pak368 Privacy Policy — How We Protect Your Data

pak368 is committed to protecting the privacy and personal data of all users of the pak368 platform, including Pakistani users who access our cricket betting, online casino, live dealer, and arcade game services. This Privacy Policy explains, in plain terms, what personal data pak368 collects, why we collect it, how long we keep it, who we share it with, and what rights you have in relation to your own data.

This Policy applies to:

• All registered users of the pak368 platform
• Visitors to the pak368 website who have not yet registered an account
• Individuals who contact pak368 customer support, including via live chat or email
• Any person whose personal data is processed in connection with a pak368 account (for example, individuals conducting KYC verification on behalf of an account holder)

This Policy should be read alongside the pak368 Terms and Conditions, which govern your use of the platform generally. In the event of any conflict between this Privacy Policy and the Terms and Conditions specifically relating to data handling, this Privacy Policy shall take precedence.

For the purposes of this Privacy Policy, pak368's operating entity — as identified in the platform's licensing information — acts as the data controller responsible for all personal data collected through the pak368 platform. As data controller, pak368 determines the purposes and means by which personal data is processed.

Where pak368 engages third-party service providers to process data on its behalf (for example, payment processors such as JazzCash or EasyPaisa, fraud detection providers, or cloud hosting infrastructure), those third parties act as data processors under pak368's instruction and are bound by data processing agreements that require them to handle data only for the purposes specified by pak368.

For all privacy-related communications, enquiries, and data subject requests, please contact: [email protected]. Include "Privacy Request" in your subject line to ensure correct routing to our data protection team.

pak368 collects personal data through multiple touchpoints across the platform lifecycle. The categories of data collected and their sources are set out below:

3.1 Registration Data

When you create a pak368 account, we collect:

• Full legal name (as it appears on your CNIC)
• Date of birth (to verify you are 21 years of age or older)
• Pakistani mobile number (for OTP verification and payment method linkage)
• Email address (where provided)
• Chosen username and account password (password stored in hashed, non-reversible form)
• Preferred language (Urdu or English)

3.2 Identity Verification (KYC) Data

As required under our international gaming license, pak368 conducts Know Your Customer (KYC) verification before processing withdrawals and at other points in the account lifecycle. KYC data collected may include:

• Scanned copy of your Pakistani CNIC (both sides)
• Selfie photograph for facial verification purposes
• Proof of address documentation (where required for enhanced due diligence)
• Source of funds documentation for high-value transactions (as required by anti-money laundering regulations)

3.3 Financial Transaction Data

pak368 records all financial transactions on the platform, including deposits made via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or 1LINK; withdrawal requests and settlement records; bonus crediting and wagering activity; and bet settlement records in PKR.

3.4 Gaming Activity Data

pak368 logs all platform gaming activity, including game sessions, bet history, game outcomes, bonus participation, and session duration data. This data is used for platform integrity purposes, responsible gaming monitoring, dispute resolution, and regulatory reporting obligations.

3.5 Technical & Device Data

When you access pak368, our systems automatically collect technical information including your IP address, device type and operating system, browser type and version, session identifiers, and pages accessed within the platform. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

3.6 Support Communications

When you contact pak368 customer support via live chat or email, the contents of that communication, including any personal data you share during the interaction, are retained for quality assurance, staff training, and dispute resolution purposes.

pak368 uses the personal data collected for the following purposes:

pak368 processes personal data on one or more of the following legal grounds:

• Contract Performance: Processing necessary to provide the services you have registered for — including account management, game delivery, deposit processing, and withdrawal settlement — is undertaken on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with our international gaming license conditions, including KYC verification, anti-money laundering record keeping, responsible gaming monitoring, and mandatory regulatory reporting, is undertaken on the basis of legal obligation.
• Legitimate Interests: Processing for fraud detection, account security, platform integrity monitoring, and customer support quality assurance is undertaken on the basis of pak368's legitimate interests, provided those interests are not overridden by your fundamental privacy rights.
• Consent: Where pak368 sends promotional communications, we do so only on the basis of your explicit consent obtained at registration or through your account communication preferences. You may withdraw consent for promotional communications at any time without affecting your ability to use the platform.

pak368 does not sell, rent, or trade your personal data. We share personal data only in the following limited and controlled circumstances:

6.1 Payment Processors

When you make a deposit via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or 1LINK, the necessary financial data is shared with those payment providers to complete the transaction. Each payment provider operates under their own privacy policy and terms of service, which govern their handling of your financial data. pak368 shares only the minimum data required to process each transaction.

6.2 Identity Verification Providers

pak368 may engage third-party KYC and identity verification service providers to assist with CNIC verification and age confirmation. These providers are engaged under strict data processing agreements and may not use your data for any purpose other than the specific verification task assigned by pak368.

6.3 Regulatory Authorities

pak368 is required under its international gaming license to report certain information to its regulatory authority, including anti-money laundering suspicious activity reports. Where legally required, pak368 will disclose personal data to regulatory bodies, law enforcement agencies, or other governmental authorities without prior notice to the affected user, to the extent permitted by applicable law.

