Privacy at a Glance
These cards highlight the key principles of our privacy approach. They are a summary only — please read the full policy below for complete details.
All data transmitted between your device and 37pk is protected by HTTPS encryption. Sensitive information — including KYC documents submitted by users from Karachi, Lahore or anywhere in Pakistan — is stored with strict access controls.
37pk does not sell, rent or trade your personal data to third parties for marketing or commercial purposes. Your information is used solely to operate your account and fulfil legal obligations.
You have the right to access, correct, restrict processing of and request deletion of your personal data, subject to our legal retention obligations. Contact support to exercise any of these rights.
We collect only the data we genuinely need to operate your account, process transactions, verify your identity and comply with our legal and compliance obligations. We do not collect data speculatively.
Personal data is not held indefinitely. Retention periods are defined by account status and applicable legal or regulatory requirements. Once no longer required, data is securely deleted or anonymised.
When this Privacy Policy is materially amended, registered users are notified via platform notification and/or email. The effective date at the top of this document reflects the most recent revision.
This Privacy Policy (hereinafter "Policy") sets out the basis on which 37pk (hereinafter "37pk", "we", "us" or "the Platform"), the operator of the online betting and casino platform accessible at 37pk.cam, collects, processes, stores, discloses and otherwise handles personal data relating to individuals who access or use the Platform (hereinafter "User", "you" or "your").
37pk is an English-language platform designed for Pakistani users. We understand that your personal data is sensitive and important. Our approach to data processing is grounded in three principles: we collect only what we need, we use it only for disclosed purposes, and we protect it with appropriate technical and organisational measures.
By registering an account with 37pk or using any part of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should cease using the Platform and may request account closure in accordance with our Terms & Conditions.
The following definitions apply throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can be used to identify a natural person, directly or indirectly — including name, email address, CNIC number, date of birth, IP address and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, erasure and destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data — in this context, 37pk. |
| "Data Processor" | A third party that processes personal data on behalf of 37pk under contractual instruction — such as KYC verification providers and payment processors. |
| "KYC" | Know Your Customer — the identity verification process required to confirm a user's identity, age and eligibility to use the Platform. |
| "Cookies" | Small text files placed on a user's device by a website to store session data, preferences and analytics information. |
| "PKR" | Pakistani Rupee — the primary display currency used throughout the 37pk Platform interface. |
When you register an account with 37pk, we collect the following personal data:
To comply with applicable identity verification, age verification and Anti-Money Laundering (AML) obligations, we may collect:
In connection with deposits, withdrawals and account activity, we process:
When you access the Platform, we automatically collect certain technical data including:
If you contact 37pk support via live chat, email or the help centre, we retain records of those communications — including any information you provide in the course of seeking assistance — for quality assurance, training and compliance purposes.
37pk collects personal data through the following channels:
37pk processes your personal data on the following legal bases, as applicable to each processing activity:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and management | Performance of contract — necessary to provide the services you have requested. |
| KYC identity and age verification | Legal obligation — required to verify eligibility and comply with AML and fraud-prevention requirements. |
| Processing deposits and withdrawals | Performance of contract — necessary to execute financial transactions on your behalf. |
| Fraud detection and AML monitoring | Legal obligation and legitimate interests — necessary to protect the Platform and its users from financial crime. |
| Responsible gambling monitoring | Legitimate interests and legal obligation — to identify and support at-risk users. |
| Platform analytics and improvement | Legitimate interests — to understand usage patterns and improve user experience. |
| Marketing communications (where applicable) | Consent — only where you have explicitly opted in to receive promotional communications. |
37pk uses your personal data for the following purposes:
37pk will not use your personal data for any purpose incompatible with the purposes disclosed in this Policy without first obtaining your consent or establishing a separate lawful basis for such processing.
37pk may share your personal data with carefully selected third-party data processors who provide services necessary to operate the Platform. These processors act under contractual obligations to process your data only as instructed by 37pk and to maintain appropriate security standards. Categories of processor include:
37pk may disclose personal data to law enforcement agencies, regulatory bodies or other competent authorities where required to do so by applicable law, court order, regulatory requirement, or where 37pk reasonably believes such disclosure is necessary to prevent fraud, money laundering or other serious criminal activity.
37pk does not sell, rent, lease or otherwise commercially transfer your personal data to any third party for that third party's own marketing or commercial purposes.
Where you use payment methods referenced on the Platform — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah — your transaction data may be shared with the relevant payment processor to the extent necessary to execute the transaction. These references are contextual only and do not imply that these institutions endorse or support gambling. Each payment provider operates under its own privacy and data processing terms, which you should review independently.
