pkr38 Privacy Policy

1. Who We Are

pkr38 is an online casino and sports betting platform accessible at pkr38.bet, built specifically for Pakistani players. pkr38 operates under an internationally recognised gaming licence and is committed to maintaining the highest standards of data protection and user privacy.

For the purposes of this Privacy Policy, pkr38 is the data controller responsible for your personal information collected through the Platform. If you have any questions about how your data is handled, you may contact us at any time via the support details provided in Section 14 of this Policy.

2. Personal Data We Collect

pkr38 collects only the personal data that is necessary for the legitimate operation of the Platform. The categories of personal data we collect are set out in the table below:

pkr38 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where explicitly required by applicable law or licensing conditions.

3. How We Collect Your Data

pkr38 collects personal data through the following channels:

• Direct Interactions: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in any promotion offered on the Platform.
• Automated Technologies: Technical and usage data collected automatically as you browse and interact with the Platform, including IP address logging, session cookies, and device fingerprinting used for security and fraud prevention purposes.
• Third-Party Payment Processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard when you initiate a deposit or withdrawal. pkr38 does not store full card numbers — these remain solely with the payment processor.
• Identity Verification Partners: Where pkr38 uses a third-party KYC service to assist in verifying your identity documents, that provider may return a verification result to pkr38. The verification partner operates under a strict data processing agreement with pkr38.
• Publicly Available Sources: In limited circumstances relating to fraud prevention or AML compliance, pkr38 may cross-reference information against publicly available databases or sanctions lists.

4. How We Use Your Personal Data

pkr38 uses the personal data it collects for the following purposes:

• Account Registration & Management: To create and maintain your pkr38 account, verify your identity, and administer your account settings and preferences.
• Payment Processing: To process deposits and withdrawals in PKR via your selected payment method, and to maintain accurate transaction records for your account.
• KYC & AML Compliance: To verify your identity and age (21+) as required under our licensing obligations, and to detect, investigate, and prevent money laundering, fraud, or other financial crime on the Platform.
• Responsible Gaming: To monitor your gaming activity, identify potential signs of problem gambling, and administer any responsible gaming tools you activate — including deposit limits, cooling-off periods, and self-exclusion.
• Customer Support: To respond to your support queries, investigate complaints, and maintain records of communications for quality assurance and compliance purposes.
• Platform Security: To detect and prevent unauthorised account access, bot activity, collusion, and other forms of abuse on the Platform.
• Service Improvement: To analyse aggregated usage data in order to improve the performance, design, and feature set of the pkr38 platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and relevant updates by email or in-app message, where you have opted in to receive such communications. You may opt out at any time from within your account settings.
• Legal Obligations: To comply with applicable laws, regulatory requirements, licensing conditions, and lawful orders from competent authorities.

5. Legal Basis for Processing

pkr38 processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to perform the contract between you and pkr38 — i.e., to provide the gaming and betting services you have registered for.
• Legal Obligation: Processing required to comply with applicable laws and licensing requirements, including KYC, AML, and responsible gaming obligations.
• Legitimate Interests: Processing that serves the legitimate interests of pkr38 in operating a secure, fair, and commercially viable platform — including fraud prevention, platform security, and service improvement — provided such interests are not overridden by your rights and freedoms.
• Consent: Where pkr38 relies on your consent as the legal basis — for example, for optional marketing communications — you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing & Disclosure

pkr38 does not sell your personal data to third parties. We may share your data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard — to process your financial transactions.
• KYC / Identity Verification Providers: Third-party identity verification services engaged by pkr38 to assist in fulfilling our age and identity verification obligations.
• IT & Cloud Infrastructure Providers: Hosting, database, and security service providers who process data on our behalf under strict data processing agreements.
• Regulatory & Licensing Authorities: Our gaming licence regulator and any other competent authority to whom we are legally obliged to report.
• Law Enforcement & Government Authorities: Where pkr38 is required by law, court order, or governmental authority to disclose personal data, we will comply with such requirements and, where permitted, notify you of the disclosure.
• Fraud Prevention Agencies: Where pkr38 has a legitimate interest in sharing data to prevent fraud, money laundering, or other serious financial crime.

