This Privacy Policy explains in clear, plain terms how 365pak collects, uses, stores, shares, and protects the personal information of Pakistani players and website visitors. We are committed to handling your data responsibly, transparently, and in compliance with the data protection obligations imposed by our international gaming licence. Your privacy matters to us — and this document explains exactly what that commitment looks like in practice.
Before you read the full policy below, here is a plain-language summary of what 365pak commits to regarding your personal information:
365pak collects only the personal data that is strictly necessary for account operation, KYC compliance, payment processing, and responsible gaming enforcement. We do not harvest data beyond what our legitimate operational and regulatory purposes require.
All personal data transmitted between your device and 365pak servers — including login credentials, CNIC information submitted during KYC, and PKR payment details — is encrypted using SSL/TLS protocols. Plaintext transmission of sensitive data is not permitted on any 365pak data channel.
365pak does not sell, lease, or trade your personal information to third-party marketers or data brokers — ever. Data sharing with third parties is limited strictly to service providers necessary for platform operation (payment processors, KYC verification, regulatory authorities).
365pak retains your personal data only for as long as your account is active and for the period required by our international gaming licence regulatory obligations (typically 5 years after account closure). Data is securely deleted or anonymised once retention obligations are fulfilled.
You have genuine, actionable rights regarding your 365pak personal data — including the right to access, correct, object, and request erasure. These rights are explained in Section 8 of this policy. You can exercise them by contacting 365pak support at any time.
In the unlikely event of a data breach affecting your personal information, 365pak will notify affected players and the relevant regulatory authority within the timeframes required by our licence conditions. You will be informed of the nature, scope, and recommended protective actions.
365pak is the data controller responsible for the personal information collected through the 365pak platform at 365pak.asia. As data controller, 365pak determines the purposes for which and the means by which personal data is processed, and accepts responsibility for compliance with applicable data protection obligations under our international gaming licence.
For all privacy-related enquiries, data subject access requests, or complaints regarding the handling of your personal information by 365pak, please contact us at:
Please mark privacy-related emails with "Privacy Request – 365pak" in the subject line to ensure proper routing to our data protection team.
365pak collects the following categories of personal information in the course of providing Gaming Services to Pakistani players and visitors:
Data Minimisation Note: 365pak does not collect national tax identification numbers, full bank account numbers, or biometric data beyond what is strictly required for CNIC-based identity verification. Payment card numbers are never processed or stored by 365pak directly — all card-based transactions would be handled exclusively by our licensed payment processing partners.
365pak collects personal data through the following mechanisms:
Registration forms, KYC document uploads, customer support communications, and voluntary profile updates are the primary source of your personal data at 365pak.
365pak's systems automatically record all gaming sessions, transaction events, login/logout timestamps, and device metadata as a technical and regulatory necessity of operating a licensed gaming platform.
Session cookies, preference cookies, and analytics identifiers are set when you visit 365pak.asia. Full details of cookies used are provided in Section 9 of this policy.
When you submit KYC documents, 365pak uses licensed identity verification service providers to cross-reference your CNIC data. These providers supply verification results to 365pak but retain your data only as permitted by their own privacy policies and contractual obligations with 365pak.
JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT network operators share transaction confirmation data with 365pak to facilitate deposit crediting and withdrawal settlement. 365pak does not receive or store full payment credentials from these processors.
