pkr366 Privacy Policy — How We Protect Your Personal Data

This Privacy Policy ("Policy") is issued by pkr366 ("pkr366", "we", "our", or "us") and applies to all personal data collected, processed, and stored in connection with your use of the pkr366 online gaming platform, including its website at https://pkr366.com, mobile interface, casino games, sportsbook, and all associated services (collectively, the "Platform").

pkr366 is committed to protecting the privacy of all users who interact with our Platform, including registered players, prospective users, and visitors. We process personal data in a lawful, fair, and transparent manner and take active steps to ensure that your information is secure, accurate, and used only for the purposes described in this Policy.

By registering an account on the pkr366 Platform, making a deposit, or simply visiting our website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please discontinue your use of the Platform and contact our support team to arrange closure of any existing account.

pkr366 collects personal data from you in several ways: directly when you provide it during registration or account management; automatically when you interact with the Platform; and from third parties such as payment providers and identity verification services. The categories of data we collect are as follows:

pkr366 does not collect sensitive personal data such as biometric data, health information, or political opinions unless specifically required by regulatory obligations and with your explicit prior consent.

pkr366 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent:

• Account Registration & Management: To create, maintain, and administer your pkr366 player account, including processing your registration details, verifying your identity, and managing your account preferences.
• Identity & Age Verification (KYC): To verify that you meet the mandatory 21+ age requirement and to comply with our Know Your Customer obligations under applicable international gaming compliance standards.
• Transaction Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported payment methods in PKR, and to maintain accurate financial records.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, and other prohibited conduct as defined in our Terms & Conditions.
• Platform Operation & Improvement: To deliver, maintain, and improve the pkr366 Platform, including personalising your gaming experience, diagnosing technical issues, and analysing usage patterns to enhance platform performance.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling, enforce deposit limits and self-exclusion requests, and proactively reach out to players who may benefit from responsible gaming support.
• Customer Support: To respond to your queries, complaints, and support requests via live chat and email, and to maintain records of communications for quality assurance purposes.
• Marketing Communications: Where you have opted in, to send you personalised promotional offers, bonus notifications, and platform updates. You may withdraw your marketing consent at any time through your account settings.
• Legal & Regulatory Compliance: To comply with applicable legal obligations, including responding to lawful requests from regulatory bodies, law enforcement authorities, or gaming compliance auditors.

pkr366 processes your personal data only where a valid legal basis exists to do so. The legal bases applicable to our processing activities are as follows:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to upon registration — including account management, transaction processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC, AML obligations, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out in pursuit of pkr366's legitimate business interests, including fraud prevention, platform security, and service analytics — where those interests are not overridden by your fundamental privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — including marketing communications and the processing of any sensitive personal data. You may withdraw consent at any time without detriment to your account standing.

pkr366 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share your personal data with the following categories of third parties where it is necessary, lawful, and proportionate to do so:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency payment processors — solely for the purpose of processing your deposits and withdrawals.
• Identity Verification Services: Third-party KYC and AML verification providers engaged by pkr366 to confirm the identity and eligibility of registered players.
• Technology & Infrastructure Partners: Cloud hosting, data storage, and cybersecurity service providers who process data on our behalf under strict data processing agreements and are bound by confidentiality obligations.
• Gaming Software Suppliers: Where technically necessary for the delivery of specific games or betting markets available on the pkr366 Platform.
• Regulatory & Law Enforcement Authorities: Where pkr366 is legally required or officially requested to disclose personal data to government bodies, regulators, or law enforcement agencies in connection with lawful investigations or compliance obligations.
• Professional Advisors: Legal counsel, auditors, and compliance advisors engaged by pkr366 in connection with our business operations, under appropriate confidentiality protections.

All third parties who receive personal data from pkr366 are contractually required to process that data only for the specified purposes, to maintain appropriate security standards, and to comply with applicable data protection obligations. pkr366 does not permit third parties to use your data for their own independent marketing purposes.

pkr366 uses cookies and similar tracking technologies on its Platform to ensure proper functionality, improve user experience, and support our security and analytics operations. A cookie is a small text file placed on your device when you visit a website.

