pk306 Privacy Policy

1 Who We Are

pk306 is Pakistan's premier online gaming platform, accessible at https://pk306.pro. The pk306 platform is operated by a company holding an internationally recognised gaming license. Throughout this Privacy Policy, references to "pk306", "we", "us", or "our" refer to the pk306 platform operator.

pk306 acts as the data controller in respect of all personal information collected from users of the pk306 website, mobile platform, and associated services. As data controller, pk306 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

If you have any questions about how your personal data is handled by pk306, you can reach our data protection contact directly at [email protected]. We respond to all data-related queries within five business days.

2 What Data We Collect

pk306 collects personal data across several categories. The specific data collected at each stage of your relationship with pk306 is set out in the table below:

pk306 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where a Player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request. In such cases, the data is processed solely to action the responsible gaming measure and is not used for any other purpose.

3 How We Collect Your Data

pk306 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a PKR deposit or withdrawal, contacting customer support, or updating your account profile.
• Automated technologies: Technical and usage data collected automatically when you access the pk306 platform, including through cookies, server logs, and analytics tools. See Section 7 for full details on cookies.
• Third-party sources: Identity and fraud-screening data received from our licensed KYC verification partners during the account verification process. Financial data received from payment processors including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank in connection with PKR transactions.
• Responsible gaming disclosures: Information you voluntarily provide when requesting deposit limits, cooling-off periods, or self-exclusion through the platform or via customer support.

pk306 does not purchase data from data brokers, social media platforms, or any other third-party marketing data suppliers. All personal data held by pk306 originates from your direct interactions with the pk306 platform or from the regulated service providers listed in Section 6.

4 Why We Use Your Data

pk306 uses your personal data for the following purposes:

• Account management: To create, maintain, verify, and administer your pk306 account, including processing PKR deposits and withdrawals and settling sports bets and casino game outcomes.
• Identity verification & KYC compliance: To verify your identity, confirm your age (21+), and confirm your source of funds in compliance with pk306's gaming license obligations.
• Fraud prevention & security: To detect, investigate, and prevent fraudulent transactions, money laundering, collusion, bonus abuse, and other activities that violate pk306's Terms & Conditions or applicable law.
• Responsible gaming: To monitor gaming activity for signs of problem gambling, to enforce deposit limits and self-exclusion measures, and to provide responsible gaming tools to Pakistani players in compliance with our licensing obligations.
• Customer support: To respond to your queries, resolve disputes, and maintain records of support interactions for quality assurance and training purposes.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given your explicit consent to receive such communications. You can opt out at any time.
• Platform improvement: To analyse usage patterns, troubleshoot technical issues, and improve the pk306 platform experience for Pakistani users.
• Legal compliance: To comply with applicable laws, gaming license conditions, court orders, and requests from regulatory authorities.

5 Legal Basis for Processing

pk306 processes your personal data only where a valid legal basis exists for doing so. The legal bases applicable to pk306's processing activities are as follows:

• Contract performance: Processing necessary to create and manage your pk306 account, process PKR transactions, and deliver the gaming services you have requested. Without this processing, pk306 cannot provide its services to you.
• Legal obligation: Processing necessary to comply with pk306's gaming license requirements, including KYC verification, age verification (21+), anti-money laundering checks, and responses to regulatory inquiries.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and analytics — where pk306's legitimate interests are not overridden by your privacy rights.
• Consent: Processing of your data for direct marketing communications. You may withdraw consent at any time by updating your marketing preferences in your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out before withdrawal.

6 Sharing Your Data

pk306 does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances, and only to the extent necessary for each purpose:

• KYC and identity verification partners: Licensed third-party identity verification providers who process CNIC data and proof of address documents on pk306's behalf to fulfill age verification (21+) and anti-money laundering obligations under our gaming license.
• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa — solely as required to process your PKR deposits and withdrawals. These providers operate under their own privacy and data security frameworks.
• Game providers: Third-party casino and live game software providers whose games are hosted on the pk306 platform. Minimum necessary technical data (such as session tokens) may be transmitted to facilitate game play. Game providers do not receive your identity or financial data.
• Fraud and security services: Third-party fraud detection and cybersecurity providers who assist pk306 in identifying suspicious account activity. Data shared is limited to technical and transactional identifiers.
• Regulatory and legal authorities: Where required by pk306's gaming license, by a court order, or by applicable law, pk306 will disclose personal data to the relevant regulatory body, law enforcement agency, or gaming authority. pk306 will notify you of such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of pk306's business, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer and of any changes to this Privacy Policy that result from it.

All third-party service providers who process personal data on behalf of pk306 are bound by contractual data processing agreements that require them to handle your data securely, use it only for the specified purpose, and comply with applicable data protection standards.

7 Cookies & Tracking Technologies

The pk306 platform uses cookies and similar tracking technologies to provide a functional, personalised, and secure user experience. Cookies are small data files stored on your device when you visit pk306. They do not contain your CNIC, financial details, or passwords.

pk306 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the operation of the pk306 platform. These include session authentication cookies that keep you logged in, security cookies that prevent cross-site request forgery, and cookies that remember your responsible gaming settings. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and PKR display format. These cookies improve your experience but are not essential to platform operation.
• Analytics cookies: Collect anonymised data about how Pakistani users navigate the pk306 platform — which pages are visited most frequently, how long sessions last, and which games are most popular. This data is used to improve the platform and is not linked to your personal identity.
• Marketing cookies: Used only with your consent to deliver pk306 promotional content relevant to your interests. If you opt out of marketing communications, marketing cookies will not be set on your device.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from accessing your pk306 account. For full details of the cookies currently set by pk306, contact [email protected].

