Privacy Policy – How 365pkt Protects Your Personal Data in Pakistan

365pkt takes privacy seriously — not as a legal obligation to get out of the way, but as a genuine responsibility to every player who trusts the platform with their personal information. This policy is written to be actually readable, not to obscure what happens with your data behind walls of legal jargon.

This policy covers all data practices at 365pkt, including data collected during registration, account usage, deposits, withdrawals, betting activity, customer support interactions, and platform browsing. It applies regardless of the device you use to access 365pkt — mobile browser, desktop, or any future 365pkt application.

365pkt operates as the data controller for all personal data described in this policy. This means 365pkt decides the purpose for which your data is used and the manner in which it is processed. Where 365pkt engages third-party processors (such as payment gateway providers or KYC verification services), those parties act under contractual obligations to process data only as instructed by 365pkt.

365pkt collects personal data in several categories, depending on how you interact with the platform. Here is a clear breakdown of what is collected and why each category is necessary:

365pkt does not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required for responsible gaming assessments and with your explicit consent.

365pkt collects personal data through the following channels:

• Direct Input: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, or contacting 365pkt support.
• Automated Collection: Technical data collected automatically when you access 365pkt — including your IP address, device identifiers, browser type, and session activity — is gathered via server logs, analytics tools, and cookies.
• Payment Processors: When you deposit or withdraw via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or Visa/Mastercard, those payment providers share transaction confirmation data with 365pkt as necessary to process and reconcile your PKR balance.
• KYC / Identity Verification Services: 365pkt may use third-party identity verification providers to authenticate documents such as your CNIC or passport. These providers return a verification result to 365pkt; the documents themselves are processed in accordance with those providers' certified data handling standards.
• Customer Support Interactions: Data shared during live chat conversations, email exchanges, or any other support communication is retained for quality assurance, dispute resolution, and compliance purposes.

365pkt processes your personal data only for specific, documented purposes. For each purpose, there is a lawful basis under applicable data protection law. The main purposes are:

• Account Management: Creating, maintaining, and operating your 365pkt account — including processing deposits, withdrawals, and bet settlements in PKR. Lawful basis: contractual necessity.
• Identity Verification (KYC): Verifying that you are who you say you are and that you meet the 18+ age requirement. Lawful basis: legal obligation and contractual necessity.
• Fraud and Security: Detecting, investigating, and preventing fraud, multi-accounting, money laundering, and other prohibited activity. Lawful basis: legitimate interests and legal obligation.
• Responsible Gaming: Monitoring account behaviour to identify signs of problematic gambling — such as unusually rapid bet escalation or session length — and to apply responsible gaming tools appropriately. Lawful basis: legal obligation and legitimate interests.
• Customer Support: Responding to your queries, resolving disputes, and improving the quality of the 365pkt support experience. Lawful basis: contractual necessity and legitimate interests.
• Platform Improvement: Using aggregated and anonymised behavioural data to understand how players use 365pkt and to improve products, features, and performance. Lawful basis: legitimate interests.
• Legal Compliance: Retaining records as required by applicable anti-money laundering, financial services, and gaming regulations. Lawful basis: legal obligation.
• Marketing Communications: Sending promotional emails or SMS messages about 365pkt offers, new products, or relevant updates — but only to players who have opted in. Lawful basis: consent.

365pkt will not use your personal data for any purpose not listed above without notifying you and, where required, seeking your consent first.

365pkt does not sell your personal data. We do not hand your information to advertising networks, data brokers, or marketing companies. The only circumstances in which 365pkt shares personal data with third parties are:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT providers, and Visa/Mastercard acquirers receive the minimum necessary financial data to process your PKR transactions. These providers operate under their own privacy frameworks and applicable Pakistani financial regulations.
• KYC and Fraud Prevention Providers: Third-party identity verification and fraud screening services receive relevant personal data to carry out verification checks. They are contractually prohibited from using this data for any purpose other than verifying your identity for 365pkt.
• Game Software Providers: Live dealer studio operators and RNG game software providers may receive anonymised player session data to ensure game integrity and performance. They do not receive personally identifiable information beyond what is strictly required for game delivery.
• Legal and Regulatory Authorities: 365pkt will disclose personal data to law enforcement, financial intelligence units, or other regulatory bodies when legally required to do so — for example, in connection with anti-money laundering investigations or lawful court orders.
• IT and Infrastructure Providers: Cloud hosting, data storage, and cybersecurity partners who process data strictly as data processors under 365pkt's instruction, subject to binding data processing agreements.

All third-party processors engaged by 365pkt are contractually required to maintain data security standards appropriate to the data they handle, and to process data solely as directed by 365pkt.

