pk366 Privacy
Policy & Data Protection

1. Introduction

pk366 ("we", "us", "our", or "the Platform") is Pakistan's premium online casino and sports betting platform, offering Kabaddi, Mahjong Ways, Cockfighting, Jackpot Slots, live casino, and cricket betting with native PKR transactions. We are committed to protecting the personal data of every player who registers and uses the pk366 platform.

This Privacy Policy describes how pk366 collects, processes, stores, shares, and protects personal data in connection with the operation of the Platform. It also describes the rights you have in relation to your personal data and how you can exercise those rights. This policy is written in plain, accessible English so that players across Pakistan — in Karachi, Lahore, Islamabad, and beyond — can understand exactly how their information is handled.

This Privacy Policy should be read together with the pk366 Terms & Conditions, which govern the broader relationship between pk366 and its registered players.

2. Data Controller

pk366 acts as the data controller for personal data collected through the Platform. As data controller, pk366 determines the purposes and means of processing your personal data. If you have any questions or concerns about how pk366 processes your data, or if you wish to exercise any of your data rights, please contact us using the details provided in Section 14 of this Policy.

3. Personal Data We Collect

pk366 collects the following categories of personal data in connection with the operation of the Platform:

3.1 Registration & Identity Data

• Full legal name
• Date of birth (to verify 18+ eligibility)
• Email address
• Username and encrypted password
• Mobile number (where provided)
• Country and city of residence (Pakistan)

3.2 Identity Verification Data

• Government-issued ID document number (CNIC or passport number)
• Document images submitted for KYC (Know Your Customer) verification
• Selfie or liveness check image where required

3.3 Financial & Transaction Data

• PKR deposit and withdrawal amounts and timestamps
• Payment method identifiers (e.g., Easypaisa mobile number, JazzCash number, bank account last four digits)
• Transaction reference numbers
• Wagering history and game session records

3.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Pages visited, session duration, and click-path data
• Login timestamps and session identifiers

3.5 Communications Data

• Contents of messages sent to pk366 customer support
• Email correspondence records
• Responsible gaming tool activation records (e.g., self-exclusion requests, deposit limit settings)

4. How We Collect Your Data

pk366 collects personal data through the following means:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact support, or interact with any feature of the Platform.
• Automatically — through cookies, tracking technologies, and server logs when you browse or use the Platform. See Section 11 for more information on cookies.
• From third-party service providers — identity verification partners may share verification outcomes with pk366 in connection with KYC checks. Payment processors share transaction confirmation data with pk366 to credit your PKR wallet.

5. How We Use Your Personal Data

pk366 uses the personal data it collects for the following purposes:

• To create and manage your pk366 account, including verifying your identity and age.
• To process PKR deposits and withdrawals through Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, MCB Bank, Visa, and Mastercard.
• To operate the casino, sportsbook, and live gaming features of the Platform, including recording wager outcomes and crediting winnings to your PKR wallet.
• To detect, investigate, and prevent fraud, money laundering, underage gambling, and other prohibited conduct as defined in the pk366 Terms & Conditions.
• To provide customer support and respond to your queries, complaints, and responsible gaming requests.
• To send you transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts.
• To send you promotional communications about pk366 bonuses and offers — only where you have provided consent or where we have a legitimate interest in doing so, and subject always to your right to opt out.
• To comply with our legal and regulatory obligations, including anti-money laundering (AML) and counter-terrorism financing (CTF) requirements.
• To improve Platform performance, user experience, and security based on anonymised or aggregated usage analytics.

6. Legal Basis for Processing

pk366 processes your personal data on the following legal bases:

• Contract performance — processing necessary to provide the pk366 platform services you have signed up to, including account management and PKR payment processing.
• Legal obligation — processing required to comply with AML, CTF, KYC, and other legal obligations applicable to the Platform.
• Legitimate interests — processing for fraud prevention, platform security, and analytics, where such interests are not overridden by your data protection rights.
• Consent — processing for optional promotional communications, where you have explicitly opted in. You may withdraw consent at any time by contacting pk366 support.

