Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how pk339.cam ("pk339", "we", "us", "our") collects, uses, stores, discloses and otherwise processes personal data in connection with your use of the pk339 website located at https://pk339.cam (the "Platform").

pk339 operates as an online gaming information and entertainment platform. We are committed to protecting your privacy and handling your personal data lawfully, fairly and transparently. This Policy is intended to give you clear and complete information about our data practices so that you can make informed decisions about your use of the Platform.

This Policy applies to all individuals who visit, register with or use the Platform, including users based in Pakistan and other jurisdictions. Where we reference Pakistani-specific context — such as payment methods like Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah, or cities including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — this is for localisation purposes only and does not imply any special data-sharing arrangement with those providers or institutions.

This Policy should be read alongside our Terms & Conditions, which govern your overall use of the Platform.

2 Definitions

The following definitions apply throughout this Policy:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, IP address, device identifiers and financial information.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, deletion and any other form of handling.
• "Data Controller" — pk339.cam, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — a third-party service provider that processes Personal Data on behalf of pk339 pursuant to a written data-processing agreement.
• "User" — any individual who accesses, browses or registers on the Platform.
• "Cookies" — small text files placed on your device by the Platform to facilitate functionality, analytics and security.
• "KYC Data" — identity and age verification documentation submitted during the Know Your Customer process, which may include CNIC, passport, proof of address and biometric or photographic data.
• "Sensitive Data" — a subset of Personal Data warranting heightened protection, including financial information, identity documents and biometric data.

3 Personal Data We Collect

pk339 collects Personal Data in the following categories, depending on how you interact with the Platform:

We do not knowingly collect Sensitive Data beyond what is strictly required for KYC compliance and the specific purposes identified in Section 5. We do not collect unnecessary categories of data such as political opinions, religious beliefs or trade-union membership.

4 Legal Basis for Processing

pk339 processes Personal Data on one or more of the following legal bases:

• Contractual necessity: Processing that is necessary to perform our obligations to you under the Terms & Conditions — including account management, transaction processing and customer support.
• Legal obligation: Processing that is required to comply with applicable legal and regulatory requirements, including anti-money-laundering (AML) controls, KYC obligations and law-enforcement requests made through lawful channels.
• Legitimate interests: Processing necessary for the legitimate business interests of pk339, such as fraud prevention, platform security, analytical improvement of the Platform and internal record-keeping — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where consent is the applicable basis, we will request it clearly and specifically. You may withdraw consent at any time; withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5 How We Use Your Personal Data

pk339 uses the Personal Data collected for the following defined purposes. We do not use your data for any purpose that is incompatible with those listed below without obtaining your prior consent or establishing an alternative lawful basis.

1. Account creation and management: To create and maintain your pk339 account, authenticate your identity at login, and enable access to Platform features.
2. KYC and age verification: To verify that you meet the minimum age requirement (18+, or higher where the applicable operator/license jurisdiction requires) and to satisfy identity-verification obligations.
3. Transaction processing: To record deposits, withdrawals and other financial activity on your account, and to facilitate communication with payment processors where required.
4. Customer support: To respond to enquiries, resolve complaints and communicate with you about your account or Platform features.
5. Fraud prevention and security: To detect, investigate and prevent fraudulent activity, unauthorised account access and other security threats.
6. Responsible gambling: To administer deposit limits, self-exclusion status and other responsible-gambling tools you have activated, and to fulfil any associated obligations under operator policy.
7. Platform improvement: To analyse aggregated and anonymised usage data for the purpose of improving Platform design, content quality and user experience.
8. Legal compliance: To comply with applicable laws, regulatory obligations and lawful requests from courts, regulators or law-enforcement authorities.
9. Service communications: To send you account-related notifications, security alerts and policy update notices. We do not send unsolicited marketing communications without your explicit consent.

6 Data Sharing & International Transfers

pk339 does not sell, rent or trade your Personal Data. We may share Personal Data with the following categories of recipient, strictly on a need-to-know basis and subject to binding confidentiality and data-protection agreements:

• Identity verification providers: Third-party KYC and AML service providers that perform identity, age and document verification on our behalf. These providers process your CNIC, passport data and liveness images solely for verification purposes.
• Payment processors: Where financial transactions are facilitated through third-party payment processors, we share only the minimum data necessary to initiate and confirm the transaction. Payment providers referenced for context on the Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are not pk339 data-processing partners; their mention is for Pakistani-user localisation only.
• Cloud and hosting infrastructure: Data is stored on secure servers operated by third-party cloud-hosting providers operating under data-processing agreements that include appropriate security and confidentiality obligations.
• Analytics providers: Anonymised and aggregated usage data may be shared with analytics service providers to help us understand Platform performance. These providers do not receive data that directly identifies individual users.
• Legal and regulatory authorities: Personal Data may be disclosed to courts, regulatory bodies or law-enforcement agencies where required by a valid legal obligation, court order or regulatory directive, and to the extent strictly required.

