This Privacy Policy was last updated on 1 January 2026. When we make material changes to this Policy, registered pak07 Members will be notified via the email address associated with their Account. Continued use of pak07 following notification of a revised Policy constitutes acceptance of the revised terms.
01 Who We Are — The Data Controller
For the purposes of this Privacy Policy, pak07 (referred to as "pak07", "we", "us", or "our") acts as the data controller in respect of all personal data collected from users of the pak07 Platform at pak07.org, including its casino, sportsbook, live dealer, VIP programme, and all associated services.
pak07 is operated under an international gaming licence, which imposes binding data protection obligations as a condition of that licence. Our data practices are subject to periodic audit by our licensing regulatory authority. Contact details for privacy-related enquiries and data subject requests are set out in Section 15 of this Policy.
This Privacy Policy applies to all individuals who:
- Access or browse the pak07 Platform, whether or not they are registered Members
- Register and maintain a pak07 Account, including during the KYC verification process
- Contact pak07 via live chat, email, or any other communication channel
- Participate in pak07 promotions, surveys, or VIP programme activities
02 Personal Data We Collect
pak07 collects the following categories of personal data from Members and Platform users. We collect only data that is necessary and proportionate to the purposes for which it is processed, as described in Section 5.
| Data Category |
Specific Data Elements |
When Collected |
| Identity Data |
Full legal name, date of birth, gender, CNIC number, nationality, photographic identity document images, selfie verification images |
RegistrationKYC |
| Contact Data |
Pakistani mobile telephone number (+92), email address, current residential address |
RegistrationAccount Settings |
| Financial Data |
JazzCash account details, EasyPaisa account details, bank account information (name, account number, bank name), transaction history in PKR, deposit and withdrawal records |
DepositsWithdrawalsKYC |
| Gaming Activity Data |
Game session logs, bet history, win/loss records, game preferences, session duration, responsible gaming tool settings, VIP tier and activity metrics |
Continuous — Platform Use |
| Technical Data |
IP address, device identifiers, browser type and version, operating system, Pakistani mobile carrier data, login timestamps, session identifiers |
Automatic — Platform Use |
| Usage Data |
Pages visited, features accessed, navigation patterns, search queries on Platform, time spent on specific game categories |
Automatic — Platform Use |
| Communication Data |
Live chat transcripts, email correspondence, support ticket content, survey responses, promotional opt-in/opt-out preferences |
As Communicated |
| Responsible Gaming Data |
Self-exclusion status, deposit limit settings, cooling-off period records, problem gambling assessment outcomes where applicable |
As Configured |
Special Category Data: pak07 does not intentionally collect special category personal data (such as health data, biometric data for the purpose of uniquely identifying a person, or criminal conviction records) except where such data is voluntarily provided in the context of a responsible gaming assessment or where mandated by our licensing compliance obligations. Where such data is received, it is processed under the most restrictive access controls applicable within pak07's data systems.
03 How We Collect Your Data
pak07 collects personal data through the following primary collection mechanisms:
- Direct Submission: Data you provide actively during Account registration, KYC document upload, deposit and withdrawal requests, support communications, survey participation, and VIP programme enrolment
- Automated Technical Collection: Data collected automatically through your use of the pak07 Platform, including server logs, cookies, analytics tools, and device fingerprinting technologies as described in Section 10
- Payment Provider Data: Transaction confirmation and wallet holder verification data shared by JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processors as necessary to process your deposits and withdrawals
- KYC Verification Partners: Identity verification data confirmed or supplemented through our authorised third-party KYC and AML verification service providers, where automated verification tools are used to assist manual review processes
- Fraud Prevention Systems: Risk signals and device reputation data from fraud prevention service providers used to protect pak07 and its Members against fraudulent Account registrations and transactions
pak07 does not purchase personal data lists from third-party data brokers or marketing list vendors. All data we hold about you is either provided directly by you, collected automatically through your Platform use, or received from a third party with whom we have a direct contractual data processing relationship in connection with your pak07 Account.
04 Legal Basis for Processing
pak07 processes your personal data only where a lawful basis exists for that processing under applicable data protection law. The following legal bases apply to pak07's data processing activities:
- Contract Performance: Processing necessary to register your Account, provide access to gaming and betting services, process deposits and withdrawals, operate the VIP programme, and fulfil all other obligations under our Terms & Conditions with you as a registered pak07 Member
- Legal Obligation: Processing required to comply with pak07's obligations under its international gaming licence, including Know Your Customer (KYC) verification, Anti-Money Laundering (AML) monitoring, Responsible Gaming compliance, record-keeping obligations, and regulatory reporting requirements
- Legitimate Interests: Processing undertaken for pak07's legitimate interests in operating a secure and fraud-resistant gaming platform, improving the quality of our services, preventing abuse of our platform and bonus systems, maintaining audit trails, and communicating with Members about service-related matters — where such interests are not overridden by your fundamental rights
- Consent: Processing activities that are not covered by the above legal bases and for which pak07 seeks your explicit consent, including the placement of non-essential cookies as described in Section 10, and the sending of promotional and marketing communications about pak07 offers and bonuses
Consent Withdrawal: Where pak07 processes your data on the basis of consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. You may withdraw marketing consent at any time via the communication preferences section of your pak07 Account settings, or by contacting our support team.
