365pak Privacy Policy

365pak ("we", "our", or "us") operates the online casino and sports betting platform accessible at 365pak.org. We are committed to protecting the personal information of every registered player and website visitor in accordance with internationally recognised data protection principles.

This Privacy Policy sets out how 365pak collects, uses, stores, shares, and safeguards your personal data when you visit 365pak.org, register an account, make deposits or withdrawals, place bets, play casino games, or contact our support team. It also explains the rights you hold with respect to your personal data and how to exercise them.

By registering a 365pak account or continuing to use the platform after this Policy has been published, you acknowledge that you have read and understood its contents. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

365pak collects the following categories of personal data depending on how you interact with the platform:

Identity Data:

• Full legal name as it appears on your CNIC (Computerised National Identity Card) or passport;
• Date of birth (for mandatory age verification — all players must be 18 or over);
• CNIC number or passport number (collected during KYC verification);
• Scanned copies or photographs of identity documents where KYC is required.

Contact Data:

• Pakistani mobile telephone number (+92 format);
• Email address (where provided);
• Residential address (for KYC and withdrawal processing).

Financial Data:

• JazzCash and Easypaisa mobile wallet numbers;
• Bank account details (HBL, UBL, Meezan Bank, Bank Alfalah, or other supported institutions) for withdrawal processing;
• USDT wallet addresses where applicable;
• Transaction history: deposits, withdrawals, bonuses applied, and payment method records.

Gameplay & Betting Data:

• All bets placed on the 365pak sportsbook (cricket, PSL, T20, UFC, football, and other markets);
• All casino game sessions (slots, EVO Live tables, Cannon Fishing);
• Win/loss history, account balance movements, and session durations.

Technical & Usage Data:

• IP address and approximate geographic location derived from it;
• Device type, operating system, and browser information;
• Pages visited, features used, time spent on each section of the platform;
• Referral source (how you arrived at 365pak.org).

365pak collects personal data through the following means:

• Direct submission: Information you provide when completing account registration, submitting KYC documents, making deposits or withdrawal requests, or contacting customer support via live chat or email;
• Automated technologies: Data collected automatically when you access 365pak.org, including via cookies, server logs, and similar tracking technologies described in Section 7 of this Policy;
• Third-party payment providers: Transaction confirmation data received from JazzCash, Easypaisa, HBL, and other payment processors when you initiate a deposit or withdrawal;
• Identity verification services: Where 365pak uses third-party KYC or age verification providers, confirmation data from those services regarding the outcome of verification checks.

365pak processes your personal data for the following purposes:

• Account management: Creating and maintaining your 365pak account, verifying your identity and age, and administering your login credentials;
• Service delivery: Processing deposits and withdrawals, settling bets, awarding bonuses, and providing access to all platform products;
• Legal and regulatory compliance: Fulfilling obligations under applicable anti-money laundering (AML), Know Your Customer (KYC), and responsible gaming regulations, including age verification;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, account takeover attempts, bonus abuse, and other prohibited conduct;
• Customer support: Responding to your queries, complaints, and support requests submitted via live chat or email;
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling indicators and to administer player-requested tools including deposit limits, session reminders, and self-exclusion;
• Platform improvement: Analysing aggregated usage data to improve platform performance, game selection, and user experience;
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have not opted out — you may opt out at any time via your account settings.

365pak processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the contract between you and 365pak, including account administration, service delivery, and payment processing;
• Legal obligation: Processing required to comply with applicable anti-money laundering, age verification, and other regulatory obligations;
• Legitimate interests: Processing undertaken for the purpose of fraud prevention, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your data protection rights;
• Consent: Marketing communications and certain non-essential cookie processing, where your consent has been obtained and may be withdrawn at any time.

365pak does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following limited circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT infrastructure providers receive transaction data necessary to process deposits and withdrawals;
• Identity verification providers: Third-party KYC and age verification services receive identity document data to complete mandatory verification checks;
• Game content providers: Casino game providers (including Evolution Gaming for EVO Live tables) receive session data as necessary for game settlement and dispute resolution;
• Legal and regulatory authorities: 365pak will disclose personal data to law enforcement agencies, regulators, or courts where required by law, court order, or in connection with investigations into illegal activity;
• Professional advisers: Legal, audit, and compliance advisers may access personal data under strict confidentiality obligations where necessary for 365pak's legitimate business operations.

All third parties with whom 365pak shares personal data are required to maintain appropriate data security standards and to use the data only for the specific purpose for which it was disclosed.

