pk368 Privacy Policy

pk368 is Pakistan's premier online casino and sports betting platform, serving players across Karachi, Lahore, Islamabad, Faisalabad, and beyond. We are committed to protecting the personal information of every player who registers and plays on our platform. This Privacy Policy sets out, in clear and accessible English, exactly how pk368 collects, processes, stores, shares, and protects personal data.

This policy applies to all personal data collected through the pk368 website at pk368.bio, any mobile-optimised version of the site, and all related services including account registration, deposits, withdrawals, sports betting markets, live casino games, slot titles, customer support interactions, and promotional communications.

pk368 acts as the data controller in respect of all personal data processed under this policy. We take our responsibilities as a data controller seriously and have implemented technical and organisational measures appropriate to the sensitivity of the data we handle — including identity documents, financial transaction records, and Pakistani mobile number data.

pk368 collects personal data in three primary ways: data you provide directly during registration and account use, data generated automatically through your use of the platform, and data received from third-party payment processors and identity verification services.

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, Pakistani mobile number, and any additional fields completed during account setup.
• Verification documents: Copies of your CNIC, passport, or driving licence submitted during the identity and age verification process.
• Payment information: JazzCash wallet number, EasyPaisa wallet number, HBL / UBL / Meezan Bank / Allied Bank account details, SadaPay account details, Raast ID, 1LINK transfer references, and USDT TRC20 wallet addresses used for deposits or withdrawals. Full card or bank account numbers are not stored by pk368 — only the minimum reference data required to process and reconcile transactions.
• Support communications: Messages, emails, and live chat transcripts exchanged with the pk368 customer support team.
• Responsible gaming declarations: Deposit limit settings, cool-off period requests, and self-exclusion applications submitted via your account or through support.
• Promotional data: Bonus code redemptions, competition entries, and survey responses where you choose to participate.

2.2 Automatically Collected Data

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited on pk368.bio, time spent on each page, game sessions accessed, betting markets viewed, bet placement activity, and navigation paths through the platform.
• Session data: Login timestamps, session duration, OTP verification events, and logout events.
• Cookie and tracking data: Data collected via cookies, local storage, and similar tracking technologies as described in Section 6 of this policy.

2.3 Data from Third Parties

• Payment processor confirmations: Transaction status, reference numbers, and timestamp data received from JazzCash, EasyPaisa, 1LINK, Raast, and banking partners to confirm deposit and withdrawal completion.
• Identity verification services: Confirmation results from third-party Know Your Customer (KYC) service providers used to verify the authenticity of identity documents you submit.
• Fraud and risk screening: Risk signals from third-party fraud prevention services used to protect the integrity of the pk368 platform and its player base.

pk368 uses the personal data collected from Pakistani players for the following specific purposes:

pk368 does not use your personal data for automated decision-making that produces significant legal effects on you without human review. Responsible gaming interventions — such as flagging an account for support follow-up based on usage patterns — involve human assessment before any account-level action is taken.

pk368 processes personal data only where a lawful basis exists. The primary legal bases under which pk368 processes personal data are:

• Contractual necessity: Processing required to perform our obligations under the agreement you enter into with pk368 at registration — including account management, bet settlement, deposit processing, and withdrawal execution.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, know your customer (KYC) requirements under our international gaming licence, and record-keeping obligations imposed by our licensing authority.
• Legitimate interests: Processing carried out in pursuit of pk368's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — principally for promotional SMS communications and optional personalisation features. Consent-based processing can be withdrawn at any time by contacting pk368 customer support.

pk368 does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Personal data is shared only in the following limited and controlled circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, Raast, 1LINK, and USDT processing partners receive only the minimum transaction data required to execute your deposit or withdrawal instruction.
• KYC and identity verification providers: Third-party identity document verification services receive copies of verification documents you submit, solely for the purpose of confirming document authenticity and verifying that you meet the 21+ age requirement.
• Fraud prevention services: Risk data is shared with fraud screening providers under strict data processing agreements to protect the pk368 platform and its player community.
• Game software suppliers: Game session data (excluding personally identifiable information) is shared with licensed game suppliers such as those providing MG Live titles and Egypt Book of Mystery for the purpose of game auditing, RTP verification, and technical support.
• Regulatory and licensing authorities: pk368 is required under the terms of its international gaming licence to share certain player data with its licensing authority upon request, including for compliance audits and regulatory investigations.
• Law enforcement: pk368 will disclose personal data to law enforcement agencies, courts, or other government bodies where legally compelled to do so by a valid court order, regulatory requirement, or statutory obligation.

All third parties with whom pk368 shares personal data are bound by data processing agreements that require them to handle the data securely, use it only for the specified purpose, and not share it further without authorisation.

pk368 uses cookies and similar tracking technologies on the pk368.bio website to operate the platform correctly, remember your session and preferences, and analyse how players use the site so we can improve it.