05 How We Use Your Personal Data
pak07 uses the personal data it collects for the following specific purposes, each underpinned by a lawful basis as identified in Section 4:
- Account Registration and Management: Creating and maintaining your pak07 Account, verifying your identity, managing your Account settings, and processing changes to your registered information
- Gaming and Betting Service Delivery: Enabling your access to casino games, sports betting markets, live dealer tables, crash games, and all other pak07 Platform features; recording bet and game session outcomes; calculating and crediting winnings
- Payment Processing: Processing your JazzCash, EasyPaisa, bank transfer, and cryptocurrency deposits; processing your withdrawal requests to verified payment accounts; maintaining your PKR balance ledger
- KYC and AML Compliance: Verifying your identity and age using CNIC and supporting documents; conducting ongoing transaction monitoring for Anti-Money Laundering purposes as required under our licence; reporting obligations to regulatory and law enforcement authorities where legally required
- Responsible Gaming: Monitoring gaming patterns that may indicate problem gambling; enforcing self-exclusion, deposit limits, and cooling-off periods; sending responsible gaming communications; maintaining permanent records of self-exclusion decisions
- Fraud Prevention and Platform Security: Detecting and preventing fraudulent Account registrations, bonus abuse, money laundering, and unauthorised access to pak07 Accounts; monitoring for breaches of our Terms & Conditions
- Customer Support: Responding to your enquiries, complaints, and support requests via live chat and email; maintaining records of support interactions for quality assurance and dispute resolution
- Platform Improvement: Analysing usage patterns to improve the pak07 Platform's design, game library selection, payment flow, and overall user experience for Pakistani Members
- Marketing Communications: Sending you information about pak07 promotions, bonus offers, VIP programme updates, and new game launches where you have opted in to receive such communications and not subsequently withdrawn consent
- Legal Compliance and Dispute Resolution: Maintaining records required for regulatory purposes; defending or prosecuting legal claims; responding to lawful requests from regulatory authorities
06 Data Sharing & Third-Party Disclosure
pak07 shares your personal data only in the following circumstances and only to the minimum extent necessary for the stated purpose. We do not sell, rent, or trade personal data to any third party for independent commercial purposes.
- Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processors — solely to process deposit and withdrawal transactions associated with your pak07 Account
- KYC and AML Service Providers: Authorised identity verification and anti-money laundering screening service providers engaged under contractual data processing agreements to assist with KYC compliance obligations
- Game Technology Providers: Casino game software studios and live dealer technology providers whose platforms operate within the pak07 ecosystem — limited to session identifiers and anonymised outcome data necessary for game operation and dispute resolution
- Fraud Prevention Partners: Authorised fraud detection and risk management service providers engaged to protect pak07 and its Members against fraudulent activity
- Regulatory and Law Enforcement Authorities: pak07's gaming licence regulatory authority; financial intelligence units; law enforcement agencies — where pak07 is legally required to make such disclosures under applicable law
- Professional Advisers: Legal counsel, auditors, and compliance consultants, where access to personal data is strictly necessary for the professional service being provided and is governed by appropriate confidentiality obligations
All third parties with whom pak07 shares personal data are required to process it only for the specified purpose, maintain appropriate technical and organisational security measures, and not sub-process the data without pak07's prior written authorisation.
Absolute Restriction: Under no circumstances will pak07 share your CNIC data, payment account details, or gaming activity history with third-party advertisers, marketing networks, data aggregators, or any party not directly involved in the operational delivery of pak07 services to you as a Member.
07 Data Retention
pak07 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:
- Active Account Data: Retained for the duration of your pak07 Account membership and for a period of five (5) years following permanent Account closure, to satisfy licensing record-keeping requirements and to defend potential legal claims within standard limitation periods
- KYC and Identity Documents: Retained for a minimum of five (5) years following the conclusion of the business relationship, as required under standard AML regulatory frameworks applicable to licensed gaming operators
- Transaction Records (PKR): Retained for a minimum of five (5) years from the date of the transaction to comply with AML record-keeping obligations and financial audit requirements under our international gaming licence
- Support Communication Records: Retained for three (3) years from the date of the interaction, to enable effective dispute resolution and quality assurance review
- Self-Exclusion Records: Self-exclusion decisions and associated responsible gaming records are retained indefinitely to prevent the inadvertent re-admission of self-excluded individuals, even after formal Account closure
- Marketing Preference Records: Retained for three (3) years following the withdrawal of marketing consent, to demonstrate consent management compliance
- Technical Log Data (IP, Session): Retained for twelve (12) months from collection for security, fraud detection, and platform integrity purposes, unless extended retention is required in connection with a specific ongoing investigation
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders re-identification impossible. Anonymised aggregate data (from which you cannot be individually identified) may be retained indefinitely for platform analytics and business intelligence purposes.
