pak500 Privacy Policy — Your Data, Handled Responsibly

This Privacy Policy ("Policy") describes how pak500 ("we", "us", "our") collects, processes, stores, and shares personal data relating to individuals ("you", "Player") who access or use the pak500 platform at pak500.club, including all associated pages, features, games, and services.

pak500 is committed to protecting the privacy of every player on our platform. We operate in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, and data subject rights. This Policy is designed to give you a clear and honest picture of our data practices so that you can make informed decisions about your use of the pak500 platform.

This Privacy Policy forms part of our overall legal framework, which also includes the pak500 Terms & Conditions and the Responsible Gaming Policy. By registering an account or otherwise using the pak500 platform, you acknowledge that you have read and understood this Policy.

pak500 collects a range of personal data categories depending on the nature of your interaction with the platform. The following table outlines the main categories of data we collect and examples of specific data points within each category:

pak500 does not collect sensitive categories of personal data (such as health data, racial or ethnic origin, or religious beliefs) unless directly relevant to a responsible gaming assessment or as required by applicable law.

pak500 collects personal data through the following channels:

• Direct Provision: Data you provide directly when registering your Account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or filling in any form on the platform.
• Automated Collection: Data collected automatically when you access or use the platform, including through cookies, server logs, and similar tracking technologies. This includes your IP address, device identifiers, and session behaviour data.
• Payment Processors: Transaction confirmation data and payment method identifiers received from our payment partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) when you make deposits or receive withdrawals.
• Identity Verification Providers: Data received from third-party KYC and age verification service providers when your identity documents are verified against authoritative data sources.
• Fraud Detection Systems: Data generated by our automated fraud monitoring and risk assessment systems based on your account activity and transaction patterns.

pak500 processes your personal data only where a valid legal basis exists for doing so. The following table sets out the primary purposes for which we process your data and the corresponding legal basis:

Where pak500 relies on legitimate interests as the legal basis for processing, we have assessed that our legitimate interests are not overridden by your rights and interests, having regard to the nature of the data processed and the expectations of players using an online gaming platform.

pak500 does not sell your personal data to any third party. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other licensed payment processors, solely for the purpose of processing your PKR deposits and withdrawals.
• KYC & Identity Verification Partners: Third-party identity verification providers who verify your identity documents and confirm your age as part of the KYC process.
• Game Content Providers: Licensed third-party game developers whose titles are available on the pak500 platform, to the extent necessary for game session authentication and fair-play auditing.
• Fraud Prevention & Security Providers: Third-party fraud detection and cybersecurity services that assist pak500 in identifying suspicious activity and protecting the platform.
• Regulatory Authorities: Licensing authorities, financial intelligence units, and law enforcement agencies where disclosure is required by applicable law or an official legal process.
• IT Infrastructure Providers: Cloud hosting and infrastructure providers who store pak500 data on our behalf under strict data processing agreements.

All third parties with whom pak500 shares personal data are required to process that data in accordance with applicable data protection standards and solely for the purposes specified in their agreements with pak500. pak500 does not permit third-party processors to use your data for their own independent commercial purposes.

pak500 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain session continuity, and analyse how the platform is used. The following categories of cookies are used on pak500.club:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as account login, session management, and security token validation. These cookies cannot be disabled without preventing you from using the platform.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, display settings, and responsible gaming tool configurations — so that you do not need to re-enter them on each visit.
• Analytics Cookies: These cookies collect anonymised data about how players interact with the pak500 platform, including pages visited, time spent, and navigation paths. This data is used solely to improve the platform experience.
• Security Cookies: These cookies assist our fraud detection systems by identifying unusual patterns in session behaviour that may indicate unauthorised account access or automated bot activity.

You can manage non-essential cookie preferences through your browser settings. Please note that disabling functional or analytics cookies may affect the quality of your experience on the pak500 platform. Instructions for managing cookies are available in the help documentation of all major browsers.

pak500 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, taking into account our legal, regulatory, and operational obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of 5 years following account closure, as required under our licensing and AML compliance obligations.
• Transaction and Financial Records: Retained for a minimum of 5 years from the date of each transaction, in compliance with applicable financial record-keeping requirements.
• Game Session Logs: Retained for a minimum of 2 years from each session, to support dispute resolution and fair-play auditing.
• Customer Support Communications: Retained for 3 years from the date of the last communication, to support ongoing account management and dispute resolution.
• Marketing Consent Records: Retained for 5 years from the date of consent, or until you withdraw consent, whichever is earlier.
• Technical & Log Data: Retained for 12 months from collection, after which it is aggregated and anonymised.

