At 365pk, protecting the personal information of our Pakistani players is a foundational responsibility — not a regulatory formality. This Privacy Policy explains in clear, plain language exactly what data 365pk collects, how it is used, who it is shared with, how long we retain it, and what rights you hold as a data subject under our data governance framework.
Six core privacy commitments that shape how 365pk handles your personal data. The full legal text in the sections below governs in all cases.
365pk collects personal data limited to what is strictly required for account operation, identity verification, payment processing, responsible gaming compliance, and improving platform quality. We do not collect data for its own sake.
All personal data transmitted to and from 365pk is protected by 256-bit TLS encryption. Stored data is encrypted at rest using industry-standard AES-256. Passwords are one-way hashed using bcrypt — not stored in recoverable form under any circumstances.
365pk does not sell, rent, or trade your personal information to third-party marketing companies or data brokers. Your data exists to serve your account and our operational obligations — not to generate revenue through data commerce.
365pk retains personal data for defined and proportionate periods — typically five years from account closure for KYC and transaction records, in line with our AML compliance obligations. Data beyond its retention period is securely deleted or anonymised.
365pk will only send you promotional communications — bonus offers, new game alerts, PSL betting promotions — if you have explicitly opted in to receive them. You may withdraw your marketing consent at any time through your account settings or by contacting our support team.
As a 365pk player, you hold meaningful data rights — access, correction, deletion, portability, restriction, and objection. These are not ornamental; 365pk has a designated response process and committed timeframes for responding to all data rights requests.
The data controller responsible for the personal information you provide to the 365pk platform is 365pk Gaming Ltd ("365pk," "we," "us," or "our"), the operator of the website accessible at 365pk.bid and all associated sub-domains, mobile interfaces, and progressive web application endpoints.
365pk Gaming Ltd is an internationally licensed gaming operator. Our data processing activities are conducted in accordance with the privacy and data protection standards mandated by our operating licence, and we apply GDPR-aligned data governance principles as a baseline standard across all jurisdictions in which we serve players — including Pakistan.
365pk collects the following categories of personal data in connection with your account and use of the Platform:
| Data Category | Specific Data Items | Collection Stage |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, nationality, photograph (for KYC) | KYC verification |
| Contact Data | Pakistani mobile number, email address, city/province of residence | Registration |
| Financial Data | JazzCash/EasyPaisa account identifiers, HBL/UBL/Meezan bank account details, USDT wallet address, transaction records | Deposit/withdrawal |
| Gaming Activity Data | Bet history, game session logs, win/loss records, wagering patterns, bonus usage | Ongoing platform use |
| Technical Data | IP address, device type and OS, browser type, login timestamps, session durations | Automatic collection |
| Communications Data | Live chat transcripts, support email correspondence, complaint records | Support interactions |
| Marketing Preference Data | Opted-in communication channels, promotional engagement, bonus opt-in/opt-out records | Opt-in event / account settings |
365pk does not collect sensitive personal data categories — such as racial or ethnic origin, political opinions, religious beliefs, health records (other than responsible gaming-related disclosures voluntarily provided), or biometric data — unless explicitly required for KYC identity verification purposes and with your prior consent or as mandated by applicable law.
365pk collects your personal data through the following channels and mechanisms:
365pk processes your personal data for the following purposes, each supported by a lawful basis under applicable data protection frameworks:
365pk does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with the following categories of third-party recipients only to the extent necessary for the purposes described in this Privacy Policy:
As an internationally licensed gaming operator, 365pk may process and store personal data in countries other than Pakistan. Where personal data is transferred outside of Pakistan to countries that do not have equivalent data protection standards, 365pk implements appropriate safeguards to ensure that such transfers comply with applicable data protection principles.
Safeguards used by 365pk for international data transfers include:
If you wish to obtain information about the specific safeguards applied to international transfers affecting your personal data, please contact our Data Protection Officer using the details provided in Section 15 of this Policy.
365pk retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law or our operating licence obligations. The following retention periods apply:
| Data Category | Retention Period | Basis for Retention |
|---|---|---|
| KYC Identity Documents | 5 years from account closure | AML / regulatory compliance |
| Transaction Records (deposits & withdrawals) | 5 years from transaction date | AML / regulatory compliance |
| Gaming Activity Logs | 3 years from account closure | Dispute resolution; responsible gaming monitoring |
| Support Communications | 3 years from closure of interaction | Complaint management; quality assurance |
| Marketing Preference Records | Duration of account + 1 year | Consent management; regulatory compliance |
| Technical / Session Logs | 12 months | Security monitoring; fraud prevention |
| Self-Exclusion Records | Duration of exclusion + 5 years | Responsible gaming compliance |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with 365pk's data destruction procedures. Anonymised aggregate data (which cannot be used to identify any individual) may be retained indefinitely for statistical and product analysis purposes.
