Privacy Policy — pk388 Platform
Your privacy matters to us. This Policy explains exactly what personal data pk388 collects, why we collect it, how it is used, who it may be shared with, and what rights you have over your own information.
Introduction
This Privacy Policy ("Policy") describes how pk388 ("pk388", "we", "us", "our") collects, processes, stores and discloses personal data obtained from users ("you", "your", "User") who access or interact with the online gaming platform operated at https://pk388.cam and any associated subdomains, mobile applications or digital properties (collectively, the "Platform").
pk388 operates as an English-language online gaming information and gaming services platform serving users primarily located in Pakistan. We are committed to handling personal data with transparency, integrity and appropriate security measures, and to respecting the privacy rights of all users regardless of their location.
This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy. By using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.
If you do not agree with any part of this Privacy Policy, please discontinue use of the Platform immediately and contact us to request deletion of any personal data we may hold about you.
Definitions
The following defined terms apply throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, location data, online identifiers and factors specific to that person's identity. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data — in this case, pk388. |
| "Data Processor" | Any third party that processes personal data on behalf of pk388 under a contractual arrangement. |
| "KYC Data" | Know Your Customer documentation and information collected for identity verification purposes, including government-issued identification such as CNIC or passport. |
| "Cookie" | A small text file stored on a User's device by the Platform to enable functionality, session management and analytics. |
| "Consent" | Freely given, specific, informed and unambiguous indication of a User's agreement to the processing of their personal data for a stated purpose. |
Data Controller
pk388 acts as the Data Controller in respect of personal data collected through the Platform. As Data Controller, pk388 is responsible for determining how and why your personal data is processed and for ensuring appropriate safeguards are in place.
Where pk388 engages third-party service providers (such as payment processors, identity verification services or cloud infrastructure providers) to assist in delivering Platform services, those providers act as Data Processors under contractual arrangements that require them to process your data only as instructed by pk388 and to maintain appropriate security standards.
For all privacy-related enquiries, please contact us at the details provided in Section 15 of this Policy.
Personal Data We Collect
pk388 collects personal data from Users through several channels. The categories of data collected, and the context in which they are collected, are set out below.
4.1 Data You Provide Directly
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, CNIC or passport number | Account registration and KYC verification |
| Contact Data | Email address, mobile number, city of residence (e.g. Karachi, Lahore, Islamabad) | Account registration and support communications |
| Financial Data | Payment method details, transaction history, deposit and withdrawal records in PKR or crypto equivalent | Deposit and withdrawal processing |
| KYC Documents | Scanned copies of CNIC, passport, utility bills or bank statements | Identity and address verification |
| Support Data | Content of support messages, complaints and feedback | Customer support interactions |
4.2 Data Collected Automatically
| Category | Examples |
|---|---|
| Device & Technical Data | IP address, browser type and version, operating system, device identifiers |
| Usage Data | Pages visited, features accessed, session duration, click patterns, game play history |
| Location Data | General geographic location derived from IP address (e.g. country, city level) |
| Cookie Data | Session tokens, preference settings, analytics identifiers — see Section 7 |
KYC documents — including CNIC scans and passport copies — are treated as highly sensitive data. They are stored with enhanced security controls, accessed only by authorised personnel for verification purposes, and are not shared with any third party except as required by applicable law or regulation.
Legal Basis for Processing
pk388 processes personal data only where a valid legal basis exists. The primary legal bases on which we rely are:
- Contractual Necessity: Processing that is necessary to perform the contract between pk388 and you (e.g., account management, payment processing, KYC verification).
- Legal Obligation: Processing required to comply with applicable legal or regulatory obligations (e.g., anti-money laundering checks, fraud prevention, record-keeping requirements).
- Legitimate Interests: Processing that serves pk388's legitimate business interests, where those interests are not overridden by your privacy rights (e.g., security monitoring, fraud detection, Platform analytics, responsible gambling monitoring).
- Consent: Processing for purposes such as direct marketing communications, where we rely on your freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
How We Use Your Data
pk388 uses personal data collected from Users for the following purposes:
- Account Management: Creating, maintaining and administering your Account, including processing deposits and withdrawals in PKR and other accepted currencies.
- Identity Verification (KYC): Verifying your identity, age and eligibility in compliance with applicable regulations and Platform policies.
