Privacy
Policy

apkt2 is Pakistan's leading online casino and sports betting platform, serving Players across Karachi, Lahore, Faisalabad, Islamabad, and other cities throughout the country. We take the privacy and security of our Players' personal data seriously. This Policy has been prepared in compliance with applicable data protection principles and the requirements of our international gaming licence.

Our platform is designed for adults aged 21 and above. We collect only the data that is necessary to provide you with a secure, lawful, and enjoyable gaming experience, to satisfy our regulatory and anti-money laundering obligations, and to deliver relevant promotional content where you have given consent for us to do so.

If you have any questions about this Policy or how your personal data is handled, please contact our Data Protection team via the support channel listed in Section 14 of this document.

apkt2 collects personal data from you through a variety of touchpoints, including the registration process, account management activities, payment transactions, gameplay, customer support interactions, and your general use of the Platform. The categories of personal data we collect include the following:

Where apkt2 requires you to provide personal data to comply with legal or regulatory obligations (such as KYC verification), failure to provide the requested data may result in our inability to maintain your Account or process withdrawal requests.

apkt2 uses the personal data it collects for the following purposes:

• Account Management: To create and maintain your Player Account, verify your identity at registration, and ensure ongoing compliance with platform eligibility requirements.
• KYC & Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering regulations and the requirements of our international gaming licence, including identity verification and transaction monitoring.
• Payment Processing: To facilitate deposits and withdrawals via JazzCash, EasyPaisa, HBL Bank Transfer, UBL Bank Transfer, Meezan Bank, Raast, 1LINK, GrabPay, and Retail Cash OTC channels.
• Platform Delivery: To provide access to casino games, live dealer tables, the PSL and cricket sportsbook, and all other features of the apkt2 platform.
• Responsible Gaming: To monitor gameplay patterns, identify indicators of problem gambling behaviour, and administer responsible gaming tools including deposit limits, session reminders, cooling-off periods, and self-exclusion at your request or where regulatory obligations apply.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as described in the Terms and Conditions.
• Customer Support: To respond to your queries, complaints, and requests submitted via live chat or email.
• Marketing Communications: To send you promotional offers, bonus announcements, and seasonal campaigns (such as PSL promotions) where you have given your explicit consent. You may withdraw consent at any time.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the platform experience, optimise game offerings, and refine our services for Pakistani players.

apkt2 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you, except where required to do so under our regulatory licensing obligations (e.g., automated transaction monitoring for AML compliance).

apkt2 processes your personal data on the following legal bases, which vary depending on the specific purpose of the processing activity:

• Contractual Necessity: Processing your identity, contact, financial, and gameplay data is necessary to perform the contract between you and apkt2 — that is, to operate your Account, process your transactions, and deliver the platform services you have registered to use.
• Legal Obligation: Processing for KYC verification, AML transaction monitoring, regulatory reporting, and age verification is necessary for apkt2 to comply with its obligations under applicable law and the terms of its international gaming licence.
• Legitimate Interests: Processing for fraud prevention, security monitoring, and internal analytics is carried out on the basis of apkt2's legitimate interest in maintaining a safe and compliant platform, provided that this interest does not override your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications, non-essential cookies, and personalised promotional content is conducted solely on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without penalty, though withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

apkt2 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

• KYC & Identity Verification Partners: We share identity documents and personal data with licensed third-party KYC service providers solely for the purpose of verifying your identity and age as required by our licensing obligations.
• Payment Processors: We share transaction-related data with our approved payment service providers — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, GrabPay, and Retail Cash OTC operators — strictly to the extent required to process your deposits and withdrawals.
• Regulatory & Law Enforcement Authorities: We may disclose personal data to relevant regulatory bodies, law enforcement agencies, or courts where we are legally compelled to do so, or where disclosure is necessary to protect the rights and safety of apkt2, our Players, or the public.
• Responsible Gaming Partners: Where a Player activates self-exclusion or is referred to external support resources, limited identifying data may be shared with responsible gaming organisations to facilitate that service.
• Service Providers & Technology Partners: We engage trusted third-party service providers for platform hosting, data storage, security monitoring, and analytics. All such providers operate under contractual data protection obligations and are not permitted to use your data for any purpose other than delivering services to apkt2.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, personal data held by apkt2 may be transferred to the acquiring entity, subject to equivalent data protection obligations being assumed by the new operator.

apkt2 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device by your browser when you visit apkt2.app. We use the following categories of cookies:

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and performance of the apkt2 platform. apkt2 does not use cross-site tracking cookies that follow your browsing activity beyond the apkt2.app domain.

apkt2 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our international gaming licence obligations. The following general retention periods apply:

