gopk Privacy Policy

1 Who We Are

gopk is an internationally licensed online gaming platform operating the website gopk.bet. We provide cricket betting, live casino, slot games, and card games — including Callbreak and Phoenix Rises — to adult players across Pakistan, including Karachi, Lahore, Islamabad, and Faisalabad.

For the purposes of this Privacy Policy, gopk acts as the data controller in respect of all personal data collected through the gopk Platform. This means we determine the purposes and means by which your personal information is processed.

Our designated Data Protection contact can be reached at: [email protected]. Any queries specifically relating to your personal data, data rights requests, or concerns about how we handle your information should be directed to this address with the subject line "Data Privacy Request".

2 Scope of This Policy

This Privacy Policy applies to all personal data collected, processed, or stored by gopk in connection with:

• Your registration and use of a gopk player account at gopk.bet.
• Any deposit, withdrawal, or financial transaction conducted through the gopk Platform.
• Your participation in any game, betting market, promotion, or bonus offer on gopk.
• Any communication you send to or receive from gopk, including support queries, complaints, and promotional communications.
• Your browsing activity on the gopk website, including pages visited and features used.
• KYC identity and age verification processes conducted by gopk or on our behalf.

This Policy should be read alongside gopk's Terms & Conditions and Responsible Gaming Policy, both of which form part of your overall agreement with gopk.

If you are located in a jurisdiction with specific data protection legislation that provides you with rights beyond those described in this Policy, those statutory rights are not limited or excluded by anything contained herein.

3 Data We Collect

gopk collects only the minimum personal data necessary to operate your account lawfully, securely, and effectively. The categories of personal data we collect are set out in the table below:

4 How We Collect Your Data

gopk collects your personal data through the following channels:

• Direct input: Information you provide when creating your gopk account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated technical collection: When you browse gopk.bet, our servers automatically record technical data such as your IP address, browser type, device identifiers, and browsing session data. This is standard practice for all websites and is necessary for security and platform operation.
• Payment processors: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, our payment processing partners share transaction confirmation data with gopk. We receive only the data necessary to confirm and record the transaction — we do not have access to your full banking credentials.
• KYC verification partners: Where gopk uses a third-party identity verification service to assist with KYC processing, that service provider shares verification results and identity confirmation data with us under a strict data processing agreement.
• Cookies and similar technologies: As described in Section 8 of this Policy, gopk uses cookies to maintain session security and collect anonymised usage analytics.

5 Lawful Basis for Processing

gopk processes your personal data only where a valid lawful basis exists under applicable data protection law. The lawful bases we rely on are as follows:

• Contractual necessity: Processing required to create and manage your gopk account, process transactions, verify your identity, and deliver the gaming services you have signed up for.
• Legal obligation: Processing required to comply with our international gaming licence conditions, anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and any applicable legal orders or regulatory directives.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where you have explicitly opted in to receive promotional communications from gopk, we process your contact data to send such communications on the basis of your consent. You may withdraw consent at any time by contacting [email protected] or using the unsubscribe function in any marketing email.

6 How We Use Your Data

gopk uses your personal data for the following specific purposes:

• Creating, verifying, and managing your gopk player account.
• Processing your deposits and withdrawals via your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank).
• Verifying your identity and age through the KYC process to comply with our licensing requirements and protect minors.
• Detecting, investigating, and preventing fraud, money laundering, collusion, and other prohibited conduct as defined in our Terms & Conditions.
• Enforcing responsible gaming measures, including deposit limits, session reminders, cooling-off periods, and self-exclusion.
• Resolving disputes, complaints, and customer support queries.
• Sending you transactional communications related to your account (deposits, withdrawals, security alerts, KYC requests). These communications are not optional — they are necessary for account operation.
• Sending you promotional communications about gopk offers and bonuses, where you have consented to receive such communications.
• Conducting internal analytics to improve the performance, security, and user experience of the gopk Platform.
• Complying with requests from competent regulatory authorities, law enforcement, or our international licensing authority.

gopk will never use your personal data for purposes incompatible with those listed above without first obtaining your explicit consent or establishing a new lawful basis.

7 Data Sharing & Disclosure

gopk does not sell your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum data necessary to process your deposit or withdrawal transaction. Each payment processor operates under its own privacy policy and applicable financial regulations.
• KYC and identity verification providers: Where we engage a third-party service to assist with document verification and identity checking, we share identity documents under a strictly governed data processing agreement. These providers act as data processors on gopk's behalf and may not use your data for any independent purpose.
• Fraud prevention and AML compliance services: gopk may share account and transaction data with specialist fraud detection or AML screening services to fulfil our licensing obligations. These services are bound by confidentiality and data processing agreements.
• Regulatory and law enforcement authorities: gopk is legally obligated to disclose account information and transaction records to competent authorities upon receipt of a valid legal order, regulatory directive, or where required by our international gaming licence conditions. Such disclosures may be made without prior notice to the affected account holder where required by law.
• Corporate transactions: In the event of a merger, acquisition, or restructuring of the gopk business, personal data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

All third parties who process personal data on behalf of gopk are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose other than the specific service they provide to gopk.

