PKR335 Privacy Policy – How We Protect Your Personal Data

1 Introduction

This Privacy Policy explains how pkr335 ("we", "us", "our", "the Platform") collects, uses, stores, shares and protects the personal data of users ("you", "your", "Player") who access or use the pkr335 website at pkr335.app and any associated mobile applications or services.

pkr335 takes privacy seriously. The platform was built for Pakistani players, and that means it was built with the understanding that your personal and financial information is sensitive. We are committed to handling it responsibly, transparently and securely — and this document explains exactly how we do that.

This policy was last updated on 1 June 2025. If material changes are made, registered users will be notified via their registered email address before the changes take effect.

2 Who We Are – Data Controller

For the purposes of this Privacy Policy, pkr335 is the data controller — meaning we are responsible for determining how and why your personal data is processed when you use our platform.

pkr335 was founded by a Pakistan-based team and operates as an online gaming platform serving players in Pakistan. Our platform is accessible at pkr335.app. For all data-related enquiries, the point of contact is our support team, reachable at support@pkr335.app.

Where pkr335 uses third-party service providers to process data on our behalf — such as payment processors, identity verification services and analytics providers — those parties act as data processors and are bound by contractual obligations to handle data only as instructed by pkr335 and in compliance with applicable data protection standards.

3 Personal Data We Collect

pkr335 collects personal data through several channels: information you provide directly, data generated through your use of the platform, and data received from third-party service providers. Here is a full breakdown:

3.1 Data You Provide to PKR335

• Account registration: Full name, date of birth, email address, Pakistani mobile number and chosen username and password.
• Identity verification (KYC): Copy of CNIC, passport or other government-issued photo ID; proof of address documents where required.
• Payment information: Mobile wallet account numbers (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details for IBFT, or card details for Visa/Mastercard transactions. Card data is processed directly by our PCI-DSS compliant payment processor — pkr335 does not store full card numbers.
• Communications: Messages sent to the pkr335 support team via live chat or email, including their content and metadata.
• Responsible gaming preferences: Deposit limits, loss limits, session preferences and self-exclusion requests submitted through your pkr335 account settings.

3.2 Data Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type, screen resolution and mobile network information.
• Usage data: Pages visited on pkr335, games played, bets placed, session duration, clicks and navigation patterns.
• Transaction data: Deposit history, withdrawal history, bonus claims, game outcomes and account balance changes.
• Cookie data: As described in Section 8 of this policy.

3.3 Data Received from Third Parties

• Identity verification providers: Confirmation of ID document authenticity and results of sanctions or watchlist screening.
• Payment providers: Transaction status confirmations and fraud screening results from JazzCash, Easypaisa, bank partners and card processors.
• Fraud prevention services: Risk scores and flags associated with your device or IP address from third-party fraud detection systems used by pkr335.

4 How PKR335 Uses Your Personal Data

pkr335 uses your personal data for the following purposes — and only these purposes:

• Account creation and management: Registering your pkr335 account, verifying your identity, maintaining your profile and enabling you to log in securely.
• Processing transactions: Handling deposits, withdrawals, bonus credits and refunds. pkr335 must process financial data to ensure your PKR funds are credited and dispatched correctly.
• Game delivery and platform operation: Running games, recording bet outcomes, calculating winnings, managing jackpots and maintaining the overall functionality of the pkr335 platform.
• Legal and regulatory compliance: Meeting anti-money laundering (AML) obligations, age verification requirements, licensing conditions and cooperation with lawful requests from regulatory or law enforcement authorities.
• Fraud detection and security: Identifying suspicious account activity, preventing unauthorised access and detecting patterns associated with fraud, collusion or exploitation of pkr335 systems.
• Customer support: Responding to your enquiries, investigating complaints, resolving account disputes and handling responsible gaming requests.
• Marketing communications: Sending promotional offers, bonus notifications and platform news — only where you have explicitly opted in. You can opt out at any time.
• Platform improvement: Analysing anonymised and aggregated usage data to identify bugs, improve navigation, optimise game performance and develop new features on pkr335.

5 Legal Basis for Processing

pkr335 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to fulfil the pkr335 Terms and Conditions you accepted at registration — including account management, transaction processing and game delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML/KYC obligations, tax reporting requirements and responses to lawful regulatory enquiries.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection and internal analytics — where these interests are not overridden by your privacy rights.
• Consent: Marketing communications and non-essential cookies are only processed where you have given clear, specific and freely withdrawable consent. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

6 Data Sharing – Who Sees Your Information

pkr335 does not sell your personal data to any third party. We share data only in the following limited and necessary circumstances:

• Payment processors: JazzCash, Easypaisa, NayaPay, SadaPay, IBFT banking partners and card processing networks receive the minimum financial data required to execute your transaction. These providers operate under their own privacy frameworks and are PCI-DSS certified where applicable.
• Identity verification providers: When pkr335 requests KYC verification, your identity documents are processed by an accredited third-party verification service. Their processing is governed by a data processing agreement with pkr335 and limited to identity verification purposes only.
• Game content providers: Third-party game studios whose titles are available on pkr335 may receive anonymised gameplay session data for technical quality assurance. They do not receive personally identifiable information from pkr335.
• Fraud prevention and security services: pkr335 uses specialist third-party fraud detection services that process technical data (IP addresses, device fingerprints) to identify risk patterns. This processing is governed by contracts requiring strict data minimisation.
• Regulatory and law enforcement authorities: pkr335 is legally obligated to share data with regulators, law enforcement agencies or courts when lawfully required to do so. We will notify you of such disclosures where we are legally permitted to do so.
• Professional advisers: Lawyers, auditors and accountants engaged by pkr335 may access personal data to the extent strictly necessary for their professional services, under confidentiality obligations.

