pk3 Privacy Policy

1 Data Controller

1.1 For the purposes of this Privacy Policy, the data controller responsible for your personal data is pk3, the operator of the online casino and sports betting platform at pk3.cam. pk3 operates under an international gaming license and is subject to the data protection obligations associated with that license.

1.2 References to "personal data" in this policy mean any information that identifies or could reasonably identify you as an individual, including your name, date of birth, contact details, national identity number, payment information, IP address, and device identifiers.

1.3 If you have questions or concerns about how pk3 handles your personal data, you may contact our privacy team at the email address published in the Contact section of this page. We aim to respond to all privacy-related enquiries within five business days.

2 Data We Collect

2.1 pk3 collects personal data through several channels, including account registration, identity verification, payment processing, customer support interactions, and your general use of the platform. The categories of data we collect are as follows:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identity document;
• Date of birth (used for mandatory age verification — players must be 21+);
• Residential address;
• Mobile phone number;
• Email address;
• National Identity Card (CNIC) number or passport number.

2.2 Verification Documents

• Scanned or photographed copies of government-issued identity documents (CNIC, passport);
• Proof of address documents (utility bills, bank statements) where requested;
• Source of funds documentation where required under AML compliance procedures.

2.3 Financial Data

• Payment method details (JazzCash account number, EasyPaisa account number, bank account details for HBL, UBL, Meezan Bank, Allied Bank, SadaPay, Raast, 1LINK);
• USDT TRC20 wallet address where applicable;
• Transaction history including deposit amounts, withdrawal amounts, and dates;
• Account balance history.

pk3 does not store full debit or credit card numbers on its servers. Payment processing is handled by licensed payment service providers, and card data is subject to PCI-DSS compliance requirements.

2.4 Gaming & Betting Activity Data

• Bets placed, games played, and outcomes;
• Session duration and frequency of play;
• Responsible gaming tool usage (deposit limits set, self-exclusion requests);
• Bonus and promotion usage history.

2.5 Technical & Device Data

• IP address and approximate geographic location derived therefrom;
• Device type, operating system, and browser type;
• Session logs, login timestamps, and access records;
• Cookie identifiers and similar tracking data (see Section 8).

2.6 Communications Data

• Records of customer support interactions via live chat, email, or any other channel;
• Feedback, complaints, and dispute records;
• Marketing consent preferences and opt-out records.

3 Why We Use Your Data

3.1 pk3 uses the personal data it collects for the following purposes:

3.2 pk3 does not use your personal data to make fully automated decisions that produce significant legal effects concerning you, except where required by applicable law or regulation (for example, automated screening against sanctions lists, which is a legal obligation under AML compliance requirements).

4 Legal Basis for Processing

4.1 pk3 processes your personal data on the following legal bases, depending on the specific purpose and applicable jurisdiction:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered player — including account management, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable law and regulation — including KYC identity verification, AML transaction monitoring, sanctions screening, and age verification requirements under our gaming license.
• Legitimate interests: Processing necessary for pk3's legitimate business interests where these are not overridden by your privacy rights — including fraud prevention, platform security, and responsible gaming monitoring.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for the receipt of marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Sharing Your Data

5.1 pk3 does not sell your personal data to any third party. We share personal data only in the limited circumstances described in this section.

5.1 Service Providers

pk3 engages third-party service providers to perform specific functions on our behalf. These providers have access to personal data only to the extent necessary to perform their contracted services and are contractually prohibited from using that data for any other purpose. Categories of service provider include:

• Payment processing providers (JazzCash, EasyPaisa, banking partners, USDT processing services);
• KYC and identity verification service providers;
• AML screening and compliance technology providers;
• Cloud infrastructure and hosting providers;
• Customer support platform providers;
• Platform security and fraud detection services;
• RNG certification and game audit providers.

5.2 Regulatory & Law Enforcement Authorities

pk3 may disclose personal data to gaming regulatory authorities, financial intelligence units, law enforcement agencies, or courts where required to do so by applicable law, regulation, or court order. Such disclosures are made in compliance with our legal obligations and are not considered a breach of this Privacy Policy.

5.3 Business Transfers

In the event that pk3 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to the terms of this Privacy Policy that results from it.

6 Data Retention

6.1 pk3 retains personal data for the period necessary to fulfil the purpose for which it was collected, subject to the minimum retention requirements imposed by applicable law and regulation. The principal retention periods applicable to pk3 player data are as follows:

• Account and identity data: Retained for a minimum of five (5) years following account closure, as required under international AML and gaming regulatory standards.
• Transaction records: Retained for a minimum of five (5) years following the date of each transaction, in accordance with AML record-keeping obligations.
• Gaming activity logs: Retained for a minimum of three (3) years following the date of each gaming session, for dispute resolution and regulatory audit purposes.
• Customer support records: Retained for three (3) years following the resolution of the relevant support interaction.
• Marketing consent records: Retained for the duration of the account and for one (1) year following account closure or withdrawal of consent, whichever is later.
• Self-exclusion records: Retained indefinitely to prevent re-registration during exclusion periods and to comply with responsible gaming regulatory requirements.

6.2 Where no minimum retention period is specified by law, pk3 retains personal data for no longer than is reasonably necessary for the purpose for which it was collected. Upon expiry of the applicable retention period, data is securely deleted or anonymised in accordance with pk3's data disposal procedures.

