financial records, is encrypted at rest using AES-256 standard encryption.
• Password Security: pk15 account passwords are stored exclusively as salted bcrypt hashes. No member of the pk15 team can view your plain-text password under any circumstance.
• Access Controls: Internal access to personal data is restricted to authorised personnel on a strict need-to-know basis, with role-based access controls and comprehensive access audit logging.
• Intrusion Detection: The pk15 Platform is monitored continuously for suspicious access patterns, unusual transaction volumes, and indicators of external attack attempts.
• Two-Factor Authentication: pk15 offers SMS-based 2FA for all accounts. Activating 2FA is strongly recommended and provides an additional security layer beyond password-based access.

Notwithstanding these measures, no system can guarantee absolute security against all potential threats. In the event of a data breach that presents a high risk to affected Users, pk15 will notify affected individuals in accordance with applicable data protection notification obligations.

The pk15 Platform is strictly intended for adults aged 21 years and above. pk15 does not knowingly collect personal data from individuals below the age of 21. If pk15 discovers that personal data has been collected from a person below the minimum age, we will immediately close the associated account, delete the relevant data (except to the extent retention is required by applicable law), and void all associated transactions.

If you are a parent or guardian and believe that a person below the age of 21 has registered on pk15 using false age information, please contact our support team immediately. We take underage access seriously and will act promptly upon receiving any credible report of underage account activity.

pk15 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform functionality, or our data processing practices. The effective date at the top of this Policy will be updated whenever a material change is made.

Where changes to this Policy are considered material — meaning they significantly affect the way personal data is collected, used, or shared — pk15 will take reasonable steps to notify registered Users of the change before it takes effect. Notification methods may include an in-account alert, email notification to your registered address, or a prominent notice on the pk15 homepage.

Continued use of the pk15 Platform following the publication of any revised Privacy Policy constitutes acceptance of the updated Policy in its entirety. If you do not agree with any revised provision, please cease using the Platform and contact pk15 support to arrange account closure and the return of any withdrawable balance.

The most current version of this Privacy Policy is always accessible at pk15.bid/privacy-policy. We encourage Users to review this page periodically to remain informed about how pk15 protects your personal data.