365pk Privacy Policy

1 Who We Are

365pk is an internationally licensed online gaming and betting operator offering services to players in Pakistan and other eligible jurisdictions. We operate under an international gaming licence, the terms of which require us to maintain strict data protection, anti-money laundering (AML), and know-your-customer (KYC) standards at all times.

For the purposes of data protection law, 365pk acts as the data controller in respect of the personal information of registered players. This means we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers — such as payment processors, identity verification providers, or fraud detection services — those parties act as data processors under our instruction.

2 Data We Collect

365pk collects personal information in the following categories:

• Registration Data: Full legal name, date of birth (to verify 21+ age requirement), residential address, city (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad), email address, and mobile phone number.
• Identity Verification (KYC) Data: Government-issued identification documents such as CNIC, passport, or driving licence, as required by our licensing obligations. This data is collected once and used solely for account verification and regulatory compliance.
• Financial Data: Payment method details (JazzCash wallet ID, EasyPaisa mobile number, bank account details for HBL, UBL, or Meezan Bank), transaction amounts, deposit and withdrawal history, and balance information. Full payment credentials are not stored on 365pk servers.
• Usage Data: IP address, device type and operating system, browser type, session duration, pages visited, betting history, game activity, and platform interaction logs.
• Communications Data: Records of your correspondence with our customer support team, including live chat transcripts and email exchanges.
• Responsible Gaming Data: Self-exclusion requests, deposit limit settings, session time preferences, and any information you provide when seeking problem gambling assistance.

We collect data directly from you when you register, make a deposit, place a bet, contact support, or update your account profile. We may also collect certain technical data automatically when you access the 365pk platform through your device.

3 How We Use Your Data

365pk uses personal data for the following purposes:

• Account Management: To create, verify, and maintain your 365pk player account, including processing deposits and withdrawals in PKR.
• Service Delivery: To provide access to cricket betting markets, live casino games, slot titles, and sports wagering services.
• KYC and AML Compliance: To verify your identity, confirm your age (21+), and meet our obligations under international anti-money laundering regulations applicable to licensed gaming operators.
• Fraud Prevention and Security: To detect and prevent unauthorised access, fraudulent transactions, money laundering, and other illegal activity on the platform.
• Customer Support: To respond to your queries, resolve account disputes, and assist with technical issues via live chat or email at [email protected].
• Responsible Gaming: To monitor gaming patterns, enforce self-exclusion requests, apply deposit limits, and identify players who may be exhibiting signs of problem gambling behaviour.
• Platform Improvement: To analyse usage patterns and technical performance data for the purpose of improving the 365pk platform, fixing bugs, and optimising the mobile experience for players across Pakistan.
• Legal Compliance: To meet our obligations under applicable laws, gaming regulations, and the terms of our international gaming licence.
• Communications: To send you important account notifications, transaction confirmations, and — where you have given explicit consent — promotional communications about bonuses and platform updates.

4 Legal Basis for Processing

365pk processes your personal data on the following legal grounds:

• Contractual Necessity: Processing necessary to perform our contract with you — i.e., to operate your player account and provide our betting and casino services.
• Legal Obligation: Processing required to comply with applicable law, including KYC, AML, and gaming licence regulatory requirements.
• Legitimate Interests: Processing necessary for our legitimate interests in operating a secure, fair, and commercially viable gaming platform — including fraud prevention, security monitoring, and platform analytics — provided those interests are not overridden by your fundamental rights.
• Consent: Where we rely on your consent — such as for optional marketing communications — you may withdraw that consent at any time by contacting our support team or updating your communication preferences in your account dashboard.

5 Data Sharing & Disclosure

365pk does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We may share your personal information in the following limited circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, or their respective gateway providers, as necessary to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML service providers who assist us in verifying player identities and screening against sanctions and politically exposed persons (PEP) lists, as required under our licence.
• Fraud and Security Services: Service providers engaged to detect fraudulent activity, identify unauthorised access, and maintain the security of the 365pk platform.
• Regulatory Authorities: Where required by law, court order, or the terms of our gaming licence, we may disclose player information to relevant regulatory, law enforcement, or judicial bodies.
• Business Transfers: In the event of a merger, acquisition, or transfer of all or part of 365pk's business, player data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party service providers engaged by 365pk are contractually required to process personal data only for the specific purposes for which it was shared and to maintain appropriate technical and organisational security measures.