- Payment Processing: Facilitating deposits and withdrawals through payment methods available in the Platform's cashier, which may include references to Easypaisa, JazzCash, Raast and major bank transfers (HBL, UBL, Meezan Bank, Bank Alfalah) for contextual purposes. Processing is handled by authorised payment processors, not directly by these providers.
- Fraud Prevention & Security: Detecting, investigating and preventing fraudulent transactions, unauthorised account access, money laundering and other unlawful activity.
- Responsible Gambling: Monitoring gameplay patterns for indicators of potentially harmful gambling behaviour; facilitating deposit limits, loss limits, session controls and self-exclusion requests.
- Customer Support: Responding to your enquiries, complaints and support requests.
- Legal Compliance: Meeting obligations under applicable laws and responding to lawful requests from regulatory or law enforcement authorities.
- Platform Improvement: Analysing aggregate usage data to improve Platform functionality, content and user experience.
- Marketing Communications: Sending promotional information about offers and Platform updates, only where you have provided consent or where otherwise permitted by law. You may opt out at any time.
Cookies & Tracking Technologies
pk388 uses cookies and similar tracking technologies to enable core Platform functionality, maintain session security and collect aggregate analytics data. The types of cookies used are:
- Strictly Necessary Cookies: Required for the Platform to function. These cannot be disabled without breaking core features such as login sessions and account security.
- Functional Cookies: Remember your preferences (e.g., language, display settings) to improve your experience across sessions.
- Analytics Cookies: Collect aggregate, anonymised information about how Users interact with the Platform. This data helps us understand usage patterns and improve content and functionality.
- Security Cookies: Used to detect and prevent fraudulent or unauthorised activity, including session hijacking.
pk388 does not use third-party advertising or retargeting cookies that share your personal data with advertisers. You may manage cookie preferences through your browser settings; note that disabling strictly necessary cookies may impair Platform functionality.
Third-Party Data Sharing
pk388 does not sell, rent or trade your personal data to third parties for their own marketing purposes. We may share your personal data in the following limited circumstances:
- Service Providers (Data Processors): Third-party providers engaged by pk388 to deliver Platform services, including payment processors, KYC/identity verification services, cloud hosting providers, customer support platforms and security services. All such providers are contractually bound to process data only as instructed by pk388.
- Legal and Regulatory Disclosure: Where required by applicable law, court order or lawful request from a competent regulatory or law enforcement authority, pk388 may be required to disclose personal data. We will endeavour to notify you of such requests where legally permitted to do so.
- Anti-Money Laundering & Fraud Prevention: Personal data may be shared with fraud prevention agencies, financial intelligence units or AML compliance services as required by applicable law.
- Business Transfers: In the event of a merger, acquisition, restructuring or sale of all or part of pk388's business, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.
Payment method names referenced on this Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are cited as familiar Pakistani payment services for contextual purposes only. pk388 does not transfer your personal data to these providers unless you actively use them for a transaction and they are an active payment processor on the Platform.
International Data Transfers
pk388 operates internationally and may transfer personal data to servers or service providers located outside Pakistan. Where such transfers occur, pk388 ensures that appropriate safeguards are in place, which may include:
- Standard contractual clauses approved by relevant data protection authorities.
- Transfers to jurisdictions recognised as providing an adequate level of data protection.
- Binding corporate rules or other appropriate transfer mechanisms as applicable.
By using the Platform, you acknowledge that your personal data may be transferred to, stored and processed in countries outside Pakistan. Where such transfers occur, pk388 takes commercially reasonable steps to ensure your data receives an equivalent level of protection to that described in this Policy.
Data Retention
pk388 retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law. Specific retention principles include:
- Active Account Data: Retained for the duration of the account relationship and for a reasonable period thereafter to facilitate account reactivation requests, resolve disputes and comply with legal obligations.
- KYC & Identity Documents: Retained for the period required by applicable anti-money laundering, gambling regulation and record-keeping laws, which may extend to five (5) years or more following account closure.
- Transaction Records: Retained for the period required by applicable financial and regulatory laws.
- Marketing Data: Retained until you withdraw consent or opt out, after which it is deleted or anonymised.
- Support Communications: Retained for a reasonable period to facilitate follow-up, dispute resolution and service quality review.
When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with any individual.
Data Security
pk388 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include, but are not limited to:
- Encryption of data in transit using TLS/SSL protocols.
