pk358 Privacy Policy

This Privacy Policy ("Policy") is published by pk358 ("pk358", "we", "us", "our") and applies to all users ("you", "your") of the pk358 platform accessible at https://pk358.cam (the "Platform"). This Policy explains how we collect, use, store, share and protect personal data in connection with your use of the Platform and all associated services.

pk358 is an online gaming and sports betting platform primarily serving users in Pakistan and other permitted jurisdictions. We are committed to processing personal data responsibly, transparently and in accordance with applicable data protection principles. This Policy is designed to give you a clear and complete picture of our data practices.

This Policy should be read alongside our Terms & Conditions, which govern your contractual relationship with pk358, and our Responsible Gambling policy, which describes how we use certain data to support player protection measures.

The following definitions apply throughout this Policy:

• "Personal Data" — Any information that identifies or could reasonably be used to identify a living natural person, directly or indirectly. This includes name, email address, mobile number, National Identity Card (CNIC) number, date of birth, IP address and device identifiers.
• "Processing" — Any operation or set of operations performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transmission, erasure or destruction.
• "Data Controller" — pk358, being the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — A third party that processes Personal Data on behalf of pk358, under a data processing agreement and subject to pk358's instructions.
• "Cookies" — Small text files placed on your device by the Platform for functional, analytical or tracking purposes, as further described in Section 10.
• "KYC Data" — Identity and address verification documents and information collected as part of the Know Your Customer process described in the pk358 Terms & Conditions.
• "Sensitive Data" — Personal Data warranting heightened protection, including data relating to financial transactions, identity documents and gambling behaviour patterns.

The categories of Personal Data we collect vary depending on how you interact with the Platform. The following table summarises the main categories:

We collect Personal Data through the following channels:

4.1 — Information You Provide Directly

When you register an account, complete the KYC verification process, make a deposit or withdrawal, contact our support team or update your account settings, you provide Personal Data directly to pk358. This includes registration forms, identity document uploads and support communications.

4.2 — Automatic Technical Collection

When you access the Platform via any device — whether a smartphone in Rawalpindi, a tablet in Faisalabad or a desktop browser in Karachi — our servers automatically collect certain technical data, including your IP address, browser type, operating system, session timestamps and navigation activity. This data is collected through server logs, cookies and similar tracking technologies.

4.3 — Transaction Records

All financial transactions on the Platform — deposits, withdrawals, bets placed, game results and bonus credits — are automatically recorded as part of our financial audit trail. This is required for fraud prevention, regulatory compliance and dispute resolution purposes.

4.4 — Third-Party Sources

In limited circumstances, we may receive supplemental Personal Data from third-party sources, including identity verification service providers, fraud prevention databases and payment processing partners. Data received from third parties is handled with the same standard of care as data collected directly.

pk358 processes Personal Data for the following specific purposes:

• Account Registration and Management: Creating, maintaining and administering your user account, including updating account details and processing closure requests;
• Identity Verification (KYC): Verifying your age, identity and address in accordance with our KYC obligations, and complying with anti-money-laundering and counter-terrorism-financing requirements;
• Payment Processing: Facilitating deposits and withdrawals, detecting and preventing payment fraud, and maintaining financial transaction records;
• Service Delivery: Providing access to sports betting markets (including Pakistan cricket, PSL/T20, ICC tournaments, football and UFC), casino games, live dealer products and all other Platform features;
• Responsible Gambling: Monitoring betting and gaming patterns to identify potential indicators of problem gambling, administering deposit limits, loss limits, session time controls and self-exclusion requests;
• Customer Support: Handling enquiries, complaints and escalations submitted via email or live chat;
• Security and Fraud Prevention: Detecting and preventing unauthorised account access, bonus abuse, duplicate accounts, money laundering and other prohibited conduct;
• Platform Analytics and Improvement: Analysing aggregated usage data to understand how users interact with the Platform and to improve features, performance and usability;
• Marketing Communications: Sending promotional communications where you have provided explicit consent or where we have a legitimate interest in informing you of relevant offers — subject to your opt-out rights;
• Legal and Regulatory Compliance: Meeting applicable legal, regulatory and record-keeping obligations in the jurisdictions in which pk358 operates.

For users in jurisdictions where data protection legislation requires a documented legal basis for each processing activity, pk358 relies on the following bases:

• Contractual Necessity: Processing required to perform our contractual obligations to you under the pk358 Terms & Conditions — including account creation, payment processing and service delivery;
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC, anti-money-laundering obligations and record-keeping mandates;
• Legitimate Interests: Processing necessary for pk358's legitimate business interests, where those interests are not overridden by your privacy rights — including fraud prevention, security monitoring, Platform analytics and responsible gambling monitoring;
• Consent: Processing based on your freely given, specific and informed consent — primarily marketing communications. You may withdraw consent at any time via your account settings or by contacting support.

pk358 does not sell Personal Data. We share Personal Data only in the limited circumstances described below, and always subject to appropriate contractual data protection safeguards.

7.1 — Service Providers and Data Processors

We engage third-party service providers to assist with the operation of the Platform, including: identity verification services, payment processing providers, fraud detection and anti-money-laundering screening tools, cloud hosting and infrastructure providers, customer support platforms, and email and communication delivery services. These providers act as Data Processors and are contractually obligated to process Personal Data only in accordance with our instructions and this Policy.

