pk58 Privacy Policy — Your Data, Protected & Explained

1. Introduction

This Privacy Policy ("Policy") is published by pk58 ("pk58", "we", "us", "our"), the operator of the online gaming platform accessible at pk58.bid. This Policy applies to all individuals who access or use the pk58 website, register an account, place bets or wagers, participate in promotions, contact our support team, or otherwise interact with any component of the pk58 platform ("you", "your", "Player", "User").

pk58 is committed to protecting the privacy and personal data of all users, including Pakistani players accessing the platform from Karachi, Lahore, Faisalabad, Islamabad, Rawalpindi, and other cities across Pakistan. We recognise that personal data is a sensitive asset and that players have a right to know how their information is used. This Policy is designed to provide complete, honest, and understandable disclosure of our data practices.

By registering an account on pk58 and accepting our Terms and Conditions, you acknowledge that you have read this Privacy Policy and consent to the collection, processing, and use of your personal data as described herein. If you do not agree with this Policy, you must not create or continue to use a pk58 account.

2. Personal Data We Collect

pk58 collects the following categories of personal data from users. Collection occurs at various stages of the player relationship as indicated:

2.1 Registration Data

• Full legal name as it appears on government-issued identification;
• Date of birth (for age verification — 21+ required);
• Pakistani mobile number (for OTP verification and account communication);
• Email address (where provided at registration);
• Chosen username and account password (stored in hashed, non-reversible format);
• Country of residence and city (Karachi, Lahore, Faisalabad, Islamabad, or other).

2.2 Identity Verification (KYC) Data

• CNIC (Computerised National Identity Card) number and associated details for Pakistani players;
• Photographs or scanned images of CNIC or other government-issued identification documents;
• Proof of address documentation (where requested);
• Source of funds documentation (where requested for AML compliance purposes).

2.3 Financial Data

• JazzCash or EasyPaisa account numbers or mobile wallet identifiers;
• Bank account details (account name, account number, IBAN) for HBL, UBL, Meezan Bank, or other bank transfers;
• USDT TRC20 wallet addresses where applicable;
• Deposit and withdrawal transaction histories including amounts in PKR, timestamps, and method used;
• Gaming transaction histories including bet amounts, game titles, outcomes, and net win/loss records.

2.4 Technical and Usage Data

• IP address at the time of each login and session;
• Device type, operating system, and browser type;
• Session duration and timing records;
• Pages visited and features accessed within the pk58 platform;
• Cookies and similar tracking technologies as described in Section 9.

2.5 Communications Data

• Content of live chat support conversations;
• Email correspondence with pk58 support including subject, content, and metadata;
• Records of SMS OTP delivery for account verification and 2FA;
• Responsible gaming tool settings and self-exclusion requests.

3. How We Collect Your Data

pk58 collects personal data through the following means:

• Direct Submission: Information you voluntarily provide during account registration, KYC verification, payment setup, support interactions, and any other process where you input data into the pk58 platform;
• Automated Collection: Technical data collected automatically when you access pk58.bid, including IP address, device information, session data, and cookie data through standard web server logging and analytics tools;
• Transaction Processing: Financial data received from payment providers including JazzCash, EasyPaisa, and banking institutions in the course of processing deposits and withdrawals;
• Third-Party Verification: Identity verification data obtained through approved KYC verification partners where pk58 uses third-party services to assist with document authenticity checks;
• Gaming Platform: Gaming transaction data generated automatically as a result of your betting and gaming activity on the pk58 platform, including game logs, bet records, and session data.

4. Purposes of Data Processing

pk58 processes your personal data for the following specific and legitimate purposes:

• Account Creation and Management: To create, operate, and maintain your pk58 account including authentication, profile management, and balance administration;
• Identity Verification and Age Compliance: To verify your identity and confirm that you are aged 21 or above as required by pk58's licensing and responsible gaming obligations. This is a mandatory processing purpose — pk58 cannot legally offer gaming services to unverified users;
• Payment Processing: To process deposits to your pk58 PKR balance and to execute withdrawal requests to your registered payment methods including JazzCash, EasyPaisa, bank accounts, and USDT wallets;
• Regulatory and Legal Compliance: To comply with the requirements of pk58's international gaming license, including record-keeping, reporting, anti-money laundering (AML) obligations, and responding to lawful regulatory inquiries;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, bonus abuse, collusion, and other prohibited conduct as described in the Terms and Conditions;
• Customer Support: To respond to your queries, resolve disputes, and provide technical assistance through live chat, email, and other support channels in Urdu and English;
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, administer self-exclusion and deposit limit requests, and comply with responsible gaming obligations under pk58's license;
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the pk58 platform, game lobby, user interface, and service quality. This analysis does not involve individual profiling for commercial purposes;
• Marketing Communications: To send promotional offers, bonus notifications, and relevant platform updates to players who have not opted out of such communications. Players may opt out at any time through account settings or by contacting support.

