gampk Privacy Policy — How We Collect, Use & Protect Your Personal Data

This Privacy Policy ("Policy") is issued by gampk ("gampk," "we," "us," or "our") and applies to all personal data processed in connection with your use of the gampk platform available at gampk.app, including all gaming products, account management features, promotional communications, and customer support interactions.

This Policy applies to all individuals who interact with gampk, including registered account holders, prospective players who browse the Platform without registering, and individuals who contact gampk's support team. It governs the processing of personal data regardless of whether such data is submitted voluntarily by you or collected automatically through your use of the Platform.

gampk acts as the "data controller" with respect to your personal data — meaning we determine the purposes and means by which your data is processed. Where we engage third-party service providers who process data on our behalf (such as payment processors or game providers), those parties act as "data processors" under contractual obligations consistent with this Policy.

By registering an account on gampk, making a deposit, placing a wager, or otherwise using the Platform, you acknowledge that you have read, understood, and accepted the practices described in this Privacy Policy in full.

gampk collects the following categories of personal data from Pakistani players and other platform users:

gampk does not collect sensitive personal data (such as ethnic or racial origin, religious beliefs, health data, or political opinions) unless voluntarily disclosed by you in a support context where it is relevant to a specific request.

gampk collects personal data through the following means:

• Direct Submission: Information you provide during account registration, KYC verification, deposit and withdrawal requests, support communications, and promotional opt-ins.
• Automated Technical Collection: Data generated automatically when you access the Platform — including IP addresses, device fingerprints, session durations, and page interaction patterns — collected via server logs and first-party analytical tools.
• Payment Processors: Transaction reference data and confirmation statuses received from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank in connection with your deposit and withdrawal requests.
• Game Providers: Wagering outcomes, session data, and RNG certification records received from gampk's licensed game content suppliers in connection with your casino and slot gaming activity.
• Fraud Prevention Partners: Risk signals and device reputation data received from third-party fraud detection services engaged to protect Pakistani players and the Platform from criminal activity.
• Identity Verification Services: Confirmation results (pass/fail with confidence score) from KYC document verification providers used to satisfy age and identity verification obligations under our gaming license.

gampk processes your personal data for the following purposes, each underpinned by a specific legal basis:

Where gampk relies on your consent as the legal basis for processing (principally for marketing communications), you have the right to withdraw that consent at any time by updating your communication preferences in Account settings or by contacting gampk Support. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

gampk does not sell, rent, or trade your personal data. We share your data only with the following categories of third parties and only to the extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive transaction data necessary to process your deposit and withdrawal requests. These parties are independent controllers of financial transaction data under their own privacy policies and regulatory frameworks.
• Game Content Providers: Licensed game studios providing cricket betting odds, live casino tables, and slot games receive your anonymised session identifiers to facilitate game delivery and RNG certification. Full identity data is not shared with game providers.
• KYC & Identity Verification Services: Your submitted identity documents are processed by a contracted third-party verification service operating under strict data processing agreements with gampk.
• Fraud Prevention Partners: Technical data (IP address, device fingerprint, session metadata) is shared with fraud detection providers to identify and block criminal activity on the Platform.
• Our Licensing Authority: gampk is obligated under its international gaming license to provide player data to the relevant regulatory authority upon request, in specific formats and under prescribed circumstances.
• Law Enforcement Agencies: Where required by a valid legal order, court order, or binding regulatory demand issued by a competent authority, gampk will disclose personal data. We will notify affected players where legally permissible to do so.

The gampk Platform uses cookies and similar tracking technologies to deliver core functionality, maintain session security, and analyse Platform usage patterns. The following cookie categories are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable secure login session management, CSRF protection, and basket/wallet state persistence. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Store your preferences such as language settings, display preferences, and responsible gaming configuration so these do not need to be re-entered on each visit.
• Analytical Cookies: First-party analytics cookies that help gampk understand aggregate Platform usage patterns — which sections are most visited, session duration averages, and error rates — in order to improve the Pakistani player experience.
• Security Cookies: Used by gampk's fraud detection systems to maintain device fingerprint consistency and identify sessions that deviate from established usage patterns associated with your Account.

