This Privacy Policy describes how pkzz collects, processes, stores, shares, and protects the personal data of all registered Players and visitors to the pkzz platform at pkzz.bid. pkzz is committed to handling your personal information with transparency, integrity, and respect — consistent with the data protection standards required under our international gaming license and applicable data protection law. Please read this document carefully before using any part of the pkzz platform.
Our Six Privacy Commitments to pkzz Players
pkzz collects personal data only to the extent necessary to operate your account, verify your identity, process transactions, and meet our regulatory obligations. We do not collect data speculatively or for purposes unrelated to your pkzz account and gaming activity.
pkzz does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing platforms under any circumstances. Your personal information exists within pkzz to serve you — not to generate revenue through data commercialisation.
All personal and financial data transmitted between your device and the pkzz servers is protected by 256-bit SSL encryption. Data stored on pkzz systems is encrypted at rest. Your CNIC details, mobile number, transaction records, and gaming history are secured to the same standard as online banking systems.
pkzz Players have the right to access, correct, and — subject to regulatory requirements — request deletion of their personal data. You can review the data pkzz holds on your account at any time by contacting pkzz support. Data subject requests are processed within 30 days of receipt.
pkzz shares personal data with third parties only where required by law, necessary to process your transactions, or essential to operate platform services (such as KYC verification providers and payment processors). All third-party data processors are subject to contractual obligations that match pkzz's own data protection standards.
pkzz retains personal data only for as long as required to meet regulatory obligations — including anti-money-laundering record-keeping requirements — or to resolve any outstanding dispute. After the retention period expires, data is securely deleted or anonymised.
pkzz is the operator of the online gaming platform accessible at pkzz.bid. pkzz operates under an international gaming license and is committed to operating in accordance with the data protection obligations imposed by that license and applicable international data protection standards.
For the purposes of this Privacy Policy, pkzz is the data controller of all personal information collected from Players and visitors through the pkzz platform. References to "pkzz," "we," "us," and "our" throughout this document refer to the pkzz platform operator.
References to "you," "your," and "Player" refer to any natural person who registers a pkzz account, accesses the pkzz website, or otherwise provides personal data to pkzz through any channel, including support correspondence.
Data Controller Contact: All data protection queries, subject access requests, and privacy-related correspondence should be directed to the pkzz data protection contact at [email protected]. Please include "Privacy / Data Request" in the subject line to ensure prompt routing to the appropriate team.
This Privacy Policy applies to all personal data collected by pkzz through the following channels and interactions:
This Policy does not apply to third-party websites or services that may be referenced in pkzz's documentation. pkzz bears no responsibility for the privacy practices of any third party.
This Privacy Policy should be read alongside the pkzz Terms & Conditions and Responsible Gaming policy, both of which contain additional provisions relevant to the management of your pkzz account and personal data.
pkzz collects personal data across several categories depending on the nature of your interaction with the platform. The following table summarises the categories of data collected, the source of that data, and the context in which it is collected.
| Data Category | Specific Data Points | Collection Context |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, CNIC scan or photograph | Account registration and KYC verification |
| Contact Data | Pakistani mobile number, email address (if provided) | Account registration, support correspondence |
| Financial Data | JazzCash / EasyPaisa account numbers, HBL / UBL / Meezan Bank account details, transaction amounts and timestamps, deposit and withdrawal history | Payment processing, transaction records |
| Gaming Activity Data | Bet history, game session records, bet stakes, outcomes, bonus usage, win/loss records, game preferences | Platform use, regulatory record-keeping |
| Technical Data | IP address, device type and model, operating system, browser type, session timestamps, login history, approximate geographic location | Automated collection on platform access |
| Responsible Gaming Data | Deposit limits set, loss limits set, session limits, self-exclusion records, responsible gaming tool usage history | Account settings, regulatory compliance |
| Communications Data | Support chat transcripts, email correspondence content, support ticket records | Customer support interactions |
| Compliance Data | AML screening results, fraud monitoring flags, source-of-funds documentation where requested | Regulatory and licensing obligations |
The majority of personal data pkzz holds on you is data you have provided directly — most significantly during registration (your name, mobile number, date of birth, and CNIC) and during payment processing (your JazzCash, EasyPaisa, or bank account details). You choose to provide this data and can, in certain cases, choose not to provide it — however, failure to provide data required for account registration, KYC, or payment processing will prevent pkzz from providing the relevant service.
