365pk Privacy Policy

1. Introduction

365pk ("we", "us", "our", "the Platform") is committed to protecting the personal data of all users who access and use the 365pk betting and casino platform ("Service"). This Privacy Policy ("Policy") describes how 365pk collects, processes, stores, shares, and protects personal data in connection with the provision of the Service.

This Policy applies to all personal data provided to 365pk through account registration, identity verification (KYC), financial transactions, platform usage, customer support interactions, and any other means by which data may be submitted to or collected by 365pk.

By registering a 365pk account, depositing funds, placing a bet, or otherwise using any part of the Service, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must not use the 365pk platform.

2. Personal Data We Collect

365pk collects personal data in the following categories depending on how you interact with the platform:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (to verify you are 18 or older);
• Email address used to create your 365pk account;
• Pakistani mobile phone number (required for JazzCash/Easypaisa transactions and 2FA);
• Username and encrypted password;
• CNIC number or passport number (collected during KYC verification); and
• Residential address and proof of address documents submitted for KYC.

2.2 Financial and Transaction Data

• Deposit and withdrawal transaction records including amounts in PKR, timestamps, and payment method references;
• JazzCash account identifier or Easypaisa account identifier used for transactions;
• Bank account details where bank transfer is used (HBL, UBL, Meezan Bank, Bank Alfalah, etc.);
• Debit card details where Visa/Mastercard is used (processed securely via PCI-DSS compliant payment processors); and
• USDT TRC20 wallet addresses used for crypto transactions.

2.3 Platform Usage Data

• Betting history including markets wagered, stake amounts, odds accepted, and settlement outcomes;
• Casino game session records including games played, bet sizes, session duration, and results;
• Login history including timestamps, IP addresses, and device identifiers;
• Responsible gaming settings you have applied such as deposit limits and self-exclusion status; and
• Customer support communications including live chat transcripts and email correspondence.

2.4 Technical and Device Data

• IP address and approximate geolocation derived therefrom;
• Device type, operating system, and browser version;
• Cookie identifiers and session tokens (see Section 6); and
• Referral source data where you arrived at 365pk via a tracked link.

3. How We Use Your Personal Data

365pk processes personal data for the following purposes:

• Account management: creating and maintaining your 365pk account, verifying your identity, and enabling you to log in securely;
• Service delivery: processing bets, settling wagers, crediting casino game winnings, and managing your PKR balance;
• Payment processing: facilitating deposits and withdrawals via JazzCash, Easypaisa, bank transfers, and other supported payment methods;
• KYC and fraud prevention: verifying your identity to comply with anti-money laundering (AML) obligations and to detect, investigate, and prevent fraudulent account activity;
• Responsible gaming: monitoring account activity to identify indicators of problem gambling behaviour and applying responsible gaming tools where required;
• Legal compliance: retaining records as required by applicable law and cooperating with regulatory authorities and law enforcement as required;
• Customer support: responding to your enquiries, resolving disputes, and addressing complaints;
• Platform improvement: analysing aggregated and anonymised usage data to improve the 365pk platform, fix bugs, and develop new features; and
• Communications: sending account-related notifications including deposit confirmations, withdrawal updates, and security alerts. Promotional communications are only sent where you have provided consent.

4. Legal Basis for Processing

365pk processes your personal data on the following legal grounds:

• Contractual necessity: processing required to perform the agreement between you and 365pk, including operating your account and processing transactions;
• Legal obligation: processing required to comply with AML regulations, KYC obligations, tax reporting requirements, and cooperation with law enforcement;
• Legitimate interests: processing necessary for fraud prevention, platform security, responsible gaming monitoring, and platform improvement where these interests are not overridden by your rights; and
• Consent: processing of data for marketing communications and optional features where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Third Parties

365pk does not sell your personal data to third parties. We share personal data with third parties only in the following circumstances:

• Payment processors: JazzCash, Easypaisa, bank partners, card processors, and crypto platforms receive the minimum data necessary to process your transactions. These processors are contractually bound to data protection standards;
• Game providers: casino and slot game suppliers receive anonymised session data to deliver game content. Personal data is not transferred to game suppliers;
• KYC and identity verification providers: third-party KYC service providers receive identity documents for verification on behalf of 365pk;
• Regulatory authorities and law enforcement: where legally required, 365pk discloses data to government bodies, financial intelligence units, or law enforcement agencies;
• Customer support platforms: live chat and ticketing system providers process support communications on behalf of 365pk under data processing agreements; and
• Corporate transactions: in the event of a merger, acquisition, or asset sale, user data may be transferred as part of that transaction, subject to equivalent data protection obligations.

