pk36 Privacy Policy

1. Who We Are

This Privacy Policy is issued by pk36 ("pk36", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at pk36.org. pk36 acts as the data controller in respect of personal data collected through the pk36 Platform, its related mobile web interfaces, and any communication channels operated by pk36, including live chat and email support.

By registering a pk36 account or using any part of the pk36 Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree to the terms of this Policy, you must not use the pk36 Platform or submit any personal data to us.

2. Data We Collect

pk36 collects personal data through several channels, including account registration, identity verification, payment processing, Platform usage, and customer support interactions. The categories of personal data we collect include:

• Identity Data: Full name, date of birth, gender, nationality, and government-issued identification numbers (including CNIC for Pakistani users).
• Contact Data: Email address, Pakistani mobile phone number, and residential or billing address.
• Financial Data: Easypaisa account reference, JazzCash account reference, bank account details, card information (processed via secured third-party payment gateways — pk36 does not store raw card numbers), and transaction history on the pk36 Platform.
• Account Data: Username, encrypted password, account preferences, responsible gaming settings, self-exclusion status, and betting/gaming history.
• Technical Data: IP address, device type, operating system, browser type and version, session duration, login timestamps, and approximate geolocation derived from IP address.
• Communications Data: Records of live chat conversations, emails, and support tickets exchanged between you and pk36.
• Usage Data: Information about how you navigate and interact with the pk36 Platform, including pages visited, search queries, games played, and promotional content viewed.

pk36 does not knowingly collect personal data from persons under the age of 18. If we become aware that an account is held by an underage user, that account will be suspended immediately and any held balance returned to the source payment method.

3. How We Use Your Data

pk36 processes personal data for the following purposes:

• To create and manage your pk36 account and verify your identity in accordance with our KYC obligations.
• To process deposits and withdrawals via Easypaisa, JazzCash and other supported payment methods, and to maintain accurate financial records.
• To operate, maintain, and improve the pk36 Platform, including personalisation of content and game recommendations.
• To detect, investigate, and prevent fraud, money laundering, multi-accounting, and other prohibited conduct under the pk36 Terms & Conditions.
• To enforce responsible gaming obligations, including administration of deposit limits, cooling-off periods, and self-exclusion requests.
• To communicate with you regarding your account, transactions, promotions, and material changes to pk36 policies. You may opt out of marketing communications at any time through your account settings.
• To comply with applicable legal and regulatory obligations, including anti-money laundering (AML) and counter-terrorism financing (CTF) requirements.
• To respond to and resolve customer support queries and complaints.

4. Legal Basis for Processing

pk36 relies on the following legal bases for processing personal data:

• Contractual necessity: Processing required to fulfil the agreement between you and pk36, including account management, bet settlement, and payment processing.
• Legal obligation: Processing required to comply with applicable laws, including AML/CTF regulations, KYC requirements, and data retention obligations.
• Legitimate interests: Processing for fraud prevention, Platform security, responsible gaming enforcement, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: For non-essential cookies and marketing communications, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. KYC & Identity Verification

pk36 is required to verify the identity of all players prior to processing withdrawals and in certain other circumstances. For Pakistani users, the standard KYC documentation required by pk36 includes a copy of a valid CNIC (Computerised National Identity Card) and proof of the payment method used (such as a screenshot of your Easypaisa or JazzCash account confirming your registered mobile number).

KYC documents submitted to pk36 are:

• Stored securely on encrypted servers with access restricted to authorised compliance personnel only.
• Used solely for the purpose of identity verification and AML/CTF compliance.
• Not shared with third parties except as required by law or as described in Section 8 of this Policy.
• Retained for a minimum period required by applicable regulations, typically five (5) years from account closure.

pk36 will never use your CNIC or identity documents for any commercial purpose unrelated to account verification and legal compliance.

6. Payment Data

pk36 processes payment data through certified third-party payment gateways. Sensitive financial information, including card numbers and mobile wallet credentials, is handled directly by payment processors and is not stored on pk36 servers in raw form. pk36 retains only the reference data necessary to reconcile transactions and respond to disputes — such as transaction IDs, amounts, timestamps, and payment method type (e.g., Easypaisa, JazzCash, or bank name).

