pk358 Privacy Policy

1 Introduction

pk358 ("we", "us", "our") is committed to protecting the privacy and personal data of every player who uses our online casino and sports betting platform. This Privacy Policy describes, in full, our practices with respect to the collection, use, storage, sharing, and protection of personal data relating to registered players and platform visitors.

pk358 operates under international gaming regulatory oversight and is required, as a condition of its operating authorisation, to maintain robust data protection practices. This Policy is consistent with those requirements and reflects our genuine commitment to handling your information with care, transparency, and respect.

This Policy should be read alongside the pk358 Terms & Conditions, which govern the overall relationship between pk358 and its players. In the event of any conflict between this Policy and the Terms & Conditions regarding data-related matters, this Privacy Policy shall prevail.

If you have any questions about this Policy or how pk358 handles your data, you are welcome to contact our support team at any time via live chat on the Platform or by email at [email protected] (plain text — not a clickable link).

2 Personal Data We Collect

pk358 collects personal data through several channels — directly from you when you register and use the Platform, automatically through your use of the Platform, and in certain cases from third-party verification and payment service providers. The categories of personal data we collect are set out below.

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (required to verify the 21+ age eligibility requirement).
• Residential address, including city (e.g., Karachi, Lahore, Islamabad, Faisalabad) and postcode.
• Email address used as your account identifier and primary communication channel.
• Mobile phone number for account verification and security alerts.
• CNIC (Computerised National Identity Card) number and supporting document images, collected during KYC verification.

2.2 Financial & Transaction Data

• Payment method details, including JazzCash wallet number, EasyPaisa account number, HBL, UBL, or Meezan Bank account details used for deposits and withdrawals.
• Transaction history — deposit amounts, withdrawal amounts, dates, and processing status — denominated in Pakistani Rupees (PKR).
• Wagering history, including game type, bet amount, outcome, and timestamps.

2.3 Technical & Usage Data

• IP address and approximate geographic location derived from IP data.
• Device type, operating system, and browser type and version.
• Session logs, including login timestamps, pages visited, and game sessions initiated.
• Cookie identifiers and similar tracking technology data (see Section 6).

2.4 Communications Data

• Records of communications you initiate with pk358 support, including live chat transcripts and support email correspondence.
• Responses to voluntary surveys, feedback forms, or promotional participation.

3 How We Use Your Personal Data

pk358 uses your personal data for specific, documented purposes. We do not use your data for purposes incompatible with those listed below without obtaining your prior consent or establishing a separate lawful basis.

Where pk358 relies on your consent as the legal basis for processing — such as sending promotional emails or SMS notifications about PSL betting markets and casino bonuses — you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting support.

4 Legal Basis for Processing

pk358 processes personal data only where a valid legal basis exists. The primary legal bases we rely upon are as follows:

• Contractual Necessity: Processing required to fulfil our obligations to you as a registered pk358 player — including account creation, game access, and payment processing — is carried out on the basis that it is necessary to perform the contract between us.
• Legal Obligation: pk358 is required by its international gaming regulatory authorisation and applicable anti-money laundering regulations to collect and retain certain player data, including KYC documentation and transaction records. Processing for these purposes is legally mandated and cannot be refused.
• Legitimate Interest: pk358 may process certain data — such as fraud signals, platform usage analytics, and responsible gaming indicators — where it has a legitimate business or regulatory interest that is not overridden by your privacy rights.
• Consent: For optional data uses — such as marketing communications, third-party analytics cookies, and personalised promotional offers — pk358 will seek your explicit consent and will respect your right to withdraw it at any time without penalty.

5 Data Sharing & Disclosure

pk358 does not sell, rent, or disclose your personal data to unauthorised third parties. We may share data with the following categories of recipients, strictly on a need-to-know basis and only to the extent required for the stated purpose:

• KYC & Identity Verification Providers: Third-party identity verification services used to authenticate your CNIC, date of birth, and address information as part of the mandatory KYC process.
• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment infrastructure partners who process your deposits and withdrawals in PKR. These providers receive only the minimum data necessary to execute the transaction.
• Fraud Prevention & Security Services: Specialist third-party services that assist pk358 in detecting and preventing fraud, bonus abuse, and multi-accounting. Data shared is subject to strict contractual data processing agreements.
• Regulatory Authorities: pk358 may be required to disclose player data to gaming regulators, financial intelligence units, or law enforcement agencies in response to lawful requests, court orders, or as required by the terms of its operating licence.
• Game Software Providers: Game suppliers who provide the RNG-based casino titles and live dealer games available on the Platform may receive session-level technical data necessary to operate the game. These providers do not receive your identity or payment data.
• Professional Advisors: Legal, accounting, and auditing firms who advise pk358 may access personal data under strict confidentiality obligations where required for their professional services.

All third-party data processors engaged by pk358 are contractually required to process your personal data solely on pk358's documented instructions, to implement appropriate technical and organisational security measures, and to comply with applicable data protection obligations.

6 Cookies & Tracking Technologies

pk358 uses cookies and similar technologies to operate the Platform, remember your session, and — where you have consented — to analyse usage patterns that help us improve the player experience. The categories of cookies in use are as follows:

• Strictly Necessary Cookies: Required for core Platform functionality — including maintaining your logged-in session, remembering your language and currency preferences, and securing your account. These cookies cannot be disabled without preventing the Platform from functioning correctly.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the Platform. This helps pk358 identify performance issues and improve usability. These cookies are only placed with your consent.
• Functional Cookies: Remember your Platform preferences — such as game history display settings and responsible gaming configuration — to personalise your experience between sessions.
• Fraud Detection Cookies: Used as part of pk358's fraud prevention and multi-account detection systems. These are classified as strictly necessary for security purposes.

