This Privacy Policy is issued by pk12 ("pk12", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at pk12.bid. For the purposes of applicable data protection legislation, pk12 acts as the data controller in respect of personal data collected from players and visitors to the pk12 platform.
pk12 operates under an international gaming licence which imposes mandatory data protection and player privacy obligations on our operations. Compliance with these obligations is a condition of our licence and a genuine operational commitment — not merely a regulatory checkbox.
If you have any questions about this Policy, how pk12 processes your personal data, or wish to exercise any of your data rights described in Section 12, please contact our privacy team at support@pk12.bid with the subject line "Privacy Enquiry". We aim to acknowledge all privacy-related correspondence within 5 business days.
pk12 collects personal data about you in categories, depending on the nature of your interaction with the platform. The following sets out what we collect and why each category is necessary.
2.1 Identity and Contact Data
When you register an account on pk12, we collect your full legal name, date of birth, Pakistani mobile telephone number, email address, and residential address. This information is required to create and manage your account, to verify your identity in accordance with our Know Your Customer (KYC) obligations, and to communicate with you about your account.
2.2 Identity Verification Documents
Prior to processing withdrawals and as part of our anti-money-laundering (AML) compliance programme, pk12 may request copies of government-issued identity documents — such as your Pakistani CNIC (Computerised National Identity Card) or passport — as well as proof of residential address (such as a utility bill or bank statement) and evidence of your payment method. These documents are processed securely and retained in accordance with Section 8 of this Policy.
2.3 Financial and Transaction Data
pk12 records details of all financial transactions conducted through your account, including deposit amounts, withdrawal requests, payment method identifiers (such as your registered JazzCash or EasyPaisa mobile number or masked bank account details), transaction timestamps, and processing outcomes. We do not store full payment card numbers on pk12's systems.
2.4 Gaming Activity Data
pk12 maintains detailed logs of your gaming activity on the platform, including game sessions accessed, stakes placed, wagers settled, bonus usage, and responsible gaming tool settings applied to your account. This data is used to operate your account, settle gaming outcomes, comply with our licensing obligations, and monitor for responsible gaming indicators.
2.5 Technical and Device Data
When you access pk12, we automatically collect certain technical information including your IP address, browser type and version, operating system, device type, screen resolution, language settings, and general geographic location derived from your IP address. This data is used for platform security, fraud detection, and service optimisation purposes.
2.6 Communications Data
pk12 retains records of all communications between you and our customer support team, including live chat transcripts, email correspondence, and support ticket logs. These records are retained for quality assurance, training, and dispute resolution purposes.
pk12 collects personal data through the following means:
- Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account profile;
- Automatically through platform use — via server logs, cookies, and tracking technologies when you access and interact with the pk12 website, as described in Section 9;
- From payment processors — information provided by JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and other payment service providers in connection with financial transactions you initiate;
- From identity verification providers — in certain circumstances, pk12 may engage third-party identity verification services to assist in KYC processing, which may cross-reference data you have provided against external databases;
- From third-party game suppliers — game session data, RNG certification records, and fairness audit logs provided by pk12's licensed game providers in connection with game outcomes and technical performance.
pk12 does not purchase personal data from data brokers, social media platforms, or third-party marketing data providers for the purpose of targeting Pakistani players. All personal data held by pk12 is collected directly through the platform or through necessary operational partners.
pk12 processes your personal data only where we have a valid legal basis for doing so. Depending on the category of data and the processing activity concerned, pk12 relies on one or more of the following legal bases:
- Contractual necessity: Processing is necessary to perform the contract between you and pk12 — including account management, game operation, payment processing, and customer support;
- Legal obligation: Processing is required to comply with applicable legal and regulatory obligations, including anti-money-laundering laws, licensing requirements, and tax reporting obligations imposed under pk12's international gaming licence;
- Legitimate interests: Processing is necessary for pk12's legitimate interests in operating a safe, secure, and compliant gaming platform — including fraud detection, security monitoring, responsible gaming programme management, and platform improvement — provided these interests are not overridden by your privacy rights;
- Consent: Where pk12 relies on your consent as the legal basis for processing — such as for direct marketing communications — you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
The personal data pk12 collects is used for the following specific purposes:
- Creating, verifying, and administering your pk12 player account;
- Processing deposits and withdrawals via JazzCash, EasyPaisa, Raast, and bank transfer channels;
- Conducting KYC identity verification and ongoing AML due diligence as required under our licensing obligations;
- Operating casino games, sports betting markets, and other gaming products on the pk12 platform;
- Detecting, investigating, and preventing fraud, collusion, bonus abuse, money laundering, and other prohibited conduct;
- Administering responsible gaming tools including deposit limits, session time caps, cool-off periods, and self-exclusion;
- Providing customer support, resolving account queries, and handling formal complaints;
- Sending account-related communications including transaction confirmations, account status notifications, and security alerts;
- Sending promotional communications about pk12 offers and products, where you have consented to receive such communications or where we are otherwise permitted to do so;
- Analysing platform usage to improve the pk12 user experience, game library, and payment processes;
- Complying with court orders, regulatory instructions, and mandatory reporting obligations.
pk12 will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent.
pk12 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:
6.1 Payment Service Providers
To process financial transactions, pk12 shares necessary payment information with Pakistani payment service providers including JazzCash, EasyPaisa, and participating banks (HBL, UBL, Meezan Bank). These providers receive only the data necessary to execute and verify the relevant transaction.
