pk393 Privacy Policy

pk393 is an online casino and sports betting platform operated under an international gaming licence, serving registered users primarily across Pakistan including Karachi, Lahore, Faisalabad, Islamabad, Rawalpindi, and other cities. The pk393 platform is accessible at pk393.app.

For the purposes of this Privacy Policy, pk393 acts as the data controller in respect of all personal information collected from users of the Platform. As data controller, pk393 determines the purposes and means by which your personal data is processed.

This Privacy Policy applies to all users of the pk393 Platform, including registered Account holders and unregistered visitors browsing pk393.app. It covers all personal data collected through the website, live chat support channels, email correspondence, and any other means by which you interact with pk393.

pk393 collects personal information from you in the following ways: directly when you provide it to us, automatically when you use the Platform, and from third-party sources where permitted by applicable law. The categories of personal information we collect include:

pk393 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data, or health data. If you voluntarily disclose such information through support interactions, pk393 will handle it with heightened care and will not use it for any purpose other than responding to your specific enquiry.

pk393 uses your personal information only for legitimate purposes directly related to operating the Platform and providing services to you. The specific purposes for which we process your personal data are as follows:

• Account Creation and Management: To register your Account, verify your identity, maintain your Account settings, and provide access to the full range of pk393 products and services.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, SadaPay, and USDT TRC20, and to maintain accurate financial records of all transactions.
• KYC and Age Verification: To verify that you are 21 years of age or older, to confirm your identity in accordance with our anti-money laundering obligations, and to ensure compliance with applicable regulatory requirements.
• Platform Operation: To deliver the cricket betting, live casino, slot, and other gaming services available on pk393, including personalising your experience based on your preferences and usage patterns.
• Responsible Gaming: To monitor wagering behaviour for indicators of problem gambling, to apply and enforce responsible gaming tools (deposit limits, cooling-off periods, self-exclusion), and to fulfil our duty of care obligations to users.
• Fraud Prevention and Security: To detect, investigate, and prevent fraud, money laundering, cheating, bonus abuse, and any other prohibited conduct as defined in the pk393 Terms and Conditions.
• Customer Support: To respond to your enquiries, resolve complaints, process dispute submissions, and provide technical assistance.
• Marketing Communications: To send you promotional offers, PSL cricket betting specials, bonus notifications, and other marketing materials — but only where you have provided explicit consent or where we have a legitimate interest and you have not opted out.
• Legal Compliance: To comply with applicable laws, respond to lawful requests from regulatory authorities or law enforcement agencies, and enforce our contractual rights under the Terms and Conditions.
• Platform Improvement: To analyse usage data, conduct A/B testing, and improve the performance, design, and content of the pk393 Platform.

pk393 processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual Necessity: Processing required to perform our contract with you — specifically, operating your Account, processing payments, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering regulations, age verification obligations, and responses to lawful authority requests.
• Legitimate Interests: Processing conducted in pursuit of pk393's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and improving the Platform — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your explicit, freely given, informed, and unambiguous consent — primarily for marketing communications. You may withdraw consent at any time by contacting pk393 support or using the opt-out link in any marketing email.

Where processing is based on consent, withdrawal of that consent will not affect the lawfulness of processing carried out before the withdrawal. Where processing is based on legitimate interests, you have the right to object — see Section 9 for details of how to exercise this right.

pk393 does not share your personal information with third parties except in the following circumstances:

• Payment Processors: Your financial data is shared with the relevant payment service providers (JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, SadaPay, or USDT network operators) strictly to process your deposit or withdrawal transaction. These providers operate under their own privacy policies and data protection frameworks.
• Identity Verification Providers: Your identity documents and personal details may be shared with licensed KYC and anti-money laundering verification service providers to fulfil our regulatory obligations.
• Game Software Providers: Certain technical and gameplay data may be shared with the third-party game studios whose titles are hosted on pk393, to the extent required for game delivery and fairness certification purposes.
• Analytics and Technology Providers: Aggregated or pseudonymised usage data may be shared with trusted technology partners who assist in operating, maintaining, and improving the Platform. These providers are contractually bound to process data only on pk393's instructions.
• Regulatory Authorities and Law Enforcement: pk393 may disclose personal information to competent authorities, regulators, courts, or law enforcement agencies where required to do so by law, court order, or lawful regulatory instruction.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of pk393's business, your personal information may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer before it takes effect where reasonably practicable.

pk393 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage patterns, and deliver a personalised experience. The types of cookies we use are described below:

You may manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from accessing certain features of the Platform, including Account login. Disabling analytics or marketing cookies will not affect your ability to use the core pk393 service.

pk393 does not use cookies to track your browsing activity on third-party websites unrelated to the pk393 Platform.

