365pak Privacy Policy — Your Data, Protected

1 Who We Are

365pak is an online gaming and entertainment platform serving players in Pakistan. The platform is accessible at 365pak.win and via the 365pak mobile application. For the purposes of this Privacy Policy, "365pak", "we", "us", and "our" refer to the operator of the 365pak platform.

This Privacy Policy applies to all personal data collected through the 365pak website, mobile app, and any associated support or communication channels. It governs how we collect, use, store, and share information relating to registered players and visitors to the platform.

By registering an account or continuing to use the 365pak platform after this policy has been updated, you acknowledge that you have read and understood how your data is handled as described below.

2 Data We Collect

365pak collects personal data through several points of interaction. The table below summarises the main categories of data we collect and when they are gathered:

We collect only the data that is necessary for the purposes described in this policy. We do not collect sensitive data such as health records, religious beliefs, or political opinions.

3 How We Use Your Data

Your personal data is used exclusively for legitimate purposes connected to operating the 365pak platform. Specifically, we use your data to:

• Create and manage your player account, including verifying your identity and age during the registration and KYC process.
• Process deposits and withdrawals in PKR via JazzCash, Easypaisa, Raast, Bank Transfer, and other supported payment methods.
• Deliver the games and platform features you access, including Slot Games, Fish Games, Bingo, and the Game Lobby.
• Apply bonuses, track wagering progress, and administer promotions such as PSL and T20 seasonal offers.
• Detect and prevent fraud, money laundering, duplicate accounts, and other activity that violates our Terms and Conditions.
• Respond to your support queries and resolve disputes or complaints in a fair and timely manner.
• Send you service-related notifications such as deposit confirmations, withdrawal updates, and security alerts. These communications are not optional as they are necessary for account operation.
• Send optional promotional communications about bonuses and special offers, where you have not opted out of marketing messages.
• Analyse aggregated gameplay and platform usage data to improve the platform's performance, game selection, and user experience. This analysis uses anonymised or pseudonymised data where possible.
• Meet any legal or regulatory obligations that require us to retain or process certain data for defined periods.

4 Legal Basis for Processing

365pak processes your personal data on the following legal grounds depending on the specific activity involved:

• Contractual necessity: Processing required to open and run your account, process transactions, and provide gameplay services. Without this data we cannot deliver the platform to you.
• Legitimate interests: Fraud prevention, security monitoring, platform analytics, and responsible gaming compliance, where these interests do not override your fundamental privacy rights.
• Legal obligation: Retention of financial transaction records and identity verification data as may be required by applicable law.
• Consent: Optional marketing communications and non-essential cookies, where you have given explicit consent and which you may withdraw at any time.

5 Sharing Your Data

365pak does not sell your personal data. We share data only with trusted third parties where necessary to operate the platform, and only to the extent required for each specific purpose:

• Payment processors: JazzCash, Easypaisa, Raast, and banking partners receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy and security standards.
• Identity verification providers: During KYC checks, your identity documents may be verified by a specialist third-party provider. These providers are contractually bound to use your data solely for identity verification purposes.
• Fraud and security services: Aggregated technical and behavioural data may be shared with fraud detection services to protect the platform and all players from bad actors.
• Technology and hosting providers: Our platform infrastructure relies on professional hosting and technology partners who process data on our behalf under strict data processing agreements.
• Legal authorities: Where required by applicable law or in response to a valid legal request, we may disclose data to relevant authorities. We will inform you of such disclosure where legally permitted to do so.

All third parties with whom we share data are required to maintain appropriate security standards and are prohibited from using your data for any purpose beyond that for which it was shared.

6 Payment Data Security

Given the PKR payment environment in Pakistan, 365pak takes a specific approach to financial data security that is worth explaining clearly:

• When you make a deposit via JazzCash or Easypaisa, the transaction is initiated and authenticated within those platforms' own secure environments. 365pak receives a transaction confirmation reference — we do not receive or store your mobile wallet PIN or OTP.
• For bank transfers and Raast payments, account details are used solely to process the specific transaction and are not retained in a form that could be used to initiate future transactions without your explicit instruction.
• Withdrawal requests are validated against your registered payment details. Any attempt to route a withdrawal to a payment account not registered in your name will be declined and the account reviewed for security.
• All payment data in transit between your device and 365pak servers is protected by TLS encryption.