7.2 — Regulatory and Legal Authorities

We may disclose Personal Data to competent regulatory, law enforcement or governmental authorities where required by applicable law, regulation, court order or legal process. We will, where legally permitted, notify you of any such disclosure request.

7.3 — Business Transfers

In the event of a merger, acquisition, business combination, sale of assets or restructuring involving pk358, Personal Data held by us may be transferred to the relevant successor entity, subject to the continuing application of privacy protections consistent with this Policy.

7.4 — Responsible Gambling Purposes

Where required by operator policy or regulatory obligation, anonymised or pseudonymised data relating to gambling behaviour may be shared with responsible gambling bodies or self-exclusion registries for the purposes of enforcing self-exclusion arrangements or identifying at-risk players.

Subject to applicable law and certain limitations arising from our legal obligations (particularly KYC and anti-money-laundering record-keeping requirements), you have the following rights with respect to your Personal Data:

To exercise any of the above rights, please contact the pk358 support team at [email protected]. We will respond to all valid data rights requests within a reasonable timeframe. We may request identity verification before processing any request to protect against unauthorised access to your data.

Please note that certain rights may be limited where we are required to retain data for legal or regulatory compliance purposes — for example, KYC documents and financial transaction records may be subject to mandatory retention periods that prevent immediate deletion.

pk358 retains Personal Data for as long as is necessary to fulfil the purpose for which it was collected, including any applicable statutory, regulatory or operational retention requirements. The following general retention principles apply:

• Active Account Data: Retained throughout the active lifetime of your account and for a defined period following account closure;
• KYC and Identity Documents: Retained for the period required by applicable anti-money-laundering legislation, typically a minimum of five years from the date of the most recent transaction or account closure, whichever is later;
• Financial Transaction Records: Retained in accordance with applicable financial record-keeping obligations, typically a minimum of five to seven years;
• Marketing Preference Data: Retained until you withdraw consent or opt out, plus a short suppression period to prevent re-entry of your contact details into active marketing lists;
• Support Communications: Retained for a period consistent with our complaint-handling obligations, typically one to three years following closure of the relevant enquiry;
• Technical and Log Data: Retained for security and analytics purposes for a rolling period, typically six to twelve months.

Upon expiry of the applicable retention period, Personal Data is either securely deleted from our systems or rendered permanently anonymous in a manner that prevents re-identification.

pk358 uses cookies and similar technologies — including pixel tags, web beacons and local storage — on the Platform. These technologies serve a range of purposes, from making the Platform work correctly to understanding how users navigate and interact with our content.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to view, block, delete and manage cookies on a per-site basis. Note that disabling essential cookies will impair Platform functionality, including login and payment processes.

pk358 operates through infrastructure and service providers that may be located in countries outside Pakistan. Where Personal Data is transferred to countries that do not have data protection laws equivalent to international standards, pk358 will implement appropriate safeguards to protect the data during transfer. These safeguards may include contractual data protection clauses, binding corporate rules or other mechanisms consistent with applicable data protection principles.

By using the Platform, you acknowledge that your Personal Data may be transferred to and stored in servers and systems located outside Pakistan for operational and service delivery purposes, subject to the safeguards described above.

The pk358 Platform is strictly for adults. We do not knowingly collect Personal Data from any individual under the age of 18, or under the higher minimum age required by the applicable operator licence jurisdiction. If you are under the required minimum age, you must not register an account, access the Platform or submit any Personal Data.

If pk358 becomes aware that Personal Data has been collected from a minor, we will take immediate steps to delete that information and close the associated account. Parents or guardians who believe a minor may have registered on pk358 should contact us immediately at [email protected] so we can investigate and take appropriate action.

pk358 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:

• Encryption: Personal Data is encrypted in transit using industry-standard TLS/SSL protocols. Sensitive data at rest is stored in encrypted form;
• Access Controls: Access to Personal Data within our organisation is restricted on a need-to-know basis, with role-based permissions, strong authentication requirements and audit logging;
• Fraud Detection Systems: Automated monitoring for suspicious account activity, unusual transaction patterns and potential abuse of the Platform;
• Regular Security Reviews: Periodic review of our security practices, infrastructure and access controls to identify and address vulnerabilities;
• Data Minimisation: Collection of only the minimum Personal Data necessary for each identified purpose, reducing the volume of sensitive information at risk;
• Staff Training and Obligations: Personnel with access to Personal Data are bound by confidentiality obligations and receive appropriate training on data handling procedures.

While pk358 takes security seriously and implements these measures in good faith, no security system is infallible. In the event of a data security incident that may affect your Personal Data, we will notify affected users in accordance with applicable notification requirements.

pk358 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, new features or services, or changes in regulatory guidance. Where material changes are made, we will take reasonable steps to inform users — for example via a notification in the Platform or an email to your registered address — prior to the changes taking effect.

The "Last reviewed" date displayed at the top of this page will be updated each time a material revision is made. Continued use of the Platform following the effective date of any update constitutes your acknowledgement of the revised Policy. If you do not agree to the updated Policy, please discontinue use of the Platform and contact us to request account closure.

If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your Personal Data by pk358, please contact our support team using the details below. All data protection enquiries should be submitted in writing via email so we can track and respond to them appropriately.

For enquiries relating specifically to self-exclusion, responsible gambling tools or player protection measures, please also refer to our Responsible Gambling page or raise a dedicated support request.