6. Cookies and Tracking Technologies

365pk uses cookies and similar tracking technologies on the platform. The following categories of cookies are used:

• Essential cookies: required for the platform to function, including session authentication tokens, CSRF protection, and load balancing. Cannot be disabled without breaking platform functionality;
• Functional cookies: remember your preferences such as language settings and responsible gaming configurations;
• Analytics cookies: collect aggregated, anonymised data about how users navigate the platform to help 365pk improve performance and user experience; and
• Marketing cookies: used to measure the effectiveness of referral campaigns where you arrive at 365pk via a tracked link. These are only placed where you have consented.

You may manage cookie preferences through your browser settings. Blocking essential cookies will impair platform functionality including the ability to log in and place bets.

7. Data Retention

365pk retains personal data for as long as your account is active and for a period thereafter as required by applicable legal obligations. The following general retention periods apply:

• Account and identity data: retained for the duration of your account and for a minimum of five (5) years following account closure, as required by AML and financial record-keeping obligations;
• Transaction records: retained for a minimum of five (5) years from the date of transaction;
• Betting and gaming history: retained for the duration of your account and for a minimum of two (2) years thereafter;
• Support communications: retained for two (2) years from the close of the support interaction; and
• Technical logs: retained for ninety (90) days unless required for an ongoing investigation.

Upon expiry of applicable retention periods, 365pk will securely delete or anonymise personal data in accordance with its data disposal procedures.

8. Data Security

365pk implements technical and organisational security measures proportionate to the risk associated with processing your personal data. These include:

• SSL/TLS encryption (TLS 1.3) for all data transmitted between your device and 365pk servers;
• Encryption of sensitive data at rest including passwords (hashed with a strong algorithm) and payment details;
• Role-based access controls limiting employee access to personal data to only those with a business need;
• Two-factor authentication available to all users and mandatory for certain administrative functions;
• Regular security assessments and penetration testing of platform infrastructure; and
• Incident response procedures to detect, contain, and notify affected users of data breaches within applicable regulatory timeframes.

No method of electronic transmission or storage is 100% secure. While 365pk takes all reasonable precautions, we cannot guarantee absolute security of your data against sophisticated attacks or circumstances outside our reasonable control.

9. Your Rights

Subject to applicable law, you have the following rights regarding your personal data held by 365pk:

• Access: request a copy of the personal data 365pk holds about you;
• Correction: request correction of inaccurate or incomplete personal data;
• Deletion: request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations;
• Restriction: request that processing of your data be restricted in certain circumstances;
• Objection: object to processing based on legitimate interests where your individual circumstances warrant it;
• Portability: receive your personal data in a structured, machine-readable format where technically feasible; and
• Withdrawal of consent: withdraw consent to marketing communications at any time via your account settings or by contacting support.

To exercise any of these rights, contact 365pk via live chat or email at [email protected]. 365pk will respond within 30 days. Identity verification may be required before processing any data rights request.

10. Minors and Age Verification

365pk strictly prohibits use of the platform by persons under the age of 18. We do not knowingly collect personal data from minors. Age verification is a mandatory component of the KYC process for all 365pk accounts.

If 365pk becomes aware that a person under 18 has provided personal data through the platform, we will promptly close the account, void any transactions, and delete the data in question. If you believe a minor has registered a 365pk account, please contact us immediately via live support.

11. Third-Party Links and Services

The 365pk platform may reference or link to third-party services including payment providers. 365pk is not responsible for the privacy practices of third-party websites or services. Where you are redirected to a third-party payment platform such as JazzCash or Easypaisa to complete a transaction, your data on that platform is governed by the third party's own privacy policy.

365pk recommends that you review the privacy policies of any third-party services you use in connection with your 365pk account.

12. Changes to This Privacy Policy

365pk may update this Privacy Policy from time to time to reflect changes in data processing practices, applicable law, or platform functionality. Material changes will be communicated to registered users via email or a prominent notice on the platform at least 7 days before taking effect.

The "Last updated" date at the top of this Policy indicates when the most recent revision was made. Continued use of the 365pk platform following the effective date of any revised Policy constitutes acceptance of the changes.

13. Contact and Data Enquiries

For all privacy-related enquiries, data rights requests, or to report a potential data protection concern, please contact 365pk via:

• Live Chat: available 24/7 from the 365pk platform
• Email: [email protected]

365pk will acknowledge privacy enquiries within 48 hours and aims to resolve them within 30 calendar days. Complex requests involving large volumes of data may require additional time, in which case you will be notified of the extended timeline.