pk345 Privacy Policy — How We Protect and Manage Your Personal Data

1.1 Who We Are. This Privacy Policy is issued by the operator of pk345 (referred to herein as "pk345," "we," "us," or "our"), the online gaming platform accessible at pk345.bio. pk345 is the data controller responsible for the personal information collected through this platform.

1.2 Scope of This Policy. This Privacy Policy applies to all personal data collected, processed, stored, or transmitted by pk345 in connection with your use of the pk345 website, games, payment services, customer support functions, and any other services offered under the pk345 brand. It applies to all registered players, visitors who browse the platform without registering, and individuals who contact pk345 support without holding an account.

1.3 Related Documents. This Privacy Policy should be read in conjunction with the pk345 Terms and Conditions and Responsible Gaming policy, all of which collectively govern your relationship with the pk345 platform.

2.1 Overview. pk345 collects the following categories of personal data in the course of operating the platform and providing its Services to Pakistani players. We collect only what is genuinely necessary — not data we might find useful at some hypothetical future point.

2.2 Sensitive Data. pk345 does not intentionally collect sensitive personal data categories such as health data, biometric data, or political opinions. Where any such data is inadvertently disclosed during a support interaction, it will be treated with the highest level of confidentiality and deleted at the earliest opportunity.

3.1 Direct Collection. The majority of personal data held by pk345 is provided directly by you during the following interactions with the platform:

• Completing the pk345 account registration process
• Submitting KYC verification documents in connection with a withdrawal request
• Making a deposit or requesting a withdrawal through the pk345 Cashier
• Contacting pk345 support via Live Chat, email, Messenger, or Viber
• Completing responsible gaming tool applications such as deposit limit or self-exclusion requests
• Participating in promotions, surveys, or feedback opportunities offered by pk345

3.2 Automated Collection. Certain categories of data — particularly technical and device data — are collected automatically when you access the pk345 platform. This includes data collected through cookies, server logs, and session tracking mechanisms as further described in Section 7 of this Policy.

3.3 Third-Party Sources. pk345 may receive data about you from third-party sources in limited circumstances, including: payment processors confirming the status and outcome of your transactions; identity verification service providers who assist with KYC document checks; and fraud detection and anti-money laundering screening services whose output contributes to our compliance assessments.

4.1 Primary Operational Purposes. pk345 processes your personal data for the following primary purposes, without which the platform could not function:

• Creating, maintaining, and administering your pk345 Account
• Verifying your identity and age eligibility in compliance with our 21+ minimum age requirement
• Processing your deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and card payment networks
• Providing access to and operating the games, sports betting markets, and live casino Services available on the pk345 platform
• Administering bonuses, promotions, and loyalty rewards
• Providing customer support in Urdu and English via all available support channels

4.2 Compliance and Legal Purposes. pk345 is obligated to process certain personal data in order to comply with applicable regulatory requirements, including:

• Anti-money laundering (AML) and counter-terrorist financing (CTF) obligations
• International gaming licence conditions including player verification requirements
• Responsible gaming obligations including identification of potentially vulnerable players
• Fraud detection, prevention, and investigation
• Record-keeping obligations specified by applicable law or licence conditions
• Cooperation with law enforcement, regulatory bodies, or court orders where legally required

4.3 Legitimate Interest Purposes. pk345 also processes certain data on the basis of legitimate interests as described in Section 5, including platform security, fraud prevention, and service quality improvement through aggregate analytics.

5.1 Contractual Necessity. The processing of your Identity Data, Contact Data, Financial Data, and Gaming Activity Data is necessary for the performance of the contract between you and pk345 — namely the Terms and Conditions you accepted upon registration. Without this processing, pk345 cannot provide its Services to you.

5.2 Legal Obligation. Processing of Identity Data and Financial Data for KYC, AML, and responsible gaming purposes is required by pk345's international gaming licence conditions and applicable regulatory obligations. This processing is not optional and cannot be refused without affecting your ability to use certain platform features, particularly withdrawals.

5.3 Legitimate Interests. pk345 processes certain technical and device data on the basis of its legitimate interest in securing the platform against fraud, maintaining accurate records for dispute resolution, improving service quality through anonymised analytics, and detecting and preventing cheating, collusion, or abuse of the platform.

