At 399pk, we handle your personal data with the same level of care we apply to your PKR balance — transparently, securely, and only for purposes that are necessary. This Privacy Policy explains exactly what data we collect, why we collect it, how we store and protect it, and what rights you hold over your own information.
Six principles that govern how 399pk handles every piece of personal data you share with us.
399pk collects personal data only for clearly defined, legitimate purposes — account management, KYC verification, payment processing, fraud prevention, and customer support. We do not collect data speculatively or for purposes beyond what is described in this Policy.
All data transmitted between your device and the 399pk Platform is protected by industry-standard 256-bit SSL/TLS encryption. Your CNIC details, payment information, and account credentials are encrypted in transit and at rest on our secured servers.
399pk does not sell, rent, or trade your personal data to any third party for commercial marketing or advertising purposes. Full stop. Your information belongs to you — we are simply entrusted with it for the duration of your relationship with the 399pk Platform.
You have the right to access, correct, and in certain circumstances request erasure of your personal data held by 399pk. You can also opt out of marketing communications at any time. These rights are exercisable by contacting our support team directly.
We retain personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law and our licensing obligations. Once data is no longer required, it is securely deleted or anonymised.
399pk will always tell you what data we hold about you, why we hold it, and how long we intend to keep it — whenever you ask. We do not obscure our data practices in dense legalese. This Policy is written to be understood, not avoided.
This Privacy Policy (hereinafter "Policy") describes how 399pk (hereinafter "399pk", "the Company", "we", "us", "our") collects, uses, stores, shares, and protects personal data in connection with the online casino and sports betting platform operated at https://399pk.bet (hereinafter "the Platform", "the Website", "the Service").
This Policy applies to all individuals who access or use the 399pk Platform in any capacity, including registered players, visitors who browse the Platform without registering, and any individual who contacts 399pk through our support channels. By using the Platform, you acknowledge that you have read and understood this Policy and consent to the data processing activities described herein.
This Policy should be read in conjunction with the 399pk Terms & Conditions, which form part of the binding agreement between you and 399pk. Where this Policy conflicts with any other document, this Policy shall prevail with respect to data protection matters.
For the purposes of applicable data protection law, 399pk is the data controller in respect of personal data collected via the Platform. As data controller, 399pk determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in compliance with applicable law and this Policy.
If you have any questions about how your data is processed, or wish to exercise any of the rights described in Section 12 of this Policy, you may contact our designated data protection point of contact using the details set out in Section 16.
When you create a 399pk account, we collect the following information to establish and verify your identity:
To process deposits and withdrawals in PKR, we collect:
399pk does not store full card numbers or CVV/CVC codes. Payment card data, where applicable, is handled exclusively by our PCI-DSS compliant payment processing partners.
We maintain records of your activity on the Platform, including:
When you access the 399pk Platform, our servers and analytics systems automatically record:
When you contact the 399pk support team, we retain records of your communications, including live chat transcripts, email correspondence, and the nature and resolution of any complaints or queries raised.
399pk collects personal data through the following channels:
| Collection Method | Examples |
|---|---|
| Directly from you | Registration form, KYC document submission, deposit/withdrawal requests, support contacts, responsible gaming tool configuration |
| Automated collection | Server logs, cookies, session tracking, device fingerprinting for fraud prevention |
| Third-party partners | KYC verification providers confirming CNIC validity; payment processors confirming transaction status; fraud detection services flagging suspicious activity |
| Publicly available sources | Sanctions lists, PEP (Politically Exposed Persons) databases, and AML screening databases as required by our licensing obligations |
399pk uses the personal data we collect for the following purposes:
399pk processes your personal data on the following legal bases, depending on the specific processing activity:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract (our Terms & Conditions) |
| KYC age and identity verification | Legal obligation (licensing requirements) |
| Payment processing | Performance of a contract |
| AML screening and fraud prevention | Legal obligation and legitimate interests |
| Responsible gaming monitoring | Legal obligation and legitimate interests |
| Platform analytics and improvement | Legitimate interests |
| Marketing communications | Consent (opt-in only) |
| Regulatory reporting | Legal obligation |
Where we rely on legitimate interests as our legal basis, we have assessed that our legitimate interests are not overridden by your interests or fundamental rights and freedoms.
