PK368 Privacy Policy

1. Overview

This Privacy Policy applies to all users of the PK368 sports betting platform, including the website at pk368.win and the PK368 mobile app available for Android and iOS. By creating an account or using any part of the PK368 platform, you acknowledge that you have read this policy and agree to the collection and use of your information as described here.

PK368 is committed to protecting your personal data. We collect only what is genuinely necessary to deliver our services — including account management, sports betting, PKR payment processing, customer support and responsible gaming compliance. We do not gather data for its own sake, and we do not build advertising profiles to sell to third parties.

This policy should be read alongside the Terms and Conditions and Responsible Gaming policy, which together form the full agreement governing your use of PK368.

2. Data We Collect

PK368 collects personal data in three main ways: information you provide directly, information generated through your use of the platform, and information received from payment providers during transaction processing.

Information you provide directly:

• Full name, date of birth and gender (collected at registration and used for age verification)
• Contact details including mobile number and email address
• Residential address and CNIC or passport number (collected during identity verification / KYC)
• Payment method details such as JazzCash account number, Easypaisa wallet, bank account number for Raast or IBFT, or card details
• Communications you send to PK368 support via in-app chat

Information generated through platform use:

PK368 does not collect any sensitive personal data beyond what is necessary for identity verification, responsible gaming compliance and payment fraud prevention.

3. How We Use Your Data

Every piece of data PK368 collects is used for a specific, legitimate purpose. We do not process your data in ways that are incompatible with the reason it was collected. The main purposes are:

• Account creation and management: Creating your PK368 account, verifying your identity, managing your account settings and enabling login across devices.
• Bet placement and settlement: Processing your bets, calculating odds, settling markets and crediting winnings to your account balance in PKR.
• Payment processing: Facilitating deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer and cards. Verifying that payments come from accounts registered in your name as part of anti-fraud procedures.
• Customer support: Responding to your queries, resolving disputes about bets or payments, and assisting with account issues through in-app chat.
• Responsible gaming: Monitoring betting patterns to identify potential problem gambling behaviour, enforcing deposit limits and self-exclusion settings you have applied to your account.
• Security and fraud prevention: Detecting unusual login activity, preventing multi-accounting, identifying bet manipulation and protecting the integrity of the platform.
• Platform improvement: Understanding how users navigate the PK368 app and website to improve performance, particularly during high-traffic cricket and PSL match events.
• Legal and compliance obligations: Retaining records as required for financial transaction compliance and responding to lawful requests from authorities.

PK368 may send you account-related notifications — such as deposit confirmations, withdrawal updates, bet settlements and responsible gaming reminders — via in-app notification or email. You can manage notification preferences from your account settings in the app.

4. Payment Data and PKR Transactions

All financial transactions on PK368 operate in Pakistani Rupees (PKR). Payment data is handled with a higher level of security than standard account data, given its sensitive nature.

When you make a deposit or withdrawal through JazzCash, Easypaisa, Raast or bank transfer, the actual payment is processed through the respective provider's secure infrastructure. PK368 receives a transaction reference and confirmation — we do not store your full mobile wallet PIN, bank password or card CVV on our servers.

Card payments are processed through PCI-DSS compliant payment gateways. Card numbers are tokenised during processing and are not retained in raw form on PK368 systems after the transaction is authorised.

As an anti-fraud and responsible gaming measure, PK368 requires that the payment method used for withdrawals matches the method used for deposits. This means winnings are returned through the same channel — your JazzCash wallet, Easypaisa account or registered bank account — rather than to an unverified third-party account.

5. Data Sharing

PK368 does not sell, rent or trade your personal data to third parties for commercial or marketing purposes. The only circumstances under which your data is shared with external parties are:

• Payment providers: JazzCash, Easypaisa, Raast, banks and card processors receive the transaction data necessary to process your deposits and withdrawals. Each provider operates under their own privacy and security standards.
• Identity verification services: Where automated KYC checks are used to verify your CNIC or passport, the relevant document data is shared with a trusted verification partner solely for that purpose and is not retained by the partner beyond the verification process.
• IT and infrastructure providers: Hosting, cloud storage and platform infrastructure providers who support the operation of PK368 systems. These providers are bound by data processing agreements and cannot use your data for their own purposes.
• Fraud prevention and security services: Specialised services that help PK368 detect multi-accounting, bot activity and financial fraud. Data shared is limited to what is necessary for the specific security check.
• Legal and regulatory requirements: Where PK368 is required by law or by a lawful order from a competent authority to disclose specific user data, we will comply. We will notify the affected user where we are legally permitted to do so.
• Sporting integrity bodies: In cases where there is a credible concern about match-fixing or bet manipulation relating to cricket, PSL or other sports events, relevant betting records may be shared with the relevant sporting body for investigation purposes.

All third parties with whom PK368 shares data are required to handle that data securely and to use it only for the stated purpose. PK368 does not transfer your personal data outside of the regions necessary to deliver platform services.

6. Data Retention

PK368 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable financial and compliance obligations.