5. Legal Basis for Processing

pk58 processes personal data under the following legal bases:

• Contractual Necessity: Processing required to fulfil pk58's contractual obligations to you under the Terms and Conditions — including account management, payment processing, and gaming service provision;
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering obligations, age verification requirements under pk58's gaming license, and responses to lawful regulatory inquiries;
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform analytics, and responsible gaming monitoring, where pk58's legitimate interest in operating a secure and compliant platform does not override your privacy rights;
• Consent: Processing for direct marketing communications, where your consent has been obtained at registration or subsequently. This consent may be withdrawn at any time without affecting the lawfulness of processing conducted prior to withdrawal.

6. Data Sharing and Third Parties

pk58 does not sell your personal data to third parties. Data is shared only in the following specific and limited circumstances:

• Payment Processors: Financial data is shared with your chosen payment provider (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or others) solely for the purpose of processing the specific transaction you have initiated. These providers process data under their own privacy policies and are not authorised to use your data for any other purpose;
• KYC Verification Partners: Identity document data may be shared with approved third-party KYC verification service providers for the sole purpose of authenticating your identity as required by licensing obligations. Such providers are contractually bound to maintain confidentiality and use data only for the specified purpose;
• Game Providers: Anonymised or pseudonymised session data may be shared with game providers (Pragmatic Play, PG Soft, Evolution Gaming, JILI, etc.) to facilitate gameplay and resolve technical disputes. Game providers do not receive directly identifiable personal data;
• Regulatory Authorities: pk58 may be required to disclose personal data to its licensing authority, financial intelligence units, or other competent authorities pursuant to lawful requests or mandatory reporting obligations. pk58 will only make such disclosures to the extent legally required;
• Professional Advisors: Legal, accounting, or auditing firms engaged by pk58 may access personal data on a confidential basis as strictly necessary to provide professional services. Such access is subject to professional confidentiality obligations;
• Business Transfers: In the event of a merger, acquisition, or sale of pk58 or its assets, player data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. Affected players will be notified of any material change to data processing resulting from such a transaction.

7. Data Retention

pk58 retains personal data only for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal and regulatory obligations. The following retention framework applies:

• Active Account Data: All personal data associated with an active pk58 account is retained for the duration of the account's active status plus a minimum of five (5) years following account closure, in accordance with licensing and anti-money laundering record-keeping requirements;
• Financial Transaction Records: Records of all deposit and withdrawal transactions, including payment method details and amounts in PKR, are retained for a minimum of seven (7) years from the date of the transaction in compliance with financial regulatory requirements;
• KYC Documentation: Identity verification documents including CNIC copies are retained for a minimum of five (5) years following account closure or the last relevant transaction, whichever is later;
• Support Communications: Live chat transcripts and email correspondence are retained for three (3) years from the date of the interaction;
• Technical and Session Logs: IP address logs and session technical data are retained for ninety (90) days for security monitoring purposes, after which they are deleted or anonymised;
• Self-Exclusion Records: Self-exclusion and responsible gaming tool records are retained for the duration of the exclusion period plus a minimum of three (3) years to prevent re-registration circumvention.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders re-identification impossible. You may request confirmation of the retention period applicable to specific data categories by contacting pk58 support.

8. Security Measures

pk58 implements comprehensive technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL Encryption: All data transmitted between your device and pk58 servers is encrypted using 256-bit SSL (Secure Sockets Layer) technology — the same standard used by international banking institutions. No personal or financial data travels over the internet in unencrypted form;
• Password Hashing: Account passwords are stored exclusively as cryptographically hashed values using industry-standard one-way hashing algorithms. pk58 cannot retrieve your plaintext password — only you know it;
• Two-Factor Authentication: Optional 2FA via SMS OTP is available to all pk58 account holders and is strongly recommended. 2FA ensures that even if your password were compromised, account access would require possession of your registered Pakistani mobile device;
• Access Controls: Internal access to personal data is restricted to pk58 personnel on a strict need-to-know basis. Access rights are reviewed periodically and revoked immediately upon change of role or employment;
• Intrusion Detection: pk58 operates continuous intrusion detection and anomaly monitoring systems that alert the security team to unusual access patterns or potential data breach events;
• Login Audit Logs: All login attempts (successful and failed) are logged with timestamp, IP address, and device fingerprint for security monitoring purposes. Players can review their own login history from within the pk58 account settings.

9. Cookies and Tracking Technologies

pk58.bid uses cookies and similar tracking technologies to enable core platform functionality, improve user experience, and analyse aggregate usage patterns. A cookie is a small data file stored on your device by your browser when you visit a website.