5.4 Consent. Where pk345 processes your data for marketing communications — including promotional SMS messages or email newsletters — we do so on the basis of your explicit consent. You may withdraw this consent at any time as described in Section 12 of this Policy.

6.1 No Sale of Personal Data. pk345 does not sell, rent, lease, or auction your personal data to any third party for commercial purposes. This is an unconditional commitment — not a conditional one that is buried in fine print.

6.2 Authorised Third-Party Processors. pk345 shares your data with the following categories of third-party service providers who process data solely on our behalf and under our instruction, subject to contractual data processing agreements that impose equivalent privacy obligations:

• Payment processors: JazzCash, EasyPaisa, bank partners, and card network processors require transaction data to facilitate deposits and withdrawals
• Identity verification providers: Third-party KYC services that assist with document verification and sanctions screening
• Fraud and AML screening services: Automated systems that detect suspicious transaction patterns and screen against sanctions lists
• Customer support infrastructure providers: Platforms that host pk345's Live Chat, email, and messaging support channels
• Game software providers: Game studios whose software is integrated into the pk345 platform receive session data necessary for game operation and fairness auditing
• IT and security service providers: Cloud hosting, cybersecurity, and platform monitoring services that underpin the technical operation of pk345

6.3 Legal Disclosure. pk345 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, a valid court order, or in connection with the investigation of suspected fraud, money laundering, or other serious criminal activity.

7.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. pk345 uses cookies and similar tracking technologies — including session tokens and local storage — to operate the platform, maintain your login session, remember your preferences, and collect aggregate analytics data.

7.2 Categories of Cookies Used by pk345.

• Strictly Necessary Cookies: Required for the platform to function. These enable your login session, balance display, game loading, and payment Cashier. They cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, previously used payment methods, and display options to improve your experience on return visits.
• Analytics Cookies: Collect anonymised, aggregated data about how players navigate the pk345 platform — which sections are visited most, where players encounter errors, and how the mobile experience compares to desktop. This data informs platform improvements but cannot be linked to any individual player.
• Security Cookies: Used to detect and prevent fraudulent access attempts, session hijacking, and other malicious activity directed at pk345 player accounts.

7.3 Managing Cookies. You may manage or disable non-essential cookies through your browser settings. Note that disabling strictly necessary cookies will impair or prevent your use of the pk345 platform. Detailed browser cookie management instructions are available in your browser's help documentation.

8.1 General Principle. pk345 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to maintain the contractual relationship with you as an active Account holder, and to comply with applicable regulatory record-keeping obligations.

8.2 Active Account Data. For players with active pk345 Accounts, Identity Data, Contact Data, Financial Data, and Gaming Activity Data are retained for the duration of the account relationship and for a period of five (5) years following the permanent closure of the Account. This retention period reflects our obligations under international gaming licensing conditions and standard financial record-keeping requirements.

8.3 KYC Documents. Identity verification documents submitted in connection with KYC requirements are retained for five (5) years following the date of the most recent verification use, after which they are securely deleted in accordance with our data destruction protocol.

8.4 Communications Data. Customer support communications — including Live Chat transcripts, email correspondence, and Messenger records — are retained for three (3) years from the date of the interaction, to support dispute resolution and service quality review.

8.5 Technical and Analytics Data. Device and technical data collected automatically is retained in anonymised form for up to two (2) years for platform analytics purposes. Non-anonymised technical data (such as IP address logs associated with specific login events) is retained for twelve (12) months.

8.6 Post-Retention Deletion. Upon expiry of the applicable retention period, personal data is securely deleted using industry-standard data destruction methods, or irreversibly anonymised such that it can no longer be linked to any identifiable individual.

