At pk388, your privacy is not a formality — it is a core commitment. This Privacy Policy explains in plain, clear terms exactly what personal data pk388 collects from players across Pakistan, how that data is used, who it may be shared with, and what rights you hold over your own information. We encourage every player to read this document carefully before registering an account.
These six cards summarise the most important principles of the pk388 Privacy Policy. They are provided for convenience only and do not replace the full legal text below.
pk388 collects only the personal data necessary to operate your account, process transactions, and comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations — including your name, CNIC, email, and payment details.
Your data is used to manage your pk388 account, process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, deliver customer support, and comply with regulatory requirements. We never sell your data.
Data is shared only with carefully vetted partners — payment processors, identity verification providers, and regulatory bodies — strictly on a need-to-know basis. All third parties are contractually bound to protect your information.
pk388 uses essential cookies to keep you logged in, functional cookies for platform performance, and analytics cookies to improve the gaming experience. You may manage cookie preferences via your browser settings at any time.
pk388 employs industry-standard TLS encryption for data in transit and AES-256 encryption for data at rest. Access to personal data is strictly limited to authorised personnel on a role-based access control basis.
As a pk388 player you have the right to access, rectify, port, restrict processing of, and request erasure of your personal data, subject to applicable legal and regulatory retention obligations. Submit requests to [email protected].
pk388 ("we", "us", "our", "the Company") is committed to protecting and respecting the privacy of every individual who visits, registers on, or interacts with the pk388 platform at pk388.pro ("the Platform"). This Privacy Policy ("Policy") sets out the basis on which personal data we collect from you, or that you provide to us, will be processed by us in connection with your use of pk388.
This Policy applies to all players registering from Pakistan — including cities such as Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Peshawar, and Quetta — as well as any other jurisdiction from which access to pk388 is lawfully permitted. By accessing the Platform or registering an account, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy.
Note: This Policy should be read together with the pk388 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference. In the event of any inconsistency between this Policy and the Terms & Conditions on a privacy matter, this Policy shall prevail.
For the purposes of applicable data protection legislation, pk388 is the data controller responsible for the personal data collected and processed through the Platform. The Company operates under an internationally recognised gaming regulatory framework and is subject to the data protection obligations applicable within that regulatory jurisdiction.
If you have any questions regarding the identity of the data controller, or wish to exercise any of your data subject rights as described in Section 11 of this Policy, please contact our Data Protection Officer at the details provided in Section 14 below.
When you register an account, interact with customer support, or complete identity verification on pk388, we collect the following categories of personal data:
When you access the pk388 Platform, certain technical data is collected automatically through server logs, cookies, and similar tracking technologies:
pk388 may receive personal data about you from third-party identity verification services, fraud prevention agencies, payment processors, and sanctions screening databases where necessary to comply with our KYC and AML obligations. Such third-party data is processed solely for compliance and security purposes.
The table below summarises the primary purposes for which pk388 processes your personal data and the legal basis applicable to each processing activity.
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract |
| Processing deposits and withdrawals | Performance of contract |
| KYC identity verification and age verification | Legal obligation |
| AML and fraud prevention monitoring | Legal obligation / Legitimate interests |
| Delivering customer support services | Performance of contract |
| Sending transactional communications (e.g., withdrawal confirmations) | Performance of contract |
| Sending promotional communications about pk388 offers | Consent (withdrawable at any time) |
| Platform security, abuse prevention, and responsible gaming monitoring | Legitimate interests |
| Regulatory reporting and compliance | Legal obligation |
| Analytics and platform improvement | Legitimate interests |
Where pk388 relies on legitimate interests as the legal basis for processing, we have assessed that our interests do not override your fundamental rights and freedoms as a data subject. You have the right to object to processing based on legitimate interests — see Section 11 for details on how to exercise this right.
pk388 shares personal data with carefully vetted third-party service providers who assist us in operating the Platform. These providers are engaged as data processors and are contractually required to process your data only on our documented instructions, implement appropriate security measures, and not use your data for any purpose other than that for which it was shared. Categories of service provider include:
pk388 may disclose personal data to regulatory bodies, law enforcement agencies, courts, or other governmental authorities where required to do so by applicable law, regulatory obligation, court order, or in connection with any legal proceedings. In such cases, pk388 will disclose only the minimum data necessary to satisfy the legal requirement and, where legally permissible, will notify you of the disclosure.
