Privacy Policy — 365pkr

365pkr ("we", "us", "our", "Platform") is committed to protecting the privacy of all users who access or interact with the Platform at https://365pkr.cam. This Privacy Policy ("Policy") sets out in formal, clear terms how we collect, use, store, share and protect personal data in connection with your use of the 365pkr Platform.

365pkr is an English-language online betting information and educational portal designed for Pakistani users, including those based in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. As such, personal data collected may include information that relates to users in Pakistan, and this Policy is written with that context in mind.

By accessing the Platform, registering an account or submitting any personal information, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your data as described herein. If you do not agree to the terms of this Policy, you must discontinue use of the Platform immediately.

This Policy should be read alongside the Terms & Conditions, which govern your overall use of the Platform and together form the complete legal framework applicable to your relationship with 365pkr.

For the purposes of this Privacy Policy, the following definitions apply consistently throughout the document:

365pkr collects personal data through several channels depending on how you interact with the Platform. The categories of data collected are described below:

3.1 Registration Data

When you create an account on the Platform, we collect the information you provide during registration, which may include:

• Full legal name
• Date of birth (for age verification purposes)
• Email address
• Mobile phone number
• Residential city or region (e.g., Karachi, Lahore, Islamabad)
• Username and password (passwords are stored in encrypted form)

3.2 Identity Verification (KYC) Data

To comply with legal and regulatory obligations — and to verify that users meet the minimum age and eligibility requirements — we may collect:

• Copy of a valid Computerised National Identity Card (CNIC) or international passport
• Proof of residential address (e.g., utility bill or bank statement)
• Selfie or liveness check image for identity confirmation

KYC documents are processed through a secure HTTPS interface only. You must never submit identity documents through unsecured channels, third-party messaging applications or unverified contact forms. We will never instruct you to alter, obscure or falsify any document.

3.3 Transaction Data

When you initiate deposits or withdrawals through the Platform, transaction-related data may be collected and retained. This may include transaction amounts in PKR, payment method category used, transaction timestamps and associated reference identifiers. Payment method brand names (such as Easypaisa, JazzCash, Raast, or banks including HBL, UBL, Meezan Bank and Bank Alfalah) are referenced in this Policy as contextual identifiers only and do not imply that these providers endorse or facilitate gambling.

3.4 Technical and Device Data

When you access the Platform, certain technical data is automatically collected through standard web technologies, including:

• IP address and approximate geographic location
• Browser type and version
• Operating system and device type (mobile, tablet, desktop)
• Pages visited and duration of visit
• Referring URL and exit page
• Session identifiers and cookie data

3.5 Communications Data

If you contact our support team via email, live chat or any other channel, we retain records of that correspondence, including the content of your messages, timestamps and any attachments shared, for the purpose of resolving your query and improving our service quality.

Personal data collected through the 365pkr Platform is processed for the following specific and legitimate purposes:

365pkr does not use personal data for automated decision-making that produces legal or similarly significant effects without appropriate human review and the opportunity for the User to contest the decision.

The processing of your personal data by 365pkr is conducted on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary to perform the contract formed when you register and accept these Terms — for example, operating your account, processing transactions and providing platform access.
• Legal Obligation: Processing is required to comply with applicable legal obligations, including KYC verification mandates, AML regulations and record retention requirements imposed by applicable law.
• Legitimate Interests: Processing is necessary for the legitimate interests pursued by 365pkr, including fraud prevention, platform security, technical operations and service improvement, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent as the legal basis — such as for optional marketing communications — you have the right to withdraw that consent at any time by contacting support at [email protected]. Withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal.

365pkr does not sell, rent or trade your personal data to third parties. We may share your data with carefully selected third parties only in the following circumstances and strictly to the extent necessary for the stated purpose:

6.1 Service Providers and Data Processors

We may share data with third-party service providers who process data on our behalf under a formal data processing agreement. These may include identity verification providers, cloud hosting providers, analytics platforms and customer support tooling. All such processors are contractually bound to process data only on our documented instructions and to maintain appropriate security standards.

6.2 Legal and Regulatory Authorities

We may disclose personal data to competent legal or regulatory authorities — including law enforcement — where we are required to do so by applicable law, a court order or other binding legal process. We will not voluntarily disclose your data beyond what is strictly required.

6.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring or sale of all or a portion of 365pkr's assets, personal data held by the Platform may be transferred to the acquiring entity. We will take reasonable steps to notify affected users of any such transfer and to ensure that your data continues to be protected under terms consistent with this Policy.

6.4 Fraud Prevention and AML

Where required by applicable Anti-Money Laundering obligations, fraud prevention frameworks or other regulatory requirements, 365pkr may share information with designated financial intelligence units, licensed operators or other entities forming part of a regulated compliance ecosystem.

365pkr uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit the Platform. They do not contain executable code and do not access other files on your device.

7.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function. These enable core features such as login sessions, security tokens and navigation. They cannot be disabled without impairing Platform functionality.
• Analytical / Performance Cookies: Used to collect anonymised data about how users interact with the Platform — including pages visited, time on page and click paths — to help us improve the user experience. Data collected via analytical cookies is aggregated and not linked to individual identities.
• Functional Cookies: Enable the Platform to remember your preferences, such as language settings or previously visited sections, to provide a more personalised experience on future visits.
• Third-Party Cookies: Some pages may include third-party scripts (for analytics or functionality) that place their own cookies. 365pkr does not control these cookies directly. Refer to the relevant third party's privacy documentation for details.