You may manage your cookie preferences at any time through your browser settings. Disabling strictly necessary cookies may impair or prevent access to the Platform. Disabling performance or functional cookies will not affect your ability to wager but may reduce the personalisation of your experience.

7 Data Retention

pk358 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with legal, regulatory, and contractual obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your registered account relationship with pk358, plus a mandatory post-closure retention period required under our regulatory authorisation (typically five to seven years).
• KYC & Identity Documents: Retained for a minimum of five years following account closure, as required by applicable anti-money laundering regulations.
• Transaction Records: All deposit, withdrawal, and wagering records are retained for a minimum of five years from the date of the transaction for regulatory and financial audit purposes.
• Support Communications: Live chat transcripts and email correspondence are retained for up to three years from the date of the communication, or longer where required in connection with an ongoing dispute or regulatory investigation.
• Technical & Usage Logs: Session logs and IP address records are retained for up to 12 months for fraud detection and platform security purposes, then deleted or anonymised.
• Marketing Consent Records: Records of your marketing communication consent or opt-out are retained for the duration of your account relationship to allow us to honour your preferences.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with pk358's data destruction procedures.

8 Your Privacy Rights

As a pk358 player, you hold the following rights with respect to your personal data. These rights may be subject to limitations where overriding legal or regulatory obligations apply — for example, pk358 cannot delete transaction records that are required to be retained under anti-money laundering law.

• Right to Access: You may request a copy of all personal data pk358 holds about you. We will respond to verified access requests within 30 calendar days.
• Right to Rectification: If any personal data pk358 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor corrections such as address updates, this can be done directly in your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing was unlawful. This right does not apply where retention is required by law.
• Right to Restriction: You may request that pk358 restrict processing of your data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interest, including direct marketing. pk358 will cease processing for marketing purposes immediately upon receipt of a valid objection.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact the pk358 support team via live chat or at [email protected]. We may require you to verify your identity before processing a rights request. pk358 does not charge a fee for handling routine rights requests.

9 Children & Underage Players

The pk358 platform is strictly intended for adults aged 21 years and above. pk358 does not knowingly collect personal data from individuals under the age of 21, and the registration process requires applicants to confirm they meet this age requirement and to submit identity documents verifying their date of birth.

Where pk358 has reasonable grounds to believe that a registered player may be under the age of 21, the account will be immediately suspended pending age verification. If age verification confirms the player is underage, the account will be permanently closed, all Bonus Funds and wagering-derived winnings will be voided, and any deposited real-money balance will be returned to the funding source after due diligence.

pk358 encourages parents and guardians in Pakistan to use available parental control software to restrict access to online gambling platforms on shared devices. We are committed to keeping the pk358 platform inaccessible to anyone under the 21+ age threshold.

10 Security Measures

pk358 implements a multi-layered approach to data security designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our key security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the pk358 Platform is encrypted using industry-standard TLS protocols, ensuring that your personal data, login credentials, and financial information cannot be intercepted in transit.
• Access Controls: Access to personal data within pk358's internal systems is governed by role-based access controls. Only staff members with a documented operational need may access player data, and all such access is logged and auditable.
• Password Security: Player account passwords are stored using one-way cryptographic hashing. pk358 staff cannot view your password in plaintext and will never ask you to share it.
• Fraud Detection Systems: Real-time fraud monitoring systems analyse transaction patterns and login behaviour to detect and block suspicious activity before it affects your account.
• Incident Response: pk358 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players and relevant regulatory authorities within the timeframes required by our regulatory obligations.

While pk358 takes all reasonable technical and organisational precautions, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying pk358 immediately if you suspect any unauthorised access to your account.

11 Third-Party Services & Links

The pk358 Platform integrates third-party services — including game software providers, live dealer studios, and payment gateway partners — that are necessary to deliver the full range of casino and betting products available to Pakistani players. While pk358 carefully selects and contractually binds its third-party partners, each partner operates under its own privacy and data protection practices with respect to data it independently controls.

pk358 is not responsible for the privacy practices of third-party game software providers with respect to any data those providers independently collect through their own systems. Players are encouraged to review the privacy policies of third-party providers where applicable.

The pk358 Platform does not contain links to external third-party websites for advertising or affiliate purposes, and no third-party advertising networks are embedded in the Platform in a manner that would enable them to collect player personal data without pk358's knowledge and authorisation.

12 Changes to This Privacy Policy

pk358 reserves the right to update or modify this Privacy Policy at any time. Any material changes to this Policy — meaning changes that affect your rights or how your data is used in a significant way — will be communicated to registered players via the email address associated with their account, and a prominent notice will be displayed on the Platform for a reasonable period following the change.

The "Last Updated" date at the top of this Policy will be revised with each update. We encourage you to review this Policy periodically to stay informed about how pk358 protects your personal data.

Your continued use of the pk358 Platform following publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any update to this Policy, you should cease using the Platform and contact support to arrange account closure and any applicable data deletion requests.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pk358 handles your personal data, please get in touch with our support team through the following channels:

• Live Chat: Available 24/7 directly on the pk358 Platform. This is the fastest way to reach our team — average response time is under 5 minutes.
• Email: [email protected] — please include "Privacy Request" in your subject line for data-related enquiries. Responses within 24 hours for standard enquiries; formal data subject requests handled within 30 calendar days.

For formal data subject access requests, erasure requests, or complaints regarding data processing, we recommend submitting your request in writing via email so that we can maintain a documented record and ensure timely follow-up.