399pk Privacy Policy

This Privacy Policy is issued by 399pk ("399pk," "we," "us," "our"), the operator of the online betting and casino platform available at https://399pk.net ("Platform"). 399pk is the data controller in respect of personal data collected and processed through the Platform. This Policy applies to all registered users, visitors, and any person whose personal data is processed in connection with the Platform, including players based in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, and all other cities across Pakistan.

By using the 399pk Platform, creating an account, or providing any personal information, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside the 399pk Terms & Conditions, available at /terms-conditions.

---

399pk collects the following categories of personal data from users of the Platform:

1. Identity Data: Full legal name, date of birth, gender, and copies of identity documents submitted during Know Your Customer (KYC) verification (e.g. CNIC, passport).
2. Contact Data: Email address, Pakistani mobile number, and correspondence history with the 399pk support team.
3. Financial Data: JazzCash account numbers, Easypaisa account numbers, bank account details (HBL, UBL, Meezan Bank, Bank Alfalah), card details (Visa/Mastercard), and USDT wallet addresses used for deposits and withdrawals. Full card numbers are never stored by 399pk; card tokenisation is handled by our PCI-compliant payment processor.
4. Transaction Data: Details of all deposits, withdrawals, bets, wagers, game sessions, wins, and losses conducted through your 399pk account.
5. Technical Data: IP address, browser type and version, device type, operating system, screen resolution, session duration, and platform access timestamps.
6. Behavioural Data: Betting patterns, game preferences, promotional interactions, responsible gaming tool usage, and account activity logs.
7. Communications Data: Records of live chat sessions, support emails, and any other communications you initiate with 399pk.

399pk does not collect special category data (such as health, racial origin, religious beliefs, or political opinions) unless expressly required by law or regulatory obligation.

---

Personal data is collected through the following means:

1. Direct provision: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
2. Automated collection: Technical and behavioural data collected automatically as you use the Platform, including through cookies, server logs, and session tracking technologies.
3. Third-party sources: Data received from payment processors (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, card networks), identity verification service providers, and fraud prevention agencies for the purpose of verifying your identity or assessing transaction risk.

---

399pk processes personal data for the following purposes and on the following legal bases:

1. Account management and service delivery (Legal basis: Performance of contract) — To register your account, verify your identity, process deposits and withdrawals, and provide access to all Platform services including cricket betting, live casino, and slots.
2. Legal and regulatory compliance (Legal basis: Legal obligation) — To comply with anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, responsible gaming obligations, and applicable licensing conditions. This includes verifying that users are aged 18 or above.
3. Fraud prevention and security (Legal basis: Legitimate interest) — To detect, investigate, and prevent fraudulent transactions, account abuse, money laundering, and other prohibited conduct on the Platform.
4. Responsible gaming (Legal basis: Legal obligation / Legitimate interest) — To monitor betting behaviour, enforce self-exclusion restrictions, apply deposit and loss limits, and identify signs of problem gambling where relevant.
5. Customer support (Legal basis: Performance of contract / Legitimate interest) — To respond to your queries, process complaints, and maintain records of support interactions for quality and training purposes.
6. Marketing and promotions (Legal basis: Consent) — To send you promotional offers, bonus notifications, and platform updates where you have provided consent. You may withdraw consent at any time via Mine → Account Settings or by emailing [email protected].
7. Platform analytics and improvement (Legal basis: Legitimate interest) — To understand how users interact with the Platform, identify technical issues, and improve the overall user experience for Pakistani players.

---

399pk does not sell, rent, or trade your personal data to third parties for marketing purposes. Personal data may be shared with the following categories of recipients only to the extent necessary for the stated purpose:

1. Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa/Mastercard networks, and USDT TRC20 infrastructure providers — for processing deposits and withdrawals.
2. Identity verification providers: Third-party KYC and AML service providers engaged to verify user identity and assess transaction risk in compliance with applicable regulatory obligations.
3. Game and technology providers: Casino game studios and platform technology vendors (such as Evolution Gaming and Pragmatic Play) who require transaction and session data to deliver their services through the Platform.
4. Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory demand. 399pk will notify users of such disclosures where legally permitted to do so.
5. Fraud prevention agencies: Where there are reasonable grounds to suspect fraud, money laundering, or other prohibited conduct, relevant data may be shared with specialist fraud prevention organisations.

All third-party data processors engaged by 399pk are required to process personal data only in accordance with 399pk's documented instructions and are subject to contractual data protection obligations.

---

As an internationally operating platform serving the Pakistan market, certain personal data processed by 399pk may be transferred to, stored in, or processed by systems located outside Pakistan. Where such transfers occur, 399pk takes reasonable steps to ensure that appropriate safeguards are in place, consistent with internationally recognised data protection standards. These safeguards may include standard contractual clauses, data processing agreements, and transfers to jurisdictions with adequate legal frameworks for data protection.

