pak243 Privacy Policy

1 Who We Are

This Privacy Policy is issued by pak243 (hereinafter referred to as "pak243", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at pak243.com and all associated subdomains, mobile interfaces, and applications (collectively, the "Platform").

pak243 acts as the data controller in respect of all personal data collected from users of the Platform. As data controller, pak243 determines the purposes and means by which your personal data is processed. All data processing activities described in this Privacy Policy are carried out in accordance with applicable data protection legislation and the conditions of our international gaming licence.

This Privacy Policy applies to all individuals who register an account, place bets, play casino games, contact our support team, browse the Platform without an account, or otherwise interact with pak243's services in any capacity. By using the Platform, you acknowledge that you have read and understood this Privacy Policy.

2 Information We Collect

pak243 collects personal data through several distinct channels. The categories of data we collect, along with the specific data points within each category, are set out below.

2.1 Registration and Account Data

When you create a pak243 account, we collect the following information that you provide directly to us:

• Full legal name (as it appears on your government-issued identification document)
• Date of birth (to verify that you meet the minimum age requirement of 21 years)
• Residential address, including city, province, and postcode within Pakistan
• Computerised National Identity Card (CNIC) number or equivalent government-issued ID number
• Valid email address
• Mobile phone number registered in Pakistan (required for OTP verification)
• Username and encrypted account password
• Preferred language and currency settings

2.2 Know Your Customer (KYC) Verification Data

To comply with our licensing obligations and applicable anti-money laundering requirements, pak243 may request the following documents during KYC verification:

• Scanned copy or clear photograph of your CNIC (front and back)
• Proof of residential address (e.g., a recent utility bill, bank statement, or government letter dated within three months)
• Proof of payment method ownership (e.g., a screenshot of your JazzCash or EasyPaisa account registered in your name, or a bank statement from HBL, UBL, or Meezan Bank)
• In certain circumstances, a live selfie or video verification may be requested

2.3 Financial Transaction Data

In connection with deposits, withdrawals, and bonus transactions, pak243 collects:

• Payment method type (JazzCash, Easy Paisa, HBL, UBL, Meezan Bank, Raast, 1LINK)
• Account number, mobile wallet number, or bank account details associated with your registered payment method
• Transaction amounts in Pakistani Rupees (PKR)
• Transaction timestamps, reference numbers, and confirmation codes
• Deposit and withdrawal history across your account lifetime

2.4 Betting and Gaming Activity Data

As you use the Platform, pak243 automatically records:

• Bets placed, including event type, market selection, stake amount, odds, and settlement outcome
• Casino game sessions, including game title, session duration, wager amounts, and win/loss results
• Bonus claims, wagering progress, and promotional participation history
• Account balance history and transaction ledger entries

2.5 Technical and Device Data

When you access the Platform, our servers and analytics systems automatically collect:

• IP address at time of each login and session
• Device type, operating system version, and browser type
• Unique device identifiers
• Session start and end times, page views, and navigation paths within the Platform
• Geolocation data derived from IP address (city-level, not GPS-level)
• Referring URL and entry point to the Platform

2.6 Communications Data

When you contact pak243's support team or engage with our communications, we retain:

• Live chat transcripts
• Email correspondence content and metadata
• Support ticket history and resolution records
• Records of any responsible gaming tool activations (deposit limits, self-exclusion requests, etc.)

3 How We Use Your Data

pak243 uses the personal data it collects for the following clearly defined purposes:

pak243 does not use your personal data for any purpose not listed above without first obtaining your explicit consent or being required to do so by applicable law or a competent authority.

4 Legal Basis for Processing

Every personal data processing activity carried out by pak243 rests on one of the following recognised legal bases:

• Contractual necessity: Processing required to perform the contract between pak243 and you — including account creation, payment processing, and bet settlement — is carried out on the basis that it is necessary to deliver the services you have agreed to receive.
• Legal obligation: Certain processing activities — particularly KYC identity verification, AML transaction monitoring, and record-keeping — are mandatory under our gaming licence conditions and applicable financial regulations. pak243 cannot offer services to you without completing this processing.
• Legitimate interests: pak243 processes technical and device data, fraud detection signals, and platform analytics on the basis of its legitimate interest in operating a secure, fair, and commercially sustainable platform. We apply a balancing test to ensure our legitimate interests do not override your fundamental privacy rights.
• Consent: Where pak243 sends you marketing communications, promotional offers, or uses cookies beyond the strictly necessary category, we do so on the basis of your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Data Sharing & Disclosure

pak243 does not sell, rent, or trade your personal data to third parties for their own commercial purposes under any circumstances. Your data is shared only in the limited circumstances described below, and always subject to appropriate data protection safeguards.

