pkr398 Privacy Policy

1. Who We Are

pkr398 ("the Company", "we", "us", "our") operates the online casino and sports betting platform accessible at pkr398.net. pkr398 is the data controller in respect of the personal information of players and website visitors processed pursuant to this Privacy Policy.

This Privacy Policy applies to all personal data collected through the pkr398 website, mobile platform, customer support communications, and any related services. It should be read alongside the pkr398 Terms & Conditions, which govern the overall agreement between you and pkr398.

By registering an account on pkr398, continuing to use the Platform, or communicating with our support team, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2. Data We Collect

pkr398 collects personal data in the following categories:

pkr398 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond that strictly required for identity verification (i.e. a CNIC photograph for KYC purposes).

3. How We Use Your Data

pkr398 processes your personal data for the following purposes:

• Account management – Creating and maintaining your pkr398 account, including authentication and security.
• Identity verification (KYC) – Confirming your identity and age in accordance with our compliance obligations before processing withdrawals.
• Payment processing – Facilitating PKR deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah.
• Regulatory compliance – Meeting anti-money laundering (AML), counter-terrorism financing (CTF), and other applicable legal obligations.
• Customer support – Responding to enquiries, complaints, and technical issues raised by pkr398 players.
• Platform security – Detecting and preventing fraud, collusion, bonus abuse, and other prohibited conduct on pkr398.
• Responsible gaming – Monitoring gambling behaviour to identify signs of problem gambling and administering player-requested limits, cooling-off periods, and self-exclusions.
• Service improvement – Analysing usage patterns to improve the pkr398 Platform, game selection, and user experience.
• Communications – Sending transactional notifications (deposit confirmations, withdrawal updates, security alerts). pkr398 will only send promotional communications where you have opted in.

pkr398 does not use your personal data for any purpose not listed above without first obtaining your explicit consent or establishing a lawful alternative basis for processing.

4. Legal Basis for Processing

pkr398 processes personal data on the following legal bases:

• Performance of contract – Processing necessary to provide the pkr398 Platform services you have registered to use, including cashier operations and account management.
• Legal obligation – Processing required to comply with AML, KYC, and other regulatory requirements applicable to pkr398's operations.
• Legitimate interests – Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where these interests are not overridden by your privacy rights.
• Consent – Where pkr398 relies on consent (e.g. for marketing communications), you have the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

5. KYC & Identity Documents

pkr398 requires CNIC-based Know Your Customer (KYC) verification before processing withdrawals. During the KYC process, you will be asked to submit a clear photograph of your Computerized National Identity Card (CNIC) – front and reverse – and in some cases a live selfie for liveness verification.

KYC documents are:

• Transmitted over encrypted connections to pkr398's secure verification infrastructure.
• Accessible only by authorised pkr398 compliance personnel on a need-to-know basis.
• Used solely for the purpose of verifying your identity, age, and the legitimacy of your pkr398 account.
• Retained for the minimum period required by applicable anti-money laundering regulations and then securely deleted.
• Not sold, rented, licensed, or shared with third parties beyond those directly involved in the pkr398 KYC verification process.

Submitting a fraudulent or manipulated identity document to pkr398 is a breach of our Terms & Conditions and may be reported to relevant authorities.

6. Payment Data

When you make a deposit or request a withdrawal on pkr398 using JazzCash, Easypaisa, or a linked Pakistani bank account (HBL, UBL, Meezan Bank, Bank Alfalah), pkr398 processes the minimum financial data necessary to complete the transaction. This includes your registered payment account reference, transaction amount in PKR, and transaction timestamp.

pkr398 does not store full mobile wallet credentials, full bank account numbers, or payment instrument data beyond what is technically necessary and securely tokenised for transaction processing. All payment data is transmitted via encrypted channels and processed in accordance with applicable financial security standards.

Payment transaction records are retained for the period required by anti-money laundering regulations and internal audit obligations. You may request a statement of your pkr398 transaction history by contacting our support team.

7. Cookies & Tracking Technologies

pkr398 uses cookies and similar technologies to operate the Platform, maintain your session state, detect fraud, and analyse usage patterns. The categories of cookies used by pkr398 are:

• Strictly necessary cookies – Required for the pkr398 Platform to function. These cannot be disabled without impairing core functionality such as login sessions and cashier operations.
• Functional cookies – Remember your preferences such as language settings and interface customisations on the pkr398 platform.
• Analytics cookies – Collect aggregated, anonymised data about how players use pkr398, allowing us to improve the Platform. No personally identifiable information is included in analytics data shared externally.
• Security cookies – Used to detect and prevent fraudulent access attempts and session hijacking on pkr398 accounts.

