pk350 Privacy Policy

// clause 01

1. Introduction & Scope

pk350 ("we", "us", "our") operates the online gaming platform accessible at pk350.org. This Privacy Policy explains how pk350 collects, uses, stores, and discloses personal information obtained from users ("you", "your") who access or register on the pk350 platform, including through any mobile-optimised interface or associated gaming services.

This Privacy Policy applies to all personal data processed in connection with your use of pk350, regardless of how you access the platform — whether via desktop browser, mobile browser, or any other device. It should be read alongside our Terms & Conditions, which govern the overall relationship between you and pk350.

By registering a pk350 account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you should not use the pk350 platform.

// clause 02

2. Personal Data We Collect

pk350 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and from third parties involved in identity verification and payment processing. The categories of personal data we collect are set out below.

pk350 does not collect sensitive personal data such as biometric data, racial or ethnic origin, political opinions, religious beliefs, or health data beyond what is strictly required for responsible gaming monitoring purposes (e.g., recording a self-exclusion request or a problem gambling indicator flagged by the user themselves).

// clause 03

3. How We Use Your Personal Data

pk350 uses your personal data only for the purposes described below. We do not use your data for purposes incompatible with those listed here without first obtaining your explicit consent or unless required to do so by applicable law.

• Account Creation & Management: To register your pk350 account, verify your identity through CNIC-based KYC, maintain your account profile, and provide you with access to the Platform's features.
• Transaction Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK, and to maintain accurate financial records associated with your account.
• Platform Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, multi-accounting, and other forms of prohibited conduct as defined in the pk350 Terms & Conditions.
• Regulatory Compliance: To fulfil pk350's obligations under applicable gaming regulations, anti-money laundering (AML) requirements, and any lawful request from a competent regulatory authority or law enforcement body.
• Responsible Gaming: To monitor gaming patterns for indicators of problem gambling behaviour, to enforce self-exclusion and cooling-off periods activated by you, and to deliver responsible gaming communications where warranted.
• Customer Support: To respond to your queries, complaints, and requests submitted via live chat or email, and to maintain records of those communications for quality and compliance purposes.
• Platform Improvement & Analytics: To analyse aggregated, anonymised usage data to improve Platform performance, user experience, and the quality of our gaming products.
• Marketing Communications: To send you promotional offers, bonus notifications, and relevant updates — but only where you have opted in to receive such communications. You may withdraw marketing consent at any time through your account settings.

// clause 04

4. Legal Basis for Processing

pk350 processes your personal data under the following legal bases, depending on the nature and purpose of the processing activity:

1. Contractual Necessity: Processing required to fulfil the contract between you and pk350 — specifically, to operate your account, process bets, and handle deposits and withdrawals.
2. Legal Obligation: Processing required to comply with applicable laws, including AML regulations, KYC requirements, and any regulatory reporting obligations imposed on pk350 as a licensed gaming operator.
3. Legitimate Interests: Processing carried out in pk350's legitimate interests, including fraud detection, platform security, and responsible gaming monitoring — where those interests are not overridden by your fundamental rights and freedoms.
4. Consent: Processing based on your freely given, specific, and informed consent — including marketing communications and optional analytics participation. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

// clause 05

5. Data Sharing & Third-Party Disclosure

pk350 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Your personal data may, however, be shared with the following categories of third parties in the circumstances described:

• Payment Processors: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK receive only the minimum transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and regulatory frameworks.
• KYC & Identity Verification Providers: Licensed third-party KYC service providers may process your CNIC data and identity documents for the purpose of verifying your age and identity. These providers are contractually bound to process your data only for this purpose.
• Regulatory Authorities: pk350 will disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by law, court order, or applicable regulatory obligation. pk350 will notify you of such disclosures where legally permitted to do so.
• Game Content Providers: Licensed game providers whose titles appear on pk350 may receive session-level technical data (e.g., bet amounts, game outcomes) necessary for game operation and auditing purposes. They do not receive personally identifiable information such as your CNIC or contact details.
• IT & Infrastructure Partners: pk350's hosting, server, and platform infrastructure providers may have incidental access to data as part of their service delivery. These providers are bound by strict data processing agreements and confidentiality obligations.

All third parties with whom pk350 shares personal data are required to maintain appropriate technical and organisational security measures and to process that data only in accordance with pk350's documented instructions and applicable data protection law.

