365pkr
Privacy Policy

1.1 For the purposes of applicable data protection law, the data controller responsible for the personal information collected through the 365pkr Platform is 365pkr, operating under an internationally recognised gaming licence.

1.2 As data controller, 365pkr determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable law and the obligations of our gaming licence.

1.3 365pkr is committed to maintaining the highest practicable standards of data protection for our players across Pakistan — including players in Karachi, Lahore, Islamabad, Faisalabad, and all other cities and regions from which we receive players.

1.4 If you have any questions about this Policy or about how 365pkr processes your personal data, please contact our support team using the contact details in Section 16 of this Policy.

2.1 This Policy applies to all personal data collected, processed, and stored by 365pkr in connection with the operation of the Platform, including data collected during account registration, gameplay, financial transactions, customer support interactions, and marketing communications.

2.2 This Policy applies to all Players and visitors to 365pkr.site, regardless of the device, browser, or network used to access the Platform.

2.3 This Policy does not apply to third-party websites or services that may be referenced within the Platform. 365pkr is not responsible for the privacy practices of third-party service providers, and Players should review the privacy policies of any third-party service with which they interact.

3.1 365pkr collects personal data from Players at various points throughout the account lifecycle. The categories of data collected and the circumstances in which each is collected are described in the table below:

3.2 365pkr does not collect or process special categories of sensitive personal data (such as health data, religious beliefs, or political opinions) unless such data is voluntarily disclosed by a Player in the context of a responsible gaming request (for example, disclosing a medical diagnosis in connection with a self-exclusion request). Where such data is received, it is processed only for the purpose for which it was disclosed and is not retained beyond that purpose.

3.3 The provision of certain personal data (such as identity and contact information at registration) is mandatory for the creation and maintenance of a 365pkr account. Failure to provide mandatory data means that 365pkr cannot provide its services to that individual.

4.1 365pkr uses personal data collected from Players for the following purposes:

• Account creation and management: To register, maintain, and administer your 365pkr account, including processing your login credentials and account preferences.
• Identity and age verification (KYC): To verify that you are who you say you are, that you are at least 21 years of age, and that the payment methods you use are legitimately in your name — as required by our gaming licence obligations.
• Payment processing: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, Raast, 1LINK, and supported Pakistani bank transfers, and to maintain accurate transaction records.
• Delivering Gaming Services: To provide access to casino games, sports betting markets (including PSL cricket, UFC, and other sports), bingo rooms, and all other Platform features available to registered 365pkr players.
• Bonus and promotion administration: To credit, track, and settle bonus balances, free spin allocations, wagering progress, and promotional rewards in accordance with applicable bonus terms.
• Customer support: To respond to your queries, complaints, and requests submitted through live chat or email, and to maintain records of support interactions for quality and compliance purposes.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multiple-account creation, and other prohibited conduct — as required by our licence and by law.
• Responsible gaming: To monitor gaming behaviour for signs of problem gambling, to apply and enforce player-requested responsible gaming controls, and to fulfil our mandatory responsible gaming obligations under the gaming licence.
• Regulatory compliance: To comply with the requirements of our international gaming licence, anti-money laundering (AML) regulations, reporting obligations to licensing authorities, and any other applicable legal requirements.
• Platform improvement: To analyse usage data and gaming patterns (in aggregate and anonymised form where possible) to improve the Platform's features, performance, and user experience for Pakistani players.
• Marketing communications: To send promotional emails, SMS messages, and platform notifications about bonuses, new games, and special offers — where you have consented to receive such communications (see Section 13).

4.2 365pkr does not use personal data for automated decision-making that produces significant legal effects on Players, except in the context of anti-fraud and AML screening — where automated tools may flag an account for review, but all significant decisions are reviewed by a human member of the 365pkr compliance team.

5.1 365pkr processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil 365pkr's obligations under the Terms & Conditions — including account management, payment processing, and delivery of Gaming Services.
• Legal obligation: Processing required to comply with gaming licence conditions, AML regulations, KYC obligations, and any directions from regulatory or licensing authorities.
• Legitimate interests: Processing carried out for 365pkr's legitimate business interests — including fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring — where these interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications (email, SMS, platform notifications) where your explicit consent has been obtained. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6.1 365pkr uses cookies and similar tracking technologies on the Platform to support its functionality, improve user experience, and collect analytical data about Platform usage. The categories of cookies used are as follows:

• Strictly necessary cookies: Essential for the Platform to function — including session authentication cookies that keep you logged in to your 365pkr account. These cannot be disabled without breaking core Platform functionality.
• Performance and analytics cookies: Used to collect anonymised information about how Players navigate the Platform — which pages are most visited, where navigation issues occur, and how features are used. This data is used solely to improve Platform performance.
• Functional cookies: Used to remember your Platform preferences — such as language settings, game lobby sort order, and notification preferences — to provide a personalised experience across sessions.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorised login attempts, and other security threats, including flagging unusual login locations or device changes.

