1
Who We Are
pk366 is an internationally licensed online gaming platform accessible at pk366.bio, providing cricket betting, live casino, online slots, arcade games, and related services to adult players in eligible jurisdictions. For the purposes of this Privacy Policy, pk366 is the data controller responsible for the collection, use, and protection of your personal information in connection with your use of the pk366 platform and its Services.
The pk366 platform is specifically designed and operated to serve English-speaking adult players in Pakistan, with a localised experience built around Pakistani payment methods including JazzCash and EasyPaisa, Pakistani Rupee (PKR) account denomination, and bilingual support in English and Urdu. This Privacy Policy applies to all users of the pk366 platform, regardless of whether they are located in Karachi, Lahore, Faisalabad, Rawalpindi, Islamabad, or elsewhere.
Data controller contact details are provided in Section 16 of this Privacy Policy. If you have any questions about how pk366 processes your personal data, please contact our support team through the live chat facility on the pk366 platform or by email at [email protected].
2
Scope of This Privacy Policy
This Privacy Policy applies to all personal information collected and processed by pk366 in connection with your use of the pk366 platform, including:
- The pk366 website at pk366.bio and all associated pages, sections, and subdomains;
- The pk366 account registration, verification, and login processes;
- All gaming and betting activities conducted through your pk366 account;
- Deposit, withdrawal, and payment processing operations;
- Customer support interactions, including live chat and email correspondence;
- Participation in promotional offers, bonus programmes, and loyalty initiatives;
- Communications we send to you, including SMS notifications, platform notifications, and marketing messages (where consented to).
This Policy does not apply to third-party websites, applications, or services that may be linked from the pk366 platform. pk366 is not responsible for the privacy practices of third-party operators, including game studios whose content is hosted on our platform but whose data collection practices are governed by their own privacy policies.
3
Personal Data We Collect
pk366 collects personal data only to the extent necessary to provide our Services, comply with legal and licensing obligations, and protect the integrity of the platform. The categories of personal data we collect include the following:
| Category |
Examples |
When Collected |
| Identity Data |
Full name, date of birth, CNIC number (when KYC required) |
Registration; KYC verification |
| Contact Data |
Pakistani mobile number (03XX format), email address |
Registration; account updates |
| Financial Data |
JazzCash/EasyPaisa account identifiers, bank account details (HBL, UBL, Meezan Bank), transaction records in PKR |
Deposit and withdrawal processing |
| Gaming Data |
Bet history, game session data, win/loss records, PSL and cricket bet selections |
Throughout platform use |
| Technical Data |
IP address, device identifiers, browser type, operating system, network provider |
Automatically on access |
| Usage Data |
Pages visited, session duration, features used, login timestamps |
Automatically during sessions |
| Communications Data |
Live chat transcripts, email correspondence, support ticket content |
When you contact support |
| Verification Documents |
Copies of CNIC, utility bills, bank statements (when enhanced KYC requested) |
On request for verification |
We do not collect sensitive personal data beyond what is strictly required for identity and age verification purposes. We do not collect biometric data, political opinions, religious beliefs, or health information unless you voluntarily disclose health information in the context of a responsible gaming self-exclusion request, in which case it is used solely for the purpose of administering your self-exclusion.
4
How We Use Your Personal Data
pk366 uses your personal data for the following specific purposes, each of which is supported by a lawful basis for processing as described in Section 5:
- Account creation and management: To register your pk366 account, verify your identity and age (minimum 21 years), and maintain your account in accordance with our Terms and Conditions;
- Service delivery: To provide you with access to cricket betting, live casino, slot games, arcade games, and all other pk366 Services associated with your account;
- Payment processing: To process deposits from and withdrawals to your verified Pakistani payment methods (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), and to maintain accurate PKR account balance records;
- Identity and age verification: To verify that you are at least 21 years of age and to conduct Know Your Customer (KYC) checks as required by our licensing obligations;
- Anti-money laundering (AML) compliance: To monitor transactions for suspicious activity, conduct enhanced due diligence where required, and fulfil mandatory reporting obligations to relevant authorities;
- Fraud prevention and platform security: To detect, prevent, and investigate suspected fraud, multi-accounting, bonus abuse, and other prohibited conduct under our Terms and Conditions;
- Responsible gaming: To administer deposit limits, session timers, self-exclusion requests, and other player protection measures requested by or imposed in relation to your pk366 account;
- Customer support: To respond to your enquiries, resolve disputes, and provide assistance through our 24/7 support team in English and Urdu;
- Platform improvement: To analyse usage patterns, improve the pk366 platform experience, and develop new features and services;
- Marketing communications: To send you promotional offers, bonus notifications, and relevant gaming news where you have consented to receive such communications.
5
Legal Basis for Processing Your Data
pk366 processes your personal data on the following legal bases, as applicable to each processing purpose:
- Contractual necessity: Processing required to fulfil our contractual obligations to you under the pk366 Terms and Conditions, including account management, service delivery, and payment processing;
- Legal obligation: Processing required to comply with applicable legal requirements, including AML obligations, KYC requirements imposed by our gaming licence, and any mandatory reporting obligations;
- Legitimate interests: Processing carried out for pk366's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your data protection rights;
- Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including the sending of direct marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
Where pk366 relies on legitimate interests as the legal basis for processing, we conduct a balancing assessment to ensure that our interests do not override your fundamental data protection rights. You have the right to object to processing based on legitimate interests at any time by contacting our support team.
