pk36 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how pk36 ("we", "us", "our", or "the Company") collects, processes, stores, shares, and protects the personal data of users ("you", "your", or "the player") who access or use the pk36 online gaming platform, including the website at pk36.bet and any associated mobile or web applications.

pk36 takes its obligations under applicable data protection frameworks seriously. While Pakistan's Personal Data Protection Bill continues to evolve at a legislative level, pk36 voluntarily aligns its data handling practices with internationally recognised privacy standards, including principles derived from the General Data Protection Regulation (GDPR) and the data protection requirements of our international gaming licensing framework. We believe Pakistani players deserve the same level of data protection afforded to players in any other jurisdiction.

By registering for a pk36 account, depositing funds, or otherwise using the pk36 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy.

2 Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal data is the entity that operates the pk36 platform under its international gaming license. As the data controller, pk36 determines the purposes and means by which your personal data is processed.

If you have any questions, concerns, or requests relating to the processing of your personal data, you may contact our designated data protection point of contact at:

• Email: [email protected]
• Subject line: "Data Privacy Request — [Your Registered Username]"

pk36 aims to respond to all privacy-related enquiries within 10 business days of receipt.

3 Personal Data We Collect

pk36 collects the following categories of personal data from players, depending on how you interact with the platform:

3.1 Identity and Contact Data

• Full legal name
• Date of birth (for age verification — you must be 21 or older)
• National identity number (CNIC) or passport number
• Residential address
• Email address
• Mobile phone number
• Nationality and country of residence

3.2 Account and Authentication Data

• Username and encrypted password credentials
• Account registration date and time
• Login history including timestamps and IP addresses
• Two-factor authentication logs where applicable

3.3 Financial and Transaction Data

• JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or SadaPay account identifiers used for deposits and withdrawals
• USDT wallet addresses where applicable
• Deposit and withdrawal amounts, dates, and reference numbers
• Account balance history
• Source of funds documentation provided during KYC

3.4 Gaming Activity Data

• Bet history across sports, casino, slot, and fishing game categories
• Game session durations and timestamps
• Wins, losses, and net gaming position over time
• Bonus claims, wagering progress, and promotional participation records
• Responsible gaming tool settings (deposit limits, loss limits, self-exclusion status)

3.5 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type and version
• Screen resolution and time zone
• Referring URL and pages visited within pk36
• Cookie identifiers and session tokens (see Section 8)

3.6 Communications Data

• Records of all communications between you and pk36 support, including live chat transcripts and emails
• Complaint and dispute records
• Survey responses and feedback submitted voluntarily

4 How We Collect Your Data

pk36 collects personal data through the following means:

• Direct collection: Data you provide when registering for an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection: Data collected automatically when you interact with the pk36 platform, including through cookies, server logs, and analytics tools embedded in our web and mobile applications.
• Third-party sources: Data received from identity verification providers, payment processors (such as JazzCash and EasyPaisa), fraud prevention services, and publicly available sources, for the purpose of verifying your identity and protecting the integrity of the platform.
• Inferred data: Data derived from your gaming behaviour and account activity that pk36 uses to detect problem gambling patterns, identify bonus abuse, or assess account risk in accordance with our licensing obligations.

5 How We Use Your Personal Data

pk36 will not use your personal data for any purpose that is incompatible with the purposes listed above without first providing you with notice and, where required, obtaining your consent.

6 Legal Basis for Processing

pk36 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil the contract between pk36 and you as a registered player — including operating your account, processing PKR transactions, and delivering gaming services.
• Legal obligation: Processing required for pk36 to comply with applicable laws and licensing conditions, including KYC verification, AML reporting, age verification, and responsible gaming obligations.
• Legitimate interests: Processing that pk36 undertakes in pursuit of its legitimate business interests, where those interests are not overridden by your privacy rights — including fraud prevention, security monitoring, platform analytics, and improving our services for Pakistani players.
• Consent: Processing based on your freely given, specific, and informed consent — primarily applicable to direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

7 Sharing Your Personal Data

pk36 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

7.1 Service Providers and Data Processors

pk36 engages trusted third-party service providers who process personal data on our behalf and under our instruction. These include:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, SadaPay, and USDT TRC20 providers — to facilitate deposits and withdrawals in PKR and cryptocurrency.
• Identity verification providers: Third-party KYC and AML screening services that verify the identity and age of players and screen against financial crime watchlists.
• Game suppliers: Licensed third-party game developers whose games are available on the pk36 platform — they receive only the minimum data necessary to deliver and settle game outcomes.
• IT infrastructure and hosting providers: Cloud hosting and CDN service providers that store and deliver pk36's platform and player data under strict security and confidentiality obligations.
• Analytics and fraud prevention tools: Services used to monitor platform security, detect fraudulent activity, and analyse aggregated usage patterns to improve the player experience.

7.2 Regulatory and Law Enforcement Bodies

pk36 may be required to disclose personal data to regulatory authorities, licensing bodies, law enforcement agencies, tax authorities, or courts where such disclosure is required or authorised by applicable law. pk36 will notify you of any such disclosure where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving pk36, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and ensure that your data continues to be protected to the standard described in this Policy.