7 Security Measures

7.1 pk3 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and pk3's servers;
• AES-256 encryption for sensitive data stored at rest, including identity documents and payment details;
• Access controls ensuring that employee access to personal data is limited on a need-to-know basis;
• Multi-factor authentication requirements for all administrative access to production systems;
• Regular security audits and penetration testing conducted by independent third-party security professionals;
• Continuous monitoring of platform infrastructure for anomalous activity and potential security incidents;
• Employee training on data protection obligations and security best practices.

7.2 Notwithstanding these measures, no method of data transmission or storage is completely secure. pk3 cannot guarantee the absolute security of your data. In the event of a data security incident that poses a risk to your rights and freedoms, pk3 will notify you and relevant regulatory authorities within the timeframes required by applicable law.

7.3 You are responsible for maintaining the security of your pk3 account credentials. Do not share your password with any third party. If you suspect your account has been accessed without authorisation, contact pk3 support immediately so that appropriate steps can be taken to secure your account.

8 Cookies & Tracking Technologies

8.1 pk3 uses cookies and similar tracking technologies on the platform. A cookie is a small text file placed on your device when you visit the pk3 website. Cookies help us deliver the platform's functionality, maintain your session, and understand how the platform is used.

Types of Cookies Used

• Strictly necessary cookies: Essential for the operation of the platform, including session management, login authentication, and security functions. These cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences and settings (such as language preference) to improve your experience on the platform.
• Analytics cookies: Used to collect aggregated, anonymised information about how players use the platform, enabling pk3 to identify areas for improvement. pk3 uses privacy-preserving analytics tools and does not share analytics data with third-party advertising networks.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and other security threats on the platform.

8.2 pk3 does not use advertising or behavioural targeting cookies. We do not allow third-party advertising networks to place cookies on the pk3 platform.

8.3 You can manage cookie settings through your browser. Most browsers allow you to refuse new cookies, delete existing cookies, or receive a warning before a cookie is stored. Note that disabling strictly necessary cookies will affect the functionality of the pk3 platform, and you may not be able to log in or use certain features.

9 Your Rights

9.1 Subject to applicable law, you have the following rights in relation to the personal data pk3 holds about you:

• Right of access: You may request a copy of the personal data pk3 holds about you.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to erasure: In certain circumstances, you may request deletion of your personal data. Note that this right is subject to legal obligations requiring pk3 to retain certain data (for example, AML record-keeping requirements), which take precedence over deletion requests.
• Right to restrict processing: In certain circumstances, you may request that pk3 restrict the processing of your personal data while a dispute about its accuracy or lawfulness is resolved.
• Right to data portability: Where processing is based on your consent or a contract, you may request that pk3 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to processing based on legitimate interests. You have an absolute right to object to the use of your personal data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

9.2 To exercise any of the above rights, please contact pk3's privacy team at the email address in Section 13. pk3 will respond to all valid requests within 30 days of receipt. Complex requests may take up to 60 days; in such cases, pk3 will notify you of the extension and the reason for it.

9.3 pk3 will not charge a fee for processing data subject requests unless requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied or the request may be declined. pk3 may request proof of identity before processing a data subject request to ensure data is not disclosed to an unauthorised person.

10 Minors & Age Policy

10.1 Age verification is a mandatory component of the pk3 KYC process. pk3 will not process a withdrawal from any account that has not completed age verification. Where pk3 becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted promptly, the account will be closed, and any deposits made will be returned to the originating payment method net of any amounts already wagered.

10.2 pk3 does not direct marketing communications at minors and does not use data from player accounts to infer whether a registered player might be a minor. Suspected underage registration is treated as a compliance matter and investigated promptly.

11 International Data Transfers

11.1 pk3 operates on an international basis and may transfer your personal data to countries outside Pakistan, including to the jurisdiction in which pk3 holds its gaming license and to countries where pk3's service providers are established.

11.2 Where personal data is transferred to a country that does not provide an equivalent level of data protection to that available under international standards, pk3 takes appropriate safeguards to protect your data. These safeguards include contractual data protection obligations imposed on third-party recipients and appropriate technical security measures.

11.3 By registering an account and using the pk3 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan in connection with the services described in this policy.

12 Changes to This Policy

12.1 pk3 reserves the right to update or amend this Privacy Policy at any time. The revised policy will be published at pk3.cam/privacy-policy with the updated effective date shown at the top of the page.

12.2 For material changes that significantly affect how pk3 uses your personal data, pk3 will provide advance notice via email or an in-platform notification before the amended policy takes effect, where operationally practicable. Your continued use of the platform following any amendment constitutes acceptance of the revised policy.

12.3 Players are encouraged to review this Privacy Policy periodically. The current version always supersedes all previous versions.

13 Contact & Complaints

13.1 For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by pk3, please contact our privacy team:

13.2 If you are not satisfied with pk3's response to a privacy complaint, you have the right to escalate your complaint to the data protection authority or gaming regulatory authority with jurisdiction over pk3's operations. Details of the relevant authority can be provided by the pk3 privacy team upon request.

13.3 pk3 takes all privacy complaints seriously and is committed to resolving them fairly, promptly, and in accordance with applicable data protection law and our obligations under our international gaming license.