pkr335 Privacy Policy

pkr335 ("we", "us", "the Company") is committed to protecting the privacy and personal data of every individual who accesses or uses the pkr335 platform at pkr335.org (the "Platform"). This Privacy Policy sets out in clear, plain terms exactly what personal information pkr335 collects from its players, how that information is used, the circumstances in which it may be shared, and the rights available to you in relation to your data.

pkr335 operates as an internationally licensed online casino and sports betting platform serving players across Pakistan and other permitted jurisdictions. As a licensed operator, we are legally obligated to collect certain categories of personal data — including identity and payment information — as a condition of our gaming license and in compliance with applicable anti-money laundering (AML) regulations. This Privacy Policy explains those obligations in full.

This Privacy Policy should be read alongside the pkr335 Terms & Conditions and the pkr335 Responsible Gaming Policy, both of which form part of the overall agreement between you and pkr335.

pkr335 collects personal data in the following categories. The specific data points collected may vary depending on the stage of your relationship with the Platform — for example, some data is only collected if you proceed to full KYC verification or if you contact customer support.

pkr335 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is inherent in government-issued identity documents submitted during KYC. Where such incidental data is present in a submitted document, it is not extracted, processed, or stored separately from the document itself.

pkr335 collects personal data through the following means:

• Direct input by you: Information you provide during registration, account verification, deposit and withdrawal requests, bonus claims, and communications with the pkr335 support team.
• Automated technical collection: Data collected automatically when you access the Platform, including IP addresses, device identifiers, browser information, and session activity logs recorded by our servers.
• Cookies and similar technologies: Session cookies, persistent cookies, and local storage mechanisms used to maintain your login session, remember preferences, and monitor platform performance. See Section 7 for full details.
• Third-party KYC providers: Identity and document verification data returned to pkr335 by our accredited KYC verification partners following the document submission process.
• Payment processors: Transaction confirmation data, wallet identifiers, and payment status updates returned to pkr335 by JazzCash, EasyPaisa, HBL, UBL, SadaPay, and our USDT processing gateway upon deposit or withdrawal completion.
• Fraud and AML screening tools: Data flags or risk scores returned by third-party financial crime screening services that pkr335 uses to comply with its anti-money laundering obligations under its international gaming license.

pkr335 processes personal data only where there is a clear and legitimate purpose for doing so. The following table sets out the primary purposes for which your data is used and the legal basis on which each processing activity rests:

• Account registration and management: To create and maintain your pkr335 Account, authenticate your identity at login, and manage your account settings. Legal basis: contract performance.
• Age and identity verification (KYC): To verify that you are at least 21 years of age and that the identity you have provided is genuine, as required by our licensing obligations. Legal basis: legal obligation and contract performance.
• Payment processing: To process deposits from and withdrawals to your registered payment methods (JazzCash, EasyPaisa, HBL, UBL, SadaPay, USDT TRC20). Legal basis: contract performance.
• Anti-money laundering (AML) compliance: To screen transactions and account behaviour against AML risk indicators in accordance with our international gaming license obligations. Legal basis: legal obligation.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent activity, cheating, account takeovers, and other security threats. Legal basis: legitimate interests.
• Responsible gaming monitoring: To identify patterns of behaviour that may indicate problem gambling and to implement responsible gaming tools requested by you, including deposit limits, cooling-off periods, and self-exclusion. Legal basis: legal obligation and legitimate interests.
• Customer support: To respond to your enquiries, complaints, and requests submitted via live chat, email, or any other support channel. Legal basis: contract performance and legitimate interests.
• Platform improvement and analytics: To analyse aggregated and anonymised usage data for the purpose of improving Platform performance, game offerings, and user experience. Legal basis: legitimate interests.
• Marketing communications: To send you promotional offers, bonus notifications, and product updates where you have opted in to receive such communications. Legal basis: consent. You may withdraw consent at any time via your account settings.