5.1 Service Providers and Processors

pak243 engages carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These include:

• Payment processing partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK) — who receive only the transaction data necessary to complete your deposit or withdrawal
• Identity verification and KYC service providers — who receive document images and personal data solely for the purpose of completing verification checks
• Customer support platform providers — who process communications data to facilitate live chat and ticketing functionality
• Cloud hosting and infrastructure providers — who store Platform data on secure servers under strict data processing terms
• Fraud detection and risk management service providers — who receive anonymised or pseudonymised behavioural data to identify patterns of suspicious activity
• Game software providers — who may receive session identifiers and gaming activity data necessary to run fair and auditable game outcomes

5.2 Regulatory and Legal Disclosures

pak243 may disclose personal data to competent authorities, regulators, law enforcement agencies, or courts where we are legally required to do so, including in response to:

• A valid court order, subpoena, or official legal process
• A regulatory request from our gaming licence authority or financial intelligence unit
• A statutory AML or counter-terrorism financing reporting obligation

6 Cookies & Tracking Technologies

pak243 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device when you visit a website. Cookies help the Platform remember your preferences, maintain your login session, and collect aggregate usage analytics.

pak243 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for core Platform functionality, including maintaining your logged-in session, processing transactions, and applying responsible gaming limits. These cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and notification settings, so you do not have to re-configure them each visit.
• Analytics Cookies: Used with your consent to collect aggregate and anonymised data about how users navigate the Platform. This information helps pak243 identify usability improvements and technical issues. No personally identifiable information is included in analytics data.
• Marketing Cookies: Used with your consent to identify your interests and, where applicable, to ensure that promotional communications you receive from pak243 are relevant to your gaming preferences and activity.

You may manage your cookie preferences through your browser settings. Note that disabling non-essential cookies will not affect your ability to use the core betting and gaming features of the Platform.

7 Data Retention

pak243 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or our licensing conditions. The following retention periods apply as a general framework:

• Account and KYC data: Retained for the duration of your account's active lifetime plus a minimum of five (5) years following account closure, as required by AML and gaming licence record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial reporting and AML requirements.
• Betting and gaming activity logs: Retained for five (5) years from the date of each activity record.
• Customer support communications: Retained for three (3) years from the date of the final correspondence in each support case.
• Marketing consent records: Retained for the duration of the consent plus two (2) years after withdrawal, to demonstrate compliance if challenged.
• Technical and device logs: Retained for twelve (12) months from collection, unless a specific fraud or security investigation requires extended retention.

Upon expiry of the applicable retention period, pak243 will securely delete or irreversibly anonymise personal data in accordance with our internal data destruction protocols, unless a legal hold prevents deletion.

8 Data Security

pak243 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in transit: All data exchanged between your device and the pak243 Platform is encrypted using TLS 1.2 or higher. This applies to account logins, deposit and withdrawal flows, and all customer support communications.
• Encryption at rest: Sensitive personal data — including CNIC information, financial account details, and KYC documents — is encrypted at rest using AES-256 encryption standards.
• Access controls: Access to personal data within pak243's internal systems is restricted on a strict need-to-know basis. Staff members who process personal data are subject to confidentiality obligations and role-based access permissions.
• Two-factor authentication: pak243 strongly recommends enabling SMS OTP two-factor authentication on your account. This adds a critical layer of protection against unauthorised account access, even in the event that your password is compromised.
• Penetration testing and security audits: pak243's Platform undergoes regular security assessments, including third-party penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that poses a risk to your rights and freedoms, pak243 will notify affected users and the relevant regulatory authority within the timeframes required by applicable law.

