01Introduction
This Privacy Policy ("Policy") describes how pk387 ("we", "us", "our"), operating the website at https://pk387.cam (the "Platform"), collects, uses, stores, discloses and protects personal data relating to users of the Platform ("you", "your").
pk387 is a player-information and educational resource. It does not operate a gambling platform, accept deposits or process wagers. This Policy governs data handling practices in connection with your use of the Platform only — it does not extend to any third-party operator platform that you may access separately.
By accessing or using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with this Policy, you should discontinue use of the Platform.
02Definitions
In this Policy, the following terms have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can identify a natural person, directly or indirectly, including name, email address, IP address, device identifiers and usage behaviour. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, erasure or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing Personal Data. For this Platform, the Data Controller is pk387. |
| "Data Processor" | A third party that processes Personal Data on behalf of pk387, under contractual instructions from pk387. |
| "Consent" | Freely given, specific, informed and unambiguous agreement to the processing of Personal Data for a stated purpose. |
| "Cookies" | Small text files placed on your device by a website to store information about your session, preferences or browsing behaviour. |
| "Platform" | The pk387 website at https://pk387.cam, including all pages and associated content. |
03Data We Collect
We collect the minimum personal data necessary to operate and improve the Platform. The categories of data we may collect include:
3.1 Data You Provide Directly
- Contact enquiries: If you contact us via email, we collect your email address and the content of your message.
- Feedback submissions: Any voluntary feedback or survey responses you submit to us.
3.2 Data Collected Automatically
- Log data: IP address, browser type and version, operating system, referring URL, pages visited and time/date of visit.
- Device data: Device type, screen resolution and hardware identifiers where technically captured.
- Usage data: Interactions with Platform content, session duration, scroll depth and navigation patterns.
- Cookie data: Session cookies and persistent cookies as described in Section 9.
3.3 Data We Do Not Collect
pk387 does not collect, store or process: financial account details; payment card numbers; National Identity Card (CNIC) or passport numbers; biometric data; health or medical data; gambling transaction records; or any data relating to activities conducted on third-party operator platforms.
04How We Collect Data
We collect personal data through the following means:
- Direct interaction: When you email us, submit a contact form or provide feedback voluntarily.
- Automated technologies: Through server logs, cookies, web beacons and analytics tools that operate when you visit the Platform.
- Third-party analytics: Where we use analytics providers to understand aggregate Platform usage. These providers process data on our behalf under appropriate data processing agreements.
We do not purchase personal data lists, scrape data from other sources or acquire personal data through indirect means not described in this Policy.
05Data Processing
We process personal data for the following purposes:
| Purpose | Description | Legal Basis |
|---|---|---|
| Platform Operation | Serving pages, managing sessions and maintaining Platform functionality for users across Pakistan and elsewhere. | Legitimate Interest |
| Analytics & Improvement | Understanding how users interact with the Platform — which pages are visited, where users are located (city/country level), which content is most useful. | Legitimate Interest / Consent |
| Support Communications | Responding to enquiries submitted via email or contact form. | Contract / Consent |
| Security & Fraud Prevention | Detecting and preventing abusive access, scraping, fraudulent activity or security threats to the Platform. | Legitimate Interest |
| Legal Compliance | Meeting obligations under applicable law, including responding to lawful requests from authorities. | Legal Obligation |
06Legal Basis for Processing
We process personal data only where a valid legal basis exists. The primary legal bases we rely on are:
- Consent: Where you have given clear, informed and freely provided consent for a specific processing activity, such as accepting analytics cookies.
- Legitimate Interests: Where processing is necessary for our legitimate interests in operating and improving the Platform, provided those interests are not overridden by your rights and freedoms.
- Legal Obligation: Where processing is necessary to comply with a legal obligation to which we are subject under applicable law.
- Contractual Necessity: Where processing is necessary to fulfil a request you have made, such as responding to a support enquiry.
Where we rely on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
07Data Sharing & Disclosure
pk387 does not sell personal data to any third party for commercial or marketing purposes. We may share data in the following limited circumstances:
7.1 Service Providers (Data Processors)
We engage trusted third-party service providers to operate elements of the Platform, including web hosting, analytics and content delivery. These providers act as Data Processors and are bound by contractual obligations to process data only on our instructions and to maintain appropriate security measures.
7.2 Legal Requirements
We may disclose personal data if required to do so by applicable law, court order, regulatory authority or other lawful process. We will notify you of such disclosure where legally permissible and practically possible.
