pak399 Privacy Policy

pak399 is committed to handling your personal data with care, transparency, and respect. This Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. It covers the entire pak399 Platform experience — from first visiting our website and creating your Account, through to depositing in PKR via JazzCash or EasyPaisa, placing cricket bets, playing slots, accessing live casino tables, and ultimately withdrawing winnings.

This Policy is written in plain English so that players across Pakistan — whether in Karachi, Lahore, Islamabad, Faisalabad, or anywhere else — can clearly understand their privacy rights and our obligations. Legal terminology is used only where necessary for precision, and is explained where first introduced.

pak399 collects personal data in three broad ways: data you provide directly, data generated automatically through your use of the Platform, and data obtained from trusted third-party verification partners. The table below sets out the categories of data we collect and the context in which each is collected.

pak399 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification under our regulatory obligations.

pak399 uses the personal data we collect for the following clearly defined purposes:

• Account Creation & Management: To register your pak399 Account, enable pak399 Login, maintain your account profile, and communicate essential account updates to you.
• Identity & Age Verification: To verify that you meet the 21+ age requirement and to confirm your identity in compliance with our KYC obligations before processing withdrawals or high-value transactions.
• Payment Processing: To facilitate PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain accurate financial records of all transactions.
• Service Delivery: To provide access to all pak399 Platform features, including cricket betting, slots, live casino, kabaddi, and lottery products, and to personalise your gaming experience based on your preferences and history.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Regulatory Compliance: To meet our Anti-Money Laundering (AML), Counter-Terrorist Financing (CTF), and responsible gaming monitoring obligations under our international gaming regulatory framework.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour, to administer the deposit limits, loss limits, session limits, cooling-off periods, and self-exclusion tools available to all Account holders.
• Customer Support: To respond to your enquiries, resolve disputes, and improve the quality of our support service.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the design, performance, and content of the pak399 Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and Pakistan-specific gaming updates — but only where you have provided consent or where we have a legitimate interest and you have not opted out. See Section 12 for opt-out details.

pak399 processes your personal data only where we have a valid legal basis to do so. The applicable legal bases are as follows:

pak399 uses cookies and similar tracking technologies to operate certain features of the Platform, to remember your preferences, and to collect the technical data described in Section 2. The following types of cookies are used on the pak399 Platform:

• Strictly Necessary Cookies: These are required for the Platform to function. They enable pak399 Login session management, security token handling, and load balancing. They cannot be disabled without breaking core Platform functionality.
• Functional Cookies: These remember your preferences — such as your preferred language, game lobby layout, and responsible gaming settings — so that your experience is consistent across sessions.
• Analytics Cookies: These collect anonymised data about how players use the Platform — which games are most popular, how long sessions last, which pages are visited most. This data is used solely for internal improvement purposes and is never shared with advertising networks.
• Security Cookies: These support fraud detection processes, including detecting unusual login patterns that may indicate unauthorised access to your pak399 Account.

pak399 does not sell your personal data. We share your data only with the following categories of trusted third parties, and only to the extent strictly necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, and our banking partners (HBL, UBL, Meezan Bank) receive the financial data necessary to process your PKR deposits and withdrawals. All payment partners are contractually bound by data confidentiality and security obligations.
• KYC / Identity Verification Partners: pak399 uses accredited third-party identity verification services to conduct CNIC, passport, and document authenticity checks. These partners process only the verification data necessary for the specific check and do not retain your documents beyond the verification period.
• Regulatory Authorities: pak399 is obligated to disclose certain transaction and identity records to its regulatory authority upon request, and to file Suspicious Transaction Reports (STRs) in accordance with AML requirements. Such disclosures are made only in compliance with legal obligations and cannot be avoided.
• Fraud Prevention Services: pak399 may share technical data (IP addresses, device fingerprints, session data) with shared fraud prevention databases to detect and block multi-accounting, bonus abuse, and payment fraud.
• IT Infrastructure & Cloud Providers: pak399's Platform is hosted on secure cloud infrastructure. Our hosting partners process data only on our instructions and are contractually required to maintain security standards equivalent to our own.
• Professional Advisers: In connection with legal proceedings, audits, or regulatory investigations, pak399 may share relevant data with lawyers, auditors, or compliance consultants under strict confidentiality obligations.