The categories of cookies used by pkr366 are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your logged-in state, security cookies that prevent cross-site request forgery, and cookies that support payment processing. These cookies cannot be disabled.
• Functional Cookies: Used to remember your preferences, such as language settings, and to personalise your Platform experience. Disabling these cookies may affect certain non-essential features.
• Analytics Cookies: Used to collect anonymised data about how visitors interact with the pkr366 Platform, including pages visited, session duration, and navigation paths. This data is used to improve Platform performance and usability.
• Security & Fraud Detection Cookies: Used to identify and block suspicious activity, including bot traffic, account takeover attempts, and coordinated fraudulent behaviour.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from using core Platform features, including logging in and processing transactions. pkr366 does not use third-party advertising or retargeting cookies.

pkr366 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:

• Active Account Data: Retained for the full duration of your account registration on the pkr366 Platform and for a period of five (5) years following permanent account closure.
• KYC & Identity Documents: Retained for a minimum of five (5) years following the end of the business relationship, in compliance with anti-money laundering regulatory requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, in line with financial record-keeping obligations.
• Customer Support Communications: Retained for three (3) years following the resolution of the relevant query or complaint, to support quality assurance and dispute resolution.
• Marketing Preferences: Retained until you withdraw your marketing consent or close your account, whichever is earlier.
• Technical & Log Data: Retained for up to twelve (12) months for security monitoring and fraud detection purposes, after which it is anonymised or deleted.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.

pkr366 implements comprehensive technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security framework includes the following safeguards:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and pkr366 servers is encrypted using industry-standard TLS protocols, ensuring that your personal and financial information cannot be intercepted in transit.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. pkr366 staff are granted only the minimum level of data access required to perform their specific role.
• Two-Factor Authentication: pkr366 supports two-factor authentication (2FA) for player accounts to provide an additional layer of protection against unauthorised login attempts.
• Secure Data Infrastructure: pkr366 hosting infrastructure is maintained in access-controlled data centres with continuous physical and network security monitoring.
• Regular Security Audits: pkr366 conducts periodic security assessments, penetration testing, and vulnerability reviews to identify and remediate potential weaknesses in our systems.
• Staff Training: All pkr366 personnel who handle personal data receive regular training on data protection obligations, security best practices, and incident response procedures.

While pkr366 takes every reasonable precaution to protect your personal data, no digital platform can guarantee absolute security. In the event of a data security incident that affects your personal data, pkr366 will notify you and relevant authorities as required by applicable obligations.

pkr366 respects your rights over your personal data. Subject to applicable law and any overriding legal obligations, you have the following rights in relation to the personal data we hold about you:

• Right of Access: You may request a copy of the personal data pkr366 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request that pkr366 correct any inaccurate or incomplete personal data held about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to pkr366's legal retention obligations.
• Right to Restriction of Processing: You may request that pkr366 temporarily restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy.
• Right to Data Portability: You may request that pkr366 provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider where technically feasible.
• Right to Object: You may object to pkr366 processing your personal data on the basis of legitimate interests, including for direct marketing purposes. Where a valid objection is raised for marketing purposes, pkr366 will cease processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact pkr366 at [email protected]. We will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you accordingly.

The pkr366 Platform is strictly intended for individuals aged 21 years and above. pkr366 does not knowingly collect personal data from individuals under the age of 21, and we do not permit minors to register or use our services under any circumstances.

As part of our registration and KYC process, pkr366 actively verifies the age of all prospective and registered users. Any account where the account holder is found to be under 21 years of age will be immediately suspended, any associated balances will be withheld pending review, and the personal data collected will be securely deleted in accordance with our data retention policy.

If you are a parent or guardian and believe that a minor in your care has provided personal data to pkr366 or has registered an account on the Platform, please contact our support team immediately at [email protected]. We will promptly investigate and take all appropriate action, including account closure and data deletion.

The pkr366 Platform does not include links to third-party websites for commercial or affiliate purposes. Any external references within our Platform content are provided solely for informational context. pkr366 is not responsible for the privacy practices of any third-party platforms or services.

pkr366 has no control over the content, privacy policies, or data practices of any external website. We strongly encourage you to review the privacy policy of any third-party service before providing your personal information to it.

pkr366 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. All amendments will be published on this page with an updated "Last Updated" date at the top of the document.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — pkr366 will provide advance notice to registered users via the email address associated with their account, no less than 14 days before the changes take effect.

Continued use of the pkr366 Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated Policy, you should cease using the Platform and request account closure before the effective date.

For any questions, concerns, or formal requests relating to this Privacy Policy or to the personal data pkr366 holds about you, please contact our Data Protection team through the following channels:

• Email: [email protected] — for privacy queries, data access requests, and consent withdrawal
• Live Chat: Available 24/7 directly through the pkr366 Platform — for urgent privacy concerns or account security issues
• Response Time: All privacy-related email queries are acknowledged within 48 hours and substantively resolved within 30 calendar days

When submitting a data rights request, please include your registered email address, your full name as registered on your pkr366 account, and a clear description of the right you wish to exercise. This will allow us to process your request as efficiently as possible.