7 How Long We Keep Your Data

pkr335 retains personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable laws and regulations. The following retention periods apply:

• Active account data: Retained for the duration of your pkr335 account and deleted or anonymised within 90 days of confirmed account closure, subject to the exceptions below.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction, in compliance with anti-money laundering regulations applicable to gaming operators.
• KYC / Identity verification documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Customer support communications: Retained for 3 years from the date of the interaction to support dispute resolution and quality assurance.
• Marketing consent records: Retained for 3 years from the date of consent to demonstrate compliance with consent requirements.
• Game logs and session data: Retained for 2 years for fraud investigation, dispute resolution and regulatory audit purposes.

When data is no longer required for any lawful purpose, pkr335 securely deletes or anonymises it so it can no longer be associated with you as an individual.

8 Cookies and Tracking Technologies

pkr335 uses cookies and similar tracking technologies on its website and mobile application. Cookies are small text files placed on your device that help the platform function correctly and allow us to understand how users interact with pkr335.

We use the following categories of cookies:

pkr335 does not use advertising or third-party behavioural tracking cookies. Analytics cookies process anonymised, aggregated data only — they do not individually identify you.

To manage or disable non-essential cookies, you can adjust your browser's cookie settings. Note that disabling functional cookies may affect how certain features of pkr335 behave — for example, your language or display preferences may not be remembered between sessions.

9 How PKR335 Protects Your Data

pkr335 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or loss:

• SSL/TLS encryption: All data transmitted between your device and pkr335 servers is encrypted using current-generation TLS protocols. The padlock in your browser's address bar confirms this connection is active.
• Data encryption at rest: Sensitive data categories — including identity documents, payment account details and password hashes — are encrypted in storage using strong encryption standards.
• Access controls: Access to personal data within pkr335's internal systems is strictly limited to staff whose job function requires it, under role-based access controls and audit logging.
• Two-factor authentication: pkr335 offers 2FA for player accounts and requires it for staff accessing administrative systems that contain personal data.
• Penetration testing: pkr335 conducts regular security assessments and penetration tests of its platform and infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data security incident affecting player data, pkr335 will notify affected users and relevant regulatory authorities within the timeframes required by applicable law.

10 Your Data Rights

As a pkr335 user, you have the following rights regarding your personal data. To exercise any of these rights, email support@pkr335.app with your account email address and a clear description of your request. Requests are handled free of charge and completed within 30 days.

If you believe pkr335 has not handled your personal data correctly, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. pkr335 would always prefer to resolve data concerns directly — please contact us first and we will do our best to address the issue promptly.

11 Children's Privacy

pkr335 is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. The pkr335 registration process includes an age declaration requirement and date-of-birth verification, and we conduct additional age checks as part of our standard KYC process.

If pkr335 discovers that a user under the age of 18 has registered an account — whether through our own checks, a parental report or any other means — we will immediately suspend the account, delete all associated personal data and return any deposits made (less any amounts lost to gameplay, which cannot be recovered from already-settled game outcomes).

If you are a parent or guardian and believe your child has registered on pkr335, please contact us immediately at support@pkr335.app. We will investigate and act swiftly.

12 Marketing Communications

pkr335 may send you promotional emails, SMS messages and push notifications about bonuses, new games, tournaments and platform updates. We will only do this if you have given us clear consent to do so — either during the registration process or by subsequently opting in through your account settings.

Marketing communications from pkr335 will always:

• Clearly identify themselves as coming from pkr335.
• Include a one-click unsubscribe mechanism or clear instructions on how to opt out.
• Comply with applicable anti-spam and electronic communications regulations.
• Never be sent to players who have opted out or not consented, regardless of their account status.

To stop receiving marketing communications from pkr335, you can unsubscribe via the link in any email, adjust push notification settings in the pkr335 app, update your marketing preferences in Account Settings, or email support@pkr335.app requesting opt-out. Opt-out requests are processed within 5 working days. Note that opting out of marketing does not affect transactional communications such as deposit confirmations, withdrawal notifications and security alerts — these are sent regardless of marketing preferences as they are necessary for account operation.

13 Changes to This Privacy Policy

pkr335 will update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the way our platform operates. When material changes are made, we will:

• Update the "Last Updated" date at the top of this policy.
• Send a notification to all registered pkr335 users via their registered email address at least 14 days before the changes take effect.
• Display a notice on the pkr335 platform during the period between notification and the effective date.

Your continued use of pkr335 after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept a material change, you may close your account by contacting support@pkr335.app before the changes take effect.

14 Contact Us – Data Enquiries

For any question, concern or request relating to your personal data and how pkr335 handles it, please contact us through the following channels:

• Email (data enquiries): support@pkr335.app — please include "Privacy Request" in the subject line.
• Live Chat: Available 24/7 on the pkr335 website and mobile app. Our support agents can assist with general privacy queries and forward formal data requests to the appropriate team.
• Response time: Data requests acknowledged within 48 hours and completed within 30 calendar days. Complex requests may take up to 60 days, in which case you will be notified of the extension.