At 399pak, protecting your personal data is not an afterthought — it is built into how we operate. This Privacy Policy explains exactly what information we collect, why we collect it, how we use it, and the rights you hold over your own data.
Summary: This Privacy Policy ("Policy") describes how 399pak ("we", "us", "the Platform") collects, uses, stores, and protects personal data belonging to users ("you", "Player") of the 399pak platform at 399pak.net. By registering an account or using any 399pak service, you acknowledge that you have read and understood this Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy.
399pak is Pakistan's premier online casino and sports betting platform, serving registered players across Karachi, Lahore, Faisalabad, Rawalpindi, Islamabad, and beyond. As an operator of an online gaming platform, 399pak is required to collect certain personal information from players in order to comply with its obligations under its international gaming licence, including player identity verification, anti-money laundering (AML) checks, and responsible gaming monitoring.
We take privacy seriously. 399pak does not sell personal data to third parties for marketing purposes. We do not share your data with anyone who has no legitimate operational need for it. The sections below describe our data practices in full and transparent detail.
This Policy applies to all personal data processed in connection with your use of the 399pak website, mobile experience, support channels, and any other services we provide. It does not apply to third-party websites linked from our platform — any such links are provided for your convenience only, and 399pak takes no responsibility for the privacy practices of external sites.
399pak collects the following categories of personal data from players:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, CNIC scan or photograph | Registration & KYC verification |
| Contact Data | Email address, mobile phone number, city of residence | Registration |
| Financial Data | JazzCash / EasyPaisa account number, bank account details, transaction history, PKR amounts | Deposit / withdrawal requests |
| Account Data | Username, encrypted password, account preferences, bonus history | Account creation and ongoing use |
| Gaming Data | Bet history, game session logs, win/loss records, betting patterns | Continuously during active play |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Automatically on platform access |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | When you contact support |
| Responsible Gaming Data | Self-exclusion records, deposit limit settings, flagged betting pattern notes | When tools are activated or patterns detected |
We collect only what is necessary for the purposes described in this Policy. Where data is no longer required for those purposes, it is deleted or anonymised in accordance with our retention schedule set out in Section 7.
399pak collects personal data through the following means:
399pak processes your personal data for the following specific purposes:
399pak processes personal data under the following legal bases:
399pak does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share your data only in the following strictly controlled circumstances:
We engage carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These include KYC and identity verification providers, payment processing partners (such as JazzCash and EasyPaisa infrastructure providers), cloud hosting and IT infrastructure providers, customer support platform providers, and fraud detection services. All such providers are contractually prohibited from using your data for any purpose beyond the specific service they perform for 399pak.
399pak may be required to disclose personal data to our gaming licensing authority, financial intelligence units, or law enforcement agencies where required by law or pursuant to a valid legal order. 399pak will, where legally permissible, notify you of any such disclosure.
In the event that 399pak undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity. We will notify registered players of any such transfer via the email address associated with their account.
We may share your data with third parties not described above where you have provided explicit, informed consent for that specific sharing arrangement.
Important: 399pak will never share your CNIC details, financial account numbers, or responsible gaming records with any party other than those described in sections 6.1 and 6.2 above. These categories of data are treated with the highest level of protection within our systems.
399pak retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by our gaming licence and applicable regulations:
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for analytical and statistical purposes.
399pak implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
While 399pak takes all reasonable precautions to secure your data, no internet transmission or electronic storage system can be guaranteed as 100% secure. You are responsible for maintaining the confidentiality of your 399pak account credentials. If you believe your account has been compromised, contact support immediately via the 24/7 live chat.
399pak uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how the site is used. The following categories of cookies are deployed on 399pak.net:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, authentication, security tokens. Required for the platform to function. | No — essential for operation |
| Functional | Remembering language preferences, game display settings, and account dashboard layout choices. | Yes — via cookie settings |
| Analytics | Aggregated and anonymised data on platform usage, page performance, and feature engagement used for internal improvement. | Yes — via cookie settings |
| Marketing | Tracking promotional campaign effectiveness for 399pak's own marketing. No third-party advertising networks are used. | Yes — via cookie settings or account preferences |
You can manage your cookie preferences through your browser settings at any time. Disabling strictly necessary cookies will impair the functionality of the 399pak platform. Disabling analytics or marketing cookies will not affect your ability to access games or account features.
