// 399pak · Data & Privacy
This Privacy Policy explains how 399pak collects, uses, stores and protects your personal data. We are committed to handling your information with transparency and care.
This Privacy Policy ("Policy") describes how 399pak ("we", "us", "the Operator", "the Platform") collects, uses, stores, discloses and protects the personal data of users ("you", "User", "Player") who access or use the 399pak online gaming and sports betting platform at https://399pak.cam and all associated services.
399pak is an English-language online gaming information and betting platform serving Pakistani users across Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and beyond. We take data privacy seriously. This Policy is designed to give you a clear, complete account of our data practices so that you can make informed decisions about your use of the Platform.
By registering an account on 399pak or by continuing to access the Platform, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform.
This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together govern your relationship with 399pak.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
We collect personal data that is necessary for the operation of the Platform, the fulfilment of our legal and regulatory obligations, and the delivery of a safe, secure and personalised experience for our users. The categories of personal data we collect are set out in the table below.
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government-issued ID | Account registration, KYC verification, age verification |
| Contact Data | Email address, mobile phone number, residential address | Account communications, security alerts, withdrawal verification |
| Financial Data | Payment method details, transaction history, deposit and withdrawal records | Payment processing, AML compliance, fraud prevention |
| Technical Data | IP address, browser type and version, device identifiers, operating system, time zone | Platform security, fraud detection, geolocation compliance |
| Usage Data | Login history, pages visited, games played, betting activity, session duration | Platform improvement, responsible-gambling monitoring, personalisation |
| Communication Data | Support chat logs, email correspondence, feedback submissions | Customer support, dispute resolution, service improvement |
| Preference Data | Responsible-gambling settings, deposit limits, marketing preferences | Account personalisation, responsible-gaming tool administration |
We collect personal data through the following channels:
Data you provide directly when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, respond to a survey or promotion, or update your account settings.
Data collected automatically as you interact with the Platform, including your IP address, browser and device information, session activity, pages visited, game play history and cookie-based identifiers. This data is collected using standard web technologies including server logs, session cookies and analytics tools.
Data received from third-party service providers engaged by the Operator, including identity verification providers (for KYC purposes), payment processors (for transaction verification) and fraud prevention services. Data from these sources is used solely for the purpose for which it was provided and is processed in accordance with this Policy.
We process your personal data for the following purposes:
We process your personal data on the following legal bases:
399pak does not sell your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
We engage third-party service providers to assist with the operation of the Platform, including identity verification services, payment processors, fraud detection providers, cloud infrastructure operators and analytics platforms. These providers process data only on our instructions and are contractually bound to protect your data in line with applicable privacy standards.
We may disclose personal data to regulatory authorities, law enforcement agencies or courts where required to do so by applicable law, court order, or regulatory direction. We will, where legally permissible, endeavour to notify you of such requests before disclosing data.
In the event of a merger, acquisition, restructuring or sale of all or part of the Operator's business, personal data held by 399pak may be transferred to the successor entity. Affected users will be notified in advance of any such transfer and the Privacy Policy applicable to their data following the transfer.
We may share data with legal counsel, auditors or compliance advisers where necessary for the exercise or defence of legal rights, subject to appropriate confidentiality obligations.
We retain personal data for as long as is necessary to fulfil the purposes for which it was collected, as required by applicable law, or as necessary for the establishment, exercise or defence of legal claims. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and Identity Data | Duration of account plus minimum 5 years post-closure | KYC/AML regulatory requirements |
| Financial Transaction Data | Minimum 5 years from transaction date | AML compliance and accounting obligations |
| Technical and Usage Data | Up to 24 months from collection | Platform security and fraud prevention |
| Support Communication Data | Up to 3 years from interaction date | Dispute resolution and service improvement |
| Self-Exclusion Records | Duration of exclusion plus 5 years | Responsible gambling compliance |
| Marketing Preference Data | Until consent is withdrawn | Consent-based processing |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.
399pak implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:
Notwithstanding these measures, no electronic transmission or storage system is completely secure. You are responsible for maintaining the security of your own account credentials and for notifying us immediately if you suspect any unauthorised access to your account.
