1 Introduction
This Privacy Policy ("Policy") is issued by pak339 ("pak339", "we", "our" or "us") and sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us in connection with your access to and use of the pak339 online gambling platform and information portal accessible at https://pak339.cam and any associated subdomains or applications (collectively, the "Platform").
pak339 is committed to protecting your privacy and handling your personal data in a transparent, lawful and responsible manner. This Policy is designed to help you understand what information we collect, why we collect it, how we use it, how long we retain it and what rights you have in relation to it.
By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference.
2 Definitions
For the purposes of this Privacy Policy, the following terms have the meanings assigned below:
- "Personal Data" means any information relating to an identified or identifiable natural person ("Data Subject"). An identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data or online identifier.
- "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, use, disclosure, transmission, erasure or destruction.
- "Data Controller" means pak339, which determines the purposes and means of processing your Personal Data.
- "Data Processor" means any third party that processes Personal Data on behalf of pak339, acting under pak339's written instruction.
- "KYC" means Know Your Customer — the identity and age verification procedures we are required to conduct for regulatory compliance purposes.
- "Consent" means a freely given, specific, informed and unambiguous indication of agreement to the processing of Personal Data for a specified purpose.
- "Account" means a registered user account created on the Platform.
3 Personal Data We Collect
pak339 collects Personal Data through several means, including data you provide directly during registration and use of the Platform, data collected automatically through your interaction with the Platform, and data received from third-party sources such as KYC verification providers and payment processors. The categories of data we collect are set out below.
3.1 Data You Provide Directly
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, passport number | Registration; KYC verification |
| Contact Data | Email address, phone number, city of residence | Registration; account updates |
| Financial Data | Payment method details (type, masked account references); transaction history | Deposit and withdrawal transactions |
| Verification Documents | Copies of government-issued ID, proof of address, source-of-funds documentation | KYC compliance checks |
| Communications Data | Content of support messages, live chat transcripts, email correspondence | Support interactions |
3.2 Data Collected Automatically
- Technical Data: IP address, device type and operating system, browser type and version, screen resolution, session duration and timestamps.
- Usage Data: Pages visited, game sessions initiated, bet history, bonus activations, navigation paths and Platform features accessed.
- Cookie and Tracking Data: Data collected through cookies, web beacons and similar technologies as described in Section 7 of this Policy.
3.3 Data Received from Third Parties
pak339 may receive Personal Data from identity verification providers, payment processors, fraud detection services and, where applicable, responsible gambling support organisations. Such data is used solely for the purposes described in this Policy.
4 Legal Basis for Processing
pak339 processes your Personal Data only where a valid legal basis exists under applicable data protection law. The legal bases we rely on are as follows:
- Contractual Necessity: Processing is necessary to perform the contract between you and pak339, including providing account services, processing deposits and withdrawals, and delivering the products and services available on the Platform.
- Legal Obligation: Processing is necessary to comply with legal and regulatory obligations applicable to pak339, including KYC identity verification, anti-money laundering (AML) record-keeping, regulatory reporting and responsible gambling compliance.
- Legitimate Interests: Processing is necessary for pak339's legitimate business interests, including fraud detection and prevention, Platform security, and improvement of user experience, provided those interests are not overridden by your rights.
- Consent: Where we send you marketing communications or use non-essential cookies, we do so only on the basis of your freely given, informed and specific consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
5 How We Use Your Personal Data
pak339 uses the Personal Data it collects for the following specific and legitimate purposes:
5.1 Account Management
To create and maintain your Account, verify your identity, authenticate your login sessions, and deliver the services available on the Platform including sports betting, live casino, slots and responsible gambling tools.
5.2 Transaction Processing
To process deposits, withdrawals and other financial transactions, including currency conversion where applicable. Financial transaction records are also maintained for regulatory and AML compliance purposes.
5.3 Identity Verification (KYC)
To verify your identity, age, source of funds and residential status as required by applicable licensing and regulatory obligations. KYC data may be cross-checked against third-party verification databases.