You may configure your browser to block or delete cookies. However, blocking strictly necessary cookies will prevent you from accessing your gampk account and using the Platform's real-money gaming features. Blocking functional cookies will cause your platform preferences to reset on each visit.

gampk retains your personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to the following specific retention schedules:

At the expiry of the applicable retention period, gampk will securely delete or irreversibly anonymise your personal data such that it can no longer be used to identify you.

gampk implements a comprehensive set of technical and organisational security measures designed to protect Pakistani player data against unauthorised access, loss, destruction, or disclosure:

• Transport Encryption: All data in transit between your device and gampk's servers is encrypted using TLS 1.3 with 256-bit AES encryption.
• Data at Rest Encryption: Sensitive personal data stored on gampk's servers is encrypted at rest using AES-256 encryption with access-controlled key management.
• Password Hashing: Account passwords are never stored in plain text. gampk uses industry-standard cryptographic hashing with individual salting to render stored credentials unreadable even in the event of a server breach.
• Access Controls: Access to personal data within gampk's internal systems is restricted to authorised personnel on a strict need-to-know basis. Access is logged, reviewed, and subject to regular audit.
• Two-Factor Authentication: gampk offers optional two-factor authentication for all player accounts, adding a device-based OTP layer on top of password authentication for gampk Login sessions.
• Penetration Testing: gampk's Platform undergoes scheduled third-party penetration testing to identify and remediate security vulnerabilities before they can be exploited.
• Incident Response: gampk maintains a documented data breach response procedure. In the event of a security incident affecting personal data, gampk will notify affected players and relevant authorities within the timeframes required by applicable regulations.

As an internationally licensed gaming platform serving Pakistani players, gampk's data processing infrastructure may involve the transfer of personal data across international borders — for example, to servers located in our licensing jurisdiction or to game providers and KYC services operating in other countries.

Where such transfers occur, gampk ensures that an equivalent level of data protection is maintained through one or more of the following mechanisms:

• Contractual clauses requiring the receiving party to implement data protection standards equivalent to those applied by gampk.
• Transfers to jurisdictions that have been assessed to provide an adequate level of data protection relative to the standards applicable in our licensing jurisdiction.
• Binding corporate rules or equivalent intra-group transfer agreements where data is transferred between gampk's own group entities.

You may request details of the specific transfer safeguards applicable to a particular data processing activity by contacting gampk's Data Protection contact at the address provided in Section 14 of this Policy.

Subject to applicable law and gampk's legal obligations (which in some cases may restrict the exercise of these rights), you hold the following rights with respect to your personal data held by gampk:

The gampk Platform is strictly for adults aged 21 years and older. gampk does not knowingly collect, process, or retain personal data from any individual under 21 years of age. The Platform implements automated age verification checks at the point of registration and reserves the right to request documentary proof of age from any account holder at any time.

If you are a parent or guardian and believe a minor may have accessed gampk using your or another adult's details, please contact gampk Support immediately at [email protected] so that we can investigate and take immediate protective action.

The gampk Platform may contain references to third-party services — principally our payment partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) — whose own websites and privacy policies operate independently of this Policy. When you are redirected to a third-party payment portal to complete a deposit or withdrawal, your interaction with that portal is governed by that provider's own privacy and security policy.

gampk is not responsible for the privacy practices, security standards, or data handling of any third-party website or service, even where accessed via a link presented within the gampk Platform. We encourage you to review the privacy policies of any third-party service you interact with in connection with your gampk account.

gampk reserves the right to update this Privacy Policy at any time to reflect changes in our operations, data processing practices, regulatory environment, or applicable law. When material changes are made, gampk will:

• Post the revised Policy on this page with an updated "Last Reviewed" date at the top.
• Display a prominent notice on the gampk Platform for not less than fourteen (14) days prior to material changes taking effect.
• Send an email notification to the registered address of affected account holders where the change materially impacts their rights or the processing of their personal data.

Your continued use of the gampk Platform following the effective date of any Privacy Policy update constitutes your acknowledgement of the revised Policy. If you disagree with the changes, you must cease using gampk and may request Account closure through gampk Support.

The current version of this Privacy Policy is always available at gampk.app/privacy-policy and is version-numbered for reference.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how gampk has handled your personal data, please contact the gampk Support team via the following channel:

gampk will acknowledge all privacy and data rights requests within 5 business days and resolve them within 30 calendar days of receipt. In cases of exceptional complexity, the resolution period may be extended by a further 30 days — you will be notified in writing if this extension is required.

If you are unsatisfied with gampk's response to a data protection concern, you may escalate your complaint to the relevant data protection supervisory authority in gampk's licensing jurisdiction.