Important: pk388 does not sell, rent, trade, or otherwise transfer your personal data to third parties for their own independent marketing or commercial purposes. Your data is not a commodity. It is processed solely to deliver and improve the pk388 service and to comply with our legal obligations.
pk388 uses cookies and similar tracking technologies (including web beacons and local storage objects) to operate and improve the Platform. The following categories of cookies are used:
You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling functional cookies may affect your Platform experience. For more information on managing cookies in common browsers, refer to your browser's help documentation.
pk388 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligation. Our standard retention periods are as follows:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any identifiable individual.
pk388 implements a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our technical and organisational security measures include:
Your Responsibility: While pk388 takes extensive measures to secure the Platform, the security of your account also depends on you. Please use a strong, unique password, enable two-factor authentication (2FA), and never share your login credentials with anyone. pk388 will never ask you for your password via email, live chat, or any other channel.
As an internationally operating gaming platform, pk388 may transfer your personal data to, and process it in, countries outside your country of residence. Such transfers may occur when our third-party service providers — including cloud hosting providers, KYC platforms, and analytics tools — operate infrastructure in jurisdictions other than Pakistan.
Where personal data is transferred outside of your home jurisdiction, pk388 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required under applicable data protection law. These safeguards may include:
pk388 operates a strict minimum age policy requiring all registered players to be at least 21 years of age. The Platform is not directed at, and pk388 does not knowingly collect personal data from, individuals under the age of 21. If we become aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to permanently close the associated account and securely delete all personal data associated with that account.
If you believe that a minor has registered an account on pk388, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.
Age Verification: pk388 reserves the right to request certified age verification documentation — such as a CNIC or passport — from any player at any time. Accounts where age cannot be satisfactorily verified will be suspended pending confirmation, and any funds deposited during this period will be held in escrow.
Subject to applicable law and regulatory limitations, you have the following rights in relation to your personal data held by pk388. To exercise any of these rights, please contact us at [email protected] with your full name, registered email address, and a clear description of the right you wish to exercise. We will respond within 30 calendar days.
pk388 respects your right to control your personal data. Here is a summary of your key data subject rights and what each one means in practice.
Request a copy of all personal data pk388 holds about you, along with information about how it is being processed.
Request correction of any inaccurate or incomplete personal data we hold about you, such as a misspelled name or outdated address.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Request that pk388 restricts processing of your data — for example, while the accuracy of data is being contested or an objection is being assessed.
Receive a structured, machine-readable copy of the personal data you provided to pk388, and request its transfer to another data controller where technically feasible.
Object to processing of your personal data based on legitimate interests, including profiling, or withdraw consent for marketing communications at any time.
If you believe that pk388 has processed your personal data in a manner that is inconsistent with this Privacy Policy or applicable data protection law, we encourage you to contact us in the first instance so that we have the opportunity to investigate and resolve your concern. Please submit your complaint in writing to [email protected] with the subject line "Data Privacy Complaint". We will acknowledge receipt within 5 business days and provide a substantive response within 28 calendar days.
If you are not satisfied with our response, you have the right to lodge a complaint with the competent data protection supervisory authority in your jurisdiction. For players in Pakistan, the relevant authority is the Pakistan Telecommunication Authority (PTA) and, where applicable, the National Database and Registration Authority (NADRA) in respect of matters concerning national identity data.
pk388 reserves the right to update, amend, or replace this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of processing or a new third-party data sharing arrangement — we will notify registered players via email and by displaying a prominent notice on the Platform prior to the changes taking effect. The updated Policy will always be available at pk388.pro/privacy-policy with the effective date clearly displayed at the top of the document.
Your continued use of the pk388 Platform following publication of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. We recommend reviewing this Policy periodically to stay informed about how we protect your information.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by pk388, please contact our Data Protection team using the details below. As a reminder, pk388 will never ask you for your account password via any communication channel.
Data Protection Officer: pk388 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection legislation. All formal data subject rights requests and complaints should be directed to [email protected] with "DPO" in the subject line to ensure prompt handling.
Your data is protected. Your identity is secure. Join thousands of players across Karachi, Lahore, Islamabad, and Faisalabad who trust pk388 for a safe, fair, and thrilling online gaming experience — backed by this Privacy Policy and our commitment to responsible gaming.