365pak Privacy Policy

This Privacy Policy is issued by 365pak ("365pak", "we", "us", or "our"), the operator of the online betting and casino platform accessible at https://365pak.bet. 365pak acts as the data controller in respect of all personal data collected through this platform.

365pak operates under an international gaming licence and serves registered players across Pakistan, including in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and all other cities and regions. Our platform offers sports betting, live casino games, slots, and related entertainment services to eligible adult users aged 21 and above.

If you have any questions about how 365pak processes your personal data, you may contact our Data Protection team at [email protected] at any time.

365pak collects personal data that you provide directly to us, data generated by your use of the platform, and data received from third-party service providers where permitted. The following table summarises the categories of personal data we collect:

We do not collect or store full payment card numbers. Where card payments are processed, they are handled entirely by our PCI-DSS compliant payment processor, and 365pak receives only a tokenised reference. We do not collect special categories of sensitive personal data (such as health data, biometric data, or political opinions) unless you voluntarily disclose such information during a responsible gaming assessment.

365pak collects personal data through the following channels:

• Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or respond to a promotion, you provide data directly to us.
• Automated collection: As you use the 365pak platform, we automatically collect technical and behavioural data via server logs, cookies, and similar tracking technologies embedded in our web interface. This includes page views, click events, session durations, and bet placement patterns.
• Payment processors: When you transact via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, Visa, or Mastercard, the relevant payment provider shares transaction confirmation data with 365pak sufficient to credit your account and maintain accurate financial records.
• Identity verification services: 365pak may use third-party identity verification providers to cross-reference the CNIC details you submit during KYC. These providers return a verification result to 365pak — they do not retain your documents on our behalf.
• Fraud detection tools: We use third-party fraud detection and device fingerprinting services that collect technical signals from your device to help identify suspicious activity. This data is processed under contract and subject to strict confidentiality obligations.

365pak uses the personal data we collect for the following specific purposes:

• Account creation and management: To register your player account, verify your identity, and manage your ongoing relationship with 365pak as a registered player.
• Transaction processing: To process deposits and withdrawals accurately and securely through your chosen Pakistani payment method.
• KYC and AML compliance: To meet our obligations under applicable anti-money laundering regulations, including verifying your identity, confirming your age (21+), and monitoring transaction patterns for suspicious activity.
• Platform delivery and personalisation: To operate the betting and casino platform, deliver live odds, process bet settlements, and — where you have consented — to personalise your experience based on your game preferences and betting history.
• Customer support: To respond to your queries, resolve disputes, and manage complaints in accordance with our Terms and Conditions.
• Responsible gaming: To monitor your account for signs of problem gambling behaviour, apply self-imposed limits and exclusions, and fulfil our duty of care obligations as a licensed operator. Visit our Responsible Gaming page for more detail.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, money laundering, and other prohibited conduct.
• Legal and regulatory obligations: To comply with court orders, regulatory requests, licensing conditions, and applicable law.
• Marketing communications: To send you promotional offers, bonuses, and platform news — but only where you have given your explicit consent. You may opt out at any time.
• Platform improvement: To analyse aggregate usage data, identify bugs, improve the user interface, and enhance the overall player experience on the 365pak platform.

365pak processes your personal data under one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing required to fulfil the player account agreement — including account management, transaction processing, bet settlement, and customer support — is necessary for the performance of our contract with you.
• Legal obligation: Processing required to comply with applicable regulations, including KYC/AML obligations, age verification (21+), responsible gaming mandates, and responses to lawful regulatory requests.
• Legitimate interests: Processing carried out in the legitimate interests of 365pak — including fraud detection, platform security, internal analytics, and responsible gaming monitoring — where such interests are not overridden by your rights and freedoms.
• Consent: Marketing communications and certain personalisation features are processed only where you have given clear, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

365pak does not sell your personal data. We share data only in the following limited circumstances, and always under contractual protections:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, Visa, and Mastercard receive the minimum data necessary to process your transactions. Each processor is bound by their own privacy and security standards.
• Identity verification providers: Third-party KYC service providers receive your identity data solely for the purpose of verifying your CNIC and confirming your eligibility to hold a 365pak account.
• Game content providers: Software providers such as Evolution and Pragmatic Play receive your account session data necessary to operate their games on our platform. These providers are bound by our data processing agreements.
• Fraud and security services: Third-party fraud detection providers process limited technical data (such as device fingerprints and IP addresses) under strict confidentiality contracts.
• Regulatory and law enforcement authorities: 365pak will disclose personal data to regulatory bodies, law enforcement agencies, or courts where required by law, court order, or our licensing obligations. We will notify affected players where we are legally permitted to do so.
• Professional advisers: Our legal, accounting, and auditing advisers may access personal data on a strictly need-to-know basis and are bound by professional and contractual confidentiality obligations.