// clause 06

6. Data Security Measures

pk350 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your browser and pk350 servers
• AES-256 encryption for sensitive data at rest, including CNIC records and financial data
• Role-based access controls ensuring that pk350 staff can only access personal data relevant to their specific job function
• Multi-factor authentication for internal system access by pk350 personnel
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Automated anomaly detection systems that flag unusual login patterns, IP-location mismatches, and other account security indicators
• Incident response procedures with defined timelines for breach containment, internal escalation, and user notification where required

While pk350 takes all reasonable steps to protect your data, no online system is entirely immune to risk. You are responsible for maintaining the confidentiality of your pk350 account credentials and for notifying pk350 immediately at [email protected] if you suspect any unauthorised access to your account.

// clause 07

7. Data Retention

pk350 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain an active account relationship with you, or as required by applicable regulatory obligations. The retention schedules below apply unless a longer period is required by law:

Following the expiry of the applicable retention period, your personal data will be securely deleted or anonymised such that it can no longer be associated with you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

// clause 08

8. Cookies & Tracking Technologies

pk350 uses cookies and similar technologies (such as web beacons and local storage) to enable Platform functionality, maintain your session, and gather analytical data about Platform usage. The categories of cookies used by pk350 are as follows:

• Essential Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Analytical Cookies: Used to understand how users interact with pk350 — including pages visited, session duration, and navigation paths. This data is aggregated and anonymised and is used solely for Platform improvement purposes.
• Functionality Cookies: Used to remember your preferences such as language settings, game history display options, and responsible gaming tool configurations.
• Security Cookies: Used to detect and prevent fraudulent activity, including flagging unusual login behaviour and tracking IP-to-session associations for account security purposes.

pk350 does not use third-party advertising cookies or behavioural tracking cookies that profile you across external websites. You may manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent certain Platform features from functioning correctly.

// clause 09

9. Your Data Rights

As a pk350 user, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact pk350 at [email protected] with a clear description of your request and sufficient identification to allow us to locate your account.

• Right of Access: You may request a copy of the personal data pk350 holds about you. pk350 will provide this within 30 days of receiving a valid request.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held by pk350. Minor account details (such as contact information) can be updated directly via your account dashboard.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to pk350's regulatory retention obligations. Note that AML and KYC-related records must be retained for the periods specified in Section 7 and cannot be deleted on request during those periods.
• Right to Restrict Processing: You may request that pk350 restrict processing of your data in certain circumstances — for example, while a dispute is being investigated.
• Right to Data Portability: You may request a structured, machine-readable copy of personal data you have provided to pk350, where technically feasible.
• Right to Object: You may object to processing of your data based on pk350's legitimate interests, including direct marketing. pk350 will cease processing for that purpose upon receipt of a valid objection unless compelling legitimate grounds exist that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing that occurred prior to withdrawal.

pk350 will respond to all data rights requests within 30 calendar days. In complex cases, this may be extended to 60 days, in which case pk350 will notify you of the extension and provide a reason for the delay.

// clause 10

10. Children's Privacy & Age Verification

pk350 is strictly an adults-only platform. Registration and participation in real-money gaming on pk350 is limited to individuals aged 21 years and above. pk350 does not knowingly collect personal data from any person under the age of 21.

pk350 enforces mandatory CNIC-based age verification for all users prior to processing any withdrawal request. The CNIC verification process confirms both identity and age as recorded with NADRA. Any account found to belong to a person under 21 years of age will be immediately and permanently closed, all associated funds forfeited, and the matter reported to the relevant authorities where required by law.

If you believe that pk350 has inadvertently collected personal data from a person under 21, please contact us immediately at [email protected]. pk350 will promptly investigate and, where confirmed, delete all data associated with the underage individual.

// clause 11

11. Changes to This Privacy Policy

pk350 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or Platform features. Where material changes are made — particularly those that affect how your personal data is used or shared — pk350 will notify registered users by email to the address held on their account at least 14 days before the revised Privacy Policy takes effect.

The date of the most recent revision is always displayed at the top of this document. Your continued use of the pk350 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of and consent to the updated terms. If you do not agree with the revised Privacy Policy, you must close your account before the effective date of the changes.

Minor changes — such as formatting corrections, clarifications that do not alter the substance of existing provisions, or the addition of new data categories that result directly from new Platform features — may be published without advance notice to users.

// clause 12

12. Contact & Data Enquiries

For all privacy-related enquiries, data rights requests, or concerns regarding the handling of your personal data by pk350, please contact our support team using the following details:

• Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available on-site daily from 9:00 AM to midnight PKT
• Response Time: Data rights requests acknowledged within 5 business days; substantively responded to within 30 calendar days

When submitting a data rights request, please include your pk350 account username, the nature of your request, and sufficient identifying information to allow pk350 to verify your identity before processing the request. pk350 will not process data rights requests from unverified senders.

This Privacy Policy was last reviewed and updated on 1 January 2026 and is effective as of that date.