97pk Privacy Policy

1. Introduction and Scope

97pk ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who use the 97pk platform at 97pk.app ("Platform"). This Privacy Policy applies to all registered users and visitors of the Platform regardless of the device or method of access used. It governs our data processing activities in connection with the registration, operation, and management of 97pk accounts, sports betting services including PSL cricket markets, live casino products, slot games, and all associated financial and customer support interactions.

By accessing the 97pk Platform and registering an account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you should not use the 97pk platform.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

---

2. Data Controller Identity

The data controller responsible for personal data processed through the 97pk platform is the licensed operator of 97pk.app. 97pk operates under an international remote gaming licence and processes personal data in accordance with the data protection framework applicable under that licence jurisdiction.

For all privacy-related enquiries, data subject rights requests, or complaints, please contact us using the details set out in Section 15 of this Privacy Policy.

---

3. Categories of Personal Data We Collect

97pk collects the following categories of personal data from users:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification document details (CNIC or passport number) collected during account registration and Know Your Customer (KYC) verification.
• Contact Data: Mobile telephone number (Pakistani format, e.g., 03XX XXXXXXX), email address, and residential address including city (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad) and postal code.
• Account Credentials: Hashed password, security question answers, and two-factor authentication configuration data. Passwords are stored in irreversibly hashed form and are never accessible to 97pk staff.
• Financial Data: Deposit method details (JazzCash mobile wallet identifier, Easypaisa account reference, HBL / UBL / Meezan Bank / Bank Alfalah account or IBAN details, or USDT TRC20 wallet address), transaction histories, withdrawal requests, and balance information.
• Gaming Activity Data: Game sessions, betting history across all 97pk services (sports betting including PSL cricket markets, live casino via Astar Live, slots), wager amounts, winnings, and session duration.
• Technical Data: IP address, device type, browser type and version, operating system, referring URL, and session cookies.
• Communications Data: Records of support chat sessions, email correspondence, and complaint submissions.
• Responsible Gaming Data: Self-imposed deposit limits, cooling-off periods, self-exclusion requests, and any responsible gaming assessments conducted by 97pk's compliance team.

---

4. How We Collect Your Data

97pk collects personal data through the following means:

• Direct submission: When you register a 97pk account, complete KYC verification, make a deposit or withdrawal request, contact support, or voluntarily update your profile information.
• Automated collection: Through cookies, server logs, and session tracking technologies as you navigate the 97pk platform. See Section 7 for full details on our cookie usage.
• Third-party sources: From payment processors (including JazzCash, Easypaisa, and banking partners) to confirm transaction details; from identity verification service providers during KYC checks; and from fraud prevention and anti-money laundering (AML) screening databases where required under our licensing obligations.

---

5. Purposes and Legal Bases for Processing

97pk processes personal data for the following purposes and on the following legal bases:

• Account registration and management — necessary for the performance of our contract with you as a 97pk user.
• Identity and age verification (KYC/AML) — necessary for compliance with our licensing obligations and applicable anti-money laundering regulations. 97pk strictly enforces its 18+ age restriction; KYC verification is mandatory to confirm user eligibility.
• Payment processing — necessary for the performance of our contract to process your deposits and withdrawals via JazzCash, Easypaisa, Pakistani bank transfers, or USDT TRC20.
• Fraud prevention and security — processing in our legitimate interest to detect and prevent fraud, collusion, bonus abuse, and money laundering.
• Customer support — necessary for the performance of our contract and in our legitimate interest to resolve account queries and complaints.
• Responsible gaming monitoring — necessary for compliance with licensing requirements and in the vital interests of users to identify and respond to indicators of problem gambling behaviour.
• Marketing communications — based on your explicit consent at registration or through account preferences. You may withdraw consent at any time by updating your communication preferences within the 97pk account dashboard.
• Analytics and platform improvement — in our legitimate interest to understand platform usage patterns and improve the 97pk user experience.

---

6. Payment Data and Financial Information

97pk takes particular care with financial data. Payment method credentials (such as JazzCash PIN, bank account passwords, or USDT wallet private keys) are never collected by 97pk — all payment authentication takes place through the payment provider's own secure interface. 97pk receives only transaction confirmation references and masked account identifiers from payment processors.

All financial transaction data processed by 97pk is encrypted at rest and in transit using AES-256 and TLS 1.3 protocols. Financial records are retained for a minimum of five years in accordance with standard anti-money laundering record-keeping requirements applicable to licensed gaming operators.

97pk does not sell, transfer, or commercially exploit financial data collected from Pakistani users. Financial data is shared only with payment processors strictly for the purpose of completing deposit and withdrawal transactions, and with regulatory authorities where required under our licence conditions.

---

7. Cookies and Tracking Technologies

7.1 What Are Cookies. Cookies are small text files placed on your device by the 97pk platform when you visit. They allow 97pk to recognise your browser, maintain your login session, remember your preferences, and collect aggregate analytics data about platform usage.

