pk388 Privacy Policy

§ 01 Introduction

pk388 is committed to protecting the privacy of all individuals who interact with our platform. This Privacy Policy sets out in clear, plain terms how pk388 collects, uses, stores, shares, and protects your personal data in connection with your use of the pk388 online casino and sports betting platform, accessible at pk388.bet.

We understand that players across Pakistan — from Karachi and Lahore to Islamabad, Faisalabad, and Peshawar — entrust us with sensitive personal and financial information. We take that responsibility seriously. Our data handling practices are designed to be transparent, proportionate, and consistent with internationally recognised data protection principles.

This Privacy Policy applies to all personal data processed by pk388 in connection with:

• Registration and maintenance of a pk388 player account.
• Deposits, withdrawals, and all financial transactions conducted through the platform.
• Participation in casino games, sports betting, live dealer tables, and promotional activities.
• Communications with pk388 customer support via email or live chat.
• Browsing and interaction with the pk388.bet website and any associated mobile interface.

§ 02 Data Controller

For the purposes of this Privacy Policy, pk388 acts as the data controller in respect of all personal data collected from players and website visitors. As data controller, pk388 determines the purposes for which and the means by which your personal data is processed.

All enquiries relating to data protection, including requests to exercise your data subject rights, should be directed to the pk388 Data Protection contact as outlined in Section 17 of this Policy.

§ 03 Data We Collect

pk388 collects the following categories of personal data from players and platform visitors. We collect only what is genuinely necessary for the stated purposes:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, CNIC number, passport number	Account registration, KYC verification, age verification
Contact Data	Email address, mobile number, city of residence	Account communications, support, marketing (where opted in)
Financial Data	Payment method details, transaction history, deposit and withdrawal records	Payment processing, AML compliance, fraud prevention
Account Data	Username, login history, session duration, game history, betting records	Account management, responsible gaming monitoring, dispute resolution
Technical Data	IP address, device type, browser type, operating system, referral URL	Security, fraud detection, platform optimisation
Verification Documents	Copies of government-issued ID, proof of address, payment method proof	KYC compliance, regulatory obligations
Communications Data	Support chat transcripts, email correspondence, complaint records	Customer support, quality assurance, legal record-keeping

pk388 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information unless specifically required for a responsible gaming assessment and with your explicit consent.

§ 04 How We Collect Data

pk388 collects personal data through the following channels:

• Directly from you: When you complete the registration process, submit KYC documents, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automatically: When you browse or interact with the pk388.bet website, our systems automatically collect certain technical data including your IP address, device identifiers, and session data via cookies and similar technologies.
• From third-party service providers: Identity verification agencies, payment processors (including JazzCash, EasyPaisa, HBL, UBL, Allied Bank, SadaPay), and fraud prevention services may share data with us as part of their contracted services to pk388.
• From publicly available sources: In limited circumstances related to fraud prevention or regulatory compliance, pk388 may reference publicly available data sources to verify information you have provided.

§ 05 Purposes of Processing

pk388 processes your personal data for the following specific purposes:

1. Account Registration & Management: To create, maintain, and administer your pk388 player account, including processing your login credentials and account preferences.
2. Identity Verification (KYC): To verify your identity and age in compliance with our regulatory obligations. Players must be 21 years of age or older to hold a pk388 account.
3. Payment Processing: To process deposits and withdrawals via your chosen payment method, reconcile transactions, and maintain accurate financial records.
4. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other security threats.
5. Regulatory Compliance: To fulfil our obligations under applicable gaming licence conditions, anti-money laundering regulations, and any other applicable legal requirements.
6. Customer Support: To respond to your enquiries, resolve disputes, and maintain a record of your interactions with our support team.
7. Responsible Gaming: To monitor player behaviour for signs of problem gambling and to administer deposit limits, self-exclusion requests, and other player protection tools.
8. Platform Improvement: To analyse how players interact with the platform in order to improve game offerings, user experience, and technical performance.
9. Marketing (where consented): To send you promotional communications about pk388 offers, bonuses, new games, and PSL cricket betting markets, where you have opted in to receive such communications.

§ 06 Legal Basis for Processing

pk388 processes your personal data on the following legal bases, as appropriate to each processing activity:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the pk388 Terms & Conditions, including account management and payment processing.
• Legal Obligation: Processing required to comply with applicable regulatory requirements, including KYC verification and anti-money laundering obligations.
• Legitimate Interests: Processing necessary for pk388's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where we have obtained your explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

§ 07 Data Sharing & Third Parties

pk388 does not sell, rent, or otherwise disclose your personal data to unaffiliated third parties for their independent commercial purposes. We share personal data only in the following limited circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Allied Bank, SadaPay, and USDT TRC20 network operators receive the minimum data necessary to process your transactions.
• Identity Verification Providers: Third-party KYC agencies receive identity documents and relevant personal data solely for the purpose of verifying your identity and age on behalf of pk388.
• Game Software Providers: Licensed casino game studios and live dealer operators receive limited session and account data necessary to deliver games to your account.
• Fraud & Security Services: Specialist fraud prevention and cybersecurity providers receive technical data to assist in identifying and preventing fraudulent activity.
• Regulatory Authorities: pk388 may be required to disclose personal data to our licensing authority, financial intelligence units, or law enforcement agencies in response to a lawful request or regulatory obligation.
• Legal Proceedings: Where required to establish, exercise, or defend legal claims, pk388 may disclose personal data to legal advisers or courts as necessary.

