This Privacy Policy explains in plain, direct terms how pk40 collects, stores, uses, and protects your personal information when you register, deposit, play games, or contact us through the pk40 platform. We believe Pakistani players deserve a clear and honest explanation of what happens with their data — not pages of legalese designed to obscure rather than inform. Please read this document carefully before creating your pk40 account.
These six principles define how pk40 approaches your privacy. They summarise the spirit of this policy — read the full document below for the complete legal detail.
pk40 encrypts all personal data at rest and in transit using industry-standard AES-256 and TLS 1.3 protocols. Your CNIC details, mobile number, and financial information are never stored in plain text on pk40 servers.
pk40 does not sell, rent, or trade your personal information to third-party advertisers or data brokers under any circumstances. Your data exists to serve your experience on pk40, not to fund unrelated commercial interests.
Data collected by pk40 is used only for the specific purposes disclosed in this Privacy Policy — account management, payment processing, fraud prevention, regulatory compliance, and improving your experience on the platform.
pk40 recognises and upholds your right to access, correct, and request deletion of your personal data subject to applicable regulatory retention obligations. All requests are handled within 30 days of receipt.
pk40 collects only the data that is genuinely necessary for operating a licensed gaming platform in compliance with our international gaming license obligations. We do not collect data for speculative future purposes.
This Privacy Policy is written in plain English and published openly at all times. pk40 will notify registered users of any material changes before they take effect, giving you a clear opportunity to review and respond.
Notice: This Privacy Policy applies to all users of the pk40 platform at https://pk40.bid and any associated mobile-optimised interfaces. By creating a pk40 account or using the platform in any capacity, you confirm that you have read and understood this policy and consent to the data practices it describes. This policy is incorporated by reference into the pk40 Terms & Conditions.
pk40 is an online gaming platform operating at https://pk40.bid and is the data controller responsible for the personal information of all registered users. pk40 holds an international gaming license and operates in compliance with the data protection standards required by its licensing authority, which include obligations in relation to KYC (Know Your Customer) data, anti-money laundering records, and responsible gaming information.
As data controller, pk40 determines the purposes and means by which your personal data is processed. If you have any questions about this Privacy Policy or how pk40 handles your data, please contact our support team using the details in Section 15 of this document.
pk40 serves players across Pakistan — including in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and Peshawar — and is designed specifically around the payment infrastructure, device landscape, and expectations of Pakistani users.
pk40 collects the following categories of personal data from users of the platform. Collection occurs at registration, during ongoing platform use, and as part of KYC and payment verification procedures:
pk40 collects personal data through the following mechanisms:
| Purpose | Data Used |
|---|---|
| Account creation and management | Identity, contact, device data |
| Age and identity verification (KYC) | CNIC, date of birth, full name |
| Processing deposits and withdrawals | Financial data, transaction records |
| Fraud prevention and anti-money laundering compliance | Identity, financial, IP, device data |
| Delivering and personalising pk40 gaming services | Gaming activity, preferences, session data |
| Responsible gaming monitoring and intervention | Gaming activity, session data, limits set |
| Regulatory reporting to licensing authority | Identity, financial, gaming activity data |
| Customer support and complaint resolution | Communication data, account history |
| Platform security and technical improvement | Technical, device, session data |
pk40 does not use your personal data for purposes beyond those listed above without first obtaining your explicit consent or unless required by applicable law or our licensing obligations.
pk40 processes personal data on the following legal bases, depending on the specific purpose of processing:
pk40 does not sell, rent, or trade your personal data. We share your information only with third parties who are directly necessary for the operation of pk40 and under strict contractual obligations that require them to protect your data to the same standards pk40 applies internally:
JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card payment processors receive transaction data necessary to execute your deposits and withdrawals. These providers operate under their own regulatory and data protection obligations in Pakistan and internationally.
Certified third-party game studios supply the casino, slot, and live dealer games available on pk40. Session and wagering data is transmitted to these providers for game delivery and RNG certification purposes. These providers are contractually prohibited from using your data for any purpose beyond game delivery.
pk40 uses certified KYC verification partners to process CNIC documents and confirm age and identity. These providers operate under strict data security and confidentiality agreements and are prohibited from retaining your documents beyond the verification period.
pk40 is obligated to disclose personal and financial data to its licensing authority, relevant law enforcement agencies, or financial intelligence units where required by applicable law, court order, or regulatory directive. pk40 will notify affected users of such disclosures where legally permitted to do so.
All third-party service providers engaged by pk40 are required to sign Data Processing Agreements (DPAs) that impose binding obligations on data security, purpose limitation, and user confidentiality.
As an internationally licensed gaming platform, pk40 may process your data on servers located outside Pakistan. Where data is transferred to servers in other jurisdictions, pk40 ensures that appropriate safeguards are in place, including Standard Contractual Clauses approved by internationally recognised data protection authorities, to ensure your data receives equivalent protection regardless of where it is physically processed.