All payment processing infrastructure used by pk36 is subject to contractual data protection obligations. Payment processors are selected on the basis of security certifications and compliance with applicable financial data protection standards.

7. Cookies & Tracking Technologies

pk36 uses cookies and similar tracking technologies to operate the Platform effectively. Categories of cookies used by pk36 include:

• Essential cookies: Required for the Platform to function — including session management, login state persistence, and security tokens. These cannot be disabled without affecting Platform functionality.
• Analytical cookies: Used to understand how players navigate the pk36 Platform, identify technical issues, and measure the effectiveness of Platform improvements. These are only set with your consent.
• Preference cookies: Store your Platform preferences such as language settings, display options and responsible gaming reminder intervals.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will impair your ability to use the pk36 Platform. pk36 does not use cookies to serve third-party advertising from external platforms.

8. Data Sharing & Third Parties

pk36 does not sell, rent, or trade your personal data to third parties for commercial purposes. pk36 may share personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment service providers: Including Easypaisa (Telenor Microfinance Bank), JazzCash (HBL Microfinance Bank), and other payment processors required to execute your transactions.
• Game content providers: Third-party game studios providing live casino and slot content on pk36 may receive limited session data required for game certification and fairness auditing purposes.
• Regulatory and law enforcement authorities: pk36 will disclose personal data to competent authorities where required by law, including in response to valid legal requests, court orders, or regulatory investigations.
• Fraud prevention and AML service providers: Specialist compliance technology partners that assist pk36 in detecting suspicious activity.
• Professional advisors: Legal, audit, and consultancy firms engaged by pk36 under appropriate confidentiality obligations.

9. Data Retention

pk36 retains personal data for as long as necessary to fulfil the purposes described in this Policy, including compliance with legal obligations. Specific retention periods include:

• Active account data is retained for the duration of your account's existence on pk36.
• KYC and identity documents are retained for a minimum of five (5) years following account closure, in accordance with standard AML record-keeping requirements.
• Transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications are retained for a minimum of two (2) years from the date of the interaction.
• Analytical and usage data may be retained in anonymised or aggregated form indefinitely for Platform improvement purposes, where it can no longer be associated with any individual user.

Following the expiry of applicable retention periods, pk36 will securely delete or anonymise personal data in a manner that prevents reconstruction.

10. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by pk36:

• Right of access: You may request a copy of the personal data pk36 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. You may update most account details directly through your pk36 account settings.
• Right to erasure: You may request deletion of your personal data where there is no lawful basis for continued retention. Note that certain data must be retained for legal compliance purposes and cannot be deleted on request.
• Right to restrict processing: You may request that pk36 restricts the processing of your data in certain circumstances, such as while a dispute is being resolved.
• Right to object: You may object to processing based on legitimate interests, including profiling for responsible gaming purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting prior processing.

To exercise any of the above rights, please contact pk36 support via live chat or by email at [email protected]. pk36 will respond to data rights requests within 30 days. We may require verification of your identity before processing a data rights request.

11. Data Security

pk36 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include 256-bit SSL/TLS encryption for all data transmitted between your device and the pk36 Platform, encrypted storage for sensitive data at rest, role-based access controls limiting internal data access to authorised personnel, regular security audits and vulnerability assessments, and two-factor authentication for both player accounts and internal administrative systems.

Despite these measures, no online platform can guarantee absolute security. If pk36 becomes aware of a data breach that is likely to pose a risk to your rights, we will notify affected users and relevant authorities as required by applicable law.

12. Changes to This Policy

pk36 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform features. Where changes are material, pk36 will notify registered users via email or in-Platform notification prior to the changes taking effect. The date at the top of this document indicates when the Policy was most recently revised.

Your continued use of the pk36 Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not accept a revised Policy, you should stop using the Platform and may request account closure by contacting pk36 support.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pk36 handles your personal data, please contact us through one of the following channels:

• Live Chat: Available 24/7 via the pk36 Platform — typically responds within 2 minutes.
• Email: [email protected] — response within 4–12 hours for standard privacy queries.

For formal data rights requests, please include your registered email address or mobile number, a description of your request, and a copy of an identity document for verification purposes. pk36 will acknowledge receipt of formal requests within 2 business days.