gampk Privacy Policy

1. Who We Are

gampk operates the online gaming platform accessible at gampk.com ("Platform"). For the purposes of this Privacy Policy, gampk acts as the data controller in respect of personal data collected from players and visitors who interact with the Platform. Our contact email for all privacy-related matters is [email protected].

The Platform serves players primarily located in Pakistan, including users in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, and other cities. We are committed to handling personal data responsibly and in accordance with applicable privacy and data protection laws relevant to our operations.

2. Personal Data We Collect

gampk collects personal data in the following categories depending on how you interact with the Platform:

2.1 Registration Data

• Full legal name;
• Date of birth (to verify the 18+ age requirement);
• Email address;
• Pakistani mobile telephone number (used for SMS OTP verification and account alerts);
• Chosen username and encrypted password hash.

2.2 Identity Verification (KYC) Data

• Government-issued photographic identification (CNIC, passport, or driving licence) – document type, number, and issuing authority;
• Proof of address documents (e.g. utility bill, bank statement);
• Selfie or liveness-check images where required by our KYC procedures;
• Payment method verification documents (e.g. screenshot of JazzCash or Easypaisa account confirming registered name).

2.3 Financial Data

• Payment method identifiers (mobile wallet number, masked bank account or card number);
• Deposit and withdrawal transaction records including amounts, timestamps, and payment provider references;
• PKR balance history and bonus redemption records.

2.4 Gaming Activity Data

• Game session logs including game title, wager amounts, win/loss outcomes, and session duration;
• Sports betting history including markets selected, stakes placed, and settlement outcomes;
• Responsible gaming settings you have configured (deposit limits, loss limits, self-exclusion status).

2.5 Technical & Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser information;
• Session identifiers and login timestamps;
• Cookie identifiers and analytics data as described in Section 6.

2.6 Communications Data

• Content of support chat or email exchanges between you and the gampk team;
• Survey responses and feedback submitted voluntarily.

3. How gampk Uses Your Personal Data

gampk processes your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your gampk account, processing login requests, and communicating account-related notices.
• Age and identity verification: Confirming that you meet the 18+ age requirement and that your identity is consistent with the information provided at registration.
• Payment processing: Executing deposit and withdrawal transactions via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa/Mastercard, and USDT channels.
• Legal and regulatory compliance: Meeting anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gaming obligations applicable to gampk's operations.
• Fraud prevention and security: Detecting and preventing fraudulent activity, account takeovers, bonus abuse, and money laundering through the Platform.
• Responsible gaming management: Monitoring gaming behaviour to identify indicators of problem gambling, enforcing self-exclusion requests, and applying the limits you configure in your account settings.
• Platform improvement: Aggregated and anonymised analytics to understand how players use the Platform and to improve game curation, performance, and user experience.
• Customer support: Responding to support queries, resolving disputes, and maintaining records of communications for quality assurance.
• Marketing communications: Sending promotional offers, bonus notifications, and Platform updates to your registered email or mobile number, where you have not opted out. You may opt out at any time by contacting [email protected].

4. Legal Basis for Processing

gampk relies on the following legal bases to process your personal data:

• Contractual necessity: Processing required to perform the contract between you and gampk – including account registration, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable law – including KYC identity checks, AML record-keeping, age verification, and responsible gaming obligations.
• Legitimate interests: Processing for fraud detection, platform security, analytics, and improvement of services, where these interests are not overridden by your rights.
• Consent: Marketing communications where consent is required by applicable law. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

5. Sharing Your Personal Data

gampk does not sell your personal data. We share data only in the following circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and card/crypto processing partners receive transaction data necessary to execute deposits and withdrawals. These processors are contractually bound to handle your data in accordance with applicable data protection standards.
• KYC and identity verification providers: Third-party identity verification services may process your KYC documents on gampk's behalf. These providers are subject to data processing agreements and are not permitted to use your data for their own purposes.
• Game software providers: Game suppliers whose titles appear in the gampk lobby receive session data (player identifier, wager, outcome) to facilitate gameplay and RNG certification. Personal details such as name or mobile number are not shared with game providers.
• Legal and regulatory authorities: gampk may disclose data to law enforcement, financial intelligence units, or other competent authorities where required by applicable law, court order, or where gampk reasonably believes disclosure is necessary to prevent fraud or criminal activity.
• Business transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. Affected players will be notified in advance.

6. Cookies & Tracking Technologies

gampk uses cookies and similar tracking technologies to operate the Platform effectively. The categories of cookies used are:

• Strictly necessary cookies: Required for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled.
• Functional cookies: Store your preferences such as language, game filters, and display settings to personalise your experience.
• Analytics cookies: Collect aggregated data about how players navigate the Platform. This data is used to identify performance issues and improve the Platform. Analytics are conducted using data that is anonymised at the reporting level.
• Fraud prevention cookies: Used to detect suspicious login behaviour, device consistency, and bot activity that may indicate account fraud or bonus abuse.

You may manage non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair Platform functionality. gampk does not use cookies to serve third-party advertising networks.

7. Data Retention

gampk retains personal data for periods determined by legal obligation, contractual necessity, and documented business purposes. The general retention principles applied by gampk are:

• Active account data: Retained for the duration of the account relationship plus a minimum of five (5) years following account closure, to satisfy AML record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years following the end of the business relationship, consistent with applicable financial crime prevention legislation.
• Transaction records: Retained for a minimum of five (5) years following the relevant transaction date.
• Support communications: Retained for three (3) years following resolution of the relevant support case, unless the matter involves a dispute that extends the retention period.
• Analytics data: Retained in anonymised or aggregated form only; personally identifiable information is removed within ninety (90) days of collection.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised.

8. Security Measures

gampk implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• 256-bit TLS/SSL encryption for all data in transit between user devices and gampk servers;
• AES-256 encryption for sensitive data fields stored at rest, including KYC document uploads and payment identifiers;
• One-way cryptographic hashing of all account passwords (bcrypt with work factor scaling);
• Role-based access controls limiting staff access to personal data to those with a documented business need;
• Audit logging of all administrative access to personal data records;
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security professionals;
• Login anomaly detection that flags access from unfamiliar devices or geographic locations and triggers email notification to the registered player.

Despite these measures, no online system can guarantee absolute security. If you have reason to believe your gampk account has been compromised, contact [email protected] immediately so that your account can be locked.

9. Your Data Rights

Depending on applicable law, you may have the following rights in relation to your personal data held by gampk:

• Right of access: Request a copy of the personal data gampk holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data, subject to legal retention obligations that prevent immediate deletion (e.g. AML record-keeping).
• Right to restrict processing: Request that gampk limits the use of your data to storage only while a dispute or correction request is pending.
• Right to data portability: Receive your personal data in a structured, machine-readable format where technically feasible and legally permitted.
• Right to object: Object to processing carried out on the basis of legitimate interests, including marketing communications.
• Right to withdraw consent: Where processing is based on consent, withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected]. gampk will acknowledge your request within 48 hours and provide a substantive response within thirty (30) calendar days. We may request verification of your identity before processing a data rights request.

10. Children & Minors

gampk is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If gampk becomes aware that personal data has been collected from a minor, the relevant account will be closed immediately, the data will be deleted, and any deposits will be returned to the depositing payment method (subject to fraud checks). If you have reason to believe a minor has registered on the Platform, please report this immediately to [email protected].

11. International Data Transfers

gampk's primary data processing infrastructure is operated by providers committed to internationally recognised security standards. Where personal data is transferred to, or processed by, service providers located outside of Pakistan, gampk ensures that appropriate safeguards are in place. These may include contractual data processing agreements incorporating standard data protection clauses, adequacy decisions, or equivalent protective mechanisms recognised under applicable law. gampk does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate safeguards.

12. Changes to This Privacy Policy

gampk reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email notification to the address on file and/or a prominent notice on the Platform for a minimum of seven (7) days prior to the effective date. The "Last updated" date at the top of this policy will be revised accordingly. Your continued use of the Platform after the effective date of any change constitutes acceptance of the revised policy. We encourage you to review this policy periodically.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or gampk's data handling practices, please contact the gampk data team:

Email: [email protected]

Please include "Privacy Request" in the subject line of your email and provide sufficient detail to allow gampk to identify your account and process your request efficiently. gampk will respond to privacy-related enquiries within 48 hours of receipt.