pk366 Privacy Policy

About This Policy

This Privacy Policy applies to all personal data collected, processed, and stored by pk366 ("the Platform", "we", "us") in connection with the operation of the online gaming and sports betting platform accessible at pk366.app. It applies to all registered players and visitors, including players based in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, and other cities across Pakistan.

By registering an Account on pk366 or by continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not register an Account or use the pk366 platform.

This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference into this document.

Personal Data We Collect

pk366 collects the following categories of personal data in connection with account registration, KYC verification, payment processing, and platform use:

pk366 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or biometric data beyond CNIC identity images required for KYC compliance.

How We Collect Your Data

pk366 collects personal data through the following means:

• Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey or promotion.
• Automatically: Technical data including your IP address, device information, and session data is collected automatically when you access the pk366 platform through standard server logs and session management technology.
• From payment providers: When you initiate a deposit or withdrawal via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, or Bank Alfalah, relevant transaction reference data is shared between pk366 and the payment provider to confirm and reconcile the transaction.
• From third-party identity verification services: Where pk366 uses a third-party service to assist with KYC document verification, that provider may return verification status data to pk366 in connection with the review of your CNIC submission.

Purpose & Legal Basis for Processing

pk366 processes your personal data only for specific, legitimate purposes. The primary purposes and the corresponding legal basis for each are set out below:

• Account Registration and Management: Processing is necessary to perform the contract between you and pk366 — without your contact and identity data, we cannot create or maintain your Account.
• KYC and Age Verification: Processing is required to comply with our legal obligation to verify that all players are 18 years of age or older and to confirm player identity before permitting real-money transactions.
• Payment Processing: Financial data is processed as necessary to execute deposit and withdrawal transactions in PKR and to maintain accurate transaction records.
• Fraud Prevention and Security: Technical data and account activity data are processed on the basis of legitimate interest to detect and prevent fraudulent activity, money laundering, and unauthorised account access.
• Responsible Gaming: Gameplay data is processed to fulfil legal obligations related to responsible gaming monitoring, including identifying patterns of play that may indicate problem gambling, and to apply player-requested limits or self-exclusion.
• Service Improvement: Aggregated, anonymised technical and gameplay data is processed on the basis of legitimate interest to improve platform performance, game selection, and user experience.
• Customer Support: Communication data is processed to handle your support queries and complaints and to maintain records of interactions as required.
• Marketing Communications: Where you have explicitly opted in, contact data may be used to send you information about pk366 promotions and offers. You may withdraw this consent at any time by contacting support.

KYC & Identity Data

pk366 requires all players to complete Know Your Customer (KYC) verification before depositing real money, placing bets, or requesting withdrawals. KYC is a legal and regulatory requirement, not an optional step. The following identity data is collected and processed during KYC:

• Full legal name as it appears on your CNIC.
• Date of birth (to confirm you are 18 years of age or older).
• CNIC number.
• Clear images of the front and back of your CNIC.
• In some cases, a selfie or live photo may be requested to confirm the CNIC belongs to the person registering.

KYC documents are reviewed by authorised pk366 staff and, where a third-party verification service is used, by that provider under contractual data protection obligations. CNIC images and identity data are stored securely and are not shared with any party other than those directly involved in the verification process and any regulatory authority that lawfully requests access.

pk366 retains KYC data for the period required by applicable gaming and anti-money laundering regulations, which is typically a minimum of five years from the date of Account closure.

Payment Data

All deposits and withdrawals on pk366 are processed in Pakistani Rupees (PKR) via the following payment methods: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah. When you initiate a payment transaction, pk366 collects the payment method identifier (such as your mobile wallet number or bank account reference) necessary to process and reconcile the transaction.

pk366 does not store full payment card numbers or complete bank account numbers. Payment processing is handled through the respective provider's secure infrastructure. pk366 stores only the transaction reference, amount in PKR, timestamp, and payment method type required for record-keeping and withdrawal processing purposes.

Withdrawals are processed only to a payment method in your verified name. This policy exists to prevent financial fraud and to protect players from unauthorised withdrawals to third-party accounts.

Cookies & Tracking Technologies

pk366 uses cookies and similar tracking technologies to operate the platform, maintain your login session, and collect standard technical data. The types of cookies used are:

• Essential Cookies: Required for the platform to function. These include session cookies that keep you logged into your pk366 Account during a visit. Disabling these cookies will prevent the platform from working correctly.
• Functional Cookies: Used to remember your preferences — such as language settings and game lobby layout — to provide a more personalised experience on subsequent visits.
• Analytics Cookies: Aggregated, anonymised data about how players navigate the platform is collected to help pk366 improve site performance and content. This data does not identify individual users.
• Security Cookies: Used to detect and prevent fraudulent or malicious session activity.

pk366 does not use third-party advertising cookies or cross-site tracking cookies. You may manage cookie preferences through your browser settings. Note that disabling essential cookies will impair platform functionality, including the pk366 login process.

