Privacy Policy

Last updated: June 2026

1. Introduction & Scope

This Privacy Policy governs the collection, processing and storage of personal data by pk388 ("we", "us", "our") in connection with the pk388 online gaming and sports betting platform accessible at pk388.app (the "Platform"). It applies to all registered players, prospective players who browse the Platform, and any individual who contacts pk388 through any channel.

By registering an account or using the pk388 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this policy, please discontinue use of the Platform.

2. Data Controller

pk388 is the data controller responsible for your personal data collected through the Platform. For all privacy-related enquiries, you may contact us at [email protected]. We endeavour to respond to all data-related requests within 30 calendar days.

3. Personal Data We Collect

pk388 collects the following categories of personal data from players:

3.1 Registration Data

• Full legal name (as it appears on your Pakistani CNIC or other government-issued ID).
• Date of birth (used to verify the 18+ age requirement).
• Registered email address.
• Pakistani mobile number (used for account verification, OTP delivery and two-factor authentication).
• Username and encrypted password.
• City of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad).

3.2 KYC Documentation

• CNIC number and scanned or photographed copies of your CNIC (front and back).
• Selfie photographs for facial verification, where requested.
• Proof of payment method ownership documents where the name does not match the registered CNIC.

3.3 Financial Data

• JazzCash or Easypaisa mobile wallet numbers linked to your account.
• Bank account details (HBL, UBL, Meezan Bank, Bank Alfalah or other Pakistani bank) where bank transfer is the chosen payment method.
• Transaction records: deposit amounts, withdrawal amounts, dates and processing status.

3.4 Usage & Technical Data

• IP address and approximate geolocation at the time of login and key account actions.
• Device type, operating system, browser version and screen resolution.
• Session duration, pages visited, games played, bets placed and betting history.
• Click patterns and navigation paths within the Platform.

3.5 Communications Data

• Content of support chat conversations, emails and any other communications You send to pk388.
• Records of notifications sent to you (SMS, email, in-Platform messages).

4. How We Collect Your Data

pk388 collects personal data through the following means:

• Direct submission: Information you provide when registering, completing KYC, making a deposit, contacting support or participating in a promotion.
• Automated collection: Technical and usage data collected automatically through cookies, server logs and analytics tools when you interact with the Platform.
• Third-party verification: Where applicable, identity and document verification services may cross-reference submitted information against authoritative databases.
• Payment processors: Transaction confirmation and status data returned by JazzCash, Easypaisa and bank partners when you initiate a deposit or withdrawal.

5. Legal Basis for Processing

pk388 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to provide the gaming services you have signed up for, including account management, bet placement, deposits and withdrawals.
• Legal obligation: Processing required to comply with AML regulations, KYC requirements and responsible gaming obligations under applicable international standards.
• Legitimate interests: Fraud prevention, security monitoring, platform improvement and responsible gaming enforcement.
• Consent: Where you have specifically consented to receive marketing communications or promotional offers from pk388. You may withdraw consent at any time by contacting [email protected].

6. How We Use Your Data

pk388 uses your personal data for the following purposes:

• Creating and managing your pk388 Account.
• Verifying your identity and age (18+ compliance) through the KYC process.
• Processing deposits and withdrawals in PKR through your selected payment channel.
• Providing customer support and responding to your enquiries.
• Sending account-related notifications, including login alerts, transaction confirmations and security warnings via SMS to your Pakistani mobile number or email.
• Detecting, investigating and preventing fraud, money laundering and other prohibited activities.
• Improving the Platform, personalising game recommendations and optimising the mobile experience.
• Complying with applicable AML, responsible gaming and data protection obligations.
• Sending marketing communications where you have given explicit consent.

7. KYC & Identity Verification Data

KYC documentation – including CNIC copies and selfie photographs – is processed exclusively for the purpose of verifying player identity and age. This data is:

• Stored on encrypted servers with access restricted to authorised pk388 compliance personnel.
• Not used for any purpose other than identity verification and AML compliance.
• Retained for the period required by applicable AML and gaming compliance obligations (typically five years following account closure).
• Never sold or disclosed to third parties except where required by law or by certified verification service providers operating under strict confidentiality obligations.

