pk388 Privacy Policy

1Introduction

pk388 ("pk388", "we", "us", "our") operates the online gaming platform accessible at pk388.net and is committed to protecting the privacy and personal data of all users ("you", "Player", "User") who access or use our services.

This Privacy Policy is incorporated into and forms part of the pk388 Terms & Conditions. By registering an account on pk388, depositing funds, placing bets, or otherwise accessing any pk388 service, you confirm that you have read and understood this Privacy Policy and consent to the data processing practices described herein.

This Policy applies to all personal data collected through pk388.net, including data collected via account registration, KYC (Know Your Customer) verification, payment transactions, customer support interactions, and standard website analytics. It applies to all players in Pakistan, including those based in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, and all other locations where Pakistani citizens access the platform.

2Data We Collect

pk388 collects personal data in the following categories:

2.1 Registration Data

• Full name as it appears on your CNIC (Computerized National Identity Card);
• Date of birth (to verify you are 18 years of age or older);
• Pakistani mobile number (used as your primary account identifier and for two-factor authentication);
• Password (stored in encrypted, hashed form — never in plain text);
• City of residence (e.g., Karachi, Lahore, Islamabad).

2.2 KYC & Identity Verification Data

• CNIC number and scanned copies (front and back) as issued by NADRA;
• Selfie or facial photograph where requested for enhanced verification;
• Proof of payment method ownership (e.g., Easypaisa or JazzCash account screenshot, bank statement).

2.3 Financial Transaction Data

• Deposit and withdrawal amounts, dates, and associated payment method references;
• Partial payment account identifiers (e.g., last four digits of a card, or partial mobile wallet number) — full payment credentials are never stored on pk388 servers;
• Transaction history and account balance records.

2.4 Gaming Activity Data

• Bet and wager records including amounts, markets, outcomes, and timestamps;
• Game session data including session duration, games played, and results;
• Responsible gaming tool usage (deposit limit settings, self-exclusion requests).

2.5 Technical & Device Data

• IP address and approximate geographic location derived therefrom;
• Device type, operating system, browser type and version;
• Session identifiers, login timestamps, and access logs.

2.6 Communication Data

• Customer support interactions including live chat transcripts and any files you share with the support team;
• Responses to any surveys or feedback requests (participation is always voluntary).

3How We Use Your Data

pk388 uses the personal data we collect for the following purposes:

• Account management: To create, maintain, and administer your pk388 account, including processing logins and managing your balance;
• Identity verification and KYC: To verify your identity, confirm you are 18 or older, and comply with anti-money laundering (AML) obligations;
• Payment processing: To process deposits and withdrawals via Easypaisa, JazzCash, HBL, UBL, Meezan Bank, Bank Alfalah, Visa, Mastercard, UnionPay, and USDT TRC20;
• Service delivery: To provide access to and operation of all pk388 gaming products including cricket betting, slots, live casino, and category games;
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, account abuse, and violations of pk388's Terms & Conditions;
• Responsible gaming: To monitor gaming patterns that may indicate problem gambling and to administer any responsible gaming tools you have activated;
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance;
• Legal compliance: To comply with applicable legal obligations, respond to regulatory requests, and cooperate with lawful authorities where required;
• Platform improvement: To analyse aggregated, anonymised usage patterns for the purpose of improving pk388's services, interface design, and product offerings.

pk388 does not use personal data for automated decision-making that produces legal or similarly significant effects on players, except where necessary for fraud detection and AML screening — in which case human review is available upon request.

4Legal Basis for Processing

pk388 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the pk388 Terms & Conditions and to provide the services you have registered for;
• Legal obligation: Processing required to comply with applicable laws and regulations including AML, KYC, and record-keeping requirements;
• Legitimate interests: Processing carried out for fraud prevention, security, platform analytics, and responsible gaming monitoring, where these interests are not overridden by your privacy rights;
• Consent: Where you have given explicit consent for a specific processing activity, such as receiving promotional communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

5Data Sharing & Third-Party Disclosure

pk388 does not sell, rent, or trade your personal data to third parties for marketing purposes. We share personal data only in the following circumstances:

• Payment processors: Personal and transaction data is shared with payment service providers (including Easypaisa, JazzCash, and banking partners) solely as necessary to process your deposits and withdrawals;
• Identity verification services: KYC data may be processed by third-party identity verification providers operating under confidentiality obligations;
• Gaming content providers: Game providers may receive session and gameplay data necessary for game delivery, fairness verification, and jackpot administration;
• Legal and regulatory authorities: pk388 will disclose personal data to law enforcement or regulatory bodies where required to do so by law, court order, or regulatory direction;
• Business transfers: In the event of a merger, acquisition, or sale of assets, player data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

All third parties to whom pk388 discloses personal data are required to process that data in accordance with applicable data protection standards and solely for the purposes for which it was shared.