365pak uses cookies and similar tracking technologies on 365pak.org for the following purposes:

• Strictly necessary cookies: Essential for platform operation, including maintaining your login session, preserving cart and balance states, and enabling security features. These cannot be disabled without impairing core functionality;
• Functional cookies: Remember your preferences such as language settings, game lobby filters, and display preferences to personalise your experience;
• Analytics cookies: Help us understand how players navigate 365pak.org, which pages are most visited, and where the platform can be improved. Data is collected in aggregated, anonymised form where possible;
• Session security cookies: Monitor sessions for unusual activity consistent with account takeover attempts or fraudulent access.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using core 365pak services, but may affect the personalisation of your experience. 365pak does not use cookies to track your activity on third-party websites unrelated to our platform.

365pak retains your personal data for as long as your account remains active and for a period of time thereafter as required by applicable law, regulatory obligation, or legitimate business purpose. Specifically:

• Account and transaction records are retained for a minimum of five (5) years following account closure to satisfy anti-money laundering and financial regulatory requirements;
• KYC documentation and identity verification records are retained for the period required by the licensing authority under which 365pak operates;
• Customer support correspondence is retained for up to three (3) years;
• Gaming and betting session logs are retained for up to two (2) years for dispute resolution and responsible gaming monitoring purposes;
• Technical and usage data collected via analytics is retained in aggregated form for up to twenty-four (24) months.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with 365pak's internal data destruction procedures.

365pak implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• All data transmitted between your device and 365pak.org is protected by TLS/SSL encryption (HTTPS);
• Account access is protected by password hashing using industry-standard algorithms — your plaintext password is never stored;
• Two-factor authentication (2FA) via SMS is available for all registered players and is strongly recommended;
• Player funds are held in segregated accounts, separate from 365pak operational funds;
• Internal access to personal data is restricted on a need-to-know basis; all staff with data access undergo regular security training;
• The platform undergoes periodic security reviews and vulnerability assessments.

No data transmission over the internet can be guaranteed as completely secure. While 365pak takes all reasonable steps to protect your data, we cannot provide an absolute guarantee of security against all possible threats. In the event of a data breach that poses a significant risk to affected individuals, 365pak will notify affected players and relevant authorities in accordance with applicable legal requirements.

Subject to applicable law and regulatory constraints, you hold the following rights with respect to your personal data held by 365pak:

• Right of access: You may request a copy of the personal data 365pak holds about you;
• Right to rectification: You may request correction of any inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 365pak's legal retention obligations;
• Right to restrict processing: You may request that 365pak restrict the processing of your personal data in certain circumstances;
• Right to data portability: Where processing is based on your consent or contractual necessity and carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format;
• Right to withdraw consent: Where processing is based on your consent (for example, marketing emails), you may withdraw that consent at any time via your account settings without affecting the lawfulness of prior processing;
• Right to object: You may object to processing based on legitimate interests, including for direct marketing purposes.

To exercise any of these rights, please contact the 365pak data team at [email protected]. We aim to respond to all valid requests within 30 days. 365pak may request verification of your identity before processing any data rights request.

365pak's platform is strictly for adults aged 18 years and over. We do not knowingly collect or process personal data from individuals under the age of 18. If 365pak becomes aware that a person under 18 has registered an account or provided personal data, the account will be immediately closed, all balances forfeited, and any personal data held deleted without delay.

Parents and guardians who believe a minor may have accessed or registered on 365pak are urged to contact us immediately at [email protected] so that the matter can be investigated and resolved promptly.

365pak may transfer personal data to third-party service providers and infrastructure partners located outside Pakistan, including but not limited to payment processors, game content providers, and cloud infrastructure services. Where such transfers occur, 365pak takes reasonable steps to ensure that appropriate safeguards are in place to protect your data, including contractual data processing agreements that bind recipient parties to standards consistent with those described in this Policy.

By using the 365pak platform, you acknowledge and consent to the transfer of your personal data to locations outside your country of residence where necessary for the provision of the Services.

365pak reserves the right to update or revise this Privacy Policy at any time. Where a material change is made, 365pak will notify registered players via the mobile number or email address associated with their account, or by displaying a prominent notice on the platform, prior to the change taking effect.

The date of the most recent revision is displayed at the top of this document. Your continued use of 365pak following the posting of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any revision, you must cease using the platform and may close your account by contacting our support team.

For questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 365pak, please contact our data team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the chat widget on 365pak.org
• Response target: Data rights requests: within 30 days. General privacy queries: within 5 business days.

For responsible gaming support, including self-exclusion requests and account limit tools, please visit our Responsible Gaming page.