pk358 Privacy
Policy

pk358 ("we", "us", "our", "the Company") is the operator of the online crypto casino and sports betting platform accessible at https://pk358.net. We are committed to protecting the privacy of our registered players and website visitors. This Privacy Policy sets out a detailed account of what personal data we collect, the purposes for which it is processed, the legal basis for each processing activity, and the rights available to you as a data subject.

This policy has been drafted to align with internationally recognised data protection principles, including those established under the General Data Protection Regulation (GDPR) framework, to the extent applicable to our operations. While Pakistan's Personal Data Protection Act is still evolving, pk358 voluntarily adopts GDPR-equivalent standards as a baseline of best practice for the protection of our players' personal information.

This Privacy Policy should be read alongside our Terms & Conditions, which also form part of your agreement with pk358. In the event of any conflict between this policy and the Terms & Conditions on a matter of data privacy, this Privacy Policy shall prevail.

pk358 collects several categories of personal data depending on the nature of your interaction with our platform. The categories are described below:

We collect only the minimum data necessary to fulfil the stated purpose. We do not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where explicitly required by applicable anti-money laundering regulations.

pk358 collects personal data through the following mechanisms:

• Direct Collection: Information you voluntarily provide when registering an account, completing KYC verification, making a deposit or withdrawal, claiming a bonus, or contacting pk358 support.
• Automated Collection: Technical data collected automatically when you visit the pk358 website or use the platform, including via cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device fingerprint, and session behaviour.
• Third-Party Sources: Identity verification data may be cross-referenced with licensed KYC and fraud prevention service providers. Payment data is validated through our payment processing partners. We may also receive information from responsible gaming databases if you have self-excluded from other licensed gambling platforms.
• Publicly Available Sources: In limited circumstances relevant to fraud prevention or AML compliance, pk358 may reference publicly available information such as sanctions lists and politically exposed persons (PEP) registers.

pk358 processes personal data on the following legal bases, in line with GDPR-equivalent data protection principles:

• Contractual Necessity: Processing required to fulfil our contract with you — including operating your account, processing deposits and withdrawals, and providing access to games and betting markets.
• Legal Obligation: Processing required to comply with applicable laws and the conditions of our gaming licence — including KYC verification, AML checks, age verification, and tax reporting obligations.
• Legitimate Interests: Processing conducted for purposes of fraud prevention, platform security, responsible gaming monitoring, and general business analytics — where these interests are not overridden by your fundamental data protection rights.
• Consent: Processing for marketing communications, non-essential cookies, and optional personalisation features — conducted only where you have given explicit and freely withdrawable consent.

pk358 uses the personal data we collect for the following specific purposes:

• Creating, maintaining, and administering your pk358 player account.
• Processing deposits, withdrawals, and all financial transactions, including those conducted via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, USDT, and BTC.
• Verifying your identity and age (21+) as required by our gaming licence and applicable law.
• Conducting anti-money laundering (AML) screening and fraud prevention checks.
• Providing customer support and resolving disputes or complaints.
• Sending transactional communications such as deposit confirmations, withdrawal notifications, and security alerts.
• Sending promotional and marketing communications where you have opted in to receive them.
• Monitoring gaming behaviour for responsible gaming purposes, including identifying signs of problem gambling and applying account-level restrictions where appropriate.
• Improving the pk358 platform through analysis of aggregated, anonymised usage data.
• Complying with regulatory obligations, responding to lawful requests from authorities, and enforcing our Terms & Conditions.

pk358 does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• KYC & Identity Verification Providers: Licensed third-party providers who assist with identity document verification and AML screening. These providers are contractually bound to process your data solely for the purpose of verification and in accordance with applicable data protection law.
• Payment Processors: Financial service providers including JazzCash, EasyPaisa, and banking partners (HBL, UBL, Meezan Bank), as well as blockchain network operators, to the extent necessary to process your financial transactions.
• Game Software Providers: Third-party game studios and live casino operators whose software powers the pk358 platform. These providers may receive anonymised session and game data for technical support and auditing purposes.
• Regulatory & Law Enforcement Authorities: Where required by our gaming licence, applicable law, or a valid legal order, pk358 may disclose personal data to relevant regulatory bodies, tax authorities, or law enforcement agencies.
• Fraud Prevention Networks: Shared industry databases used to identify and prevent fraudulent activity across licensed gambling platforms, subject to data sharing agreements compliant with applicable privacy law.
• Professional Advisors: Legal counsel, auditors, and insurers who require access to data in connection with providing professional services to pk358, subject to strict confidentiality obligations.

