Privacy Policy — 96pk Platform

This Privacy Policy ("Policy") is published by the operator of the 96pk online gaming platform ("96pk", "we", "us", "our"), accessible at 96pk.cam. It describes how we collect, use, store, share and protect personal data relating to individuals who visit, register on, or otherwise interact with the 96pk platform.

96pk is an English-language online gaming platform serving Pakistani players, including users in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and across Pakistan. We are committed to handling your personal data with transparency, integrity and proportionality.

By accessing the platform, creating an Account or using any of our services, you acknowledge that you have read and understood this Policy and that you consent to the data practices described herein. If you do not consent, you must discontinue use of the platform and, if applicable, request closure of your Account.

The following definitions apply throughout this Policy:

We collect only the categories of personal data that are necessary to operate the platform, comply with our legal obligations and deliver a secure gaming experience. The categories below describe what we collect and why each category is required.

We collect personal data through the following channels:

We process your personal data only where we have a valid legal basis for doing so. Depending on the type of data and purpose, we rely on one or more of the following grounds:

• Contractual Necessity: Processing required to fulfil our obligations under the platform Terms & Conditions to which you have agreed — including Account administration, game access, payment processing and support services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC identity verification, AML transaction monitoring and record-keeping obligations under the operator's licensing jurisdiction.
• Legitimate Interests: Processing for purposes that serve our legitimate business interests without overriding your fundamental rights — including fraud detection, security monitoring, platform improvement and responsible gambling oversight.
• Consent: Processing for which you have provided specific, informed and freely given consent — including marketing communications (where applicable) and optional platform personalisation features. You may withdraw consent at any time by contacting our support team.

The personal data we collect is used exclusively for the purposes described in this Policy. We do not use your data for any purpose that is incompatible with the reason it was originally collected. Specific uses include:

• Account Management: Creating, maintaining and securing your Account; enabling access to games, betting markets and platform features.
• Payment Processing: Facilitating deposits and withdrawals; verifying payment method ownership; preventing unauthorised transactions.
• KYC & Compliance: Verifying your identity and age; screening against AML and sanctions databases; maintaining compliance records required by the operator's licensing jurisdiction.
• Customer Support: Responding to queries, resolving disputes, processing complaints and maintaining records of support interactions.
• Security & Fraud Prevention: Monitoring for suspicious account activity, unauthorised access attempts, bonus abuse patterns and prohibited conduct as defined in our Terms & Conditions.
• Responsible Gambling: Monitoring behavioural indicators associated with problem gambling; administering deposit limits, session timers and self-exclusion where applied; directing players to appropriate support resources.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve platform performance, game selection and user experience — this analysis does not use individually identifiable data where it can be avoided.
• Legal Compliance: Meeting obligations under applicable laws and regulatory requirements; responding to lawful requests from competent authorities.

We share personal data only in the limited circumstances described below, and only to the extent necessary for the relevant purpose:

• Service Providers (Data Processors): Third-party suppliers engaged to assist in platform operation — including KYC verification providers, payment processing intermediaries, fraud detection services and IT infrastructure providers — operate under data processing agreements that require them to maintain confidentiality and process data only on our documented instructions.
• Game Content Suppliers: Software providers whose games are accessible via the platform may receive minimal technical data (such as session tokens) required to load and operate game software. Full player identity data is not shared with game suppliers.
• Regulatory Authorities: We may share data with licensing authorities, financial regulators or law enforcement agencies where required by a valid legal obligation, court order or regulatory instruction.
• AML & Fraud Prevention Networks: Where required by AML obligations, transaction or identity data may be submitted to applicable screening services or shared with relevant authorities in the operator's licensing jurisdiction.
• Business Transfers: In the event of a merger, acquisition or business restructuring, player data may be transferred to a successor entity. Any such transfer would be subject to the same privacy commitments described in this Policy.

Due to the financial nature of our platform, the handling of payment data and KYC documentation requires particular care and is subject to additional safeguards.

The 96pk platform uses cookies and similar tracking technologies to support essential platform functions, security monitoring and user experience. The categories of cookies used are described below:

• Essential Cookies: Required for the platform to function — including session management, login state maintenance and security token handling. These cannot be disabled without disrupting core platform functionality.
• Security Cookies: Used to detect fraudulent activity, identify suspicious login patterns and protect Account integrity. These are a necessary component of our fraud prevention operations.
• Analytics Cookies: Used to collect aggregated, anonymised data on page usage, session duration and navigation patterns. This data is used solely to improve platform performance and does not identify individual users where avoidable.
• Preference Cookies: Store your language, display and notification preferences to provide a consistent experience across sessions.

We retain personal data for no longer than is necessary for the purposes for which it was collected, subject to any overriding legal or regulatory retention obligations. The general retention principles applied are as follows:

• Active Account Data: Retained for the duration of your Account and for a period thereafter as required by the operator's licensing jurisdiction and applicable legal obligations.
• KYC & Identity Documents: Retained for a minimum of five years from the date of Account closure or the last material transaction, or longer if required by AML regulations applicable in the operator's licensing jurisdiction.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction, or longer where required by applicable law or ongoing dispute proceedings.
• Support & Communications Records: Retained for a reasonable period to support dispute resolution and regulatory obligations, typically not exceeding five years from the last interaction.
• Technical & Log Data: Retained for a shorter period consistent with security and fraud monitoring purposes, typically not exceeding 12 months unless required in relation to a specific investigation or dispute.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised in accordance with our data destruction procedures.

96pk implements appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the platform.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Role-based access controls limiting data access to authorised personnel with a documented need.
• Regular security assessments and monitoring of platform infrastructure.
• Multi-factor authentication options for Account login.
• Monitoring for suspicious login attempts and automated alerts for potential Account compromise.

Depending on the laws applicable in the operator's processing jurisdiction, you may have some or all of the following rights in relation to your personal data. We will aim to respond to any valid request within a reasonable period, subject to identity verification:

To exercise any of these rights, contact our support team at [email protected] (plain text — not a clickable link). We may require proof of identity before processing any data rights request.

If we discover or are notified that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data, close the associated Account, return any funds deposited and, where applicable, refer the matter to relevant authorities.

Where parental or guardian concern regarding a minor's access to this platform is raised, we encourage contact with our support team at [email protected] (plain text only — not a clickable link) as soon as possible. We treat all such reports as priority communications.

The 96pk platform may reference third-party services — including payment providers, game content suppliers and responsible gambling support resources — in a descriptive or informational capacity. These references do not constitute endorsement, affiliation or data-sharing partnerships beyond those described in Section 7 of this Policy.

96pk is not responsible for the privacy practices of any third-party service, whether referenced on this platform or accessed independently by you. You are encouraged to review the privacy notices of any third-party service you interact with directly.

The operator of the 96pk platform may process or store personal data in countries outside Pakistan, including the jurisdiction in which the Operator is registered or where data processing infrastructure is located.

Where personal data is transferred internationally, we apply appropriate safeguards to protect it — including contractual data protection clauses with Data Processors and requirements that recipient entities maintain security standards equivalent to those described in this Policy.

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or platform operations. Material changes will be communicated to registered Users via the email address associated with their Account and/or by a prominent notice on the platform prior to the effective date of the change.

Your continued use of the platform following the effective date of any amendment constitutes acceptance of the revised Policy. We encourage you to review this Policy periodically. The effective date at the top of this page indicates when the current version came into force.

Minor updates — such as typographical corrections or clarifications that do not alter the substance of the Policy — may be made without advance notice. The Policy was last reviewed in January 2026.

For any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data — including data rights requests, security concerns or complaints — please contact our support team using the following details: