PG Games Privacy Policy – How We Protect Your Data in Pakistan

This Privacy Policy ("Policy") describes how PG Games ("PG Games," "we," "us," "our") collects, uses, stores, and discloses personal information from players and visitors ("you") who access and use the PG Games website at pggames.bet and all associated services, including online casino games, PSL Betting, Teen Patti, Poker, Slots, Crash Games, and any promotional activities (collectively the "Platform").

We take data privacy seriously — not because we are required to, but because we believe players deserve to understand exactly how their information is handled. This Policy is written in plain English so that players in Pakistan can read it without needing a legal dictionary. If anything here is unclear, please contact us at support@pggames.bet and we will explain it directly.

By registering a PG Games account or by continuing to use the Platform after this Policy is updated, you consent to the practices described in this document. If you do not agree, you should stop using the Platform and contact us to close your account.

PG Games is the data controller responsible for personal information collected through the Platform. PG Games operates as an online gaming and sports betting platform specifically designed for Pakistani players. All gaming services are offered in Pakistani Rupees (PKR) with support for local payment methods including Easypaisa, JazzCash, NayaPay, SadaPay, Bank IBFT, and Visa/Mastercard.

Our registered contact for data and privacy enquiries is:

• Email: support@pggames.bet
• Privacy enquiries subject line: "Privacy Request – [Your Username]"
• Response time: Within 5 business days

PG Games collects only the data necessary to provide gaming services, maintain account security, process PKR payments, and comply with applicable legal requirements. The categories of personal data we collect are:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or political opinions. We do not collect full card numbers — payment processing uses tokenised systems where card numbers are handled exclusively by certified payment processors.

PG Games collects personal data through the following channels:

• Direct registration: When you create a PG Games account, you provide your name, date of birth, contact details, and create login credentials.
• KYC verification: When you submit identity documents (CNIC, selfie) for verification, that information is collected and stored for the duration required by applicable regulations.
• Deposits and withdrawals: When you deposit or withdraw via JazzCash, Easypaisa, or any other payment method, the relevant account or card details are collected to process the transaction.
• Platform usage: As you play games, place bets on PSL matches, or interact with any feature of the PG Games platform, your activity is recorded automatically in our systems.
• Customer support: When you contact our support team via live chat or email, the content of those communications is recorded.
• Cookies and tracking technologies: Technical data is collected automatically when you visit the Platform. See Section 7 for full details on our cookie usage.
• Third-party verification services: When you undergo identity verification, our KYC partner may cross-reference the data you provide against publicly available records to confirm your identity.

PG Games uses your personal data only for defined, legitimate purposes. The following table outlines what we use your data for and the legal basis that justifies each use:

• Operating your account and providing gaming services — Necessary to perform our contract with you as a registered player.
• Processing PKR deposits and withdrawals — Necessary to perform our contract with you and to comply with payment processing obligations.
• Verifying your identity (KYC) — Legal obligation to comply with anti-money laundering regulations and to protect the platform from fraud.
• Fraud detection and prevention — Legitimate interest in protecting the Platform, other players, and PG Games from fraudulent activity.
• Responsible gaming monitoring — Legal obligation and legitimate interest to identify and respond to signs of problem gambling among our player base.
• Customer support communications — Necessary to perform our contract and to provide the support service you have requested.
• Sending promotional offers and bonuses — Based on your consent, which you may withdraw at any time through your account settings or by contacting support.
• Improving the Platform — Legitimate interest in understanding how players use PG Games so we can make the experience better for everyone.
• Legal compliance — Legal obligation to retain certain records for regulatory purposes.

PG Games does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share data only in the following limited and necessary circumstances:

• Payment processors: JazzCash, Easypaisa, NayaPay, SadaPay, and card payment processors receive the payment data necessary to process your PKR transactions. These processors are contractually bound to use your data only for the purpose of processing your transaction.
• Identity verification providers: Our KYC partner receives identity documents submitted during verification. They are contracted to use this data solely for identity verification and are prohibited from using it for any other purpose.
• Game providers: Pragmatic Play, Spribe, SmartSoft, and other game studios integrated into the Platform may receive a pseudonymised player identifier to track game sessions for the purpose of RTP auditing and dispute resolution. They do not receive your name, contact details, or payment information.
• Legal and regulatory authorities: PG Games will disclose personal data to law enforcement, regulatory bodies, or other government authorities where required to do so by applicable law, or where we believe disclosure is necessary to prevent fraud, money laundering, or other serious offences.
• Professional advisers: Lawyers, accountants, and auditors may access limited personal data as necessary for the exercise of their professional services to PG Games, subject to strict confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of PG Games, player data may be transferred as part of the transaction. You will be notified of any such transfer and given the opportunity to close your account.