As a 399pak player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our Data Protection Officer at the address in Section 14.
Request a copy of all personal data 399pak holds about you. We will respond within 30 days of a verified request.
Request correction of inaccurate or incomplete personal data. Identity data corrections require re-verification.
Request deletion of your personal data where it is no longer necessary, subject to our legal retention obligations.
Request that we restrict processing of your data in specific circumstances, for example while a rectification request is being assessed.
Request your personal data in a structured, machine-readable format where processing is based on consent or contract.
Object to processing of your data based on legitimate interests, including direct marketing communications, at any time.
Please note that certain rights are subject to limitations where 399pak has overriding legal obligations — for example, we cannot delete AML-mandated records before the legally required retention period has elapsed. We will always explain any such limitation clearly when responding to your request.
399pak strictly enforces a 21+ age policy on all accounts. We do not knowingly collect personal data from individuals under the age of 21. All account registrations are subject to CNIC-based age verification, and accounts found to belong to persons under 21 are closed immediately.
If you believe that a person under 21 has registered an account on 399pak using false information, please contact us immediately at [email protected]. We will investigate and take prompt action, including account closure and refund of any deposits to the original payment source, in accordance with our under-age gambling procedures.
399pak strongly encourages parents and guardians to make use of parental control and internet filtering tools to prevent minors from accessing online gambling platforms. We support all responsible measures to keep gambling away from those who are underage.
As an internationally licensed gaming platform, 399pak may process or store certain categories of personal data on servers located outside Pakistan. This may occur, for example, where we use cloud infrastructure or third-party KYC services based in other jurisdictions.
Where personal data is transferred internationally, 399pak ensures that appropriate safeguards are in place to maintain the same level of protection as described in this Policy. These safeguards include contractual data protection clauses with all recipient entities and, where applicable, reliance on adequacy decisions or equivalent frameworks recognised under our licensing authority's jurisdiction.
399pak reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered players by displaying a prominent notice upon next login or by sending a notification to the email address registered to your account. The effective date at the top of this Policy will always reflect the date of the most recent revision.
Your continued use of the 399pak platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should cease using the platform and contact support to request account closure and data deletion (subject to mandatory retention obligations).
We recommend that you review this Policy periodically to remain informed of how 399pak handles your personal data.
If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data 399pak holds about you, please contact our Data Protection Officer through the following channels:
When submitting a data subject request by email, please include your registered username and a brief description of your request. We may require you to verify your identity before processing your request to ensure we do not disclose or modify data belonging to another individual.
For responsible gaming support — including self-exclusion, deposit limits, and session controls — please visit our dedicated Responsible Gaming page or contact support directly. All responsible gaming requests are actioned with priority and without delay.
Six principles that define how 399pak handles your personal data every day.
All data transmitted between your device and 399pak is protected by SSL/TLS encryption. Stored passwords are never held in plain text — only salted cryptographic hashes are retained in our systems.
399pak does not sell, rent, or trade your personal data to third-party advertisers or data brokers — ever. Your information is used only for the operational purposes described in this Policy.
Access, correct, delete, or export your data at any time. 399pak responds to all verified data subject requests within 30 days, with no unnecessary friction or delays in the process.
We collect only what is strictly necessary for account management, KYC compliance, transaction processing, and responsible gaming monitoring. No unnecessary data is ever requested or retained.
Data is kept only for as long as required by law or operational necessity. Once the retention period expires, personal data is securely deleted or irreversibly anonymised — no indefinite accumulation.
In the unlikely event of a data breach affecting your rights, 399pak has a defined incident response protocol that includes timely notification to affected players and the relevant regulatory authority.
Now that you know exactly how we protect your information, join hundreds of thousands of Pakistani players enjoying cricket betting, slots, and live casino — all in PKR with fast payouts via JazzCash and EasyPaisa.
Create Your Account Responsible Gaming