Privacy Policy

This Privacy Policy (the "Policy") is issued by the operator of the pak804 platform (the "Operator", "we", "us" or "our"), accessible at https://pak804.cam (the "Platform" or "Site"). It describes how we collect, use, store, disclose and protect personal data relating to users of the Platform (each a "User", "you" or "your").

By registering an account on pak804 or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to the terms of this Policy, you must discontinue use of the Platform.

This Policy should be read alongside the pak804 Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions regarding data protection matters, this Policy shall prevail.

For the purposes of this Policy, the following terms carry the meanings set out below:

pak804 collects Personal Data through the registration process, ongoing Platform use, KYC verification, payment transactions and communications with our support team. The categories of data we collect include the following:

3.1 Registration Data

• Full legal name;
• Date of birth;
• Email address;
• Residential address (country and, where required, full address);
• Username and password (stored in hashed form);
• Contact telephone number, where provided.

3.2 Identity Verification (KYC) Data

• Government-issued identity document — for Pakistani users, typically a valid CNIC (Computerised National Identity Card) or passport;
• Proof of residential address (utility bill, bank statement or equivalent);
• Selfie or liveness verification image for document matching;
• Source of funds documentation where required by AML procedures.

3.3 Financial Data

• Deposit and withdrawal transaction records (amounts in PKR, timestamps, method references);
• Payment method identifiers as submitted to the cashier (e.g., masked account references for familiar Pakistani payment channels such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah) — referenced for transaction context only, not as endorsements;
• Account balance history and betting activity records.

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system and browser;
• Session duration, pages viewed and feature interactions;
• Referral source and in-Platform navigation path.

3.5 Communications Data

• Content of support queries submitted via live chat or email;
• Responsible gambling self-assessment or self-exclusion requests;
• Feedback and complaint correspondence.

We process your Personal Data for the following purposes:

Where data protection law requires us to identify a legal basis for processing your Personal Data, we rely on one or more of the following:

• Contractual necessity: Processing required to perform the contract between you and the Operator (including Account registration, payment processing and KYC verification).
• Legal obligation: Processing required to comply with applicable law, including AML obligations, age verification requirements and responses to lawful authority requests.
• Legitimate interests: Processing necessary for the Operator's legitimate business interests, including fraud detection, platform security, responsible gambling monitoring and analytics — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where you have provided express consent for a specific processing activity, such as receiving promotional communications. Consent may be withdrawn at any time by contacting support.

pak804 does not sell your Personal Data to third parties. We share Personal Data only in the following circumstances:

6.1 Service Providers (Data Processors)

We engage third-party service providers who process Personal Data on our behalf under contractual data processing agreements. These include:

• Identity verification and KYC providers;
• Payment processing intermediaries;
• Cloud infrastructure and hosting providers;
• Analytics and performance monitoring services;
• Customer support platform providers.

These processors are permitted to process Personal Data only for the specific purpose for which they were engaged and are contractually required to maintain appropriate security standards.

6.2 Legal and Regulatory Disclosure

We may disclose Personal Data to competent authorities, courts or regulatory bodies where required by law, court order or legally binding regulatory demand. We will notify affected Users of such disclosures where we are legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of the Operator's business, Personal Data may be transferred as part of the transaction. Users will be notified of any such transfer via a Policy update published on this page.

We retain Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory and operational obligations. Retention periods are guided by the following principles:

• Active Accounts: Personal Data is retained for the duration of your Account's active status and for a period following closure sufficient to meet legal and compliance obligations.
• Transaction Records: Financial transaction records are retained for the period required under applicable AML, financial record-keeping and tax laws in the Operator's jurisdiction.
• KYC Documents: Identity documents submitted for verification are retained in accordance with AML regulatory requirements, typically for a minimum period after the business relationship ends.
• Support Communications: Correspondence is retained for a reasonable operational period sufficient to resolve disputes and respond to regulatory queries.
• Analytical Data: Aggregated, anonymised analytics data may be retained indefinitely as it no longer constitutes Personal Data once de-identified.

Where Personal Data is no longer required and there is no legal basis to retain it, we will securely delete or anonymise it in accordance with our data disposal procedures.

pak804 uses cookies and similar tracking technologies to operate the Platform, maintain session state, analyse usage patterns and improve the user experience. By continuing to use the Platform, you consent to the use of cookies as described below.

Most web browsers allow you to control cookies through browser settings. Disabling essential cookies may impair Platform functionality including the ability to maintain a login session. pak804 does not use cookies to serve third-party advertising on the Platform.

We implement appropriate technical and organisational measures to protect Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure. Security measures applied include:

• HTTPS/TLS encryption for all data transmitted between your device and the Platform;
• Hashing of stored passwords using industry-standard cryptographic functions;
• Access controls restricting internal access to Personal Data to authorised personnel on a need-to-know basis;
• Regular review of security practices and infrastructure;
• Contractual security obligations imposed on all Data Processors engaged by the Operator.

While we apply robust security measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected Users in accordance with applicable law.

Subject to applicable data protection law in the Operator's jurisdiction, you may have the following rights in relation to your Personal Data held by pak804. To exercise any of these rights, please contact us at [email protected] with your registered username and a clear description of your request.

We aim to respond to verified data rights requests within 30 days. Complex requests may require additional time, in which case we will notify you of the expected timeline. We may request proof of identity before processing a data rights request.

pak804 is strictly an adults-only platform. The Platform is not directed at, and we do not knowingly collect Personal Data from, individuals under the age of 18 — or the higher minimum age required by the operator's license jurisdiction.

Age verification is a core component of our KYC process. Where we discover that Personal Data has been submitted by or on behalf of a minor, we will promptly close the relevant Account, void any associated bets or balances in accordance with our Terms & Conditions, and delete the minor's Personal Data to the extent not required for regulatory reporting purposes.

If you believe that a minor has registered on the Platform, please notify us immediately at [email protected].

pak804 serves users across Pakistan, including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. While the Platform is presented in English and displays account balances in PKR, Pakistani data protection law is distinct from the international frameworks that may govern the Operator's primary jurisdiction.

Pakistan's data protection landscape includes the Personal Data Protection Bill and sector-specific privacy provisions under PTA guidelines. pak804 does not represent that its practices are specifically approved or regulated under Pakistani data protection law. Pakistani users accessing the Platform do so subject to their own assessment of applicable local legal requirements.

Personal data related to KYC documents submitted by Pakistani users — such as CNIC or passport details — is processed for identity verification and AML compliance only. pak804 does not share CNIC data with Pakistani governmental authorities except where required by a lawful and binding legal process originating in the Operator's license jurisdiction.

We reserve the right to amend this Privacy Policy at any time. When a material change is made, we will update the "Last Updated" date at the top of this page and, where practicable, notify registered users via Platform notification or email.

Continued use of the Platform following publication of an updated Policy constitutes your acceptance of the revised terms. We recommend reviewing this Policy periodically to remain informed of how we handle your Personal Data.

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the pak804 Data Controller:

Please note that support staff are not authorised to provide legal advice. If your query requires formal legal guidance, you should consult a qualified legal professional in your jurisdiction.