In all cases, data sharing is governed by data processing agreements that require third parties to maintain appropriate security measures and prohibit them from using your data for any purpose beyond the stated one.

pak399 operates under an international gaming regulatory framework, and some of our service partners — including cloud infrastructure providers, KYC verification partners, and fraud prevention services — may be located in jurisdictions outside Pakistan. When your personal data is transferred internationally, pak399 ensures that appropriate safeguards are in place, including:

• Data processing agreements incorporating standard contractual clauses that impose equivalent data protection obligations on the receiving party.
• Transfer to jurisdictions that maintain adequate data protection standards recognised under our regulatory framework.
• Technical and organisational security measures applied consistently regardless of the location of processing.

pak399 does not transfer your data to jurisdictions with inadequate data protection frameworks without implementing additional protective measures. If you have concerns about cross-border data transfers, please contact us at [email protected].

pak399 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:

Following the expiry of the applicable retention period, pak399 will securely delete or anonymise your personal data. Where anonymisation is applied, the resulting data no longer constitutes personal data and may be retained indefinitely for statistical purposes.

pak399 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the pak399 Platform is encrypted in transit using current-generation TLS protocols.
• Password Hashing: pak399 Login passwords are stored exclusively as salted cryptographic hashes. Plain-text passwords are never stored or accessible to pak399 staff.
• Two-Factor Authentication: Players are strongly encouraged to enable 2FA via SMS OTP. This significantly reduces the risk of unauthorised pak399 Login even if your password is compromised.
• Access Controls: Access to personal data within pak399's systems is restricted on a strict need-to-know basis. Customer support agents have access only to the minimum data required to assist with your enquiry.
• Infrastructure Security: pak399's servers are hosted in ISO 27001-certified data centres with physical access controls, environmental monitoring, and redundant power and connectivity.
• Regular Security Audits: pak399 commissions periodic penetration testing and security audits by qualified third-party security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: pak399 maintains a documented data breach response plan. In the event of a breach affecting your personal data, you will be notified in accordance with our regulatory obligations.

You have a number of rights with respect to the personal data pak399 holds about you. These rights are set out below. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and your Account username. We will respond within 30 days.

The pak399 Platform is strictly for adults aged 21 and over. pak399 does not knowingly collect, process, or retain personal data from any individual under the age of 21. Age verification is a mandatory step in the pak399 Account registration and withdrawal approval process — we will not activate an Account or process a withdrawal until age has been verified by government-issued documentation.

If pak399 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant Account, refund any deposits to the originating payment method, and delete the personal data concerned in accordance with our regulatory obligations.

pak399 may send you promotional communications — including bonus offers, PSL cricket betting promotions, new game announcements, and Pakistan-specific campaigns — by email or SMS, where you have consented to receive such communications during registration or subsequently via your Account preferences.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email sent by pak399.
• Updating your communication preferences in the Notifications section of your pak399 Account settings following pak399 Login.
• Contacting support at [email protected] with the subject line "Marketing Opt-Out".

Opting out of marketing communications does not affect the delivery of transactional or service communications — such as deposit confirmations, withdrawal notifications, security alerts, and responsible gaming intervention messages — which are sent as part of the pak399 service and cannot be disabled while your Account remains active.

pak399 reviews this Privacy Policy periodically and reserves the right to update it to reflect changes in our data processing practices, applicable regulatory requirements, or the features and services offered on the Platform. The "Last Updated" date at the top of this Policy reflects the most recent revision.

Where changes are material — meaning they significantly affect your rights or our obligations with respect to your personal data — pak399 will notify Account holders by email to the address registered on their Account at least fourteen (14) days before the changes take effect. Minor clarifications and non-material updates may be made without advance notice.

Continued use of the pak399 Platform after the effective date of any updated Privacy Policy constitutes acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the Platform and contact support to close your Account.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how pak399 has handled your personal data, please contact our Privacy team directly:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response Time: We aim to acknowledge all privacy enquiries within 48 hours and provide a full response within 30 calendar days.

If you are not satisfied with pak399's response to your privacy concern, you have the right to escalate your complaint to the relevant data protection or regulatory authority. pak399 will cooperate fully with any such investigation and will not penalise you for exercising your right to complain.