Cookies are small text files placed on your device when you visit a website. They allow the site to recognise your device, store session information and collect usage data. 37pk uses cookies and similar tracking technologies to operate and improve the Platform.
| Cookie Type | Purpose |
|---|---|
| Strictly Necessary | Required for the Platform to function — including session management, authentication tokens and security controls. Cannot be disabled without breaking core functionality. |
| Functional | Remember your preferences (e.g. language settings, display preferences) to provide a more personalised experience. |
| Analytics | Collect aggregated, anonymised data about how users interact with the Platform to identify performance improvements. |
| Security | Used to detect and prevent fraudulent activity, bot access and unusual session behaviour. |
You can control non-essential cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain Platform features, including session persistence and personalised settings. Strictly necessary cookies cannot be disabled as they are required for the Platform to operate.
37pk retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law, regulation or legal proceedings.
| Data Category | Indicative Retention Period |
|---|---|
| Account registration data | Duration of account plus a minimum of 5 years following account closure, subject to applicable AML regulations. |
| KYC verification documents | Minimum 5 years from account closure or as required by the applicable regulatory framework. |
| Transaction and financial records | Minimum 5 years from transaction date, or longer where required by law. |
| Support communications | Up to 3 years from date of communication, or longer where relevant to ongoing disputes. |
| Technical and session data | Up to 24 months from collection, in aggregated or anonymised form thereafter. |
| Marketing consent records | Until consent is withdrawn, plus a reasonable period for compliance record-keeping. |
On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any identifiable individual.
37pk implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include but are not limited to:
Your personal data may be transferred to and processed in countries outside of Pakistan where 37pk's infrastructure providers, KYC partners or data processors are located. These transfers occur where necessary to provide the Platform services to you.
Where personal data is transferred internationally, 37pk takes appropriate steps to ensure that adequate protections are in place — including contractual obligations on data processors consistent with recognised data protection standards — so that your personal data remains protected to a standard equivalent to that described in this Policy.
By using the Platform, you acknowledge and consent to the transfer of your personal data as described in this section.
Subject to applicable law and legitimate restrictions (such as AML and compliance retention requirements), you have the following rights in relation to your personal data held by 37pk. To exercise any of these rights, contact us at [email protected] with your full name, registered email address and a description of your request.
You may request a copy of the personal data 37pk holds about you and information about how it is processed.
You may request correction of inaccurate or incomplete personal data held about you. Note that KYC documentation once verified cannot be amended without re-verification.
You may request deletion of your personal data. This right is subject to our legal retention obligations — data required for AML, fraud prevention or regulatory compliance may not be immediately erasable.
In certain circumstances, you may request that we restrict the processing of your personal data while a dispute or correction request is resolved.
Where processing is carried out by automated means on the basis of your consent or contract performance, you may request that your data be provided in a structured, commonly used format.
You may object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes. You may withdraw consent to marketing communications at any time.
37pk will respond to rights requests within a reasonable timeframe, typically within 30 calendar days. Where the request is complex or involves a large volume of data, we may extend this period by a further 60 days with prior notification. 37pk reserves the right to decline requests that are manifestly unfounded, repetitive or in conflict with our legal obligations.
The 37pk Platform is strictly restricted to adults aged 18 years or older — or the higher minimum age required by the applicable license jurisdiction. We do not knowingly collect personal data from individuals who are under the applicable minimum age.
Age verification is a mandatory component of the KYC process. Where 37pk discovers or reasonably suspects that an account has been registered by a minor, the account will be immediately suspended, all funds will be frozen pending investigation, and the matter will be addressed in accordance with our Terms & Conditions and applicable legal obligations.
Financial data processed in connection with your 37pk account — including PKR transaction records, deposit and withdrawal history, and payment method identifiers — is handled with enhanced security controls reflecting the sensitivity of this information.
37pk does not store complete payment card numbers on its own systems. Payment card data is processed exclusively by certified payment processing partners operating under applicable card security standards. For transactions involving locally familiar payment methods — such as Easypaisa, JazzCash, Raast, or bank transfers via HBL, UBL, Meezan Bank or Bank Alfalah — the relevant transaction data is shared with the processing partner only to the extent required to complete the transaction. These references are contextual only and do not constitute endorsement of gambling by these providers.
Cryptocurrency transaction data — including wallet addresses for BTC, ETH and USDT transactions where applicable — is retained in accordance with our AML obligations and the retention periods set out in Section 9.
37pk reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices or Platform operations. The effective date at the top of this document will be updated to reflect the date of each revision.
Where an amendment is material — meaning it significantly affects how your personal data is processed or your rights in relation to it — 37pk will provide reasonable advance notice via a platform notification and/or email to your registered address. For non-material amendments (such as clarifications of existing language), no separate notification will be sent.
Your continued use of the Platform following the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must cease using the Platform and may request account closure as described in our Terms & Conditions.
For any queries, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact 37pk using the contact details below. Our support team responds in English, with Urdu-language assistance available on request for users based in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.
For responsible gambling concerns, self-exclusion requests or account restriction requests, please visit our Responsible Gambling page or include "Responsible Gambling" in your email subject line for priority handling.