When you access the pkzz platform, pkzz's systems automatically collect certain technical data — including your IP address, the device you are using, your browser type, and your session timestamps. This data is collected for security monitoring, fraud prevention, regulatory compliance, and platform performance optimisation. It is not used for profiling purposes unrelated to your pkzz account management.
pkzz may receive personal data about you from third parties in limited circumstances — specifically from KYC identity verification service providers (used to validate CNIC information), payment processing partners (to confirm transaction status), and fraud screening services (to flag unusual transaction patterns). Data received from third parties is processed in accordance with this Privacy Policy and is used exclusively for the purposes for which it was obtained.
pkzz uses the personal data it collects for the following specific purposes:
pkzz uses your identity and contact data to create and manage your account, authenticate your identity at login (including OTP delivery to your registered Pakistani mobile number), and maintain the security of your account across sessions. Your account data enables pkzz to provide you with a personalised and consistent platform experience.
pkzz is legally required under its international gaming license to verify the identity and age of all Players before allowing real-money gaming activity or processing withdrawals. Your CNIC data and any associated supporting documentation is used exclusively for this KYC compliance purpose. pkzz does not use CNIC data for any marketing, profiling, or non-compliance purpose.
Your financial data — including JazzCash, EasyPaisa, and bank account details — is used by pkzz to process deposits and withdrawals in PKR and to maintain accurate financial records of all transactions on your account. pkzz is required by its licensing obligations and applicable anti-money-laundering regulations to retain transaction records for a legally mandated period.
pkzz uses your gaming activity data, responsible gaming tool settings, and account behaviour patterns to monitor for signs of problem gambling and to fulfil its responsible gaming obligations under its international gaming license. Where pkzz's systems detect patterns consistent with problem gambling — for example, escalating deposit frequency or rapid loss events — pkzz may contact you to offer responsible gaming support or apply protective measures.
Technical data, including IP addresses, login history, and device identifiers, is used by pkzz to detect and prevent fraudulent activity, account takeovers, multi-accounting, and money laundering. pkzz's security systems monitor account activity in real time and may flag unusual activity for manual review by the pkzz compliance team.
Communications data — including support chat transcripts and email correspondence — is retained by pkzz to maintain a record of your support history, to facilitate follow-up on unresolved issues, and to improve the quality of pkzz's customer support operations. Support records are retained in accordance with the data retention schedule in Section 8.
pkzz processes personal data to comply with its obligations under its international gaming license, applicable anti-money-laundering regulations, and any lawful request from a regulatory authority or law enforcement agency. pkzz will not disclose personal data to law enforcement or regulatory bodies without a valid legal basis for doing so.
Anonymised and aggregated usage data — stripped of all personal identifiers — may be used by pkzz for platform performance analysis, product development, and service improvement. No individually identifiable data is used for analytics purposes without a lawful basis for doing so.
pkzz processes personal data on the following legal bases, which determine the lawfulness of each processing activity:
pkzz shares personal data with third parties only in the limited circumstances described below. pkzz does not sell, lease, or commercially distribute personal data to any third party.
pkzz shares the minimum necessary financial data with payment processors — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast / 1LINK — to facilitate the processing of deposits and withdrawals. These processors operate under their own privacy policies and are independent data controllers for the data they receive in the course of transaction processing.
pkzz works with third-party KYC and identity verification service providers to validate CNIC data submitted during account registration and the withdrawal verification process. These providers receive only the identity data necessary to complete the verification process and are contractually prohibited from using it for any other purpose.
pkzz will disclose personal data to regulatory authorities, licensing bodies, and law enforcement agencies where required to do so by law or by a valid order from a competent authority. pkzz will not disclose personal data to law enforcement authorities voluntarily or without a valid legal basis. Where permitted by law, pkzz will notify you of any such disclosure.
pkzz may share limited account and transaction data with third-party fraud prevention and anti-money-laundering screening services for the purpose of detecting and preventing financial crime on the platform. This sharing is conducted on the legal basis of legitimate interests and legal obligation.
pkzz may share personal data with its legal advisers, auditors, and accountants on a strictly need-to-know basis in the course of obtaining professional advice or conducting audits. All professional advisers engaged by pkzz are subject to confidentiality obligations.
