Privacy Policy

This Privacy Policy ("the Policy") is issued by pk12 ("we", "us", "the Operator") and applies to all personal data collected from individuals ("you", "the User", "the Player") who access or use the pk12 platform, including the website at https://pk12.cam and all associated pages, subdomains and services (collectively, "the Platform").

pk12 is an English-language online sports betting and casino platform serving players who access the Platform from various jurisdictions, including Pakistani users. We take our data protection obligations seriously. This Policy describes the types of personal data we collect, the purposes for which we use it, the circumstances under which it may be shared, and the rights you hold in relation to your data.

By accessing the Platform, completing registration or continuing to use pk12's services, you acknowledge that you have read this Policy, that you understand its contents, and that you consent to the data practices described herein where consent is the applicable legal basis for processing. Where processing is based on a basis other than consent (such as a legal obligation or legitimate interest), we will identify that basis in the relevant section.

In this Policy, unless the context otherwise requires, the following terms have the meanings given below:

• "Personal Data" means any information that identifies or can be used to identify a natural person, directly or indirectly, including name, email address, IP address, device identifiers and financial information.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Data Controller" means pk12, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of pk12, under a data processing agreement.
• "Cookies" means small text files placed on your device by the Platform to store information about your session, preferences and activity.
• "KYC" means Know Your Customer — identity and verification documentation collected for regulatory compliance purposes.
• "Platform" means the pk12 website and all associated services at https://pk12.cam.

pk12 collects personal data through several channels, as described below. We collect only the data that is necessary for the specific purpose identified.

3.1 Registration Data

When you create a pk12 Account, we collect: full name; date of birth (to verify age eligibility); email address; username; country of residence; and, where applicable, a contact phone number.

3.2 Identity Verification (KYC) Data

To comply with our licensing obligations and to process withdrawals, we may collect: a copy of a government-issued photo ID (such as a Pakistan CNIC or passport); proof of address documentation; and, in certain circumstances, source-of-funds documentation. This data is used exclusively for identity verification and anti-money-laundering purposes.

3.3 Financial Data

We collect information about your deposits, withdrawals and transaction history. Payment method details (such as account numbers associated with Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah or cryptocurrency wallet addresses) are processed to facilitate transactions. None of the payment providers referenced here endorse or support online gambling. Full card or banking credentials are processed by our payment service providers and are not stored in their entirety by pk12.

3.4 Usage & Technical Data

We automatically collect certain technical data when you use the Platform, including: IP address; device type and operating system; browser type and version; pages visited and time spent on each page; session identifiers; and referring URL.

3.5 Communications Data

We retain records of communications you have with our support team — via Live Chat, Help Center or email — to maintain quality assurance, resolve disputes and for regulatory compliance purposes.

3.6 Marketing Preference Data

Where you have opted in to receive promotional communications, we store your marketing preferences. You may withdraw consent at any time.

pk12 uses your personal data for the following purposes:

pk12 processes personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contract Performance: Processing is necessary to provide you with the services you have requested by registering an Account on the Platform, including account management, deposits, withdrawals and game access.
• Legal Obligation: Processing is required to comply with applicable laws, including anti-money-laundering (AML) legislation, licensing requirements and regulatory record-keeping obligations imposed by the Operator's licensing jurisdiction.
• Legitimate Interest: Processing is necessary for the legitimate interests of pk12 or a third party, provided those interests are not overridden by your rights and interests. This includes fraud detection, platform security and analytical improvement of our services.
• Consent: Where we rely on consent as the legal basis (such as for direct marketing), you may withdraw that consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

pk12 does not sell your personal data. We may share your data with the following categories of recipient in the circumstances described:

• Payment Service Providers: To process deposits and withdrawals, we share necessary financial and identity data with our payment processing partners. These partners are bound by their own data protection obligations and process data only for the purpose of transaction facilitation.
• Identity Verification Partners: KYC documentation may be shared with third-party identity verification providers engaged by pk12 to perform AML and age-verification checks.
• Technology and Infrastructure Providers: Data is processed by our hosting, cloud computing, analytics and security service providers, who act as data processors under binding agreements with pk12.
• Regulatory and Law Enforcement Authorities: We will disclose personal data to competent authorities where required to do so by applicable law, court order or regulatory direction, or where we reasonably believe that disclosure is necessary to prevent fraud, money laundering or other criminal activity.
• Professional Advisers: Legal, accounting and audit advisers may have access to data on a strictly need-to-know basis, subject to professional confidentiality obligations.

pk12 uses cookies and similar technologies (including local storage, session tokens and pixel tags) to operate and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled without significantly impairing your ability to use the Platform. They include session authentication tokens and security cookies.
• Functional Cookies: Enable the Platform to remember your preferences, such as your preferred currency (PKR), language selection and responsible gambling tool settings.
• Analytical Cookies: Allow us to understand how users interact with the Platform — for example, which pages are visited most frequently and how users navigate through the site. This data is used in aggregate and is not used to identify individual users without separate consent.
• Marketing Cookies: Where you have consented, these cookies allow us to deliver relevant promotional content on the Platform. They may record your visits across the Platform to build a profile of your interests.