6.2 Identity Verification and AML Providers
For KYC and AML compliance, pk12 may share identity documents and personal details with licensed third-party identity verification service providers. These providers are contractually bound to process data only for the stated verification purpose and to maintain appropriate security standards.
6.3 Game Suppliers and Technology Partners
pk12's live dealer tables and electronic casino games are supplied by licensed third-party providers. These suppliers may receive session data, account identifiers, and stake information necessary to deliver game services. All pk12 game suppliers are contractually required to maintain player data confidentiality consistent with international gaming licensing standards.
6.4 Regulatory and Law Enforcement Authorities
pk12 may disclose personal data to gaming regulatory bodies, law enforcement agencies, financial intelligence units, or courts where we are legally required to do so — for example, to comply with a court order, respond to a regulatory audit, or fulfil mandatory suspicious activity reporting obligations under AML regulations.
6.5 Professional Advisers
pk12 may share personal data with legal advisers, auditors, accountants, and other professional consultants where necessary for the provision of professional services, subject to appropriate confidentiality obligations.
No Sale of Data: pk12 does not sell, rent, or otherwise commercially transfer your personal data to any third party for their own marketing or commercial purposes. Sharing occurs only with operational partners and as required by law.
pk12 is an internationally licensed platform and some of its operational partners and technology providers may be based outside Pakistan. Where personal data is transferred internationally, pk12 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard consistent with this Policy and applicable data protection requirements.
Such safeguards may include contractual data processing agreements incorporating internationally recognised data transfer mechanisms, requirements for recipient organisations to implement technical and organisational security measures equivalent to those applied by pk12, and restrictions on the purposes for which transferred data may be used.
If you would like further information about the international transfer safeguards applicable to your personal data, please contact privacy support at support@pk12.bid.
pk12 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any legal or regulatory obligations requiring longer retention periods. The following retention principles apply:
- Active account data: Retained for the duration of your pk12 account and updated as information changes;
- Account and transaction records: Retained for a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations under our gaming licence;
- KYC verification documents: Retained for a minimum of five (5) years following the completion of the relevant verification process, or longer if required by applicable law;
- Self-exclusion records: Retained for the duration of the self-exclusion period and for a further five (5) years thereafter to prevent re-registration during the exclusion period;
- Customer support communications: Retained for two (2) years from the date of the communication, unless retention is required in connection with an ongoing dispute or investigation;
- Technical and device logs: Retained for thirteen (13) months from collection, after which they are either deleted or anonymised for aggregate analytics purposes.
Following the expiry of applicable retention periods, pk12 will securely delete or anonymise your personal data in accordance with its internal data governance procedures.
pk12 uses cookies and similar tracking technologies on the pk12.bid website to deliver a functional, secure, and personalised experience. The following categories of cookies may be set by pk12:
- Strictly Necessary Cookies: Required for the pk12 platform to function, including session management, authentication, and security. These cookies cannot be disabled without rendering core platform functions inoperable;
- Performance and Analytics Cookies: Used to collect anonymised or aggregated data about how visitors use pk12, including pages visited, time spent on site, and navigation paths. This data helps pk12 understand and improve platform performance;
- Functional Cookies: Allow pk12 to remember your preferences such as language settings, display options, and previously entered information, providing a more personalised experience;
- Security and Fraud Prevention Cookies: Support pk12's fraud detection systems by tracking login patterns and detecting anomalous access behaviour that may indicate account compromise or automated activity.
You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the pk12 platform. pk12 does not use third-party advertising cookies or behavioural targeting cookies from social media platforms.
pk12 may send you promotional communications about its games, bonuses, and offers via email or SMS to your registered Pakistani mobile number, subject to the following conditions:
- pk12 will only send marketing communications where you have expressly opted in to receive them, or where applicable law permits communication to existing customers about related products and services;
- Every marketing communication from pk12 will include a clear, easy, and functional mechanism to unsubscribe or opt out of future communications;
- If you are a self-excluded player, pk12 will suppress all promotional communications to you for the duration of your self-exclusion — this is a mandatory responsible gaming obligation;
- You may update your marketing preferences at any time through your pk12 account settings or by contacting support at support@pk12.bid.
