1pk Privacy Policy

1 Who We Are

1pk is an internationally licensed online gaming platform operating at 1pk.site. 1pk provides sports betting — including cricket, PSL, and other sporting events — alongside a full online casino featuring live dealer tables, slot games, and other gaming products, all denominated in Pakistani Rupees (PKR) and accessible to Pakistani players via JazzCash, EasyPaisa, and major Pakistani banks.

For the purposes of this Privacy Policy, 1pk acts as the data controller with respect to the personal information of its registered Players. As data controller, 1pk determines the purposes for which and the manner in which personal data is processed. Where 1pk engages third-party service providers to process data on its behalf, those providers act as data processors under contractual instruction from 1pk and are not permitted to use Player data for their own independent purposes.

Questions, access requests, or concerns regarding this Privacy Policy or 1pk's data practices may be directed to the 1pk support team as described in Section 15 of this Policy.

2 Personal Data We Collect

1pk collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect are set out below:

2.1 Identity and Registration Data

• Full legal name as it appears on the Player's CNIC (Computerised National Identity Card);
• CNIC number and scanned copy or photograph of the CNIC document;
• Date of birth (for age verification — the 1pk Platform is strictly 21+ only);
• Nationality and country of residence;
• A real-time selfie photograph submitted during the KYC verification process;
• Username chosen by the Player at registration.

2.2 Contact Data

• Pakistani mobile telephone number (used as the primary account identifier and for OTP authentication);
• Email address (where provided by the Player for account communication);
• Residential address (where requested as part of enhanced KYC).

2.3 Financial Data

• JazzCash and EasyPaisa wallet numbers associated with deposit and withdrawal transactions;
• Bank account details (account title, account number, IBAN) provided for bank transfer withdrawals via HBL, UBL, Meezan Bank, or other accepted institutions;
• Transaction history including deposit amounts, withdrawal amounts, dates, and reference numbers;
• Account balance and wagering history within the 1pk Platform.

2.4 Technical and Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system version, and browser type;
• Session duration, login timestamps, and pages or game sections accessed;
• Click and navigation patterns within the 1pk Platform;
• Error logs and crash reports from the 1pk mobile application or website.

2.5 Communications Data

• Records of live chat conversations with 1pk support agents;
• Email correspondence sent to or received from [email protected];
• Feedback, complaints, or dispute records submitted by the Player.

3 How We Collect Your Data

3.1 Directly From You

The majority of personal data 1pk holds about you is provided directly by you during the account registration process, the KYC identity verification flow, when making deposits or requesting withdrawals, and when communicating with the 1pk support team. You are not obligated to provide all requested data, but failure to provide data required for regulatory compliance (such as CNIC details for KYC) may prevent 1pk from activating full account functionality or processing withdrawal requests.

3.2 Automatically During Platform Use

When you access and use the 1pk Platform — whether via the 1pk.site website or any associated mobile application — certain technical and usage data is collected automatically by 1pk's platform infrastructure. This includes your IP address, device identifiers, session data, and in-platform navigation patterns. This automatic collection occurs each time you complete the 1pk Login and interact with any part of the Platform.

3.3 From Third-Party Payment Providers

When you make a deposit or request a withdrawal using JazzCash, EasyPaisa, or a Pakistani bank, those payment service providers share transaction confirmation data with 1pk to verify the financial transaction. This data is limited to what is necessary to confirm the deposit or process the withdrawal and does not grant 1pk access to your complete payment provider account history.

3.4 From Identity Verification Partners

Where 1pk uses third-party KYC verification technology to assist with the verification of CNIC documents or selfie biometric matching, that technology provider processes the submitted identity documents on 1pk's behalf and returns a verification result. Identity documents are not permanently retained by the KYC technology provider beyond what is required for the verification process.

4 Purposes of Data Processing

1pk processes your personal data for the following clearly defined purposes:

5 Legal Basis for Processing

1pk processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the agreement between 1pk and the Player, including account management, payment processing, and delivery of gaming services;
• Legal Obligation: Processing required to comply with 1pk's obligations under its international gaming licence, anti-money laundering regulations, and other applicable legal requirements — including mandatory KYC identity verification;
• Legitimate Interests: Processing carried out for 1pk's legitimate business interests where those interests do not override the Player's privacy rights, including fraud prevention, platform security, responsible gaming monitoring, and product improvement;
• Consent: Where 1pk relies on your consent as the legal basis for processing — such as for optional marketing communications — you may withdraw that consent at any time by updating your communication preferences in your 1pk Account settings.

