pk355 Privacy Policy

1.Introduction & Scope

This Privacy Policy ("Policy") describes how pk355 ("pk355", "we", "us", "our") collects, uses, stores, shares, and protects personal data when you access or use the pk355 website at pk355.org, the pk355 mobile application, and all associated services (collectively, the "Platform").

By registering an account, accessing the Platform, or using any pk355 Service, you acknowledge that you have read and understood this Policy. This Policy forms part of your agreement with pk355 and should be read alongside our Terms & Conditions.

This Policy applies to all players, visitors, and registered members of the pk355 platform, including players accessing the Platform from Pakistan, irrespective of the device or network used. Where local data protection laws impose additional obligations on pk355, those obligations are reflected in our data handling practices.

2.Data Controller

For the purposes of applicable data protection law, pk355.org is the data controller in respect of personal data collected through the Platform. The data controller is responsible for determining the purposes and means of processing personal data as described in this Policy.

If you have any questions about how pk355 processes your personal data, or if you wish to exercise any of your rights described in Section 11, please contact us using the details in Section 14.

3.Personal Data We Collect

pk355 collects the following categories of personal data, depending on your interaction with the Platform:

pk355 does not collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or health information) except where a player voluntarily discloses such information, for example in the context of a responsible gaming self-exclusion request.

4.How We Collect Your Data

pk355 collects personal data through the following means:

• Directly from you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal, configure account settings, contact customer support, or interact with any feature of the Platform that requires you to input data.
• Automatically: When you access the Platform, our servers and cookies automatically record technical data such as your IP address, device identifiers, browser information, and session activity. This occurs whether or not you are logged in to an account.
• From payment providers: When you make a deposit via Easypaisa, JazzCash, HBL, UBL, Meezan Bank, or Bank Alfalah, the relevant provider may confirm transaction status and, where required for KYC, account ownership information.
• From identity verification services: Where pk355 uses a third-party KYC or age verification service, that provider may return verification status and data extracted from your submitted documents.

5.Legal Basis for Processing

pk355 processes personal data on one or more of the following legal grounds:

• Contractual necessity: Processing is necessary to perform the contract between you and pk355, including operating your account, processing transactions, and providing access to games and betting services.
• Legal obligation: Processing is necessary for pk355 to comply with applicable legal and regulatory obligations, including KYC requirements, anti-money-laundering obligations, and record-keeping duties.
• Legitimate interests: Processing is necessary for the legitimate interests of pk355, including fraud prevention, platform security, responsible gaming monitoring, and improving the Platform — provided those interests are not overridden by your rights and freedoms.
• Consent: Where processing is based on your consent (for example, in relation to certain marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6.How We Use Your Data

pk355 uses the personal data it collects for the following purposes:

• To create and maintain your pk355 account and verify your identity in accordance with KYC obligations.
• To process PKR deposits and withdrawals via your chosen payment method (Easypaisa, JazzCash, or bank transfer) and to maintain accurate transaction records.
• To provide access to casino games, sports betting, live dealer services, and all other pk355 Platform features.
• To detect and prevent fraud, money laundering, collusion, bonus abuse, and other prohibited activity on the Platform.
• To administer and fulfil bonuses and promotions, including verifying bonus eligibility and tracking wagering progress.
• To operate and enforce responsible gaming tools, including monitoring for problem gambling indicators and applying player-requested limits or exclusions.
• To communicate with you about your account, transactions, and any changes to Platform services or these policies.
• To respond to support enquiries submitted via live chat or email.
• To improve the Platform through analysis of aggregated, anonymised usage data.
• To comply with legal, regulatory, or court-ordered obligations applicable to pk355.

7.Sharing Your Data

7.1 Service Providers

pk355 shares personal data with carefully selected third-party service providers who assist in operating the Platform. These include payment processing companies (such as the operators of Easypaisa and JazzCash integrations), KYC and identity verification providers, customer support platform operators, game software providers, cloud hosting and infrastructure providers, and fraud detection services. All such providers are required to process data strictly in accordance with pk355's instructions and applicable data protection obligations.