Any third party receiving personal data from pk358 is required to implement appropriate technical and organisational security measures and to process that data only for the specific purpose for which it was shared.

pk358 uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and analyse how the platform is used. The categories of cookies we use are as follows:

You can manage cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies will affect the functionality of the pk358 platform. For full details on the specific cookies we use and their individual retention periods, please refer to the pk358 Cookie Notice available in the platform settings.

pk358 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and our gaming licence obligations. The following retention periods apply:

• Account Data: Retained for the duration of your active account plus a minimum of 5 years following account closure, as required by AML regulations.
• KYC Documents: Retained for a minimum of 5 years from the date of verification, in accordance with applicable AML and gaming regulatory requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Gaming History: Retained for 3 years from the date of each session for dispute resolution and responsible gaming monitoring purposes.
• Support Communications: Retained for 2 years from the date of the last communication in a support thread.
• Marketing Preferences: Retained until you withdraw your consent or request deletion.
• Technical Logs: Retained for 12 months for security and fraud investigation purposes.

pk358 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Key security measures include:

• AES-256 encryption for all personal and financial data stored on pk358 servers.
• TLS 1.3 encryption for all data transmitted between your browser or app and the pk358 platform.
• Multi-factor authentication (MFA) for player account access and for internal staff access to data systems.
• Strict role-based access controls ensuring that pk358 employees can only access personal data required for their specific job function.
• Regular third-party security audits and penetration testing of the pk358 platform and infrastructure.
• Dedicated fraud detection systems that monitor for unusual account activity in real time.
• Secure, access-controlled data centres with physical security protocols.

While pk358 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. You are responsible for keeping your account credentials confidential and for notifying pk358 immediately if you suspect unauthorised access to your account.

As a data subject, you hold the following rights with respect to the personal data pk358 holds about you. To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Data Rights Request":

• Right of Access: You have the right to request a copy of all personal data pk358 holds about you, along with information on how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by pk358.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to pk358's legal and regulatory data retention obligations.
• Right to Restrict Processing: You may request that pk358 limit the processing of your data in certain circumstances, such as while the accuracy of the data is being contested.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format and to have it transferred to another controller where technically feasible.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

pk358 will respond to all data rights requests within 30 days of receipt. In complex or high-volume cases, this period may be extended by up to a further 60 days, with notification provided to you within the initial 30-day window.

The pk358 platform is strictly intended for individuals aged 21 years and above. pk358 does not knowingly collect, process, or store personal data relating to minors (individuals under 21 years of age). Age verification checks are applied at the point of registration, and additional documentary proof of age may be requested at any time.

pk358 strongly encourages parents and guardians to make use of commercially available parental control tools to restrict minors' access to online gambling platforms. Free parental control resources are widely available and provide an additional layer of protection beyond age verification measures applied by pk358.

pk358's operations involve the transfer and processing of personal data across international borders. Your data may be transferred to and stored on servers located outside Pakistan. In all cases, pk358 ensures that appropriate safeguards are in place to protect your data to the same standard as required under this Privacy Policy.

Safeguards used for international transfers include:

• Data processing agreements with all third-party service providers incorporating standard contractual clauses equivalent to those recognised under applicable data protection frameworks.
• Transfer only to jurisdictions that maintain an adequate level of data protection as determined by recognised regulatory standards.
• Technical security measures consistent with Section 9 of this policy, applied regardless of where data is physically stored.

The pk358 platform may contain links to third-party websites, game providers, or informational resources. This Privacy Policy applies exclusively to the pk358 platform and does not extend to any third-party website or service, regardless of how you accessed it.

pk358 accepts no responsibility for the privacy practices of third-party sites or services. Before providing any personal data to a third-party website, we strongly encourage you to review that website's own privacy policy carefully.

pk358 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the scope of our platform operations. Where changes are material, we will notify registered players via the email address on file at least 7 days before the revised policy takes effect.

The date of the most recent revision is clearly displayed at the top of this page. Your continued use of the pk358 platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with the revised policy, you must cease using the platform and may request account closure in accordance with our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pk358 handles your personal data, please contact our Data Protection team using the details below:

• Email: [email protected]
• Subject Line: Privacy Policy Enquiry / Data Rights Request
• Live Chat: Available 24/7 through the pk358 platform
• Response Time: We aim to respond to all privacy-related enquiries within 5 business days, and to all formal data rights requests within 30 days.