pak399 Privacy Policy

pak399 ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of all users who access or register on pak399.net. This Privacy Policy applies to all personal data collected through the pak399 website, account registration process, gaming and betting activities, customer support interactions, and all related platform services.

By registering an account or continuing to use the pak399 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not consent to the terms of this Privacy Policy, you must not register an account or submit any personal information to pak399.

This policy applies to users accessing pak399 from Pakistan and all other jurisdictions in which the platform operates. Users in Pakistan should be aware that by submitting personal data to pak399, their information may be processed and stored on servers located outside Pakistan, subject to the data protection standards described in this policy.

pak399 collects personal data in the following categories, depending on how you interact with the platform:

2.1 Registration Data. When you create a pak399 account, we collect: full name, date of birth, email address, mobile phone number, and the Pakistan-based city of residence you provide (e.g. Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad). This information is required to create and verify your account.

2.2 Identity Verification Data. As part of our Know Your Customer (KYC) and anti-money laundering obligations, pak399 may request: a copy of a government-issued identification document (such as CNIC or passport), proof of address documentation, and in some cases a selfie photograph for liveness verification. This data is collected only when required for verification purposes and is processed in accordance with applicable regulatory requirements.

2.3 Financial Data. pak399 collects data related to your deposits, withdrawals, and transaction history on the platform. This includes payment method identifiers (e.g. JazzCash account numbers, Easypaisa wallet IDs, or bank account details for HBL, UBL, Meezan Bank, or Bank Alfalah transfers), transaction amounts in PKR, and timestamps. pak399 does not store full bank card numbers or complete bank login credentials.

2.4 Gameplay & Betting Data. pak399 records all gaming and betting activity associated with your account, including game sessions, bet amounts, winnings, slot spins, cricket betting market selections, and live casino hand history. This data is retained for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance purposes.

2.5 Technical & Device Data. pak399 automatically collects certain technical data when you access the platform, including: IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

2.6 Communications Data. When you contact pak399 support via live chat or email, we retain records of those communications, including the content of messages and any attachments submitted, for customer service quality purposes and dispute resolution.

pak399 uses the personal data we collect for the following purposes:

• Account creation and management — to register, verify, and maintain your pak399 account;
• Transaction processing — to process PKR deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah;
• Identity and age verification — to confirm that you are at least 18 years of age and that your identity matches the information provided at registration;
• Fraud prevention and security — to detect, investigate, and prevent fraudulent transactions, account abuse, money laundering, and other unlawful activity on the pak399 platform;
• Responsible gaming monitoring — to identify patterns of play that may indicate problem gambling behaviour, and to enforce deposit limits, cool-off periods, and self-exclusion requests;
• Customer support — to respond to your queries, complaints, and account requests efficiently and accurately;
• Platform improvement — to analyse aggregated, anonymised usage data to improve the pak399 platform's performance, user interface, and game library;
• Regulatory compliance — to fulfil record-keeping, reporting, and cooperation obligations under applicable laws and the terms of pak399's operating licence;
• Marketing communications — where you have provided explicit consent, to send you information about pak399 promotions, new game launches, and platform updates. You may withdraw marketing consent at any time via your account settings.

pak399 does not sell your personal data to third parties for their own marketing purposes. Data is shared only as described in Section 6 of this policy.

pak399 processes personal data on the following legal bases:

4.1 Contractual Necessity. Processing of registration data, financial data, and gaming data is necessary for the performance of the contract between pak399 and the user — specifically, to provide the gaming and betting services you have signed up for.

4.2 Legal Obligation. Processing for KYC verification, anti-money laundering checks, and regulatory reporting is carried out to comply with applicable legal and regulatory obligations, including those arising from pak399's operating licence conditions.

4.3 Legitimate Interests. pak399 processes technical and device data, communications data, and gameplay data on the basis of its legitimate interests in fraud prevention, platform security, responsible gaming enforcement, and service improvement — provided these interests are not overridden by your data protection rights.

4.4 Consent. Where pak399 sends marketing communications or deploys non-essential cookies, we do so on the basis of your explicit prior consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

pak399 uses cookies and similar tracking technologies to operate the platform, maintain your login session, and improve the user experience. Cookies are small text files stored on your device by your browser when you visit pak399.net.

5.1 Essential Cookies. These cookies are strictly necessary to operate core platform functions, including maintaining your authenticated session, remembering your language preferences, and securing the platform against cross-site request forgery. These cookies cannot be disabled without preventing access to the platform.