7.3 Business Transfers
In the event of a merger, acquisition, restructuring or sale of assets, personal data held by pk387 may be transferred to the relevant successor entity. We will notify affected users in advance where possible and in accordance with applicable law.
7.4 With Your Consent
We may share data with third parties where you have given specific, informed consent for such sharing. You may withdraw such consent at any time.
08Data Retention
We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention guidelines are as follows:
- Server log data: Retained for a maximum of 90 days for security and operational purposes, then deleted.
- Analytics data: Retained in aggregated, anonymised form. Raw session data is deleted after 26 months unless technically required otherwise.
- Support correspondence: Retained for up to 2 years from the date of last correspondence, to allow for follow-up enquiries and record-keeping.
- Cookie data: Session cookies expire on browser close; persistent cookies expire as set out in Section 9.
When data is no longer required, it is securely deleted or anonymised using industry-standard methods. You may request early deletion of your personal data by contacting us as described in Section 15.
09Cookies & Tracking Technologies
The Platform uses cookies and similar technologies to function correctly, improve your experience and understand usage patterns. By continuing to use the Platform with your browser set to accept cookies, you consent to our use of cookies as described below.
You can manage, restrict or delete cookies at any time through your browser settings. Note that disabling cookies may affect the functionality of certain Platform features. Most browsers offer help documentation on cookie management in their settings menus.
10Your Rights
Subject to applicable data protection law, you have the following rights in respect of your personal data held by pk387:
Right of Access
Request a copy of the personal data we hold about you and information about how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data we hold about you.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected.
Right to Restriction
Request that we restrict processing of your data while a complaint or query is investigated.
Right to Portability
Receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
Right to Object
Object to processing based on legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds.
To exercise any of these rights, contact us using the details in Section 15. We will respond within a reasonable timeframe and in accordance with applicable law. We may need to verify your identity before processing your request. We will not charge a fee for the exercise of these rights in ordinary circumstances.
11Data Security
pk387 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. Measures include:
- TLS/SSL encryption for all data transmitted between your browser and the Platform;
- Encryption of data at rest where personal data is stored;
- Access controls ensuring that only authorised personnel can access personal data;
- Regular security assessments and vulnerability monitoring;
- Contractual data security requirements imposed on all Data Processors.
No method of electronic transmission or storage is 100% secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users and relevant authorities in accordance with applicable law.
12Minors
The Platform is intended for use by adults aged 18 or above — or the higher minimum age required by any applicable operator or jurisdiction. pk387 does not knowingly collect personal data from individuals under the age of 18.
If you are a parent or guardian and believe that a minor has accessed the Platform and provided personal data, please contact us immediately at the address set out in Section 15. We will take prompt steps to delete any personal data identified as having been collected from a minor.
We encourage parents and guardians in Pakistan to install appropriate parental control software and to supervise minors' internet use, particularly in relation to any content involving gambling or age-restricted material.
13International Data Transfers
The Platform may be accessed by users in Pakistan and other countries. Personal data collected through the Platform may be transferred to, stored in or processed in countries outside Pakistan, including countries that may not have the same level of data protection law as Pakistan.
Where personal data is transferred internationally, we take appropriate steps to ensure that adequate safeguards are in place, which may include: standard contractual clauses approved by relevant data protection authorities; binding corporate rules; or transfers to countries deemed to provide adequate protection.
By using the Platform, you acknowledge and consent to the possibility of your personal data being transferred to and processed in jurisdictions outside your country of residence, including for the purpose of operating and improving the Platform.
14Changes to This Policy
pk387 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date at the top of this page. We may also provide additional notice of significant changes where practically appropriate.
It is your responsibility to review this Policy periodically to stay informed of how we handle your personal data. Your continued use of the Platform after any amendment constitutes acceptance of the revised Policy. If you do not agree with the updated terms, please discontinue use of the Platform and, if applicable, request erasure of your personal data.
15Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data, please contact the pk387 privacy team using the details below. We are committed to addressing all enquiries promptly and transparently.
pk387 — Privacy Enquiries
Email: [email protected]
Subject line suggested: "Privacy Policy Enquiry" or "Data Subject Request"
Email address is provided as plain text. Do not send sensitive documents or financial credentials via email.
We aim to acknowledge data subject requests within 5 business days and to resolve them within 30 days, unless the complexity of the request requires additional time, in which case we will notify you and provide a revised timeline.