Privacy Policy – pk36 Online Casino & Sports Betting

1.Introduction & Scope

1.1  pk36 operates an online casino and sports betting platform ("the Platform") accessible at pk36.vip and is the data controller in respect of personal data collected from users of the Platform.

1.2  This Privacy Policy applies to all personal data collected through: (a) the pk36 website and mobile platform; (b) account registration and verification processes; (c) deposits, wagers, and withdrawal transactions; (d) communications with the pk36 customer support team; and (e) use of pk36 marketing communications where you have consented.

1.3  pk36 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. We collect only the data necessary to provide and improve our services and to meet regulatory obligations.

2.Personal Data We Collect

2.1  Registration Data. When you create a pk36 account, we collect: full legal name, date of birth, email address, Pakistani mobile number, and your chosen username and password (stored in hashed form only).

2.2  Identity Verification Data. To comply with anti-money laundering (AML) and know-your-customer (KYC) obligations, pk36 may request: a copy of your national identity document (CNIC/NICOP), proof of address, and photographic identification. This data is processed by our identity verification partner and retained in accordance with regulatory requirements.

2.3  Financial Data. Transactional data including deposit and withdrawal amounts, payment method identifiers (JazzCash/Easypaisa account numbers, bank account identifiers), and transaction history is collected and retained for regulatory, fraud prevention, and accounting purposes.

2.4  Gaming Activity Data. Records of all wagers placed, casino game sessions, bet history, bonus usage, and account balance history are collected and retained as required by applicable regulations and for dispute resolution purposes.

2.5  Technical Data. IP address, device type and operating system, browser type and version, session timestamps, and referral source are collected automatically when you access the pk36 Platform.

2.6  Communications Data. Records of all communications between you and the pk36 support team — including live chat transcripts, email correspondence, and support ticket history — are retained for quality assurance and dispute resolution purposes.

2.7  Responsible Gaming Data. Where you voluntarily set deposit limits, activate cooling-off periods, or request self-exclusion, we record and retain this data to honour your responsible gaming elections and prevent circumvention.

3.How pk36 Uses Your Personal Data

3.1  pk36 uses the personal data described above for the following purposes:

4.Legal Bases for Processing

4.1  pk36 processes personal data only where a valid legal basis exists. The applicable legal bases are:

• Contractual necessity: Processing required to fulfil the Member Services Agreement (our Terms & Conditions) — account creation, transaction processing, customer support.
• Legal obligation: Processing required to comply with AML, KYC, tax, and other applicable regulatory requirements.
• Legitimate interests: Fraud prevention, platform security, improving pk36 services — where such interests are not overridden by your data protection rights.
• Consent: Marketing communications — where you have provided explicit, freely given consent that you may withdraw at any time.

5.Data Sharing & Third Parties

5.1  pk36 does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and card processors receive the financial data strictly necessary to process your transactions. These processors are contractually bound to data protection standards consistent with this Policy.
• Identity verification providers: Our KYC/AML compliance partner receives identity document data solely for the purpose of verifying your identity as required by applicable regulations.
• Fraud prevention services: Anonymised or pseudonymised transaction and device data may be shared with fraud detection services to protect pk36 members and the integrity of the Platform.
• Legal authorities: pk36 will disclose personal data to law enforcement, regulatory bodies, or courts where required by applicable law or valid legal process.
• Business transfers: In the event of a merger, acquisition, or sale of assets, member data may be transferred to a successor entity — members will be notified in advance.

5.2  All third parties who receive pk36 member data are required to implement appropriate technical and organisational security measures and to process data only for the specified purpose.

6.Payment Data & Financial Information

6.1  pk36 does not store full JazzCash or Easypaisa account credentials, bank account numbers, or card numbers on its own servers. Payment data is handled by PCI-DSS compliant payment processors. pk36 retains only a tokenised or masked reference to the payment method for transaction record-keeping purposes.

