Privacy Policy

This Privacy Policy (hereinafter referred to as "this Policy", "the Policy" or "this Privacy Policy") is issued by pkmaga (hereinafter referred to as "pkmaga", "we", "us" or "our") and governs the collection, processing, storage, transfer and protection of personal data relating to users (hereinafter referred to as "you", "your" or "the User") of the pkmaga website located at https://pkmaga.cam and all associated services, features and digital infrastructure.

pkmaga is an English-language online gaming information and platform site targeting Pakistani users. We are committed to processing personal data responsibly, transparently and in compliance with applicable data protection law. This Policy has been written in plain, accessible English to ensure that every user — whether based in Karachi, Lahore, Islamabad, Rawalpindi, Peshawar, Multan or anywhere else in Pakistan — can understand how their data is handled.

By registering an Account on pkmaga, using any of our Services or browsing the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing practices described herein to the extent required by applicable law. If you do not accept the terms of this Policy, you must discontinue use of the pkmaga Platform.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, contact details, financial information, device identifiers and behavioural data collected in connection with your use of the Platform;
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transfer or erasure;
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, the Data Controller is pkmaga;
• "Data Processor" — a third party that processes Personal Data on behalf of the Data Controller pursuant to a written agreement;
• "Consent" — a freely given, specific, informed and unambiguous indication of a User's agreement to the processing of their Personal Data for a stated purpose;
• "KYC" — Know Your Customer; the identity and age verification process required by the Platform for regulatory compliance;
• "Cookies" — small text files or similar technologies placed on a User's device by the Platform to enable functionality, session management and analytics;
• "Third Party" — any natural or legal person other than the User or pkmaga, including payment processors, technology providers and regulatory authorities.

pkmaga is the Data Controller in respect of the Personal Data collected through the Platform. As Data Controller, pkmaga determines the purposes for which Personal Data is processed and the means by which such processing is carried out. pkmaga is responsible for ensuring that all processing activities comply with applicable data protection legislation in the jurisdiction(s) in which the operator is licensed.

Where pkmaga engages third-party service providers to process Personal Data on its behalf, such providers are appointed as Data Processors and are contractually bound to process data only as directed by pkmaga, to implement appropriate technical and organisational security measures and to handle data in accordance with applicable law.

pkmaga collects the following categories of Personal Data, depending on how you interact with the Platform:

pkmaga collects Personal Data through the following means:

• When you register an Account on pkmaga, including provision of your name, email address, date of birth and contact details;
• When you complete the KYC verification process and submit identity documents;
• When you make deposits or withdrawals and provide payment method information;
• When you contact our support team via live chat, email or any other available channel;
• When you update your Account profile, communication preferences or responsible gambling settings;
• When you participate in surveys, promotions or feedback requests.

• Through cookies, web beacons and similar tracking technologies as you browse and use the Platform (see Section 11 — Cookies);
• Through our server logs, which automatically record IP addresses, access times, device type and browser information;
• Through analytics tools that monitor Platform performance and user interaction patterns.

• From payment processors and financial institutions during the processing of deposits, withdrawals and fraud checks;
• From identity verification service providers engaged to assist with KYC and AML compliance;
• From credit reference, fraud prevention or sanctions screening agencies where required by law or internal compliance policy;
• From publicly available sources such as government databases or published sanctions lists.

pkmaga processes Personal Data only for specified, explicit and legitimate purposes. The table below summarises the primary processing activities, their purposes and the applicable legal basis:

pkmaga does not sell, rent or trade your Personal Data to third parties for their own marketing purposes. Personal Data may be shared in the following limited circumstances:

pkmaga may share Personal Data with carefully selected third-party service providers who assist in delivering our Services, including:

• Payment processors and financial intermediaries responsible for facilitating deposits and withdrawals;
• Identity verification and KYC technology providers;
• Fraud detection, sanctions screening and risk management services;
• Cloud hosting and IT infrastructure providers;
• Customer support technology platforms;
• Analytics and performance monitoring services.

All such service providers are bound by contractual data processing agreements that prohibit them from using your data for purposes other than those specified by pkmaga and require them to implement adequate security measures.

pkmaga may disclose Personal Data to competent authorities, regulatory bodies, law enforcement agencies or courts where required to do so by applicable law, court order, or where such disclosure is reasonably necessary to:

• Comply with a legal obligation;
• Protect and defend the rights and property of pkmaga;
• Prevent or investigate suspected fraud, illegal activity or security threats;
• Protect the personal safety of pkmaga users or the public.

In the event of a merger, acquisition, reorganisation or sale of all or a substantial portion of pkmaga's assets, Personal Data held by pkmaga may be transferred to the acquiring entity as part of that transaction, subject to confidentiality protections consistent with this Policy.

pkmaga operates in an international environment. In the course of providing our Services, your Personal Data may be transferred to, stored in, or processed by parties located in countries outside your country of residence, including countries that may have different data protection standards from those in your jurisdiction.