Specific jurisdictions to which your data may be transferred include the location of pk40's licensing authority and the server infrastructure of certified game providers. pk40 maintains an internal register of all data transfer destinations and the safeguards applied to each.
pk40 retains your personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply:
Following the expiry of applicable retention periods, pk40 will securely delete or anonymise your personal data in accordance with its data disposal procedures.
pk40 uses cookies and similar tracking technologies on the platform. Cookies are small text files placed on your device when you access pk40. The following categories of cookies are used:
pk40 does not use third-party advertising cookies or tracking pixels that share your data with external advertising networks. Your pk40 session data stays within the pk40 ecosystem.
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the pk40 platform from functioning correctly, including the ability to log in and access your account.
As a pk40 user, you hold the following rights in relation to your personal data. These rights are subject to applicable legal and regulatory obligations — for example, pk40 cannot delete transaction data required to be retained under anti-money laundering law:
Request a copy of the personal data pk40 holds about you. We will provide this within 30 days of a verified request.
Request correction of inaccurate or incomplete personal data held on your pk40 account. Contact support with the correction needed.
Request deletion of your personal data where retention is no longer required by law or regulatory obligation. Regulatory retention minimums apply.
Request that pk40 restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being contested.
Request a structured, machine-readable export of data you have provided to pk40 where processing is based on consent or contract performance.
Object to processing of your data for legitimate interests purposes. pk40 will cease such processing unless compelling grounds override your objection.
To exercise any of these rights, contact pk40 support using the details provided in Section 15. We will acknowledge all requests within five (5) business days and provide a full response within thirty (30) days. We may need to verify your identity before processing certain requests.
21+ Only: The pk40 platform is strictly for individuals aged 21 years and older. pk40 does not knowingly collect personal data from individuals under the age of 21. If you become aware that a minor has created a pk40 account or submitted personal data, please notify us immediately at the contact details in Section 15. We will investigate and close any such account promptly.
pk40 applies CNIC-based age verification as its primary mechanism for ensuring compliance with the 21+ age restriction. In cases where CNIC documents are not promptly provided, pk40 restricts account functionality pending successful age verification. This protects both underage users and the regulatory standing of the pk40 platform.
pk40 implements the following technical and organisational security measures to protect your personal data:
While pk40 applies rigorous security measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to user rights, pk40 will notify affected users and the relevant regulatory authority without undue delay, and in any case within 72 hours of becoming aware of the breach where feasible.
The pk40 platform may contain references to third-party game providers, payment gateways, or informational content. Where you interact with third-party services directly — for example, completing a payment via JazzCash's own interface — those interactions are governed by the third party's own privacy policy, not this document. pk40 is not responsible for the data practices of third-party services outside the pk40 platform boundary.
pk40 does not embed third-party advertising networks or social media tracking pixels within the platform. Any pk40 social media presence on external platforms (such as Facebook or Instagram pages) is governed by those platforms' own privacy policies in relation to the data they collect from your interactions with those pages.
pk40 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, changes to applicable law, or changes to our licensing obligations. Where changes are material — meaning they significantly affect how we collect, use, or share your data — pk40 will notify registered users via the mobile number or contact details associated with their account at least 14 days before the changes take effect.
The updated Privacy Policy will always be accessible at https://pk40.bid/privacy-policy. The date at the top of the document reflects when the most recent review and update was completed. Continued use of the pk40 platform after the effective date of any updated policy constitutes your acceptance of the revised terms.
We recommend bookmarking this page and reviewing it periodically, particularly around significant platform updates or at the start of each PSL cricket season when promotional activity on pk40 typically increases and new data processing activities may be introduced.
For any enquiries related to this Privacy Policy, including requests to exercise your data rights, questions about how pk40 processes your personal information, or notifications of suspected data breaches or privacy violations, please contact the pk40 Data Protection team:
Email: [email protected] (plain text only — not a clickable link)
Our support team operates 24 hours a day, 7 days a week and includes team members who are thoroughly familiar with Pakistani payment methods, mobile banking practices, and local user expectations. All data rights requests and privacy-related enquiries are handled separately from general player support to ensure appropriate confidentiality and specialist attention.
pk40 is committed to resolving all data privacy enquiries in a timely and transparent manner. If you are not satisfied with the response you receive, you have the right to escalate the matter to the data protection supervisory authority under our licensing jurisdiction.
This Privacy Policy was last reviewed in January 2026 and is the governing version for all pk40 platform users from that date. It supersedes all previous privacy notices and statements published by pk40.
Now that you know exactly how pk40 handles your data, explore everything the platform has to offer — from live casino tables to PSL cricket betting markets, all funded through JazzCash or EasyPaisa.
21+ only. Gambling involves financial risk. Please play responsibly.