6.2 365pkr does not use third-party advertising cookies or permit third-party advertising networks to place cookies on the Platform for the purpose of serving targeted advertising to Players.

6.3 Most browsers allow you to control cookie settings, including blocking or deleting cookies. However, disabling strictly necessary cookies will prevent you from logging into your 365pkr account and accessing Platform features. Detailed cookie management instructions are available in the settings menu of your browser.

7.1 365pkr may share personal data with the following categories of third party, strictly for the purposes described:

• Payment service providers: JazzCash, EasyPaisa, Raast, 1LINK, and Pakistani commercial banks (HBL, UBL, Meezan Bank) — for the purpose of processing deposits and withdrawals. Only transaction-relevant data (name, account number, amount) is shared.
• KYC and identity verification providers: Third-party identity verification services engaged to assist with age verification, document authentication, and AML screening. These providers are contractually bound to process data solely for verification purposes.
• Game software providers: Regulated game studios (such as Pragmatic Play and similar providers) whose games are delivered through the Platform. Technical session data may be shared to support game delivery and integrity. No financial or identity data beyond a pseudonymous player ID is shared with game studios.
• Regulatory and licensing authorities: The gaming licence authority and any other competent regulatory body — where disclosure is required by law, by the terms of the gaming licence, or by a valid legal order.
• Law enforcement: Police, financial intelligence units, and other law enforcement agencies — where 365pkr is legally obligated to report suspicious activity or respond to a valid legal request.
• Professional advisers: Legal counsel, auditors, and accountants engaged by 365pkr in connection with its business operations — subject to confidentiality obligations.

7.2 In the event that 365pkr's business is acquired, merged, or restructured, Player data may be transferred to the acquiring entity as part of that transaction, subject to the same data protection commitments set out in this Policy.

8.1 As an online gaming platform operating under an international gaming licence, 365pkr's data processing operations involve the transfer of personal data to countries outside Pakistan. This may include transfers to countries where the gaming licence is issued, or where our technology infrastructure, KYC providers, or game studio partners are based.

8.2 Where personal data is transferred internationally, 365pkr implements appropriate safeguards to ensure that your data receives a level of protection equivalent to that provided under applicable data protection standards — including contractual data processing agreements with all data recipients that impose obligations equivalent to those in this Policy.

8.3 By creating a 365pkr account and using the Platform, you acknowledge that your personal data may be transferred, stored, and processed in countries outside Pakistan in connection with the delivery of the Platform's services.

9.1 365pkr implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 365pkr Platform.
• Encrypted at-rest storage for all personal and financial data held on 365pkr's servers.
• Access controls and authentication limiting internal access to personal data to authorised personnel on a need-to-know basis, with multi-factor authentication required for system access.
• Intrusion detection and monitoring systems that identify and respond to anomalous access patterns or potential security incidents in real time.
• Regular penetration testing conducted by independent security specialists to identify and remediate vulnerabilities before they can be exploited.
• Incident response procedures that ensure any data breach affecting Player data is identified, contained, and — where required — reported to relevant authorities within required timeframes.

9.2 Notwithstanding these measures, no internet-based system is entirely free from risk of interception or attack. 365pkr cannot guarantee absolute data security, and Players are responsible for maintaining the security of their own account credentials, device security, and network environment.

9.3 In the event of a data breach that poses a significant risk to Players' personal data, 365pkr will notify affected Players without undue delay and provide information about the nature of the breach, the data affected, and the steps being taken to address it.

10.1 365pkr retains personal data for the minimum period necessary for the purpose for which it was collected, and thereafter for such period as is required by our gaming licence, financial regulations, and applicable law. The following retention periods apply:

• Active account data: Retained for the duration of the active account relationship.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by AML regulations applicable to the gaming licence jurisdiction.
• KYC verification documents: Retained for a minimum of five (5) years from account closure, as required by gaming licence KYC obligations.
• Gaming history and bet records: Retained for a minimum of three (3) years from account closure for dispute resolution and regulatory audit purposes.
• Customer support records: Retained for two (2) years from the date of the interaction, to support follow-up queries and dispute resolution.
• Self-exclusion records: Retained indefinitely to prevent a self-excluded Player from re-registering in violation of their self-exclusion request.
• Marketing consent records: Retained for the duration of the consent, and for one (1) year after withdrawal, to demonstrate compliance.

