pk368 Privacy Policy

1. Who We Are

pk368 ("we", "us", "our") is an online casino and sports betting platform operating at pk368.club, serving players across Pakistan including Karachi, Lahore, Islamabad, Faisalabad, and beyond. We are operated by a company incorporated under international jurisdiction and licensed under an international gaming licence to provide real-money gaming services.

For the purposes of this Privacy Policy, pk368 acts as the data controller — meaning we determine the purposes and means by which your personal data is processed. If you have any questions about this policy or how your data is handled, please reach out to us at the contact details provided in Section 13.

2. Data We Collect

When you register, use, or interact with pk368, we may collect the following categories of personal data:

• Identity Data: Full name, date of birth, CNIC number (for KYC verification), username, and profile photograph where applicable.
• Contact Data: Email address, mobile phone number, and residential address (city, province, country).
• Financial Data: Bank account details, JazzCash wallet number, EasyPaisa account number, UBL or HBL account reference, transaction history, deposit and withdrawal records.
• Technical Data: IP address, browser type and version, device identifiers, operating system, time zone setting, and access logs.
• Usage Data: Pages visited, games played, betting history, session duration, click-through data, and feature interactions within the pk368 platform.
• Communications Data: Records of any correspondence you send to our support team, including live chat transcripts and email exchanges.
• Marketing Preferences: Your stated preferences for receiving promotional communications from pk368, including opt-in or opt-out records.

We collect this data directly from you at registration, through your ongoing use of the platform, from payment processors during transactions, and through automated technologies such as cookies as described in Section 6.

3. How We Use Your Data

pk368 uses your personal data strictly for the following purposes:

• Account Management: To create, maintain, and administer your player account, verify your identity, and ensure account security.
• Service Delivery: To process your bets, deposits, and withdrawals; to provide access to cricket betting, live casino games, slots, and other platform features.
• KYC & AML Compliance: To fulfil our obligations under anti-money laundering (AML) regulations and Know Your Customer (KYC) requirements as mandated by our international gaming licence.
• Customer Support: To respond to your queries, resolve disputes, and provide technical assistance via our 24/7 support channels.
• Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised access, and other illegal behaviour on the platform.
• Responsible Gaming: To monitor gameplay patterns and identify potential signs of problem gambling, enabling us to intervene appropriately and offer support tools.
• Marketing Communications: To send you promotional offers, bonus notifications, and relevant updates — but only where you have given explicit consent or where a legitimate interest applies.
• Platform Improvement: To analyse aggregate usage patterns and improve our website, games, and overall user experience for players across Pakistan.
• Legal Obligations: To comply with applicable laws, regulatory requirements, court orders, and requests from authorised government authorities.

4. Legal Basis for Processing

Every processing activity at pk368 is grounded in one of the following recognised legal bases:

• Contract Performance: Processing necessary to fulfil our contractual obligations to you as a registered player, including account management and payment processing.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, AML, and gaming licence conditions.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, where our interests do not override your fundamental rights and freedoms.
• Consent: Where you have given clear, informed, and freely given consent — for example, opting into marketing communications or enabling certain optional cookies.

You have the right to withdraw consent at any time where consent is the legal basis for processing. Withdrawal does not affect the lawfulness of any processing carried out before withdrawal.

5. Data Sharing & Disclosure

pk368 does not sell or rent your personal data to any third party. We may share your data only in the following carefully controlled circumstances:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other regulated financial institutions, solely to process deposits and withdrawals.
• Identity Verification Partners: Third-party KYC and AML service providers engaged to verify the identity of players and screen against sanctions and watchlists.
• Technology & Hosting Partners: Cloud infrastructure and data hosting providers who process data on our behalf under strict data processing agreements.
• Gaming Software Providers: Game studios and platform suppliers who need limited technical data to deliver specific games or features.
• Regulatory & Law Enforcement Authorities: Where required by law, court order, or at the direction of our licensing authority or competent government body.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity subject to equivalent privacy protections.

All third parties who receive personal data from pk368 are contractually required to handle it securely and to use it only for the specific purposes for which it was shared.

