Privacy Policy — pk354

Introduction

pk354 ("we", "us", "the Operator") operates the pk354 online gaming and sports betting platform (the "Platform") accessible at https://pk354.cam. We are committed to protecting the privacy and personal data of all individuals who interact with our Platform, including registered users, visitors and persons who contact our support channels.

This Privacy Policy ("Policy") describes how we collect, use, store, share and protect personal data in connection with your use of the Platform. It applies to all data processing activities carried out by pk354 as a data controller or in connection with third-party service providers operating on our behalf.

By registering an Account, using the Platform or otherwise providing your personal data to pk354, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, please do not use the Platform.

This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform. In the event of a conflict between this Policy and the Terms, the Terms shall prevail to the extent of any inconsistency.

Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

Personal Data We Collect

The categories of personal data we collect depend on how you interact with the Platform. The following describes the main categories of data we may hold about you:

3.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (required for age verification).
• Residential address — relevant for users in cities including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.
• Email address and contact phone number.
• Username and encrypted password credentials.
• CNIC number or passport number where provided for KYC verification purposes.

3.2 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts, dates and payment method references.
• Payment method identifiers (such as mobile wallet account references for Easypaisa or JazzCash where applicable) — these are used solely for transaction processing and verification; we do not store full financial instrument credentials.
• Balance history, wagering activity and bonus usage records.

3.3 KYC and Verification Documents

• Copies of government-issued identity documents submitted during verification.
• Selfie or liveness check images submitted as part of the identity confirmation process.
• Proof of address documents where required.
• Source of funds documentation where requested under AML procedures.

3.4 Technical and Usage Data

• IP address and approximate geolocation derived from network data.
• Device type, operating system, browser type and version.
• Session logs, page navigation data and time spent on Platform sections.
• Click-stream data and search queries entered within the Platform.

3.5 Communications Data

• Records of correspondence with our support team, including live chat transcripts and email exchanges.
• Responses to surveys or feedback forms where participation is voluntary.

How We Collect Your Data

pk354 collects personal data through the following means:

1. Directly from You: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact support or complete any other form or interaction on the Platform.
2. Automatically: Through cookies, web beacons, server logs and similar tracking technologies when you access and navigate the Platform on any device.
3. From Third Parties: From identity verification providers, fraud prevention services, payment processors and, where applicable, credit reference agencies — in each case only to the extent necessary to provide the relevant service or meet a regulatory obligation.
4. From Public Sources: Where we are required to conduct enhanced due diligence, we may cross-reference publicly available information for AML or regulatory compliance purposes.

How We Use Your Data (Data Processing)

We process personal data for the following specific purposes:

5.1 Account Management and Service Delivery

To register and maintain your Account, process deposits and withdrawals, deliver game and betting services, manage bonuses, resolve disputes and provide customer support. This processing is necessary for the performance of the contract between you and pk354.

5.2 Identity Verification and KYC Compliance

To verify your identity, age and source of funds as required by applicable regulatory and AML obligations. This includes processing CNIC or passport data, selfie images and financial documentation.

5.3 Fraud Prevention and Security

To detect, investigate and prevent fraudulent activity, collusion, money laundering, account takeover and other security threats. This processing is in our legitimate interests and may also fulfil legal obligations.

5.4 Legal and Regulatory Compliance

To comply with applicable laws, regulations, court orders and requests from competent authorities. This may include retention of records for AML reporting purposes for defined statutory periods.

5.5 Marketing Communications

Where you have provided explicit consent, to send you promotional communications about offers, new game categories, sporting events and Platform updates. You may withdraw consent at any time through your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of prior processing.

5.6 Platform Improvement and Analytics

To analyse usage patterns, improve Platform performance, personalise your experience and test new features. Where possible, analytics data is aggregated and anonymised to minimise privacy impact.

Legal Basis for Processing

We rely on the following legal bases for processing your personal data, depending on the specific purpose:

• Contractual Necessity: Processing required to perform the contract between you and pk354, including Account management, transaction processing and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML, KYC and data retention obligations.
• Legitimate Interests: Processing in our legitimate interests, including fraud prevention, security, analytics and Platform improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific and informed consent, primarily for marketing communications and non-essential cookies. You have the right to withdraw consent at any time.

Data Sharing with Third Parties

pk354 does not sell personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

7.1 Service Providers and Processors

We engage third-party service providers to support our operations. These may include identity verification providers, payment processing partners, hosting and infrastructure providers, fraud detection services and customer support platforms. All processors are required to handle your data strictly in accordance with our instructions and applicable data protection obligations.

7.2 Regulatory and Law Enforcement Authorities

We may disclose personal data to competent authorities, law enforcement agencies, regulators or courts where required by applicable law, court order or regulatory obligation. This includes mandatory AML reporting obligations.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of the Operator's business, personal data may be transferred to the relevant successor entity as part of the transaction. We will provide notice before such a transfer occurs and before data becomes subject to a materially different privacy policy.

International Data Transfers

Given the international nature of online gaming operations, your personal data may be transferred to and stored or processed in countries outside Pakistan. We take appropriate steps to ensure that any international data transfers are conducted with adequate protection in place, including:

• Transferring data only to jurisdictions that provide a comparable level of data protection.
• Entering into contractual data transfer agreements with receiving entities where required.
• Applying appropriate technical and organisational security measures to data in transit and at rest.

If you have questions about the specific safeguards applicable to transfers of your personal data, please contact our support team using the details in Section 15.

Cookies & Tracking Technologies

The pk354 Platform uses cookies and similar technologies to provide and improve our services, maintain session integrity, and analyse usage patterns. The following categories of cookies may be used:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including session management, security tokens and login state. These cannot be disabled without impairing Platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated information about how users interact with the Platform, helping us identify pages that work well and areas for improvement.
• Functional Cookies: Enable enhanced functionality and personalisation, such as remembering your language preference and display settings.
• Targeting / Preference Cookies: Used, where consent has been obtained, to deliver relevant promotional content and to measure the effectiveness of marketing campaigns.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to refuse cookies or alert you when cookies are being sent. Restricting certain cookies may affect the functionality of the Platform. Please note that strictly necessary cookies cannot be disabled without impacting your ability to use core Platform features.

Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal obligations, to resolve disputes and to enforce our agreements. The following general retention principles apply:

• Active Account Data: Retained for the duration of your Account and for a defined period following account closure, as required by applicable law or legitimate business need.
• KYC and Identity Documents: Retained for the minimum period required by applicable AML and regulatory obligations — typically five (5) years from the date of Account closure or the end of the business relationship, whichever is later.
• Transaction Records: Financial and wagering records are retained for periods required under applicable accounting, tax and AML regulatory requirements.
• Communications and Support Records: Retained for a reasonable period to maintain an audit trail of interactions and to resolve any outstanding queries or disputes.
• Marketing Consent Records: Retained to demonstrate the basis on which communications were sent, for the period required by applicable data protection law.

Where data is no longer required, we take appropriate steps to securely delete or anonymise it to prevent unintended recovery or use.

Your Rights as a Data Subject

Depending on the data protection laws applicable in your jurisdiction, you may have the following rights in relation to your personal data held by pk354. To exercise any of these rights, please contact our support team as described in Section 15.