pka365 Privacy Policy

1.1 pka365 ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with our platform at pka365.bet (the "Platform"). This Privacy Policy sets out the basis on which personal data collected from or provided by players, visitors, and prospective registrants will be processed by pka365.

1.2 This Privacy Policy applies to all personal data processed in connection with your use of the pka365 Platform, including your registration, account management, deposits and withdrawals, gameplay, and any communication with our support team.

1.3 Please read this Privacy Policy carefully. By registering on or using the pka365 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Privacy Policy should be read together with the pka365 Terms & Conditions.

1.4 If you have any questions about this Privacy Policy or how pka365 handles your personal data, please contact us at [email protected] before using the Platform.

2.1 pka365 is the data controller responsible for your personal data in connection with your use of the Platform. As data controller, pka365 determines the purposes and means of processing your personal data.

2.2 pka365 operates under an internationally recognised gaming license. As part of its licensing obligations, pka365 is required to implement and maintain a data protection framework consistent with internationally accepted data protection standards, including principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

2.3 Enquiries relating to data protection and privacy, including requests to exercise data subject rights, should be directed to [email protected] with the subject line "Data Protection Enquiry".

3.1 pka365 collects personal data through several channels, including registration forms, KYC document submissions, payment transactions, gameplay activity, and direct communications with our support team. The categories of personal data we collect are set out below.

3.2 pka365 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data, except where the identification documentation submitted for KYC purposes incidentally contains such information (e.g., photographs on a CNIC). Such incidental data is not recorded or processed separately.

3.3 Where you voluntarily provide personal data beyond what is requested — for example, in a support message — pka365 will process that data only to the extent necessary to respond to your enquiry.

4.1 pka365 uses your personal data only for the purposes for which it was collected and for compatible related purposes. The primary purposes for which we process your personal data are as follows:

• Account Registration & Management: To create and maintain your pka365 player account, verify your identity and age (21+ requirement), and provide you with access to the Platform's features.
• KYC & Anti-Money Laundering Compliance: To verify your identity in accordance with the requirements of our gaming license and applicable anti-money laundering obligations.
• Payment Processing: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain accurate financial records of all transactions.
• Platform Operation & Security: To detect and prevent fraud, collusion, money laundering, underage gambling, and other prohibited activities on the Platform.
• Customer Support: To respond to your enquiries, complaints, and requests, and to maintain records of all support interactions.
• Responsible Gaming: To monitor gameplay patterns and identify indicators of problem gambling, and to administer deposit limits, cooling-off periods, and self-exclusion tools where applicable.
• Legal & Regulatory Compliance: To comply with requests from regulatory authorities, law enforcement agencies, or the dispute resolution body designated by our licensing authority.
• Marketing (with consent only): To send you promotional communications about pka365 offers, new games, PSL betting markets, and platform updates, where you have provided explicit consent.
• Platform Improvement: To analyse aggregated usage data for the purpose of improving the user experience, identifying technical issues, and developing new Platform features.

4.2 pka365 does not use automated decision-making processes that produce legal or similarly significant effects on players, except where required by our licensing authority for fraud detection purposes. Where automated decisions are made in this context, you have the right to request human review of any such decision that affects your Account.

5.1 pka365 processes your personal data on one or more of the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing that is necessary for the performance of the contract between you and pka365, including account registration, payment processing, and the delivery of gaming services.
• Legal Obligation: Processing that is required for pka365 to comply with its licensing conditions, KYC obligations, anti-money laundering requirements, and other applicable legal or regulatory requirements.
• Legitimate Interests: Processing carried out in pursuit of pka365's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing and promotional communications, where you have provided freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5.2 Where pka365 relies on legitimate interests as the legal basis for processing, we have conducted a legitimate interests assessment to confirm that the processing is necessary, proportionate, and does not unduly prejudice your privacy rights.

6.1 pka365 uses cookies and similar tracking technologies on the Platform to ensure the proper functioning of the website, to analyse usage patterns, and to deliver a personalised experience. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Essential to the operation of the Platform, including session management, login authentication, and security functions. These cookies cannot be disabled.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data on how players interact with the Platform, including pages visited, time spent, and error reports. This data is used solely to improve the Platform.
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming tool configurations, to provide a more personalised experience on subsequent visits.
• Marketing Cookies: Used, where consent has been provided, to track the effectiveness of pka365's marketing campaigns and to avoid showing you promotional content you have already seen.

6.2 You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some features of the Platform. Strictly necessary cookies are exempt from consent requirements and cannot be disabled through browser settings without affecting Platform access.

6.3 pka365 does not use cross-site tracking technologies that follow your activity beyond the pka365.bet domain for the purpose of building third-party advertising profiles.

7.1 pka365 does not sell, rent, or trade your personal data to any third party. Personal data is shared with third parties only in the limited circumstances described in this section.