8 Cookies & Tracking

gopk uses cookies and similar browser storage technologies on the gopk.bet website. We use three categories of cookies:

• Strictly necessary cookies: These are essential for the Platform to function correctly. They maintain your logged-in session, remember your language preferences, and support core security features such as CSRF protection. These cookies cannot be disabled without breaking core Platform functionality.
• Analytics cookies: gopk uses anonymised, first-party analytics to understand how players navigate the Platform — which pages are most visited, how long sessions last, and where users encounter difficulties. This data is aggregated and cannot be used to identify individual players. No third-party analytics platforms (such as Google Analytics) are used in a way that shares identifiable player data with external parties.
• Security cookies: Short-lived tokens used to detect and prevent fraudulent login attempts, account takeovers, and bot activity on the Platform.

You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging into your gopk account. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

9 Data Retention

gopk retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by our licensing obligations or applicable law. Our standard retention periods are as follows:

Following the expiry of the applicable retention period, gopk will securely delete or anonymise your personal data in a manner that prevents recovery or re-identification.

10 Data Security

gopk implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and gopk servers.
• AES-256 encryption at rest for all sensitive data stored in gopk databases, including financial records and KYC documents.
• One-way cryptographic password hashing — your gopk account password is never stored in a recoverable form. Even gopk's own technical staff cannot retrieve your password in plain text.
• Multi-factor authentication available for all player accounts via SMS OTP to your registered Pakistani mobile number.
• Role-based access controls ensuring that only authorised personnel can access specific categories of personal data, and only to the extent necessary for their defined role.
• Regular security audits and penetration testing conducted by independent third-party security specialists.
• Intrusion detection and DDoS mitigation systems operating continuously to identify and respond to security threats in real time.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, gopk will notify affected players and relevant authorities within the timeframes required by our licensing obligations.

11 Your Data Rights

Subject to applicable law and certain legitimate exceptions (such as where processing is required to comply with a legal obligation), you have the following rights over your personal data held by gopk:

• Right of Access: You may request a copy of all personal data gopk holds about you. We will provide this in a structured, commonly used format within 30 days of receiving a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update basic account details directly from your gopk account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent. Note that we may be required to retain certain data (such as transaction records) for legal and regulatory compliance purposes even following an erasure request.
• Right to Restrict Processing: You may request that gopk temporarily suspend processing of your data while the accuracy of data or the legitimacy of processing is under review.
• Right to Data Portability: You may request that gopk provide your personal data in a machine-readable format suitable for transfer to another service provider, where technically feasible.
• Right to Object: You may object to processing of your data carried out on the basis of legitimate interests. gopk will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request". We may require identity verification before processing your request to protect against fraudulent access to another person's data. gopk will respond within 30 days. For complex requests, this period may be extended by a further 30 days with notification and explanation.

12 Children & Minors

gopk is strictly an adults-only platform. Access is prohibited to any individual under the age of 21. gopk does not knowingly collect or process personal data belonging to individuals under 21 years of age.

If gopk discovers or has reasonable grounds to believe that a registered account belongs to a person under 21, the account will be immediately suspended. All activity on the account will be investigated, winnings will be forfeited, and any real-money deposits will be returned to the original payment source. The personal data collected in connection with the underage account will be retained only for the minimum period required to conclude the investigation and comply with our reporting obligations, after which it will be securely deleted.

Parents and guardians who believe their child may have registered a gopk account are encouraged to contact us immediately at [email protected]. We will investigate and resolve the matter with the utmost priority. We also recommend the use of parental control tools and internet filtering software to prevent access to online gaming platforms by minors within the household.

13 Third-Party Services

The gopk Platform integrates with a limited number of third-party service providers necessary for platform operation. These include payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), game content providers, KYC verification services, and infrastructure hosting providers.

Each third-party service provider that processes personal data on gopk's behalf is:

• Bound by a data processing agreement requiring compliance with applicable data protection standards.
• Prohibited from using gopk player data for any independent commercial purpose.
• Required to implement appropriate technical and organisational security measures.
• Subject to regular review by gopk to ensure continued compliance.

gopk.bet does not contain links to external third-party websites. If you navigate away from the gopk Platform by manually entering a third-party URL in your browser, any data you submit to that third party is governed by that party's own privacy policy. gopk accepts no responsibility for the privacy practices of third-party websites.

14 Changes to This Policy

gopk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or licensing requirements. The effective date at the top of this document will be updated whenever a revision is made.

For material changes — meaning changes that significantly affect your privacy rights or how we use your data — gopk will provide at least fourteen (14) days' advance notice via email to your registered address and/or a prominent notice on the Platform. Non-material changes (such as typographical corrections or minor clarifications) may take effect immediately upon publication.

Your continued use of the gopk Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised Policy, you should cease using the Platform and contact our support team to close your account.

We encourage all gopk players to review this Privacy Policy periodically to stay informed about how we are protecting your personal information.

15 Contact & Data Requests

For all privacy-related queries, data rights requests, or concerns about how gopk handles your personal information, please contact our Data Protection team:

• Email: [email protected] (subject line: "Data Privacy Request")
• Availability: 24 hours a day, 7 days a week
• Response Time: Within 30 days for data rights requests; within 24–48 hours for general privacy queries

When submitting a data rights request, please include your registered gopk username or email address, the nature of your request, and any relevant supporting details. We may ask you to verify your identity before we process the request to ensure that we are responding to the genuine account holder.

gopk is committed to handling all privacy matters with transparency, fairness, and respect for every player across Karachi, Lahore, Islamabad, Faisalabad, and the rest of Pakistan.