7 Cookies & Tracking Technologies

365pak uses cookies and similar technologies on the website and in the mobile app to ensure the platform functions correctly and to understand how players use the service. The types of cookies we use include:

• Essential cookies: These are necessary for the platform to function. They keep you logged in during your session, remember your language and currency settings, and allow secure navigation between game pages. These cannot be disabled without breaking platform functionality.
• Analytics cookies: Used to understand how players navigate the platform, which games are most popular, and where technical issues arise. This data is aggregated and anonymised. You may opt out of analytics cookies through your browser settings.
• Preference cookies: Remember your account settings, notification preferences, and display choices so you do not need to reset them each time you log in.
• Security cookies: Help us identify and prevent fraudulent activity, including detecting automated bots and suspicious login attempts.

Most browsers allow you to manage cookie settings in their privacy or security options. Disabling essential cookies will affect your ability to use the 365pak platform normally. Non-essential cookies can be declined without impacting core functionality.

8 Data Retention

We retain your personal data for as long as your account is active and for a defined period thereafter, depending on the category of data:

• Account and identity data: Retained for the duration of your account and for a period of up to five years following account closure, to meet legal obligations and resolve any disputes that may arise after closure.
• Financial transaction records: Retained for a minimum period as required to meet financial record-keeping obligations. PKR transaction records including deposit and withdrawal history fall into this category.
• Gameplay records: Session and game history data is retained for a reasonable period to support dispute resolution and responsible gaming reviews.
• Support correspondence: Chat and email records with our support team are retained for the period needed to resolve the matter and for a reasonable time thereafter in case of follow-up queries.
• Marketing data: If you have opted in to marketing communications, your preference data is retained until you opt out, after which it is updated immediately.

When data is no longer needed and there is no legal obligation to retain it, we securely delete or anonymise it so that it can no longer be linked back to you as an individual.

9 Your Privacy Rights

As a 365pak player, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting the support team through your account dashboard:

• Right of access: You can request a copy of the personal data 365pak holds about you at any time.
• Right to rectification: If any of your personal data held by us is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to erasure: You may request deletion of your personal data, subject to legal retention obligations that may require us to keep certain records.
• Right to restrict processing: In certain circumstances, you can ask us to pause the processing of your data while a query or complaint is being investigated.
• Right to data portability: You can request a machine-readable copy of certain data you have provided to us, allowing you to transfer it elsewhere if you wish.
• Right to object: You can object to processing carried out on the basis of our legitimate interests, or to the use of your data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent — such as for marketing emails — you can withdraw that consent at any time without affecting the lawfulness of prior processing.

We will respond to all data rights requests within a reasonable timeframe. In some cases we may need to verify your identity before actioning a request to ensure we are responding to the account holder and not a third party.

10 Children's Privacy

365pak is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. All registration flows include an age declaration, and accounts that fail age verification are closed before any play or financial activity is permitted.

If we become aware that a minor has registered on the platform or that personal data has been collected from a person under 18, we will take immediate steps to close the account, delete associated personal data, and reverse any financial transactions where this is practically possible.

Parents and guardians who believe a minor may have accessed 365pak should contact our support team immediately. We take age protection obligations seriously and will act promptly on any verified report.

11 Security Measures

365pak applies a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• TLS encryption for all data transmitted between your device and 365pak servers.
• Encryption at rest for stored personal and financial data.
• Access controls ensuring that only authorised personnel with a genuine operational need can access player data.
• Regular internal security reviews and monitoring for unusual access patterns or data handling anomalies.
• Two-factor authentication options available to players for added account protection.
• Secure development practices applied to all platform features and updates.

No digital platform can guarantee absolute security, but 365pak maintains security standards appropriate to the nature of the data we hold and the risks involved. In the event of a data breach that is likely to affect your rights, we will notify you promptly through your registered contact details.

12 Policy Updates

365pak may update this Privacy Policy from time to time to reflect changes in the platform, our data practices, or applicable legal requirements. When we make changes, the revised policy will be published on this page with an updated "Last Updated" date at the top.

Where changes are significant — for example, if we introduce a new category of data collection or a new sharing arrangement — we will notify active players via an on-screen notification at next login or through your registered contact details, giving you an opportunity to review the changes before they take effect.

Your continued use of 365pak after an updated Privacy Policy has been published constitutes your acknowledgement of the revised terms. We recommend bookmarking this page and checking it periodically.

13 Contact Us

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how your personal information is being handled, please reach out to the 365pak support team through your account dashboard. For answers to the most common privacy and account queries, the FAQ section is a good starting point.

We are committed to responding to all privacy-related queries promptly. Where a query involves a formal data rights request, we will acknowledge receipt and provide a substantive response within a reasonable timeframe.