This Privacy Policy explains exactly what personal information pk977 collects from Pakistani players, why we collect it, how we use it, who we share it with, how long we keep it, and what rights you have over your own data. We believe you deserve to know — in plain language — what happens with your information when you use the pk977 platform.
1.1 This Privacy Policy is issued by pk977 ("pk977," "the Company," "we," "us," "our") and applies to all personal data collected from individuals who access or use the pk977 online gaming platform at pk977.org and all associated subdomains, mobile web interfaces, and related services (collectively, "the Platform").
1.2 pk977 takes the privacy and data security of its players seriously. This Policy has been prepared in accordance with internationally recognised data protection principles and the data handling obligations imposed on pk977 by its gaming licence conditions.
1.3 By registering a pk977 account or by using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection, use, and processing of your personal data as described herein. If you do not accept this Privacy Policy, you must not use the Platform.
1.4 This Privacy Policy should be read in conjunction with pk977's Terms & Conditions, which are incorporated herein by reference. In the event of any conflict between this Policy and the Terms & Conditions on privacy-related matters, this Privacy Policy shall prevail.
2.1 For the purposes of this Privacy Policy, pk977 acts as the data controller in respect of all personal data collected from players using the Platform. As data controller, pk977 determines the purposes and means by which your personal data is processed.
2.2 pk977 operates under an international online gaming licence. Our data handling practices are subject to audit and oversight by the relevant licensing authority as part of ongoing licence compliance.
2.3 Where pk977 engages third-party service providers (such as payment processors or KYC verification providers) to process personal data on its behalf, those third parties act as data processors under written agreements that bind them to pk977's data protection standards and prohibit them from using Player data for any other purpose.
3.1 pk977 collects the following categories of personal data from players. We collect only what is necessary for the purposes described in this Policy — we do not collect personal data indiscriminately.
4.1 Directly From You. The majority of personal data held by pk977 is provided directly by the player — at account registration, during KYC document submission, when using the cashier, and when contacting customer support.
4.2 Automatically. When you access the pk977 Platform, certain technical data is collected automatically by our systems — including your IP address, browser type, and session duration. This data is collected via server logs and session management systems and is used for security monitoring and platform optimisation.
4.3 Via Cookies and Similar Technologies. pk977 uses cookies and similar tracking technologies to maintain your session, remember your preferences, and analyse Platform usage patterns. Full details are set out in §10 (Cookies & Tracking).
4.4 From Third-Party Payment Providers. When you make a deposit via JazzCash, EasyPaisa, or a bank transfer, those payment providers share transaction confirmation data with pk977 — including your registered name on the payment account, transaction reference, and amount. This information is used to match deposits to player accounts and to comply with AML obligations.
4.5 From KYC Verification Providers. pk977 uses third-party identity verification services to assist with KYC document checking. These providers process your CNIC images against official databases to confirm identity and age. Their processing is governed by data processor agreements binding them to pk977's privacy standards.
5.1 pk977 uses personal data collected from players for the following purposes. Each purpose is linked to a legal basis for processing, which is detailed in §6.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, contact, login data | Contract |
| Age verification (21+ compliance) | Date of birth, CNIC | Legal Obligation |
| Processing deposits and withdrawals (PKR) | Financial, identity data | Contract |
| KYC identity verification | CNIC, name, DOB, payment details | Legal Obligation |
| Fraud detection and prevention | Activity, IP, device, financial data | Legitimate Interest |
| Anti-money laundering (AML) monitoring | Transaction history, identity data | Legal Obligation |
| Responsible gaming monitoring | Play history, account data | Legal Obligation |
| Customer support | Identity, account, communication data | Contract |
| Platform security and account protection | Login, IP, device data | Legitimate Interest |
| Bonus and promotion administration | Account, activity data | Contract |
| Marketing communications (opt-in only) | Contact data, preferences | Consent |
| Platform analytics and improvement | Technical, anonymised activity data | Legitimate Interest |
| Regulatory reporting and licensing compliance | Account, financial data | Legal Obligation |
6.1 Contract. Where processing is necessary for the performance of the contract between pk977 and the player — i.e., operating your account, processing your PKR transactions, and delivering the gaming services you have signed up for — pk977 relies on contractual necessity as the legal basis for processing your personal data.
6.2 Legal Obligation. Certain processing activities are required by law, including KYC identity verification, AML transaction monitoring, responsible gaming record-keeping, and reporting to regulatory authorities. pk977 cannot operate its licensed gaming business without performing these activities, regardless of whether you consent to them.
6.3 Legitimate Interests. Where processing is necessary for purposes that serve pk977's or players' legitimate interests — including fraud prevention, platform security, and improving the Platform through anonymised analytics — pk977 relies on legitimate interests as the legal basis, having balanced those interests against your privacy rights.