§ 08 Data Retention

pk388 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account and for a minimum period of five years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of five years from the date of account closure or the date of the last transaction, whichever is later.
• Transaction Records: Retained for a minimum of five years from the date of each transaction.
• Customer Support Communications: Retained for a minimum of three years from the date of the last communication.
• Marketing Consent Records: Retained until consent is withdrawn or for three years from the last marketing interaction, whichever is earlier.
• Technical & Log Data: Typically retained for up to 12 months from the date of collection, unless required for longer for security or legal purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an individual player.

§ 09 Security Measures

pk388 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the pk388 platform.
• Encrypted storage of sensitive data including passwords and financial records at rest.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific role.
• Regular security audits, penetration testing, and vulnerability assessments of the pk388 platform.
• Two-factor authentication options for player account access.
• Continuous monitoring for suspicious login activity and account anomalies.
• Staff training on data protection and information security best practices.

§ 10 Cookies & Tracking Technologies

The pk388 platform uses cookies and similar tracking technologies to improve your browsing experience, maintain session state, and gather analytics data. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session cookies that maintain your login state and security tokens. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, game preferences, and display options to provide a more personalised experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and interact with the pk388 platform, helping us identify areas for improvement. These are only set with your consent.
• Security Cookies: Used to identify and prevent fraudulent activity, detect bot traffic, and protect account security.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use the pk388 platform. For analytics and non-essential cookies, you may withdraw consent at any time.

§ 11 Marketing Communications

pk388 may send you marketing communications about promotions, bonuses, new game launches, and PSL cricket betting offers where you have provided your explicit consent to receive such communications at the time of registration or subsequently through your account preferences.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link included in any marketing email sent by pk388.
• Updating your communication preferences within your pk388 account settings.
• Contacting pk388 customer support and requesting removal from all marketing lists.

Opting out of marketing communications will not affect the delivery of transactional communications related to your account, such as deposit confirmations, withdrawal notifications, and security alerts, which will continue to be sent as necessary for account management.

§ 12 Protection of Minors

The pk388 platform is strictly intended for adults aged 21 years and above. pk388 does not knowingly collect or process personal data from individuals under the age of 21. Age verification is a mandatory step in the pk388 KYC process and is enforced before any real-money wagering is permitted.

If pk388 becomes aware that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to suspend the associated account, void any transactions, and securely delete the relevant data in accordance with our retention policy.

§ 13 Your Data Rights

Subject to applicable law and certain limited exceptions, you have the following rights in respect of your personal data held by pk388:

• Right of Access: You have the right to request a copy of the personal data pk388 holds about you. We will respond to verified access requests within 30 days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data. For basic account details, you may update these directly within your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations (such as the five-year AML record-keeping requirement).
• Right to Restriction: You may request that pk388 restrict the processing of your personal data in certain circumstances, such as while a data accuracy dispute is being resolved.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on pk388's legitimate interests. pk388 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact pk388 customer support in writing at the email address listed in Section 17. We may need to verify your identity before processing a data rights request. We will not charge a fee for standard requests but reserve the right to charge a reasonable administrative fee for requests that are manifestly unfounded or excessive.

§ 14 International Data Transfers

As an internationally licensed gaming platform, pk388 may process or store your personal data on servers located outside of Pakistan. Where personal data is transferred internationally, pk388 takes appropriate steps to ensure that such transfers are conducted in accordance with applicable data protection standards.

These steps may include:

• Transferring data only to countries or organisations that maintain an adequate level of data protection as recognised by the relevant regulatory framework.
• Implementing contractual data protection clauses with international service providers that bind them to appropriate data handling standards.
• Ensuring that all third-party processors who receive internationally transferred data are subject to equivalent security and confidentiality obligations.

§ 15 Third-Party Links

The pk388 platform may contain references to third-party services such as payment processors or game studios. Where interactions with such third parties involve navigating away from the pk388 platform, please be aware that pk388's Privacy Policy does not apply to those external services. pk388 is not responsible for the privacy practices of third-party services and encourages you to review their respective privacy policies before providing any personal data.

§ 16 Changes to This Privacy Policy

pk388 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform functionality. When material changes are made, pk388 will notify registered players via email or a prominent notice on the platform prior to the changes taking effect.

The Effective Date at the top of this document indicates when the current version was last updated. We encourage you to review this Privacy Policy periodically. Your continued use of the pk388 platform following any update constitutes your acknowledgement of the revised Policy.

§ 17 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pk388 handles your personal data, please contact our Data Protection team through the following channel:

• Email: [email protected]
• Subject Line: Please include "Privacy Request" or "Data Protection" in your subject line to ensure prompt routing to the correct team.
• Response Time: Within 48 hours for general privacy enquiries; within 30 days for formal data subject access requests.
• Support Hours: 24 hours a day, 7 days a week.

All data rights requests must be submitted in writing via email. pk388 may request proof of identity before processing any request to ensure your data is not disclosed to an unauthorised third party.