pk38 Privacy Policy

Data We Collect

pk38 collects personal data through several channels: account registration, account usage, payment processing, customer support interactions, and automated technical collection via your browser and device. The categories of data we collect are described below.

1.1 Registration Data

When you create a pk38 account, we collect: your full name, Pakistani mobile number, date of birth, email address (optional), and a hashed version of your chosen password. This data is necessary to establish and maintain your account.

1.2 Identity Verification (KYC) Data

For Know Your Customer compliance and to process withdrawals above defined thresholds, pk38 may request: a copy of your Computerised National Identity Card (CNIC), a selfie or live photo for identity matching, and proof of ownership of the payment method used (e.g., a screenshot of your JazzCash or Easypaisa account showing your name). This data is used solely for identity verification and fraud prevention.

1.3 Transactional Data

pk38 records all financial transactions associated with your account, including deposit amounts, dates, payment method references (masked), withdrawal requests, bonus credits, and bet history. This data is retained for account management, dispute resolution, and regulatory compliance.

1.4 Technical & Device Data

When you access pk38, our systems automatically collect: your IP address, browser type and version, operating system, device type, screen resolution, and session timestamps. This data is used for security monitoring, fraud detection, and platform optimisation.

1.5 Communications Data

If you contact pk38 support via email or live chat, we retain records of those communications — including timestamps, the subject matter, and any attachments — for quality assurance, training, and dispute resolution purposes.

How We Use Your Data

pk38 uses personal data only for the purposes for which it was collected or for closely related purposes that you would reasonably expect. The specific uses are as follows:

• Account Operation: To create, maintain, and manage your pk38 account, process your bets, and credit winnings to your PKR wallet.
• Payment Processing: To facilitate PKR deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT TRC-20.
• Identity Verification: To verify that you are who you say you are, that you are aged 18 or over, and that your payment method is legitimately owned by you.
• Fraud Prevention & Security: To detect and prevent unauthorised account access, fraudulent transactions, money laundering, and other prohibited conduct described in our Terms & Conditions.
• Customer Support: To respond to queries, investigate complaints, and resolve disputes.
• Platform Improvement: To analyse aggregated usage patterns and improve the pk38 interface, game selection, and payment flow. This analysis uses anonymised or aggregated data where possible.
• Responsible Gaming: To monitor for signs of problem gambling behaviour and apply the controls described in our Responsible Gaming policy.
• Legal & Regulatory Compliance: To meet anti-money laundering, record-keeping, and other obligations under applicable law.

pk38 does not use your personal data for automated decision-making that produces solely automated decisions with significant legal effects on you, without human review where required.

Legal Basis for Processing

pk38 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to provide the pk38 service under the account agreement you accept at registration (account management, payment processing, bet settlement).
• Legal Obligation: Processing required to comply with applicable law, including anti-money laundering requirements, age verification obligations, and record retention mandates.
• Legitimate Interests: Processing for fraud prevention, security monitoring, and platform improvement, where these interests do not override your data protection rights.
• Consent: Where we send optional promotional communications, we rely on your consent. You may withdraw this consent at any time by contacting support.

Data Sharing & Third Parties

pk38 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Data sharing is limited to the following circumstances:

4.1 Payment Processors

When you make a deposit or withdrawal, necessary transaction data (such as account identifiers and transaction amounts) is shared with the relevant payment provider — JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, or the relevant USDT network — solely to execute the transaction. These providers have their own privacy policies governing their handling of this data.

4.2 Identity Verification Services

Where pk38 uses a third-party KYC service to verify identity documents, the minimum necessary data is transmitted to that provider over an encrypted connection. KYC providers are bound by data processing agreements with pk38 and may not use your data for their own purposes.

4.3 Game Providers

Live casino and slot games delivered by third-party providers (such as Evolution Gaming or Pragmatic Play) may involve a session token and anonymised player identifier being passed to the provider's system to launch and record the game session. Your full personal details are not shared with game providers.

4.4 Legal Disclosure

pk38 may disclose personal data to law enforcement, regulatory authorities, or other third parties where required to do so by law, court order, or to protect the legal rights of pk38 or its players.