6.4 Consent. Where processing relies on your consent — primarily for marketing communications — pk977 will request your explicit consent at account registration and will honour any withdrawal of that consent promptly. Withdrawing consent for marketing does not affect the lawfulness of processing carried out before withdrawal and does not affect your ability to use the Platform.
7.1 pk977 does not sell, rent, or commercially exploit player personal data. We share personal data with third parties only where necessary for the purposes described in this Policy and only with parties bound by appropriate confidentiality and data protection obligations.
8.1 pk977 operates internationally and some of the third-party service providers we use may process your personal data outside of Pakistan. Where personal data is transferred outside Pakistan, pk977 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under internationally recognised data protection principles.
8.2 Safeguards used for international data transfers include: standard contractual clauses binding the recipient to appropriate data protection standards; processing only by recipients located in jurisdictions with adequate data protection laws; and binding corporate rules where applicable within corporate groups.
8.3 Game play data transmitted to third-party game providers may be processed on servers located in various jurisdictions. All such providers are bound by contractual obligations to process this data securely and solely for the purpose of operating the relevant game.
9.1 pk977 retains personal data for no longer than is necessary for the purpose for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Identity & KYC documents (CNIC) | 5 years post account closure | AML / regulatory obligation |
| Transaction & financial records | 5 years post transaction date | AML / tax / regulatory obligation |
| Game play history | 3 years post account closure | Responsible gaming / dispute resolution |
| Account registration data | 5 years post account closure | Regulatory / contractual |
| Support communications | 3 years post closure / last interaction | Dispute resolution |
| Login / security logs | 12 months from log creation | Security / fraud prevention |
| Marketing consent records | Duration of consent + 3 years | Evidence of consent |
| Self-exclusion records | Permanent (lifetime) | Responsible gaming / regulatory |
| Anonymised analytics data | Indefinite (no personal identifiers) | Platform improvement |
9.2 Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. During the retention period, access to archived personal data is restricted to authorised personnel with a legitimate need to access it.
9.3 Self-exclusion records are retained permanently to prevent re-registration by players who have self-excluded on a permanent basis. This retention is in the interest of player welfare and is a requirement of pk977's responsible gaming obligations.
10.1 pk977 uses cookies and similar tracking technologies on the Platform to enable core functionality, remember your preferences, maintain your session, and analyse how the Platform is used. Cookies are small text files stored in your browser by the Platform.
10.2 pk977 uses the following categories of cookies:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Session management, login authentication, CSRF protection, security tokens. Required for the Platform to function. Set automatically on login. | No — disabling breaks core functionality | |
| Remembering user preferences (e.g., language, game lobby view, display settings). Improves your experience on return visits. | Yes — via browser settings | |
| Anonymised data on page load times, most-visited sections, error rates. Used to improve Platform speed and reliability. No personally identifiable information. | Yes — opt-out available | |
| Used to identify returning visitors for the purpose of delivering relevant promotional content to opted-in players. Only set if you have opted in to marketing. | Yes — opt-out via support or browser |
10.3 You may disable non-essential cookies at any time through your mobile browser settings (Settings → Site Settings → Cookies in Chrome on Android). Disabling strictly necessary cookies will prevent you from logging in to your pk977 account.
10.4 pk977 does not use cross-site tracking cookies that follow you across other websites outside of pk977.org. Our cookies are scoped to the pk977 domain and its subdomains only.
11.1 pk977 implements a comprehensive set of technical and organisational security measures to protect player personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated regularly in line with industry best practices.
11.2 Technical security measures implemented by pk977 include:
11.3 In the unlikely event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, pk977 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.
12.1 The pk977 Platform is strictly for individuals aged 21 years and older. pk977 does not knowingly collect personal data from individuals under 21 years of age.
12.2 Where pk977 discovers or has reason to believe that personal data belonging to a player under 21 has been collected — whether through registration using false date of birth information or any other means — pk977 will immediately suspend the relevant account, delete or quarantine all collected personal data, and return any deposited funds to the payment source.
12.3 If a parent or guardian becomes aware that their child (under 21) has registered with pk977, they should contact our support team immediately via live chat or email. pk977 will take prompt action, including full data deletion and account closure.
13.1 As a data subject whose personal data is processed by pk977, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or email at [email protected]. pk977 will respond to all verified data rights requests within thirty (30) days.
You have the right to request a copy of all personal data that pk977 holds about you. We will provide this in a clear, structured format within 30 days of your verified request. Requests that are manifestly unfounded or excessive may be subject to a reasonable administrative fee.