You can manage or delete cookies through your browser settings. Please note that disabling strictly necessary or functional cookies may affect your experience on the Platform, including the ability to log in or maintain session state. For further details, consult your browser's help documentation.

pk12 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal obligations or to pursue legitimate business interests. The following general retention principles apply:

• Account Data: Retained for the duration of your Account and for a minimum period thereafter as required by our licensing obligations and applicable law. This period is typically five (5) years from the date of Account closure, but may be longer where required by regulation.
• KYC / AML Documentation: Retained for a minimum of five (5) years from the date of the relevant transaction or Account closure, as required by anti-money-laundering legislation applicable to the Operator's licensing jurisdiction.
• Transaction Records: Financial transaction records are retained for the period required by applicable accounting, tax and regulatory requirements.
• Support Communications: Retained for a period sufficient to resolve any potential disputes, typically three (3) years from the date of the communication.
• Marketing Data: Retained until you withdraw consent or for a reasonable period of inactivity, after which your marketing preferences will be reset.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised.

pk12 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration and destruction. These measures include, but are not limited to:

• TLS (Transport Layer Security) encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular security assessments and vulnerability scanning of Platform infrastructure.
• Two-factor authentication options available to all registered Players.
• Incident response procedures to detect, contain and remediate potential data breaches.

While pk12 takes reasonable and appropriate steps to protect your data, no online transmission or storage system is entirely immune from security risks. You are responsible for maintaining the confidentiality of your Account credentials. If you suspect that your Account has been compromised, please contact our support team immediately.

pk12 operates as an internationally licensed platform. Your personal data may be transferred to, processed and stored in countries other than your country of residence, including countries whose data protection laws may differ from those in Pakistan.

Where personal data is transferred internationally, pk12 takes appropriate safeguards to ensure that your data receives a level of protection consistent with the standards described in this Policy. Such safeguards may include contractual arrangements with data processors, standard contractual clauses, or transfers to countries that are recognised as providing adequate levels of data protection by the relevant regulatory authority.

By using the Platform, you acknowledge and consent to the international transfer of your personal data as described in this section.

Subject to applicable law and any overriding legal obligations of pk12 (such as regulatory record-keeping requirements), you hold the following rights in relation to your personal data:

To exercise any of the above rights, please contact our support team via the Help Center or at the email address provided in Section 15. We will respond to all verified data rights requests within a reasonable timeframe, and no later than within 30 days of receipt of a valid request. We may require proof of identity before processing a request.

Where we are unable to fulfil a request — for example, because we are required to retain data by law — we will explain the reason for this in our response.

The pk12 Platform is strictly intended for adults aged 18 years or above — or the higher minimum age required by the operator's licensing jurisdiction or applicable local law. We do not knowingly collect personal data from individuals below the applicable minimum age. Underage use of the Platform is strictly prohibited.

If you are a parent or guardian and believe that a minor has registered an Account or provided personal data to pk12 without your consent, please contact us immediately using the details in Section 15. Upon verification, we will promptly close the Account and delete the associated personal data, subject to any overriding legal obligations.

The Platform may, from time to time, contain references to or links to third-party websites, services or resources. This Privacy Policy applies solely to the pk12 Platform. pk12 is not responsible for the privacy practices, content or data handling of any third-party service. We recommend that you review the privacy policy of any third-party service you visit independently of the Platform.

pk12 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to registered Players by publishing the updated Policy on the Platform with a revised "Last Updated" date, and/or by notifying Players via their registered email address. Where required by applicable law, we will seek your renewed consent before processing your data in a materially different manner.

Your continued use of the Platform following the effective date of any amendments constitutes your acknowledgement of the revised Policy. If you do not agree with any amendment, you should cease using the Platform and may request Account closure through the Help Center.

For all data protection enquiries, rights requests, complaints or questions relating to this Privacy Policy, please contact pk12 through the following channels. All contact details are provided as plain text — they are not clickable links.

• Live Chat: Available 24/7 directly from the Platform. This is the fastest channel for urgent data-related queries.
• Help Center: Self-service documentation covering common account, KYC and data queries, accessible from within the Platform.
• Email: [email protected] — For formal data rights requests and privacy complaints. Please include "Data Rights Request" or "Privacy Complaint" in your subject line to ensure prompt routing to the appropriate team.

pk12 aims to acknowledge data rights requests within 5 business days and to resolve them within 30 days, subject to the complexity of the request and any need to verify your identity. Where a request cannot be fully resolved within 30 days, we will notify you of the extended timeframe and the reason for the delay.

Support is available in English 24 hours a day, 7 days a week. Urdu-speaking agents are available during peak hours for Players who prefer to communicate in Urdu.