The 399pak Platform uses cookies and similar tracking technologies to support session management, security, analytics and Platform functionality. The table below describes the categories of cookies we use.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Maintain your login session, enforce security controls and enable core Platform features | Session / up to 30 days |
| Functional | Remember your preferences, language settings and responsible-gambling configurations | Up to 12 months |
| Analytics | Collect aggregated data on Platform usage to improve performance and user experience | Up to 24 months |
| Security | Detect and prevent fraudulent activity, session hijacking and bot traffic | Session |
You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will impair the functionality of the Platform, including your ability to log in and maintain a session.
Subject to applicable law and the Operator's legitimate interests and legal obligations, you have the following rights in relation to your personal data held by 399pak:
You may request a copy of the personal data we hold about you and information on how it is processed.
You may request correction of inaccurate or incomplete personal data held in your account.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
You may request that processing of your data be restricted in certain circumstances — for example, while a dispute regarding accuracy is under review.
Where processing is based on your consent or a contract, you may request that your data be provided to you in a structured, machine-readable format.
You may object to processing based on legitimate interests, including direct marketing. Objecting to marketing will result in immediate cessation of such communications.
To exercise any of these rights, please contact the 399pak support team. We will respond to data rights requests within 30 days. In some cases, particularly for complex or multiple requests, a further extension of up to 60 days may apply, and you will be notified accordingly.
The 399pak Platform is strictly for adults aged 18 years and above, or the higher minimum age required by the Operator's licensing jurisdiction. We do not knowingly collect personal data from individuals under the applicable minimum age.
Age verification is conducted as part of the KYC process at account registration and prior to the processing of withdrawals. If we discover that a user account has been registered by or on behalf of a minor, we will immediately close the account, void all associated transactions and delete the data, subject to any mandatory retention obligations under applicable law.
If you are a parent or guardian who believes a minor has provided personal data to 399pak without your consent, please contact us immediately at the address provided in Section 15.
The 399pak Platform is operated from and in relation to an international licensing jurisdiction. Personal data may therefore be transferred to, stored in, or processed in countries outside Pakistan. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your personal data, which may include contractual protections with the receiving party.
By using the Platform, you acknowledge and consent to the transfer of your personal data outside Pakistan where necessary for the delivery of our services and for compliance with our legal obligations. We will not make transfers that expose your data to materially lower standards of protection than those described in this Policy.
We may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations or operational requirements. Where changes are material — meaning they significantly affect how we process your personal data or your rights as a data subject — we will provide reasonable advance notice to registered users via email or a prominent Platform notification.
The "Last Updated" date displayed at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically. Continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy.
For questions, data rights requests, complaints or concerns regarding this Privacy Policy or the handling of your personal data, please contact the 399pak team through the following channels. Email addresses on this page are displayed as plain text only and are not clickable links.
Privacy & Data Requests
[email protected]Plain text only — not a clickable link. Copy manually to contact us. Include "Privacy Request" in your subject line for data rights enquiries.
Live Chat
Available through the in-platform chat widget. Live chat is suitable for initial enquiries; complex data rights requests should be submitted in writing for a complete and auditable response.
These six principles shape every data decision at 399pak — from how we collect information to how long we keep it and who can access it.
Your personal information is not a commercial product at 399pak. We do not sell, rent or trade your data with third parties for their own marketing or commercial purposes — full stop.
All communication between your browser and the Platform is encrypted via HTTPS/TLS. Sensitive account and financial data is also encrypted at rest within our infrastructure.
Access, correct, restrict, port or request deletion of your personal data through the rights request process described in Section 11. We aim to respond within 30 days.
We keep your data only as long as legally required or operationally necessary. Retention periods are documented by data category and applied consistently across our systems.
Only vetted third-party providers with contractual data protection obligations receive access to your data — and only the minimum necessary for the specific service they perform.
When this Policy changes in a way that materially affects your rights or our data practices, registered users receive advance notification before the changes take effect.
Our Privacy Policy works alongside the Terms & Conditions and Responsible Gambling framework. Together they give you a complete picture of your rights and our obligations.
18+ only — or the higher minimum required by the operator's licensing jurisdiction. This content is for informational purposes only and does not constitute legal advice.