If any personal data held by pk977 about you is inaccurate or incomplete, you have the right to request its correction. For example, if your registered name is misspelled or your mobile number is incorrect, contact support and we'll update it promptly after identity verification.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (and consent is the only legal basis), or where processing is unlawful. Note that this right is limited where data must be retained for legal, regulatory, or contractual reasons — such as KYC records required by AML law, which pk977 must retain for five years regardless of an erasure request.
You have the right to request that pk977 restricts processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or while your objection to processing is being considered. Restricted data continues to be stored but is not actively processed.
Where processing is based on your consent or on a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) and to transmit it to another data controller where technically feasible.
You have the right to object to processing of your personal data based on legitimate interests, including profiling. You also have an absolute right to object to direct marketing processing at any time, which pk977 will honour immediately. Where legitimate interests are the basis and you object, pk977 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
Where pk977 makes decisions affecting you based solely on automated processing — such as automated fraud detection flags — you have the right to request human review of that decision, to express your point of view, and to contest the decision. Contact support via live chat to request a human review of any automated decision affecting your account.
14.1 pk977 may send marketing communications — including promotional emails, SMS messages to your registered Pakistani mobile number, and Messenger/Viber messages — where you have expressly opted in to receive them during account registration or subsequently through your account settings.
14.2 You may withdraw your consent to marketing communications at any time by: unticking the marketing preference in your pk977 account settings; clicking the unsubscribe link in any marketing email received from pk977; contacting pk977 support via live chat and requesting removal from marketing lists; or emailing [email protected] with the subject line "Marketing Opt-Out."
14.3 Withdrawal of marketing consent will be processed within five (5) business days. pk977 may continue to send transactional communications — such as account security notifications, deposit confirmations, and withdrawal status updates — regardless of your marketing preference, as these are necessary for account management and not subject to marketing consent.
14.4 pk977 does not share player contact details with third-party marketing agencies for use in their own marketing campaigns.
15.1 pk977 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, pk977's data processing practices, or business operations. The current version of the Privacy Policy, including its effective date and version number, is always available on the Platform.
15.2 Where changes to this Policy are material — meaning they significantly affect the way your personal data is used or the rights available to you — pk977 will notify registered players by email to their registered address, and via a notice on the Platform, at least seven (7) days before the changes take effect.
15.3 Your continued use of the pk977 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, you must stop using the Platform and may request account closure.
16.1 For any questions, concerns, or requests relating to this Privacy Policy or the way pk977 processes your personal data, please contact us through the following channels:
16.2 pk977 will respond to all privacy-related inquiries within forty-eight (48) hours. Data rights requests (access, erasure, portability, etc.) will be formally acknowledged within five (5) business days and fully responded to within thirty (30) days, or extended to sixty (60) days where the complexity of the request warrants it (with notice provided at the thirty-day mark).
16.3 If you are unsatisfied with pk977's response to any privacy complaint or data rights request, you have the right to escalate the matter to the relevant data protection authority or gaming regulator under pk977's licensing jurisdiction. Details of the relevant regulatory body are available from pk977's compliance team upon request.
These aren't just policy commitments — they're technical and operational controls built into the pk977 platform from the ground up, specifically for Pakistani players.
Every page on pk977 — login, cashier, game lobby, account settings — is served over HTTPS with 256-bit SSL encryption. Data transmitted between your Android phone and pk977's servers cannot be read by third parties, including on shared Wi-Fi in cafes across Lahore, Karachi, or Islamabad.
Your pk977 account password is hashed using bcrypt before it is stored — meaning even pk977's own engineers cannot read your actual password. Password resets always require OTP verification to your registered Pakistani mobile number. No one at pk977 can look up your password.
pk977 has never sold, rented, or commercially exploited player personal data — not your mobile number, not your email, not your JazzCash account, not your CNIC. This is a hard business rule, not a policy preference. Your data serves your account management and nothing else.
Not every pk977 team member can access your personal data. Access controls are role-based — a support agent handling a bonus query, for example, sees only what's necessary to resolve that query. CNIC images and financial records are accessible only to compliance team members with a specific documented need.
pk977 doesn't keep your data indefinitely. Every data category has a defined retention period — after which it is securely deleted or irreversibly anonymised. We keep what we're required to keep by law, and no more. Retention periods are published transparently in §9 of this Policy.
Every pk977 player can request a copy of their data, ask for corrections, request deletion where applicable, or opt out of marketing at any time — no barriers, no runaround. Contact live chat or email support. Rights requests are handled by our compliance team and responded to within 30 days.
pk977 handles your personal data with the seriousness it deserves. JazzCash deposits, PKR wallet, live casino, PSL cricket betting — all on a platform that treats your privacy as a core commitment, not a checkbox. 21+ only. Play responsibly.