365pkr Privacy Policy

1. Who We Are

365pkr ("we", "us", "our", "the Platform") operates the online sports betting and casino platform accessible at 365pkr.club. We are the data controller responsible for the personal information you provide when registering and using the 365pkr platform. This Privacy Policy applies to all users of 365pkr, including registered account holders and visitors who browse the platform without an account.

This Privacy Policy should be read alongside the Terms & Conditions and the Responsible Gaming policy, both of which are incorporated by reference.

2. Personal Data We Collect

2.1 Registration Data

When you create a 365pkr account, we collect the following information:

• Full legal name;
• Date of birth (to verify you are 18 or older);
• Pakistani mobile number (used as your primary login identifier and for OTP delivery);
• Username (if chosen at registration);
• Password (stored in hashed, non-reversible form – never in plain text).

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may collect:

• Copy of your CNIC (Computerised National Identity Card) or equivalent government-issued photo ID;
• Proof of address (utility bill, bank statement, or equivalent);
• Verification of payment method ownership (screenshot or confirmation from JazzCash, Easypaisa, or relevant bank);
• Selfie photograph for identity matching where required.

2.3 Financial Data

We collect transaction records associated with your 365pkr account, including deposit amounts, withdrawal amounts, payment method identifiers (e.g., last four digits of a JazzCash number or account name), and transaction timestamps. We do not store full payment credentials such as complete account numbers or PINs.

2.4 Gameplay and Activity Data

We collect records of your activity on the 365pkr platform, including games played, bets placed, bet amounts, outcomes, session durations, and login timestamps. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform analytics.

2.5 Technical and Device Data

We automatically collect technical data when you access 365pkr, including your IP address, device type and model, operating system version, browser type, and general geographic location derived from your IP address. This data is used for security monitoring, fraud detection, and platform performance optimisation.

3. How We Collect Your Data

365pkr collects your personal data through the following means:

• Directly from you – when you register an account, complete KYC, contact customer support, or update your account settings;
• Automatically – through cookies, server logs, and session tracking technologies when you access the platform;
• From payment processors – transaction confirmation data from JazzCash, Easypaisa, and bank payment gateways to reconcile deposits and withdrawals;
• From identity verification services – where 365pkr engages a third-party KYC provider to assist with document verification.

4. How We Use Your Personal Data

365pkr uses your personal data for the following purposes:

• Account management – creating, maintaining, and securing your 365pkr account;
• Identity and age verification – confirming you are at least 18 years of age and that the identity you have registered is genuine;
• Payment processing – facilitating deposits and withdrawals via JazzCash, Easypaisa, bank transfers, and USDT;
• Customer support – responding to queries, complaints, and account recovery requests;
• Fraud prevention and security – detecting, investigating, and preventing fraudulent activity, money laundering, and unauthorised account access;
• Responsible gaming – monitoring play patterns to identify signs of problem gambling and enforcing deposit limits, cooling-off periods, and self-exclusion requests;
• Regulatory compliance – meeting obligations under applicable international gaming regulations and anti-money laundering frameworks;
• Platform improvement – analysing aggregated, anonymised usage data to improve the 365pkr user experience;
• Marketing communications – sending promotional offers and bonus notifications to users who have opted in. You may opt out at any time via account settings or by contacting support.

5. Legal Basis for Processing

365pkr processes your personal data on the following legal bases:

• Contract performance – processing your registration data, transaction data, and gameplay data is necessary to deliver the services described in the Terms & Conditions;
• Legal obligation – KYC, age verification, and anti-money laundering data processing is required under applicable gaming regulations;
• Legitimate interests – fraud detection, security monitoring, and platform analytics are carried out in the legitimate interests of 365pkr and its users, where those interests are not overridden by your data protection rights;
• Consent – marketing communications are sent only where you have provided explicit opt-in consent, which may be withdrawn at any time.