---

399pk retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying applicable legal, regulatory, and compliance obligations. The following retention periods apply as a general guide:

1. Account data and transaction records: Retained for a minimum of 5 years following account closure, to meet AML and regulatory record-keeping obligations.
2. KYC documentation: Retained for the duration of the account relationship and for a minimum of 5 years thereafter.
3. Support communications: Retained for 3 years from the date of the interaction.
4. Marketing preference records: Retained until consent is withdrawn, at which point marketing communications cease promptly.
5. Technical and log data: Typically retained for 12 months from collection, unless longer retention is required for security investigation purposes.

At the end of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an individual.

---

399pk uses cookies and similar tracking technologies to operate the Platform, maintain user sessions, prevent fraud, and analyse usage patterns. The following categories of cookies are used:

1. Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your 399pk account. These cannot be disabled without impairing Platform functionality.
2. Analytical cookies: Used to collect anonymised information about how users interact with the Platform — pages visited, session duration, device types. This data is used to improve the Platform experience for Pakistani users.
3. Functional cookies: Used to remember your preferences such as language settings and previously selected payment methods to streamline your experience on return visits.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your 399pk account.

---

399pk implements technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, and disclosure. Security measures include:

1. Transport Layer Security (TLS/HTTPS) encryption for all data in transit between your device and the 399pk Platform.
2. Encryption of sensitive data at rest, including stored passwords (which are hashed and salted — 399pk cannot retrieve your plain-text password).
3. Access controls limiting internal access to personal data on a need-to-know basis.
4. Regular security assessments and penetration testing of Platform infrastructure.
5. Incident response procedures to address and notify affected users of any confirmed data breach within the timeframes required by applicable law.

Whilst 399pk takes data security seriously, no internet-based platform can guarantee absolute security. Users are encouraged to use strong, unique passwords, avoid public Wi-Fi when accessing their 399pk account, and report any suspicious account activity to [email protected] immediately.

---

Subject to applicable law and certain conditions, you may exercise the following rights in respect of your personal data held by 399pk:

1. Right of access: Request a copy of the personal data 399pk holds about you.
2. Right to rectification: Request correction of inaccurate or incomplete personal data. Minor updates (email address, mobile number) can be made directly in Mine → Account Settings.
3. Right to erasure: Request deletion of your personal data in certain circumstances. Note that 399pk is required to retain certain data for regulatory and legal compliance purposes even after account closure.
4. Right to restriction: Request that processing of your personal data be restricted in specific circumstances.
5. Right to data portability: Request a copy of your personal data in a structured, machine-readable format where technically feasible.
6. Right to object: Object to processing of your personal data for direct marketing purposes. Marketing emails include an unsubscribe option, and you may also update preferences in Mine → Account Settings.
7. Right to withdraw consent: Where processing is based on your consent (e.g. marketing), withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact 399pk at [email protected]. We will respond to valid requests within 30 calendar days. Requests may require identity verification before they are processed.

---

The 399pk Platform is strictly for adults aged 18 and above. 399pk does not knowingly collect personal data from individuals under 18 years of age. If 399pk identifies or is notified that an account has been registered by a person under 18, the account will be closed immediately, all balances associated with the underage account will be forfeited, and all personal data associated with that account will be deleted unless retention is required by applicable law. If you believe a person under 18 has registered on the Platform, please report this to [email protected] immediately.

---

399pk processes behavioural and transaction data as part of its responsible gaming obligations. This processing enables the Platform to: monitor for signs of problem gambling behaviour; enforce self-exclusion restrictions applied by the user or required by regulatory frameworks; apply deposit limits and loss limits set by the user; and comply with obligations to prevent underage gambling. Data processed for responsible gaming purposes is not used for marketing and is subject to strict access controls. You can access and manage your responsible gaming settings at any time from Mine → Responsible Gaming after logging in to your 399pk account.

---

399pk reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, 399pk will notify registered users by email and publish a revised version at /privacy-policy with an updated effective date. Your continued use of the Platform following notification of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not accept an update, you must cease using the Platform and may close your account by contacting support.

---

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 399pk, please contact us via:

Email: [email protected]
Live Chat: Available 24/7 from the 399pk homepage
Response time: We aim to acknowledge all data-related queries within 5 business days and provide a substantive response within 30 calendar days.

For urgent matters including suspected unauthorised access to your account or a potential data breach affecting your personal information, please mark your email as urgent and include "Data Security" in the subject line. Our team will prioritise such communications.