pk333 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. Data Controller

For the purposes of this Privacy Policy, the data controller — the entity that determines the purposes and means of processing your personal data — is pk333, the operator of the online gaming platform accessible at pk333.buzz. pk333 operates under an international gaming licence and processes personal data in accordance with the data protection obligations imposed by its licensing jurisdiction.

References to "pk333", "we", "us", or "our" throughout this Privacy Policy refer to pk333 in its capacity as data controller. References to "you", "your", or "Player" refer to any individual who has registered an account or who uses the pk333 platform in any capacity.

2. Personal Data We Collect

pk333 collects personal data from you at different stages of your relationship with the platform. The categories of data collected and the circumstances in which they are collected are set out below.

2.1 Registration Data

When you create a pk333 account, we collect your Pakistani mobile number, a password you create, and your agreement to these Terms & Conditions and this Privacy Policy. This is the minimum data set required to create an account.

2.2 Identity Verification (KYC) Data

To comply with our international gaming licence and anti-money laundering obligations, we require all players to complete identity verification before processing withdrawals. KYC data includes:

• Full legal name as appearing on your CNIC
• CNIC number and CNIC document images (front and reverse)
• Date of birth (to verify the 21+ age requirement)
• Residential address
• Selfie photograph taken as directed during the verification process

2.3 Financial Data

When you make deposits or withdrawal requests, we collect transaction data including deposit amounts, withdrawal amounts, payment method type (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, or debit card), transaction timestamps, and payment reference numbers. We do not store full payment card numbers — card tokenisation is handled exclusively by our PCI-DSS compliant payment processor.

2.4 Gaming Activity Data

pk333 maintains detailed records of your gaming activity, including games played, bet amounts, game outcomes, session start and end times, and bonus usage. This data is required for regulatory reporting, dispute resolution, responsible gaming monitoring, and service improvement.

2.5 Technical and Device Data

When you access pk333.buzz, our systems automatically collect certain technical information including your IP address, device type, operating system, browser type and version, screen resolution, and session duration. This data is used for security purposes, fraud detection, and platform performance optimisation.

2.6 Communications Data

If you contact pk333 support via live chat or email, we retain records of those communications including the content of messages, timestamps, and any attachments or screenshots you submit. This data is used to resolve your query and to improve our support services.

3. How We Use Your Personal Data

pk333 uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, and securing your pk333 account; verifying your identity at login; resetting passwords; and managing account communications.
• Payment processing: Processing your deposits and withdrawal requests; verifying payment method ownership; maintaining transaction records as required by our licence; and managing chargebacks or payment disputes.
• Regulatory compliance: Meeting our obligations under our international gaming licence, including identity verification, age verification, anti-money laundering monitoring, suspicious activity reporting, and regulatory record-keeping.
• Responsible gaming: Monitoring your gaming activity against problem gambling indicators; enforcing deposit limits, loss limits, and self-exclusion periods you have set; and proactively intervening where automated systems identify potential problem gambling behaviour.
• Fraud prevention and security: Detecting and preventing unauthorised account access, multi-accounting, bonus abuse, money laundering, match-fixing, and other fraudulent or prohibited activities on the platform.
• Customer support: Responding to your support queries, resolving disputes, and maintaining records of support interactions for quality assurance and training purposes.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates via SMS or email — but only where you have provided explicit consent to receive such communications, and only until you withdraw that consent.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players use the platform and to make informed decisions about platform features, game content, and user experience improvements.

4. Legal Basis for Processing

For each category of personal data processing, pk333 relies on one of the following legal bases:

• Contract performance: Processing that is necessary to provide you with the pk333 service you have contracted for — account operation, payment processing, game delivery, and customer support.
• Legal obligation: Processing that is required for pk333 to comply with its obligations under its international gaming licence — KYC verification, AML monitoring, regulatory record-keeping, and suspicious activity reporting.
• Legitimate interests: Processing that serves pk333's legitimate operational interests where those interests are not overridden by your rights — fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring.
• Consent: Processing that is based on your freely given, specific, and informed consent — direct marketing communications via SMS or email. You may withdraw this consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

5. Data Sharing and Third-Party Disclosure

5.1 Service Providers

pk333 shares personal data with a limited number of third-party service providers who assist in operating the platform. These providers are permitted to use your data only as directed by pk333 and are contractually required to maintain confidentiality and implement appropriate security measures. Current categories of service providers include: KYC and identity verification providers; payment processing partners (including operators of JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank integrations); game software suppliers; cloud hosting and infrastructure providers; and customer support platform providers.

5.2 Regulatory and Legal Disclosure

pk333 may disclose your personal data to regulatory authorities, law enforcement agencies, courts, or other public bodies where required to do so by applicable law, court order, or the requirements of pk333's international gaming licence. Such disclosures may include suspicious activity reports filed under anti-money laundering regulations, which by their nature cannot be notified to you in advance.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of pk333's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the registered mobile number associated with your account before your data is transferred to a new data controller.

