Privacy Policy

1 Introduction

This Privacy Policy (hereinafter referred to as "the Policy" or "this Policy") is published by pk3867, the online gaming platform accessible at pk3867.cam (hereinafter "the Platform", "the Operator", "we", "us", or "our"). This Policy describes in clear and transparent terms how we collect, receive, store, use, share, protect, and ultimately dispose of the personal information you provide to us or that we otherwise collect in connection with your use of the Platform.

This Policy applies to all Users of pk3867 — whether you are a registered Account holder, a visitor browsing the Platform without an Account, or a third party whose data we receive in connection with Platform operations. By accessing pk3867 or registering an Account, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform more broadly and which incorporate this Policy by reference.

2 Definitions

For the purposes of this Policy, the following terms have the meanings set out below:

• "Account" — a registered personal gaming account on the pk3867 Platform.
• "Controller" — pk3867, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Subject" — any identified or identifiable natural person whose personal data is processed by pk3867, including registered Users and Platform visitors.
• "KYC" — Know Your Customer; the identity and age verification process applied by pk3867 in accordance with applicable regulatory and AML obligations.
• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, contact details, identity documents, financial information, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, alteration, restriction, or deletion.
• "Processor" — a third party that processes Personal Data on behalf of pk3867 under written contractual obligations.
• "Sensitive Data" — a subset of Personal Data that warrants heightened protection, including identity document numbers and financial account details.
• "User" — any individual who accesses or uses the pk3867 Platform, whether registered or not.

3 Personal Data We Collect

pk3867 collects Personal Data through several distinct channels. The categories of data collected and their respective sources are set out in the table below:

4 How We Use Your Personal Data

pk3867 uses collected Personal Data for the following purposes:

• Account Administration: Creating, maintaining, and managing your Account, including processing login credentials, account preferences, and responsible gambling tool settings.
• Identity & Age Verification (KYC): Verifying that you meet the eligibility requirements set out in our Terms & Conditions, including the 18+ age requirement, or the higher minimum age required by the applicable operator or license jurisdiction.
• Transaction Processing: Facilitating deposits and withdrawals through available payment methods referenced in your cashier, reconciling transaction records, and resolving payment disputes.
• Fraud Prevention & AML Compliance: Detecting, investigating, and preventing fraudulent activity, money laundering, and other prohibited conduct in accordance with applicable regulatory requirements.
• Customer Support: Responding to enquiries, resolving complaints, processing self-exclusion requests, and maintaining support interaction records.
• Platform Improvement: Analysing aggregated usage data to improve site performance, game load times, mobile experience, and feature design — particularly for users accessing the Platform in Pakistan on 4G connections.
• Promotional Communications: Sending you relevant offers, promotions, and account updates by email or in-platform notification, subject to your marketing preferences. You may opt out at any time.
• Legal & Regulatory Compliance: Fulfilling obligations under applicable laws, responding to lawful requests from competent authorities, and maintaining records required by the Operator's licensing jurisdiction.
• Responsible Gambling Monitoring: Monitoring gameplay patterns to identify indicators of potential problem gambling and, where appropriate, proactively engaging with at-risk players or applying account protections.

5 Legal Basis for Processing

Each category of data processing carried out by pk3867 is underpinned by one or more of the following lawful bases:

• Contractual Necessity: Processing required to perform the contract between you and pk3867 — including Account creation, transaction processing, and customer support — is conducted on this basis.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements — including KYC, AML checks, age verification, and record-keeping obligations mandated by the Operator's licensing jurisdiction — is conducted on this basis.
• Legitimate Interests: Processing conducted for fraud prevention, Platform security, responsible gambling monitoring, and aggregate analytics is conducted on the basis of the Operator's legitimate interests, where those interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications (promotional emails, in-platform offers) is conducted on the basis of your consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

pk3867 does not sell, rent, or trade your Personal Data to third parties for their own commercial or marketing purposes. We share data only in the circumstances described below, and only to the extent necessary for each purpose:

• Payment Processors: We share Financial Data with third-party payment processing providers to facilitate deposits and withdrawals. These providers operate under strict data processing agreements and are contractually prohibited from using your data for any purpose other than processing the specific transaction. Payment providers referenced on pk3867 — such as commonly used Pakistani mobile wallet services and bank transfer providers — are independent companies whose own privacy policies apply to their data handling practices.
• Identity Verification Providers: KYC and liveness verification is conducted with the assistance of specialist third-party verification platforms. These processors act on our behalf and are bound by data processing agreements that restrict their use of your data.
• Game Software Providers: Third-party game providers may receive Technical Data and gameplay session data necessary to deliver their games through the Platform. They do not receive your Identity Data or Financial Data.
• Regulatory & Law Enforcement Authorities: We may disclose Personal Data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. We will notify you of such disclosure where we are legally permitted to do so.
• Anti-Fraud & AML Networks: In cases of suspected fraud or money laundering, we may share relevant data with industry anti-fraud networks or financial intelligence units as required by applicable regulatory obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the Operator's business, Personal Data held at the time of transfer may be disclosed to the acquiring entity as part of that transaction. You will be notified of any such change and of your options prior to the transfer taking effect.

7 Cookies & Tracking Technologies

pk3867 uses cookies and similar client-side tracking technologies to operate the Platform efficiently and to improve your experience. A cookie is a small text file stored on your device by your browser when you visit a website.

The types of cookies used on pk3867 are:

• Strictly Necessary Cookies: These are essential for the Platform to function. They maintain your login session, preserve your Account settings, and enable secure access to authenticated areas. These cookies cannot be disabled without disrupting Platform functionality.
• Performance & Analytics Cookies: These collect anonymised, aggregate data about how Users interact with the Platform — pages visited, features used, session duration, and error occurrences. This data is used solely to improve Platform performance and user experience, with particular focus on mobile performance for Pakistani users.
• Functionality Cookies: These remember your preferences — such as display language (English), preferred odds format, and notification settings — so you do not have to re-enter them on each visit.
• Security Cookies: These support fraud detection and session integrity functions, including the identification of suspicious login patterns or account access from unrecognised devices.

pk3867 does not use third-party advertising cookies or cross-site behavioural tracking cookies. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may prevent core Platform features from functioning correctly.

8 Data Retention

pk3867 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention guidelines apply:

• Active Account Data: Personal Data associated with an active Account is retained for the duration of the Account relationship and for a period of up to five (5) years following Account closure, to satisfy AML record-keeping requirements.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years following the date of the transaction, or longer where required by the Operator's licensing jurisdiction.
• KYC Documents: Identity verification documents are retained for the period required by applicable AML and regulatory obligations, typically five (5) years from the end of the Account relationship.
• Support Records: Customer support interaction records, including live chat transcripts and email correspondence, are retained for up to three (3) years following the last interaction, unless they relate to an ongoing dispute or regulatory matter.
• Marketing Data: Where processing is based on consent, Personal Data used for marketing purposes is retained until you withdraw consent or request deletion, subject to overriding legal retention requirements.
• Technical & Usage Logs: Server logs and session data are retained for up to twelve (12) months for security and performance purposes, after which they are anonymised or deleted.

9 Data Security

pk3867 implements appropriate technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and Platform servers.
• Encryption of sensitive data fields — including identity document numbers and financial account references — at rest within our database infrastructure.
• Role-based access controls that restrict internal access to Personal Data to staff members whose specific job functions require it.
• Multi-factor authentication requirements for staff access to systems containing Personal Data.
• Regular internal security reviews, including access log audits and vulnerability assessments.
• Contractual data protection obligations imposed on all third-party Processors who handle Personal Data on our behalf.

While we apply industry-standard security controls, no digital system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you in accordance with applicable notification obligations and take immediate steps to contain and mitigate the breach.

