pak239 Privacy Policy

This Privacy Policy ("Policy") describes the information practices of pak239 ("pak239", "we", "us", or "our") in connection with the pak239 website located at pak239.cam and all associated services, features, and functionalities (collectively, the "Platform"). This Policy applies to all users who access or use the Platform, including registered account holders and visitors browsing without a registered account.

pak239 is an English-language online gaming information and services platform serving users in Pakistan and internationally. We take the protection of your personal data seriously. This Policy sets out in clear, plain terms what data we collect, why we collect it, how it is used, who it may be shared with, how long it is retained, and what rights you have over your information.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together constitute the full agreement between you and pak239. We may update this Policy from time to time. The "Last Updated" date at the top of the page will reflect any changes. Continued use of the Platform after any update constitutes acceptance of the revised Policy.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — Any information that can be used to directly or indirectly identify a natural person, including but not limited to name, email address, phone number, national identity number, IP address, and device identifiers.
• "Processing" — Any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, dissemination, restriction, erasure, or destruction.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. In the context of this Policy, pak239 acts as data controller for data collected directly through the Platform.
• "Data Processor" — A third party that processes personal data on behalf of the data controller under a contractual arrangement, such as payment processors, KYC verification providers, and analytics services.
• "User" / "you" — Any individual who accesses, registers on, or interacts with the pak239 Platform.
• "Cookies" — Small text files placed on a user's device by a website to store information about their preferences, session state, or browsing behaviour.
• "KYC" — Know Your Customer: the identity and address verification process required before processing certain account actions, such as withdrawals.

pak239 collects personal data in the following categories, depending on how you interact with the Platform:

3.1 Data You Provide Directly

• Registration Data: Full legal name, date of birth, email address, mobile number, country and city of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar), and chosen username and password.
• Identity Verification (KYC) Data: Scanned copies or photographs of government-issued identification documents such as a Pakistani CNIC, passport, or driver's licence; proof-of-address documents.
• Payment Data: Details of payment methods used for deposits or withdrawals. We collect only the information necessary to process transactions — full card numbers, bank account details, or mobile wallet identifiers as required. We do not store full payment card data beyond what is necessary and permitted under applicable security standards.
• Support Communications: Any information you provide when you contact our support team via email, live chat, or other channels, including the content of your messages and any attachments.
• Voluntary Submissions: Any information you voluntarily submit through forms, surveys, feedback requests, or other interactive platform features.

3.2 Data Collected Automatically

• Technical Data: IP address, browser type and version, operating system, device model, screen resolution, and connection type.
• Usage Data: Pages visited, time spent on pages, navigation paths, game sessions accessed, betting history, click data, and search queries within the Platform.
• Session Data: Login timestamps, session duration, and logout events.
• Cookie and Tracking Data: As described in Section 7 of this Policy.

3.3 Data Received from Third Parties

• Identity Verification Providers: Results of KYC checks performed by third-party verification services, including confirmation of identity, age verification outcomes, and PEP/sanctions screening results.
• Payment Processors: Transaction confirmation data, fraud risk scores, and payment status information received from payment providers. Payment providers referenced contextually on pak239 — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, and Bank Alfalah — may provide transaction data as required to complete financial operations.
• Fraud Prevention Services: Risk indicators and device fingerprint data from fraud detection partners.

pak239 uses the personal data we collect for the following purposes:

pak239 processes personal data on the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary to perform our contract with you — i.e., to provide the gaming and betting services you have registered to use, including account management, deposits, withdrawals, and access to games.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, KYC requirements, and gambling licence conditions.
• Legitimate Interests: Processing is carried out in pursuit of our legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided those interests are not overridden by your rights and interests.
• Consent: For marketing communications and certain non-essential cookies, processing is based on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time.

pak239 does not sell your personal data to third parties for their own commercial purposes. We may share your personal data with third parties only in the following limited circumstances:

• Service Providers / Data Processors: Third-party companies engaged by pak239 to provide specific services on our behalf, including payment processing, identity verification, fraud detection, hosting infrastructure, analytics, and customer support platforms. These parties process data only under our instructions and are bound by data processing agreements.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory instruction, pak239 may disclose personal data to relevant governmental, regulatory, or law enforcement authorities.
• Gaming Licence Operator: Where pak239 operates in connection with a licensed gaming operator, personal data necessary for the delivery of regulated gaming services may be shared with that operator under appropriate contractual protections.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of pak239's business, personal data may be transferred to the acquiring entity, subject to the acquiring party agreeing to treat your data in accordance with this Policy.
• Responsible Gambling: In limited circumstances required by regulatory obligations, certain account and activity data may be shared with responsible gambling programmes or exclusion registries, such as self-exclusion schemes operated under the applicable licence jurisdiction.

pak239 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and analyse usage patterns. The categories of cookies we use are described below:

You may manage your cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or alert you when cookies are being set. Please note that disabling strictly necessary cookies may affect the functionality of the Platform. Detailed instructions for managing cookies are available in the help sections of major browsers including Chrome, Firefox, Safari, and Edge.

pak239 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law or regulatory obligation.

• Account Data: Retained for the duration of your active account and for a defined period after account closure, as required by applicable AML, gaming licence, and financial record-keeping obligations.
• KYC Documentation: Retained for the period specified by applicable AML regulations in the operator's licence jurisdiction — typically a minimum of five years following the end of the business relationship.
• Transaction Records: Financial transaction records are retained for the minimum period required by applicable financial regulation, typically five to seven years.
• Support Communications: Retained for a reasonable period to allow reference in the event of future enquiries or disputes, typically two to three years.
• Analytics and Usage Data: Aggregated or anonymised usage data may be retained indefinitely as it no longer constitutes personal data. Non-anonymised usage logs are retained for shorter periods consistent with their operational purpose.
• Marketing Data: Retained until you withdraw consent or update your communication preferences.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

pak239 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the pak239 Platform is encrypted using industry-standard SSL/TLS protocols.
• Access Controls: Access to personal data is restricted on a need-to-know basis. Staff members with access to personal data are subject to confidentiality obligations.
• Secure Storage: Personal data is stored on secure servers with appropriate physical and logical access controls.
• Fraud Detection Systems: Automated and manual monitoring systems are in place to detect and respond to suspicious activity on user accounts.
• Regular Security Reviews: pak239 conducts periodic reviews of its security practices to address emerging threats and vulnerabilities.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, pak239 will notify affected users in accordance with its obligations under applicable data protection law.

Depending on your jurisdiction and applicable data protection law, you may have some or all of the following rights in relation to your personal data held by pak239:

To exercise any of the rights listed above, please contact pak239 support at the email address provided in Section 12 of this Policy. We will respond to valid requests within a reasonable timeframe in accordance with applicable data protection law. We may need to verify your identity before processing your request.

The pak239 Platform may incorporate or reference third-party services, including payment processing providers, identity verification platforms, analytics tools, content delivery networks, and gaming technology providers. These third parties operate independently and are subject to their own privacy policies.

Where pak239 engages third-party data processors, we require them to implement appropriate technical and organisational security measures and to process personal data only on our documented instructions. We do not permit data processors to use your personal data for their own independent purposes without your knowledge and consent.

Payment method providers referenced on this Platform — including Easypaisa, JazzCash, Raast, and banking institutions such as HBL, UBL, Meezan Bank, and Bank Alfalah — are independent entities with their own privacy frameworks. Their mention on pak239 is contextual only and does not imply endorsement of gambling or any form of data sharing agreement beyond what is necessary to complete a transaction you initiate.

pak239 is not responsible for the data practices of third-party providers and encourages users to review the privacy policies of any third-party services they interact with independently of the pak239 Platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pak239 handles your personal data, please contact our support team using the details below. All data-related enquiries will be handled promptly and with due care.