pk399 Privacy Policy

1. Who We Are

pk399 operates the online casino and sports betting platform accessible at pk399.bio. References to "pk399", "we", "us", or "our" in this Privacy Policy refer to the pk399 platform and its operating entity, which holds an international gaming licence authorising the operation of online gaming services.

pk399 is the data controller in respect of personal data collected from players registered on the pk399 platform. This means pk399 determines the purposes for which, and the manner in which, any personal data relating to players is processed.

If you have any questions about how pk399 handles your personal data, you may contact our data protection team directly at the email address provided in Section 16 of this Policy.

2. Scope of This Policy

This Privacy Policy applies to all personal data collected by pk399 in connection with:

• Registration and operation of a pk399 player account.
• Deposits and withdrawals made via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK.
• Use of the pk399 website, games, sportsbook, and any associated features at pk399.bio.
• Communications between you and the pk399 support team via live chat or email.
• Participation in pk399 promotions, bonuses, and PSL cricket betting offers.

This Policy should be read alongside the pk399 Terms & Conditions, which govern your use of the platform generally, and the pk399 Responsible Gaming Policy.

3. Personal Data We Collect

pk399 collects the following categories of personal data from players:

3.1 Identity & Contact Data

• Full legal name as it appears on your CNIC or passport.
• Date of birth (used to verify you are 21 years of age or older).
• Residential address in Pakistan (city, street address, postal code).
• Pakistani mobile number.
• Email address.
• Copy of identity document (CNIC, passport) when required for KYC verification.

3.2 Financial Data

• JazzCash or EasyPaisa mobile wallet number used for transactions.
• Bank account details (account title and IBAN) when bank transfer methods such as HBL, UBL, or Meezan Bank are used.
• Transaction history including deposit amounts, withdrawal requests, and PKR balances.
• Proof of payment method ownership documents submitted during KYC review.

3.3 Account & Gaming Data

• Account username and encrypted password.
• Game play history including bets placed, games played, session duration, and win/loss records.
• Sports betting history including PSL and international cricket markets wagered on.
• Bonus and promotion uptake history.
• Responsible gaming settings including deposit limits and self-exclusion status.

3.4 Technical & Device Data

• IP address at time of login and transaction.
• Device type, operating system, and browser version.
• Session timestamps and page interaction data.
• Geolocation data (country and city level) derived from IP address.

3.5 Communications Data

• Records of live chat conversations with the pk399 support team.
• Email correspondence sent to or received from pk399.
• Survey responses and feedback submitted through the platform.

4. How We Collect Your Data

pk399 collects personal data through the following means:

Collection Method	Examples
Directly from you	Registration form, KYC document uploads, deposit/withdrawal requests, support chat, email correspondence, survey responses.
Automatically during use	IP address logging, device fingerprinting, session cookies, game server logs, bet placement records.
From payment providers	Transaction confirmation data from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK.
From identity verification services	KYC verification outcomes from third-party identity document verification partners used to confirm CNIC or passport authenticity.
From fraud prevention services	Risk scoring and device reputation data from anti-fraud technology providers used to protect player accounts and the integrity of the platform.

5. Why We Use Your Personal Data

pk399 uses personal data only for defined, legitimate purposes. The table below summarises the primary purposes for which your data is processed:

Purpose	Data Categories Used
Account registration and identity verification (KYC)	Identity, contact, financial data
Age verification (21+ requirement)	Date of birth, identity documents
Processing deposits and withdrawals in PKR	Financial data, transaction records
Delivering and improving gaming services	Account & gaming data, technical data
Fraud detection and prevention	Technical data, financial data, gaming data
Anti-money laundering (AML) compliance	Identity, financial, and transaction data
Responsible gaming monitoring and self-exclusion management	Gaming data, account settings, communications data
Customer support and dispute resolution	Communications data, account data
Sending promotional offers and PSL betting bonuses (where opted in)	Contact data, gaming preferences
Compliance with legal and regulatory obligations	All categories as required

6. Legal Bases for Processing

pk399 processes personal data on the following legal bases:

• Contractual necessity: Processing required to create and operate your pk399 account, process PKR transactions, and deliver the gaming services you have signed up for.
• Legal obligation: Processing required to comply with our obligations under our international gaming licence, anti-money laundering regulations, and age verification requirements. This includes the mandatory retention of KYC documents and transaction records.
• Legitimate interests: Processing carried out for fraud prevention, platform security, abuse detection, and internal analytics to improve the pk399 service, where these interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, including promotional emails and SMS messages about pk399 bonuses and PSL cricket offers. You may withdraw this consent at any time by updating your marketing preferences in your account settings or by contacting pk399 support.

7. Sharing Your Personal Data

pk399 does not sell, rent, or trade your personal data to third parties. We share data only in the following limited and necessary circumstances:

7.1 Payment Processors

When you make a deposit or withdrawal using JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or 1LINK, pk399 shares the minimum necessary financial data with the relevant payment provider to complete the transaction. All payment providers used by pk399 are bound by their own privacy and data security obligations.

7.2 Identity Verification Partners

To fulfil our KYC and age verification obligations under our gaming licence, pk399 shares identity document data with accredited third-party verification service providers. These providers process data solely for verification purposes and are contractually prohibited from using your data for any other purpose.

