pak656 Privacy Policy — How We Protect Your Data

This Privacy Policy is issued by pak656, the legal entity operating the online sports betting and casino platform accessible at pak656.net. In the context of applicable data protection law, pak656 acts as the data controller in respect of the personal information of its registered users and website visitors.

As data controller, pak656 determines the purposes for which your personal data is collected and the means by which it is processed. This Policy describes those purposes and means in full. If you have any questions about how pak656 handles your personal information that are not answered here, please contact us using the details in Article 15.

pak656 collects personal data across several categories, depending on your level of engagement with the Platform. The following table sets out the categories of data collected, with examples and the context in which collection occurs:

pak656 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than identity document photographs submitted for KYC), or health data, except where voluntarily disclosed in the context of a responsible gaming support interaction — in which case such information is handled with the highest level of confidentiality.

pak656 collects personal data through the following channels and mechanisms:

pak656 uses your personal data for the following specific, documented purposes. No personal data is used for any purpose not listed here without prior notice to you and, where legally required, your consent:

• Account Management: Creating, maintaining, and securing your pak656 account; verifying your identity at registration; processing login authentication including two-factor verification.
• Service Provision: Processing your bets, casino game sessions, slot plays, and all other gaming activities on the Platform; crediting winnings to your PKR Wallet; processing deposits and withdrawals via your chosen Pakistani payment method.
• KYC and Regulatory Compliance: Verifying your age (21+ requirement), identity, and payment method ownership as required by applicable anti-money-laundering, counter-terrorism-financing, and responsible gaming regulations.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, multi-accounting, bonus abuse, collusion, money laundering, and other prohibited conduct on the Platform.
• Responsible Gaming: Monitoring account behaviour for indicators of problem gambling; enforcing self-exclusions and deposit limits; contacting players where welfare concerns are identified; maintaining records of responsible gaming tool configurations.
• Customer Support: Responding to your enquiries, complaints, and requests via live chat or email; maintaining records of support interactions for quality assurance and dispute resolution purposes.
• Platform Improvement: Analysing aggregated and anonymised usage data to identify technical issues, improve Platform performance, and enhance user experience across devices commonly used in Pakistan.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to your registered mobile number or email — subject always to your marketing preferences and right to opt out. See Article 12.
• Legal Obligations: Retaining records as required by applicable law; responding to lawful requests from regulatory bodies or law enforcement agencies; exercising or defending legal claims.

pak656 processes your personal data on the following legal bases, depending on the specific purpose of processing:

• Contractual Necessity: Processing required to provide the pak656 Platform services you have registered for — including account management, payment processing, bet settlement, and customer support — is carried out on the basis of the contract between you and pak656 (our Terms and Conditions). Without this processing, pak656 cannot provide its services to you.
• Legal Obligation: Processing required to comply with anti-money-laundering regulations, age verification requirements, record-keeping obligations, and responses to lawful regulatory or law enforcement requests is carried out on the basis of pak656's legal obligations.
• Legitimate Interests: Processing carried out for fraud prevention, security monitoring, Platform improvement, and responsible gaming monitoring is based on pak656's legitimate interest in operating a secure, fair, and compliant platform — balanced against your right to privacy. pak656 has assessed these interests and determined they are not overridden by your fundamental rights and freedoms.
• Consent: Marketing communications sent to you by pak656 are based on your consent, which you provide at registration and can withdraw at any time without penalty via your account marketing preferences or by contacting support.

pak656 does not sell your personal data to any third party. We share personal data with third parties only in the following defined circumstances, and only to the minimum extent necessary for the stated purpose:

pak656 uses cookies and similar technologies on the Platform. Cookies are small text files stored on your device by your browser when you visit a website. The following categories of cookies are used by pak656:

• Strictly Necessary Cookies: Required for the Platform to function. These include your login session cookie (which keeps you authenticated as you navigate pak656), security tokens, and cookie consent state. These cannot be disabled without breaking the Platform.
• Functional Cookies: Remember your preferences — such as your preferred language, display settings, and whether you have acknowledged certain notifications — to personalise your pak656 experience.
• Analytics Cookies: Used to understand how users interact with the pak656 Platform in aggregate — which pages are most visited, where users encounter difficulties, and which device types are most common. Analytics data is pseudonymised or anonymised. pak656 uses this information solely to improve the Platform.

pak656 retains personal data only for as long as is necessary for the purpose for which it was collected, or for as long as required by applicable law and regulation. The following retention periods apply:

At the end of the applicable retention period, pak656 will securely delete or anonymise personal data in accordance with industry-standard data destruction procedures. Anonymised data — from which it is not reasonably possible to identify an individual — may be retained beyond these periods for statistical and research purposes.