399pk does not sell, rent, or trade your personal data. We may share your data with third parties only in the following limited circumstances:
We engage trusted third-party service providers who process data on our behalf under strict contractual obligations. These include KYC and identity verification providers, payment processors (JazzCash, EasyPaisa, and Pakistani banking partners), IT infrastructure and cloud hosting providers, customer support software vendors, and fraud detection and AML screening services. All such providers are required to process data only on our documented instructions and to implement appropriate security measures.
399pk may be required to disclose personal data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required by applicable law, court order, or the terms of our gaming licence. We will notify you of such disclosure where we are legally permitted to do so.
In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of the assets of 399pk, personal data held by us may be transferred to the acquiring entity as part of that transaction. We will notify affected users prior to any such transfer and ensure the acquiring entity is bound by equivalent privacy protections.
As an internationally licensed operator, 399pk may store and process your personal data on servers located outside of Pakistan. Where data is transferred internationally, 399pk ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that which applies within Pakistan. Such safeguards include contractual data processing agreements with our hosting and service providers, requiring them to implement technical and organisational security measures consistent with their legal obligations.
If you require further information about the specific safeguards applied to international transfers of your personal data, please contact us using the details in Section 16.
399pk retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised:
| Data Category | Retention Period |
|---|---|
| Account registration data (active accounts) | Duration of account plus 5 years post-closure |
| KYC identity documents | 5 years from account closure (licensing obligation) |
| Transaction and payment records | 5 years from date of transaction (AML obligation) |
| Gameplay and wagering records | 3 years from account closure |
| Support communications | 3 years from date of communication |
| Marketing consent records | Duration of consent plus 2 years |
| Server logs and technical data | 12 months on a rolling basis |
Retention periods may be extended where data is required for ongoing legal proceedings, regulatory investigations, or fraud prevention purposes. In such cases, data will be retained until the relevant matter is fully resolved.
399pk takes the security of your personal data seriously. We implement a combination of technical, administrative, and physical security measures designed to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include:
Whilst 399pk implements robust security measures, no system is entirely immune to risk. In the event of a data breach that poses a significant risk to your rights and freedoms, 399pk will notify affected users without undue delay and will take immediate remediation steps.
Cookies are small text files placed on your device when you visit a website. They are widely used to make websites function correctly and to provide analytics information to site operators. The 399pk Platform uses cookies and similar tracking technologies including pixel tags and local storage objects.
You can manage or delete cookies through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the 399pk Platform. Disabling analytics or marketing cookies will not affect your ability to play but will reduce the personalisation of your experience.
Subject to applicable law, you have the following rights in relation to your personal data held by 399pk:
To exercise any of these rights, please contact 399pk support via live chat or email at [email protected]. We may need to verify your identity before actioning your request. We will respond within 30 days of receiving a complete and verified request.
The 399pk Platform is strictly intended for adults aged 21 and over. We do not knowingly collect personal data from individuals under the age of 21. If 399pk becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, the data will be securely deleted, and any funds held in the account will be returned to the payment source where practicable.
If you are a parent or guardian and believe that a minor has registered on or used the 399pk Platform, please contact us immediately using the details in Section 16. We take such reports extremely seriously and will investigate and resolve them as a priority matter.
399pk may send you promotional emails, SMS messages, or in-Platform notifications about bonuses, new games, and special offers where you have explicitly opted in to receive such communications at the time of registration or through your account settings.
You may opt out of marketing communications at any time by:
Please note that opting out of marketing communications does not affect transactional communications, which include account security alerts, deposit and withdrawal confirmations, KYC verification requests, and responsible gaming notifications. These are necessary communications that cannot be disabled while your account is active.
399pk reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they substantively affect how we collect, use, or share your personal data — we will notify you in advance via email to your registered address and/or by displaying a prominent notice on the 399pk Platform.
The effective date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the 399pk Platform following the effective date of any change constitutes your acceptance of the revised Policy.
If you do not accept the revised Policy, you must cease using the Platform and contact our support team to request account closure before the changes take effect.
For any questions, requests, or concerns relating to this Privacy Policy or the processing of your personal data by 399pk, please contact us through the following channels:
We do not provide telephone support. All formal data protection requests must be submitted in writing via email. 399pk will acknowledge receipt of formal requests within 5 business days and will provide a substantive response within 30 calendar days of receiving a complete and verified request.
Now that you understand how 399pk safeguards your personal data, join Pakistan's premier licensed casino and sports betting platform. PKR transactions via JazzCash & EasyPaisa. 21+ only.