9 Your Rights

As a data subject, you hold the following rights in respect of your personal data held by pak243. These rights may be exercised by contacting us at [email protected] with your account details and the nature of your request.

• Right of Access: You may request a copy of all personal data pak243 holds about you, along with information about how it is being processed. We will provide this within thirty (30) calendar days of receiving a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For certain data fields (such as your name or date of birth), you may be required to provide supporting documentation to authenticate the change.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to our legal retention obligations — for example, AML record-keeping requirements will override an erasure request for financial transaction data within the mandatory retention period.
• Right to Restriction of Processing: You may request that pak243 restrict the processing of your personal data in certain circumstances, such as while a rectification request is being investigated.
• Right to Data Portability: You may request a copy of the personal data you have provided to pak243 in a structured, commonly used, machine-readable format, where technically feasible and where processing is based on consent or contractual necessity.
• Right to Object: You have the right to object to processing based on legitimate interests, and an absolute right to object to processing for direct marketing purposes at any time. Where you object to marketing, we will cease all promotional communications immediately upon verification of your request.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

pak243 will respond to all rights requests within thirty (30) calendar days. Where a request is complex or we receive a high volume of requests, this period may be extended by a further two months, in which case we will notify you of the extension and the reasons for it.

10 Children's Privacy

The pak243 Platform is strictly intended for adults. The minimum age to register and use pak243 is 21 years. pak243 does not knowingly collect, process, or retain personal data from any individual below the age of 21.

Age verification is a mandatory component of the registration process. All accounts are required to complete KYC verification confirming that the account holder meets the minimum age requirement before deposit or betting functionality is enabled. Any account found to belong to an individual under 21 will be immediately closed and all associated funds returned to the registered payment method, with no bonus amounts retained.

If you believe that a minor has registered a pak243 account or has gained access to an existing account, please contact us immediately at [email protected]. We will investigate and take prompt action upon receiving such a report.

11 International Data Transfers

pak243 operates under an international gaming licence and, as such, certain personal data may be processed or stored on servers or by service providers located outside of Pakistan. Where such international transfers occur, pak243 ensures that an adequate level of data protection is maintained through one or more of the following mechanisms:

• Transfers to jurisdictions recognised as providing an adequate level of data protection by the relevant regulatory standard
• Standard contractual clauses or equivalent data processing agreements that bind the recipient to obligations no less protective than those described in this Privacy Policy
• Binding corporate rules where transfers occur within a corporate group subject to such rules

pak243 does not transfer your CNIC information, bank account details, or mobile wallet credentials to any jurisdiction that does not have adequate data protection safeguards in place. Payments are processed within systems operated by Pakistani-regulated financial institutions wherever technically possible.

12 Third-Party Services

The pak243 Platform integrates with third-party game providers, payment processors, and technology vendors to deliver its full range of services. While pak243 selects these partners carefully and requires them to maintain appropriate data protection standards, each third party operates under its own privacy policy in respect of data it independently collects.

pak243 is not responsible for the privacy practices of third-party game studios whose game clients may collect gameplay telemetry data independently of pak243's systems. We recommend reviewing the privacy documentation of any third-party game provider whose games you play on the Platform if you have specific concerns about their data practices.

13 Changes to This Privacy Policy

pak243 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory requirements, Platform functionality, or data processing practices. When material changes are made, we will notify registered users via the in-account notification system and, where practicable, by email to the address registered on the account.

The updated Privacy Policy will be published on this page with a revised effective date. We encourage you to review this Privacy Policy periodically to remain informed of how pak243 protects your personal data. Your continued use of the Platform following any update constitutes your acknowledgement of the revised Privacy Policy.

14 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which pak243 processes your personal data, please contact us through the following channels:

• Email: [email protected] — privacy and data protection queries are acknowledged within 24 hours on business days.
• Live Chat: Available 24/7 within your pak243 account dashboard. For identity verification purposes, privacy requests submitted via live chat will require you to be logged into your registered account.

If you are not satisfied with pak243's response to a privacy complaint, you have the right to escalate the matter to the independent dispute resolution body designated by our licensing authority, or to the data protection supervisory authority in the jurisdiction under which our data processing obligations arise. Details of the applicable supervisory authority are available upon request from our support team.