pak56 Privacy Policy

This Privacy Policy ("Policy") is published by pak56 ("pak56", "we", "us", "our") and applies to all personal data collected through the pak56 website at pak56.net, its mobile interface, betting platform, casino products, lottery services, and all associated features (collectively, the "Platform").

pak56 is an internationally licensed gaming operator. As part of our licensing obligations and our own commitment to player welfare, we maintain rigorous data protection standards. This Policy explains, in plain English, exactly what personal information we gather when you use the pak56 Platform, why we need it, how long we keep it, and the rights you can exercise over it at any time.

By creating an account on pak56, or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of your agreement with pak56.

pak56 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and from third-party identity verification and payment processing providers. The categories of data we collect are set out below.

pak56 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than CNIC facial photo for identity verification purposes), or health data — unless you voluntarily disclose such information in the context of a responsible gaming support interaction, in which case it is treated with the highest level of confidentiality.

pak56 uses your personal data only for purposes that are directly connected to the operation of the Platform and our obligations as a licensed gaming operator. We do not use your data for purposes you would not reasonably expect. The primary purposes for which we process personal data are:

• Account creation and management: To register your account, authenticate your identity at login, and maintain an accurate record of your account status and history.
• Identity verification (KYC): To fulfil our Know Your Customer obligations under our gaming licence, which require us to verify the identity and age (21+) of all account holders before processing withdrawals.
• Payment processing: To facilitate deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Debit Card, and USDT TRC20; and to maintain an accurate transaction record for your account.
• Provision of gaming services: To deliver cricket betting, PSL live odds, slot games, live casino, lottery, and all other Platform products to your account.
• Fraud prevention and AML compliance: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, collusion, and other prohibited conduct under our Terms & Conditions.
• Responsible gaming: To monitor betting patterns for signs of problem gambling, to apply and enforce the deposit limits, loss limits, cooling-off periods, and self-exclusion restrictions you have set, and to proactively contact players showing indicators of gambling harm.
• Customer support: To respond to your queries, complaints, and account-related requests through live chat and email.
• Platform improvement: To analyse aggregated, anonymised usage data to identify technical issues, improve user experience, and develop new features. This analysis uses anonymised data only and cannot be linked back to individual players.
• Legal and regulatory compliance: To meet our obligations to our licensing authority, to respond to lawful requests from law enforcement or financial intelligence units, and to maintain records as required by applicable law.

pak56 processes personal data on one or more of the following legal bases, in accordance with internationally recognised data protection principles:

• Contractual necessity: The majority of data processing carried out by pak56 is necessary for the performance of your contract with us — i.e., the provision of betting, casino, and payment services under our Terms & Conditions. Without this processing, we cannot operate your account.
• Legal obligation: pak56 is required by its gaming licence and applicable financial regulations to collect identity documents, maintain transaction records, conduct AML screening, and report certain activities to regulatory authorities. This processing is mandatory and cannot be opted out of.
• Legitimate interests: pak56 processes certain technical and behavioural data on the basis of its legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and improving the quality of its services, provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where pak56 processes personal data for marketing communications or for optional responsible gaming features beyond the legally required minimum, such processing is based on your consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

pak56 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the specific purpose.

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and our card and crypto processing partners receive the minimum financial data required to process your transactions. All payment partners are contractually bound to process this data solely for the purpose of transaction execution.
• Identity verification providers: pak56 uses third-party KYC service providers to assist with CNIC verification and age confirmation. These providers process your identity documents under a strict data processing agreement and are not permitted to retain or use your data for their own purposes.
• Game providers: Third-party game studios that supply casino, slot, and lottery products on the pak56 Platform receive a pseudonymised player identifier and session data necessary to deliver the game. They do not receive your name, CNIC, or payment details.
• Regulatory and law enforcement authorities: pak56 will disclose personal data to its licensing authority, financial intelligence units, the Federal Investigation Agency (FIA), or any other competent authority where required to do so by law, court order, or regulatory directive. pak56 will notify affected players of such disclosures where legally permitted to do so.
• Group companies: Personal data may be shared within the pak56 corporate group for the purposes of internal compliance, risk management, and audit. All group entities are bound by data protection standards equivalent to those set out in this Policy.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of pak56's business assets, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer and of any material change to the processing of your data that results from it.

pak56 uses cookies and similar tracking technologies to operate the Platform, maintain session security, and analyse usage patterns. The categories of cookies we use are as follows:

pak56 does not use third-party advertising cookies or behavioural targeting cookies. You can manage your cookie preferences via the cookie settings panel, accessible from the footer of any page on the Platform. Please note that disabling strictly necessary or responsible gaming cookies may impair Platform functionality or prevent account access.

pak56 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply:

• Account and identity data: Retained for the lifetime of your account and for a minimum of 5 years following account closure, as required by our gaming licence and AML regulations.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping requirements applicable to licensed gaming operators.
• Betting and gaming history: Retained for the lifetime of your account and for 2 years following account closure, or longer where required for the resolution of disputes or regulatory investigations.
• Support communications: Retained for 2 years from the date of the final communication in each support thread, to support dispute resolution and quality assurance.
• Self-exclusion records: Retained permanently, in order to prevent re-registration by self-excluded players. This is a licensing requirement and cannot be waived.
• Marketing consent records: Retained for the period during which consent is active, plus 1 year following withdrawal of consent, as evidence of compliance.