08 Your Privacy Rights
As a data subject whose personal data is processed by pak07, you hold the following rights under applicable data protection law. pak07 is committed to facilitating the exercise of these rights promptly and without unnecessary restriction. Requests may be submitted via the contact channels set out in Section 15.
Right of Access
Request a copy of all personal data pak07 holds about you, including the categories of data, how it is used, and with whom it has been shared. pak07 will respond within 30 days.
Right to Rectification
Request correction of any inaccurate personal data pak07 holds about you. Where data is inaccurate, pak07 will correct it promptly subject to identity verification requirements.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to pak07's legal and regulatory retention obligations which may prevent full erasure.
Right to Restrict Processing
Request restriction of pak07's processing of your data in certain circumstances — for example, while the accuracy of data is contested or while a legitimate interests objection is being assessed.
Right to Data Portability
Request your personal data in a structured, commonly used, machine-readable format for transfer to another service, where processing is based on contract or consent and carried out by automated means.
Right to Object
Object to pak07's processing of your data where that processing is based on legitimate interests. pak07 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
How to Exercise Your Rights: Submit a data subject request via the pak07 in-platform live chat or by email to the address in Section 15. You will be required to verify your identity before pak07 can process your request, to protect your data from unauthorised disclosure. pak07 will not charge a fee for legitimate data subject requests. We aim to respond to all requests within 30 calendar days; where the request is complex or numerous, we may extend this to 60 days with prior notification.
09 Security Architecture & Data Protection Measures
pak07 implements a multi-layered technical and organisational security framework designed to protect Member personal data against unauthorised access, accidental loss, destruction, or disclosure. The following security measures are operational across the pak07 Platform:
TLS 1.3 / 256-bit AES Encryption in Transit
All data transmitted between your browser or mobile device and pak07's servers is encrypted using Transport Layer Security version 1.3 with 256-bit AES cipher suites. This is the same encryption standard used by major international financial institutions and is computationally infeasible to break with current technology.
Encrypted Data at Rest
Personal data stored in pak07's database systems is encrypted at rest. Identity documents and CNIC images are stored in an encrypted document vault with access restricted to a minimal number of authorised KYC compliance personnel.
Password Hashing (bcrypt + salt)
pak07 does not store your password in any recoverable form. Passwords are processed through bcrypt hashing with a unique salt before storage. Even pak07 system administrators cannot retrieve your actual password — only you know it.
Access Control and Role Segregation
Internal access to Member personal data is restricted on a strict need-to-know basis through role-based access controls. KYC data, financial records, and sensitive identity information are accessible only to authorised personnel fulfilling specific compliance, fraud, or support functions.
Continuous Security Monitoring
pak07's infrastructure is subject to continuous automated security monitoring for intrusion attempts, unusual access patterns, and data exfiltration indicators. Anomalies trigger automated alerts and manual review by the pak07 security team.
Two-Factor Authentication (2FA)
All pak07 Member Accounts support optional two-factor authentication via SMS OTP to the Member's registered Pakistani +92 mobile number. pak07 strongly recommends enabling 2FA for all Accounts to provide an additional security layer beyond password authentication.
Notwithstanding the above measures, no data security system is entirely impenetrable. In the event of a personal data breach that is likely to result in risk to Member rights and freedoms, pak07 will notify affected Members and the relevant regulatory authority within the timeframe required under applicable law, and will take all reasonable steps to mitigate the impact of such a breach.
10 Cookies & Tracking Technologies
pak07 uses cookies and similar tracking technologies on the pak07.org Platform. This Section explains the types of cookies we use, their purposes, and how you can manage your cookie preferences.
Strictly Necessary Cookies
Required
These cookies are essential for the pak07 Platform to function. They enable core features including Account login session management, security token validation, balance display, and game session continuity. Strictly necessary cookies cannot be disabled without disabling core Platform functionality.
Analytics Cookies
Optional
Analytics cookies help pak07 understand how Members use the Platform — which game categories are most popular, where users encounter friction in payment flows, and how session durations vary across device types. This data is used in aggregate and anonymised form. Consent to analytics cookies may be withdrawn at any time via your Account settings.
Functional / Preference Cookies
Optional
These cookies remember your Platform preferences — your preferred game category, recently played game shortcuts, preferred deposit method, and interface language settings. Disabling functional cookies will result in the Platform not remembering your preferences between sessions.