5.2 Analytics Cookies. With your consent, pak399 uses analytics cookies to understand how users navigate the platform — which pages are visited most frequently, how long sessions last, and where users encounter difficulties. This data is aggregated and anonymised and does not identify individual users.

5.3 Preference Cookies. These cookies remember your platform preferences, such as your last visited game category or display settings, to provide a more personalised experience on return visits.

You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not affect access to pak399's core gaming services, but may affect certain personalisation features. Note that disabling essential cookies will prevent platform login and core functionality.

pak399 does not sell personal data to third parties. We share personal data only in the following limited circumstances:

6.1 Payment Processors. To process your deposits and withdrawals, pak399 shares necessary financial transaction data with payment service providers including JazzCash, Easypaisa, and the banking institutions you use (HBL, UBL, Meezan Bank, Bank Alfalah). These providers process your data only for the purpose of completing your transaction and are bound by their own data protection obligations.

6.2 Identity Verification Providers. pak399 may use third-party KYC and identity verification services to verify the identity documents you submit. These providers process identity data solely for verification purposes and are contractually prohibited from using your data for any other purpose.

6.3 Game Studios. When you play games provided by third-party studios (such as JILI, PG Soft, or Pragmatic Play), limited technical data (such as your account session token and bet amounts) is shared with those studios to deliver the game service. Game studios are contractually bound not to use this data for independent marketing or profiling purposes.

6.4 Regulatory Authorities. pak399 will disclose personal data to regulators, law enforcement agencies, or judicial bodies where required to do so by applicable law, court order, or regulatory obligation. pak399 will make reasonable efforts to notify affected users of such disclosures where legally permissible to do so.

6.5 Corporate Transactions. In the event of a merger, acquisition, or sale of all or part of pak399's business, user personal data may be transferred as part of that transaction. Affected users will be notified of any change in the data controller responsible for their personal data.

pak399 retains personal data for as long as your account is active and for a further period as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account and registration data — retained for the duration of your account, plus a minimum of five (5) years following account closure, as required for anti-money laundering compliance;
• Identity verification documents — retained for a minimum of five (5) years from the date of verification, or longer if required by applicable regulatory obligations;
• Financial transaction records — retained for a minimum of five (5) years from the date of each transaction;
• Gameplay and betting history — retained for the duration of your account, plus a minimum of two (2) years following account closure;
• Support communications — retained for a minimum of two (2) years from the date of the communication;
• Marketing consent records — retained for the period of consent and for a minimum of two (2) years following withdrawal of consent.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with pak399's internal data lifecycle procedures.

pak399 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the pak399 platform;
• Bcrypt or equivalent hashing for stored passwords — pak399 never stores plaintext passwords;
• Access controls restricting internal access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of platform infrastructure;
• Automated monitoring for suspicious account activity, unusual login locations, and potential fraud patterns;
• Two-factor authentication available to all registered users for additional account protection.

While pak399 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own login credentials and for notifying pak399 immediately if you suspect unauthorised access to your account.

Subject to applicable law, you have the following rights with respect to the personal data pak399 holds about you:

• Right of Access — you may request a copy of the personal data pak399 holds about you;
• Right to Rectification — you may request correction of inaccurate or incomplete personal data;
• Right to Erasure — you may request deletion of your personal data, subject to pak399's legal retention obligations;
• Right to Restriction — you may request that pak399 restrict processing of your personal data in certain circumstances;
• Right to Data Portability — where technically feasible and legally applicable, you may request a structured, machine-readable copy of your personal data;
• Right to Object — you may object to processing based on legitimate interests, including processing for direct marketing purposes;
• Right to Withdraw Consent — where processing is based on consent (e.g. marketing communications), you may withdraw that consent at any time through your account settings or by contacting pak399 support.

To exercise any of the above rights, please contact pak399 support via live chat or email. pak399 will respond to data rights requests within thirty (30) days of receipt. Note that certain requests — particularly erasure requests — may be subject to limitations where pak399 is required by law to retain your data for compliance purposes.

10.1 Contacting pak399 About Privacy. For all privacy-related queries, data rights requests, or concerns about how pak399 handles your personal data, please contact our support team via 24/7 live chat on the platform, or by email at the address listed in the footer of this page. pak399 commits to responding to all privacy queries within fourteen (14) business days.

10.2 Policy Updates. pak399 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform services. The revised policy will be published on this page with an updated "Last Updated" date. Where changes are material, pak399 will notify registered users via email or on-platform notification before the changes take effect. Your continued use of pak399 following such notification constitutes your acceptance of the revised Privacy Policy.

10.3 Language. This Privacy Policy is written in English. In the event of any inconsistency between this English version and any translated version, the English text shall prevail.