At the end of each applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data cannot be immediately deleted due to technical constraints (e.g., backup systems), it is isolated from active processing until deletion can be completed.

pak56 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and pak56's servers.
• AES-256 encryption at rest for all stored personal and financial data.
• Multi-factor authentication (MFA) available for all player accounts, and mandatory for all pak56 staff with access to production systems.
• Role-based access controls: pak56 staff access to personal data is strictly limited on a need-to-know basis. Support agents can view only the account data necessary to resolve your query; they cannot view your full CNIC number or payment credentials.
• Regular penetration testing conducted by independent third-party security specialists at least annually.
• Intrusion detection systems monitoring pak56's infrastructure for anomalous access patterns in real time.
• Incident response plan: In the event of a personal data breach, pak56 will notify affected players and, where legally required, the relevant regulatory authority within 72 hours of becoming aware of the breach.

As a pak56 player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team via live chat or by emailing [email protected] with the subject line "Data Rights Request".

• Right of Access: You may request a copy of all personal data pak56 holds about you. We will provide this in a structured, machine-readable format within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. Identity data corrections require re-verification of your CNIC.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn your consent. Please note that this right is limited by our legal obligation to retain certain data for a minimum of 5 years following account closure.
• Right to Restriction of Processing: You may request that pak56 restrict the processing of your data (i.e., store it but not use it) while a rectification or objection request is being assessed.
• Right to Data Portability: You may request that pak56 transfer your account and transaction data to you or to another provider in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on pak56's legitimate interests at any time. You also have an unconditional right to opt out of direct marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

All data rights requests are processed within 30 days. Where a request is complex or involves a large volume of data, pak56 may extend this period by a further 30 days, in which case you will be notified of the extension and the reason for it within the initial 30-day window.

pak56 operates a strict 21+ only policy. The Platform is not directed at, and must not be used by, any individual under the age of 21 years. pak56 does not knowingly collect personal data from individuals under the age of 21.

As part of our KYC process, all players are required to submit a valid CNIC, which confirms that the holder is at least 18 years old. pak56 additionally requires players to confirm their date of birth at registration and conducts automated age-verification checks against CNIC data provided during the withdrawal verification process.

If pak56 becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend that account, void all associated bets and balances, delete the data in question, and report the matter to our licensing authority as required by our operating licence.

If you are a parent or guardian and believe that your child has registered an account with pak56, please contact us immediately via live chat or at [email protected]. We will investigate and take immediate action.

pak56 is an internationally licensed gaming operator. Some of the third-party service providers we work with — including KYC verification providers, game studios, and cloud infrastructure partners — may process personal data in countries outside Pakistan. Where such international transfers occur, pak56 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy.

These safeguards include:

• Contractual data processing agreements incorporating standard data protection clauses with all third-party processors located outside Pakistan.
• Transfers only to countries or organisations that maintain data protection standards assessed as adequate by our licensing authority.
• Technical encryption measures ensuring that personal data is protected in transit and at rest, regardless of the jurisdiction in which it is processed.

If you would like more information about the specific safeguards in place for any particular international transfer of your data, please contact us at [email protected].

pak56 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or the products and services we offer. The "Effective Date" at the top of this page will be updated each time a new version is published.

Where a material change is made to this Policy — for example, a change to the categories of data we collect, a new category of data sharing, or a change to your rights — pak56 will notify active account holders via email at least 14 days before the change takes effect. For non-material changes (such as clarifications of existing language), we may update the Policy without advance notice.

Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the Platform and contact support to close your account.

If you have any questions, concerns, or complaints about how pak56 processes your personal data, or if you wish to exercise any of your data rights, please contact us through one of the following channels:

• Live Chat: Available 24/7 directly from the Platform. For data rights requests, please state "Data Rights Request" at the start of your message.
• Email: [email protected] — please use the subject line "Privacy Query" or "Data Rights Request" as appropriate.

pak56 aims to resolve all privacy- related queries within 5 business days. If you are not satisfied with our response, or if you believe that pak56 is processing your personal data in violation of applicable data protection law, you have the right to escalate your complaint to our licensing authority or to the relevant data protection supervisory authority in the jurisdiction of our licence.