Fraud Prevention & Security Cookies
Required
Security cookies support pak07's fraud detection systems by establishing a recognised device profile for your Account, enabling faster detection of unauthorised login attempts from unfamiliar devices. These cookies are essential security infrastructure and cannot be disabled.
You may manage optional cookie preferences through your device browser settings. Please note that disabling certain categories of optional cookies may affect the quality of your pak07 Platform experience. Disabling strictly necessary cookies will prevent normal Platform use.
11 Children, Minors, and the 21+ Requirement
pak07 operates an exclusively adult gaming and betting platform. Access to and use of pak07 is strictly prohibited for any person under the age of 21 years. pak07 does not knowingly collect personal data from any individual under the age of 21.
As part of our commitment to preventing underage gambling, pak07 implements the following protective measures:
- All Account registrations require confirmation that the applicant is 21 years of age or older
- KYC identity verification, including CNIC age verification, is completed before any real-money gaming or wagering is permitted
- Accounts found to have been registered by individuals under 21 are immediately suspended, regardless of the stage of activity, and all funds are frozen pending regulatory notification
- pak07 uses third-party age verification services to supplement manual KYC review where automated checks are available
If pak07 becomes aware, by any means, that it has collected personal data from an individual under the age of 21, that data will be permanently deleted without further processing, and any associated Account will be closed with appropriate notification to our licensing regulatory authority. If you believe that a minor is using or has registered a pak07 Account, please contact us immediately via the details in Section 15.
12 International Data Transfers
pak07 is operated under an international gaming licence, and aspects of our technical infrastructure and third-party service provider relationships may involve the transfer of personal data to jurisdictions outside of Pakistan. pak07 ensures that any such transfers are conducted in compliance with applicable data protection standards, including:
- Transfers to jurisdictions that provide an adequate level of data protection as determined by applicable international standards
- Transfers governed by appropriate contractual safeguards, including standard data protection clauses, with all receiving parties
- Transfers to pak07's technology providers and game studios whose data processing activities are governed by data processing agreements that impose obligations equivalent to those that pak07 itself is subject to under its licensing obligations
Your personal data will never be transferred to a jurisdiction solely for the purpose of circumventing data protection standards that would otherwise apply. All international data transfers involving pak07 Member data are subject to the security measures described in Section 9 of this Policy.
13 Third-Party Services & External Links
The pak07 Platform may contain references to third-party services, including payment providers such as JazzCash and EasyPaisa, game technology providers, and other business partners. Where you interact with these third-party services — for example, by authenticating through a JazzCash OTP — your interaction with that third party's systems is governed by that third party's own privacy policy and terms of service, not by this pak07 Privacy Policy.
pak07 is not responsible for the privacy practices or data security measures of any third-party service provider, and we encourage you to review the privacy policies of any third-party services with which you interact in connection with your use of pak07.
Within the pak07 Platform itself, any game sessions powered by third-party studio software operate within pak07's controlled environment. Game studios receive only the session and outcome data necessary to operate the relevant game, and are prohibited from using such data for independent commercial purposes under their contractual agreements with pak07.
14 Changes to This Privacy Policy
pak07 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or changes to the pak07 Platform's services and features. The effective date at the top of this Policy indicates when it was last revised.
Where changes to this Policy are material — meaning they significantly affect how we collect, use, or share your personal data — pak07 will provide advance notice to registered Members via the email address associated with their Account, with a minimum of 14 days' notice before the revised Policy takes effect. For non-material clarificatory updates, the revised Policy will be published on this page without prior individual notification, though the effective date will be updated accordingly.
Your continued use of the pak07 Platform following the effective date of a revised Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Privacy Policy, you must cease use of the Platform and may close your Account in accordance with the account closure provisions in pak07's Terms & Conditions.
15 Privacy Contact & Complaints
For any privacy-related enquiries, data subject access requests, or concerns about how pak07 processes your personal data, you may contact pak07 through the following channels:
In-Platform Live Chat (Fastest Response)
Available 24/7 to all registered pak07 Members after Login. For privacy enquiries, please select "Data & Privacy" from the support topic menu. Average connection time under 90 seconds.
Privacy Email
[email protected] — please use the subject line "Privacy Request" and include your registered pak07 username for faster processing. We aim to acknowledge all privacy requests within 3 business days.
Language Support
Privacy enquiries may be submitted in English or Urdu. pak07 support agents handling data subject requests are available in both languages, around the clock, to assist Pakistani Members.
If you are not satisfied with pak07's response to your privacy enquiry or data subject request, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction, and/or to the dispute resolution mechanism provided under pak07's international gaming licence.
This Privacy Policy was last updated on 1 January 2026. © 2026 pak07. All rights reserved.