8. Payment Data

pk388 stores records of transaction amounts, dates and payment method identifiers (e.g., JazzCash wallet number) for audit, fraud prevention and dispute resolution purposes. Full bank account numbers are not stored beyond the minimum required for processing. Payment data is retained in accordance with financial recordkeeping requirements applicable to internationally operated gaming platforms.

pk388 does not store card numbers, CVV codes or other sensitive card data. pk388 does not currently accept credit or debit card payments; all transactions are processed through the PKR payment methods listed on the Platform.

9. Cookies & Tracking Technologies

The pk388 Platform uses cookies and similar technologies to operate correctly and improve your experience. The following categories of cookies are used:

• Essential cookies: Required for the Platform to function. These include session cookies that keep you logged in to pk388 during a session. They cannot be disabled without preventing Platform use.
• Analytics cookies: Used to understand how players interact with the Platform – which pages are visited most, how long sessions last, and where users encounter difficulties. This data is aggregated and anonymised.
• Preference cookies: Store your language and display preferences so you do not need to re-enter them each session.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent access to the core pk388 Platform.

10. Data Sharing & Third Parties

pk388 does not sell your personal data to third parties. We share your data only in the following limited circumstances:

• Payment processors: JazzCash, Easypaisa and Pakistani banking partners receive the minimum data required to process your transactions.
• Identity verification providers: Third-party KYC and AML screening services that process your CNIC and identity documents under strict contractual confidentiality obligations.
• Game providers: Licensed game studios (e.g., PG Soft, Pragmatic Play) may receive a pseudonymous player identifier for game session management. No personally identifiable information beyond a session token is shared.
• Legal and regulatory authorities: Where required by law, court order or a competent regulatory body, pk388 may disclose personal data. We will notify you of such disclosure where legally permitted to do so.

11. International Data Transfers

pk388 is an internationally operated platform. Your personal data may be stored and processed on servers located outside Pakistan. Where data is transferred internationally, pk388 takes appropriate measures to ensure an adequate level of protection, including contractual safeguards with processing partners. By using the pk388 Platform, you consent to such international data transfers.

12. Data Retention

pk388 retains personal data for the following periods:

• Account data: For the duration of your active Account, plus five years following Account closure.
• KYC documents: Five years from the date of submission or Account closure, whichever is later, in line with standard AML recordkeeping requirements.
• Transaction records: Five years from the date of each transaction.
• Support communications: Two years from the date of the last communication.
• Usage and technical data: 13 months on a rolling basis.

After the applicable retention period expires, personal data is securely deleted or anonymised.

13. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by pk388:

• Right of access: Request a copy of the personal data pk388 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to legal retention obligations.
• Right to restrict processing: Request that pk388 limits the processing of your data in certain circumstances.
• Right to data portability: Request a machine-readable copy of the data you have provided to pk388.
• Right to object: Object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact pk388 at [email protected] with your Account details and a description of your request. We will respond within 30 calendar days.

14. Data Security

pk388 implements technical and organisational security measures appropriate to the sensitivity of the data processed, including:

• 256-bit SSL/TLS encryption on all data transmitted between your browser and the pk388 Platform.
• Encrypted storage of passwords using industry-standard hashing algorithms.
• Access controls ensuring that KYC and financial data is accessible only to authorised compliance and finance personnel.
• Regular security assessments and penetration testing of the Platform.
• Two-factor authentication available to all pk388 players.

While pk388 takes all reasonable precautions, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your pk388 login credentials and notifying us immediately at [email protected] if you suspect unauthorised access to your Account.

15. Children & Minors

The pk388 Platform is strictly for adults aged 18 and over. pk388 does not knowingly collect personal data from individuals under the age of 18. If we become aware that a registered account belongs to an underage user, the account will be immediately suspended, all funds returned and all associated personal data deleted in accordance with our data retention obligations. If you believe an underage individual has registered on pk388, please notify us at [email protected] immediately.

16. Changes to This Policy

pk388 reserves the right to update this Privacy Policy at any time. Material changes will be communicated via a notice on the Platform or by email to the address registered on your pk388 Account. Continued use of the Platform following the effective date of any revision constitutes acceptance of the updated policy. We recommend reviewing this page periodically.

17. Contact & Complaints

For any questions, requests or complaints relating to this Privacy Policy or the processing of your personal data by pk388, please contact our support team. Our email is [email protected]. We aim to address all privacy enquiries within 30 calendar days.