Important: pkzz will never share your personal data with third-party advertising networks, social media platforms, data analytics companies, or marketing brokers. If you receive marketing communications purportedly from pkzz that you did not opt in to, please report this to [email protected] immediately as it may indicate a phishing attempt.
pkzz's primary platform infrastructure and data storage systems are located in secure data centre facilities. Some of the third-party service providers engaged by pkzz — including KYC verification providers and certain payment processing partners — may be located outside Pakistan. Where personal data is transferred outside Pakistan to a third-party service provider, pkzz ensures that appropriate safeguards are in place to protect the data, including contractual data processing agreements that impose data protection obligations equivalent to those that apply to pkzz under its licensing framework.
pkzz does not transfer personal data internationally for marketing, analytics, or data commercialisation purposes. International transfers occur only where operationally necessary to deliver the services you use on pkzz and are limited to the minimum data required for the specific service.
Data Residency: pkzz takes reasonable steps to ensure that Pakistani player data — particularly sensitive data such as CNIC information — is processed in jurisdictions with equivalent or higher data protection standards to those applicable to pkzz under its international gaming license.
pkzz retains personal data only for as long as is necessary to fulfil the purpose for which it was collected and to meet the minimum retention periods required by pkzz's regulatory and legal obligations. The following retention periods apply to the main categories of personal data held by pkzz:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of account plus 5 years post-closure | AML regulatory requirement |
| CNIC and KYC documentation | Duration of account plus 5 years post-closure | Licensing and AML obligation |
| Financial transaction records | 7 years from transaction date | AML regulatory requirement |
| Gaming activity records | Duration of account plus 5 years | Licensing obligation and dispute resolution |
| Self-exclusion records | Permanent (or as required by license) | Responsible gaming regulatory requirement |
| Customer support records | 3 years from last interaction | Legitimate interests / dispute resolution |
| Technical and security logs | 12 months from log date | Security and fraud prevention |
| Marketing consent records | Until consent is withdrawn, then 3 years | Legal obligation to demonstrate consent |
Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Where you request deletion of your personal data before the retention period has expired, pkzz will inform you of any legal obligation that prevents immediate deletion and the timeframe within which deletion will occur.
The pkzz platform uses cookies and similar tracking technologies to operate certain essential platform functions and to improve the user experience. The categories of cookies used on pkzz are as follows:
These cookies are essential for the pkzz platform to function. They include session authentication cookies that keep you logged in during your pkzz session, security tokens used for CSRF protection, and cookies that maintain your in-play betting session state. These cookies cannot be disabled without rendering the platform non-functional. No consent is required for strictly necessary cookies.
Functional cookies remember your preferences — for example, your preferred language setting or your responsible gaming dashboard configuration. These cookies do not track your activity across other websites. Functional cookies may be disabled, but doing so may degrade your pkzz platform experience.
pkzz may use anonymised analytics tracking to understand aggregate platform usage patterns — for example, which game categories are most visited or which pages have the highest exit rates. Any analytics data collected is anonymised before analysis and cannot be used to identify individual users. pkzz does not use third-party analytics platforms that transfer data to advertising networks.
You can manage or disable non-essential cookies through your browser settings. Most modern browsers — including Chrome, Firefox, and Safari on Android devices common in Pakistan — provide options to block or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging in to your pkzz account.
The pkzz platform is strictly for individuals aged 21 years and above. pkzz does not knowingly collect, process, or retain personal data from any individual under the age of 21. The pkzz KYC verification process — which requires CNIC submission and validation — is specifically designed to identify and exclude underage individuals before they can access any real-money gaming feature on pkzz.
If pkzz becomes aware that personal data has been collected from an individual under 21 years of age, pkzz will immediately close the relevant account, delete the personal data concerned as far as legally permissible, return any deposited funds to the original payment method, and document the incident for regulatory reporting purposes. Parents or guardians who believe their child may have registered a pkzz account should contact [email protected] immediately with relevant details.
pkzz does not direct any marketing, communications, or platform features toward individuals under 21 and does not knowingly permit access to the pkzz platform by minors at any stage of the registration or gaming journey.
pkzz recognises and respects the following data rights of its Players. To exercise any of these rights, contact pkzz at [email protected] with the subject line "Data Rights Request" and your registered Pakistani mobile number. pkzz will respond within 30 days of receipt.