7.2 Legal & Regulatory Disclosure

pk355 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other governmental authorities where required to do so by law, court order, or in response to a lawful request. pk355 will endeavour to notify affected players of such disclosures where legally permitted to do so.

7.3 Business Transfers

In the event that pk355 or any part of its business is sold, merged, or acquired, personal data held by pk355 may be transferred to the successor entity as part of that transaction. Players will be notified of any such transfer and of any material changes to how their data is processed as a result.

7.4 No Sale of Data

pk355 does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. This is a firm commitment and not subject to any exception under this Policy.

8.Cookies & Tracking Technologies

pk355 uses cookies and similar tracking technologies (including local storage and session storage) to operate and improve the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your pk355 account and security cookies that help prevent cross-site request forgery. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences, such as language, display settings, or game lobby filter choices. These are set for the duration of your session or for a defined period.
• Performance and analytics cookies: Collect anonymised or aggregated data about how players use the Platform — for example, which pages are most visited or where errors occur. This data is used to improve Platform performance.

You can manage cookie preferences through your browser settings. Disabling cookies other than strictly necessary ones may affect some Platform functionality. Clearing your browser cache may log you out of your pk355 account.

9.Data Retention

pk355 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable law, whichever is longer. The following general retention periods apply:

• Account and identity data: Retained for the duration of the account and for a minimum of five (5) years following account closure, in accordance with anti-money-laundering and KYC record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years following each transaction.
• Support communications: Retained for a period of three (3) years from the date of the communication, unless a longer retention period is required in connection with an ongoing dispute or investigation.
• Technical and usage data: Retained in aggregated or anonymised form for analytical purposes indefinitely; individual-level technical data is typically retained for twelve (12) months.
• Responsible gaming records: Retained for the duration of any self-exclusion period plus five (5) years to prevent circumvention.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

10.Security Measures

pk355 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the pk355 Platform.
• Encryption of stored personal data and financial records at rest.
• Access controls limiting data access to authorised pk355 personnel and service providers on a need-to-know basis.
• Two-factor authentication available for all player accounts and mandated for administrative systems.
• Regular security assessments and penetration testing of Platform infrastructure.
• Incident response procedures to detect, investigate, and notify affected individuals of any personal data breach in accordance with applicable law.

No security system is entirely impenetrable. In the event of a data security incident affecting your personal data, pk355 will notify you and any relevant authorities as required by law.

11.Your Rights

Subject to applicable data protection law, you have the following rights in relation to your personal data held by pk355:

• Right of access: You may request a copy of the personal data pk355 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Minor account data corrections (such as address updates) can be made directly in your pk355 account settings.
• Right to erasure: You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected and no legal retention obligation applies.
• Right to restrict processing: You may request that pk355 limit the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to object: You may object to processing carried out on the basis of pk355's legitimate interests. pk355 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact pk355 support via live chat on the Platform or by email at [email protected]. pk355 will respond to all data rights requests within 30 calendar days. pk355 may need to verify your identity before processing your request.

12.Children's Privacy

The pk355 Platform is strictly for adults aged 18 and over. pk355 does not knowingly collect personal data from any individual under the age of 18. If pk355 becomes aware that personal data has been collected from a person under 18, that account will be permanently closed and the data will be deleted in accordance with our retention policy. If you believe a minor has registered on pk355, please contact our support team immediately.

13.Changes to This Policy

pk355 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, registered players will be notified via email or an in-platform notification prior to the changes taking effect, where practicable. The "Last updated" date at the top of this Policy reflects the most recent revision.

Your continued use of the pk355 Platform following notification of changes constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you should close your account and cease using the Platform before the effective date of the changes.

14.Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or pk355's data processing practices, please contact us through the following channels:

• Live chat: Available 24/7 directly on the pk355 Platform — the fastest way to reach our team.
• Email: [email protected] — for written data rights requests and formal enquiries.

pk355 aims to acknowledge all written privacy enquiries within 5 business days and to resolve them fully within 30 calendar days. For complex requests, we will keep you informed of progress.