Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") sets out the basis on which pk2cars ("the Platform", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal data relating to individuals ("you", "the Player", "the User") who access or use the pk2cars online gaming platform available at pk2cars.net.

1.2 pk2cars takes the privacy and security of personal data extremely seriously. We process personal data only where we have a clear lawful basis for doing so and only to the extent necessary to fulfil the purposes set out in this Policy. We do not monetise player data by selling it to third parties.

1.3 This Policy should be read alongside the pk2cars Terms & Conditions, which are available at /terms-conditions , and the Responsible Gaming Policy at /responsible-gaming. Together, these documents form the complete framework governing your relationship with pk2cars.

1.4 pk2cars serves players across Pakistan, including in Karachi, Lahore, Islamabad, Faisalabad, and beyond. We recognise our responsibilities under applicable data protection principles and have designed our data practices accordingly.

2. Data Controller

2.1 For the purposes of this Policy, pk2cars is the data controller in respect of all personal data collected from players using the pk2cars platform. As data controller, pk2cars determines the purposes for which and the manner in which personal data is processed.

2.2 pk2cars operates under an internationally recognised gaming licence. Queries relating to data protection matters may be directed to our support team via live chat or in writing to [email protected].

2.3 Where pk2cars engages third-party service providers to process personal data on its behalf — for example, payment processors or identity verification providers — those parties act as data processors under pk2cars's instruction and are bound by contractual obligations that require them to protect your data to a standard equivalent to that described in this Policy.

3. Data We Collect

3.1 pk2cars collects the following categories of personal data from players:

3.2 pk2cars does not collect special category data (such as health data, racial or ethnic origin, or religious beliefs) unless you voluntarily provide such information in the context of a responsible gaming self-assessment or a support interaction, in which case it will be treated with the highest level of protection and used solely for the purpose for which it was provided.

4. How We Collect Your Data

4.1 Directly from you. The majority of personal data we hold is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account profile.

4.2 Automatically through platform use. When you access and use the pk2cars platform, we automatically collect Technical Data and Usage Data through server logs, cookies, pixel tags, and similar tracking technologies. This data is collected regardless of whether you are logged in to an account.

4.3 From third parties. pk2cars may receive personal data about you from third-party identity verification providers, fraud prevention databases, payment processors, and where applicable, from publicly available sources such as sanctions screening lists. This data is used solely to verify your identity, comply with our legal obligations, and protect the integrity of the platform.

4.4 From other pk2cars group entities. Where pk2cars operates as part of a group of affiliated entities, data may be shared within the group for the purposes of fraud prevention, KYC compliance, and responsible gaming monitoring, subject to appropriate data sharing agreements.

5. Purpose & Legal Basis for Processing

5.1 pk2cars processes your personal data only where a lawful basis exists under applicable data protection law. The primary lawful bases we rely on are: performance of a contract (your account agreement with pk2cars); compliance with a legal obligation (including anti-money laundering, KYC, and licensing requirements); legitimate interests (fraud prevention, platform security, and responsible gaming monitoring); and, where required, your consent.

5.2 The table below summarises the key purposes for which we process your personal data and the corresponding lawful basis:

5.3 Where we rely on legitimate interests as the lawful basis, we have assessed that our interests are not overridden by your data protection rights. You may object to processing carried out on the basis of legitimate interests at any time — see Section 9 for details of your rights.

5.4 Marketing communications. pk2cars will only send you promotional emails, SMS messages, or push notifications where you have opted in to receive such communications at the time of registration or subsequently through your account settings. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your pk2cars account or by contacting support.

6. Sharing Your Data

6.1 pk2cars does not sell, rent, or trade your personal data to third parties. We share your personal data only in the circumstances described below, and only to the minimum extent necessary:

• Payment processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency channel operators require transaction data to process your deposits and withdrawals. These parties receive only the financial data necessary to complete the transaction.
• KYC and identity verification providers — Third-party providers engaged to verify your identity, age, and address as required by our licensing obligations. These providers process your identity documents and verification data under strict confidentiality obligations.
• Fraud prevention and AML screening services — Industry fraud prevention databases and sanctions screening services used to protect the platform from financial crime and to comply with anti-money laundering regulations.
• Technology and hosting providers — Cloud infrastructure, platform software, and security service providers who host and maintain the pk2cars platform. These providers process data only under pk2cars's instruction.
• Regulatory and licensing authorities — pk2cars may be required to disclose player data to its licensing authority, financial intelligence units, or law enforcement agencies where required by law or by a valid legal request.
• Professional advisers — Legal, accounting, and auditing firms engaged by pk2cars where disclosure of personal data is necessary for the provision of professional services, subject to confidentiality obligations.

6.2 All third parties with whom pk2cars shares personal data are required to implement appropriate technical and organisational security measures and to use the data only for the specified purpose. pk2cars does not permit third-party service providers to use your data for their own marketing or commercial purposes.

7. Data Retention

7.1 pk2cars retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

7.2 As a general rule, account data and transaction records are retained for a minimum of five years from the date of the last transaction on the account, as required by anti-money laundering legislation. KYC documentation is retained for the same period.

