pak809 Privacy Policy — How We Protect Your Personal Data

1 Introduction and Scope

1.1 This Privacy Policy ("Policy") describes how pak809 ("pak809," "we," "us," or "our") collects, uses, discloses, stores, and protects the personal data of individuals who register for and use the pak809 online gaming platform accessible at pak809.net (the "Platform").

1.2 This Policy applies to all personal data collected from Players in connection with their use of the pak809 Platform, including data collected during account registration, identity verification, gameplay, payment processing, customer support interactions, and marketing communications.

1.3 This Policy should be read in conjunction with the pak809 Terms and Conditions, which govern the overall relationship between pak809 and its Players. In the event of any conflict between this Policy and the Terms and Conditions on a matter relating to personal data, this Policy shall prevail.

1.4 pak809 recognises the importance of data privacy for its Players in Pakistan and elsewhere. The Platform handles personal data from Pakistani players — including national identity information in the form of CNIC documentation — with particular care, given the sensitive nature of financial and identity data in the context of online gaming.

2 Data Controller Identity

2.1 For the purposes of this Privacy Policy, the data controller responsible for the personal data of pak809 Platform users is the entity operating pak809.net under its international gaming licence.

2.2 All data protection enquiries, access requests, and deletion requests should be directed to the pak809 data protection contact at the email address specified in Section 14 of this Policy.

3 Personal Data We Collect

3.1 pak809 collects personal data from Players through several channels and at various stages of the account lifecycle. The categories of personal data collected are as follows:

3.1 Registration Data

When you create a pak809 account, we collect:

• Full legal name as it appears on your government-issued identity document
• Date of birth (to verify age eligibility — 21+ minimum)
• Residential address (including city, for example Karachi, Lahore, Islamabad, Faisalabad)
• Email address
• Pakistani mobile number
• Username and encrypted password

3.2 Identity Verification (KYC) Data

To comply with international licensing and anti-money laundering obligations, pak809 collects:

• Copies of government-issued photo identification (CNIC issued by NADRA, passport, or equivalent)
• Proof of residential address documents
• Source of funds documentation, where required for large transactions or regulatory purposes
• Selfie or facial verification images, where requested as part of the KYC process

3.3 Financial and Transaction Data

• Payment method details (JazzCash mobile number, EasyPaisa account, bank account details for HBL, UBL, Meezan Bank, Raast, or masked Visa/Mastercard details)
• Deposit and withdrawal history, including amounts in PKR, timestamps, and processing status
• Gaming activity data including bet history, game session records, and account balance movements

3.4 Technical and Usage Data

• IP address and approximate geographic location
• Device type, operating system, and browser information
• Session timestamps, login history, and account activity logs
• Cookies and similar tracking technologies (see Section 6)

3.5 Communications Data

• Records of communications between you and pak809 customer support
• Email correspondence history
• Records of responsible gaming tool activations and self-exclusion requests

4 How We Use Your Personal Data

4.1 pak809 uses the personal data it collects for the following specific purposes:

4.2 pak809 does not use personal data for automated decision-making that produces legal or similarly significant effects on Players, except where required for fraud prevention or regulatory compliance — in which case Players have the right to request human review of any such decision.

5 Legal Basis for Processing

5.1 pak809 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the account agreement with you, including registration, payment processing, and gameplay.
• Legal obligation: Processing required to comply with international gaming licensing requirements, anti-money laundering regulations, and Know Your Customer obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where these interests are not overridden by your privacy rights.
• Consent: Processing for optional marketing communications, where you have explicitly opted in. You may withdraw consent at any time by contacting [email protected].

6 Cookies and Tracking Technologies

6.1 pak809 uses cookies and similar tracking technologies to operate the Platform, improve user experience, and analyse usage patterns. The categories of cookies used by pak809 are as follows:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Store your preferences such as language settings, remembered login details (where enabled), and game preferences. Disabling these may affect your Platform experience.
• Analytics Cookies: Collect anonymised data about how Players navigate the Platform, which pages are visited most frequently, and where technical errors occur. This data is used solely for Platform improvement purposes.
• Security Cookies: Support fraud detection and responsible gaming monitoring by identifying unusual session behaviour or multiple simultaneous sessions from different locations.

6.2 pak809 does not use third-party advertising cookies or permit third-party advertisers to place cookies on the Platform. No browsing data from the pak809 Platform is shared with advertising networks.

6.3 You may manage cookie preferences through your browser settings. Note that disabling cookies beyond analytical preferences may impair your ability to use certain Platform features, including account login and game play.

