PKR38 Privacy Policy

1 Overview

This Privacy Policy applies to all users of the PKR38 platform — whether accessed through the website at pkr38.onl or the PKR38 Android application. It explains the personal information we collect, how we use it, how we protect it, and the choices you have regarding your own data.

PKR38 is the data controller for personal information collected through the platform. We take our responsibility to handle your information carefully seriously — not just because it's the right thing to do, but because our users' trust in the platform depends on it.

2 Data We Collect

PKR38 collects two broad categories of information: information you provide directly and information collected automatically as you use the platform.

Information you provide directly:

• Full name and date of birth — collected at registration for account identity and age verification purposes.
• Contact details — your email address and, optionally, a contact number, used for account communication and support.
• Identity documents — such as a CNIC or passport, collected when you request a withdrawal or when PKR38's verification process requires it.
• Account preferences — including your chosen username, notification settings and responsible gaming limits you set.

Information collected automatically:

• Device information — device type, operating system version, browser type and screen resolution, used for optimising platform delivery.
• IP address — collected for fraud prevention, geographic access management and security purposes.
• Session data — pages visited, time spent, features used and games played, used to understand platform performance and improve the user experience.
• Transaction records — deposit and withdrawal amounts, dates and methods, maintained as a financial record for account management.

3 Why We Collect Your Information

PKR38 does not collect personal information without a specific operational reason. Here is why each category of data is needed:

• To operate your account: Your name, date of birth and contact email are essential for creating and maintaining a PKR38 account. Without these, we cannot establish your identity, verify your age or communicate with you about your account.
• To process deposits and withdrawals in PKR: Transaction data — amounts, payment methods, dates — is necessary to process and record all financial activity on your account. This includes handling JazzCash, Easypaisa, Raast and bank transfer transactions accurately.
• To verify your identity: When you reach a withdrawal threshold or when our risk systems flag a review, we may request identity documents. This is standard practice for online platforms handling real-money transactions and is done to protect both users and the platform from fraud.
• To keep the platform secure: IP addresses and device data are used to detect unusual login activity, identify potential fraud patterns and protect accounts from unauthorised access.
• To improve platform performance: Anonymised session data helps PKR38 understand which features are working well and where improvements are needed — whether that's loading times, game navigation or mobile app performance.
• To support responsible gaming: Activity data — such as session length, deposit frequency and loss patterns — helps PKR38 identify accounts that may benefit from responsible gaming prompts or intervention.

4 Payment Data and Financial Transactions

PKR38 processes all financial transactions in PKR through certified payment processors. When you deposit via JazzCash, Easypaisa, Raast or bank transfer, the payment credentials you enter — account numbers, wallet IDs, card details — are handled directly by the payment processor and are not stored in PKR38's own systems.

What PKR38 does retain is a transaction record: the amount, the date, the payment method category (for example, "JazzCash deposit — PKR 2,000") and the transaction reference number. This record is maintained for account management, dispute resolution and financial audit purposes.

5 How We Share Your Information

PKR38 does not sell, rent or trade your personal information to any third party. However, to operate the platform, we share limited data with the following categories of partner:

• Payment processors: Transaction data is shared with JazzCash, Easypaisa, Raast and banking partners as necessary to complete deposit and withdrawal requests. These partners process data under their own privacy frameworks and are contractually required to handle it securely.
• Game content providers: Some game providers receive a session token and anonymised user identifier to load games correctly. They do not receive your name, contact details or payment information.
• Identity verification services: Where identity verification is required, document data may be processed by a third-party verification service. These services operate under strict data handling agreements and do not retain your documents beyond the verification window.
• Fraud and security tools: Anonymised behavioural data and device information may be processed by security platforms to detect fraud, bot activity and account compromise attempts.

In circumstances where PKR38 is required by law to disclose information — such as in response to a valid legal order — we will comply while notifying the affected user where legally permitted to do so.

6 How Long We Keep Your Data

PKR38 retains personal data only for as long as it is necessary for the purpose it was collected. Specific retention periods by data type:

• Active account data (name, contact details, preferences) is retained for the lifetime of your account and for a reasonable period following account closure to handle any post-closure queries.
• Transaction records are retained for a minimum of five years from the date of the transaction for financial record-keeping purposes.
• Identity verification documents are retained only for the period necessary to complete verification and are deleted once verification is confirmed, subject to any legal retention obligations.
• Session and activity data used for platform analytics is retained in anonymised form. Data linked to a specific account is retained for the account's active period and a short window beyond closure.

If you close your PKR38 account, we will delete or anonymise your personal data within a reasonable timeframe, except where retention is required for legal, regulatory or dispute resolution reasons.

7 How We Protect Your Data

PKR38 applies a layered approach to data security. Key measures include:

• SSL/TLS encryption on all data transmitted between your browser or app and PKR38's servers.
• Encrypted storage for account credentials — passwords are stored as hashed values, never in plain text.
• Access controls limiting which PKR38 team members can view account data, with full access audit logging.
• Regular security reviews of platform infrastructure to identify and address vulnerabilities.
• Automatic session timeouts to protect accounts on shared devices.

No online platform can guarantee absolute security against all possible threats. PKR38 takes all reasonable steps to protect your data, but we also encourage you to use a strong, unique password for your account and enable any additional security features available in account settings. If you believe your account has been accessed by someone else, contact support immediately.

8 Cookies and Tracking Technologies

PKR38 uses cookies and similar technologies to operate the platform, remember your session and understand how the platform is being used. Cookies are small data files stored on your device when you visit pkr38.onl.

The categories of cookies used on PKR38:

• Essential cookies: Required for the platform to function — session management, login state, payment flow continuity. These cannot be disabled without breaking platform functionality.
• Analytics cookies: Used to collect anonymised data about page visits and feature usage. This data is used to improve the platform experience. No personally identifiable information is included.
• Preference cookies: Store settings such as your chosen display preferences and notification settings so they persist between sessions.

Most browsers allow you to manage, block or delete cookies through browser settings. Blocking essential cookies will affect your ability to use the PKR38 platform normally. Analytics and preference cookies can typically be blocked without affecting core functionality.

9 Your Data Rights

As a PKR38 account holder, you have the following rights regarding your personal information. All of these can be exercised by contacting our support team.