6 Data Sharing & Disclosure

6.1 Payment Service Providers

To process deposits and withdrawals, 1pk shares the minimum necessary financial and identity data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other payment provider used in connection with your 1pk Account. These providers are independent data controllers with their own privacy policies governing how they handle this information.

6.2 Identity Verification Partners

1pk may engage third-party KYC technology providers to assist with the verification of CNIC documents and selfie biometrics. These providers process identity data as data processors on 1pk's behalf, under contractual data processing agreements that prohibit the use of Player data for any purpose other than KYC verification for 1pk.

6.3 Game Software Providers

Third-party game studios and software providers — including those who supply live casino, slot, and sports data services to the 1pk Platform — may receive limited technical session data necessary to deliver their game content within the 1pk environment. These providers do not receive Player identity or payment data unless specifically required for game account linking or jackpot processing.

6.4 Regulatory and Law Enforcement Authorities

1pk may be required to disclose personal data to its licensing regulatory authority, financial intelligence units, or law enforcement agencies in response to lawful requests, court orders, or regulatory obligations. 1pk will only disclose the minimum data required to satisfy such requests and, where legally permissible, will notify the affected Player of the disclosure.

6.5 Business Transfers

In the event of a merger, acquisition, sale of assets, or restructuring involving 1pk, Player personal data may be transferred to the acquiring or successor entity. Players will be notified of any such transfer and the applicable privacy practices of the successor entity via the contact information held in their 1pk Account.

7 International Data Transfers

1pk's platform infrastructure and some of its third-party service providers operate servers located outside of Pakistan. When your personal data is transferred to servers or service providers in other countries, 1pk ensures that appropriate safeguards are in place to protect the data to a standard equivalent to, or higher than, the protections afforded under applicable Pakistani data protection principles.

These safeguards include contractual data processing agreements with international service providers that impose obligations equivalent to recognised data protection standards, and the selection of providers that operate within regulatory frameworks comparable to international best practice. 1pk does not transfer personal data to jurisdictions that are assessed as providing inadequate data protection without implementing appropriate compensating controls.

8 Data Retention

1pk retains personal data for the periods set out in the following schedule, after which data is securely deleted or anonymised:

• Account data (identity, contact, KYC documents): Retained for the duration of the active Player account relationship, and for a minimum of five (5) years following account closure — as required by anti-money laundering regulatory obligations;
• Financial transaction data (deposits, withdrawals, bet history): Retained for a minimum of five (5) years from the date of each transaction in compliance with applicable financial record-keeping requirements;
• Customer support communications: Retained for three (3) years from the date of the last communication in a particular support thread;
• Technical and usage data (logs, session data): Retained for a maximum of twelve (12) months from collection, except where required for ongoing fraud investigations or security incident response;
• Marketing consent records: Retained for the duration of the consent plus three (3) years to evidence compliance in the event of any regulatory enquiry.

Where data is retained beyond these standard periods due to an ongoing legal dispute, regulatory investigation, or compliance requirement, 1pk will restrict the use of that data to the purposes necessitating its continued retention.

9 Your Privacy Rights

As a Player whose personal data is processed by 1pk, you have the following rights with respect to your personal information:

10 Cookies & Tracking Technologies

10.1 What Cookies 1pk Uses

The 1pk Platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. Cookies are small text files placed on your device when you access 1pk.site or the 1pk mobile application. The categories of cookies used by 1pk are as follows:

• Strictly Necessary Cookies: Required for the 1pk Platform to function. These include session cookies that maintain your authenticated state after completing the 1pk Login, security tokens, and load-balancing cookies. These cannot be disabled without rendering core Platform functions inoperable;
• Analytics Cookies: Used to collect aggregated, anonymised data about how Players navigate and use the 1pk Platform. This data is used to identify areas for improvement and optimise the platform experience for Pakistani players;
• Preference Cookies: Store your interface preferences — such as language settings and display choices — so that you do not need to reset them each time you complete the 1pk Login;
• Marketing Cookies: Used to track the effectiveness of 1pk's promotional campaigns and to present relevant offers within the Platform. These are only placed where you have provided consent and can be disabled via your Account preferences.