6.2  Transaction records — amounts, timestamps, and payment method type — are retained for the period required by applicable financial regulations, which may be up to seven (7) years from the date of the transaction.

7.Cookies & Tracking Technologies

7.1  pk36 uses the following categories of cookies:

• Strictly necessary cookies: Required for Platform functionality — session management, authentication tokens, and security. These cannot be disabled without breaking core Platform features.
• Performance cookies: Anonymised analytics data used to understand how members navigate the pk36 Platform and identify areas for improvement. No personally identifiable information is included.
• Fraud detection cookies: Used to identify suspicious patterns and protect against fraudulent activity on the pk36 Platform.

7.2  Marketing or behavioural advertising cookies are not deployed on the pk36 Platform without your explicit consent. You may manage cookie preferences through your browser settings at any time.

8.Data Retention

8.1  pk36 retains personal data for the following periods:

• Account data: Retained for the duration of your active pk36 account plus seven (7) years following account closure, as required by AML regulations.
• Transaction records: Seven (7) years from the date of the relevant transaction.
• Identity verification documents: Five (5) years from the date of verification, or longer where required by applicable law.
• Customer support communications: Three (3) years from the date of last interaction.
• Technical/log data: Ninety (90) days, unless retained longer for active fraud investigation.

8.2  Following expiry of the applicable retention period, personal data is securely and permanently deleted from pk36 systems.

9.Data Security

9.1  pk36 implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit.
• AES-256 encryption for sensitive data at rest.
• Hashed and salted password storage — plaintext passwords are never retained.
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need.
• Regular security audits and penetration testing of Platform infrastructure.
• Multi-factor authentication for internal system access.

9.2  In the event of a personal data breach that poses a risk to members, pk36 will notify affected members and relevant authorities as required by applicable law.

10.Your Data Rights

10.1  As a pk36 member, you hold the following rights in respect of your personal data, exercisable by contacting the pk36 support team:

• Right of access: Request a copy of the personal data pk36 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data, subject to legal retention obligations that may require us to retain certain records.
• Right to restrict processing: Request that pk36 restricts processing of your data in certain circumstances.
• Right to data portability: Request that your data be provided to you in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), withdraw that consent at any time without affecting the lawfulness of prior processing.

10.2  pk36 will respond to data rights requests within thirty (30) days of receipt. Requests may be subject to identity verification before processing.

11.Children's Privacy

11.1  The pk36 Platform is strictly intended for individuals aged 18 and over. pk36 does not knowingly collect personal data from individuals under the age of 18. If pk36 becomes aware that personal data has been collected from a minor, that account will be immediately closed, all data will be deleted, and any balance will be forfeited in accordance with our Terms & Conditions.

11.2  If you believe a minor has registered a pk36 account, please contact our support team immediately.

12.International Data Transfers

12.1  The pk36 Platform primarily serves Pakistani users, and we endeavour to store and process data within appropriate jurisdictions. Where personal data is transferred to service providers located outside Pakistan — for example, global payment processors or cloud infrastructure providers — pk36 ensures that such transfers are made only to recipients who provide an adequate level of data protection through contractual safeguards consistent with this Policy.

13.Marketing Communications

13.1  pk36 may send promotional communications — including bonus offers, new game announcements, and PKR deposit promotions — to members who have consented to receive such communications during registration or at any subsequent time.

13.2  You may opt out of marketing communications at any time by updating your notification preferences in your pk36 account settings, or by contacting the support team. Opting out of marketing does not affect service-related communications such as deposit confirmations, withdrawal notifications, or security alerts.

14.Changes to This Privacy Policy

14.1  pk36 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, registered members will be notified via the email address associated with their account at least fourteen (14) days before the changes take effect.

14.2  Continued use of the pk36 Platform following the effective date of any revised Policy constitutes acceptance of the changes. We encourage you to review this page periodically.

15.Contact Us

15.1  If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by pk36, please contact our support team via the 24/7 live chat facility available on the Platform, or by email.

15.2  Email: [email protected] (plain text — this is not a clickable link)