You may configure your browser to block or delete cookies. Note that blocking strictly necessary cookies will impair your ability to use the pkr398 Platform, including logging in and processing transactions.

8. Data Sharing & Disclosure

pkr398 does not sell, rent, or trade your personal data. We may share personal data only in the following limited circumstances:

• KYC and identity verification providers – Third-party services engaged by pkr398 to assist with CNIC verification and fraud screening, under strict contractual data protection obligations.
• Payment processors – JazzCash, Easypaisa, and banking partners require minimum transactional data to process deposits and withdrawals to your pkr398 account.
• Game software providers – May receive anonymised session and technical data necessary to operate certified casino games on the pkr398 platform. Game providers do not receive your personal identity information.
• Regulatory and law enforcement authorities – pkr398 will disclose personal data where required to do so by applicable law, court order, or regulatory authority directive, including disclosures related to AML investigations.
• Corporate transactions – In the event of a merger, acquisition, or sale of pkr398, personal data may be transferred to the successor entity under equivalent data protection obligations.

All third parties with whom pkr398 shares personal data are required by contract to process such data solely for the stated purpose and to maintain appropriate security measures.

9. Data Retention

pkr398 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, or as required by applicable law. General retention guidelines:

• Account data (name, email, mobile number): for the duration of the pkr398 account plus 5 years following account closure.
• KYC and identity documents: minimum 5 years following account closure, as typically required by AML regulations.
• Financial transaction records: minimum 5 years following the date of the transaction.
• Customer support communications: 2 years from the date of last interaction.
• Technical and log data: 12 months from collection, unless retained longer for fraud investigation purposes.

Upon expiry of the applicable retention period, pkr398 will securely delete or anonymise personal data in accordance with its internal data disposal procedures.

10. Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by pkr398:

• Right of access – Request a copy of the personal data pkr398 holds about you.
• Right to rectification – Request correction of inaccurate or incomplete personal data on your pkr398 account.
• Right to erasure – Request deletion of your personal data where there is no overriding legal basis for retention. Note that KYC and transaction data must be retained for legally mandated periods regardless of an erasure request.
• Right to restriction – Request that pkr398 restrict processing of your data in certain circumstances.
• Right to data portability – Receive your personal data in a structured, machine-readable format.
• Right to withdraw consent – Where processing is based on consent (e.g. marketing communications), withdraw your consent at any time via your pkr398 account settings or by contacting support.
• Right to object – Object to processing of your personal data where pkr398 relies on legitimate interests as the legal basis.

To exercise any of these rights, contact pkr398 support at [email protected]. pkr398 will respond to verified requests within 30 days. We may need to verify your identity before fulfilling a data rights request.

11. Security Measures

pkr398 implements a range of technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• TLS 256-bit encryption for all data in transit between your device and pkr398 servers.
• Encryption of sensitive data at rest, including KYC documents and payment references.
• Strict role-based access controls limiting personal data access to authorised pkr398 staff on a need-to-know basis.
• Multi-factor authentication for administrative access to pkr398 data systems.
• Regular internal security reviews and vulnerability assessments of the pkr398 Platform.
• Incident response procedures for prompt detection, containment, and notification of any data security incident.

While pkr398 takes all reasonable precautions to protect your data, no internet transmission is entirely risk-free. You are responsible for maintaining the security of your pkr398 login credentials and should contact pkr398 support immediately if you believe your account has been compromised.

12. Children's Privacy

If you are a parent or guardian and believe a person under 18 has submitted personal data to pkr398, please contact our support team at [email protected] immediately. pkr398 will investigate and take appropriate action without delay.

13. Changes to This Privacy Policy

pkr398 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, pkr398 will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect. The "Last updated" date at the top of this page indicates the date of the most recent revision.

Your continued use of the pkr398 Platform following notification of changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how pkr398 handles your personal data.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data pkr398 holds about you, please contact our Data Protection team:

pkr398 will acknowledge privacy-related requests within 5 business days and provide a substantive response within 30 days of receipt. For complex requests, we may extend this period by a further 30 days with notification.