Privacy Policy

This Privacy Policy ("Policy") describes how 365pkt ("we", "us", "our", "the Platform") collects, uses, stores, discloses and protects the personal data of individuals ("you", "your", "User") who access the 365pkt website at https://365pkt.cam and use the associated services, including the sportsbook, casino, live betting, account management and customer support (collectively, the "Services").

365pkt takes the privacy and security of your personal data seriously. We process personal data only for legitimate, defined purposes and in accordance with the data protection obligations applicable to the operator's licence jurisdiction. Where Pakistani data-protection norms are relevant, we give due regard to them, though we note that 365pkt is not an entity licensed under Pakistani law.

By creating an account or otherwise using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you should not create an account or use the Services. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy.

In this Policy, the following terms carry the meanings set out below:

365pkt collects personal data only where it is necessary for a defined, legitimate purpose. The categories of personal data we may collect include:

3.1 Registration & Account Data

• Full legal name and date of birth;
• Residential address, including city (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar) and postal code;
• Email address and, where provided, mobile phone number;
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents, such as a Pakistani National Identity Card (CNIC), passport or driving licence;
• Proof of address documents, such as a utility bill or bank statement;
• Proof of payment method ownership, which may include screenshots or statements from services such as Easypaisa, JazzCash, Raast or accounts held with HBL, UBL, Meezan Bank or Bank Alfalah. These references are for identity context only and do not imply endorsement of 365pkt by any payment provider.

3.3 Financial Transaction Data

• Deposit and withdrawal amounts, dates and reference numbers;
• Payment method identifiers (e.g., partial account numbers, wallet IDs);
• Account balance history in PKR.

3.4 Betting & Gaming Activity Data

• Bet history, stakes, odds accepted and outcomes across all sportsbook and casino products;
• Session activity logs, including login timestamps and session durations;
• Responsible gambling tool settings, including any deposit, loss or time limits you have applied.

3.5 Technical & Device Data

• IP address and approximate geographic location derived from it;
• Browser type and version, operating system and device type;
• Cookie identifiers and similar tracking technologies (see Section 8).

3.6 Communications Data

• Records of correspondence between you and 365pkt support, including live chat transcripts and email exchanges;
• Marketing communication preferences and opt-in/opt-out records.

We collect personal data through the following channels:

• Directly from you: when you register an account, complete KYC verification, make deposits or withdrawals, place bets, contact support, respond to surveys, or update your account settings;
• Automatically through the Platform: via cookies, server logs and similar technologies when you browse the site or use the Services (see Section 8);
• From third-party verification providers: identity and age verification services may return data to us confirming the validity of documents you have submitted;
• From fraud prevention and AML services: we may receive risk-scoring and fraud-indicator data from specialist third-party providers as part of our compliance obligations;
• From payment processors: transaction confirmation and status updates in connection with your deposits and withdrawals.

We do not purchase personal data lists from data brokers or third-party marketing companies, and we do not collect data from your social media profiles without your explicit consent.

365pkt processes your personal data on the following legal bases, depending on the nature of the processing activity:

We use the personal data we collect for the following purposes:

• Account management: To register, maintain and secure your 365pkt account, and to verify your identity and eligibility to use the Services;
• Service delivery: To process your bets across cricket, PSL, ICC tournaments, football, UFC and all other markets; to operate casino and live dealer products; and to process deposits and withdrawals in PKR;
• KYC and compliance: To fulfil our obligations under the operator's licence, including age verification, identity checks and anti-money laundering screening;
• Responsible gambling: To monitor betting patterns for indicators of problem gambling and to facilitate self-exclusion, deposit limits and other player-protection tools you have activated;
• Customer support: To respond to your queries, complaints and requests efficiently through live chat, email and, where available, Urdu-language support during peak Pakistan Time (PKT) hours;
• Security and fraud prevention: To detect and prevent fraudulent transactions, account takeovers, collusion and other prohibited conduct described in our Terms & Conditions;
• Marketing (with consent): To send you relevant promotional communications about bonuses, new products and seasonal offers. You can opt out at any time;
• Platform improvement: To analyse usage patterns and improve the functionality, performance and content of the Platform;
• Legal compliance: To comply with applicable laws, court orders or requests from competent regulatory authorities.

We do not use your personal data to make solely automated decisions that produce significant legal effects on you, without providing a means for human review on request.