9.1 Technical Security Measures. pk345 implements the following technical security measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction:

• 256-bit SSL/TLS encryption on all data transmitted between your device and pk345 servers
• One-way cryptographic hashing of all account passwords using industry-standard algorithms — stored passwords cannot be read or recovered by pk345 staff
• Two-factor authentication (2FA) available to all players via SMS verification code
• Access controls limiting staff access to personal data on a need-to-know basis aligned with job function
• Regular third-party penetration testing and security audits of the pk345 platform infrastructure
• Automated intrusion detection systems monitoring for suspicious access patterns
• Encrypted backup systems with restricted access for disaster recovery purposes

9.2 Organisational Measures. In addition to technical controls, pk345 maintains organisational data protection measures including staff data protection training, contractual data processing obligations imposed on all third-party processors, and a designated data protection contact responsible for overseeing compliance with this Privacy Policy.

9.3 Breach Response. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, pk345 will notify affected players without undue delay, providing information about the nature of the breach, the categories and approximate number of records affected, and the steps being taken to address it.

10.1 Rights Overview. You hold the following rights in relation to the personal data pk345 holds about you. These rights may be exercised by contacting pk345 support as described in Section 14. pk345 will respond to all valid rights requests within thirty (30) days of receipt.

10.2 Limitations on Rights. Certain rights — particularly the right to erasure and the right to restrict processing — may be limited where pk345 is required to retain your data to comply with legal obligations such as AML record-keeping requirements or to defend against legal claims. Where a limitation applies, pk345 will explain the reason clearly in its response to your request.

11.1 Strict Age Minimum. pk345 is strictly unavailable to any individual under the age of 21 years. The pk345 platform does not knowingly collect personal data from anyone under this age. If pk345 discovers that personal data has been collected from an individual under 21 — whether through registration or any other means — that data will be immediately and permanently deleted, the associated Account closed, and any funds forfeited.

11.2 Age Verification. pk345 implements age verification procedures at registration and during the KYC process. Suspicious Account activity that suggests potential underage access may trigger an enhanced identity verification request. pk345 cooperates fully with regulatory authorities in all cases involving suspected underage access to the platform.

12.1 Marketing Consent. pk345 may send you promotional communications — including information about new games, bonus offers, PSL-season promotions, and platform updates — via SMS to your registered Pakistani mobile number or email, where you have provided explicit consent for us to do so. Consent is sought during the registration process and can be managed within your Account settings at any time thereafter.

12.2 Opting Out. You may withdraw your consent to receive marketing communications from pk345 at any time through any of the following methods:

• Updating your marketing preferences in the Notifications section of your pk345 Account settings
• Using the unsubscribe link included in any marketing email sent by pk345
• Contacting pk345 support via Live Chat or email and requesting removal from the marketing list

12.3 Service Communications. Opting out of marketing communications does not affect transactional or service-related messages — such as deposit confirmations, withdrawal notifications, account security alerts, or KYC verification requests — which are sent on the basis of contractual necessity and cannot be disabled while your Account remains active.

13.1 Right to Update. pk345 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the Services we offer. We will not make changes to this Policy that fundamentally alter how we use your data without providing advance notice.

13.2 Notification of Changes. Where a material change is made to this Privacy Policy — meaning a change that substantively affects your rights or the way your data is used — pk345 will notify registered Account holders by email or through an in-platform notification at least fourteen (14) days before the change takes effect. The effective date at the top of this page will be updated to reflect the date on which the most recent version came into force.

13.3 Continued Use. Your continued use of the pk345 platform following the effective date of any Privacy Policy update constitutes your acknowledgement of the updated Policy. The most current version of this Policy is always available at the /privacy-policy page of the pk345 website.

14.1 How to Contact Us. For any questions, concerns, or formal requests relating to this Privacy Policy, your personal data rights, or how pk345 processes your information, please contact us through the following channels:

• Email (Data Privacy): [email protected] — clearly marked "Privacy Policy Enquiry" in the subject line
• Live Chat: Available 24/7 within your pk345 Account dashboard — request to speak with a privacy or data protection agent
• Response Time: pk345 commits to acknowledging all privacy-related communications within 48 hours and providing a substantive response within 30 calendar days of receipt

14.2 Complaints. If you are not satisfied with pk345's response to a privacy concern, you have the right to escalate your complaint to the relevant data protection or gaming regulatory authority applicable in your jurisdiction. pk345 will provide contact details for the relevant authority upon request.