7.2 Categories of Cookies Used by 97pk:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that maintain your 97pk login state. These cannot be disabled without preventing platform access.
• Functional Cookies: Remember your preferences such as language settings and preferred deposit method.
• Analytics Cookies: Collect aggregate, anonymised data about how users navigate the 97pk platform to help us improve the user experience. No individual user is identifiable from analytics data.
• Marketing Cookies: Used only with your consent to track which marketing campaigns directed you to 97pk, enabling us to optimise promotional spend. These are not used to track you across third-party sites.

7.3 You can manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using the 97pk platform but may affect some personalisation features.

---

8. Data Sharing and Third-Party Disclosure

97pk does not sell personal data to third parties. We share personal data only in the following circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT TRC20 network providers receive only the minimum data necessary to process deposit and withdrawal transactions.
• Identity verification providers: Third-party KYC and AML screening services receive identity documents for verification purposes. These providers are contractually bound to process data only for KYC purposes and to maintain equivalent data protection standards.
• Game content providers: Providers such as Pragmatic Play, Hacksaw Gaming, and Nolimit City receive session identifiers to authenticate game requests. These providers do not receive your personal identity or financial data.
• Regulatory and law enforcement authorities: 97pk will disclose personal data to competent authorities where required by our licensing obligations or by valid legal process.
• Fraud prevention networks: Anonymised or pseudonymised indicators of fraudulent activity may be shared with industry fraud prevention databases to protect the broader gaming ecosystem.

---

9. International Data Transfers

As 97pk is operated under an international remote gaming licence, some personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, 97pk ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent data protection mechanisms — to protect your personal data to a standard equivalent to that required under our licensing jurisdiction's data protection framework.

---

10. Data Retention

97pk retains personal data for as long as your account is active and for a period after account closure as required by our licensing obligations:

• Identity and KYC documents: minimum 5 years from account closure or the date of the last relevant transaction.
• Financial transaction records: minimum 5 years from the date of each transaction.
• Gaming activity logs: minimum 3 years from account closure.
• Support communications: minimum 2 years from the date of the communication.
• Responsible gaming records (including self-exclusion): for the duration of the exclusion period plus 5 years.

Where data is no longer required for its original purpose and no longer required for regulatory compliance, 97pk will securely delete or anonymise it.

---

11. Security Measures

97pk implements the following technical and organisational security measures to protect personal data:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 97pk platform
• AES-256 encryption for data stored in 97pk databases
• Irreversible bcrypt hashing for all account passwords
• Role-based access controls limiting staff access to personal data to those with a documented operational need
• Two-factor authentication available for all user accounts
• Regular third-party penetration testing and security audits
• Automated account lockout after repeated failed login attempts

Despite these measures, no internet-based system can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, 97pk will notify affected users without undue delay in accordance with applicable obligations.

---

12. Your Data Rights

As a 97pk user you have the following rights regarding your personal data, subject to the conditions and limitations prescribed by applicable law and our licensing obligations:

• Right of Access: You may request a copy of the personal data 97pk holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding retention obligations.
• Right to Restrict Processing: You may request that 97pk limits processing of your data in certain circumstances.
• Right to Data Portability: You may request your account and transaction data in a structured, machine-readable format where technically feasible.
• Right to Object: You may object to processing based on 97pk's legitimate interests, including marketing communications.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing emails), you may withdraw consent at any time by updating preferences in the 97pk account dashboard.

To exercise any of these rights, please contact our data protection team via the details in Section 15. We will respond to all valid data rights requests within 30 days. Complex or multiple requests may take up to 60 days; we will inform you if this applies.

---

13. Children and Minors

The 97pk platform is strictly restricted to users aged 18 years and above. 97pk does not knowingly collect personal data from individuals under the age of 18. If we discover that a minor has registered an account, the account will be immediately closed, all relevant data will be securely deleted subject to any mandatory regulatory retention obligations, and any deposited funds will be returned to the originating payment method.

If you have reason to believe that a minor has created a 97pk account, please contact our support team immediately via live chat or at the email address in Section 15.

---

14. Changes to This Privacy Policy

97pk reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered users via the email address or mobile number on record at least 7 days before the revised policy takes effect. The "Last Updated" date at the top of this document reflects the most recent revision. Continued use of the 97pk platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

---

15. Contact and Complaints

For any questions about this Privacy Policy, to exercise your data rights, or to file a formal data protection complaint, please contact the 97pk data protection team:

Live Chat: Available 24/7 within your 97pk account dashboard (fastest response).

Email: [email protected]

Please do not include sensitive financial information, passwords, or full CNIC numbers in email correspondence. 97pk support staff will never ask for your account password via email.

If you are not satisfied with 97pk's response to a privacy complaint, you have the right to escalate the matter to the data protection supervisory authority within the jurisdiction of our operating licence.