Request a copy of all personal data pkzz holds about you, including your account data, transaction history, and KYC records.
Request correction of any inaccurate or incomplete personal data pkzz holds about you. Identity data corrections require re-verification.
Request deletion of your personal data where there is no longer a lawful basis for pkzz to retain it. Regulatory retention obligations may delay or prevent full deletion.
Request that pkzz restricts processing of your data — for example, while a data accuracy dispute is resolved — rather than deleting it outright.
Request that pkzz provides your personal data in a structured, machine-readable format where technically feasible and where the legal basis for processing is consent or contract.
Object to pkzz processing your personal data on the basis of legitimate interests. pkzz will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
Where pkzz is unable to fulfil a data rights request — for example, because regulatory retention obligations require continued data storage — pkzz will explain the reason in writing and advise of the timeframe within which the request can be fulfilled. pkzz will never charge a fee for processing a legitimate data rights request submitted in good faith.
pkzz implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. The key security measures in place include:
In the event of a personal data breach that is likely to result in a risk to your rights and interests, pkzz will notify affected Players as soon as reasonably practicable and will take all reasonable steps to contain the breach and prevent further unauthorised access.
If you suspect that your pkzz account has been accessed without your authorisation, contact pkzz support immediately at [email protected] or via in-platform live chat. Use your registered mobile number to verify your identity and request an immediate account lock pending investigation.
The pkzz platform does not contain links to third-party websites. pkzz's navigation and footer links refer exclusively to internal pkzz pages. pkzz bears no responsibility for the privacy practices, data handling, or security measures of any third-party website or service that a Player may access independently of pkzz.
Payments made through JazzCash, EasyPaisa, or bank transfer portals are processed through third-party payment platforms that operate under their own privacy policies. pkzz recommends that you review the privacy policies of your payment provider before submitting financial information through their platform.
pkzz reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, pkzz's licensing obligations, or pkzz's data processing practices. Material updates — meaning changes that affect how pkzz uses your data or your rights with respect to that data — will be communicated to registered Players via SMS to the registered Pakistani mobile number at least fourteen (14) days before the updated Policy takes effect.
Minor updates — including corrections of typographical errors, clarifications of existing practices, and administrative amendments that do not affect your substantive rights — may take effect immediately upon publication without individual notification. The "Last Reviewed" date at the top of this document will always reflect the date on which the most recent version was published.
Continued use of the pkzz platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not accept the terms of an updated Privacy Policy, you must close your pkzz account before the updated Policy takes effect by contacting [email protected].
All privacy-related queries, data subject access requests, consent withdrawal requests, and data protection concerns should be directed to the pkzz data protection contact using the details below:
pkzz Data Protection Contact
Email: [email protected]
Subject Line: "Privacy / Data Request"
Response Time: Within 30 days of receipt
Languages: English and Urdu
Hours: 24 hours a day, 7 days a week
When submitting a data rights request, please include your registered Pakistani mobile number and a clear description of the specific right you wish to exercise or the query you wish to raise. This will allow pkzz to verify your identity and route your request to the appropriate team for the fastest possible response.
If you are not satisfied with pkzz's response to a data protection concern, you have the right to escalate the matter to the relevant regulatory authority or licensing body. Details of the applicable escalation process are available from pkzz support upon request. pkzz is committed to resolving all data protection concerns transparently and in good faith — we encourage you to contact us directly before pursuing formal escalation, as most concerns can be resolved promptly through pkzz's internal process.
For general account questions, payment queries, and gaming support matters that are not specific to data protection, please use the standard pkzz support channel. See the pkzz FAQ for answers to common questions.
Age Restriction — 21+ Only. pkzz enforces a strict minimum age of 21 years on all real-money gaming activities. This is a binding condition of the pkzz international gaming license and is enforced through mandatory CNIC-based identity verification. If you are under 21, you must not register a pkzz account or use any pkzz Gaming Products. If you are concerned about problem gambling — for yourself or someone you know — please visit the pkzz Responsible Gaming page for self-exclusion tools and guidance resources available to Pakistani players.
Internationally licensed, PKR-native, and committed to responsible data handling — pkzz is Pakistan's most trusted online gaming platform. Cricket, casino, slots, and instant games — all secured to banking-grade standards.
21+ only. Gambling involves risk. Please play responsibly. Full Terms & Conditions apply.