365pkt does not sell your personal data. We may share it only in the following limited circumstances:

• Service providers and data processors: Third-party companies engaged to support our operations — including KYC verification providers, payment processors, fraud-detection services, IT infrastructure providers and customer support platforms — receive only the minimum data necessary to perform their contracted functions, under binding data processing agreements;
• Regulatory and legal authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, courts or other authorities where required by applicable law, a valid court order or our licence obligations, including for AML and counter-fraud reporting;
• Industry fraud prevention bodies: Where we identify fraudulent activity, we may share relevant data with other operators or recognised industry fraud-prevention organisations to protect the integrity of the betting and gaming sector;
• Business transfers: In the event of a merger, acquisition, restructuring or sale of the 365pkt business or its assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy;
• With your consent: We may share your data with third parties for any other purpose where you have given explicit, informed consent.

365pkt uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences and gather analytical data about how users interact with the Services. The cookies we use fall into the following categories:

You can manage your cookie preferences through the cookie consent banner displayed on your first visit to the Platform, or at any time through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from accessing your account.

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our licence obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account and for a minimum period after closure as required by the operator's licence jurisdiction (typically five years or more for AML purposes);
• Transaction and betting records: Retained for a minimum of five years from the date of the transaction or bet, in line with standard financial record-keeping requirements;
• KYC documents: Retained for the period required by the operator's licence, generally a minimum of five years from account closure or the last transaction;
• Customer support communications: Retained for up to three years from the date of the communication, or longer where relevant to an ongoing complaint or legal matter;
• Marketing consent records: Retained for as long as we hold your account, to maintain an accurate record of your marketing preferences.

After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to you. Where data is anonymised rather than deleted, it may be retained indefinitely for statistical and research purposes.

365pkt implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure or destruction. These measures include:

• HTTPS/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive stored data, including passwords (which are hashed and salted) and payment identifiers;
• Role-based access controls that restrict access to personal data to authorised personnel with a genuine need to process it;
• Regular security assessments and penetration testing of Platform infrastructure;
• Incident response procedures that enable us to detect, contain and report data security breaches in a timely manner.

While we take all reasonable steps to protect your data, no online platform can guarantee absolute security. You also play an important role in keeping your account secure — please use a strong, unique password, do not share your credentials, and contact us immediately if you suspect unauthorised access to your account.

Subject to applicable law and certain exceptions, you have the following rights in respect of the personal data 365pkt holds about you:

To exercise any of these rights, please contact our support team at [email protected] (plain text only — not a clickable link). We will acknowledge your request within 72 hours and respond substantively within 30 days. In complex cases, we may extend this period by a further 60 days, in which case we will inform you of the extension and the reasons for it.

We may need to verify your identity before processing a data rights request, in order to protect your data from unauthorised access. We will not charge a fee for reasonable requests, but may charge a reasonable administrative fee for manifestly unfounded or excessive requests.

365pkt is strictly an adults-only platform. The Services are not directed at, and must not be used by, any person under the age of 18, or the higher minimum age required by the applicable operator licence jurisdiction. We do not knowingly collect personal data from minors.

If we become aware that we have inadvertently collected personal data from a person under the minimum eligible age, we will take immediate steps to delete that data and close the associated account. Any winnings accumulated by a user found to be underage may be withheld.

If you believe that a minor has registered an account on the Platform, please contact us immediately at [email protected] (plain text — not a clickable link) so that we can investigate and take appropriate action.

As an international online platform, 365pkt and its service providers may process and store your personal data on servers located outside Pakistan. Where personal data is transferred to a jurisdiction that does not offer an equivalent level of data protection to that required by the applicable licence jurisdiction's law, we implement appropriate safeguards, which may include:

• Standard contractual clauses approved by the relevant data protection authority;
• Binding corporate rules applicable to intra-group transfers;
• Other transfer mechanisms recognised as adequate by the applicable supervisory authority.

By using the Services, you acknowledge that your personal data may be transferred to and processed in countries outside Pakistan. We take reasonable steps to ensure that any such transfers are conducted in a manner that protects your data in accordance with this Policy.

365pkt reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the operator's licence requirements. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users by email or by a prominent notice on the Platform.

We encourage you to review this Policy periodically so that you remain informed about how we protect your personal data. Your continued use of the Services after the posting of an updated Policy constitutes your acceptance of those changes.

If you have any concerns about a change to this Policy, please contact our support team before continuing to use the Services.

If you have any questions, concerns or requests relating to this Privacy Policy or the way 365pkt handles your personal data, please reach out to our support team using the details below. All contact details are provided as plain text — they are not clickable links:

• Support Email: [email protected]
• Live Chat: Available 24/7 through the Platform
• Urdu-Language Support: Available during peak Pakistan Time (PKT) hours via live chat
• Email Response Time: Within 24 hours of receipt; data rights requests within 30 days

When submitting a data rights request, please include your registered username, the email address associated with your account, and a clear description of your request. We may ask you to verify your identity before processing the request.