6. Cookies & Tracking Technologies

pk368 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognise you, remember your preferences, and analyse how you use our site.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These cannot be disabled as they enable core features like secure login sessions and bet placement.
• Performance & Analytics Cookies: Help us understand how players interact with pk368 by collecting anonymised usage statistics, allowing us to improve page performance and navigation.
• Functional Cookies: Remember your preferences such as language settings, preferred sports categories, and display options.
• Marketing Cookies: Used only where you have consented, to deliver relevant promotional content and measure the effectiveness of our campaigns.

7. Data Retention

pk368 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by law and our regulatory obligations. Our standard retention periods are as follows:

• Account Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, as required by AML regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC Documents: Retained for a minimum of five (5) years from the end of the business relationship.
• Support Communications: Retained for up to three (3) years from the date of last contact.
• Marketing Data: Retained until you withdraw consent or opt out, after which it is deleted within 30 days.

When data is no longer required, it is securely deleted or anonymised in line with our internal data destruction procedures.

8. Security Measures

The security of your personal data is a matter we take with the utmost seriousness at pk368. We have implemented a comprehensive set of technical and organisational measures to protect your information against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS (Transport Layer Security) encryption for all data in transit between your browser and our servers.
• AES-256 encryption for sensitive data stored at rest, including financial information and identity documents.
• Two-factor authentication (2FA) options available to all players for additional account security.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Strict internal access controls ensuring that only authorised personnel can access personal data on a need-to-know basis.
• Comprehensive staff training on data protection obligations and security best practices.

While we apply rigorous safeguards, no method of electronic transmission or storage is completely impenetrable. We encourage all pk368 players to use strong, unique passwords and to enable 2FA on their accounts.

9. Your Rights

As a player on pk368, you hold a number of important rights in relation to your personal data. You may exercise any of these rights by contacting our support team at the details provided in Section 13:

• Right of Access: Request a copy of all personal data we hold about you.
• Right to Rectification: Request correction of any inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements.
• Right to Restrict Processing: Request that we limit the processing of your data in certain circumstances.
• Right to Data Portability: Request a copy of your data in a structured, machine-readable format where technically feasible.
• Right to Object: Object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Withdraw any previously given consent at any time without affecting the lawfulness of prior processing.

We will respond to all verified requests within 30 calendar days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you promptly. We do not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive.

10. Children & Minors

pk368 is strictly an adults-only platform. Our services are available exclusively to individuals who are 21 years of age or older. We do not knowingly collect or process personal data belonging to anyone under the age of 21.

During the registration and KYC process, we require players to confirm their age and provide government-issued identity documentation to verify this. If we discover or have reasonable grounds to believe that a user is under 21 years of age, we will immediately suspend the account, withhold any associated funds pending investigation, and delete all data associated with the minor in accordance with applicable law.

If you are a parent or guardian and believe your child has registered on pk368, please contact us immediately at [email protected] so we can take prompt action.

11. International Data Transfers

pk368 operates internationally and your data may be transferred to, stored, and processed in countries outside Pakistan. Where such transfers occur, we ensure that appropriate safeguards are in place, including:

• Contractual clauses requiring third-party recipients to maintain data protection standards equivalent to those described in this policy.
• Transfers only to jurisdictions that provide an adequate level of data protection as recognised under international standards.
• Binding data processing agreements with all service providers handling your data outside Pakistan.

By using pk368's platform and services, you acknowledge and consent to such international transfers where necessary for the delivery of our services.

12. Changes to This Policy

pk368 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal obligations, or platform features. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify all registered players via email and/or an in-platform notification at least 14 days before the updated policy takes effect.
• Where required by law, seek fresh consent from affected players.

We encourage you to review this Privacy Policy periodically. Your continued use of pk368 after any changes have taken effect constitutes your acceptance of the revised policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the pk368 Data Protection team:

• Email: [email protected]
• Support Hours: 24/7 in English and Urdu
• Response Time: We aim to acknowledge all data-related enquiries within 2 business days and resolve them within 30 calendar days.

If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority or our licensing body under the applicable international gaming regulatory framework.