5.4 Responsible Gambling Compliance
To administer responsible gambling tools including deposit limits, loss limits, session time limits and self-exclusion. Gameplay data is also used to identify behavioural patterns that may indicate problem gambling, in line with our responsible gambling obligations.
5.5 Fraud Prevention and Platform Security
To detect and prevent fraudulent activity, account abuse, money laundering, bonus exploitation and other security threats. This includes automated monitoring of account activity and flagging unusual patterns for manual review.
5.6 Customer Support
To respond to your support enquiries, process complaints and communicate with you regarding your Account, transactions and Platform usage.
5.7 Marketing Communications (Consent Only)
To send you promotional emails, offers and Platform news where you have provided explicit consent. You may withdraw consent and unsubscribe from marketing communications at any time through your account settings.
5.8 Platform Improvement and Analytics
To analyse usage patterns, diagnose technical issues, test new features and improve the overall performance and usability of the Platform. Analytics processing uses aggregated or pseudonymised data where practicable.
6 Data Sharing & Third Parties
pak339 does not sell, rent or trade your Personal Data to third parties for their own marketing or commercial purposes. We may share your Personal Data with third parties in the following limited circumstances:
- Service Providers: Third-party companies that provide services on our behalf, including payment processing, identity verification, fraud detection, IT infrastructure, customer support software and analytics. These parties act as Data Processors and are contractually bound to process your data only on our instructions and in accordance with appropriate security standards.
- Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, regulatory directive or legitimate legal process, pak339 may disclose Personal Data to competent authorities. This includes AML reporting obligations.
- Licensing Authorities: Personal Data and account records may be disclosed to the licensing authority under whose jurisdiction pak339 operates, as required for regulatory compliance, audit or investigation purposes.
- Business Transfers: In the event of a merger, acquisition, restructuring or sale of pak339's business or assets, Personal Data may be transferred to the acquiring entity, subject to equivalent data protection commitments.
Where Personal Data is shared with Data Processors, pak339 maintains written agreements requiring them to protect the data, use it only for the specified purpose and comply with applicable data protection obligations.
7 Cookies & Tracking Technologies
pak339 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage patterns and — where consent is given — deliver relevant promotional content. The categories of cookies we use are described below.
| Cookie Type | Purpose | Consent Required? |
|---|---|---|
| Strictly Necessary | Enable core Platform functionality: session management, login authentication, security tokens | No — essential to operation |
| Functional | Remember your preferences such as language settings, display options and session history | Implied on account creation |
| Analytics | Collect aggregated data on Platform usage to identify performance issues and improve user experience | Yes — consent required |
| Marketing | Track interactions with promotional content and enable personalised offers (only where marketing consent is given) | Yes — explicit consent required |
You may control cookie preferences through your browser settings. Disabling certain categories of cookies may affect Platform functionality. For strictly necessary cookies, no opt-out is available as they are required for the Platform to function.
8 Data Retention
pak339 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or regulatory reporting obligations.
The following general retention principles apply:
- Active Account Data: Retained for the duration of your Account's active status and for a defined period thereafter, as required for dispute resolution and legal compliance.
- KYC and Identity Verification Records: Retained for the period mandated by applicable AML and licensing regulations, which typically requires record-keeping for a minimum of five (5) years from the date of account closure or last transaction, whichever is later.
- Transaction Records: Financial transaction records are retained in accordance with applicable AML record-keeping requirements.
- Marketing Consent Records: Retained for as long as you have an active Account, or until you withdraw consent, whichever is earlier.
- Support Correspondence: Retained for a reasonable period necessary for quality assurance, complaint resolution and legal purposes.
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with pak339's data disposal procedures.
9 Your Data Rights
Subject to applicable data protection law and the legal basis for processing, you may have the following rights in relation to your Personal Data held by pak339. The availability and scope of these rights may vary depending on your jurisdiction.
