Privacy

397pk Privacy Policy — How We Handle Your Personal Data

At 397pk we take your privacy seriously. This policy explains what data we collect when you use the platform, why we collect it, how it is stored securely and what your rights are. We want you to understand exactly how your information is handled — no confusing legal language where we can help it.

Last updated: January 2026

Six Things to Know About 397pk & Your Privacy

The full policy is below. These cards cover the points most players want to know upfront.

Your Data Stays Encrypted

All personal data — including your CNIC details, payment method information and account credentials — is stored using industry-standard encryption. We do not store raw payment card numbers or wallet PINs.

We Do Not Sell Your Data

397pk does not sell, rent or trade your personal information to marketing companies or data brokers. Data shared with third parties is limited to what is strictly necessary to operate the platform and process your transactions.

Payment Data Handled Separately

JazzCash, Easypaisa, Raast and card payment processing is handled by the payment providers themselves. 397pk receives transaction confirmation and reference numbers — not your full wallet credentials.

You Control Your Data

You have the right to access the personal data 397pk holds about you, request corrections and ask for deletion subject to our legal retention obligations. Contact support to make a data request.

Cookies for Platform Function

397pk uses cookies to keep you logged in, remember your preferences and analyse general usage patterns so we can improve the platform. We do not use cookies to build advertising profiles.

Marketing Is Opt-In

Promotional emails and push notifications from 397pk are only sent to players who have opted in. You can change your communication preferences at any time from your account settings.

1. Who We Are

This Privacy Policy applies to the 397pk online gaming platform accessible at 397pk.pro, including the website and the mobile app available for Android and iOS. When this policy refers to "397pk", "we", "us" or "our", it means the operator of the 397pk platform.

397pk is the data controller for the personal information you provide when registering and using the platform. This means we determine the purposes and means by which your personal data is processed. If you have questions about how your data is handled, you can reach the support team at [email protected].

By registering an account and using the 397pk platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described here. If you do not agree, please do not register or continue using the platform.

2. What Data We Collect

We collect personal data through several routes — information you provide directly when registering or transacting, data generated automatically by your use of the platform, and information we may receive from payment providers as part of transaction processing.

Data Category Examples How Collected
Identity Data Full name, date of birth, CNIC number Registration form, KYC verification
Contact Data Mobile number, email address Registration form
Account Data Username, password hash, login history Platform activity
Transaction Data Deposit amounts, withdrawal requests, PKR balances, payment method references Deposit / withdrawal actions
Gaming Data Games played, bets placed, session duration, game results Platform activity
Technical Data IP address, device type, browser, operating system, app version Automatic collection
Usage Data Pages visited, features used, click patterns, session times Cookies and analytics
Communication Data Support chat logs, email correspondence with the support team Your communications with us

We do not collect sensitive personal data such as religious beliefs, political opinions or health information unless specifically required for responsible gaming purposes (for example, a self-exclusion request).

3. Why We Collect Your Data

Every piece of data 397pk collects serves a specific purpose. We do not collect information speculatively or build profiles beyond what is needed to operate the platform properly and keep it safe. The main purposes are:

  • Account creation and management: Your name, contact details and identity data are needed to create and maintain your account, verify your age and process your requests.
  • Processing deposits and withdrawals: Transaction data and payment method references are essential for processing your PKR deposits via JazzCash, Easypaisa, Raast, bank transfer or card, and for returning funds when you withdraw.
  • KYC and fraud prevention: We are required to verify the identity of players before processing significant withdrawals and when fraud or money laundering is suspected. This protects both the platform and other players.
  • Platform operation and game integrity: Gaming data and session logs are used to verify game outcomes, investigate disputes and maintain fair play across all game categories including slots, live casino, fish games and sports betting.
  • Responsible gaming: Session data and account activity help us identify patterns that may indicate problem gambling. This is used to offer responsible gaming tools and, in serious cases, apply protective restrictions.
  • Customer support: Communication data is retained so support agents have the context needed to resolve your queries without asking you to repeat yourself.
  • Platform improvement: Anonymised usage data helps us understand how players navigate the platform, which game categories are most popular and where technical friction exists — so we can improve the experience over time.
  • Marketing communications (opt-in only): If you have opted in to promotional communications, we use your contact details and platform usage patterns to send relevant offers. You can opt out at any time.
We process your data based on the performance of your account contract with us, our legitimate business interests, legal obligations and — for optional communications — your consent.