Where Personal Data is transferred internationally, pkmaga takes reasonable steps to ensure that such transfers are subject to appropriate safeguards. These may include:

• Standard contractual clauses approved by a competent supervisory authority;
• Binding corporate rules or equivalent arrangements with group entities;
• Transfers to countries recognised as providing an adequate level of data protection by the relevant licensing authority.

pkmaga retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The following retention principles apply:

• Account Data: Retained for the duration of the active account relationship and for a minimum period thereafter as required by applicable regulatory obligations. Anti-money-laundering regulations typically mandate a retention period of five (5) years following account closure;
• Transaction Records: Financial and transaction data is retained for regulatory compliance purposes, generally for a minimum of five (5) to seven (7) years after the transaction date, depending on the applicable jurisdiction;
• KYC Documents: Identity verification documents are retained for the period required by applicable AML and gaming regulations in the operator's licensing jurisdiction;
• Communications Data: Support and complaint correspondence is retained for the period necessary to resolve the matter and thereafter for a reasonable period in the event of subsequent disputes;
• Technical & Usage Data: Log data and anonymised analytics data may be retained for shorter periods for Platform security and improvement purposes.

Upon the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data destruction procedures.

pkmaga implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss or destruction. These measures include, but are not limited to:

• SSL/TLS Encryption: All data transmitted between your device and the pkmaga Platform is encrypted using industry-standard Secure Socket Layer (SSL) / Transport Layer Security (TLS) protocols;
• Password Hashing: Account passwords are stored as salted cryptographic hashes — never in plain text. pkmaga staff cannot retrieve your password and will never ask you to disclose it;
• Access Controls: Access to Personal Data is restricted on a need-to-know basis. Personnel with access to sensitive data are subject to confidentiality obligations and security training;
• Two-Factor Authentication: Where available, we encourage Users to enable two-factor authentication (2FA) on their accounts for additional protection;
• Regular Security Reviews: pkmaga's security infrastructure is subject to periodic review and testing to identify and remediate vulnerabilities;
• Secure Document Handling: KYC documents are processed through pkmaga's HTTPS-secured verification portal and stored in encrypted form. Users must never transmit sensitive documents through unencrypted channels.

pkmaga uses cookies and similar technologies (including web beacons, pixel tags and local storage) to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform that enables certain functions and remembers your preferences across sessions.

You may manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please be aware that disabling strictly necessary cookies may impair the functionality of the Platform, including your ability to log in or use the cashier. Refer to your browser's help documentation for instructions on managing cookie preferences.

The pkmaga Platform is strictly intended for adults aged 18 years or older, or the higher minimum age required by the operator's applicable license jurisdiction. pkmaga does not knowingly collect Personal Data from individuals under the eligible minimum age.

Where pkmaga becomes aware that Personal Data has been collected from a minor, we will take immediate steps to delete that data and terminate the associated Account. If you have reason to believe that a minor has registered an Account on pkmaga, please contact our support team immediately at the address provided in Section 17.

pkmaga applies age verification controls as part of the account registration and KYC processes. Providing false date-of-birth information to circumvent these controls is a serious breach of the pkmaga Terms & Conditions and may result in account termination and forfeiture of all associated funds.

Subject to applicable law and certain exceptions, you have the following rights in respect of your Personal Data held by pkmaga. These rights may be exercised by contacting our support team using the details in Section 17.

pkmaga may send you promotional communications — including bonus offers, platform news and event notifications — by email or other channels only where you have provided explicit consent to receive such communications. Consent is typically obtained during the account registration process.

You may withdraw your consent to marketing communications at any time by:

• Updating your communication preferences within your Account settings;
• Using the unsubscribe link included in any marketing email;
• Contacting pkmaga support at the address provided in Section 17 and requesting removal from marketing lists.

Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal, nor does it affect the sending of service-related communications (such as account security alerts, withdrawal confirmations or important policy updates), which are sent on the basis of contractual necessity rather than consent.

The pkmaga Platform does not intentionally include links to external third-party websites for navigation or commercial purposes. However, pkmaga integrates with third-party service providers — including payment processors, identity verification platforms and game technology providers — whose services form part of the Platform's operational infrastructure.

Such third-party services operate under their own privacy policies and terms of service. pkmaga is not responsible for the data practices of third-party service providers beyond those governing their role as Data Processors under our binding agreements. Users should review the privacy policies of any third-party payment providers they use in connection with the Platform.

The reference to payment brands such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah in this Policy is for contextual description of data categories only. These providers operate independently and are subject to their own privacy and data protection obligations.

pkmaga reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements or business operations. The "Last reviewed" date displayed at the top of this page will be updated whenever a material revision is made.

Where changes are significant, pkmaga will endeavour to notify registered Users via email or an in-platform notification prior to the changes taking effect. Your continued use of the Platform following notification of any revised Privacy Policy constitutes your acceptance of those changes.

We encourage you to review this Privacy Policy periodically to remain informed about how pkmaga protects your Personal Data. If you object to any amendment, you should cease using the Platform and may request account closure by contacting our support team.

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data by pkmaga, please contact us using the following details. All data-related enquiries are handled by the pkmaga support team.