7.2 Service Providers: pka365 works with carefully selected third-party service providers who process personal data on our behalf, including:

• Payment processors facilitating PKR transactions via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank;
• KYC and identity verification service providers;
• IT infrastructure and cloud hosting providers who store Platform data on encrypted servers;
• Customer support software providers who process support ticket content;
• Fraud detection and anti-money laundering screening service providers.

7.3 All third-party service providers are contractually required to process personal data only on pka365's documented instructions, to implement appropriate technical and organisational security measures, and to maintain confidentiality of all data processed on our behalf.

7.4 Regulatory & Legal Disclosure: pka365 may disclose personal data to regulatory authorities, law enforcement agencies, or the dispute resolution body designated by our licensing authority where required by law, court order, or regulatory direction. In such cases, pka365 will disclose only the minimum data necessary to satisfy the legal requirement.

7.5 Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of pka365's business, personal data held by pka365 may be transferred to the acquiring entity as part of that transaction, subject to confidentiality obligations and with notice provided to affected players.

8.1 pka365 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the minimum retention periods required by our licensing authority and applicable anti-money laundering regulations.

8.2 The following general retention periods apply:

• Account Data (active accounts): Retained for the duration of the account relationship and for a minimum period of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years from the date of the last transaction on the account, or longer where required by our licensing authority.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Retained for three (3) years from the date of the communication, or longer where the communication relates to an ongoing dispute or investigation.
• Technical & Usage Data: Retained for up to two (2) years from the date of collection, after which it is aggregated and anonymised or securely deleted.
• Marketing Consent Records: Retained for the duration of the marketing relationship and for one (1) year following withdrawal of consent, as evidence of the consent having been obtained.

8.3 Upon expiry of the applicable retention period, personal data is either securely deleted using industry-standard data destruction methods or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

9.1 As a registered player on the pka365 Platform, you hold the following rights in respect of your personal data, subject to applicable legal limitations and exemptions:

• Right of Access: You may request a copy of all personal data held by pka365 in respect of your account. We will provide this within 30 days of receiving a verified request.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held by pka365. Certain corrections (e.g., name changes) may require supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain data under anti-money laundering and licensing regulations.
• Right to Restriction: You may request that pka365 restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or object to its processing.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request that pka365 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests at any time. pka365 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

9.2 To exercise any of the rights described above, please contact our support team at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any data rights request and will respond within 30 days. Complex requests may be extended by a further 60 days with prior notification.

9.3 pka365 does not charge a fee for exercising data rights in ordinary circumstances. Where requests are manifestly unfounded or excessive (particularly where repetitive), pka365 reserves the right to charge a reasonable administrative fee or decline to act on the request.

10.1 pka365 implements a comprehensive range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the pka365 Platform;
• Encryption at rest for all personal data and financial transaction records stored on pka365 servers;
• Role-based access controls limiting access to personal data to authorised personnel on a strict need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing of the Platform infrastructure;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Formal data breach detection, reporting, and response procedures.

10.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, pka365 will notify affected players without undue delay and will report the breach to the relevant regulatory authority within the timeframe required by our licensing obligations.

10.3 While pka365 takes all reasonable precautions to protect your data, no method of electronic transmission or storage is entirely without risk. Players are encouraged to use strong, unique passwords for their pka365 accounts and to enable any available two-factor authentication features.

11.1 The pka365 Platform is strictly intended for individuals aged 21 years and above. pka365 does not knowingly collect or process personal data from individuals under the age of 21.

11.2 Where pka365 becomes aware — through KYC verification, platform monitoring, or any other means — that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, all associated data will be deleted in accordance with our retention policy, and any deposited funds will be returned via the original payment method following a brief investigation period.

11.3 pka365 does not direct any marketing communications toward individuals under the age of 21 and does not knowingly process any personal data for the purpose of targeting underage individuals with gambling-related content.

12.1 pka365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal or regulatory requirements, or the features and services available on the Platform.

12.2 Where changes to this Privacy Policy are material — meaning they meaningfully affect how your personal data is processed or the rights available to you — pka365 will notify registered players via email to the address associated with their account no less than 14 days before the changes take effect.

12.3 Non-material amendments, such as corrections of typographical errors or clarifications that do not affect the substance of processing activities, may be made without prior notice. The "Last Updated" date at the top of this document will reflect the date of the most recent revision.

12.4 The current version of this Privacy Policy will always be accessible at pka365.bet/privacy-policy. Players are encouraged to review this Policy periodically. Continued use of the Platform following notification of any amendment constitutes acceptance of the updated Privacy Policy.

13.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by pka365, please contact our dedicated data protection point of contact:

13.2 If you believe that pka365 has not handled your personal data in accordance with this Privacy Policy or applicable data protection requirements, you have the right to raise a complaint with the relevant supervisory authority or the dispute resolution body designated by our licensing authority. Details of the appropriate supervisory authority are available upon request by contacting us at the address above.

13.3 pka365 takes all privacy complaints seriously and will acknowledge receipt of every complaint within 5 business days, with a substantive response provided within 30 days. Where a complaint requires more extensive investigation, we will keep you informed of progress at regular intervals.