Sharing Your Personal Data

pk366 does not sell your personal data. We share your data only in the following limited circumstances and with appropriate safeguards in place:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah receive the transaction data necessary to process your deposits and withdrawals.
• KYC Verification Providers: Where a third-party identity verification service is used, your CNIC data is shared with that provider solely for the purpose of completing KYC review. Such providers are bound by data processing agreements and are prohibited from using your data for any other purpose.
• Game Software Providers: Game providers such as Evolution Gaming, Pragmatic Play, and PG Soft may receive anonymised session and game-round data to support game integrity and dispute resolution.
• Legal and Regulatory Authorities: pk366 will disclose personal data to law enforcement, regulatory, or judicial authorities where required by law, court order, or in connection with the investigation of fraud or criminal activity.
• Service Providers: Third parties that provide infrastructure, security, analytics, or customer support services to pk366 under contractual data processing agreements that restrict use of your data to the agreed service purpose only.

All third parties with whom pk366 shares personal data are required to maintain appropriate technical and organisational measures to protect that data in accordance with applicable privacy standards.

Data Retention

pk366 retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law and regulation. The following general retention principles apply:

• Active Account Data: Retained for the duration of your Account and for a minimum of five years following Account closure, in accordance with anti-money laundering and gaming regulatory requirements.
• KYC and Identity Documents: Retained for a minimum of five years from the date of Account closure or from the date of the relevant transaction, whichever is later.
• Transaction Records: Retained for a minimum of five years for financial compliance and dispute resolution purposes.
• Support Communications: Retained for three years from the date of the relevant interaction, unless they relate to an ongoing dispute or regulatory matter.
• Technical and Log Data: Typically retained for 12 months from collection, unless retained longer for security investigation purposes.

When data is no longer required for its stated purpose and no legal retention obligation applies, pk366 securely deletes or anonymises it.

Data Security

pk366 implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and pk366 servers.
• Encryption of sensitive data fields (including CNIC data and password hashes) at rest.
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need.
• Regular security assessments and penetration testing of platform infrastructure.
• Two-factor authentication (2FA) for administrative systems.
• Audit logging of access to and modifications of player records.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, pk366 will notify affected players as soon as reasonably practicable and take immediate steps to contain and remediate the breach.

Your Data Rights

As a pk366 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact pk366 support at the address listed in Section 14:

• Right of Access: You may request a copy of the personal data pk366 holds about you. Requests will be fulfilled within a reasonable timeframe during PKT business hours.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Note that corrections to KYC identity data require re-verification.
• Right to Erasure: You may request deletion of your personal data. pk366 will comply where no legal retention obligation prevents deletion. Data subject to regulatory retention requirements (e.g., KYC records, transaction history) cannot be deleted until the applicable retention period has elapsed.
• Right to Restriction: You may request that pk366 restrict processing of your data in certain circumstances, for example while an accuracy dispute is under review.
• Right to Object: You may object to processing of your data on the basis of legitimate interest, including direct marketing communications. Objections to marketing will be acted upon immediately.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a copy of your data in a structured, commonly used format.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

Children's Privacy

pk366 is strictly an adult platform. The Services are not directed at or intended for individuals under the age of 18. pk366 does not knowingly collect personal data from anyone under 18 years of age. All registrations require CNIC-based KYC verification, which includes age confirmation. If pk366 discovers that personal data has been collected from a person under 18, that Account will be immediately suspended, all associated data will be deleted, and any deposits will be returned to the originating payment method.

If you are a parent or guardian and believe that your minor child has registered an Account on pk366, please contact support immediately at the address in Section 14.

Changes to This Policy

pk366 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players by email to the address associated with their Account and/or by a prominent notice on the pk366 platform. The "Last Updated" date at the top of this Policy will be revised to reflect each update. Your continued use of the pk366 platform following the effective date of any change constitutes your acceptance of the revised Privacy Policy.

We recommend reviewing this Policy periodically to stay informed about how pk366 protects your personal data.

Contact & Data Rights Requests

For questions about this Privacy Policy, to exercise any of your data rights, or to report a privacy concern, please contact the pk366 support team during Pakistan Standard Time (PKT) hours:

Email: [email protected]

Please include your registered Pakistani mobile number or email address in any data rights request so that we can verify your identity before processing the request. pk366 aims to acknowledge all data rights requests within 5 PKT business days and to fulfil them within a reasonable timeframe thereafter.

For questions about account terms, visit the Terms & Conditions page. For responsible gaming support, visit the Responsible Gaming page.