This Privacy Policy explains how pak399 collects, uses, stores, and protects the personal information you provide when you register, deposit, play, or contact us. Your privacy is important to us and we take our data protection obligations seriously.
Last updated: June 2026 | Applies to all pak399 users globally
1.1 This Privacy Policy ("Policy") applies to all users of the pak399 Platform, accessible at pak399.app, including its associated mobile interfaces, customer support channels, and marketing communications.
1.2 pak399 ("the Company", "we", "us", "our") acts as the data controller for all personal data collected through the Platform. We are committed to handling your information with care, transparency, and in accordance with applicable data protection laws.
1.3 This Policy should be read alongside the pak399 Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference.
1.4 If you have any questions about this Policy or how pak399 handles your data, please contact our Data Protection team at [email protected].
pak399 collects the following categories of personal data:
2.1 Registration Data. When you create a pak399 account, we collect your full name, date of birth, email address, mobile phone number, and country of residence. This information is mandatory to establish your account and verify your eligibility to use the Platform.
2.2 Identity Verification (KYC) Data. To comply with anti-money laundering obligations and to confirm your age, pak399 may collect copies of government-issued identification documents such as your CNIC (Computerised National Identity Card), passport, or driving licence, as well as proof of address and payment method documentation.
2.3 Financial Data. We collect records of deposits, withdrawals, and transaction histories associated with your pak399 account. We do not store full card numbers on our servers; payment card details are handled exclusively by certified payment processors. JazzCash, Easypaisa, and bank transfer details are retained solely for transaction reconciliation and dispute resolution purposes.
2.4 Gaming & Betting Activity. We maintain records of your gameplay history, bet placement, game participation, session duration, login times, and account balance movements. This data is used for account management, dispute resolution, bonus administration, and responsible gaming monitoring.
2.5 Technical & Device Data. When you access pak399, we automatically collect data including your IP address, browser type and version, operating system, device identifiers, referring URLs, and clickstream data. This information helps us maintain platform security, detect fraud, and improve the user experience.
2.6 Communications Data. If you contact pak399 support via live chat, email, or any other channel, we retain records of those communications for quality assurance, dispute resolution, and compliance purposes.
2.7 Marketing Preferences. Where you have opted in to receive marketing communications from pak399, we retain your contact preferences and engagement history.
pak399 uses the personal data it collects for the following purposes:
4.1 Contract Performance. Processing your registration data, transaction data, and gaming activity data is necessary to perform the contract between you and pak399 — namely, the delivery of the gaming and betting services you have registered to use.
4.2 Legal Obligation. pak399 is required by applicable law and regulation to collect and retain KYC documentation, transaction records, and AML-related data. Processing for these purposes is mandatory and cannot be refused without affecting your ability to use the Platform.
4.3 Legitimate Interests. We process certain technical, device, and usage data on the basis of our legitimate interest in maintaining platform security, detecting fraud, and improving our services. We have conducted balancing tests to ensure these interests do not override your fundamental rights.
4.4 Consent. Where we process your data for direct marketing purposes, we do so only on the basis of your freely given, specific, and informed consent. You may withdraw marketing consent at any time by contacting [email protected] or updating your communication preferences in your account settings.
5.1 pak399 operates a mandatory Know Your Customer programme in compliance with applicable anti-money laundering and counter-terrorism financing regulations. All users who wish to make deposits or withdrawals are required to complete identity verification before the relevant transaction is processed.
5.2 KYC documents submitted to pak399 — including CNIC copies, passport scans, and proof of address — are stored in encrypted form on secured servers. Access is restricted to authorised compliance and verification personnel only.
5.3 Where pak399 identifies suspicious transaction patterns or is required to do so by applicable law, it may be obligated to report information to relevant financial intelligence authorities without notifying the user concerned. This disclosure does not constitute a breach of this Privacy Policy.
5.4 pak399 will not use KYC documentation submitted by users for any purpose other than identity verification, age confirmation, compliance with legal obligations, and fraud prevention.
6.1 Payment Card Data. Full payment card details (PAN, CVV) are not stored by pak399. Card transactions are processed exclusively by PCI-DSS certified payment processing partners. pak399 retains only masked card references and transaction identifiers sufficient for reconciliation purposes.
6.2 JazzCash & Easypaisa. Mobile wallet transaction references, the last four digits of registered mobile numbers, and transaction timestamps are retained by pak399 for transaction history, dispute resolution, and AML compliance. Full wallet credentials are never stored.
6.3 USDT TRC20. Blockchain wallet addresses and transaction hashes associated with USDT TRC20 deposits and withdrawals are retained. These records are immutable on the Tron blockchain; pak399 retains its own copy for accounting and compliance purposes.