365pak processes your personal data for the following purposes, each of which carries a corresponding legal basis under data protection law:
| Purpose | Legal Basis | Data Categories Used |
|---|---|---|
| Account registration and management | Contract performance | Registration data, contact information |
| Age and identity verification (KYC) | Legal obligation (gaming licence) | KYC documents, biometric photo |
| Payment processing (PKR deposits & withdrawals) | Contract performance | Financial transaction data |
| Anti-money laundering monitoring | Legal obligation | Financial transaction data, identity data |
| Responsible gaming enforcement | Legal obligation & legitimate interest | Gaming activity data, account settings |
| Platform security and fraud prevention | Legitimate interest | Technical/device data, account history |
| Regulatory reporting | Legal obligation | Identity data, financial data, game records |
| Customer support delivery | Contract performance | All data relevant to the support request |
| Promotional communications (with consent) | Consent | Contact information, promotional preferences |
| Platform analytics and improvement | Legitimate interest | Aggregated/anonymised usage data |
365pak does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes under any circumstances. Data sharing is limited exclusively to the categories below, each of which is operationally or legally necessary:
No Marketing Data Sales: 365pak will never share your mobile number, email address, gaming history, or any other personal data with advertising networks, marketing agencies, data brokers, or commercial data resellers. This is an absolute commitment, not a preference or a policy subject to commercial review.
As 365pak operates under an international gaming licence, some personal data may be transferred to, stored in, or processed in jurisdictions outside Pakistan. This includes transfers to the licensing jurisdiction's regulatory databases, to global cloud infrastructure providers, and to internationally operating KYC verification services.
All such international transfers of personal data are conducted in accordance with the data protection requirements of our gaming licence. Where required, 365pak implements appropriate safeguards including contractual data processing agreements, encryption in transit, and access controls to ensure that transferred data receives a standard of protection comparable to that described in this policy.
If you wish to obtain details of the specific safeguards applied to any international data transfer involving your personal information, you may request this information by contacting with the subject line "International Transfer Inquiry – 365pak."
365pak implements a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:
Your Role in Security: While 365pak takes extensive measures to protect your data on our systems, you are responsible for maintaining the confidentiality of your 365pak login credentials on your own devices. We strongly recommend enabling two-factor authentication and using a unique, strong password for your 365pak account.
As a 365pak player, you have the following rights in relation to your personal data. These rights are genuine and exercisable — they are not conditional on account status or the outcome of any pending KYC or dispute process:
You may request a copy of all personal data 365pak holds about you, along with information about how it is processed, where it is stored, and with whom it has been shared. 365pak will respond to access requests within 30 calendar days.
If any personal data 365pak holds about you is inaccurate or incomplete, you have the right to request correction. For account-level details (name, mobile number), contact support. CNIC-derived data corrections require re-submission of updated identity documents.
You may request deletion of your personal data where processing is no longer necessary, consent has been withdrawn, or processing was unlawful. This right is subject to 365pak's overriding legal obligations to retain data under our gaming licence (typically 5 years post-closure).
You may request that 365pak restricts processing of your data while the accuracy of data is contested, while an objection is being assessed, or where processing is unlawful but you prefer restriction over erasure.
Where processing is based on your consent or contract performance, you may request your personal data in a structured, machine-readable format (CSV/JSON) for transfer to another service provider.
You may object at any time to processing based on 365pak's legitimate interest — including platform analytics and fraud prevention profiling. 365pak will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
To exercise any of the above rights, contact 365pak at . We may require identity verification before processing your request to prevent unauthorised access to another player's data.
365pak uses cookies and similar browser storage technologies on the 365pak.asia website. The following categories of cookies are used:
365pak does not use third-party advertising cookies, social media tracking pixels, or any cross-site tracking technologies. Your 365pak browsing activity is not shared with advertising networks.
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary or security cookies may impair your ability to log in and use the 365pak platform.
365pak does not knowingly collect personal data from individuals under the age of 21. The 365pak platform is strictly for adults aged 21 years and above. This is not merely a terms-of-service condition — it is a binding requirement of our international gaming licence and is actively enforced through mandatory CNIC-based KYC verification.
Underage Access Policy: If 365pak becomes aware that personal data has been collected from an individual under the age of 21 — whether through KYC verification, parental notification, or any other means — we will immediately suspend the account, delete all personal data associated with the account (subject to any regulatory obligation to retain evidence of the violation), return any deposits to their source, and void all wagers and bonuses. If you are a parent or guardian who believes a minor has registered on 365pak, please contact [email protected] immediately.