Opting out of marketing communications will not affect pk12's ability to send you necessary transactional or account-related communications, such as deposit confirmations, withdrawal notifications, or security alerts.
pk12 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- 256-bit SSL/TLS encryption applied to all data transmitted between your device and pk12's servers during login, gameplay, and payment processing;
- Secure server infrastructure with access controls restricting personal data access to pk12 personnel with a documented operational need;
- Two-factor authentication (2FA) available on all pk12 player accounts, providing an additional layer of login security beyond username and password;
- Real-time login monitoring and anomaly detection systems that flag unusual access patterns for security review;
- Regular security assessments and penetration testing by qualified third-party security professionals;
- Documented data breach response procedures enabling pk12 to respond rapidly to any identified security incident affecting player data.
Despite these measures, no internet-based service can guarantee absolute security. You also have a responsibility to protect your own account by maintaining confidential credentials and enabling two-factor authentication. pk12 will never contact you requesting your password, OTP, or account PIN.
Subject to applicable law and the specific circumstances of your data processing, you may have the following rights in relation to your personal data held by pk12. To exercise any of these rights, please contact support@pk12.bid with the subject line "Data Rights Request".
Right of Access
Request a copy of the personal data pk12 holds about you and information about how it is used.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your pk12 account.
Right to Erasure
Request deletion of your personal data where there is no longer a lawful basis for pk12 to retain it, subject to legal retention obligations.
Right to Restrict Processing
Request that pk12 limit processing of your data in certain circumstances, for example while an accuracy dispute is resolved.
Right to Data Portability
Receive a copy of data you provided to pk12 in a structured, commonly used format where processing is based on consent or contractual necessity.
Right to Object
Object to pk12's processing of your data based on legitimate interests, including profiling for personalisation or direct marketing purposes.
pk12 will respond to valid data rights requests within 30 calendar days of receipt. In certain circumstances — such as where a request is particularly complex or pk12 receives a high volume of requests — we may extend this period by a further 60 days, in which case we will notify you of the extension and reason within the initial 30-day window.
Please note: The exercise of certain rights may be subject to limitations where pk12 has a legal obligation to retain the relevant data — for example, AML record-keeping requirements that override a right to erasure request during the mandatory retention period.
The pk12 platform is strictly restricted to individuals aged 21 years and older. pk12 does not knowingly collect personal data from or market its services to any person under the age of 21. This minimum age policy is enforced through the account registration process and through KYC verification procedures that require age documentation.
Age Verification: If pk12 discovers or has reasonable grounds to suspect that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete or quarantine the associated data, and if appropriate, refer the matter to our licensing authority in accordance with our regulatory obligations.
If you are a parent or guardian who believes a minor has accessed or registered on pk12, please contact us immediately at support@pk12.bid with the subject line "Minor Access Report". We will treat such reports as urgent and act swiftly to investigate and address the situation.
The pk12 platform may contain references to or be accessed via links from third-party websites, payment platforms, or services — including JazzCash, EasyPaisa, and partner bank portals. This Privacy Policy applies only to the pk12 platform at pk12.bid and does not govern the privacy practices of any third-party service.
When you navigate away from pk12 to a third-party service — such as completing a JazzCash deposit through the JazzCash payment portal — the collection and use of your personal data will be governed by that third party's own privacy policy. pk12 recommends that you review the privacy policies of any third-party services you interact with in connection with your pk12 account.
pk12 is not responsible for the privacy practices, data security standards, or content of any third-party service, and our inclusion of a reference to a payment provider or partner does not constitute endorsement of their data handling practices.
pk12 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory requirements, or pk12's service offerings. The date of the most recent revision is stated at the top of this Policy and on the pk12 website.
Where we make material changes to this Privacy Policy — changes that significantly affect your rights or how pk12 uses your personal data — we will notify registered players via email to their registered address and/or via a prominent notice on the pk12 platform, no fewer than seven (7) days before the changes take effect.
Your continued use of pk12 following the effective date of any material change to this Privacy Policy constitutes your acknowledgment of the updated Policy. If you do not accept the revised terms, you should close your account and cease using the pk12 platform.
For all privacy-related enquiries, data rights requests, or concerns about how pk12 handles your personal data, please contact us as follows:
Privacy Contact Email: support@pk12.bid
Subject Line: "Privacy Enquiry" or "Data Rights Request"
Response Commitment: Acknowledgement within 5 business days; substantive response within 30 calendar days
Support Hours: 24 hours a day, 7 days a week
Language: English and Urdu privacy support available
pk12 is committed to addressing your privacy concerns fairly and transparently. If you are not satisfied with our response to a privacy complaint, you may have the right to escalate your concern to the relevant supervisory authority designated under pk12's international gaming licensing framework. Details of the applicable authority are available upon request from our compliance team.