6. Data Sharing with Third Parties

We share your personal data with third parties only in the following circumstances:

• Payment processors – JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT gateway providers receive the minimum data necessary to process your transactions;
• Identity verification providers – third-party KYC service providers engaged to assist with document verification receive identity documents solely for that purpose and are contractually bound to handle them securely;
• Game providers – providers such as PG Soft and Pragmatic Play receive session identifiers to facilitate game loading and result recording. No personally identifiable registration data is shared with game providers;
• Regulatory authorities – where 365pkr is legally required to disclose user data to a gaming regulator, anti-money laundering authority, or law enforcement body, we will comply with that obligation;
• Business transfers – in the event of a merger, acquisition, or sale of assets involving 365pkr, user data may be transferred to the successor entity, subject to the same privacy protections.

7. Cookies & Tracking Technologies

365pkr uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies we use include:

• Strictly necessary cookies – required for the platform to function, including session management and login state. These cannot be disabled;
• Functional cookies – remember your preferences such as language settings and responsible gaming tool configurations;
• Analytics cookies – used to collect anonymised, aggregated data about how users navigate the platform, helping us identify and fix usability issues;
• Security cookies – used to detect and prevent fraudulent access attempts and bot activity.

8. Data Retention

365pkr retains your personal data for the following periods:

• Account data – retained for the duration of your active account, plus a minimum of five (5) years following account closure, as required for regulatory and audit purposes;
• KYC documents – retained for a minimum of five (5) years from the date of verification, in accordance with applicable anti-money laundering regulations;
• Transaction records – retained for a minimum of five (5) years following the date of each transaction;
• Customer support records – retained for three (3) years following the resolution of each case;
• Marketing consent records – retained until you withdraw consent, plus a period sufficient to demonstrate that consent was obtained;
• Technical logs – retained for 12 months on a rolling basis unless extended for security investigation purposes.

Upon expiry of the applicable retention period, data is securely deleted or anonymised. Anonymised, aggregated data may be retained indefinitely for statistical analysis.

9. Data Security

365pkr implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 365pkr platform;
• Hashed, salted storage of all user passwords – plaintext passwords are never stored;
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their function;
• Regular security assessments and vulnerability monitoring;
• Two-factor authentication (SMS OTP) available to all registered users and required for certain high-risk account actions.

Notwithstanding these measures, no digital platform can guarantee absolute security. In the event of a data breach that poses a material risk to your rights, 365pkr will notify affected users and relevant authorities as required under applicable regulations.

10. Your Data Rights

As a 365pkr user, you have the following rights in relation to your personal data:

• Right of access – you may request a copy of the personal data 365pkr holds about you;
• Right to rectification – you may request correction of inaccurate or incomplete personal data;
• Right to erasure – you may request deletion of your personal data, subject to our legal retention obligations (KYC and transaction records must be retained for regulatory purposes and cannot be erased on request);
• Right to restriction – you may request that we restrict processing of your data in certain circumstances, such as where you contest its accuracy;
• Right to object – you may object to processing based on legitimate interests, including marketing communications;
• Right to withdraw consent – where processing is based on consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact 365pkr customer support via live chat or email. Requests will be acknowledged within five (5) business days and fulfilled within thirty (30) days, subject to identity verification.

11. Children's Privacy

The 365pkr platform is strictly intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a person under 18 has registered an account or provided personal data, we will immediately close the account, delete the associated data, and forfeiture any balances as required under our Responsible Gaming policy. If you believe a minor has accessed 365pkr using your or another adult's details, please contact support immediately via live chat.

12. International Data Transfers

365pkr may transfer your personal data to servers, processors, or service providers located outside Pakistan in connection with platform operations, payment processing, KYC verification, or cloud infrastructure. Where such transfers occur, 365pkr ensures that appropriate safeguards are in place to protect your data, including contractual data processing agreements with third-party processors that impose equivalent data protection obligations. By using the 365pkr platform, you consent to such international transfers subject to these safeguards.

13. Changes to This Privacy Policy

365pkr reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Material changes will be communicated to registered users via the mobile number or notification system associated with their account no less than seven (7) days before taking effect, where practicable. The "Last updated" date at the top of this policy will reflect the date of the most recent revision. Continued use of the 365pkr platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised policy.

14. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 365pkr, please contact us through the following channels:

• Live Chat: Available 24/7 within the 365pkr platform – the fastest route for urgent data requests;
• Email: [email protected] – for formal data access requests, deletion requests, or privacy complaints.

All privacy-related correspondence received by email will be acknowledged within five (5) business days. We are committed to resolving privacy concerns fairly and transparently.