365pk uses cookies and similar tracking technologies on the Platform to enable core functionality, remember your preferences, and gather analytical data to improve the Platform experience. The following categories of cookies are used:
365pk does not use third-party advertising cookies or share cookie data with third-party advertising networks. No behavioural advertising tracking is applied to 365pk players without explicit opt-in consent.
365pk implements a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our technical and organisational security measures include:
365pk does not knowingly collect, process, or retain any personal data relating to individuals below the age of 21. The Platform is designed exclusively for adult players, and our registration and KYC processes are implemented specifically to prevent access by underage individuals.
If 365pk becomes aware that personal data of an individual below the age of 21 has been inadvertently collected, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a minor in your care has provided personal information to 365pk, please contact our support team immediately using the details in Section 15 of this Policy.
Players who share devices with minors are strongly advised to use device-level parental controls and never to store 365pk login credentials in a manner accessible to underage individuals. 365pk cannot be held responsible for minor access attributable to a player's failure to adequately secure their own account credentials on shared devices.
As a data subject whose personal information is processed by 365pk, you hold the following rights under applicable data protection frameworks. These rights can be exercised by contacting our Data Protection Officer (see Section 15):
Request a copy of all personal data 365pk holds about you. Response provided within 30 days.
Request correction of inaccurate or incomplete personal data held by 365pk on your account.
Request deletion of your personal data where no overriding legal or contractual obligation requires its retention.
Request that 365pk restricts processing of your data in specific circumstances while a dispute is being resolved.
Request your personal data in a structured, machine-readable format for transfer to another service provider.
Object to processing based on legitimate interests — particularly in relation to direct marketing communications.
To exercise any of the above rights, submit a written request to 365pk's Data Protection team via the support email address. 365pk will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. Complex requests may require an extension of up to a further 30 days, in which case you will be informed in advance. Identity verification may be required before processing any data rights request.
365pk sends promotional and marketing communications — including bonus offers, new game announcements, PSL betting promotions, and VIP programme notifications — only to players who have explicitly opted in to receive such communications during account registration or through the account settings panel.
You may withdraw your marketing consent at any time and without providing reasons by:
Withdrawal of marketing consent does not affect the lawfulness of processing that occurred prior to withdrawal. Following a valid opt-out, 365pk will cease sending marketing communications within a commercially reasonable timeframe, typically within 5 business days. Note that withdrawal of marketing consent does not affect operational communications relating to your account — such as security alerts, withdrawal notifications, and KYC reminders — which are necessary for the management of your account relationship with 365pk and which will continue to be sent regardless of marketing preferences.
The 365pk Platform may contain references to or links to third-party services — including game providers, payment processors, and responsible gaming organisations. This Privacy Policy applies exclusively to personal data processed by 365pk Gaming Ltd and does not extend to data processing conducted by any third-party service or platform.
365pk is not responsible for the privacy practices, data handling procedures, or security standards of any third-party service. Players who interact with third-party platforms — whether through direct navigation or via links referenced in 365pk communications — are advised to review the respective privacy policies of those platforms independently.
365pk reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, operating licence requirements, or applicable law. All amendments will be published on this page with an updated Effective Date.
Where an amendment is material — meaning it substantially changes the way in which 365pk processes your personal data or significantly affects your data rights — 365pk will provide advance notice via Platform notification or email to your registered address prior to the amendment taking effect. For non-material amendments, publication of the revised Policy on the Platform with an updated Effective Date constitutes sufficient notice.
Continued use of the 365pk Platform following the Effective Date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the amended Policy, you must cease using the Platform and request account closure. 365pk recommends that all players review this Privacy Policy at least twice annually to remain informed of current data processing practices.
For any questions, concerns, or formal requests relating to this Privacy Policy or 365pk's handling of your personal data, please contact our Data Protection team through the following channels:
This Privacy Policy was last reviewed and updated on 1 January 2026 and supersedes all previous versions. 365pk Gaming Ltd is committed to maintaining the accuracy and relevance of this Policy on an ongoing basis.
365pk's privacy framework means your personal data is handled with the same care and rigour that Pakistani players deserve. Encrypted, never sold, always under your control — your data stays yours.
🔞 21+ Only · Play Responsibly · Licensed International Gaming Operator · All balances in PKR