PG Games uses cookies and similar tracking technologies to operate the Platform, maintain your login session, and understand how the Platform is used. A cookie is a small data file stored on your device when you visit a website. The categories of cookies used on the PG Games Platform are:

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though blocking essential cookies will prevent you from logging in or using core Platform features. PG Games does not use advertising cookies or cross-site tracking cookies that follow you to other websites after leaving the Platform.

PG Games applies multiple layers of technical and organisational security to protect your personal data from unauthorised access, alteration, disclosure, or destruction:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers — the same standard used by major Pakistani banks.
• Encrypted data storage for all personal and payment data at rest, using industry-standard encryption algorithms.
• Role-based access controls so that only team members who need access to specific data categories to perform their job function can access them. No single employee has access to the full set of player data.
• Two-factor authentication available for all player accounts and mandatory for all PG Games staff accounts.
• Regular security audits and penetration testing by qualified external security professionals.
• Incident response procedures — in the event of a data breach affecting your personal data, PG Games will notify affected players within 72 hours of becoming aware of the incident, describing what data was affected and what steps we are taking.

PG Games retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the lifetime of your active PG Games account plus 5 years after account closure, to comply with anti-money laundering and financial record-keeping requirements.
• KYC identity documents: Retained for 7 years from the date of submission, in line with regulatory requirements applicable to gaming platforms.
• Transaction records: Retained for 7 years from the date of each transaction to meet financial record-keeping obligations.
• Gaming activity logs: Retained for 5 years for the purposes of dispute resolution and responsible gaming monitoring.
• Support communications: Retained for 3 years from the date of the last communication.
• Marketing preference records: Retained until you withdraw consent plus 2 years as evidence of your consent status.

When the applicable retention period expires, data is securely deleted or anonymised. Anonymised data — which can no longer be attributed to any individual — may be retained indefinitely for statistical analysis and platform improvement purposes.

As a PG Games player, you have the following rights in respect of your personal data. To exercise any of these rights, email support@pggames.bet with the subject line "Privacy Request – [Your Username]." We will respond within 5 business days.

The PG Games Platform is strictly for users aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not register an account or attempt to use the Platform in any way.

If PG Games becomes aware that a registered account belongs to a minor, we will immediately close the account, return any real money balance to the payment method used for deposits (after deducting any bonuses received), and delete all personal data associated with the account to the extent not required for legal compliance purposes.

If you are a parent or guardian and believe your child may have created a PG Games account, please contact us immediately at support@pggames.bet and we will investigate and act promptly.

The PG Games Platform does not contain links to third-party websites as part of the standard user interface. If you access the Platform through a link from a third-party source — for example, an affiliate website or a social media post — PG Games is not responsible for the privacy practices of that third-party source.

Once you are on the PG Games Platform itself, any data you provide is governed exclusively by this Privacy Policy. We encourage you to review the privacy policies of any third-party websites or services you use independently of PG Games.

PG Games may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable regulations, or improvements to our services. When material changes are made, we will:

• Update the "Effective" date shown at the top of this page
• Display a notice on the PG Games Platform for at least 30 days after the change takes effect
• Where the change materially affects how we process your data, send a notification to your registered email address

We encourage you to review this Policy periodically. Your continued use of the Platform after a Policy update is posted constitutes acceptance of the updated Policy. If you disagree with any changes, you may close your account by contacting support and requesting account closure.

For any questions, concerns, or requests relating to this Privacy Policy or the way PG Games handles your personal data, please contact us through the following channels:

• Email: support@pggames.bet
• Subject line: "Privacy Request – [Your PG Games Username]"
• Live Chat: Available 24/7 in Urdu and English via the chat icon on the Platform
• Response time: Privacy requests are acknowledged within 24 hours and fully responded to within 5 business days

If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction or through the dispute resolution channel specified in our Terms and Conditions.