6.1 Types of Cookies Used

• Strictly necessary cookies: These cookies are required for the pk368 platform to function. They enable session management, login authentication, CSRF protection, and OTP verification flows. You cannot opt out of these cookies while using the platform.
• Functional cookies: These remember your language preference, display settings, and responsible gaming tool configurations so you do not need to reset them on every visit.
• Analytics cookies: Aggregated, anonymised data about how players navigate the pk368 platform — which pages are visited most, where players exit, and how long game sessions last. This data is used to improve the platform experience.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and multi-accounting behaviour that would harm the fair operation of the platform.

6.2 Managing Cookies

You may configure your browser to refuse cookies or to alert you when cookies are being set. Note that disabling strictly necessary cookies will prevent you from logging in to your pk368 account and using core platform features. Analytics and functional cookies can be disabled without affecting your ability to play.

pk368 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply:

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

pk368 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

• Encryption at rest: All personal data stored in pk368 databases — including identity documents, mobile numbers, and payment references — is encrypted using AES-256 encryption.
• Encryption in transit: All data transmitted between your device and the pk368 platform is protected by TLS 1.2 or higher. The platform enforces HTTPS across all pages.
• Access controls: Personal data is accessible only to pk368 staff members whose job role requires that access. Role-based access controls and audit logging are in place for all systems containing personal data.
• Two-factor authentication (2FA): All pk368 staff with access to systems containing personal data are required to use 2FA. Players are strongly encouraged to enable 2FA on their own accounts via Account settings.
• Intrusion detection: pk368 systems are monitored continuously for anomalous access patterns, brute-force login attempts, and indicators of compromise.
• Penetration testing: The pk368 platform undergoes periodic third-party security assessment to identify and remediate vulnerabilities before they can be exploited.

As an internationally licensed gaming platform, pk368 may transfer personal data to servers and service providers located outside of Pakistan. Where such transfers occur, pk368 ensures that appropriate safeguards are in place to maintain the protection of your personal data to a standard equivalent to that described in this Privacy Policy.

Safeguards used for international transfers include:

• Contractual data transfer agreements with all recipient organisations that impose equivalent data protection obligations.
• Transfer only to organisations operating in jurisdictions recognised as providing an adequate level of data protection, or to organisations that have implemented equivalent contractual safeguards.
• Minimisation of the personal data transferred to the minimum necessary for the specific cross-border processing purpose.

Pakistani player data is never transferred to a third country solely for commercial exploitation or resale. All international transfers are strictly for operational purposes — including cloud hosting, KYC verification, fraud screening, and game supply — under binding data processing agreements.

As a pk368 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact pk368 customer support with your account username and a description of your request. We will respond within 30 days of receiving a verified request.

pk368 strictly prohibits the use of its platform by persons under the age of 21. We do not knowingly collect personal data from persons under 21 years of age. Age verification is a mandatory step in the pk368 account creation process, and accounts where verified age falls below 21 are immediately closed.

If pk368 becomes aware that personal data has been collected from a person under 21 — whether through a misrepresentation at registration or through post-registration verification — the following steps will be taken without delay:

• The account will be permanently closed.
• Any balance held in the account will be handled in accordance with our Terms & Conditions and applicable regulatory guidance.
• All personal data associated with the account will be deleted, except where retention is required by a specific legal obligation.
• The matter will be reviewed under pk368's responsible gaming and underage gambling prevention procedures.

The pk368 platform may, from time to time, contain references to third-party services — such as payment processors, game software providers, or licensing authority websites. Where such references include links, pk368 is not responsible for the privacy practices or content of those third-party destinations.

This Privacy Policy applies exclusively to personal data processed by pk368 through the pk368.bio platform and its associated services. Once you navigate away from pk368.bio to a third-party website or service, the privacy policy of that third party governs the handling of any data you provide to them. pk368 strongly encourages you to review the privacy notice of any third-party service before submitting personal information to it.

pk368 does not accept responsibility or liability for the privacy practices, security standards, or content of any third-party website or service. The inclusion of any reference to a third-party service on pk368.bio does not constitute an endorsement of that third party's privacy practices.

pk368 reserves the right to amend or update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our business operations, or the technical measures we use to protect your data. The most current version of this Privacy Policy is always available at pk368.bio/privacy-policy.

When material changes are made to this Privacy Policy — meaning changes that affect your rights, the categories of data collected, the purposes of processing, or the third parties with whom data is shared — pk368 will notify registered players via their registered mobile number at least 14 days before the revised policy takes effect.

Your continued use of the pk368 platform after the effective date of a revised Privacy Policy constitutes your acceptance of that revised policy. If you do not accept the revised terms, you must close your pk368 account before the effective date and cease using the platform.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 10, or wish to raise a concern about how pk368 has handled your personal data, please contact the pk368 Data Privacy team through the following channel:

Email: [email protected]

Please include your pk368 account username, a clear description of your request or concern, and any relevant reference numbers (such as transaction IDs for financial data queries) in your message. pk368 will acknowledge receipt of your request within 3 business days and provide a substantive response within 30 calendar days of receiving a fully verified request.

For urgent security concerns — such as suspected unauthorised access to your pk368 account — please contact customer support via the live chat function on pk368.bio for the fastest response.