6Cookies & Tracking Technologies

pk388 uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies used are:

• Strictly necessary cookies: Essential for account login sessions, security tokens, and basic platform functionality. These cannot be disabled without impairing platform use;
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and session display options;
• Analytics cookies: Collect aggregated, anonymised data about how players navigate pk388, which pages are visited most frequently, and where users encounter errors — used solely for internal platform improvement;
• Security cookies: Used for fraud detection, device fingerprinting, and bot prevention.

pk388 does not use third-party advertising cookies or behavioural tracking cookies that profile users across external websites. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies will affect your ability to log in and use the platform.

7Data Retention

pk388 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following principles:

• Active accounts: Personal data is retained for the duration of your account's existence on pk388;
• Closed accounts: Following account closure, pk388 retains transaction records, KYC documentation, and gaming history for a minimum period of five (5) years to comply with AML record-keeping requirements and to resolve any post-closure disputes;
• Self-excluded accounts: Identity data associated with self-excluded accounts is retained for the duration of the exclusion period to prevent re-registration in violation of the exclusion;
• Support records: Customer support communications are retained for a period of two (2) years from the date of the interaction.

After the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

8Data Security

pk388 implements technical and organisational security measures appropriate to the risk profile of the data processed. These measures include:

• TLS/SSL encryption for all data transmitted between your device and pk388 servers;
• Bcrypt or equivalent hashing for all stored passwords — plaintext passwords are never stored;
• Access controls limiting internal staff access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing of the pk388 platform infrastructure;
• Two-factor authentication available to all players for account login;
• Automated fraud and anomaly detection systems monitoring account activity continuously.

Notwithstanding these measures, no internet-based system can guarantee absolute security. pk388 will notify affected users and relevant authorities in the event of a personal data breach that poses a risk to user rights and freedoms, in accordance with applicable notification requirements.

9Your Data Rights

As a pk388 player, you have the following rights in relation to your personal data, subject to applicable legal limitations:

• Right of access: Request a copy of the personal data pk388 holds about you;
• Right to rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to restriction: Request that pk388 restricts processing of your data in specific circumstances;
• Right to data portability: Receive a copy of data you have provided to pk388 in a structured, machine-readable format;
• Right to object: Object to processing based on legitimate interests, including profiling for responsible gaming purposes;
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact pk388 customer support via the live chat available on site. We will respond to all verified requests within a reasonable timeframe. We may require identity verification before processing your request to protect against unauthorised data access.

10Children's Privacy

pk388 services are strictly for individuals aged 18 years and above. pk388 does not knowingly collect personal data from persons under the age of 18. If we become aware that a registered account belongs to an individual under 18, the account will be immediately suspended, all balances forfeited, and all associated personal data deleted except where retention is required by law.

If you are a parent or guardian and believe that a minor in your care has created a pk388 account, please contact our support team immediately via live chat so the matter can be investigated and resolved without delay.

11Cross-Border Data Transfers

pk388 may transfer personal data to servers or service providers located outside Pakistan in the course of operating its platform. Where such transfers occur, pk388 ensures that appropriate safeguards are in place to protect the data, including contractual data processing agreements with third-party providers that meet recognised data protection standards.

By using pk388, you consent to your personal data being transferred to and processed in jurisdictions outside Pakistan where this is necessary for service delivery, subject to the protections described in this Policy.

12Changes to This Privacy Policy

pk388 reserves the right to update this Privacy Policy at any time. Material changes — particularly changes that expand the categories of data collected or the purposes for which data is processed — will be communicated to registered players via their registered mobile number or via a prominent notice on the platform, with reasonable advance notice before the changes take effect.

The date of the most recent revision is displayed at the top of this document. Continued use of pk388 after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Policy periodically.

13Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how pk388 handles your personal data, please contact our support team:

• Live Chat: Available directly on pk388.net — response within 2 minutes, 24 hours a day, 7 days a week;
• Email: [email protected] (plain text — not a clickable link).

For data subject rights requests specifically, please identify your request as a "Data Rights Request" when contacting support so it can be routed to the appropriate team member without delay.