pk306 Privacy Policy

1. Data Controller

pk306, operating the online gaming platform accessible at pk306.app, is the data controller responsible for the personal data of all registered users and visitors to the platform. As data controller, pk306 determines the purposes and means by which your personal data is processed.

pk306 operates under an international gaming licence. All data processing activities conducted by pk306 are governed by the data protection obligations imposed by that licence, as well as applicable international data protection standards. References to "pk306", "we", "us", or "our" throughout this Privacy Policy refer to the pk306 platform and its operating entity.

2. What Personal Data We Collect

pk306 collects personal data across several categories depending on how you interact with the platform. The table below summarises the main categories of personal data we hold about registered users:

pk306 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by law or our regulatory obligations and with appropriate safeguards in place.

3. How We Collect Your Data

pk306 collects your personal data through the following channels:

• Account Registration: When you create a pk306 account, you provide your name, mobile number, email address, date of birth, and city of residence directly through the registration form.
• KYC Verification: When you submit identity verification documents (CNIC copies, proof of address, payment method verification screenshots), these are collected and processed by the pk306 compliance team.
• Deposits & Withdrawals: When you make financial transactions via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or Visa debit, the relevant payment details are shared with pk306 to process and record the transaction.
• Platform Usage: Technical and usage data is collected automatically when you log in and use the pk306 platform — including game activity, betting history, session data, and device information — through standard server logs and analytics tools.
• Customer Support: When you contact pk306 via live chat or email, the content of those communications and any attachments you submit are collected and stored as part of your support history.
• Cookies & Tracking Technologies: pk306 uses cookies and similar technologies to collect technical data about your browsing behaviour on the platform. See Section 9 for full details.

4. Why We Use Your Personal Data

pk306 uses your personal data for the following purposes. Each purpose is tied to a specific legal basis, which is detailed in Section 5.

• Account Management: To create, maintain, and administer your pk306 account, including processing your login credentials and account settings.
• Identity Verification (KYC): To verify your identity, age (21+), and eligibility to use the pk306 platform in compliance with our gaming licence obligations.
• Payment Processing: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa debit, and to maintain accurate transaction records.
• Gaming Services: To provide you with access to all pk306 games and betting markets, including cricket betting, live casino, slots, Monster Dice, and Jackpot Bingo, and to record gaming history for dispute resolution.
• Responsible Gaming: To monitor gaming patterns and identify indicators of problem gambling behaviour, and to administer responsible gaming tools including deposit limits, cool-off periods, and self-exclusion.
• Fraud Prevention & AML: To detect, investigate, and prevent fraud, money laundering, collusion, and other prohibited activities on the platform.
• Customer Support: To respond to your queries, complaints, and requests via live chat and email, and to maintain records of support interactions.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via SMS, email, or in-platform messages, where you have opted in to receive such communications.
• Legal Compliance: To comply with applicable laws, regulations, licensing conditions, and lawful requests from regulatory or law enforcement authorities.
• Platform Improvement: To analyse aggregated usage data and improve the functionality, security, and user experience of the pk306 platform over time.

5. Legal Basis for Processing

Every data processing activity carried out by pk306 is grounded in one of the following legal bases:

• Contractual Necessity: Processing that is necessary to deliver the services you have signed up for — including account management, payment processing, and game provision — is carried out on the basis that it is required to perform our contract with you.
• Legal Obligation: Processing required to comply with our gaming licence conditions, anti-money laundering regulations, KYC obligations, and any other applicable legal requirements is conducted on the basis of legal obligation.
• Legitimate Interests: Processing for fraud detection, platform security, responsible gaming monitoring, and platform improvement is conducted on the basis of pk306's legitimate interests, where those interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications — including promotional SMS and email — is conducted only where you have provided clear, informed, and freely given consent. You may withdraw your consent to marketing communications at any time through your account settings or by contacting support.

6. Who We Share Your Data With

pk306 does not sell your personal data to third parties. We share your data only in the following circumstances and only to the extent necessary for each specific purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa payment networks receive the financial data necessary to process your deposits and withdrawals. Each payment processor is subject to its own privacy policy and data security standards.
• KYC & Identity Verification Providers: pk306 uses licensed third-party identity verification services to process CNIC documents and conduct age verification checks. These providers are contractually prohibited from using your data for any purpose other than the verification service they provide to pk306.
• Game Software Providers: The third-party game developers whose titles appear on the pk306 platform may receive aggregated or pseudonymised usage data necessary for game performance and RTP certification. They do not receive your personally identifiable information.
• Regulatory & Law Enforcement Authorities: pk306 will share personal data with gaming regulators, financial intelligence units, tax authorities, or law enforcement agencies where we are legally required to do so or where disclosure is necessary to protect the safety of our users or the integrity of the platform.
• Fraud Detection & AML Screening Services: pk306 uses licensed fraud detection and anti-money laundering screening tools. Relevant transaction data and identity data may be processed by these services to fulfil our compliance obligations.
• Professional Advisers: pk306's legal, accounting, and auditing advisers may access personal data on a need-to-know basis when advising the company on its legal and regulatory obligations. All professional advisers are bound by confidentiality obligations.