365pkt uses cookies — small text files placed on your device when you visit the platform — and similar tracking technologies to make the site work properly, keep your session secure, and understand how the platform is used. Here is a breakdown of the cookie categories 365pkt uses:

You can manage optional cookie preferences through your browser settings. Blocking cookies entirely may affect platform functionality. 365pkt does not use third-party advertising cookies or share cookie data with ad networks.

365pkt implements a layered set of technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and 365pkt's servers is encrypted using industry-standard TLS protocols. This applies to every page, every login, every deposit, and every support message.
• Tokenised Payment Processing: Full card numbers and wallet credentials are never stored on 365pkt's servers. Payment data is handled by certified payment processor infrastructure using tokenisation, meaning only a reference token is stored on 365pkt's systems.
• Access Controls: Internal access to player personal data is restricted on a strict need-to-know basis. 365pkt staff cannot access full payment details, and access to sensitive account data is logged and audited.
• Two-Factor Authentication: 365pkt supports multi-factor authentication for player accounts. We recommend enabling this in account settings for an additional layer of protection.
• Penetration Testing: 365pkt conducts regular security assessments including penetration tests by qualified external parties to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that poses a risk to players, 365pkt has an incident response procedure that includes timely notification to affected players and, where required, regulatory authorities.

No security system is completely impenetrable. 365pkt is committed to continuous security improvement and to acting swiftly and transparently in the event that a security incident occurs.

365pkt retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by law. Specific retention periods are as follows:

• Active Account Data: Retained for the lifetime of your 365pkt account and for a period after account closure as required by applicable financial and gaming regulations — typically a minimum of five years from the date of the last transaction.
• KYC Verification Documents: Retained for the period required under applicable anti-money laundering regulations (minimum 5 years from the end of the business relationship), after which they are securely destroyed.
• Transaction Records: Financial records including all PKR deposits, withdrawals, and bet settlement records are retained for a minimum of 5 years for regulatory compliance purposes.
• Support Communications: Customer support chat logs and email correspondence are retained for up to 3 years after the last interaction for quality assurance and dispute resolution purposes.
• Marketing Preferences: Records of your consent (or withdrawal of consent) to marketing communications are retained for the duration of your account and for up to 1 year after account closure.
• Technical Logs: IP address logs and session data used for security and fraud detection are retained for up to 12 months.

After the applicable retention period, personal data is securely deleted or permanently anonymised. Anonymised data (which cannot be linked back to any individual) may be retained indefinitely for analytical and product improvement purposes.

You have meaningful rights over your personal data held by 365pkt. These rights can be exercised by contacting support@365pkt.app with a clear description of your request. 365pkt will respond within 30 days.

Certain rights are subject to limitations. For example, 365pkt cannot delete transaction records that are required to be retained under anti-money laundering regulations, even if you request deletion. In such cases, 365pkt will explain clearly which data can be deleted and which must be retained, and why.

365pkt may send you promotional emails, SMS messages, or in-platform notifications about offers, new games, bonuses, and platform updates — but only if you have opted in to receive them. We do not send unsolicited marketing to players who have not given explicit consent.

You can manage your marketing preferences at any time through the following methods:

• Account Settings: Log in to 365pkt, navigate to Account Settings, and adjust your communication preferences under "Notifications & Marketing".
• Email Unsubscribe: Every marketing email from 365pkt includes a clearly visible unsubscribe link at the bottom. Clicking it will remove you from all 365pkt marketing emails within 48 hours.
• SMS Opt-Out: Reply STOP to any 365pkt marketing SMS to be removed from SMS marketing immediately.
• Support Request: Email support@365pkt.app asking to be removed from all marketing communications. We will process this within 24 hours.

Opting out of marketing communications does not affect important transactional messages — such as deposit confirmations, withdrawal notifications, security alerts, or account verification requests. These messages are necessary for operating your 365pkt account and will continue regardless of marketing preferences.

365pkt reviews and updates this Privacy Policy periodically to reflect changes in platform operations, data practices, or applicable law. When material changes are made, 365pkt will notify registered players by email or through an in-platform notification. The "Last Updated" date at the top of this page reflects the most recent revision.

Continuing to use 365pkt after a Privacy Policy update has been published and communicated constitutes acceptance of the revised policy. If you disagree with any change, please stop using 365pkt and contact support to request account closure.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data at 365pkt, please get in touch:

All data rights requests submitted by email will be acknowledged within 72 hours and responded to in full within 30 calendar days. If additional time is required due to complexity, you will be notified within the initial 30-day period.