Where Personal Data is transferred to a country outside the jurisdiction in which it was collected, pk339 will implement appropriate safeguards — such as standard contractual clauses or equivalent mechanisms — to ensure that the data remains protected to a standard consistent with this Policy.

7 Cookies & Tracking Technologies

pk339 uses cookies and similar tracking technologies (including local storage objects and session tokens) on the Platform. The following categories of cookie are in use:

Most modern browsers allow you to view, manage and delete cookies through their settings menus. Blocking all cookies may impair certain Platform features. pk339 does not use third-party advertising cookies or deploy cross-site tracking for behavioural advertising purposes.

8 Data Retention

pk339 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:

• Account registration data: Retained for the duration of the account and for a minimum of five (5) years following account closure, as required by AML and record-keeping obligations.
• KYC / identity documents: Retained for a minimum of five (5) years from the date of submission or the date of account closure, whichever is later, in accordance with applicable financial crime prevention regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Technical and usage logs: Retained for up to twelve (12) months, after which they are anonymised or deleted.
• Support communication data: Retained for two (2) years from the date of the most recent communication, or longer where required for ongoing dispute resolution.
• Responsible gambling records: Retained for the life of the account and for five (5) years following account closure.

When retention periods expire, Personal Data is securely deleted or irreversibly anonymised. Where data cannot be immediately deleted due to technical constraints, it is isolated and restricted from further active processing pending scheduled deletion.

9 Security Measures

pk339 implements a combination of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration and unlawful destruction:

• All data transmitted between your device and the Platform is encrypted using TLS (Transport Layer Security) with a minimum of 256-bit encryption.
• Passwords are stored using industry-standard one-way hashing algorithms. pk339 cannot retrieve plain-text passwords.
• Access to Personal Data within pk339 systems is restricted to authorised personnel on a strict need-to-know basis, governed by role-based access controls.
• Regular internal security reviews and infrastructure audits are conducted to identify and remediate vulnerabilities.
• Data storage systems are maintained in secure data centres with physical access controls, redundant infrastructure and disaster-recovery provisions.

10 Your Rights

Depending on your jurisdiction, you may have the following rights with respect to your Personal Data held by pk339. We are committed to honouring these rights and will respond to verified requests within thirty (30) calendar days, or such shorter period as required by applicable law:

Right of Access: You may request a copy of the Personal Data we hold about you, together with information about the purposes for which it is processed and the categories of recipients to whom it has been disclosed.

Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. Please update straightforward account details (name, email) directly through your account settings where possible.

Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal retention obligations — for example, AML and KYC records that we are legally required to retain.

Right to Data Portability: Where processing is based on consent or contractual necessity, you may request your Personal Data in a structured, commonly used and machine-readable format for transfer to another data controller.

Right to Object: You may object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.

To exercise any of these rights, please submit a written request to [email protected]. Please note that email addresses on this page are plain text only and are not clickable links.

11 Minors & Under-Age Access

pk339 is strictly an adults-only platform. We do not knowingly collect, process or retain Personal Data from individuals under the age of 18, or the higher minimum age required by the applicable operator's licensing jurisdiction.

Account registration requires confirmation of date of birth. Age verification may be carried out as part of the KYC process using CNIC or passport documentation. Where pk339 has reasonable grounds to believe that a user is under the applicable minimum age, the account will be suspended pending verification and, if the suspicion is confirmed, permanently closed with all associated data handled in accordance with applicable legal requirements.

If you believe that Personal Data of a minor has been collected on our Platform, please contact [email protected] immediately so that we can investigate and take appropriate action without delay.

12 Third-Party Links & Services

The Platform may contain descriptive references to third-party operators, payment providers and sports organisations for informational context. pk339 does not control the privacy practices of any third-party services, and this Policy does not cover the collection or use of your data by any third party.

If you visit an operator's platform following a reference on pk339, that operator's own privacy policy governs any data collected during your visit. We strongly advise you to review the privacy policies of any third-party platform before submitting personal information to that platform.

Payment providers referenced on this Platform for contextual purposes — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — operate under their own independent privacy policies and data-handling practices. Reference to these providers on pk339 does not constitute a data-sharing arrangement with them.

13 Changes to This Privacy Policy

pk339 may update this Privacy Policy periodically to reflect changes in our data practices, applicable law, regulatory guidance or Platform features. When we make material changes, we will update the "Last updated" date at the top of this page and, where the change significantly affects your rights, we will endeavour to notify registered users via the email address held on their account.

It is your responsibility to review this Policy periodically. Continued use of the Platform following publication of a revised Policy constitutes acceptance of the updated terms. If you do not accept the revised Policy, please discontinue use of the Platform and submit an account-closure request to [email protected].

14 Contact Us

For any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the pk339 privacy team. All email addresses below are provided as plain text only and are not clickable links.

We aim to acknowledge all privacy-related requests within five (5) business days and to provide a substantive response within thirty (30) calendar days. Complex requests may take longer; we will inform you if an extension is required. We do not accept telephone or postal privacy enquiries at this time.