Privacy Policy — pk355 Platform

This Privacy Policy ("Policy") is published by pk355, the operator of the online platform accessible at https://pk355.cam ("Platform", "pk355", "we", "us", "our"). This Policy sets out how pk355 collects, processes, stores, uses, shares and protects personal data in connection with your use of the Platform.

pk355 is an English-language online betting and casino information platform designed for users in Pakistan and permitted jurisdictions. We are committed to handling personal data responsibly, transparently and in a manner consistent with applicable data protection principles, regardless of the jurisdiction from which you access the Platform.

By registering for an Account on pk355, using the Platform's features or submitting any personal information to us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person. This includes names, email addresses, IP addresses, device identifiers, financial information and identity documents.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. pk355 acts as Data Controller in respect of personal data collected through the Platform.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller, under documented instructions.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, organisation, storage, retrieval, use, disclosure, erasure or destruction.
• "Consent" means freely given, specific, informed and unambiguous indication of the Data Subject's agreement to the processing of their personal data.
• "Data Subject" means any identified or identifiable natural person whose personal data is processed — in this context, a registered or prospective User of pk355.
• "Cookies" means small text files placed on your device by a website, used to store preferences, session data and usage information.
• "KYC" means Know Your Customer — identity verification procedures requiring the submission of personal identification documents.
• "Third Party" means any individual, company or organisation other than pk355 and the Data Subject.

pk355, operating the Platform at https://pk355.cam, is the Data Controller responsible for personal data collected through the Platform. For all data protection enquiries, access requests or complaints, please contact us using the details provided in Section 17 of this Policy.

pk355 collects personal data in several categories, depending on how you interact with the Platform. The categories of personal data we may collect include:

4.1 Identity & Account Data

Collected during registration and maintained throughout your Account lifecycle. Required for account creation, login, communication and platform access.

4.2 Identity Verification (KYC) Data

Collected to satisfy KYC and AML requirements. Identity documents are handled with strict confidentiality and retained only as long as required by applicable regulations. KYC data is not used for marketing purposes.

4.3 Financial Data

Collected to process transactions, prevent fraud and comply with financial regulatory requirements. Payment card details are processed via secure third-party payment intermediaries and are not stored in full on pk355 servers. Familiar Pakistani payment references such as mobile wallets and bank transfers (HBL, UBL, Meezan Bank, Bank Alfalah) are used in a contextual capacity; payment provider data is handled in accordance with their respective privacy policies.

4.4 Technical & Device Data

Collected automatically when you access the Platform. Used for security monitoring, fraud prevention, platform optimisation and to ensure compatibility across devices commonly used in Pakistan and other access jurisdictions.

4.5 Usage & Behavioural Data

Collected to understand how users interact with the Platform, improve content and features, and personalise your experience. Responsible gambling monitoring also makes use of behavioural data to identify patterns that may indicate problem gambling.

4.6 Communication Data

Collected when you contact our support team via Live Chat or email. Communication records are retained to maintain service continuity, resolve disputes and comply with regulatory record-keeping requirements.

pk355 collects personal data through the following means:

• Direct submission: Information you provide when completing the registration form, KYC verification, deposit transactions, withdrawal requests, responsible gambling tool applications, support enquiries or promotional opt-ins;
• Automated collection: Technical and usage data collected automatically through cookies, server logs and similar tracking technologies when you access the Platform;
• Third-party sources: Identity verification providers, fraud-prevention services and payment processors may share data with pk355 as part of integrated KYC, AML or payment authentication workflows;
• Publicly available sources: In specific circumstances related to fraud prevention or regulatory compliance, pk355 may consult publicly available information to verify the accuracy of data you have provided.

pk355 processes your personal data on one or more of the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to fulfil our obligations under the User Agreement — including account management, transaction processing, KYC verification and support services;
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) regulations, know-your-customer (KYC) obligations and data retention mandates;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gambling monitoring, analytics and operational improvement, where our interests are not overridden by your fundamental rights;
• Consent: Processing for marketing communications, non-essential cookies and personalisation features, where you have provided explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing already carried out.

pk355 uses your personal data only for the purposes for which it was collected. Specific uses include:

7.1 Platform Operations

To create and manage your Account; process deposits, withdrawals and wagers; provide customer support; enforce our Terms & Conditions; and maintain the security and integrity of the Platform.

7.2 Identity Verification & Compliance

To carry out KYC and AML checks as required by applicable regulations; to verify your age (18+ or the applicable minimum), identity and source of funds where required; and to maintain regulatory compliance records.

7.3 Responsible Gambling

To monitor gameplay patterns and identify behavioural indicators that may suggest problem gambling; to communicate responsible gambling resources and apply player protection tools such as deposit limits, loss limits, session reminders and self-exclusion orders.

7.4 Security & Fraud Prevention

To detect, investigate and prevent fraudulent activity, account abuse, bonus exploitation, money laundering and other prohibited conduct; to enforce security controls including two-factor authentication and IP-based access monitoring.

7.5 Platform Improvement

To analyse aggregated and anonymised usage data; to improve platform performance, content quality and user experience; to conduct internal research and develop new features in response to user needs.