pkr335 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

• KYC and identity verification providers: Accredited third-party providers who verify the authenticity of your identity documents. These providers operate under strict data processing agreements with pkr335 and are not permitted to use your data for any purpose other than verification.
• Payment processors: JazzCash, EasyPaisa, HBL, UBL, SadaPay, and our USDT gateway receive the minimum data necessary to process your requested financial transaction. Payment processors are independently responsible for the security of data within their own systems.
• Game providers and software suppliers: Third-party game studios whose titles are available on the pkr335 platform may receive anonymised or pseudonymised player identifiers for the purpose of game session management, RNG certification compliance, and jackpot processing. Full identity data is not shared with game providers.
• Regulatory and law enforcement authorities: pkr335 may be legally required to disclose personal data to its licensing authority, financial intelligence units, or law enforcement agencies in connection with AML investigations, fraud cases, or regulatory audits. Such disclosures are made only to the extent required by law.
• Group companies and service providers: pkr335 may share data with affiliated group entities or contracted service providers (such as cloud hosting providers, cybersecurity firms, or customer support platform vendors) who process data on pkr335's behalf under binding data processing agreements.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of pkr335's business, player data may be transferred to the acquiring entity as part of the transaction, subject to the same privacy protections described in this Policy.

pkr335 handles payment data with the highest level of care given its sensitivity. The following specific rules apply to the processing of financial and payment information on the pkr335 platform:

• pkr335 does not store full bank account numbers, complete IBAN strings, or full JazzCash/EasyPaisa wallet credentials on its own servers. Payment credentials are tokenised by the respective payment processor.
• Deposit and withdrawal transaction records — including amounts in PKR, timestamps, payment method type, and transaction status — are retained by pkr335 for a minimum of five years as required by AML compliance obligations under our international gaming license.
• USDT TRC20 wallet addresses used for cryptocurrency deposits and withdrawals are stored in association with your pkr335 Account and are subject to the same retention and security measures as other financial data.
• pkr335 will only process withdrawal requests to a payment method that has been used for a prior deposit by the same Account holder, or to an alternative method that has been verified as belonging to the Account holder through the KYC process.

pkr335 uses cookies and similar technologies on the Platform for specific, limited purposes. We do not use advertising networks, cross-site tracking pixels, or social media tracking cookies. The cookies used by pkr335 fall into the following categories:

• Strictly necessary cookies: Essential session cookies that maintain your authenticated login state during a Platform session. Without these cookies, the Platform cannot function correctly. These cookies expire when you close your browser or log out.
• Security cookies: Cookies used to detect and prevent fraudulent login attempts, session hijacking, and cross-site request forgery (CSRF) attacks. These are essential to the security of your Account.
• Performance and analytics cookies: First-party analytics cookies that collect anonymised data about how players navigate the Platform — such as which pages are visited most frequently and where errors occur. This data is used solely to improve Platform performance and is not linked to individual identities.
• Preference cookies: Cookies that remember your Platform preferences such as language selection and display settings. These are optional and can be cleared via your browser settings without affecting core Platform functionality.

You can control or disable cookies through your browser settings at any time. Note that disabling strictly necessary and security cookies will prevent you from logging into your pkr335 Account. pkr335 does not currently offer a separate cookie consent management panel, as the cookies we use are either strictly necessary for Platform operation or are first-party analytics cookies that do not involve cross-site tracking of any kind.

pkr335 retains personal data only for as long as it is necessary for the purposes described in this Privacy Policy or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data: Retained for the duration of your Account being active on the pkr335 Platform plus an additional period of five years following account closure, in compliance with our AML and licensing obligations.
• KYC and identity documents: Retained for a minimum of five years from the date of submission, or for the period mandated by our international gaming license, whichever is longer.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction in accordance with financial crime compliance requirements.
• Customer support communications: Retained for three years from the date of each communication, unless the communication relates to a formal dispute or legal matter, in which case it is retained until the matter is fully resolved plus one additional year.
• Technical and session data: Log files and session data are retained for a maximum of 12 months, after which they are deleted or anonymised.
• Marketing consent records: Retained for the duration of your consent being active, plus sufficient time to demonstrate that consent was validly obtained, in the event of a regulatory inquiry.

Upon expiry of the applicable retention period, pkr335 will securely delete or anonymise your personal data in accordance with industry-standard data destruction practices.