6.4 Technical Infrastructure Providers

pak368 uses third-party cloud hosting, content delivery, and fraud detection infrastructure. These providers may process personal data as part of their service delivery but are bound by data processing agreements requiring them to protect the data and use it only for the contracted purpose.

pak368 uses cookies and similar tracking technologies on the platform for the following purposes:

• Essential Cookies: Required for platform functionality, including maintaining your login session, remembering your game preferences, and ensuring security features operate correctly. These cookies cannot be disabled without impairing platform function.
• Analytics Cookies: Used to understand aggregate platform usage patterns — which game sections are most visited, where users encounter navigation difficulties, and how different device types perform on the platform. Analytics data is processed in anonymised or aggregated form where possible.
• Security Cookies: Used by pak368's fraud detection systems to identify and flag unusual access patterns that may indicate account compromise or fraudulent activity.

pak368 does not use third-party advertising cookies or pixel tracking technologies for external advertising purposes. Cookie preferences can be managed through your browser settings. Please note that disabling essential cookies will impair your ability to use the pak368 platform effectively.

pak368 retains personal data for the periods specified below, after which data is securely deleted or anonymised:

• Account Data: Retained for the duration of your account's active status and for a minimum of five (5) years following account closure, as required by our international gaming license's record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure, or longer if required by applicable anti-money laundering regulations or regulatory direction.
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, consistent with standard financial record-keeping requirements under our gaming license.
• Gaming Activity Logs: Retained for a minimum of three (3) years for dispute resolution and responsible gaming monitoring purposes, and longer where required by regulatory obligation.
• Support Communications: Retained for a minimum of two (2) years for quality assurance and dispute resolution purposes.
• Technical & Device Data: Log data retained for up to twelve (12) months for security and fraud detection purposes.

pak368 employs a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, or destruction. Security measures in place include:

• SSL/TLS Encryption: All data transmitted between your device and pak368's servers is encrypted using TLS protocols. The SSL padlock visible in your browser confirms that your connection is secure at all times when using pak368.
• Encryption at Rest: Personal data stored on pak368's systems — including KYC documents, financial records, and account credentials — is encrypted at rest using industry-standard cryptographic algorithms.
• Password Security: Account passwords are hashed using a one-way cryptographic function before storage. pak368 systems cannot retrieve your actual password — it can only be verified at login. Even in the event of a data breach, hashed passwords are not usable by attackers without extensive computational resources.
• Access Controls: Access to personal data within pak368's systems is restricted to staff members with a legitimate operational need. Role-based access controls and comprehensive audit logging ensure that data access is tracked and accountable.
• Incident Response: pak368 maintains a data breach response plan. In the event of a data breach that is likely to result in a risk to affected users, pak368 will notify the relevant regulatory authority and affected users in accordance with applicable notification obligations under our gaming license.

While pak368 applies robust security measures, no internet-based system can guarantee absolute security. Users are encouraged to take their own precautions, including using strong unique passwords, enabling two-factor authentication, and accessing pak368 only from trusted devices and networks — avoiding public Wi-Fi hotspots particularly when conducting financial transactions.

As a user of pak368, you have the following rights in relation to your personal data, exercisable by contacting [email protected]:

pak368 will respond to all data rights requests within 30 calendar days of receipt. There is no charge for exercising your data rights. Where a request is manifestly unfounded or excessive, pak368 may decline or charge a reasonable administrative fee, with written explanation provided.

pak368 is strictly an adults-only platform. Persons under the age of 21 are absolutely prohibited from registering an account or using any pak368 service. pak368 does not knowingly collect personal data from individuals under 21 years of age.

Age verification is conducted as part of the pak368 KYC process, which requires CNIC submission confirming the account holder is 21 or older before withdrawals are processed. Where pak368 becomes aware that personal data of an individual under 21 has been collected — for example, through the discovery of a fraudulently created account — that account will be immediately closed, the data will be deleted to the extent permitted by applicable law and our gaming license obligations, and the matter will be reported to the relevant regulatory authority.

Parents and guardians who believe an underage individual may have registered a pak368 account should contact [email protected] immediately. Such reports are treated as urgent and are escalated to pak368's compliance team for same-day investigation.

As pak368 operates under an international gaming license and uses globally distributed technical infrastructure, personal data may be processed in jurisdictions outside Pakistan. In such cases, pak368 ensures that appropriate data protection safeguards are in place before any transfer occurs, including:

• Data processing agreements with all third-party service providers that process personal data on pak368's behalf, requiring those providers to maintain data protection standards consistent with our licensing obligations
• Where data is transferred to cloud infrastructure providers, use of providers whose data protection frameworks meet the standards required by our international gaming regulator
• Ongoing monitoring of the data protection standards maintained by all third-party processors engaged by pak368

pak368 may update this Privacy Policy from time to time to reflect changes in our data processing practices, new features on the platform, changes in applicable law or regulatory requirements, or feedback from our user community.

Material changes to this Privacy Policy will be communicated to registered users via their registered contact details at least 14 days before the amended Policy takes effect, except where an immediate amendment is required to comply with a new legal or regulatory obligation. The "Effective Date" and "Last Updated" fields at the top of this document will reflect the current version date.

Your continued use of the pak368 platform after an amended Privacy Policy takes effect constitutes your acknowledgement of the updated Policy. If you disagree with any material change to this Policy, please contact [email protected] before the amendment takes effect to discuss your options, which may include account closure and data deletion to the extent permitted by our regulatory retention obligations.

For all privacy-related queries, data subject requests, and concerns about how pak368 handles your personal data, please contact us through the following channels:

• Email: [email protected] — please include "Privacy Request" or "Data Subject Request" in your subject line for correct routing
• Live Chat: Available within your pak368 account dashboard after login — reference "Privacy" or "Data Request" so the agent can escalate correctly
• Support Hours: Urdu and English support available 24 hours a day, 7 days a week including Pakistani public holidays
• Response Time: Privacy and data subject requests are acknowledged within 5 business days and resolved within 30 calendar days

If you believe pak368 has failed to adequately address a privacy concern, you have the right to escalate the matter to pak368's regulatory authority as specified in our international gaming license information, which is published in the platform footer.