7.6 Communications

To send transactional notifications (deposit confirmations, withdrawal updates, security alerts); to send marketing communications where you have consented; and to provide updates about changes to platform policies or features. Marketing communications can be opted out at any time.

pk355 does not sell, rent or trade your personal data to third-party marketers. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and under appropriate contractual safeguards:

• Identity verification providers: Third-party KYC and AML service providers engaged to verify your identity documents and conduct compliance checks;
• Payment processors: Financial technology intermediaries that process deposit and withdrawal transactions. These processors handle financial data under their own privacy and security standards and are not authorised to use your data for any other purpose;
• Fraud prevention services: Specialist providers engaged to assess transaction risk, detect account abuse and prevent financial crime;
• Technology and infrastructure providers: Cloud hosting, database management and platform security service providers operating under data processing agreements;
• Regulatory and law enforcement authorities: Where required by applicable law, court order, regulatory directive or legitimate law enforcement request, pk355 may disclose personal data to competent authorities. We will notify you of such disclosures where legally permitted to do so;
• Business transfers: In the event of a merger, acquisition or sale of all or substantially all of pk355's assets, personal data may be transferred as part of that transaction, subject to continued adherence to this Privacy Policy.

pk355 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, monitor usage and improve service quality. The types of cookies we use are as follows:

9.1 Essential Cookies

Strictly necessary for the Platform to function. These include session cookies that maintain your login state, security tokens and load-balancing identifiers. Essential cookies cannot be disabled without affecting core platform functionality.

9.2 Functional Cookies

Used to remember your preferences such as language settings, display preferences and previous form inputs. These enhance usability but are not strictly required for basic Platform operation.

9.3 Analytical Cookies

Used to collect aggregated and anonymised data about how users navigate the Platform — pages visited, time spent, error rates and interaction patterns. This data is used exclusively for internal platform improvement and is not linked to individual identities.

9.4 Marketing Cookies

Used only with your explicit consent. Where you have opted in, marketing cookies may be used to personalise promotions displayed on the Platform. You may withdraw consent and disable marketing cookies at any time through your browser settings or Account preferences.

9.5 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to refuse cookies, delete stored cookies and receive notifications when cookies are set. Disabling non-essential cookies will not prevent you from using the core features of the Platform, but may affect certain personalisation functions.

pk355 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by applicable law or regulatory obligation. Our general retention guidelines are as follows:

• Account data: Retained for the duration of the Account relationship and for a period thereafter as required by applicable AML, KYC and financial regulatory record-keeping obligations;
• KYC documentation: Retained for a minimum of five (5) years following account closure or the completion of the last transaction, or such longer period as required by applicable law;
• Transaction records: Retained for a minimum of five (5) years in accordance with financial record-keeping requirements;
• Support communications: Retained for three (3) years from the date of last communication, unless a longer period is required for dispute resolution or regulatory purposes;
• Analytical and usage data: Retained in anonymised or aggregated form indefinitely for internal research purposes. Personally identifiable usage data is deleted or anonymised within twelve (12) months of collection where no longer required for operational purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

pk355 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. Security measures in place include, but are not limited to:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform;
• Encryption at rest for sensitive personal data stored on pk355 servers;
• Access controls restricting personal data access to authorised personnel with a documented legitimate need;
• Two-factor authentication (2FA) options for User accounts to prevent unauthorised login;
• Regular security assessments, penetration testing and vulnerability management;
• Incident response procedures to detect, investigate and respond to data security breaches promptly.

The pk355 Platform serves users from Pakistan and may be operated from or use infrastructure located in jurisdictions other than Pakistan. As a result, personal data collected from Pakistani users may be transferred to, stored in and processed in countries other than Pakistan.

Where personal data is transferred internationally, pk355 will ensure that appropriate safeguards are in place to protect the data to a standard consistent with the purposes described in this Policy. This may include contractual data processing agreements incorporating internationally recognised data protection clauses, or transfers to jurisdictions that maintain adequate data protection frameworks.

By using the pk355 Platform, you acknowledge and consent to the international transfer of your personal data as described in this section, subject to the safeguards outlined above.

Depending on your jurisdiction and the applicable legal framework, you may have the following rights in respect of your personal data held by pk355:

Note that the exercise of certain rights may be subject to limitations where pk355 has legal obligations to retain specific data (for example, KYC records retained under AML regulations). In such cases, we will explain the applicable limitation clearly in our response.

The pk355 Platform is strictly intended for adult users who are 18 years of age or older, or who meet the higher minimum age required by the operator or applicable license jurisdiction. pk355 does not knowingly collect personal data from individuals under the age of 18.

If pk355 becomes aware that personal data has been collected from a minor without verifiable parental consent, that data will be deleted from our systems as promptly as possible. If you believe a minor has provided personal data to pk355, please contact us immediately at [email protected] (plain text only).

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms. The existence of an 18+ restriction does not constitute a representation that gambling is lawful in Pakistan or any other jurisdiction.

The pk355 Platform may contain references to or integrations with third-party services, including payment processing intermediaries. These third-party services operate independently of pk355 and are governed by their own privacy policies.

pk355 is not responsible for the privacy practices, data security measures or content of third-party services. We recommend reviewing the privacy policies of any third-party service you interact with in connection with the use of pk355. Payment brands referenced on pk355 as familiar local context for Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are independent entities with their own data practices and are listed for contextual purposes only.

pk355 reserves the right to update, amend or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements or Platform features. The updated policy will be published on this page with a revised effective date.

For material changes that significantly affect your rights or the way we process your personal data, pk355 will use reasonable efforts to notify registered users via email or in-platform notification prior to the change taking effect. We recommend reviewing this page periodically to stay informed.

Your continued use of the pk355 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any material changes to this Policy, you should cease using the Platform and request account closure in accordance with our Terms & Conditions.

For any questions, concerns, data rights requests or complaints related to this Privacy Policy or the way pk355 handles your personal data, please contact our Data Protection team using the details below. All contact details are provided as plain text only — they are not clickable links.

Please include your full name, Account username and a clear description of your request or concern. We will acknowledge all privacy-related enquiries within five (5) business days and provide a substantive response within thirty (30) calendar days.