10 Your Data Rights

Subject to applicable law and the Operator's licensing jurisdiction's data protection framework, you have the following rights in respect of your Personal Data held by pk3867:

To exercise any of the above rights, please contact our support team using the details provided in Section 15 of this Policy. We will respond to verified requests within a reasonable timeframe as required by applicable law, typically within 30 days of receipt of a complete request.

11 Children's Privacy

pk3867 is strictly an adults-only platform. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 18, or under the higher minimum age required by the applicable operator or license jurisdiction. Age verification is applied as part of the KYC process to confirm that all Account holders meet the minimum age requirement.

If we become aware that Personal Data has been collected from an individual who does not meet the minimum age requirement, we will immediately close the associated Account, delete all collected data pertaining to that individual, and — where applicable — return any funds deposited in accordance with our Terms & Conditions.

12 International Data Transfers

pk3867 operates as an international online gaming platform. Your Personal Data may be transferred to, stored in, or processed by systems located in countries other than your country of residence, including countries where the data protection laws may differ from those applicable in your jurisdiction.

Where Personal Data is transferred outside the country where it was collected, we apply appropriate safeguards to ensure that such transfers are conducted in accordance with applicable data protection standards. These safeguards may include:

• Contractual data processing agreements with receiving parties that impose data protection obligations equivalent to those applicable under the Operator's licensing framework.
• Technical security measures — including encryption in transit and at rest — applied consistently regardless of the jurisdiction in which data is stored.
• Restriction of international transfers to jurisdictions or entities that have demonstrated adequate data protection standards through independent certification or regulatory assessment.

By using the pk3867 Platform, you acknowledge and consent to such international transfers of your Personal Data where they are necessary for the provision of the services described in this Policy and in our Terms & Conditions.

13 Pakistan-Specific Context

pk3867 is an English-language online gaming platform designed for use by Pakistani users. We handle identity documents commonly used by Pakistani residents — including the Computerised National Identity Card (CNIC) — with heightened care and store these only through our encrypted verification portal.

Payment method names referenced on the Platform — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, and Bank Alfalah — are listed as familiar payment references for Pakistani users. These providers are independent companies whose own privacy policies govern any data they collect in the course of processing transactions. Their appearance on pk3867 does not imply that they endorse gambling or that pk3867 has a data-sharing relationship with them beyond what is strictly necessary to process a specific transaction you initiate.

Pakistan does not currently have a comprehensive standalone data protection law equivalent to the GDPR. The Personal Data Protection Bill has been subject to ongoing legislative development. pk3867 applies the data protection standards of its operating and licensing jurisdiction, which we consider appropriate for protecting the rights of Pakistani users in the absence of specific Pakistani data protection legislation.

14 Amendments to This Policy

pk3867 reserves the right to amend or update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, Platform features, or data processing practices. When we make material changes to this Policy, we will notify registered Users via the email address associated with their Account or through a prominent notice displayed on the Platform, with a minimum of 14 days' notice before the amended Policy takes effect.

The "Last Reviewed" date at the top of this Policy will be updated each time a revision is published. We encourage you to review this Policy periodically to stay informed about how we protect your Personal Data. Continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

If you do not accept the revised Privacy Policy, you must cease using the Platform. You may request Account closure by contacting our support team as described in Section 15 below.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pk3867 handles your Personal Data, please contact our Data Support team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 in English directly through the Platform (Urdu available on request)
• Subject Line: For data rights requests, please include "Privacy Request" in your subject line or opening chat message to help us route your enquiry to the correct team
• Response Time: We aim to acknowledge all privacy-related requests within 3 business days and provide a full response within 30 days. All support hours are displayed in Pakistan Standard Time (PST / UTC+5)

When submitting a data rights request, please provide sufficient information to allow us to verify your identity and locate your Account record. We may request additional verification before processing requests that involve access to, correction of, or deletion of Personal Data.