Privacy Policy
for pk3888 Users

This Privacy Policy ("Policy") is published by pk3888 ("pk3888", "we", "us", "our") and applies to all personal data collected, processed and stored in connection with the pk3888 platform accessible at https://pk3888.cam (the "Platform"). It applies to all registered users, visitors and any other individuals whose personal data we process in connection with the Platform.

pk3888 is an English-language online betting and casino information platform serving users primarily in Pakistan and other permitted jurisdictions. In the course of providing our services — including account registration, sports betting, live casino products, customer support and payment processing — we necessarily collect and process certain categories of personal data. This Policy explains precisely how we do that and the protections we apply.

This Policy must be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference. By registering an Account or using the Platform, you acknowledge that you have read and understood this Policy.

The following defined terms are used throughout this Privacy Policy:

pk3888 collects the following categories of personal data in connection with the Platform:

Where you have provided optional data — such as a phone number or preferred language — we will use this data only for the purpose for which it was provided and will not use it for unrelated purposes without your consent.

pk3888 collects personal data through the following means:

4.1 Direct Collection

Data you provide directly when you register an Account, complete identity verification, make a deposit or withdrawal, contact customer support, or submit any form on the Platform. This includes all information you enter into registration fields, KYC document uploads and support chat interactions.

4.2 Automated Technical Collection

Data collected automatically as you interact with the Platform, including IP addresses, device identifiers, browser fingerprinting data, session cookies, clickstream data and login timestamps. This data is collected via standard web analytics and security monitoring tools.

4.3 Third-Party Sources

In certain circumstances, pk3888 may receive personal data from third-party KYC verification providers, payment processors, fraud-prevention services and screening databases. This data is used solely to verify your identity, process payments and fulfil our AML and compliance obligations. Any such third-party provider operates under appropriate data processing agreements with pk3888.

Under applicable data protection law, every processing activity must have a valid lawful basis. pk3888 processes personal data under the following lawful grounds:

• Contractual Necessity: Processing required to perform the contract between pk3888 and the user — including account creation, payment processing, KYC verification and delivery of Platform services;
• Legal Obligation: Processing required to comply with applicable laws and regulations — including Anti-Money Laundering (AML) obligations, age verification requirements, and responses to lawful regulatory or law-enforcement requests;
• Legitimate Interests: Processing necessary for pk3888's legitimate business interests, where those interests are not overridden by your rights — including fraud prevention, security monitoring, platform analytics and responsible gambling monitoring;
• Consent: Processing for which we have obtained your explicit prior consent — including certain marketing communications and optional personalisation features. You may withdraw consent at any time without affecting the lawfulness of prior processing.

pk3888 uses collected personal data for the following purposes:

• To create, manage and maintain your Account on the Platform;
• To verify your identity and age in compliance with KYC requirements;
• To process deposits and withdrawals and administer your Account balance;
• To comply with Anti-Money Laundering (AML), Counter-Terrorism Financing (CTF) and other applicable financial crime prevention obligations;
• To detect, investigate and prevent fraud, cheating, collusion and other prohibited conduct on the Platform;
• To monitor responsible gambling indicators and, where appropriate, apply responsible gambling measures such as account restrictions or self-exclusion;
• To provide customer support and resolve disputes;
• To send transactional and account-related communications — including deposit confirmations, withdrawal notifications and security alerts;
• To improve, test and optimise Platform features and user experience based on aggregated or anonymised usage data;
• To send promotional communications where you have provided consent or where permitted under applicable law — you may opt out at any time;
• To comply with applicable legal and regulatory obligations and to respond to lawful requests from competent authorities.

pk3888 does not use automated decision-making — including profiling — that produces legal or similarly significant effects in relation to users, without appropriate human review and the ability to contest such decisions.

pk3888 does not sell or rent your personal data to third parties for their own commercial use. We may share personal data with third parties only in the following circumstances:

7.1 Authorised Service Providers

We engage third-party service providers who process personal data on our behalf as Data Processors under appropriate written agreements. These include:

• Payment processors — to facilitate deposits and withdrawals (e.g. services connected to payment rails used in Pakistan such as mobile wallets and bank transfers — referenced for context only and not implying endorsement of any specific provider);
• KYC and identity verification providers — to verify user identity documents, age and address;
• Fraud prevention and AML screening services — to screen users against sanctions lists and fraud databases;
• Customer support platforms — to manage live chat and help-centre interactions;
• Analytics and platform monitoring tools — to analyse Platform usage and performance using aggregated or pseudonymised data.

7.2 Legal and Regulatory Disclosure

pk3888 may be required to disclose personal data to regulatory authorities, law enforcement agencies or courts where required by applicable law — including in response to lawful court orders, subpoenas, regulatory investigations or AML reporting obligations.