8 Data Retention

pk306 retains your personal data for no longer than is necessary for the purposes for which it was collected, subject to any legal obligations that require longer retention periods under pk306's gaming license.

• Active account data: Retained for the full duration that your pk306 account remains active, and for a minimum of five years following account closure, as required under our gaming license anti-money laundering obligations.
• KYC and identity verification documents: Retained for a minimum of five years following the completion of the verification process or the closure of your account, whichever is later.
• Financial transaction records: PKR deposit and withdrawal records are retained for a minimum of five years following each transaction date.
• Customer support communications: Live chat transcripts and email correspondence are retained for three years from the date of each interaction.
• Marketing preference data: Retained until you withdraw your consent or request deletion, plus a reasonable administrative period to process the request.
• Technical and analytics data: Anonymised analytics data may be retained indefinitely. Non-anonymised technical data such as IP logs is retained for 12 months.

When personal data is no longer required and no legal obligation requires its continued retention, pk306 will securely delete or anonymise it using industry-standard data destruction procedures.

9 Data Security

pk306 applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes, but is not limited to:

• TLS 1.3 encryption for all data in transit between your device and pk306 servers.
• AES-256 encryption for all personal data stored at rest on pk306 infrastructure.
• Multi-factor authentication requirements for all internal pk306 staff who access personal data.
• Role-based access controls that restrict data access to staff who require it for specific operational purposes.
• Regular penetration testing and security audits conducted by independent cybersecurity firms.
• Automated intrusion detection and real-time monitoring of all pk306 infrastructure.
• Incident response procedures that ensure Pakistani users are notified of any data breach that poses a material risk to their rights within 72 hours of pk306 becoming aware of the incident.

Despite these measures, no internet-based platform can guarantee absolute security. If you become aware of any suspected unauthorised access to your pk306 account or personal data, please contact us immediately at [email protected].

10 Your Rights

As a user of the pk306 platform, you have the following rights in relation to your personal data. pk306 will respond to all valid requests within 30 calendar days of receipt:

• Right of Access: You may request a copy of all personal data that pk306 holds about you, including a description of the purposes for which it is processed and the categories of third parties with whom it has been shared.
• Right to Rectification: You may request that pk306 correct any inaccurate or incomplete personal data held about you. For account-critical data such as your name or CNIC number, corrections may require re-submission of KYC documentation.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to pk306's legal obligation to retain certain data under our gaming license for a minimum of five years.
• Right to Restrict Processing: You may request that pk306 restrict processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: You may request that pk306 provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on pk306's legitimate interests, though such objections may affect your ability to use certain platform features.
• Right to Withdraw Consent: Where pk306 relies on your consent to process personal data, you may withdraw that consent at any time through your account settings or by contacting [email protected].

To exercise any of the above rights, please contact pk306 at [email protected] with the subject line "Data Rights Request". pk306 may need to verify your identity before processing any data rights request in order to protect your account security.

11 Children & Minors

The pk306 platform is strictly for individuals aged 21 years and above. pk306 does not knowingly collect, process, or retain personal data from any person under the age of 21. Age verification is a mandatory step in the pk306 account registration and KYC process, and pk306 will immediately close any account found to belong to a minor.

If a parent or guardian becomes aware that a minor has accessed the pk306 platform or provided personal data to pk306, they should contact us immediately at [email protected]. pk306 will promptly delete all data associated with the minor's account upon receiving and verifying such a report.

pk306 strongly recommends that all account holders with shared devices in Pakistan install appropriate parental control software to prevent minors from accessing online gaming platforms.

12 International Data Transfers

pk306's primary infrastructure and data storage is hosted in server environments that meet the security standards required under our internationally recognised gaming license. Some personal data may be processed by third-party service providers — including KYC partners and game providers — whose infrastructure is located outside Pakistan.

Where personal data is transferred internationally, pk306 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. These safeguards include contractual data processing agreements incorporating standard data protection clauses and security requirements consistent with our gaming license obligations.

pk306 will never transfer personal data to a jurisdiction or third party that cannot demonstrate an adequate level of data protection without first implementing appropriate contractual safeguards and obtaining any necessary regulatory approvals.

13 Changes to This Policy

pk306 reviews this Privacy Policy regularly and reserves the right to update it at any time to reflect changes in our data processing practices, platform features, legal obligations under our gaming license, or applicable privacy law.

Where changes to this Privacy Policy are material — meaning they significantly affect how your data is used or the rights available to you — pk306 will provide at least seven days' advance notice to all registered users via email and an on-platform notification before the changes take effect.

The current version of this Privacy Policy is always available at https://pk306.pro/privacy-policy. The effective date at the top of this document reflects the date of the most recent revision. Continued use of the pk306 platform after the effective date of any updated Privacy Policy constitutes acceptance of the revised terms.

14 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or pk306's handling of your personal data, please contact us using the details below:

• Email: [email protected] — use subject line "Privacy Query" for data protection matters.
• Live Chat: Available 24 hours a day, 7 days a week on the pk306 platform, Pakistan Standard Time (PKT).

If you are not satisfied with pk306's response to a data-related complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority or the dispute resolution body designated under pk306's gaming license. Details of the applicable authority are available on request from pk306 customer support.

pk306 is committed to resolving all privacy-related complaints promptly, fairly, and in accordance with the principles set out in this Privacy Policy .