6.4 Bank Transfer. Account name, IBAN/account number, and bank name provided for withdrawal processing are retained for the duration required by applicable financial regulations and deleted thereafter.
7.1 pak399 uses cookies and similar tracking technologies to operate the Platform, maintain your authenticated session, remember your preferences, and analyse usage patterns.
7.2 Essential Cookies are required for the Platform to function and cannot be disabled. They include session authentication tokens and security cookies.
7.3 Analytics Cookies help pak399 understand how users interact with the Platform — which pages are visited most, where users navigate from, and where errors occur. This data is aggregated and does not identify individual users.
7.4 Marketing Cookies are only placed where you have provided explicit consent. You may withdraw consent for non-essential cookies at any time by adjusting your browser settings or contacting support.
7.5 Most browsers allow you to view, manage, and delete cookies. Note that disabling essential cookies will impair your ability to use the pak399 login and cashier functions.
pak399 does not sell or rent personal data to third parties. We may share your data in the following limited circumstances:
All third-party processors who handle pak399 user data are bound by data processing agreements that prohibit them from using your data for their own purposes.
9.1 pak399 retains personal data for as long as your account is active and for a minimum period of five (5) years following account closure, or longer where required by applicable AML and financial regulations.
9.2 KYC documentation is retained for a minimum of five (5) years following the end of the business relationship in accordance with standard anti-money laundering requirements.
9.3 Transaction records, betting history, and financial logs are retained for a minimum of seven (7) years for regulatory compliance and audit purposes.
9.4 Communications records, including live chat logs and support email exchanges, are retained for a period of three (3) years from the date of the communication.
9.5 Upon expiry of the applicable retention period, data is securely deleted or anonymised in accordance with our internal data lifecycle procedures.
Subject to applicable data protection law and regulatory limitations, you have the following rights in respect of your personal data held by pak399:
To exercise any of the above rights, submit a written request to [email protected]. pak399 will respond within 30 days of receipt. We may require identity verification before processing your request.
11.1 pak399 is strictly intended for adults aged 18 and over. 18+ We do not knowingly collect personal data from individuals under the age of 18.
11.2 If pak399 becomes aware that personal data has been collected from a person under the age of 18, that data will be deleted and the associated account will be closed immediately. If you believe a minor has created an account on pak399, please contact us at [email protected].
12.1 pak399 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include TLS encryption for all data in transit, encrypted storage for sensitive documents, access controls limiting data access to authorised personnel, intrusion detection and monitoring systems, and regular internal security reviews.
12.2 Despite these measures, no online platform can guarantee absolute security. You are responsible for keeping your pak399 login credentials confidential and for notifying us immediately if you suspect unauthorised account access.
12.3 In the event of a data security incident that is likely to result in risk to your rights and freedoms, pak399 will notify affected users without undue delay in accordance with applicable notification requirements.
13.1 pak399 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. The updated Policy will be published on this page with a revised "Last updated" date.
13.2 Where changes are material, pak399 will notify registered users via email or a prominent notice on the Platform at least 14 days before the changes take effect.
13.3 Your continued use of pak399 following any update to this Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you should discontinue use of the Platform and close your account.
For any questions, concerns, or requests relating to this Privacy Policy or the personal data pak399 holds about you, please contact our Data Protection team. Support is available 24 hours a day, seven days a week.
Email: [email protected] (plain text — no clickable link)
Please include "Privacy Request" in the subject line and provide your registered email address or username so we can locate your account. We aim to respond to all privacy-related enquiries within 5 business days and to complete subject access requests within 30 calendar days.
All data exchanged between your device and the pak399 platform is protected by TLS encryption. Whether you are accessing your account from Karachi or Islamabad, your credentials and financial data travel securely.
pak399 only collects data that is necessary for the specific purpose it serves — account management, KYC compliance, payment processing, or support. We do not collect data speculatively or share it for advertising purposes.
pak399 does not sell, rent, or trade your personal data with third parties for marketing or commercial purposes. Your data is used exclusively to provide you with the pak399 service and to meet our legal obligations.
Full card numbers and JazzCash or Easypaisa credentials are never stored on pak399 servers. All payment processing is handled by PCI-DSS certified partners. pak399 retains only masked references needed for transaction records.
You have the right to access, correct, delete, or export the personal data pak399 holds about you. Submit a request to our support team and we will action it within the timeframes described in this Policy.
Responsible gaming data — including self-exclusion requests, deposit limits, and session settings — is treated with the highest level of confidentiality within pak399. It is never used for marketing profiling.
pak399 is built around a simple principle: Pakistani players deserve a platform that handles their data responsibly, processes their payments securely, and gives them clear information about how their information is used. That is what this policy represents. 18+
Players are responsible for verifying online gaming is permitted in their jurisdiction. pak399 does not accept players under 18 years of age.