6
Cookies & Tracking Technologies
The pk366 platform uses cookies and similar tracking technologies to deliver and improve our Services, maintain session integrity, and where consent is provided, to analyse platform usage and deliver relevant content.
The categories of cookies used on the pk366 platform include:
- Strictly necessary cookies: Essential to the operation of the pk366 platform, including session management, login authentication, and security functions. These cookies cannot be disabled without materially impairing platform functionality. No consent is required for these cookies;
- Functional cookies: Used to remember your preferences and settings on the pk366 platform, such as language preferences and previously selected game categories;
- Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and use the pk366 platform, enabling us to improve user experience and platform performance. These cookies require your consent;
- Performance cookies: Used to monitor platform performance and identify technical issues affecting the pk366 user experience.
You may manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the pk366 platform, including the ability to log in to your account.
7
Data Sharing & Disclosure
pk366 does not sell, rent, or trade your personal information to any third party for their own commercial purposes. Your personal data may be disclosed to the following categories of recipients only to the extent necessary for the purposes described in this Privacy Policy:
- Payment processors and financial institutions: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other approved payment service providers, for the sole purpose of processing your deposits and withdrawals in PKR;
- Identity and age verification providers: Third-party KYC and AML verification service providers engaged by pk366 to assist with identity verification and regulatory compliance;
- Game content providers: Certified game studio partners whose games are hosted on the pk366 platform, to the extent necessary to authenticate your session and record game outcomes to your account;
- Regulatory and licensing authorities: Our licensing authority and relevant regulatory bodies, as required by our gaming licence and applicable law;
- Law enforcement and government authorities: Where disclosure is required by applicable law, court order, or at the request of competent governmental or law enforcement authorities;
- Professional advisers: Legal counsel, auditors, and other professional advisers engaged by pk366 in connection with the operation of the platform, subject to appropriate confidentiality obligations.
All third parties to whom pk366 discloses personal data are required to handle your information in accordance with applicable data protection standards and are contractually prohibited from using your data for any purpose other than the specific service for which they are engaged.
8
International Data Transfers
As an internationally licensed platform serving Pakistani players, pk366 may transfer your personal data to, and process it in, countries outside Pakistan. This may occur, for example, in connection with our server infrastructure, third-party service providers, or gaming studio partners that operate from jurisdictions outside Pakistan.
Where personal data is transferred to countries that do not provide a level of data protection equivalent to that required under pk366's licensing framework, we ensure that appropriate safeguards are in place. These safeguards may include contractual data processing agreements, standard contractual clauses, or other recognised transfer mechanisms that provide legally enforceable data subject rights and effective legal remedies for data subjects.
By using the pk366 platform and providing your personal data, you acknowledge that your data may be transferred and processed in countries outside Pakistan as described in this section. If you have questions about international transfers of your personal data, please contact us at the details provided in Section 16.
9
Data Retention
pk366 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and licensing obligations, and to resolve disputes or enforce our agreements. Our data retention periods are informed by the following principles:
- Active account data: All personal data associated with your pk366 account is retained for the duration of your account's active status and for a minimum period of five (5) years following account closure, in compliance with AML and licensing record-keeping requirements;
- Transaction and financial records: All PKR transaction records, including deposits, withdrawals, and wager histories, are retained for a minimum of five (5) years following the date of the transaction, as required by applicable AML legislation;
- Communications data: Customer support communications, including live chat transcripts and email correspondence, are retained for a period of three (3) years from the date of the communication;
- Technical and usage data: Log files and technical data are retained for a period of twelve (12) months from the date of collection, unless required to be retained for longer in connection with a security investigation or legal proceeding;
- Verification documents: Identity and age verification documents are retained for the duration of your pk366 account and for a minimum of five (5) years following account closure.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures. You may request information about the specific retention period applicable to your data by contacting our support team.
10
Your Data Rights
You have a number of rights with respect to the personal data that pk366 holds about you. These rights are described below and can be exercised by contacting our support team through the pk366 live chat facility or by email at [email protected].
pk366 aims to respond to all valid data subject requests within thirty (30) days of receipt. Where a request is particularly complex or where a large volume of requests is received simultaneously, we may extend this period by a further two (2) months, in which case we will notify you of the extension and the reasons for it.
| Your Right |
What It Means |
| Right of Access |
You may request a copy of the personal data pk366 holds about you and information about how it is being processed. |
| Right to Rectification |
You may request correction of inaccurate or incomplete personal data held in your pk366 account. |
| Right to Erasure |
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. |
| Right to Restriction |
You may request that we restrict the processing of your data in certain circumstances, such as while a dispute about its accuracy is being resolved. |
| Right to Data Portability |
You may request a copy of personal data you have provided to pk366 in a structured, commonly used, machine-readable format. |
| Right to Object |
You may object to processing based on legitimate interests or to direct marketing communications at any time. |
| Right to Withdraw Consent |
Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing. |
Some data subject rights may be subject to limitations where, for example, compliance with your request would conflict with pk366's legal obligations under AML legislation, our licensing requirements, or the rights of third parties. In such cases, pk366 will inform you of the reason why we are unable to fully comply with your request.