9.1 Types of Cookies Used by pk58

• Essential Cookies: Required for the pk58 platform to function. These include session management cookies that maintain your logged-in state, security tokens that protect against cross-site request forgery, and cookies that store your language preference. These cannot be disabled without preventing core platform functionality;
• Functional Cookies: Enable enhanced features such as the "Remember Me" login option, game lobby display preferences, and responsible gaming reminder settings. These improve usability but are not strictly essential;
• Analytics Cookies: Used by pk58 to collect aggregated, anonymised data about how users navigate the platform — which pages are visited most frequently, how long sessions last, and which features are most used. This data is used to improve the platform and is not associated with individual player profiles;
• Security Cookies: Support fraud detection and prevention functions by detecting unusual usage patterns that may indicate automated bot activity or account compromise attempts.

You may control cookie settings through your browser. Disabling all cookies may prevent certain features of pk58.bid from functioning correctly, including the login session management that keeps you authenticated during your visit. pk58 does not use third-party advertising or tracking cookies for commercial targeting purposes.

10. Your Data Rights

pk58 respects your rights with respect to your personal data. The following rights are available to all pk58 players regardless of location:

• Right of Access: You may request a copy of the personal data pk58 holds about you at any time. Requests are fulfilled within 30 days of receipt. First requests are fulfilled free of charge; subsequent requests within a 12-month period may be subject to a reasonable administrative fee;
• Right to Rectification: If personal data held by pk58 about you is inaccurate or incomplete, you may request correction. For account data, you may update your own information directly through account settings where possible;
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data subject to pk58's legal retention obligations. Note that certain data categories — particularly financial records and KYC documentation — must be retained for the periods described in Section 7 regardless of erasure requests, due to mandatory regulatory requirements;
• Right to Restrict Processing: You may request that pk58 restrict its processing of your personal data to storage only, pending resolution of a dispute about the accuracy of the data or the legitimacy of its processing;
• Right to Data Portability: You may request that pk58 provide your personal data in a structured, machine-readable format for transfer to another service provider, where this is technically feasible and where processing is based on your consent or contractual necessity;
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal;
• Right to Object: You may object to processing based on legitimate interests (such as direct marketing or analytics profiling). pk58 will assess and respond to all objections within 30 days.

To exercise any of these rights, contact pk58 at [email protected] with the subject line "Data Rights Request — [Your Username]" and a description of your request. pk58 may require identity verification before processing your request to prevent fraudulent data access attempts.

11. Children's Privacy and the 21+ Policy

pk58 does not knowingly collect or process personal data from individuals under the age of 21. The pk58 platform is intended exclusively for adults aged 21 and above. Access by minors is strictly prohibited and contrary to pk58's licensing obligations.

pk58 enforces its 21+ age requirement through CNIC-based identity verification for Pakistani players. The CNIC system inherently links identity to date of birth, providing an effective age verification mechanism. Any account found to have been created by or on behalf of a person under 21 will be immediately suspended, all funds will be handled in accordance with applicable regulations, and the matter may be referred to relevant authorities.

If a parent or guardian becomes aware that a minor has accessed or registered on pk58, they should contact pk58 support immediately at [email protected] so that the account can be closed and any associated data deleted in accordance with applicable requirements.

12. Third-Party Services and External Links

The pk58 platform integrates with third-party game providers, payment processors, and technical service providers to deliver its services. These third parties operate under their own privacy policies and are independently responsible for their data practices. pk58 selects third-party partners that maintain appropriate data protection standards and contractually requires them to use personal data only for the specific purposes for which it is shared.

The pk58 platform does not contain links to third-party websites for advertising or affiliate purposes. Any navigation on pk58.bid remains within the pk58 domain. Players should be aware that if they independently navigate to any external website, that site's own privacy policy governs data collection from that point forward and pk58 accepts no responsibility for third-party data practices.

13. Policy Amendments

pk58 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, regulatory requirements, or platform functionality. When material changes are made to this Policy, pk58 will notify registered players through one or more of the following channels: a notice on the pk58.bid homepage, a notification within your account dashboard, or a message to your registered mobile number or email address.

The revised Policy will specify the effective date of the update. Continued use of pk58 after the stated effective date constitutes your acceptance of the revised Policy. If you object to any changes, you must cease using pk58 and contact support to close your account. The current version and effective date of this Policy are always displayed at the top of this page.

14. Contact and Data Enquiries

For all privacy-related enquiries, data rights requests, or concerns about how pk58 processes your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 on pk58.bid — Urdu and English — average response 3–5 minutes. Use live chat for immediate queries.
• Email: [email protected] — for formal data rights requests, use the subject line "Data Rights Request — [Your Username]". Responses within 30 days as required.

Please note: email addresses displayed on pk58.bid are provided as plain text contact information only. They are not interactive hyperlinks. Do not include sensitive account credentials or full CNIC details in unencrypted email communications.