- Encryption of sensitive data at rest, including financial and KYC records.
- Access controls ensuring that personal data is accessible only to authorised personnel on a need-to-know basis.
- Regular security reviews and vulnerability assessments of Platform infrastructure.
- Incident response procedures to detect, contain and report data breaches in accordance with applicable obligations.
Whilst pk388 takes commercially reasonable precautions to protect your personal data, no internet-based service can guarantee absolute security. Users are also responsible for maintaining the confidentiality of their account credentials and for promptly reporting any suspected security breach to our support team.
If you believe your pk388 account has been compromised or that your personal data has been accessed without authorisation, contact us immediately at [email protected]. Do not include your password in any support communication.
Your Data Rights
Subject to applicable law, you have the following rights in relation to the personal data pk388 holds about you. To exercise any of these rights, please contact us at [email protected] with your request and sufficient identifying information to allow us to locate your records.
Right of Access
Request a copy of the personal data we hold about you and information about how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data we hold about you.
Right to Erasure
Request deletion of your personal data where it is no longer necessary, subject to legal retention obligations.
Right to Restriction
Request that we restrict processing of your data in certain circumstances, such as when accuracy is contested.
Right to Portability
Receive a copy of your personal data in a structured, machine-readable format where processing is based on consent or contract.
Right to Object
Object to processing based on legitimate interests, including profiling and direct marketing.
Withdraw Consent
Withdraw consent to any processing based on consent at any time without affecting prior lawful processing.
Right to Complain
Lodge a complaint with the relevant data protection supervisory authority in your jurisdiction if you believe your rights have been infringed.
pk388 will acknowledge data rights requests within five (5) business days and aims to fulfil them within thirty (30) days, subject to complexity. We may require proof of identity before processing your request.
Minors — Under-18 Policy
The Platform is strictly for adults aged 18 years or older (or the higher minimum age required by the applicable operator licence jurisdiction). pk388 does not knowingly collect personal data from individuals under the age of 18.
If pk388 becomes aware that personal data has been collected from a minor without verified parental consent, we will take immediate steps to delete that data and close the associated Account. Where applicable, we may be required to report such incidents to relevant authorities.
If you believe that a minor has provided personal data to pk388, please notify us immediately at [email protected].
Adults 18+ only, or the higher minimum required by the operator/licence jurisdiction. This is not merely a data privacy rule — it is a fundamental responsible gambling obligation. Gambling is not appropriate for minors, and access by those under the applicable minimum age is strictly prohibited regardless of local law.
Changes to This Privacy Policy
pk388 reserves the right to update or amend this Privacy Policy at any time. Any material changes — those that substantively affect your rights or our data processing practices — will be communicated to registered Account Holders via the email address associated with their Account and/or by prominent notice on the Platform prior to the changes taking effect.
The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you must stop using the Platform and may request deletion of your personal data by contacting us.
We recommend reviewing this Policy periodically, particularly if you are a registered Account Holder.
Contact Us
For any questions, concerns or requests relating to this Privacy Policy or the personal data pk388 holds about you, please contact our privacy team using the details below. All contact details are provided as plain text only.
Six Core Privacy Commitments
These principles guide every data decision we make at pk388 — from account registration through to account closure.
No Data Sales
pk388 never sells, rents or trades your personal data to third parties for their own commercial or marketing purposes. Your data is used only to provide and improve the Platform service.
You Are in Control
You have clear rights to access, correct, delete, restrict or port your personal data. Marketing consent can be withdrawn at any time. Data rights requests are handled within 30 days.
KYC Data Protected
Identity documents including CNIC and passport copies are treated as highly sensitive, stored with enhanced controls and accessed only by authorised personnel for verification.
Security Standards
TLS/SSL encryption in transit, encryption at rest for sensitive records, strict access controls and regular security assessments keep your data protected against unauthorised access.
Defined Retention Periods
Data is kept only as long as legally required or operationally necessary. When no longer needed, it is securely deleted or anonymised — not held indefinitely.
Transparent Processing
We explain clearly what data we collect, why we collect it, who sees it and how long we keep it. No hidden processing, no unexplained sharing — this Policy covers it all.
Read Our Related Policies
This Privacy Policy works alongside our Terms & Conditions and Responsible Gambling page. Together, they set out the full framework governing your use of pk388.