pk395 Privacy Policy

01 Introduction

This Privacy Policy ("Policy") is issued by pk395 ("we", "us", "our", "the Platform") and applies to all users ("you", "your") who access or use the pk395 website, mobile platform, and associated services. pk395 is Pakistan's leading online casino and sports betting destination, serving players across Karachi, Lahore, Islamabad, Faisalabad, and beyond.

pk395 operates under an international gaming licence and is committed to handling your personal data responsibly, transparently, and in full compliance with applicable data protection obligations. This Policy sets out in clear, plain English precisely what personal data we collect, the purposes for which we use it, with whom we share it, how long we keep it, and the rights you have in relation to it.

By registering an account with pk395 or continuing to use the pk395 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue use of the platform and contact support to arrange account closure.

02 Personal Data We Collect

pk395 collects the following categories of personal data. In each case, we only collect what is genuinely necessary for the stated purpose.

pk395 does not collect sensitive special-category data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless specifically required by responsible gaming obligations — for instance, where a user discloses a gambling problem in the context of requesting self-exclusion support.

03 How We Collect Your Data

pk395 collects personal data through the following means:

• Direct Submission: Information you voluntarily provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
• Automated Technologies: When you use the pk395 platform, we automatically collect technical and usage data through cookies, server logs, and similar tracking technologies. See Section 07 (Cookies & Tracking) for full details.
• Third-Party Sources: We may receive identity verification data from KYC service providers, fraud screening data from payment processors such as JazzCash and EasyPaisa, and publicly available information for AML compliance purposes. All third-party data sources are vetted and bound by appropriate data sharing agreements.
• Support Interactions: Any information you provide when contacting pk395 support via live chat, WhatsApp, or email is recorded and stored as part of your account record for quality assurance and compliance purposes.

04 How We Use Your Personal Data

pk395 uses your personal data for the following specific purposes. We do not use your data for any purpose incompatible with those listed below without obtaining your explicit consent first.

• Account Administration: Creating and maintaining your pk395 account, authenticating your identity at login, managing your preferences and account settings, and processing your voluntary account closure requests.
• Identity & Age Verification: Confirming that you meet the 21+ age requirement and verifying your identity in compliance with our international gaming licence's KYC obligations before processing any withdrawal.
• Payment Processing: Facilitating deposits via JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and Cash OTC, and processing withdrawal requests to your verified payment method.
• Fraud Prevention & AML: Monitoring account activity and transactions to detect and prevent fraud, money laundering, and other financial crime, as required by our gaming licence obligations.
• Customer Support: Responding to your queries, complaints, and disputes in a timely and effective manner, and maintaining records of support interactions for quality assurance.
• Responsible Gaming: Monitoring your gaming behaviour to identify potential problem gambling indicators, administering deposit limits, cooling-off periods, and self-exclusion requests, and communicating responsible gaming information where appropriate.
• Platform Improvement: Analysing aggregated usage data to understand how players use pk395, identify popular features, and continuously improve the gaming experience.
• Marketing Communications: Sending promotional emails, SMS notifications, and platform announcements to users who have opted in to receive marketing. You may withdraw consent at any time.
• Legal Compliance: Meeting our obligations under applicable laws and our international gaming licence, including record-keeping requirements, regulatory reporting, and responding to lawful requests from competent authorities.

05 Legal Basis for Processing

pk395 processes your personal data on the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing required to perform the contract between you and pk395 — i.e., to operate your account, process transactions, and deliver the services you have registered for. Without this processing, pk395 cannot provide services to you.
• Legal Obligation: Processing required to comply with legal and regulatory obligations, including KYC verification, AML monitoring, record retention under our gaming licence, and responding to lawful authority requests.
• Legitimate Interests: Processing for fraud prevention, platform security, customer support quality assurance, and aggregated analytics, where our legitimate interests do not override your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications, non-essential cookies, and any other purpose for which pk395 has explicitly requested and obtained your consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