7.3 Where an account is closed at the Player's request, pk2cars will delete or anonymise personal data that is no longer required for legal compliance purposes within a reasonable period following the expiry of the applicable retention period. Technical and usage data collected through cookies may be retained in anonymised and aggregated form indefinitely for platform analytics purposes.

7.4 Responsible gaming records, including self-exclusion requests and deposit limit histories, are retained for a minimum of five years to enable pk2cars to enforce self-exclusion obligations and to defend against regulatory or legal challenges.

8. Security Measures

8.1 pk2cars implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the pk2cars platform;
• AES-256 encryption for sensitive data stored in pk2cars databases;
• Role-based access controls limiting internal access to personal data to authorised personnel only;
• Multi-factor authentication for all administrative access to systems holding personal data;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Continuous monitoring of systems for suspicious activity, intrusion attempts, and data anomalies;
• Formal incident response procedures in place to detect, contain, and report data breaches in a timely manner.

8.2 Notwithstanding the above, no system connected to the internet is entirely immune from security risks. pk2cars strongly encourages all players to use a unique, strong password for their pk2cars account and to enable any available two-factor authentication. If you suspect that your account has been accessed without your authorisation, please contact pk2cars support immediately.

9. Your Data Protection Rights

9.1 Subject to applicable law and certain exceptions, you have the following rights in relation to your personal data held by pk2cars:

9.2 To exercise any of the above rights, please contact pk2cars support via live chat or in writing at [email protected]. We will respond to verified requests within thirty calendar days. We may need to verify your identity before processing a data rights request.

9.3 pk2cars will not charge a fee for handling data rights requests unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied or the request may be refused, with reasons provided.

10. Cookies Policy

10.1 pk2cars uses cookies, web beacons, pixel tags, and similar tracking technologies on its platform. Cookies are small text files placed on your device when you visit a website. They allow the platform to recognise your device, remember your preferences, and collect usage data.

10.2 pk2cars uses the following categories of cookies:

• Strictly necessary cookies — Required for the platform to function correctly, including session management, login authentication, and security features. These cookies cannot be disabled.
• Functional cookies — Remember your preferences such as language settings, preferred game categories, and deposit limits previously set.
• Analytics cookies — Collect aggregated, anonymised data about how players interact with the platform, helping pk2cars improve performance and user experience. These are only set with your consent.
• Marketing cookies — Used to deliver relevant promotional content based on your interests, subject to your opt-in consent to marketing communications.

10.3 You can manage your cookie preferences through the cookie settings panel accessible from the platform footer. You may also control cookies through your browser settings, though disabling certain cookies may affect the functionality of the pk2cars platform.

11. Minors

11.1 pk2cars is strictly an adult platform available to persons aged 21 years and over only. pk2cars does not knowingly collect personal data from persons under the age of 21. Where we become aware that personal data has been collected from a person under 21, we will immediately close the associated account, delete the personal data, and return any funds to the verified payment source.

11.2 If you are a parent or guardian and believe that your child has registered an account or provided personal data to pk2cars without your knowledge, please contact pk2cars support immediately via live chat so that we can investigate and take appropriate action.

11.3 pk2cars recommends the use of parental control software on shared devices to prevent minors from accessing online gaming platforms. More information on responsible gaming tools is available on our Responsible Gaming page.

12. International Data Transfers

12.1 pk2cars operates globally and may transfer your personal data to, or process it in, countries outside of Pakistan. Where such transfers occur, pk2cars ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under applicable data protection law.

12.2 Safeguards used by pk2cars for international data transfers may include: standard contractual clauses approved by a competent supervisory authority; binding corporate rules; adequacy decisions; or other lawful transfer mechanisms as applicable.

12.3 You may request further information about the safeguards in place for any specific international transfer of your personal data by contacting pk2cars support.

13. Changes to This Privacy Policy

13.1 pk2cars reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to players via email to their registered address and/or via a notice displayed prominently on the pk2cars platform at least seven days before the changes take effect.

13.2 The "Last updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how pk2cars protects your personal data.

13.3 Your continued use of the pk2cars platform following the effective date of any amendment to this Policy constitutes your acknowledgement of the revised Policy. If you do not accept the revised Policy, you must cease using the platform and request account closure.

14. Contact & Complaints

14.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which pk2cars processes your personal data, please contact our support team in the first instance:

• Live Chat: Available 24 hours a day, 7 days a week through the pk2cars platform.
• Email: [email protected] (plain text only — this address is for written enquiries and is not a clickable link).

14.2 pk2cars aims to resolve all privacy-related queries within thirty calendar days of receipt of a verified request. Where a query is particularly complex, we will notify you of the extended timeline and the reason for it.

14.3 If you are not satisfied with pk2cars's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. pk2cars will cooperate fully with any such regulatory investigation.

This Privacy Policy was last reviewed and approved by the pk2cars compliance team on 1 January 2026. It supersedes all prior versions of the pk2cars Privacy Policy.