Right of Access
You may request a copy of the Personal Data we hold about you, along with information about how it is being used.
Right to Rectification
You may request correction of inaccurate or incomplete Personal Data held about you.
Right to Erasure
In certain circumstances, you may request deletion of your Personal Data, subject to overriding legal obligations (e.g., AML retention requirements).
Right to Restrict Processing
You may request that we restrict the processing of your Personal Data in certain circumstances, such as while a correction request is pending.
Right to Data Portability
Where processing is based on consent or contract, you may request that we provide your Personal Data in a structured, machine-readable format.
Right to Object
You may object to processing based on legitimate interests, including direct marketing processing. Where you object to direct marketing, we will cease that processing immediately.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
Right to Complain
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe your data has been processed unlawfully.
To exercise any of the above rights, please contact pak339 using the details in Section 15 of this Policy. We will respond to verified requests within the timeframe required by applicable law. We may require verification of your identity before processing any data rights request.
10 Data Security
pak339 implements and maintains appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
- Access controls restricting Personal Data access to authorised personnel with a demonstrated need to access it for legitimate business purposes.
- Secure, access-controlled server environments for data storage, with regular security patching and vulnerability assessment.
- Staff training on data protection obligations, confidentiality requirements and security procedures.
- Procedures for detecting, assessing and — where required — notifying data protection authorities and affected individuals of data security incidents.
While pak339 takes robust precautions, no method of data transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your data but commit to acting promptly and transparently in the event of any security incident affecting your Personal Data.
11 Children's Privacy
The Platform is strictly intended for adults aged 18 or older — or the higher minimum age required by the applicable operator or license jurisdiction. pak339 does not knowingly collect, process or store Personal Data from individuals under the applicable minimum age.
If pak339 becomes aware that Personal Data has been collected from a person below the applicable minimum age without appropriate verification, we will take immediate steps to delete that data, close the associated Account and, where appropriate, retain records solely for the purpose of preventing re-registration by the same individual.
12 International Data Transfers
pak339 may transfer your Personal Data to countries or territories outside your country of residence, including to countries where pak339's service providers, Data Processors or infrastructure partners are located. Such transfers occur only where appropriate safeguards are in place to protect your Personal Data, including:
- Transfers to countries that have been recognised as providing an adequate level of data protection under applicable law.
- Use of contractual clauses or equivalent data transfer mechanisms approved under applicable data protection law.
- Binding corporate rules or other legally recognised transfer mechanisms where applicable.
If you require further information about the safeguards applicable to any specific international data transfer, please contact us using the details in Section 15.
13 Third-Party Links & Services
The Platform may reference or reference third-party services, products or payment providers in an informational context (for example, references to Pakistani payment rails such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah as familiar payment references). These references are contextual only and do not constitute endorsement or affiliation.
pak339 is not responsible for the privacy practices of any third-party services, payment processors or external platforms. When you interact with third-party services in connection with transactions on the Platform, those third parties are acting as independent data controllers and their own privacy policies apply. We encourage you to review the privacy policies of any third-party services you use.
14 Amendments to This Privacy Policy
pak339 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements or the services we provide. The date of the most recent update is displayed at the top of this document.
Where changes are material, pak339 will notify registered users by email or by way of a prominent notice on the Platform prior to the changes taking effect. For non-material changes, the updated Policy will be published on this page with a revised effective date.
Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgment of and agreement to the updated Privacy Policy. If you do not agree with the changes, you should discontinue use of the Platform and close your Account before the amended Policy takes effect.
15 Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data by pak339, please contact us using the details below. Note that all contact information is provided as plain text — email addresses are not clickable links.
Data Privacy Enquiries & General Support:
[email protected]
Responsible Gambling Support:
[email protected]
When submitting a data rights request, please include your registered email address and a description of your request. We may require additional identity verification before processing your request. Do not send sensitive personal documents (such as ID copies) by email unless specifically requested and instructed to do so by a member of our support team. These email addresses are plain text — they are not clickable links.