pk393 retains your personal information only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve any disputes or enforce our agreements. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in compliance with anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial regulations.
• KYC Verification Documents: Retained for a minimum of five (5) years following Account closure or the completion of the relevant business relationship.
• Communications and Support Records: Retained for three (3) years from the date of the interaction, unless the communication relates to an ongoing dispute or regulatory matter.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent as evidence of the original consent.
• Technical and Analytics Data: Retained in aggregated or pseudonymised form for up to twenty-four (24) months.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in a manner that prevents reconstruction or identification. Where deletion is not technically feasible (for example, data stored in backup archives), pk393 will isolate and protect that data until deletion is possible.

pk393 implements a comprehensive set of technical and organisational security measures to protect your personal information against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the pk393 Platform.
• Encryption at rest for all databases containing personal and financial data.
• Role-based access controls ensuring that only authorised pk393 personnel can access specific categories of user data, limited strictly to what is required for their role.
• Multi-factor authentication enforced for all pk393 administrative accounts with access to user data.
• Automated intrusion detection and real-time security monitoring.
• Regular third-party penetration testing and vulnerability assessments of the Platform infrastructure.
• Incident response procedures with defined timelines for detecting, containing, and notifying affected users of any data breach.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, pk393 will notify affected users as promptly as practically possible, describing the nature of the breach, the categories of data affected, and the steps being taken to address it.

As a user of the pk393 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact pk393 support at [email protected] with the subject line "Privacy Request — [Right Name]":

• Right of Access: You have the right to request a copy of all personal information pk393 holds about you, together with information about how it is being used. pk393 will respond to verified access requests within thirty (30) days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. Certain data — such as your verified CNIC number — cannot be corrected without re-submission of supporting KYC documentation.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to overriding legal obligations, including our mandatory data retention requirements described in Section 7.
• Right to Restriction: You have the right to request that pk393 restrict processing of your personal data in certain circumstances, such as while the accuracy of the data is disputed or while an objection is being considered.
• Right to Data Portability: You have the right to receive a copy of personal data you have provided to pk393 in a structured, commonly used, machine-readable format, and to have that data transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to processing based on legitimate interests at any time on grounds relating to your particular situation. You have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

pk393 will not charge a fee for processing data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. Where pk393 is unable to comply with a request, we will provide a clear explanation of the reasons.

pk393 uses date-of-birth verification at the point of registration and requires CNIC-based KYC verification — which itself confirms that the holder is of legal age — to enforce this policy. Attempting to register an underage Account using falsified documentation constitutes a serious breach of our Terms and Conditions and may be reported to relevant authorities.

If you believe a minor has registered on the pk393 Platform or has accessed your Account, please contact pk393 support at [email protected] immediately. pk393 will act promptly to investigate and take appropriate remedial action.

pk393 is operated under an international gaming licence, and certain aspects of our infrastructure, including data storage, KYC processing, and payment gateway operations, may involve transferring your personal data to servers or service providers located outside of Pakistan.

Where personal data is transferred internationally, pk393 ensures that appropriate safeguards are in place to protect your information to a standard that is at least equivalent to the protections described in this Privacy Policy. These safeguards may include:

• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection.
• Contractual clauses binding the receiving party to process your data only in accordance with pk393's instructions and this Privacy Policy.
• Technical security measures, including end-to-end encryption, applied to data in transit and at rest.

By registering an Account with pk393 and accepting the Terms and Conditions, you acknowledge that your personal data may be transferred internationally as described in this section. If you have concerns about international data transfers affecting your personal information, please contact pk393 support.

The pk393 Platform may contain references to or integrations with third-party services, including payment processors, game software providers, and analytics platforms. This Privacy Policy applies solely to personal data collected and processed by pk393 directly.

Third-party services accessed through or integrated with the pk393 Platform operate under their own privacy policies, which pk393 does not control. pk393 is not responsible for the privacy practices, data handling, or security measures of any third-party service provider. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of pk393.

pk393 exercises due diligence in selecting third-party service providers and requires all providers who process user data on our behalf to do so under binding contractual data processing agreements consistent with this Privacy Policy.

pk393 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The updated Policy will be published on this page with a revised effective date.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal information — pk393 will provide advance notice through one or more of the following channels: a notification displayed upon your next Account login, an email to your registered address, or a prominent notice on the pk393.app homepage.

Your continued use of the pk393 Platform following publication of a revised Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree with the changes, you should cease using the Platform and contact pk393 support to request Account closure.

We recommend reviewing this Privacy Policy periodically to stay informed about how pk393 protects your personal information. The current effective date is always displayed at the top of this page and in the hero section above.

For all privacy-related enquiries, data rights requests, or concerns about how pk393 handles your personal information, please contact our Data Protection team using the details below:

When submitting a data rights request, please include your registered Account username, the email address associated with your Account, a clear description of your request, and any relevant details that will help us identify the specific data you are enquiring about. pk393 may need to verify your identity before processing certain types of data rights requests to protect against unauthorised access to your personal information.

If you are not satisfied with pk393's response to a privacy concern or data rights request, you have the right to escalate the matter to the relevant data protection supervisory authority in the jurisdiction under which pk393 holds its international gaming licence. Details of the applicable supervisory authority will be provided in pk393's written response to your initial enquiry.