7. Data Sharing & Third Parties

pk366 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share data only where necessary to operate the Platform, as described below:

• Payment processors — Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, MCB Bank, Visa, and Mastercard receive the transaction data necessary to process your PKR deposits and withdrawals.
• Identity verification providers — third-party KYC service providers receive identity document data to perform age verification and identity checks on behalf of pk366.
• Fraud and risk management systems — anonymised or pseudonymised behavioural and session data may be shared with fraud detection partners to protect the Platform and its players.
• Game software providers — game studios and live dealer operators may receive session identifiers and wager data necessary to facilitate gameplay and resolve disputes.
• Legal authorities — pk366 may disclose personal data to law enforcement or regulatory authorities where required by applicable law or a valid legal order.

All third-party service providers engaged by pk366 are contractually required to handle personal data in a manner consistent with this Privacy Policy and applicable data protection standards.

8. Data Security

pk366 implements a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• HTTPS/TLS encryption on all data in transit between your device and the pk366 platform.
• Bcrypt or equivalent one-way hashing for all stored passwords — pk366 staff cannot view your password in plaintext.
• PCI-DSS compliant payment data handling — pk366 does not store full card numbers or CVV codes on its own servers.
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis.
• Regular security audits and vulnerability assessments of the Platform infrastructure.
• Anomaly detection systems that flag unusual login patterns and transaction behaviours for review.

Despite these measures, no data transmission over the internet or storage system is completely infallible. If you believe your pk366 account has been compromised, contact our support team immediately at the email address provided in the footer of this page.

9. Data Retention

pk366 retains personal data for the following periods:

• Active account data — retained for the duration of your active pk366 account.
• Transaction and wagering records — retained for a minimum of five years following the date of the transaction, in accordance with anti-money laundering obligations.
• Identity verification documents — retained for a minimum of five years following account closure.
• Customer support communications — retained for a minimum of two years.
• Self-exclusion records — retained permanently to prevent re-registration during an active exclusion period and for a minimum of five years after exclusion ends.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. We will not retain your data beyond what is necessary or legally required.

10. Your Data Rights

As a pk366 player, you have the following rights in relation to your personal data:

• Right of access — you may request a copy of the personal data pk366 holds about you.
• Right to rectification — you may request correction of inaccurate or incomplete personal data.
• Right to erasure — you may request deletion of your personal data where pk366 no longer has a legal basis to retain it. Note that certain data (e.g., transaction records required for AML compliance) may be exempt from erasure requests.
• Right to restrict processing — you may request that pk366 restricts its processing of your data in certain circumstances, for example while a rectification request is being assessed.
• Right to data portability — you may request a copy of data you have provided to pk366 in a structured, machine-readable format.
• Right to object — you may object to processing based on legitimate interests, including direct marketing. Your objection to marketing will always be honoured.
• Right to withdraw consent — where processing is based on your consent (e.g., promotional emails), you may withdraw that consent at any time.

To exercise any of these rights, contact pk366 support using the email address provided in the footer. We will respond to data rights requests within 30 days of receipt. We may require identity verification before fulfilling a data access or deletion request.

11. Cookies & Tracking Technologies

pk366 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us deliver a consistent, personalised, and secure experience.

11.1 Types of Cookies Used

• Strictly necessary cookies — required for the Platform to function, including session authentication and security tokens. These cannot be disabled.
• Functional cookies — remember your preferences such as language, currency (PKR), and game lobby layout settings.
• Analytics cookies — collect anonymised data on how players navigate and use the Platform, helping us improve the user experience. This data does not identify you personally.
• Marketing cookies — used to deliver relevant pk366 promotional content. These are set only with your consent and can be disabled at any time through your browser settings.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookie categories may affect the functionality of the pk366 platform.

12. Minors

The pk366 platform is strictly for individuals aged 18 and above. pk366 does not knowingly collect personal data from anyone under the age of 18. If we become aware that a user under 18 has registered an account or submitted personal data, we will immediately close that account, delete the associated data, and return any net deposits to the appropriate guardian where legally required.

If you believe a minor has registered a pk366 account, please contact our support team immediately using the contact details in Section 14 below.

13. Changes to This Privacy Policy

pk366 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will update the "Last Updated" date at the top of this page and, where the changes are significant, notify registered players via their registered email address.

We encourage you to review this Privacy Policy periodically. Your continued use of the pk366 platform following the effective date of any revision constitutes your acknowledgement of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or to how pk366 handles your personal data, please contact our dedicated data privacy support team:

Email: [email protected]

Our team is available 24 hours a day, 7 days a week, and aims to acknowledge all privacy-related enquiries within 48 hours. Formal data rights requests will be processed within 30 calendar days of receipt of sufficient information to verify your identity.