As a pkr335 player, you have the following rights in relation to your personal data. pkr335 will respond to all valid rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

• Right of access: You have the right to request a copy of all personal data pkr335 holds about you, along with information about how it is being used. This is sometimes referred to as a Subject Access Request (SAR).
• Right to rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. You can update basic contact details directly via your Account settings; other corrections should be requested through the support team.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to overriding legal retention obligations — pkr335 cannot delete data that it is legally required to retain under its gaming license or AML obligations.
• Right to restrict processing: You have the right to request that pkr335 restricts the processing of your data in certain circumstances, for example where you contest its accuracy while a correction is being investigated.
• Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that this data be transferred to another controller where technically feasible.
• Right to withdraw consent: Where pkr335 processes your data on the basis of your consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.
• Right to object: You have the right to object to pkr335 processing your personal data on the basis of legitimate interests. pkr335 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for the establishment, exercise, or defence of legal claims.

pkr335 implements a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. The core security measures in place include:

• TLS 1.2 or higher encryption for all data transmitted between your device and the pkr335 Platform.
• AES-256 encryption at rest for all sensitive data stored in pkr335 databases, including identity records and KYC documents.
• Role-based access controls (RBAC) ensuring that pkr335 staff can only access player data that is strictly necessary for their specific job function.
• Regular third-party penetration testing and security audits of the pkr335 Platform infrastructure.
• 24/7 intrusion detection and monitoring systems that flag and respond to anomalous access patterns in real time.
• Multi-factor authentication required for all pkr335 internal staff accessing systems that hold player personal data.
• Mandatory data security training for all pkr335 employees, contractors, and third-party service providers with access to player data.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, pkr335 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach in accordance with our incident response procedures.

The pkr335 Platform is strictly for players who are 21 years of age or older. pkr335 does not knowingly collect personal data from any individual under the age of 21. If pkr335 becomes aware or has reason to believe that personal data has been collected from a minor, the following immediate steps will be taken:

• The relevant Account will be immediately suspended pending investigation.
• Any funds deposited will be returned to the original payment method following verification.
• All personal data associated with the Account will be permanently deleted from pkr335 systems, subject to any overriding legal retention obligation.
• Where required by law, the matter may be reported to the relevant regulatory or child protection authority.

pkr335 operates under an international gaming license and its infrastructure, service providers, and data processing partners may be located in jurisdictions outside Pakistan. As a result, your personal data may be transferred to and processed in countries that have different data protection frameworks from those applicable in Pakistan.

Where such international transfers occur, pkr335 ensures that appropriate safeguards are in place to protect your personal data, including contractual data transfer mechanisms such as standard contractual clauses, binding corporate rules where applicable, or reliance on adequacy decisions recognised within our licensing jurisdiction.

By using the pkr335 Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Pakistan as described in this section, subject always to the safeguards and security measures described throughout this Privacy Policy.

The pkr335 Platform may contain references to third-party services such as payment processors, game providers, and identity verification platforms. Each of these third-party services operates its own privacy policy, which is independent of this Privacy Policy. pkr335 is not responsible for the data practices of third-party services and encourages players to review the relevant privacy policies before interacting with any third-party service.

pkr335 does not include third-party social media plugins, external advertising networks, or affiliate tracking scripts on the Platform that would allow third parties to collect personal data about you through your use of pkr335. All analytics and performance monitoring tools used by pkr335 are first-party tools operated under pkr335's own data processing controls.

pkr335 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, our licensing obligations, or applicable data protection law. Where a material change is made to this Privacy Policy, pkr335 will notify registered players via the email address associated with their Account and will display a prominent notice on the Platform for a minimum period of 7 days before the change takes effect.

The "Last Updated" date at the top of this Privacy Policy will always reflect the date of the most recent revision. Your continued use of the pkr335 Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the amended Policy, you should contact pkr335 support to request account closure and withdrawal of any remaining balance.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a suspected privacy breach, please contact the pkr335 Data Protection team using the details below. Our support team handles all data-related queries in both English and Urdu and is available around the clock.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the pkr335 Platform after login
• Response time: Privacy and data rights requests acknowledged within 24 hours; substantively responded to within 30 days
• Language: English and Urdu support available for all privacy-related enquiries