10.2 Managing Cookies

You can control and manage cookies through your browser settings. Disabling strictly necessary cookies will impair the functionality of the 1pk Platform — including the 1pk Login process — and 1pk cannot guarantee full platform performance if essential cookies are blocked. For analytics and marketing cookies, you may opt out at any time through your 1pk Account privacy settings without affecting core platform functionality.

11 Security Measures

1pk implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between the Player's device and 1pk's servers is encrypted using industry-standard SSL/TLS protocols;
• Data Encryption at Rest: Sensitive personal data — including CNIC numbers and payment details — is encrypted when stored in 1pk's databases;
• Access Controls: Access to Player personal data within 1pk's internal systems is restricted on a strict need-to-know basis, with role-based permissions and audit logging of all access events;
• Two-Factor Authentication: The 1pk Login process supports two-factor authentication via SMS OTP to the Player's registered Pakistani mobile number, substantially reducing the risk of unauthorised account access;
• Account Lockout Policies: Repeated failed login attempts trigger automatic account lockout and Player notification as a defence against brute-force attacks;
• Penetration Testing: 1pk's platform undergoes periodic security testing by qualified cybersecurity professionals to identify and remediate vulnerabilities;
• Incident Response: 1pk maintains a documented data breach incident response procedure. In the event of a data breach that poses a material risk to Players, affected Players will be notified within seventy-two (72) hours of 1pk becoming aware of the breach.

While 1pk employs robust security measures, no online platform or data transmission over the internet can be guaranteed as completely secure. Players are encouraged to use strong, unique passwords for their 1pk Account, enable two-factor authentication, and report any suspected account security issues to 1pk immediately.

12 Children and Minors

The 1pk Platform is strictly restricted to individuals aged 21 years and older. 1pk does not knowingly collect personal data from any person under the age of 21. Age verification is applied during the account registration and KYC process to prevent underage access to the Platform.

If 1pk discovers that personal data has been collected from a person under the age of 21, 1pk will immediately delete that data, close the associated Account, and void any transactions made through it. If you are aware of a minor who has created a 1pk Account or who is attempting to access the Platform, please report this to 1pk immediately via [email protected] so that appropriate action can be taken without delay.

13 Third-Party Services and Links

The 1pk Platform may contain functionality provided by third-party game studios, payment processors, and analytics providers. While these services operate within the 1pk environment, they are governed by their own independent privacy policies. 1pk selects third-party service providers carefully and requires them to maintain data protection standards consistent with 1pk's own obligations, but 1pk is not responsible for the privacy practices of independently controlled third parties.

In particular, JazzCash and EasyPaisa — the primary payment methods used by Pakistani 1pk players — are independent data controllers with respect to your mobile wallet information. The manner in which they handle your wallet data is governed by their respective privacy policies, over which 1pk has no control. 1pk recommends that Players review the privacy practices of any third-party payment provider they use in connection with their 1pk Account.

14 Changes to This Privacy Policy

1pk reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect how 1pk handles your personal data or your rights in relation to it — 1pk will notify registered Players via the mobile number or email address associated with their Account at least seven (7) days before the updated Policy takes effect, except where immediate changes are required to comply with a legal or regulatory obligation.

The "Last Reviewed" date at the top of this Policy reflects the most recent date on which substantive changes were made. Players are encouraged to review this Policy periodically. Continued use of the 1pk Platform following the effective date of any amended Policy constitutes acceptance of the changes. Players who do not accept the revised Policy should close their Account before the effective date of the amendment.

15 Contact & Data Enquiries

For any questions about this Privacy Policy, to exercise your data rights, or to raise a concern about how 1pk handles your personal data, please contact the 1pk team through the following channels:

• Email: [email protected] — please include "Privacy Request" or "Data Enquiry" in the subject line for fastest routing to the appropriate team member
• Live Chat: Available within your 1pk Account dashboard after completing the 1pk Login — 24 hours a day, 7 days a week including Pakistan public holidays
• Languages: Enquiries may be submitted in English or Urdu
• Response Timeframe: 1pk undertakes to acknowledge all privacy-related enquiries within two (2) business days and to provide a substantive response within thirty (30) calendar days of receipt

Where a Player believes that their data protection rights have been infringed and is not satisfied with 1pk's response, they may have the right to lodge a complaint with the relevant supervisory authority in the jurisdiction applicable to 1pk's data processing activities. 1pk will always endeavour to resolve privacy concerns directly and promptly, and encourages Players to contact the support team as a first step before escalating to any regulatory authority.