• Account & Identity Data: Retained for the duration of your active Account and for a minimum of five (5) years following Account closure, in compliance with anti-money laundering record-keeping requirements.
• Financial & Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial regulations.
• Gameplay Records: Retained for up to three (3) years following your last gameplay session for responsible gaming monitoring purposes, and for up to five (5) years where required for regulatory compliance or dispute resolution.
• Customer Support Records: Retained for up to three (3) years from the date of the interaction, or longer if the interaction relates to an unresolved dispute or regulatory investigation.
• Marketing Consent Records: Retained for the duration of your Account plus three (3) years to demonstrate compliance with consent obligations.
• Self-Exclusion Records: Retained indefinitely to prevent a self-excluded Player from re-registering on the Platform, even after the stated exclusion period has expired.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual Player.

apkt2 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• Encryption in Transit: All data transmitted between your device and apkt2.app is protected using TLS 1.2 or higher encryption protocols.
• Encryption at Rest: Sensitive personal and financial data stored on our servers is encrypted using industry-standard AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised apkt2 personnel who require it to perform their specific job functions. All staff with data access undergo regular data protection training.
• Intrusion Detection: Our infrastructure is monitored 24/7 using automated intrusion detection and anomaly alerting systems.
• Regular Audits: apkt2 undergoes periodic security assessments and penetration testing conducted by independent third-party security specialists.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, apkt2 will notify you and, where required, the relevant regulatory authority, within the timeframes required by applicable law.

Subject to applicable law and the limitations imposed by our regulatory and anti-money laundering obligations, you have the following rights in relation to your personal data held by apkt2:

• Right of Access: You have the right to request a copy of the personal data apkt2 holds about you. We will respond to verified access requests within 30 calendar days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by apkt2. You may update certain details directly through your Account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our overriding legal retention obligations. Regulatory record-keeping requirements may prevent us from deleting certain data prior to the expiry of the mandatory retention period.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy or object to its processing.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive a structured, machine-readable copy of the personal data you have provided to apkt2.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. apkt2 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the apkt2 support team through the live chat at apkt2.app or via the support email listed in Section 14. We may require you to verify your identity before processing a data rights request. We will respond to all verified requests within 30 calendar days; complex or multiple requests may be extended by a further 60 days with prior notice.

apkt2 operates under an international gaming licence and may process or store personal data on servers located outside Pakistan. Where personal data is transferred to jurisdictions that may not provide an equivalent level of data protection to that applicable in Pakistan, apkt2 ensures that appropriate safeguards are in place prior to any such transfer. These safeguards include:

• Contractual clauses that obligate the receiving party to protect your data to an equivalent standard;
• Transfers to parties that operate under recognised international data protection frameworks;
• Technical and organisational security measures applied to data in transit and at rest, regardless of where it is processed.

By using the apkt2 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan for the purposes described in this Policy. If you have concerns about international data transfers, please contact our support team for further information.

apkt2 employs age verification controls at the point of registration and during the KYC process to prevent access by minors. Where apkt2 discovers or has reasonable grounds to believe that an Account has been registered by a person under the age of 21, the Account will be immediately closed, all activity will be voided, and the matter will be handled in accordance with our Responsible Gaming Policy and applicable regulatory requirements.

If you are a parent or guardian and believe that a minor in your care has accessed or registered on the apkt2 platform, please contact our support team immediately. We will take prompt action to investigate and close any such Account.

We strongly encourage parents and guardians to make use of parental control software and to maintain open conversations about the risks of gambling with young people in their households.

The apkt2 platform integrates with a number of third-party services — including payment gateways, game content providers, KYC tools, and analytics platforms — to deliver a complete gaming experience. Each of these third-party providers operates under its own privacy policy and data protection framework, which governs the data it processes independently of apkt2.

apkt2 is not responsible for the privacy practices of third-party providers. However, we select our partners carefully and require all third parties who process personal data on our behalf to maintain appropriate technical and contractual safeguards. We do not permit third-party providers to use your personal data for their own marketing or commercial purposes.

apkt2.app does not contain links to external websites. Any content or services delivered within the platform by licensed game providers — such as live dealer studios — are governed by the provider's own terms, though they are delivered within the secure apkt2 environment.

apkt2 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, applicable law, or regulatory requirements. All amendments will be published on this page with an updated effective date. Where changes are material — meaning they significantly affect your rights or the way we process your personal data — we will notify registered Players via email or through a prominent on-Platform notification prior to the changes taking effect.

Your continued use of the apkt2 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree with any changes to this Policy, you should cease using the Platform and may request Account closure in accordance with the Terms and Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way apkt2 processes your personal data, please contact us through the following channels:

Live Chat: 24/7 live support available at apkt2.app — the fastest way to reach the team for urgent data-related requests.

Support Email: [email protected]

For formal data protection complaints or data rights requests, please use the support email with the subject line "Data Protection Request" and include your registered Account email address and a clear description of your request. apkt2 will acknowledge receipt within 48 hours and provide a substantive response within 30 calendar days.

If you are not satisfied with apkt2's response to your data protection concern, you have the right to escalate your complaint to the relevant data protection supervisory authority or regulatory body applicable under our international gaming licence framework. Our support team can provide information on the appropriate authority upon request.