4. Payment Data & KYC

Because all transactions on 397pk are conducted in PKR, and because we support local payment methods including JazzCash, Easypaisa, Raast, IBFT bank transfers and debit/credit cards, there are specific points worth knowing about how payment data flows.

Payment provider processing: When you make a deposit using JazzCash or Easypaisa, the actual payment is processed on the provider's own infrastructure. 397pk receives a transaction reference number and confirmation of the payment amount — not your JazzCash PIN, Easypaisa account password or full card number. Those credentials stay with the payment provider.

Bank and card details: If you deposit via IBFT or card, your bank account number and card details are processed by our payment gateway partner, not stored on 397pk's own servers. 397pk retains only the last four digits of a card number for reference purposes.

KYC verification: To process withdrawals above certain thresholds and to comply with anti-money-laundering obligations, we may request copies of your CNIC, passport or other government-issued ID, along with proof that the payment method belongs to you. These documents are stored securely and accessed only by authorised staff for verification purposes.

Withdrawal matching: Withdrawals are returned to the same payment method used for deposits wherever possible. This is a standard anti-fraud measure that also protects your funds.

Important: 397pk will never ask for your JazzCash or Easypaisa PIN, your banking password or your full CNIC details via chat, email or SMS. If you receive such a request claiming to be from 397pk, do not respond and contact support to report it.

5. Cookies & Device Tracking

397pk uses cookies and similar technologies (such as local storage) on both the website and the mobile app. Here is a plain-English breakdown of what they do:

  • Essential cookies: These keep you logged in during a session, maintain your game state and ensure the platform works correctly. Without them, basic functions like staying signed in would not work. These cannot be turned off.
  • Preference cookies: These remember settings you have chosen — for example, your preferred language, display preferences or whether you have dismissed a notification banner.
  • Analytics cookies: These collect anonymised data about which pages are visited, how long players stay in particular sections and which features are used most. This data is aggregated — it does not identify individual players — and is used to improve the platform.
  • Security cookies: Used to detect unusual login activity, flag potential account takeover attempts and prevent fraudulent session manipulation.

397pk does not use third-party advertising cookies, retargeting pixels or any tracking technology designed to build an advertising profile for use on other websites. Your activity on 397pk stays on 397pk.

On the mobile app, similar device identifiers are used for the same purposes — session management, security and anonymous analytics. You can manage app permissions through your Android or iOS device settings.

6. Sharing Your Data

397pk does not sell your personal data. We share data with third parties only where it is necessary to operate the platform, comply with legal obligations or protect against fraud. The categories of third parties who may receive limited data are:

  • Payment processors: JazzCash, Easypaisa, Raast and card payment gateways receive the transaction data they need to process your deposits and withdrawals. Each provider operates under their own privacy policy.
  • Game providers: The companies that supply 397pk's slot, live casino and fish game titles may receive your session identifiers for game integrity and RNG certification purposes. They do not receive your full personal profile.
  • KYC and identity verification services: Where third-party verification tools are used to check identity documents, only the specific data needed for that check is shared.
  • IT infrastructure and hosting providers: The servers and cloud infrastructure that run 397pk are managed by technology partners under strict data processing agreements that prohibit them from using your data for their own purposes.
  • Law enforcement and regulatory bodies: We may be legally required to disclose account or transaction data to relevant authorities in Pakistan in cases involving financial crime, fraud investigation or a valid legal order. We will comply with such requirements.

No data is shared with social media platforms, advertising networks or data brokers. Any third party with whom data is shared is contractually obligated to handle it securely and use it only for the purpose it was shared.

7. How Long We Keep Your Data

We do not keep your personal data longer than necessary. The retention periods depend on the type of data and the legal obligation attached to it:

  • Account data: Retained for as long as your account is active. If you close your account, basic account records are retained for a minimum period to fulfil legal and financial reporting obligations before deletion.
  • Transaction and financial records: PKR deposit, withdrawal and gaming transaction records are retained for a minimum of five years in line with standard financial record-keeping obligations.
  • KYC documents: Identity verification documents are retained for the period required by applicable anti-money-laundering regulations, typically five years from the date of the last transaction.
  • Support communications: Chat logs and email correspondence with the support team are retained for up to two years to provide context for follow-up queries and disputes.
  • Marketing preferences and consent records: Opt-in records for promotional communications are retained for as long as your account is active and for a period thereafter in case of disputes about consent.