06 Data Sharing & Third Parties

pk395 does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

• Payment Processors: Your financial data is shared with payment service providers — including JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank — solely to process your deposit and withdrawal transactions. These providers operate under their own data protection obligations.
• KYC & Identity Verification Partners: Where required to verify your identity and age, we may share identity documents with vetted third-party KYC service providers. These providers are contractually bound to use your data exclusively for verification purposes.
• Fraud Prevention Services: Aggregated transaction data may be shared with fraud screening services to identify patterns indicative of financial crime or account abuse. Individual player data is not sold or shared for commercial purposes through this channel.
• IT Infrastructure Providers: pk395's platform is hosted on secure cloud infrastructure. Hosting and infrastructure partners access data only to the extent necessary to maintain service availability and security, and are bound by strict confidentiality obligations.
• Regulatory & Law Enforcement Authorities: pk395 will disclose personal data to competent regulatory bodies, gaming licence authorities, or law enforcement agencies where required to do so by law, court order, or in fulfilment of our gaming licence obligations. pk395 will notify you of such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of pk395's business, personal data held by pk395 may be transferred to the acquiring entity as part of that transaction. Affected users will be notified prior to any such transfer taking effect.

07 Cookies & Tracking Technologies

pk395 uses cookies and similar technologies (collectively "cookies") to provide a functional, secure, and personalised experience on our platform. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the pk395 platform to function. They maintain your login session, remember your language and display preferences, and protect the platform against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without impairing platform functionality.
• Performance & Analytics Cookies: These cookies collect aggregated, anonymised information about how users interact with pk395 — such as which pages are most visited and how long sessions last. This data is used exclusively to improve platform performance and user experience. No individual user is identified through performance cookies.
• Functional Cookies: These cookies allow pk395 to remember choices you make — such as your preferred payment method, display settings, or responsible gaming limits — to provide a more personalised experience on return visits.
• Security Cookies: These cookies assist in fraud detection and prevention by tracking unusual patterns of behaviour — such as rapid repeated login attempts from different geographic locations — that may indicate unauthorised access attempts.

pk395 does not use third-party advertising or tracking cookies that follow your browsing activity across websites unrelated to pk395. You can manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the pk395 platform.

08 Data Retention

pk395 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, and in accordance with applicable legal and regulatory retention requirements. The following retention periods apply:

• Account Data: Retained for the duration of your active account relationship with pk395, plus a period of 5 years following permanent account closure, to meet our gaming licence record-keeping obligations.
• Transaction & Financial Records: Retained for a minimum of 7 years following each transaction, as required by applicable anti-money laundering regulations and our international gaming licence conditions.
• KYC & Identity Documents: Retained for the duration of your account relationship plus 5 years post-closure, consistent with AML regulatory requirements.
• Support Communications: Retained for 3 years from the date of the relevant support interaction, for quality assurance and dispute resolution purposes.
• Marketing Data: Retained until you withdraw consent for marketing, following which your data is removed from active marketing lists within 10 business days. Suppression records (confirming your opt-out) are retained indefinitely to prevent accidental re-addition to marketing lists.
• Technical Logs: Server access logs and security event logs are retained for 12 months, after which they are deleted or permanently anonymised.

Upon expiry of the applicable retention period, pk395 securely deletes or irreversibly anonymises the relevant personal data. Anonymised data (from which no individual can be identified) may be retained indefinitely for aggregate statistical analysis.

09 Data Security

pk395 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Encryption: All data in transit between your device and pk395 servers is encrypted using TLS 1.3, the current industry standard for secure web communications.
• At-Rest Encryption: Sensitive data stored on pk395 servers — including identity documents, financial records, and account credentials — is encrypted using AES-256 encryption.
• Access Controls: Access to personal data within pk395 is restricted on a strict need-to-know basis. All staff with data access undergo background screening and receive regular data protection training.
• Two-Factor Authentication: pk395 offers and strongly encourages two-factor authentication (2FA) via SMS OTP for all user accounts, providing an additional layer of protection against unauthorised access.
• Independent Security Audits: pk395's infrastructure and application security are reviewed by independent third-party security auditors on a regular basis. Critical findings are remediated as a priority.
• Incident Response: pk395 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, pk395 will notify affected users and relevant regulatory authorities within the timeframes required by applicable law.

