Privacy Policy

Prize Pak collects the following personal information when you register and use our platform:

• Full Name — used to personalise your account and identify prize winners.
• Email Address — used for account verification, draw results, and important notifications.
• Mobile Number — used to verify your identity and send transactional alerts.
• Mailing Address — collected for record-keeping and regulatory compliance.
• Payment Transaction IDs — collected to verify bond purchases made via JazzCash or EasyPaisa.

We do not store credit card numbers, debit card numbers, or full payment credentials.

• To create and manage your Prize Pak membership account.
• To issue your unique PK bond number upon successful payment verification.
• To enter your bond into monthly lucky draws automatically.
• To notify you of draw results, prize wins, and withdrawal updates.
• To process withdrawal requests after the 6-month holding period.
• To maintain platform security and prevent fraudulent activity.
• To comply with applicable laws and regulations in Pakistan.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Your email address is used exclusively for:

• Account registration confirmation.
• Draw result notifications (monthly).
• Payment receipt and bond approval confirmations.
• Withdrawal status updates.
• Important platform announcements that directly affect your account.

You will not receive unsolicited promotional emails. If you wish to unsubscribe from non-essential communications, contact us at the address listed in Section 8.

Your mobile number is used for identity verification and may be used to send:

• One-time verification codes (OTP) during sensitive account actions.
• Withdrawal confirmation alerts.
• Prize win notifications (if applicable).

Your mobile number is never shared with third parties or used for unsolicited marketing messages.

Prize Pak is committed to protecting your personal data through industry-standard practices:

• All data is stored on secured, encrypted servers.
• Access to personal data is restricted to authorised platform administrators only.
• Passwords are hashed using bcrypt — we never store plaintext passwords.
• All connections to our platform are secured via HTTPS/TLS encryption.
• We conduct periodic security reviews to identify and address vulnerabilities.

• Authentication: We use JWT (JSON Web Tokens) with secure expiry for all authenticated sessions.
• Payment Verification: All bond purchases are manually verified using transaction IDs from JazzCash and EasyPaisa. Payments are never processed through our servers.
• Account Lockout: Accounts showing suspicious activity may be temporarily suspended pending review.
• Data Minimisation: We only collect data that is strictly necessary for platform operation.

As a Prize Pak member, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or outdated personal data.
• Right to Deletion: Request deletion of your account and associated data, subject to legal and financial record retention requirements.
• Right to Portability: Request your data in a portable format.

To exercise any of these rights, contact us using the information in Section 8.

For any privacy-related questions, data requests, or concerns, please contact Prize Pak at:

• Platform: prizepak.org
• Subject Line: Privacy Request — [Your Name]

We aim to respond to all privacy requests within 7 business days.

Prize Pak reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered members via email. Continued use of the platform after changes constitutes acceptance of the updated policy.