7.3 Business Transfers

In the event of a merger, acquisition, sale of assets or restructuring of pk3888, personal data may be transferred to the relevant acquiring entity as part of the transaction, subject to equivalent data protection obligations.

pk3888 operates internationally and may transfer personal data to jurisdictions outside Pakistan, including jurisdictions in which our servers, Data Processors or group companies are located. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to the jurisdiction in which it was collected, we implement appropriate safeguards — which may include standard contractual clauses or other recognised transfer mechanisms — to ensure that your data remains protected.

If you require further information about the specific safeguards applied to international transfers of your personal data, you may submit a request through the support channels listed in Section 16 of this Policy.

pk3888 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal, regulatory or contractual obligations. The following general retention principles apply:

• Account Data and Transaction Records: Retained for a minimum of five (5) years from the date of Account closure or last transaction, in compliance with anti-money laundering and financial record-keeping obligations. Specific legal requirements may mandate a longer period in certain jurisdictions;
• KYC and Identity Documents: Retained for the duration required by the operator's applicable licence and AML regulations, typically a minimum of five (5) years from the date of verification;
• Support Communications: Retained for up to two (2) years from the date of the interaction, for quality assurance and dispute resolution purposes;
• Technical and Usage Data: Retained for up to twenty-four (24) months, after which it is aggregated and anonymised or deleted;
• Marketing Consent Records: Retained until you withdraw consent, plus a reasonable period thereafter to demonstrate the lawfulness of prior communications.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data governance procedures.

pk3888 uses cookies and similar tracking technologies on the Platform to support essential functionality, improve user experience, analyse usage patterns and deliver relevant content. The following categories of cookies may be in use:

You may manage your cookie preferences through your browser settings. Note that disabling non-essential cookies will not affect your ability to use core Platform features but may limit certain personalisation and analytics functions. For more granular cookie management, please use the cookie preference tool accessible on the Platform.

Subject to applicable data protection law and certain legitimate restrictions (such as AML record-keeping obligations), you have the following rights in respect of your personal data held by pk3888:

To exercise any of the above rights, please submit a request to our Data Support team through the in-platform live chat or help centre, or by email to [email protected] (plain text — not a clickable link). We will respond to verified rights requests within 30 calendar days of receipt.

The pk3888 Platform is intended exclusively for adults aged 18 years and over, or the higher minimum age required by the operator's applicable licence jurisdiction. We do not knowingly collect personal data from individuals under the age of 18.

If we become aware that personal data belonging to a person under the age of 18 has been collected through the Platform — whether through misrepresentation at registration or any other means — we will take immediate steps to suspend the relevant Account, delete the associated personal data (subject to any mandatory retention obligations), withhold any associated funds and, where required, report the incident to relevant authorities.

Parents and guardians who believe that a minor may have registered an Account on pk3888 are urged to contact our support team immediately through the in-platform live chat or help centre.

pk3888 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration or destruction. These measures include, but are not limited to:

• SSL/TLS encryption for all data in transit between the user's device and our servers;
• Encryption at rest for sensitive personal data and identity documents stored on our servers;
• Role-based access controls limiting access to personal data to authorised personnel only, on a strict need-to-know basis;
• Regular security assessments, penetration testing and vulnerability scanning of Platform infrastructure;
• Two-factor authentication (2FA) options available to all registered users for Account login;
• Intrusion detection systems and real-time security monitoring of Platform access logs;
• Formal data breach response procedures with defined notification timescales where required by applicable law.

While we apply rigorous security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and for notifying pk3888 immediately if you suspect any unauthorised access to your Account.

The Platform may contain references to third-party services, payment providers and regulatory resources. Where such references include contextual links, pk3888 is not responsible for the privacy practices, data processing activities or security of any third-party websites or services. We recommend that you review the privacy policies of any third-party service before providing personal data to them.

References within pk3888 content to payment services familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are provided solely as contextual payment-rail references and do not constitute an endorsement of, or data-sharing arrangement with, those providers unless explicitly stated in your Account cashier documentation.

pk3888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or regulatory requirements. Where changes are material — affecting how we use or share your personal data — we will provide advance notice via the Platform or by email to your registered address before the changes take effect.

The version number and effective date of the current Policy are displayed at the top of this page. We recommend reviewing this page periodically. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the Platform and request Account closure.

If you have questions, concerns or requests related to this Privacy Policy or the processing of your personal data by pk3888, please contact our Data Support team through one of the following channels:

• Live Chat: Available in-platform, 24 hours a day, 7 days a week — the fastest route for urgent privacy queries;
• Help Centre: Accessible via the support section within your pk3888 Account — includes a dedicated Data Rights request form;
• Email: [email protected] (plain text — this is not a clickable link; please copy the address manually).

We aim to acknowledge all privacy-related enquiries within 3 business days and to provide a substantive response within 30 calendar days of receiving a verified request.

If you are dissatisfied with our handling of your personal data or our response to a data rights request, you have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction under whose laws the operator holds its primary licence. Details of the relevant authority will be provided upon request.

pk3888 serves users in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and across Pakistan, subject to applicable local laws, our Terms & Conditions and this Privacy Policy.