11
Marketing Communications
pk366 may send you promotional communications about bonuses, new games, PSL season offers, and other platform promotions via SMS to your registered Pakistani mobile number or via in-platform notifications, where you have provided your consent to receive such communications at the point of account registration or subsequently through your account settings.
You may withdraw your consent to receive marketing communications at any time by:
- Updating your communication preferences in your pk366 account settings;
- Contacting our 24/7 support team via live chat and requesting removal from marketing lists;
- Sending an email to [email protected] with the subject line "Unsubscribe from Marketing."
Withdrawal of marketing consent does not affect your ability to use your pk366 account or receive service-related communications such as deposit confirmations, withdrawal processing notifications, account security alerts, and support responses. Service-related communications are sent on the basis of contractual necessity and cannot be opted out of while your account remains active.
12
Children's Privacy
The pk366 platform is strictly intended for adult players aged 21 years and over. pk366 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory component of the pk366 account registration process, and we reserve the right to request documentary proof of age from any player at any time.
If pk366 discovers that personal data has been collected from an individual who is under the age of 21, all associated data will be immediately deleted, the account will be permanently closed, and any funds held in the account will be returned via the original payment method after deduction of any amounts attributable to confirmed bonus abuse or fraudulent conduct.
Parents and guardians who believe that a minor may have created a pk366 account should contact our support team immediately via live chat or at [email protected]. We will take immediate action upon receipt of a verified complaint of this nature.
13
Data Security
pk366 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:
- TLS 256-bit encryption for all data in transit between your device and pk366 servers;
- Encryption at rest for sensitive data stored in pk366 databases, including financial records and identity documents;
- Access controls limiting employee access to personal data on a strictly need-to-know basis, enforced through role-based permissions and multi-factor authentication;
- Regular security audits and penetration testing of the pk366 platform conducted by independent third-party security specialists;
- Intrusion detection systems and continuous monitoring for suspicious activity on the pk366 platform and associated infrastructure;
- Incident response procedures to detect, contain, and remediate data security incidents, with notification processes for material breaches as required by our licensing obligations.
While pk366 employs industry-standard security measures, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own pk366 account credentials and for promptly notifying us of any suspected unauthorised access to your account. Please refer to Section 4 of our Terms and Conditions for your account security obligations.
14
Third-Party Services
The pk366 platform integrates third-party game studio content, payment processing services, and technical infrastructure providers in order to deliver our Services. While pk366 carefully selects and contractually obliges these third parties to maintain appropriate data protection standards, their own data processing activities are governed by their respective privacy policies.
Game content hosted on pk366 from third-party studios — including but not limited to slot titles and live dealer games — may involve data transmission to the relevant studio's servers for the purpose of game authentication, outcome determination, and RTP compliance. This data is limited to non-personally-identifiable session tokens and game result data and is used solely for the purpose of delivering the game service.
pk366 does not embed third-party social media widgets, advertising networks, or analytics trackers that would allow such third parties to track your activity across external websites without your knowledge and consent. Any analytics used on the pk366 platform is limited to first-party or strictly necessary service-delivery tools.
15
Changes to This Privacy Policy
pk366 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal or regulatory requirements, or the Services we offer. The effective date at the top of this Policy will be updated each time a material change is made.
Where a proposed change materially affects how we process your personal data, we will notify you in advance through one or more of the following methods: a notice displayed upon login to your pk366 account, an in-platform notification, or an SMS to your registered Pakistani mobile number.
Your continued use of the pk366 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated Policy. We encourage you to review this Privacy Policy periodically to stay informed of how we are protecting and using your personal data.
The current version of this Privacy Policy will always be accessible at pk366.bio/privacy-policy. Previous versions of our Privacy Policy are available upon request from our support team.
16
How to Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the way pk366 processes your personal data, please contact us through any of the following channels:
- Live Chat: Available 24 hours a day, 7 days a week, directly on the pk366 platform. Our support team is available in both English and Urdu and can handle data subject requests, privacy enquiries, and responsible gaming requests.
- Email: [email protected] — please include "Privacy Policy Enquiry" or "Data Subject Request" in the subject line of your email so that it is routed to the appropriate team. We aim to acknowledge all email enquiries within 48 hours.
For data subject rights requests in particular — including requests for access, rectification, erasure, restriction, portability, or objection — we may ask you to verify your identity before processing your request. This is to protect the security of your account and to ensure that we disclose personal data only to the account holder or their duly authorised representative.
If you are not satisfied with our response to a privacy-related enquiry or data subject rights request, you may have the right to escalate your complaint to the relevant supervisory authority or dispute resolution body under our licensing framework. Details of available complaint mechanisms are available upon request from our support team.