When data is no longer needed and the retention period has expired, it is deleted or anonymised so it can no longer be linked to you.

8. How We Protect Your Data

397pk employs several layers of security to protect your personal data from unauthorised access, disclosure or loss:

  • Encryption in transit: All data transmitted between your device and the 397pk platform is encrypted using TLS. This applies to the website, mobile app and all API communications with payment providers.
  • Encryption at rest: Sensitive data fields including identity numbers, hashed passwords and payment references are stored in encrypted form in the database.
  • Access controls: Personal data is accessible only to staff members who need it for their specific job function. Access is logged and reviewed regularly.
  • Login security: The platform supports two-factor authentication for player accounts. We strongly recommend enabling this in your account settings to protect against unauthorised login.
  • Fraud monitoring: Automated systems monitor accounts for unusual activity patterns — sudden large withdrawals, multiple login attempts from unfamiliar locations and irregular betting behaviour — and flag these for manual review.

No system is completely immune to breach. In the event of a data security incident that affects your personal data, we will notify affected players and take immediate steps to contain the incident and prevent recurrence.

You play an important role in your own account security. Use a strong, unique password for 397pk that you do not use elsewhere. Enable two-factor authentication if available. Never share your login details with anyone.

9. Your Privacy Rights

As a player on 397pk you have rights over your personal data. Here is what you can request and how to do it:

Right of Access

Request a copy of the personal data we hold about you. We will provide this in a readable format.

Right to Rectification

If any personal data we hold is inaccurate or outdated, you can ask us to correct it.

Right to Erasure

Request deletion of your personal data, subject to our legal retention obligations. Certain financial records cannot be deleted early.

Right to Restrict Processing

Ask us to limit how we use your data in specific circumstances, for example while a dispute is being resolved.

Right to Portability

Request your data in a machine-readable format so you can transfer it elsewhere if you choose.

Right to Withdraw Consent

Withdraw consent for marketing communications at any time via your account settings or by contacting support.

To exercise any of these rights, contact the support team at [email protected]. We will respond within a reasonable time and may need to verify your identity before fulfilling your request.

10. Children and Minors

397pk is strictly an adult entertainment platform. We do not knowingly collect personal data from anyone under the age of 18. During registration, all players are required to confirm that they are 18 or older, and we may request age verification documents to confirm this at any time.

If we become aware that we have inadvertently collected personal data from a minor, we will delete that data immediately and close the associated account. If you are a parent or guardian and believe a minor has registered on 397pk using your details or their own, please contact support immediately so we can take action.

If you have children who use your device, please ensure they do not have access to your 397pk account. Use device screen lock and do not save your login credentials where minors can access them.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in how we operate, changes in legal requirements or improvements to the platform that affect how data is handled. When we make significant changes, we will notify registered players by email or via an in-platform notice.

The updated policy will be published on this page with a revised "last updated" date at the top. We recommend reviewing this page periodically so you stay informed about how your data is being handled.

Your continued use of the 397pk platform after a policy update constitutes your acknowledgment of the revised terms. If you disagree with a change, please contact support — if necessary, you can close your account and have your remaining verified real money balance returned to you.

12. Contact & Data Enquiries

If you have any questions about this Privacy Policy, about the personal data 397pk holds about you, or if you want to exercise any of your data rights, please get in touch with the support team.

You can reach us at any time at [email protected]. Please include your registered account username in your message so we can locate your records quickly and respond accurately.

For questions about responsible gaming, self-exclusion or deposit limits, please also see the Responsible Gaming page.

For general platform questions, the FAQ page covers the most common topics in detail.

Support is available 24 hours a day, 7 days a week. Data access and deletion requests are typically handled within 5–10 business days depending on the complexity of the request.

Happy with How 397pk Handles Your Data?

Register today and start exploring the game lobby — slots, live casino, fish games, sports betting on cricket and PSL, all in PKR with JazzCash and Easypaisa support.

18+ only. By registering you confirm you have read and accepted the Privacy Policy and Terms and Conditions.