6. Cookies and Tracking Technologies

6.1 What We Use

pk333.buzz uses the following categories of cookies and similar tracking technologies:

• Strictly Necessary Cookies: These are essential for the platform to function and cannot be switched off. They include session authentication cookies, security tokens, and load-balancing cookies. No consent is required for these cookies.
• Functional Cookies: These remember your preferences — such as language settings and responsible gaming limits — to provide a more personalised experience. These cookies can be disabled, but doing so may affect platform functionality.
• Analytics Cookies: pk333 uses privacy-preserving analytics to understand aggregate user behaviour on the platform. Analytics data is processed in anonymised, aggregated form and is not linked to individual user identities.

6.2 Managing Cookies

You can manage cookie preferences through your browser settings. Most modern browsers allow you to view, delete, and block cookies on a per-site basis. Note that disabling strictly necessary cookies will prevent you from logging into your pk333 account. pk333 does not use third-party advertising cookies or cross-site tracking pixels.

7. Data Retention

pk333 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law or our international gaming licence. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with pk333's data destruction policy.

8. Security Measures

pk333 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• Encryption in transit: All data exchanged between your device and pk333 servers is encrypted using TLS 1.3 with 256-bit encryption.
• Encryption at rest: Personal data stored in pk333 databases is encrypted at rest using AES-256.
• Access controls: Access to personal data is restricted to authorised pk333 personnel with a documented, legitimate need. Access is controlled through role-based permissions and enforced multi-factor authentication.
• Audit logging: All access to personal data by pk333 staff is logged, timestamped, and subject to regular audit review.
• Penetration testing: pk333's platform undergoes independent penetration testing on a quarterly basis. Critical vulnerabilities are remediated within 72 hours of identification.
• Incident response: pk333 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights, pk333 will notify affected players without undue delay and, where required, notify the relevant regulatory authority within 72 hours of becoming aware of the breach.

9. Your Data Rights

As a data subject whose personal information is processed by pk333, you have the following rights. These rights are not automatic in every circumstance — some are subject to conditions and exceptions — but pk333 is committed to responding to all valid requests promptly and without charge.

• Right of Access: You have the right to request confirmation of whether pk333 processes personal data about you, and if so, to receive a copy of that data along with information about how it is used. Requests will be fulfilled within 30 days.
• Right to Rectification: If any personal data pk333 holds about you is inaccurate or incomplete, you have the right to request correction. Minor corrections (such as updating your contact details) can often be made directly through your account settings.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to override by legal retention obligations — data we are required to retain under our gaming licence cannot be deleted before the mandatory retention period expires.
• Right to Restriction of Processing: You have the right to request that pk333 restrict processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of pk333's legitimate interests. pk333 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

10. International Data Transfers

pk333 operates under an international gaming licence, and some of the service providers it works with — including cloud infrastructure providers and KYC verification platforms — may process your personal data in data centres located outside of Pakistan. Where personal data is transferred internationally, pk333 ensures that appropriate safeguards are in place to provide a level of protection for your data that is equivalent to the protection provided under the data protection framework of pk333's licensing jurisdiction. These safeguards include contractual data protection clauses binding on all recipient entities and, where applicable, transfer impact assessments.

11. Children and Minors

The pk333 platform is strictly prohibited to persons under the age of 21 years. pk333 does not knowingly collect, process, or retain personal data from persons under 21. CNIC-based age verification is performed as a mandatory step in the account activation process for this purpose.

If pk333 discovers that personal data has been collected from a person under the age of 21, that account will be immediately suspended, the data will be flagged for deletion, any funds deposited will be handled in accordance with pk333's underage gambling procedures, and the incident will be reported to the relevant regulatory authority as required. Parents and guardians who believe a minor may have registered on pk333 are strongly encouraged to contact support immediately at [email protected].

12. Updates to This Privacy Policy

pk333 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our international gaming licence requirements. Material changes to this Privacy Policy will be communicated to active account holders via registered mobile number notification or through a prominent notice on pk333.buzz no fewer than 14 days before the change takes effect.

The date at the top of this Privacy Policy indicates when it was last updated. Your continued use of the pk333 platform after the effective date of any update constitutes your acknowledgement of the updated Privacy Policy. If you do not accept a material change to this Policy, you should close your account and withdraw your balance before the effective date of the change.

Previous versions of this Privacy Policy are available on request from the pk333 data protection team.

13. Contact and Data Protection Enquiries

For any question, concern, or request relating to this Privacy Policy or to pk333's processing of your personal data, please contact us through the following channels:

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate
• Live Chat: Available 24/7 at pk333.buzz — for urgent privacy concerns, live chat provides the fastest response
• Response Commitment: Privacy enquiries will be acknowledged within 48 hours; substantive responses to data rights requests will be provided within 30 days

pk333 takes privacy enquiries seriously and is committed to resolving them transparently and without unnecessary delay. If you are not satisfied with pk333's response to a privacy concern, you have the right to escalate the matter to the data protection supervisory authority in pk333's licensing jurisdiction.