7. Data Retention

pk306 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our gaming licence and applicable legal obligations. The following retention periods apply as a general guide:

When the applicable retention period expires, pk306 will securely delete or anonymise the personal data concerned so that it can no longer be linked to you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

8. Security Measures

pk306 implements a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, loss, destruction, or alteration. Key security measures in place include:

• Encryption in Transit: All data transmitted between your device and the pk306 platform is encrypted using TLS 1.3 or higher. This applies to all account activity, financial transactions, and support communications.
• Encryption at Rest: Sensitive data stored in pk306's systems — including CNIC documents, financial records, and authentication credentials — is encrypted at rest using AES-256 standard encryption.
• Access Controls: Access to personal data within pk306's systems is restricted on a strict need-to-know basis. All staff with access to personal data undergo background screening and are subject to confidentiality agreements.
• Two-Factor Authentication: pk306 supports two-factor authentication (2FA) via OTP for all registered accounts and requires 2FA for all internal staff accessing data systems.
• Penetration Testing: pk306's platform undergoes regular independent security testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: pk306 maintains a documented data breach response plan. In the event of a confirmed data breach affecting your personal data, pk306 will notify affected users and relevant authorities within the timeframes required by our licence conditions.

9. Cookies & Tracking Technologies

pk306 uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the platform, remember your preferences, maintain your login session, and analyse platform usage. The cookies used by pk306 fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the pk306 platform to function. They manage your login session, maintain your account state during a gaming session, and support security features such as CSRF protection. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, currency display (PKR), and notification settings — so you do not need to reset them on every visit.
• Analytical Cookies: pk306 uses first-party analytics to understand how users navigate the platform — which game categories are most visited, where users drop off during registration, and how support resources are accessed. This data is aggregated and pseudonymised before analysis.
• Responsible Gaming Cookies: These cookies record the responsible gaming limits and tool settings you have applied to your account (such as session reminders and deposit limits), ensuring those settings are consistently applied across all your sessions.

pk306 does not use third-party advertising cookies or retargeting pixels. Your browsing activity on pk306.app is not shared with advertising networks. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the platform.

10. Your Data Subject Rights

As a pk306 user, you hold meaningful rights over your personal data. The following rights are available to you. To exercise any of these rights, contact pk306 support at support@pk306.app with your registered account details and a clear description of your request. pk306 will acknowledge all requests within 5 business days and provide a substantive response within 30 days.

11. Minors & Age Verification

pk306 is strictly a 21+ platform. We do not knowingly collect personal data from individuals under 21 years of age. Age verification is a mandatory component of the pk306 KYC process, and no account may access real-money gaming features before age has been verified against a valid CNIC.

12. International Data Transfers

As an internationally licensed online gaming platform, pk306 may transfer your personal data to servers or third-party processors located outside Pakistan. Such transfers occur in the following contexts:

• Gaming Platform Infrastructure: pk306's core platform infrastructure may be hosted on servers located in jurisdictions outside Pakistan. All server locations used by pk306 maintain security standards at least equivalent to those described in Section 8 of this Privacy Policy.
• KYC Verification Providers: Identity verification services used by pk306 may process your CNIC documents and biometric data in jurisdictions that maintain international data protection standards compatible with our licensing obligations.
• Game Software Providers: Third-party game developers whose content appears on pk306 may be headquartered or operate infrastructure outside Pakistan. Data shared with these providers is limited to what is technically necessary for game delivery and is governed by contractual data processing agreements.

Whenever pk306 transfers personal data internationally, we ensure that appropriate safeguards are in place — including contractual protections (data processing agreements incorporating standard contractual clauses), or reliance on adequacy decisions where applicable. If you would like more information about the specific safeguards applied to any particular international transfer, contact support@pk306.app.

13. Changes to This Privacy Policy

pk306 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform features. When material changes are made, pk306 will:

• Update the "Effective Date" and "Last Reviewed" dates displayed at the top of this page and in the hero section;
• Display a prominent notice on the pk306 platform notifying logged-in users of the update;
• Where the changes are particularly significant (for example, a new category of data collection or a new third-party recipient), send a direct notification to your registered email address or mobile number;
• Provide a reasonable period — no less than 14 days — for you to review the updated policy before it takes effect, except where changes are required immediately by law or regulatory direction.

Your continued use of the pk306 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any material changes, you should close your pk306 account and request deletion of your personal data (subject to the retention obligations described in Section 7) before the updated policy takes effect.

14. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or pk306's handling of your personal data, please contact the pk306 data protection team using the details below. All correspondence regarding data privacy should clearly state your registered account username or email address so we can locate your records promptly.

Complaints Process

If you are not satisfied with pk306's response to a privacy concern or data subject rights request, you have the right to escalate your complaint. pk306 encourages users to first attempt internal resolution through the support channels above. If the matter remains unresolved, you may escalate to the relevant data protection supervisory authority in the jurisdiction of pk306's licensing authority, or to any other competent authority whose jurisdiction applies to your circumstances.

pk306 takes all privacy complaints seriously and commits to investigating every complaint thoroughly and responding with a documented outcome within the timeframes stated above.