399pk Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by 399pk ("399pk", "we", "us", "our") and applies to all personal data collected from users ("Player", "User", "you", "your") who access or register on the 399pk online casino and sports betting platform at 399pk.app ("Platform").

399pk is committed to protecting the privacy and personal data of all registered Pakistani players and visitors to the Platform. This Policy explains what personal data we collect, why we collect it, how we use and protect it, and your rights in relation to it. By registering on or using 399pk, you acknowledge that you have read and understood this Privacy Policy.

This Policy should be read alongside the 399pk Terms & Conditions. In the event of conflict, the Terms & Conditions shall prevail.

2. Personal Data We Collect

399pk collects personal data in the following categories when you register, verify, deposit, bet, or interact with the Platform:

399pk does not collect sensitive personal data beyond what is required for KYC compliance and responsible gaming obligations.

3. How We Use Your Personal Data

399pk uses the personal data collected for the following purposes:

• To create, verify, and manage your 399pk account and PKR wallet.
• To process PKR deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah.
• To fulfil KYC (Know Your Customer) and identity verification obligations before processing withdrawals.
• To detect, investigate, and prevent fraud, money laundering, and unauthorised account access.
• To administer bonuses, promotions, and loyalty programmes on 399pk.
• To provide customer support and resolve account queries from Pakistani players.
• To enforce the 399pk Terms & Conditions and responsible gaming obligations, including age verification.
• To send you transactional communications (account confirmations, deposit receipts, security alerts).
• To send promotional communications where you have provided explicit consent.
• To analyse platform usage and improve the performance and user experience of 399pk.
• To comply with applicable legal, regulatory, and reporting obligations.

4. Legal Basis for Processing

399pk processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to create and operate your 399pk account and fulfil our obligations under the Terms & Conditions, including processing PKR transactions and providing gaming services.
• Legal Obligation: Processing required to comply with KYC requirements, anti-money laundering obligations, and other applicable regulatory requirements.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and platform improvement, where such interests are not overridden by your privacy interests.
• Consent: Processing of data for marketing communications, which you may withdraw at any time.

5. Payment Data & KYC Processing

5.1 When you deposit or withdraw PKR via JazzCash or Easypaisa, your mobile wallet number and transaction reference data are processed by the respective payment provider and shared with 399pk solely for the purpose of confirming and recording the transaction in your account ledger.

5.2 For bank transfers via HBL, UBL, Meezan Bank, or Bank Alfalah, your account number and IBAN are used only to process the specific withdrawal you have requested. 399pk does not store bank credentials beyond what is necessary for transaction reconciliation.

5.3 KYC documents – including CNIC copies and proof of address – are stored securely in encrypted form. They are accessible only to authorised 399pk compliance personnel and are not shared with third parties except where required by law or regulatory authority.

5.4 Where an account is flagged by our fraud detection systems, financial data may be shared with the relevant payment provider or law enforcement authority in compliance with applicable anti-money laundering obligations.

6. Data Sharing & Third Parties

399pk does not sell or rent personal data to third parties. We share personal data only in the following circumstances:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah receive only the transaction data required to process your PKR deposits and withdrawals.
• Game Providers: Third-party casino game and sportsbook providers receive anonymised session identifiers to power gameplay. They do not receive your name, CNIC, or payment details.
• Technology Providers: Hosting, security, analytics, and customer support platform providers who process data on 399pk's behalf under data processing agreements requiring equivalent data protection standards.
• Legal Authorities: Where required by applicable law, court order, or regulatory request, 399pk will disclose personal data to relevant Pakistani or international authorities.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, player data may be transferred to a successor entity, subject to this Privacy Policy remaining in force.

7. Cookies & Tracking Technologies

399pk uses the following categories of cookies and similar technologies:

• Strictly Necessary Cookies: Required for the Platform to function. These maintain your login session, shopping cart equivalent (bet slip), and security tokens. They cannot be disabled.
• Performance & Analytics Cookies: Used to understand how Pakistani players interact with the 399pk Platform – which pages load most frequently, where errors occur, and how to improve the mobile experience. Data is aggregated and anonymised.
• Functional Cookies: Used to remember your preferences such as language, game lobby layout, and responsible gaming settings between sessions.

399pk does not use third-party advertising cookies or cross-site tracking technologies. You can manage cookie preferences through your browser settings, but disabling strictly necessary cookies will impair Platform functionality.

8. Data Retention

399pk retains personal data for the periods set out below:

• Active Account Data: Retained for the duration of your account registration plus a minimum of five years after account closure to satisfy anti-money laundering and audit obligations.
• KYC Documents: Retained for a minimum of five years following account closure or the completion of the transaction to which the verification relates.
• Transaction Records: Retained for a minimum of five years from the date of the transaction.
• Support Communications: Retained for three years from the date of the last interaction, unless retained longer for dispute resolution or legal purposes.
• Marketing Consent Records: Retained for three years from the date consent was recorded or withdrawn.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

9. Data Security

399pk implements technical and organisational measures proportionate to the sensitivity of the personal data we hold. These include:

• TLS encryption for all data transmitted between your device and the 399pk Platform.
• AES-256 encryption for personal data stored in 399pk databases.
• Multi-factor authentication on internal system access for 399pk personnel.
• Regular security assessments and penetration testing of the Platform infrastructure.
• Role-based access controls ensuring only authorised personnel access personal data relevant to their function.
• Incident response procedures to detect, contain, and notify affected players of any data breach within an appropriate timeframe.

While 399pk takes all reasonable measures to protect your data, no internet transmission is completely secure. You are responsible for maintaining the confidentiality of your 399pk login credentials.

10. Your Data Rights

Subject to applicable law, you have the following rights regarding personal data held by 399pk:

• Right of Access: You may request a copy of the personal data 399pk holds about you.
• Right of Rectification: You may request correction of inaccurate or incomplete personal data.
• Right of Erasure: You may request deletion of your personal data where there is no longer a lawful basis for its retention. Note that regulatory retention obligations may limit this right.
• Right to Restrict Processing: You may request that 399pk restrict processing of your data in certain circumstances.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing), you may withdraw that consent at any time via Account settings or by contacting support.

To exercise any of these rights, contact 399pk support at [email protected]. We will respond within 30 days. Identity verification will be required before any data access request is fulfilled.

11. Children & Minors

The 399pk Platform is strictly intended for individuals aged 18 years and older. 399pk does not knowingly collect personal data from persons under the age of 18. If we determine that personal data has been collected from an underage individual, that account will be immediately suspended and the data will be securely deleted. If you believe a minor has registered on 399pk, please contact support immediately at [email protected].

12. Changes to This Privacy Policy

399pk reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via account notification prior to the change taking effect. The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of the 399pk Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

13. Contact Us

For questions, requests, or concerns about this Privacy Policy or the handling of your personal data by 399pk, please contact our support team:

Email: [email protected]

Our support team operates 24 hours a day, 7 days a week and is available to assist Pakistani players in English with account data queries, deletion requests, and responsible gaming matters.