365pak retains personal data for the following periods, which are determined by operational necessity, gaming licence obligations, and applicable legal requirements:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Gaming licence obligation |
| KYC documents (CNIC, selfie) | Duration of account + 5 years post-closure | AML regulatory requirement |
| Financial transaction records | Duration of account + 7 years post-closure | AML and tax reporting obligations |
| Gaming activity and bet history | Duration of account + 5 years post-closure | Gaming licence obligation |
| Responsible gaming tool records | Duration of account + 5 years post-closure | Regulatory enforcement record |
| Support communications | 3 years from last interaction | Dispute resolution and QA |
| Technical/device logs | 13 months rolling | Security monitoring |
| Marketing consent records | Duration of consent + 3 years | Proof of lawful marketing basis |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised aggregate data — from which individual players cannot be identified — may be retained indefinitely for platform analytics and product development purposes.
Data generated through your use of 365pak's responsible gaming tools — including deposit limit settings, self-exclusion requests, cooling-off period activations, and loss limit configurations — is treated with heightened sensitivity and is not used for any commercial purpose.
Responsible gaming data is used exclusively for: (a) enforcing the limits and restrictions you have set; (b) compliance reporting to our gaming licence regulatory authority; and (c) improving the effectiveness of 365pak's responsible gaming programme on an aggregated, anonymised basis.
Self-exclusion records are retained for the duration of the exclusion period plus five years. This retention is mandatory under our gaming licence and cannot be waived by player request, as it serves to prevent re-registration during an active exclusion period. For more detail on responsible gaming tools and your rights in this area, please visit our dedicated Responsible Gaming page.
365pak sends promotional communications — including bonus offers, PSL season promotions, new game notifications, and platform news — only to players who have affirmatively opted in to receive such communications at the time of registration or through their account communication preferences.
Marketing communications from 365pak are sent via SMS to your registered Pakistani mobile number or, where applicable, through in-platform notifications. 365pak does not conduct email marketing campaigns or third-party advertising targeting of 365pak players on external platforms.
You may opt out of marketing communications at any time by: (a) updating your communication preferences in your 365pak account settings; or (b) contacting with an explicit opt-out request. Opt-out requests are processed within 48 hours. Transactional communications — including deposit confirmations, withdrawal notifications, KYC status updates, and responsible gaming alerts — are not classified as marketing and will continue to be sent regardless of marketing opt-out status.
365pak reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or platform functionality. The current version and effective date are displayed at the top of this page and in the table of contents sidebar.
Material changes to this Privacy Policy — particularly changes that affect your rights or the categories of data collected — will be communicated to registered 365pak players via SMS notification to your registered mobile number at least seven (7) calendar days before the amended policy takes effect. Minor non-material updates (such as typographical corrections or clarifications that do not alter the substance of data processing) may be made without advance notice.
Continued use of the 365pak platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the amended terms, you should discontinue use of 365pak and close your account.
For all privacy enquiries, data subject rights requests, or concerns about 365pak's data handling practices, contact our data protection team at . Please include "Privacy Request" in your subject line and provide your registered 365pak mobile number so we can locate your account record.
If you are not satisfied with 365pak's response to a privacy complaint after giving us a reasonable opportunity to address it, you may escalate your complaint to the relevant data protection supervisory authority within our gaming licence jurisdiction. Contact details for the relevant supervisory authority are available from 365pak upon written request.
Response Commitment: 365pak will acknowledge all formal privacy complaints within five (5) business days and provide a substantive written response within thirty (30) calendar days. Complex requests involving large volumes of data or requiring regulatory consultation may be extended by a further thirty (30) days, with prior written notification to you.
365pak is built on a foundation of transparency — in our games, our payments, and our data practices. PKR casino, live dealer, PSL cricket betting. 21+ only. Play responsibly.
21+ Only — Gamble Responsibly
365pak is strictly for adults aged 21 and above. Gambling involves financial risk. Never wager more than you can afford to lose. For self-exclusion tools, deposit limits, and support resources, visit our Responsible Gaming page.