6 Cookies & Tracking Technologies

365pk uses the following types of cookies and similar tracking technologies:

• Strictly Necessary Cookies: These are essential for the platform to function. They manage your login session, maintain your betting slip, and prevent cross-site request forgery. These cookies cannot be disabled without disrupting platform functionality.
• Performance Cookies: These collect anonymous, aggregated data about how players use the 365pk platform — such as which pages are visited most frequently and where errors occur. This data is used solely to improve platform performance.
• Fraud Prevention Cookies: These cookies help us identify and block suspicious activity, including bot traffic and account takeover attempts.

365pk does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking technologies. You may manage or delete cookies through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the platform.

7 Data Security

365pk implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest within our database infrastructure.
• Role-based access controls limiting internal access to personal data to authorised personnel on a need-to-know basis.
• Two-factor authentication (2FA) options for player accounts.
• Regular security audits, penetration testing, and vulnerability assessments by independent third parties.
• PCI-DSS compliant payment data handling through certified payment gateway partners.

While 365pk takes all reasonable steps to protect your data, no internet transmission is entirely risk-free. You are responsible for maintaining the confidentiality of your 365pk account credentials. If you suspect unauthorised access to your account, contact our support team immediately at [email protected].

8 Data Retention

365pk retains personal data for the period necessary to fulfil the purposes outlined in this Policy, subject to the following retention schedules:

• Active Accounts: Personal data is retained for the full duration of your player account's active status.
• Closed Accounts: Following account closure, we retain player data for a minimum of five (5) years as required under international gaming licence obligations and applicable AML law. This includes KYC documentation, transaction records, and betting history.
• Communications Records: Support communications are retained for a minimum of two (2) years to facilitate dispute resolution.
• Technical Logs: Server access logs and fraud detection data are retained for up to twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

9 Your Rights

As a registered player on 365pk, you have the following rights in respect of your personal data:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data in your account profile.
• Right to Erasure: You may request deletion of your personal data, subject to our legal and regulatory retention obligations. Note that data subject to AML or gaming licence retention requirements cannot be deleted before the applicable retention period expires.
• Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances.
• Right to Object: You may object to processing based on legitimate interests, including processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format where technically feasible.

To exercise any of the above rights, please contact our data protection team by email at [email protected]. We will respond to all valid requests within 30 days. We may require identity verification before actioning a data request to protect against fraudulent or unauthorised submissions.

10 Children's Privacy

365pk strictly prohibits use of its platform by persons under the age of 21. Our services are intended exclusively for adults aged 21 and above. We do not knowingly collect personal data from individuals under 21 years of age. If we become aware that a minor has registered an account or provided personal information, we will immediately close the account and delete the associated data.

As part of our KYC process, all new players are required to verify their age before any betting or casino activity is permitted. If you believe that a person under 21 has registered on 365pk, please contact us immediately at [email protected].

11 International Data Transfers

As an internationally licensed gaming operator, 365pk may transfer personal data to servers, processors, or service providers located outside Pakistan. Where such transfers occur, 365pk takes appropriate steps to ensure that your data receives an equivalent level of protection to that which applies within Pakistan, including through the use of contractual data processing agreements with all third-party service providers.

By using the 365pk platform, you acknowledge and consent to the transfer of your personal data across international borders as described in this Policy.

12 Changes to This Policy

365pk reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players via email or a prominent notice on the platform at least 14 days before the changes take effect. The effective date at the top of this Policy will be updated to reflect the date of the most recent revision.

Your continued use of the 365pk platform following notification of changes constitutes acceptance of the revised Policy. If you do not agree with any changes, you must close your account prior to the effective date of the updated Policy.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 365pk handles your personal data, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Availability: 24 hours a day, 7 days a week, including Pakistani public holidays
• Response Time: Data protection queries are typically acknowledged within 48 hours and resolved within 30 days

For responsible gaming support and self-exclusion requests, please visit our Responsible Gaming page.