Upon expiry of the applicable retention period, pak500 will securely delete or irreversibly anonymise the relevant personal data. Where anonymisation is not technically feasible, data will be deleted.

pak500 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Encryption: All data transmitted between your device and pak500 servers is encrypted using TLS (Transport Layer Security) 1.2 or higher. Sensitive data fields, including payment details and identity document data, are encrypted at rest.
• Access Controls: Access to personal data within pak500's systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Infrastructure Security: pak500 servers are hosted in secure, access-controlled data centre facilities. Regular penetration testing and vulnerability assessments are conducted by qualified security professionals.
• Incident Response: pak500 maintains a documented data breach response procedure. In the event of a security incident affecting your personal data, pak500 will notify affected players and relevant authorities within the timeframes required by applicable law.
• Payment Security: All PKR payment transactions are processed through PCI DSS-compliant payment gateways. pak500 does not store full payment card numbers or mobile wallet PINs on its servers.

You hold a number of rights in relation to the personal data that pak500 holds about you. These rights are described below. To exercise any of these rights, please submit a written request to pak500 using the contact details in Section 14. pak500 will acknowledge your request within 5 business days and will endeavour to fulfil it within 30 calendar days.

• Right of Access: You may request a copy of all personal data that pak500 holds about you, along with information about how it is processed.
• Right to Rectification: You may request that inaccurate or incomplete personal data held by pak500 be corrected or updated.
• Right to Erasure: You may request that pak500 delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request that pak500 restrict the processing of your data in certain circumstances, such as where the accuracy of the data is contested.
• Right to Data Portability: You may request that pak500 provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You may object to pak500 processing your data where we rely on legitimate interests as the legal basis, including profiling for responsible gaming purposes.
• Right to Withdraw Consent: Where pak500 processes your data based on your consent (e.g. marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Please note that certain rights may be limited where pak500 is required to retain or process your data to comply with a legal obligation or to defend against a legal claim. pak500 will clearly explain any such limitation when responding to your request.

The pak500 platform is strictly for individuals aged 21 years and above. pak500 does not knowingly collect or process personal data relating to individuals under the age of 21. Our registration process includes age verification checks designed to prevent underage access.

Where pak500 determines or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21, we will:

• Immediately suspend the associated account;
• Permanently close the account and delete all associated personal data to the extent permitted by law;
• Refund any deposits made to the original payment method where technically feasible;
• Void any winnings generated during the period of underage use.

pak500 may transfer your personal data to third-party processors located outside of Pakistan in order to operate the platform, process payments, conduct identity verification, and provide customer support. Such transfers may include countries in Asia, Europe, and other regions where our service providers are based.

Where personal data is transferred to a jurisdiction that does not maintain an equivalent level of data protection to the standards applied by pak500, we ensure that appropriate safeguards are in place before such transfers are made. These safeguards may include:

• Standard contractual clauses or equivalent contractual protections with the recipient entity;
• Binding corporate rules where the transfer is to a member of the same corporate group;
• Reliance on adequacy decisions or equivalent regulatory determinations where applicable.

By using the pak500 platform, you acknowledge that your personal data may be transferred internationally as described in this section. You may request further information about the specific safeguards in place for international transfers by contacting pak500 using the details in Section 14.

The pak500 platform may contain references to third-party services, including game content providers, payment processors, and responsible gaming resources. These third parties operate their own privacy policies, which are independent of this Policy.

pak500 is not responsible for the privacy practices of third-party services. We strongly recommend that you review the privacy policy of any third-party service before providing them with your personal data. This Policy applies exclusively to data processed by pak500 in connection with the pak500 platform.

Where pak500 integrates third-party services directly into the platform (such as embedded live dealer casino streams or game interfaces provided by licensed content suppliers), those integrations are governed by contractual data processing agreements that require the third-party providers to handle any data collected through those integrations in a manner consistent with pak500's privacy standards.

pak500 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made to this Policy, pak500 will:

• Update the "Last Updated" date displayed at the top of this Policy;
• Display a prominent notice on the pak500 platform informing players of the change;
• Where the changes are significant, send a notification to the email address registered on your account.

Your continued use of the pak500 platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the revised Policy. We encourage you to review this Policy periodically to stay informed about how pak500 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pak500 handles your personal data, please contact our Data Protection team. All privacy-related enquiries are handled with the highest priority and in strict confidence.

You may also use the following contact details to submit a formal data subject rights request (access, erasure, portability, etc.) or to lodge a complaint about pak500's data handling practices:

If you are not satisfied with pak500's response to your privacy complaint or data subject rights request, you may escalate your complaint to the relevant data protection supervisory authority or regulatory body in your jurisdiction. pak500 will cooperate fully with any such regulatory enquiry.