8 Cookies and Tracking Technologies

pk36 uses cookies and similar tracking technologies to operate and improve the platform, remember your preferences, maintain your login session, and analyse how players interact with the site. The following categories of cookies are used:

• Strictly necessary cookies: Essential to the core functioning of pk36. These include session cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cannot be disabled without impacting your ability to use the platform.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations. These improve your experience but are not required for core functionality.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate and use the pk36 platform. This information helps us identify technical issues and improve game categories, navigation, and the overall user experience for Pakistani players.
• Security and fraud prevention cookies: Used to detect unusual login behaviour, identify multiple accounts, and flag potentially fraudulent activity patterns.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to access and use the pk36 platform. pk36 does not use cookies to serve third-party advertising or to track your activity across unrelated websites.

9 Data Retention

pk36 retains your personal data for as long as necessary to fulfil the purposes described in this Policy, to maintain an active player account, and to comply with our legal and licensing obligations. Specific retention periods applicable to pk36 are as follows:

• Active account data: Retained for the duration of your account with pk36, plus a minimum of 5 years following account closure, in accordance with AML and gaming licensing record-keeping requirements.
• Transaction and financial records: Retained for a minimum of 7 years from the date of the transaction, as required by international financial crime compliance standards applicable under our gaming license.
• KYC and identity documents: Retained for the duration of the account relationship and for 5 years after account closure, or longer if required by a regulatory investigation or legal proceeding.
• Customer support communications: Retained for 3 years from the date of the communication, unless related to an open dispute or regulatory matter.
• Marketing consent records: Retained for as long as you remain opted in to marketing, plus 3 years after you opt out, as evidence of consent history.
• Self-exclusion records: Retained indefinitely following permanent self-exclusion, to prevent re-registration by excluded players.

When personal data is no longer required for any legitimate purpose, pk36 securely deletes or anonymises it so that it can no longer be attributed to any individual.

10 Data Security

pk36 implements a comprehensive, layered approach to data security designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• Encryption in transit: All data transmitted between your device and the pk36 platform is protected using 256-bit SSL/TLS encryption. The padlock icon in your browser confirms this protection is active.
• Encryption at rest: Sensitive data fields, including payment account identifiers and identity documents, are encrypted within pk36's databases using industry-standard encryption algorithms.
• Password security: Player passwords are never stored in plain text. pk36 stores only salted cryptographic hashes of passwords, meaning even internal staff cannot view your password.
• Access controls: Access to player personal data within pk36's internal systems is restricted on a strict need-to-know basis. Staff access is logged, monitored, and subject to regular access reviews.
• Intrusion detection: pk36 employs automated systems to detect and alert on suspicious access patterns, brute-force attempts, and potential data exfiltration activity.
• Regular security assessments: pk36's platform and infrastructure undergo periodic security audits and penetration testing conducted by independent security specialists.

11 Your Data Rights

pk36 respects your right to control your personal data. Subject to applicable law and certain exceptions related to our legal and licensing obligations, you have the following rights:

• Right of access: You have the right to request a copy of the personal data pk36 holds about you, together with information about how and why it is processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. For basic profile information, you may also update it directly in your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing was unlawful. Please note that pk36 may be required to retain certain data for legal and licensing compliance purposes notwithstanding such a request.
• Right to restrict processing: You may request that pk36 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being contested.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request a copy of the personal data you provided to pk36 in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on pk36's legitimate interests, including profiling for marketing purposes. pk36 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact pk36 at [email protected] with the subject line "Data Rights Request — [Your Username]". pk36 will respond within 10 business days. We may need to verify your identity before processing certain requests.

12 Children's Privacy and the 21+ Rule

If you are a parent or guardian and believe that a person under the age of 21 in your household has registered with pk36, please contact us immediately at [email protected]. We take underage gambling extremely seriously and will act on any credible report without delay.

pk36 employs age verification checks at the point of registration and may request documentary proof of age (such as a CNIC or passport) at any time during the account lifecycle, particularly before processing the first withdrawal.

13 Marketing Communications

pk36 may send you marketing communications about new games, promotions, PSL betting markets, seasonal bonuses, and platform updates by email or SMS. We will only send you marketing communications where you have given your consent to receive them, or where we have a legitimate interest to do so based on your prior engagement with the platform and you have not opted out.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link included in every marketing email
• Updating your communication preferences within your pk36 account settings
• Contacting support at [email protected] with a request to be removed from marketing lists

Opting out of marketing will not affect transactional communications that are necessary for the operation of your account, such as deposit confirmation messages, withdrawal notifications, and security alerts.

14 Third-Party Links and Services

The pk36 platform may contain references to game providers and payment services that operate under their own privacy policies. While pk36 carefully selects its service partners, we are not responsible for the privacy practices of third-party organisations. Where your data is shared with a third-party service provider, it is done so under a data processing agreement as described in Section 7.

pk36 does not include third-party advertising networks on its platform and does not permit third parties to use your personal data for their own independent marketing purposes without your explicit consent.

15 Changes to This Privacy Policy

pk36 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or the services we offer. When material changes are made, we will notify you via a prominent notice on the pk36 platform and, where appropriate, by email to your registered address, at least 14 days before the changes take effect.

The most current version of this Privacy Policy is always available at pk36.bet/privacy-policy. The "Last Updated" date at the top of this document indicates when the most recent revision was made. Your continued use of pk36 following notification of any change constitutes your acceptance of the revised Policy.

16 Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how pk36 has handled your personal data, please contact us:

• Email: [email protected]
• Subject line: "Privacy Enquiry — [Your Registered Username]"
• Live Chat: Available within your pk36 account dashboard, 24/7

pk36 will acknowledge your enquiry promptly and respond in full within 10 business days. Where a complaint cannot be resolved to your satisfaction, you have the right to escalate the matter to the relevant supervisory authority under our licensing framework or any applicable data protection regulator.