10 Your Data Rights

Subject to applicable law, you hold the following rights in relation to the personal data that pk395 holds about you. To exercise any of these rights, please contact pk395 support via the channels listed in Section 14.

• Right of Access: You have the right to request a copy of the personal data pk395 holds about you, along with information about how it is used and with whom it is shared. pk395 will respond to access requests within 30 days.
• Right to Rectification: If any personal data pk395 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented without undue delay.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is not absolute — we may be required to retain certain data to comply with legal obligations, such as AML record-keeping. Where erasure is not possible, we will explain the reason clearly.
• Right to Restrict Processing: You have the right to request that pk395 restrict the processing of your personal data in specific circumstances — for example, while the accuracy of your data is being disputed, or where you have objected to processing based on legitimate interests.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests. pk395 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights, or where the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time with immediate effect for future processing.

11 Children's Privacy

The pk395 platform is strictly intended for adults aged 21 and above. pk395 does not knowingly collect, process, or retain personal data from individuals under the age of 21 under any circumstances.

As part of the registration process, pk395 requires all users to confirm they are aged 21 or above and, through the KYC verification process, to provide government-issued proof of age. Accounts that are found to have been registered by individuals under the age of 21 will be closed immediately, all associated funds will be handled in accordance with applicable regulatory requirements, and the matter may be reported to relevant authorities.

12 Marketing Communications

pk395 may, with your explicit consent, send you promotional communications about bonuses, new games, PSL and cricket betting offers, and other platform features. These communications may be sent via email or SMS to the contact details registered on your account.

• Opt-In: Marketing communications are sent only to users who have actively opted in during registration or subsequently through their account settings. pk395 does not send unsolicited marketing to users who have not provided consent.
• Opt-Out: You may unsubscribe from marketing communications at any time by clicking the unsubscribe link in any marketing email, by adjusting your communication preferences in your pk395 account settings, or by contacting pk395 support directly. Opt-out requests will be processed within 10 business days.
• Service Communications: Please note that opting out of marketing communications does not affect service-related communications — such as transaction confirmations, account security alerts, responsible gaming notifications, or updates to this Privacy Policy — which are sent on the basis of contractual necessity and cannot be opted out of while your account is active.

13 Changes to This Privacy Policy

pk395 reserves the right to update or amend this Privacy Policy at any time. Changes may be necessitated by updates to applicable law, changes to our data processing activities, developments in our gaming licence obligations, or improvements to our privacy practices.

Where a material change is made to this Policy — particularly changes that affect how we use your personal data or your rights in relation to it — pk395 will provide reasonable advance notice via a prominent notification on the pk395 platform and, where applicable, by email to your registered address.

The "Effective Date" and "Last Updated" dates at the top of this Policy will be updated to reflect the date of the most recent revision. Your continued use of the pk395 platform following publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should discontinue use of the platform and contact support to arrange account closure.

14 Contact & Data Requests

If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of your data rights described in Section 10, please contact the pk395 privacy and data protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the pk395 platform. Average response time under 2 minutes. For data rights requests, please state clearly that your query relates to a data protection matter.
• WhatsApp Support: Available from 9:00 AM to 1:00 AM PKT, seven days a week.
• Email: [email protected] (plain text — not a clickable link). Please use the subject line "Privacy / Data Request" to ensure your message reaches the correct team. Allow up to 5 business days for an initial response to data-related queries.

When submitting a data rights request, please include your pk395 username, a clear description of your request (e.g., access, erasure, rectification), and a copy of a valid government-issued ID to confirm your identity. This allows pk395 to verify that the request is being made by the account holder and not by an unauthorised third party.

pk395 is committed to resolving all privacy-related concerns fairly and transparently. If you are not satisfied with pk395's response to your concern, you have the right to escalate the matter to the relevant data protection supervisory authority in the jurisdiction of our gaming licence.