365pak uses cookies and similar tracking technologies to operate and improve our platform. Cookies are small text files stored on your device when you visit the 365pak website. We use the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session management cookies, authentication tokens, and security cookies. They cannot be disabled without impairing core platform functionality.
• Functional cookies: These remember your preferences — such as your preferred language, display settings, and login status — to provide a more personalised experience on subsequent visits.
• Analytics cookies: We use first-party analytics to understand how players navigate the 365pak platform, which pages are most visited, and where technical issues arise. This data is aggregated and does not identify individual users.
• Responsible gaming cookies: These cookies track session duration and prompt responsible gaming reality checks where you have enabled this feature in your account settings.

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in or using core platform features. 365pak does not use third-party advertising cookies or social media tracking pixels.

365pak retains personal data for as long as necessary to fulfil the purposes for which it was collected, and for such additional periods as required by our regulatory and legal obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual player. Self-exclusion records are retained for a minimum of 7 years to prevent re-registration by excluded players.

365pak implements a layered approach to data security to protect your personal information against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

• Encryption in transit: All data transmitted between your device and the 365pak platform is encrypted using TLS 1.2 or higher. We enforce HTTPS across the entire platform.
• Encryption at rest: Sensitive personal data stored in our databases — including CNIC references, financial records, and KYC documents — is encrypted at rest using industry-standard AES-256 encryption.
• Access controls: Internal access to personal data is governed by role-based access controls. Only staff with a legitimate operational need may access player data, and all access is logged and auditable.
• Two-factor authentication: 365pak offers two-factor authentication (2FA) for player accounts and requires it for all internal staff accessing administrative systems.
• Penetration testing: Our platform undergoes periodic security assessments by independent third-party security professionals.
• Incident response: In the event of a data breach that poses a risk to affected players, 365pak will notify affected individuals and, where required, the relevant regulatory authority within the timeframes stipulated by applicable law.

As a 365pak player, you hold the following rights in respect of the personal data we hold about you. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request — [Your Account ID]".

• Right of access: You may request a copy of all personal data 365pak holds about you. We will provide this within 30 days of a verified request.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct it. Basic account details can be updated directly via your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations (such as AML record-keeping requirements).
• Right to restrict processing: You may ask us to restrict the processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request a machine-readable copy of the personal data you have provided to us.
• Right to object: You may object to processing based on our legitimate interests, including direct marketing. Objections to marketing are actioned within 48 hours.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

365pak will respond to all verified data rights requests within 30 calendar days. Where a request is particularly complex or numerous, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it.

The 365pak platform is strictly for adults aged 21 years and above. 365pak does not knowingly collect personal data from any person under the age of 21. Age verification using CNIC documentation is a mandatory step in our registration process specifically to prevent access by minors.

If 365pak discovers or is notified that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete all associated personal data, and — where appropriate — report the matter to relevant authorities.

If you are a parent or guardian and believe that a minor in your household has accessed or registered on the 365pak platform, please contact us immediately at [email protected]. We take all such reports extremely seriously and will act without delay.

365pak operates a platform that is accessed by players across Pakistan, and our infrastructure, service providers, and game content suppliers may be located in various international jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Pakistan.

Where such transfers occur, 365pak ensures that appropriate safeguards are in place to protect your personal data, including:

• Data processing agreements incorporating standard contractual clauses or equivalent protections
• Transfers only to service providers in jurisdictions that maintain adequate data protection standards
• Contractual requirements on all third-party processors to maintain security and confidentiality standards equivalent to those applied by 365pak

By registering a 365pak account and accepting this Privacy Policy, you acknowledge that your personal data may be transferred internationally as described above.

365pak reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, regulatory requirements, or platform features. The effective date at the top of this page indicates when the current version was last revised.

When material changes are made to this Privacy Policy, 365pak will notify registered players via email to their registered address and display a notice on the platform. Minor clarifications or corrections may be made without individual notification, but the updated effective date will always be reflected at the top of the page.

We encourage you to review this Privacy Policy periodically. Continued use of the 365pak platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 365pak handles your personal data, please contact our Data Protection team using the details below:

• Email: [email protected] — use subject line "Privacy Enquiry" or "Data Rights Request"
• Response time: We aim to acknowledge all privacy enquiries within 48 hours and provide a full response within 14 business days

If you are not satisfied with our response to your privacy enquiry or data rights request, you have the right to escalate your complaint to the relevant data protection authority or the independent dispute resolution body designated under 365pak's licensing arrangements, as outlined in our Terms and Conditions.