pak656 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These include:

• Encryption in Transit: All data transmitted between your device and pak656 servers is encrypted using TLS 1.2 / 1.3 with 256-bit cipher suites — the same standard used by major international financial institutions.
• Encryption at Rest: Personal data stored in pak656 databases is encrypted at rest using AES-256 encryption. Encryption keys are managed under a strict key management policy with regular rotation.
• Access Controls: Access to player data within pak656 is granted on a strict need-to-know basis. All access events are logged and subject to regular audit. Administrative access requires multi-factor authentication.
• Penetration Testing: pak656 commissions regular independent security penetration tests to identify and remediate vulnerabilities in the Platform infrastructure and application code.
• Incident Response: pak656 maintains a documented data breach incident response plan. In the event of a confirmed breach affecting your personal data, pak656 will notify affected individuals and, where required, the relevant supervisory authority within the legally mandated timeframe.
• Staff Training: All pak656 staff with access to personal data receive regular data protection training and are bound by confidentiality obligations.

pak656 respects your rights over your personal data. The following rights are available to you. To exercise any of these rights, please contact pak656 via live chat or email as detailed in Article 15:

pak656 will respond to all verifiable data rights requests within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days, in which case we will notify you of the extension within the initial 30-day period and explain the reasons for the delay.

If pak656 becomes aware that personal data has been collected from a person under 21 years of age — whether through registration fraud, misrepresentation, or error — pak656 will immediately:

• Permanently close the relevant account.
• Void all bets, casino sessions, and transactions conducted on the account.
• Delete all personal data associated with the account from active systems, subject to any applicable legal retention requirements.
• Retain a record of the age violation for the purposes of preventing re-registration.

Parents and guardians who believe a minor has accessed or registered on the pak656 Platform should contact the support team immediately via live chat or email. pak656 will prioritise such reports and take immediate action.

pak656 sends marketing communications — including promotional offers, bonus notifications, and platform updates — to registered users who have provided consent to receive such communications. Marketing is sent via SMS to your registered Pakistani mobile number and/or email to your registered email address.

• Consent to marketing communications is obtained at registration and is entirely voluntary. Withholding or withdrawing marketing consent has no effect on your ability to use pak656's core services.
• You may withdraw marketing consent at any time by updating your communication preferences in your pak656 account settings, by replying STOP to any marketing SMS, or by contacting the support team.
• Opt-out requests are processed within 48 hours. Following opt-out, no further marketing communications will be sent — though you may still receive transactional messages (e.g. deposit confirmation, withdrawal notification, account security alerts) that are required for service provision.
• pak656 does not send marketing communications to self-excluded players for the duration of their exclusion period, regardless of marketing consent status.

Some of the third parties that pak656 works with — including certified game studios and fraud prevention providers — may be based in or operate infrastructure in jurisdictions outside Pakistan. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that available in Pakistan, pak656 implements appropriate safeguards to protect the transferred data, including:

• Standard contractual clauses that impose data protection obligations on the recipient equivalent to those applied by pak656.
• Data processing agreements that restrict the recipient's use of the transferred data to the specific purpose for which it was shared.
• Technical measures including end-to-end encryption of data in transit between pak656 and third-party recipients.

pak656 does not transfer personal data to any third party in any jurisdiction without a binding data processing agreement in place. Where we transfer data to certified game studios for game session hosting, the minimum necessary pseudonymised data is transferred — your full identity is not shared with game studio servers.

pak656 may update this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, platform feature additions, or changes in third-party relationships. When material changes are made to this Policy, pak656 will notify registered users through one or more of the following channels:

• A prominent notification displayed on the pak656 Platform on your next login following the change.
• An email to your registered email address describing the nature of the material changes.
• An updated "Last Reviewed" date and version number at the top of this page.

Your continued use of the pak656 Platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree to any material changes, you should cease use of the Platform and request account closure in accordance with the pak656 Terms and Conditions.

Previous versions of this Privacy Policy are available on request by contacting the pak656 support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or pak656's handling of your personal data, please contact us through the following channels:

• Live Chat Support: Available 24/7 directly on the pak656 Platform. This is the fastest channel — average response time under three minutes. Our support team can handle most data rights requests directly in chat.
• Email: [email protected] — for formal written data protection requests. Please mark your email with the subject line "Privacy / Data Protection Request" and include your registered Pakistani mobile number or email address so we can verify your identity. pak656 will respond within five (5) business days.

If you are not satisfied with pak656's response to a data protection complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. pak656 will cooperate fully with any such supervisory authority investigation.