7. Cookies & Tracking Technologies

pkr38 uses cookies and similar tracking technologies on the pkr38.bet domain. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, game display preferences, and responsible gaming tool configurations.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts on the Platform.
• Analytics Cookies: Used in aggregated, anonymised form to help pkr38 understand how users interact with the Platform, in order to improve performance and usability. No individual user is identified through analytics data.

pkr38 does not deploy third-party advertising or retargeting cookies on the Platform. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from using core pkr38 features.

8. Data Retention

pkr38 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and licensing obligations. The following retention periods apply as a general guide:

• Account & Identity Data: Retained for the duration of your active pkr38 account, plus a minimum of five (5) years following account closure, as required for AML compliance and licensing record-keeping.
• Transaction & Financial Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping requirements.
• Support Communications: Retained for a minimum of two (2) years from the date of each communication, unless a longer period is required in connection with an ongoing complaint or legal matter.
• Technical & Usage Logs: Typically retained for up to twelve (12) months for security and fraud investigation purposes, after which they are anonymised or deleted.
• Self-Exclusion Records: Where a user has self-excluded, relevant records are retained indefinitely to prevent re-registration during the exclusion period.

Upon expiry of the applicable retention period, pkr38 will securely delete or anonymise your personal data in accordance with our internal data lifecycle management procedures.

9. Data Security

pkr38 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and pkr38 servers.
• Encryption of sensitive data fields at rest within pkr38 databases.
• Role-based access controls ensuring that only authorised pkr38 personnel with a demonstrable need can access personal data.
• Regular penetration testing and security audits of the pkr38 platform and infrastructure.
• Multi-factor authentication requirements for administrative access to systems holding personal data.
• Continuous monitoring of platform activity for anomalous access patterns or potential security incidents.

10. Your Data Rights

As a pkr38 user, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact the pkr38 support team:

• Right of Access: You have the right to request a copy of the personal data pkr38 holds about you, together with information about how it is being used.
• Right to Rectification: You have the right to request that pkr38 correct any personal data held about you that is inaccurate or incomplete.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to pkr38's legal and regulatory retention obligations.
• Right to Restriction: You have the right to request that pkr38 restricts its processing of your personal data in certain circumstances, for example while a dispute is being investigated.
• Right to Data Portability: You have the right to receive the personal data you have provided to pkr38 in a structured, commonly used, machine-readable format, and to request that pkr38 transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to pkr38's processing of your personal data on the basis of legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where pkr38 relies on your consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

pkr38 will respond to all valid data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further sixty (60) days, with notification provided to you within the initial thirty-day period.

11. Children's Privacy

The pkr38 Platform is strictly for adults aged 21 years and over. pkr38 does not knowingly collect personal data from any person under the age of 21. If you are under 21, you must not register an account, use the Platform, or provide any personal data to pkr38.

If pkr38 becomes aware that personal data has been collected from a person under the age of 21, pkr38 will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage user will be returned to the payment source used at deposit.

Parents and guardians who believe that their child may have registered on pkr38 are encouraged to contact the pkr38 support team immediately so that the matter can be investigated and resolved promptly.

12. Third-Party Links

The pkr38 Platform may, from time to time, contain references to third-party services such as payment processors. pkr38 is not responsible for the privacy practices or content of any third-party service. We encourage you to read the privacy policy of any third-party service you use in connection with your pkr38 account.

13. Changes to This Privacy Policy

pkr38 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, pkr38 will notify active users by posting a notice on the Platform or by email to the address registered on your account. The revised Policy will take effect from the date it is published on the Platform.

Your continued use of the pkr38 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must close your account and cease using the Platform.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or pkr38's data practices, please contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly within your pkr38 account dashboard
• Support Hours: Aligned with Pakistan Standard Time (PKT, UTC+5)

Last Updated: 1 January 2026. This version of the pkr38 Privacy Policy supersedes all previously published versions.