7.2 Managing Cookies

You may control cookie settings through your browser's preferences. Most browsers allow you to block or delete cookies; however, disabling strictly necessary cookies may prevent certain features of the Platform from functioning correctly. Instructions for managing cookies are available through your browser's help documentation.

By continuing to use the Platform after being notified of our cookie usage, you consent to the placement of cookies on your device in accordance with this Policy.

365pkr retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation.

• Account and registration data is retained for the duration of the active account relationship and for a defined period thereafter, in accordance with legal record-keeping requirements and dispute resolution needs.
• KYC and identity verification data is retained for the minimum period required by applicable AML and financial compliance regulations, which may exceed the duration of the account relationship.
• Transaction data is retained in accordance with applicable financial record-keeping obligations and internal audit requirements.
• Customer support communications are retained for a reasonable period following resolution of the relevant query to enable quality assurance and future dispute resolution.
• Analytical and technical data (in aggregated or anonymised form) may be retained indefinitely as it does not constitute personal data once anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. You may request early deletion of your data in accordance with your rights described in Section 10, subject to any overriding legal retention obligations.

365pkr implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include, but are not limited to:

• Transport Layer Security (TLS / 256-bit SSL) encryption for all data transmitted between your device and the Platform.
• Encrypted storage of passwords — passwords are never stored in plaintext.
• Access controls restricting personal data to authorised personnel only, on a need-to-know basis.
• Regular security assessments and vulnerability testing of the Platform infrastructure.
• Defined procedures for identifying, reporting and responding to personal data breaches.

While 365pkr takes security seriously and applies industry-standard protections, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. Users are responsible for maintaining the security of their own login credentials and for ensuring that devices used to access the Platform are adequately protected.

Subject to applicable law, you have the following rights with respect to your personal data held by 365pkr. To exercise any of these rights, submit a written request to [email protected] with sufficient identifying information to enable us to locate your records:

We will respond to substantiated data rights requests within a reasonable timeframe and will not charge a fee for handling standard requests unless they are manifestly unfounded or excessive. Where we are unable to comply with a request — for example due to a conflicting legal obligation — we will explain the reason in writing.

The 365pkr Platform is strictly intended for use by adults aged 18 years or older, or the higher minimum age required by the applicable Operator or license jurisdiction. We do not knowingly collect, process or retain personal data belonging to individuals below this age threshold.

If you are a parent or guardian and you believe that a minor in your care has provided personal data to 365pkr or has accessed the Platform in breach of our age policy, please contact us immediately at [email protected]. We will promptly investigate and, where confirmed, delete the relevant data and close the account.

Age verification through KYC is a mandatory step in the full registration process precisely to prevent underage access. If a User is found to have misrepresented their age during registration, their account will be terminated immediately in accordance with our Terms & Conditions.

As a platform serving Pakistani users, 365pkr acknowledges the following contextual considerations specific to data privacy in Pakistan:

12.1 Local Data Protection Environment

Pakistan's data protection landscape continues to evolve. The Personal Data Protection Bill (PDPB), once enacted, will establish a formal framework for data controllers operating in or targeting Pakistani users. In the interim, 365pkr commits to handling personal data in a manner consistent with internationally recognised privacy principles — including purpose limitation, data minimisation, accuracy, storage limitation and integrity — regardless of the specific regulatory framework in effect at any given time.

12.2 Payment Data and Pakistani Financial Rails

Where transaction data is associated with Pakistani payment rails (such as references to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah), such data is processed solely for transaction record-keeping, fraud prevention and AML compliance. The inclusion of these payment method references does not imply that these providers endorse gambling or are affiliated with 365pkr.

12.3 Cross-Border Data Transfers

Your personal data may be transferred to and processed in countries outside Pakistan where 365pkr's infrastructure, service providers or operators are located. Where such transfers occur, we take appropriate steps to ensure that your data receives a level of protection consistent with this Policy, including through contractual safeguards with data processors.

12.4 Legal Status of Gambling

Nothing in this Privacy Policy, or anywhere on the 365pkr Platform, constitutes legal advice regarding the legality of online gambling in Pakistan. Pakistan has gambling restrictions under the Prevention of Gambling Act, 1977. Users are solely responsible for assessing their legal obligations under applicable local law before participating in any gambling activity.

365pkr reserves the right to amend, update or replace this Privacy Policy at any time. Material changes — those that significantly affect how your personal data is processed, your rights or our obligations — will be notified to users by prominent notice on the Platform homepage and, where practical, by email to your registered address.

The "Last Updated" date displayed at the top of this document will be revised each time the Policy is modified. Minor changes (such as typographical corrections, clarifications or reformatting that do not alter the substance of the Policy) may be made without separate notification but will be reflected in the updated document.

Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must discontinue use of the Platform and may submit an account closure request to [email protected].

If you have any questions, concerns or requests in connection with this Privacy Policy — including requests to exercise your data subject rights — please contact the 365pkr privacy team through the following channel:

Please include your registered email address and a clear description of your request or concern. For data rights requests (access, rectification, erasure, portability), please also indicate which specific right you wish to exercise and the data categories to which your request relates. Adequate identification may be required before we process sensitive requests.

All correspondence relating to formal data privacy complaints should be marked clearly in the subject line to ensure prompt escalation to the appropriate team member.