7.3 Fraud Prevention & AML Services

pk399 shares technical and transactional data with anti-fraud and AML compliance technology providers to detect and prevent fraudulent activity, money laundering, and account abuse. These providers act as data processors under contract with pk399.

7.4 Legal & Regulatory Authorities

pk399 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally compelled to do so by a valid court order, regulatory instruction, or applicable law. In such cases, pk399 will disclose only the minimum data required to fulfil the legal obligation.

7.5 Business Transfers

In the event of a merger, acquisition, or transfer of all or part of the pk399 business, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data under the new entity before the transfer takes effect.

8. Cookies & Tracking Technologies

pk399 uses cookies and similar tracking technologies on the pk399.bio website to ensure the platform functions correctly and to understand how players use the site.

8.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your pk399 session. These cannot be disabled without breaking the platform.
• Functional Cookies: Remember your preferences such as language settings, preferred deposit method, and responsible gaming limit settings.
• Analytics Cookies: Collect anonymised data about how players navigate the pk399 platform, which pages are visited most, and where players encounter difficulties. This data is used solely to improve the platform.
• Security Cookies: Used to detect suspicious login patterns, prevent account takeover, and flag anomalous betting behaviour consistent with bot activity or multi-account abuse.

8.2 Managing Cookies

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your pk399 account. Disabling functional cookies may affect your personalisation preferences. Detailed cookie management instructions are available in the help section of all major browsers.

9. Data Retention

pk399 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods driven by our licensing and legal obligations:

• KYC & identity documents: Retained for a minimum of 5 years from account closure, as required by anti-money laundering regulations applicable under our gaming licence.
• Transaction records (deposits, withdrawals, bet history): Retained for a minimum of 5 years from the date of each transaction.
• Account data (username, contact details, gaming history): Retained for the duration of your active account, and for up to 2 years following voluntary account closure, unless a longer period is required by law.
• Communications data (live chat logs, emails): Retained for up to 2 years from the date of the communication, or longer where the communication relates to a dispute or regulatory matter.
• Self-exclusion records: Retained for the duration of the self-exclusion period and for a minimum of 5 years thereafter to prevent re-registration in breach of the exclusion.

Once the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to any individual player.

10. Data Security

pk399 takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction:

• SSL/TLS Encryption: All data transmitted between your browser or device and the pk399 platform is encrypted using industry-standard TLS 1.2 or higher protocols.
• Password Hashing: Player account passwords are never stored in plain text. They are salted and hashed using a secure cryptographic algorithm.
• Access Controls: Access to player data within pk399's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their pk399 account for an additional layer of login security.
• Intrusion Detection: pk399's infrastructure is monitored continuously for suspicious activity, unauthorised access attempts, and potential data breaches.
• Regular Security Audits: pk399's platform and data security practices are subject to periodic independent security reviews.

11. Your Privacy Rights

As a pk399 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact pk399 at the details provided in Section 16.

12. Children's Privacy

Parents and guardians in Pakistan are encouraged to use parental control software to prevent minors from accessing online gaming platforms. If you believe a person under 21 has registered on pk399 using false details, please contact us immediately at the address in Section 16 so we can investigate and take appropriate action.

13. Marketing Communications

With your consent, pk399 may send you promotional communications about new games, PSL cricket betting markets, casino bonuses, and special offers via email or SMS to your registered Pakistani mobile number. You will only receive marketing communications if you have explicitly opted in during registration or have subsequently opted in through your account settings.

13.1 Opting Out

You may withdraw your consent to marketing communications at any time by:

• Updating your communication preferences in your pk399 account settings dashboard.
• Clicking the unsubscribe link included at the bottom of every pk399 marketing email.
• Contacting pk399 support via live chat or email and requesting removal from the marketing list.

Opt-out requests are processed within 48 hours. Please note that even after opting out of marketing, you will continue to receive essential transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts, as these are necessary for the operation of your account.

14. Third-Party Links

The pk399 platform may from time to time contain references or links to third-party websites or services, including payment provider portals such as JazzCash or EasyPaisa. Once you leave the pk399 platform and navigate to a third-party site, this Privacy Policy no longer applies. pk399 has no control over and accepts no responsibility for the privacy practices of any third-party website. We encourage you to review the privacy policy of any third-party service you access in connection with your use of pk399.

15. Updates to This Privacy Policy

pk399 may update this Privacy Policy from time to time to reflect changes in our data practices, changes to our service, or to comply with new legal or regulatory requirements. When we make material changes to this Policy, we will notify registered players by email to their registered address and by a prominent notice on the pk399 platform at least 7 days before the changes take effect.

Minor updates — such as clarifications that do not alter your substantive rights — may take effect immediately upon publication. The "Last Reviewed" date at the top of this Policy will always reflect when the most recent version was published. Your continued use of the pk399 platform after an updated Privacy Policy takes effect constitutes your acknowledgement of the changes.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or pk399's handling of your personal data, please get in touch with our data protection team through the following channel:

pk399 is committed to resolving all privacy-related concerns promptly and fairly. If you are not satisfied with our response, you have the right to escalate your complaint to the supervisory authority under our international gaming licence jurisdiction.