10.2 At the expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be attributed to any individual Player.

11.1 Subject to applicable law and the specific circumstances of each request, 365pkr Players have the following rights in relation to their personal data:

• Right of access: You may request a copy of the personal data that 365pkr holds about you. We will provide this in a structured, commonly used format within 30 days of receipt of a valid request.
• Right to rectification: If any personal data held by 365pkr is inaccurate or incomplete, you may request that it be corrected. Many data fields can be updated directly from your account settings; others require support team assistance.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where consent has been withdrawn, or where there is no other legitimate basis for processing. Note that this right is subject to regulatory retention requirements — 365pkr cannot delete financial and KYC records that are required to be retained under gaming licence or AML obligations.
• Right to restrict processing: You may request that 365pkr restrict the processing of your personal data in certain circumstances — for example, where you dispute the accuracy of data, or where processing is unlawful but you prefer restriction over deletion.
• Right to data portability: Where processing is based on your consent or the performance of a contract, you may request that your personal data be provided to you, or transferred to another controller, in a machine-readable format.
• Right to object: You may object to the processing of your personal data where processing is based on legitimate interests or where data is used for direct marketing. Objections to direct marketing will be honoured immediately.
• Right to withdraw consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

11.2 To exercise any of the above rights, please contact the 365pkr support team via live chat or by email at the address provided in Section 16. Requests should identify the specific right being exercised and provide sufficient information to allow 365pkr to verify your identity before processing the request.

11.3 365pkr will respond to all rights requests within thirty (30) days. In exceptional cases of complexity or volume, this period may be extended by a further thirty (30) days, in which case you will be notified of the extension and its reason within the initial thirty-day period.

12.1 The 365pkr Platform is strictly intended for adult players aged 21 years and above. 365pkr does not knowingly collect personal data from any individual under the age of 21.

12.2 Age verification is a mandatory requirement of the account registration process. By registering, each Player represents that they are at least 21 years of age. 365pkr reserves the right to request documentary proof of age at any stage and will close, without notice, any account found to belong to a person under 21.

12.3 If 365pkr becomes aware that personal data has been collected from a person under 21 years of age — whether through age verification, a report from a third party, or any other means — all data associated with that account will be permanently deleted and the account closed immediately.

12.4 If you believe that 365pkr may have inadvertently collected data from a person under the age of 21, please contact the support team immediately via live chat or email so that appropriate action can be taken without delay.

13.1 365pkr may send marketing communications — including promotional emails, SMS messages to your registered Pakistani mobile number, and in-platform notifications — about bonuses, new game launches, special events, and other 365pkr offerings.

13.2 Marketing communications are sent only where you have provided your explicit consent to receive them during registration or subsequently through your account notification settings.

13.3 You may opt out of marketing communications at any time by:

• Using the "unsubscribe" link included in every marketing email sent by 365pkr;
• Updating your notification preferences in your 365pkr account settings;
• Contacting the 365pkr support team and requesting that marketing communications be discontinued.

13.4 Opting out of marketing communications does not affect the receipt of transactional communications — such as deposit confirmations, withdrawal notifications, security alerts, account updates, and responsible gaming communications — which are sent as part of the account relationship and cannot be disabled while your account is active.

13.5 365pkr does not share your contact information with third-party marketers. All marketing communications originate directly from 365pkr or from technology platforms engaged by 365pkr to facilitate delivery, under appropriate data processing agreements.

14.1 The 365pkr Platform may contain references to or integrations with third-party services — such as payment providers (JazzCash, EasyPaisa), game studios, and identity verification services. These third-party services operate under their own privacy policies, which 365pkr does not control.

14.2 Where you interact with a third-party service in connection with your use of the 365pkr Platform (for example, authorising a JazzCash payment), the data you submit to that third party is governed by its own privacy policy and not by this 365pkr Privacy Policy.

14.3 365pkr is not responsible for the privacy practices of any third-party services and makes no warranties regarding the security or appropriateness of third-party data handling. Players are encouraged to review the privacy policies of any third-party service with which they interact.

15.1 365pkr reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, legal requirements, gaming licence obligations, or business operations.

15.2 Where changes are material — meaning they significantly affect the way in which 365pkr processes your personal data — 365pkr will notify all registered Players by email to their registered address, with a minimum of fourteen (14) days' notice before the revised Policy takes effect.

15.3 Where changes are non-material — such as typographical corrections or clarifications that do not alter the substance of data processing — 365pkr may update the Policy without prior notice, but will update the effective date displayed in the Policy header.

15.4 Your continued use of the 365pkr Platform following the effective date of any Policy amendment constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must contact 365pkr to close your account before the effective date of the change.

16.1 For any questions, requests, or concerns regarding this Privacy Policy or 365pkr's data processing practices, please contact the 365pkr support team:

• Live Chat: Available 24 hours a day, 7 days a week, directly within your 365pkr account dashboard. Recommended for all time-sensitive privacy requests.
• Email: [email protected] — responses are provided within two (2) business days for standard privacy queries. Data rights requests (Section 11) are processed within thirty (30) days.

16.2 If you believe that 365pkr has processed your personal data in a manner that violates applicable data protection law, you have the right to lodge a complaint with the data protection supervisory authority in the jurisdiction relevant to the alleged infringement. 365pkr encourages Players to contact the support team first to allow any issue to be resolved promptly and directly.

16.3 When submitting a privacy complaint or rights request, please include: your registered 365pkr account username, a description of your concern or the right you are exercising, your preferred contact method for our response, and any supporting information relevant to your request. This helps the 365pkr privacy team respond efficiently and accurately.