pk346 Privacy Policy

This Privacy Policy ("Policy") describes how pk346 ("pk346," "we," "us," or "our") collects, processes, stores, shares, and protects personal data relating to registered players, prospective players, and visitors to the pk346 website at pk346.org (the "Platform"). This Policy applies to all services offered through the Platform, including online casino games, sports betting markets, financial transaction processing, and customer support interactions.

By accessing the Platform, registering a pk346 account, or otherwise using our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately.

This Policy should be read alongside pk346's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into the overall legal framework governing your use of the pk346 Platform.

For the purposes of applicable data protection legislation, pk346 is the data controller responsible for your personal data. As data controller, pk346 determines the purposes for which and the means by which personal data is processed. pk346 operates under an international gaming license, which imposes specific data governance obligations that are reflected throughout this Policy.

All enquiries relating to the exercise of your data subject rights, or any other privacy concern, should be directed to pk346's designated data contact at [email protected]. Privacy-related correspondence will be treated with priority and handled by a member of our compliance team.

pk346 collects personal data through several distinct channels: directly from you at registration and during your use of the Platform; automatically through your device and browser interaction with our systems; and from third-party identity verification and payment processing providers. The categories of data we collect are as follows:

pk346 does not intentionally collect special category data (such as health data, racial or ethnic origin, or political opinions) except where strictly necessary to fulfil responsible gaming obligations — for example, where a player discloses a gambling addiction in connection with a self-exclusion request.

pk346 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose incompatible with those stated below without first obtaining your explicit consent or satisfying another lawful basis for processing.

• Account Registration & Management: To create and administer your pk346 account, verify your identity, confirm your eligibility to use the Platform (including age verification), and maintain accurate account records.
• Service Delivery: To provide access to casino games, sports betting markets, and all other features of the pk346 Platform in accordance with our Terms & Conditions.
• Financial Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, USDT TRC20, and Retail Cash; to maintain financial transaction records; and to process refunds where applicable.
• Regulatory Compliance: To fulfil our obligations under our international gaming license, including KYC verification, AML transaction monitoring, and age verification requirements.
• Responsible Gaming: To implement and monitor deposit limits, cooling-off periods, session reminders, and self-exclusion arrangements in accordance with our Responsible Gaming Policy.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, money laundering, and other security threats to the Platform and its players.
• Customer Support: To respond to your queries, process complaints, and maintain records of support interactions for quality assurance and dispute resolution purposes.
• Platform Improvement: To analyse usage patterns, measure Platform performance, identify technical issues, and improve the overall player experience. All analytics data is processed in aggregated or pseudonymised form where possible.
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and platform news by email. You may withdraw consent at any time by contacting [email protected].

pk346 processes your personal data on one or more of the following lawful bases, as applicable to each specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and pk346 (i.e., the Terms & Conditions), including account management, game access, and financial transaction processing.
• Legal Obligation: Processing required to comply with legal and regulatory requirements under our international gaming license, including KYC, AML, age verification, and record-keeping obligations.
• Legitimate Interests: Processing carried out in furtherance of pk346's legitimate business interests, including fraud prevention, security monitoring, and platform analytics, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where no other lawful basis applies — particularly for marketing communications and certain non-essential cookies — pk346 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without detriment to your use of the Platform.

pk346 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. Your data may, however, be shared with carefully selected third parties under strict contractual controls in the following circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 wallet service providers, to the extent necessary to process your financial transactions.
• Identity Verification Providers: Third-party KYC and AML service providers engaged to verify your identity and comply with our gaming license obligations.
• Game Content Providers: Certified third-party game studios that supply casino games accessible on the Platform. These providers may receive limited technical session data necessary to deliver game content.
• Regulatory Authorities: Licensing authorities, financial intelligence units, and law enforcement bodies, where disclosure is required by law or our gaming license conditions — including mandatory AML reporting obligations.
• Professional Advisers: Legal, audit, and compliance professionals engaged by pk346 under strict confidentiality obligations, where access to personal data is necessary for their professional services.

pk346 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or our gaming license conditions. The following general retention periods apply:

• Account & Identity Data: Retained for the duration of the account relationship and for a minimum of five years following account closure, in accordance with AML record-keeping requirements under our international gaming license.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction, as required by applicable financial regulation and our gaming license conditions.
• Customer Support Records: Retained for three years from the date of the final communication, to support dispute resolution and quality assurance processes.
• Technical & Usage Data: Retained for up to 13 months in identifiable form for security and analytical purposes, after which data is aggregated or deleted.
• Marketing Consent Records: Retained for the duration of the consent, plus three years following withdrawal, as evidence of consent having been validly obtained and revoked.
• Self-Exclusion Records: Retained permanently to prevent re-registration by excluded players, in accordance with responsible gaming obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

pk346 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes, but is not limited to:

• TLS encryption for all data transmitted between your device and the pk346 Platform
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records
• Role-based access controls ensuring that personal data is accessible only to authorised personnel who require it to perform their duties
• Regular vulnerability assessments and penetration testing of Platform infrastructure
• Intrusion detection systems and continuous security monitoring
• Multi-factor authentication requirements for internal administrative access to player data systems
• Staff data protection training and binding confidentiality obligations for all employees handling personal data

Despite these measures, no data transmission or storage system is completely immune to security risks. In the unlikely event of a data breach that materially affects your rights, pk346 will notify you without undue delay in accordance with our obligations under applicable data protection law and our gaming license conditions.

The pk346 Platform uses cookies and similar tracking technologies to deliver and improve the Platform experience. A cookie is a small text file placed on your device by a website server. Cookies cannot execute programs or deliver viruses to your device. The following categories of cookies are used on the pk346 Platform:

You may control cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling analytics cookies will not affect your gameplay experience. For detailed cookie management instructions, refer to your browser's help documentation.

Subject to applicable law and any overriding obligations under our international gaming license, you hold the following rights in relation to the personal data pk346 holds about you. To exercise any of these rights, please submit a written request to [email protected] with sufficient detail to identify your account. pk346 will respond within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data pk346 holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by pk346 be corrected or completed without undue delay.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations (for example, AML record-keeping requirements).
• Right to Restriction: You have the right to request that pk346 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or have objected to its processing.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to Object: You have the right to object to processing carried out on the basis of pk346's legitimate interests. pk346 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

The pk346 Platform is strictly intended for adults aged 21 years and above. pk346 does not knowingly collect or process personal data from any person under the age of 21. Age verification is a mandatory step in the pk346 registration process and is enforced as an ongoing obligation throughout the account lifecycle.

If pk346 discovers or is notified that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete all associated personal data to the extent not required to be retained for legal purposes, and report the incident in accordance with our gaming license obligations.

Parents and guardians who become aware that a minor has registered or attempted to register on the pk346 Platform are urged to contact us immediately at [email protected] so that the matter can be resolved without delay.

As an internationally licensed gaming operator, pk346 may process and store personal data in jurisdictions outside of Pakistan, including the jurisdiction in which our gaming license is held and the locations of our technology infrastructure providers. Where personal data is transferred internationally, pk346 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

Safeguards for international transfers include contractual data processing agreements with all third-party processors, standard contractual clauses where applicable, and diligence assessments of third-party security standards prior to engagement. pk346 does not transfer personal data to jurisdictions that do not offer an adequate level of data protection without first implementing compensating safeguards.

pk346 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or Platform functionality. The effective date displayed at the top of this Policy will be updated whenever a material change is made.

Where changes are material — meaning they meaningfully affect your rights or the way your data is handled — pk346 will notify you by displaying a prominent notice on the Platform and, where appropriate, by sending a notification to your registered email address. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how pk346 is protecting your information. The most current version is always accessible at pk346.org/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pk346 handles your personal data, please contact our compliance team using the details below. All privacy-related correspondence is treated as high priority and handled in strict confidence.

Privacy & Data Contact: [email protected]

Response Commitment: pk346 will acknowledge all privacy enquiries within 48 hours and provide a substantive response within 30 calendar days. Complex data subject access requests may require additional time, in which case we will inform you of the extended timeline and reason.

Live Chat: Available 24 hours a day, 7 days a week via the pk346 Platform for general account and support queries. Formal privacy requests and data subject rights exercises must be submitted by email to ensure a proper record is maintained.