7 Data Sharing and Disclosure

7.1 pak809 does not sell, rent, or trade your personal data. Personal data is shared only in the following limited circumstances:

• Payment processors: Financial transaction data is shared with payment processing partners (including JazzCash, EasyPaisa, Raast, and card networks) solely to process deposit and withdrawal transactions. These parties are contractually bound to process data only for the specified payment purpose.
• KYC and identity verification providers: Identity documents may be processed by third-party KYC verification services operating under strict data processing agreements with pak809.
• Game software providers: Game activity data may be shared with licensed game software providers for the purpose of game operation, RNG certification, and technical support. Game providers do not receive personally identifiable data beyond what is necessary for game operation.
• Regulatory and licensing authorities: pak809 may be required to disclose player data to its licensing authority, financial intelligence units, or law enforcement agencies in fulfilment of its regulatory obligations. pak809 will comply with valid legal requests for data disclosure.
• Professional advisers: Legal advisers, auditors, and other professional service providers may access data on a confidential, need-to-know basis where required for legal compliance or dispute resolution purposes.

8 International Data Transfers

8.1 As an internationally licensed online gaming platform serving Pakistani players, pak809 may process and store data on servers located outside of Pakistan. Where personal data is transferred internationally, pak809 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or exceeding the protections described in this Policy.

8.2 Safeguards for international transfers include contractual data processing agreements with recipients, technical security standards including encryption in transit and at rest, and restrictions on onward transfers by data recipients.

8.3 By creating and using a pak809 account, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan as described in this section.

9 Data Retention

9.1 pak809 retains personal data for the periods set out below, after which data is securely deleted or anonymised:

• Active account data: Retained for the duration of the account relationship and for a period of five years following account closure, as required by international anti-money laundering and gaming licensing regulations.
• KYC and identity documents: Retained for a minimum of five years following account closure or the last transaction date, in accordance with AML record-keeping obligations.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Customer support communications: Retained for three years from the date of the last communication, unless the communication forms part of an ongoing dispute or investigation.
• Marketing consent records: Retained for the duration of the consent period and for two years following withdrawal of consent, as evidence of the consent basis.
• Technical and usage logs: Retained for 12 months from the date of collection, then anonymised or deleted.

10 Your Data Rights

10.1 As a pak809 Player, you hold the following rights in respect of your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request":

10.2 pak809 will respond to all valid data rights requests within 30 days of receipt. Where a request is complex or numerous, this period may be extended by a further 30 days, with notification provided to you of the extension and the reason for it.

10.3 pak809 may require verification of your identity before processing a data rights request, to ensure that data is not disclosed to or deleted at the request of an unauthorised third party.

11 Security Measures

11.1 pak809 implements the following technical and organisational security measures to protect player personal data:

• AES-256 encryption for all personal and financial data stored at rest on pak809 servers
• TLS 1.3 protocol for all data transmitted between player devices and pak809 systems
• bcrypt hashing for all stored account passwords — pak809 staff cannot view or recover passwords
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Multi-factor authentication required for all pak809 staff with access to player data systems
• Automated intrusion detection and real-time security monitoring across Platform infrastructure
• Regular security audits and penetration testing by independent third-party security specialists
• Documented incident response procedures with defined 72-hour player notification timelines

11.2 While pak809 takes extensive measures to protect personal data, no internet-based system can be guaranteed to be completely secure. Players are advised to use strong, unique passwords for their pak809 accounts and to enable two-factor authentication where available.

12 Minors and Age Restriction

12.1 The pak809 Platform is strictly restricted to individuals aged 21+. pak809 does not knowingly collect personal data from individuals under the age of 21.

12.2 If pak809 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately closed and all personal data associated with the underage registration will be deleted, subject to any mandatory retention obligations that may apply under AML or licensing regulations.

12.3 If a parent or guardian believes that a minor has registered a pak809 account or provided personal data to pak809 without appropriate consent, they should contact [email protected] immediately with relevant evidence so that the matter can be investigated and the data deleted.

13 Changes to This Privacy Policy

13.1 pak809 reserves the right to update this Privacy Policy at any time to reflect changes in applicable regulations, licensing requirements, or Platform operations. Material changes to this Policy will be communicated to registered Players via the email address registered to their account, with a minimum of 14 days' advance notice before the changes take effect.

13.2 The effective date of the current version of this Policy is stated at the top of this document and in the page metadata. The most current version of this Policy is always accessible at pak809.net/privacy-policy.

13.3 Your continued use of the pak809 Platform following the effective date of any amended Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the updated Policy, you may request account closure in accordance with the pak809 Terms and Conditions.

14 Contact and Data Requests

14.1 All privacy-related enquiries, data access requests, rectification requests, deletion requests, and complaints should be addressed to the pak809 data protection team using the contact details below.

14.2 This Privacy Policy was last updated on 1 January 2026 and is effective as of that date. pak809 is committed to handling all personal data for its Pakistani players with the diligence, transparency, and security that is expected of a responsible, internationally licensed gaming platform.