Cookies & Tracking Technologies

pk38 uses cookies and similar browser-based tracking technologies to operate the platform, maintain your login session, and understand how players use the site. The categories of cookies used are:

• Strictly Necessary Cookies: Required for the platform to function — session management, login state, and security tokens. These cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences such as language settings and previously selected payment methods to improve your experience on return visits.
• Analytics Cookies: Collect anonymised data about how players navigate pk38 — which pages are most visited, where players drop off in registration flows — to improve the platform. No personally identifying information is included in analytics data.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use pk38. Disabling functional and analytics cookies will not prevent you from betting or accessing your account.

Data Retention

pk38 retains personal data for as long as your account is active and for a defined period thereafter, as required by applicable legal and regulatory obligations. The general retention framework is:

• Account Data: Retained for the duration of your account and for a minimum of 5 years after account closure, to meet anti-money laundering record-keeping requirements.
• Transaction Records: Retained for a minimum of 5 years from the date of the transaction.
• KYC Documents: Retained for a minimum of 5 years after submission. Documents may be retained longer where a regulatory obligation requires it.
• Support Communications: Retained for 2 years from the date of the last communication in a ticket, or longer where the communication relates to an active dispute.
• Technical Logs: Retained for 90 days, after which they are automatically purged or anonymised.

When data is no longer required for any legitimate purpose, pk38 securely deletes or anonymises it in accordance with our internal data lifecycle procedures.

Data Security

pk38 implements technical and organisational security measures appropriate to the nature of the data we process and the risks associated with online gambling platforms. These measures include:

• Encryption in Transit: All data transmitted between your browser or device and pk38 servers is protected by 256-bit TLS/SSL encryption. This applies to login, deposits, withdrawals, and all other platform interactions.
• Encryption at Rest: Sensitive data including passwords (stored as salted hashes) and identity documents are encrypted at rest using industry-standard algorithms.
• Access Controls: Access to personal data within pk38's systems is restricted to staff and systems with a legitimate operational need. All access is logged and auditable.
• OTP Authentication: Login verification via One-Time Password reduces the risk of unauthorised account access even if credentials are compromised.
• Fraud Monitoring: Automated and manual systems monitor for unusual account activity, suspicious transaction patterns, and potential account takeover attempts.

No security system is impenetrable. If pk38 becomes aware of a data breach that affects your personal data, we will notify affected players and take appropriate remedial action in accordance with applicable requirements.

Your Rights Over Your Data

Subject to applicable law and any overriding legal obligations, you have the following rights in relation to your personal data held by pk38:

• Right of Access: You may request a copy of the personal data pk38 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to pk38's legal retention obligations.
• Right to Restrict Processing: You may request that pk38 limit how it processes your data in certain circumstances.
• Right to Data Portability: You may request your account and transaction data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including processing for marketing or analytical purposes.
• Right to Withdraw Consent: Where processing is based on consent (e.g., promotional communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, submit a written request to [email protected]. pk38 will acknowledge your request within 72 hours and provide a substantive response within 30 days. Identity verification will be required before processing data access or deletion requests.

Children & Minors

pk38 is strictly an 18+ platform. We do not knowingly collect personal data from persons under 18 years of age. The age declaration at registration, combined with pk38's right to request identity documentation at any time, constitutes our primary mechanism for preventing underage access.

If pk38 discovers or is notified that a minor has created an account or provided personal data, we will immediately suspend the account, delete the associated personal data, and arrange for the return of any deposited funds to the verified payment source.

Adults sharing devices with minors are encouraged to use browser-based parental controls or separate browser profiles to prevent underage access to pk38 and other gambling platforms.

Changes to This Privacy Policy

pk38 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform functionality. Where changes are material — such as new categories of data collected or new third-party sharing arrangements — pk38 will provide advance notice through the platform or via your registered contact details before the changes take effect.

The effective date and version number at the top of this Policy will be updated with each revision. Continued use of pk38 following notice of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not accept the revised Policy, you may close your account in accordance with the process described in our Terms & Conditions.

Contact Us — Privacy Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or pk38's data practices, please contact our support team. We are available 24 hours a day, 7 days a week.

Email: [email protected]
Subject line for data matters: "Privacy Policy Enquiry" or "Data Rights Request"

pk38 takes privacy enquiries seriously. All data-related communications are handled by staff with specific data protection training. If you are not satisfied with our response to a privacy concern, you may escalate through the dispute resolution process described in our Terms & Conditions.