• Active accounts: All account data is retained for the duration of your account being active on the platform.
• Closed accounts: Following voluntary account closure, core account and transaction records are typically retained for a minimum period necessary to satisfy financial record-keeping standards, after which they are securely deleted or anonymised.
• Bet records: Individual bet records are retained for the period necessary to resolve any disputes and meet any applicable audit requirements.
• KYC documents: Identity verification documents are retained for the period required to meet anti-money laundering and fraud prevention obligations. Once the retention period expires, documents are securely deleted.
• Support communications: In-app chat records are retained for a reasonable period to support ongoing account management and dispute resolution, after which they are deleted.

Where you request deletion of your personal data, PK368 will action that request to the extent permitted by law. Some data may need to be retained beyond a deletion request where there is a legal obligation to do so, in which case we will inform you of the basis for continued retention.

7. Security Measures

PK368 applies multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction.

• Encryption in transit: All data transmitted between your device and the PK368 platform is encrypted using TLS (Transport Layer Security), including login, bet placement, payment processing and support communications.
• Encryption at rest: Sensitive data stored on PK368 systems, including KYC documents and payment records, is encrypted at rest.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with access to sensitive data undergo security training and are subject to confidentiality obligations.
• Account security features: PK368 supports biometric login, session timeouts and login alerts on the mobile app. You can enable additional security settings from the account security section of the app.
• Fraud monitoring: Automated systems monitor account activity continuously for patterns associated with unauthorised access, multi-accounting and financial fraud. Suspicious activity triggers account review and may result in a temporary security hold.
• Penetration testing and audits: PK368 conducts regular security assessments of the platform to identify and remediate potential vulnerabilities before they can be exploited.

While PK368 takes reasonable and proportionate steps to protect your data, no platform can guarantee absolute security. You also play a role in keeping your account safe — use a strong, unique password, enable biometric login and never share your account credentials with anyone.

8. Cookies and Tracking Technologies

PK368 uses cookies and similar technologies on the website and app to support core platform functionality, improve user experience and maintain session security. We do not use third-party advertising cookies or tracking pixels for building advertising profiles.

Types of cookies used by PK368:

• Essential cookies: Required for basic platform functions including login sessions, bet slip management, deposit flow and security tokens. The platform cannot function correctly without these cookies. They are not optional.
• Functional cookies: Remember your preferences such as preferred language, odds format and notification settings, so you do not have to reconfigure these on each visit.
• Analytics cookies: Help PK368 understand how users navigate the platform — which pages are visited most during PSL season, where users drop off during the deposit flow, and how the mobile app is used across different Android and iOS versions. This data is aggregated and is not linked to individual identities.
• Security cookies: Used to detect and prevent fraudulent activity, bot access and multi-accounting. These cookies help PK368 verify that legitimate users are accessing accounts from their own devices.

You can manage cookie preferences through your browser settings. Disabling essential cookies will affect the functionality of the PK368 platform. Disabling analytics cookies will not affect your ability to use the platform or place bets.

9. Your Data Rights

As a PK368 user, you have meaningful rights over your personal data. These rights can be exercised by contacting PK368 support through the in-app chat. We aim to respond to all data rights requests within a reasonable timeframe.

To exercise any of these rights, contact PK368 support through the in-app live chat or via email at [email protected]. Please include your registered name and account details so we can verify your identity before processing the request. We will not action data rights requests where we cannot confirm the requester's identity.

10. Minors and Under-18 Protection

PK368 is strictly an adults-only platform. The minimum age to register and use PK368 is 18 years. We do not knowingly collect personal data from anyone under the age of 18.

Age verification is a mandatory part of the registration process. Where there is any reason to believe that a user may be under 18, PK368 will suspend the account pending age verification and will not process any deposits or withdrawals until verification is satisfactorily completed.

If a parent or guardian believes that their child has created an account on PK368, they should contact support immediately via in-app chat. Any account confirmed as belonging to a minor will be closed immediately, betting activity voided and any deposited funds returned to the original payment method.

We encourage parents and guardians to use parental control software on shared devices and mobile phones to prevent minors from accessing sports betting platforms. This is a shared responsibility — platform-level controls are one layer of protection, but household-level controls are equally important.

11. Changes to This Privacy Policy

PK368 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable requirements. When material changes are made, we will notify active users via in-app notification or registered email where practicable.

The date of the most recent update is displayed at the top of this page. We recommend reviewing this policy periodically, particularly if you are a regular PK368 user. Continued use of the platform following a policy update constitutes acceptance of the revised policy.

If you disagree with a material change to the Privacy Policy, you should stop using the platform and contact support to request account closure and a withdrawal of your account balance.

12. Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how PK368 has handled your personal information, please get in touch through one of the following channels:

• In-app live chat: Available 24/7 within the PK368 app — the fastest way to reach support for any account or data query.
• Email: [email protected] — for data rights requests, KYC queries and privacy concerns. Please include your registered name and account details.

PK368 aims to acknowledge all privacy-related queries within one business day and to resolve them within a reasonable timeframe. For complex data rights requests such as full data access or deletion, resolution may take slightly longer depending on the volume of data involved and any identity verification steps required.