Privacy Policy

365k ("365k", "we", "us", "our") is the operator of the online gaming platform accessible at 365k.bio. 365k operates under an international gaming licence and provides sports betting, live casino, and slot gaming services to eligible players. For the purposes of this Privacy Policy, 365k is the data controller responsible for the personal information collected through the 365k platform.

This Privacy Policy applies to all personal data collected from players who register or interact with the 365k platform, including players based in Pakistan (Karachi, Lahore, Islamabad, Faisalabad, Peshawar, and all other cities and regions). It applies whether you access 365k via a desktop browser, mobile browser, or any other device.

365k collects the following categories of personal data from players. We collect only what is necessary for the purposes described in this Privacy Policy:

365k collects personal data through the following channels:

• Direct interactions: Data you provide when registering your 365k account, completing KYC verification, making deposits or withdrawals, contacting 365k support via live chat or email, or updating your account profile.
• Automated technologies: Technical and usage data collected automatically when you visit and interact with the 365k platform, including via cookies, server logs, and analytics tools. See Section 9 for full details on cookies.
• Third-party sources: Identity verification data obtained from KYC screening providers; fraud risk signals from anti-fraud partners; payment confirmation data from JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, SadaPay, and NayaPay during transaction processing.
• Responsible gaming interactions: Data generated when you set deposit limits, activate cooling-off periods, or request self-exclusion through your 365k account settings.

365k uses the personal data it collects for the following purposes:

1. Account registration and management: To create and maintain your 365k account, verify your identity, and provide you with access to the platform's sportsbook, casino, and payment services.
2. KYC and age verification: To confirm that you are at least 21 years of age and to meet our regulatory obligations under our international gaming licence. KYC verification is mandatory before any withdrawal is processed.
3. Payment processing: To process deposits and withdrawals via JazzCash, EasyPaisa, Raast, bank transfer, and other accepted payment methods. Financial data is shared with payment processors solely for this purpose.
4. Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, bonus abuse, and other prohibited activities. Technical data including IP addresses and device fingerprints are used for this purpose.
5. Regulatory compliance: To comply with anti-money laundering (AML) obligations, responsible gaming requirements, and any other legal obligations applicable to 365k's international gaming licence.
6. Customer support: To respond to your queries, resolve complaints, and provide assistance through 365k's 24/7 support channels.
7. Responsible gaming: To monitor gaming behaviour for signs of problem gambling and to enforce deposit limits, self-exclusion requests, and cooling-off periods in accordance with our Responsible Gaming commitments.
8. Platform improvement: To analyse usage data in aggregate to improve the 365k platform's performance, navigation, and product offerings.
9. Marketing communications: To send you personalised promotional offers, bonus notifications, and PSL / cricket betting updates — but only where you have opted in to receive such communications. See Section 11 for opt-out instructions.

365k processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you accepted at registration — including account creation, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC/AML obligations under our international gaming licence and responsible gaming mandates.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform analytics, where 365k's legitimate interests in protecting the platform and its users are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, which is carried out only where you have provided explicit, freely given consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

365k does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Personal data is shared only in the limited circumstances set out below:

• KYC verification providers: Licensed identity verification services that process your CNIC, passport, or driver's licence to confirm your identity and age. These providers are bound by strict data processing agreements.
• Payment processors: JazzCash, EasyPaisa, Raast / 1LINK, HBL, UBL, Meezan Bank, SadaPay, NayaPay, and other payment network partners receive the financial data necessary to process your deposits and withdrawals. Each processor operates under its own privacy policy and applicable Pakistani financial regulations.
• Fraud and anti-money laundering (AML) services: Third-party fraud detection and AML screening providers who help 365k identify and prevent financial crime on the platform.
• Gaming software providers: The certified RNG and live dealer studio providers who power 365k Casino's slot and table game content (including Monster Plinko and Double Fortune) receive limited technical session data necessary to operate their games. They do not receive your identity or financial data.
• Regulatory and law enforcement authorities: Where 365k is legally required to disclose personal data to government bodies, regulatory authorities, or law enforcement agencies — for example, in connection with an AML investigation — we will comply with such obligations and, where legally permitted to do so, notify the affected player.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of 365k's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

As an internationally licensed gaming operator, 365k may transfer your personal data to servers and service providers located outside Pakistan. Where such transfers occur, 365k ensures that appropriate safeguards are in place to protect your data — including contractual clauses based on internationally recognised data protection standards and selecting processors operating in jurisdictions with adequate data protection frameworks.

All KYC documents submitted by Pakistani players — including CNIC scans and payment method verification — are handled by processors who are contractually required to maintain security standards equivalent to those required under 365k's international gaming licence. Your CNIC data is never stored on servers accessible to unauthorised personnel.

365k retains your personal data for as long as your account is active and for a period thereafter as required by our regulatory obligations. The following retention periods apply:

After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player. Anonymised and aggregated data (e.g., platform-wide betting statistics with no individual identifiers) may be retained indefinitely for legitimate business analytics.

365k uses cookies and similar tracking technologies on the platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow the platform to recognise your device, maintain your login session, and remember your preferences. 365k uses the following categories of cookies:

• Strictly necessary cookies: These are essential for the operation of the 365k platform. They maintain your authenticated session after 365k login, protect against cross-site request forgery (CSRF), and ensure the platform functions correctly. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how players navigate the 365k platform — for example, which pages are visited most frequently, how long sessions last, and where players encounter errors. This data is used to improve the platform. These cookies require your consent.
• Functional cookies: These cookies remember your preferences — such as your preferred language settings, display preferences, and last-visited game categories. They improve your experience on the platform but are not strictly essential. These cookies require your consent.
• Security cookies: Short-lived cookies used to detect and prevent fraudulent activity, bot traffic, and account takeover attempts. These are considered strictly necessary and cannot be disabled.

As a player registered with 365k, you hold the following rights in relation to your personal data. To exercise any of these rights, contact 365k support via live chat or at the email address in Section 16:

1. Right of access: You have the right to request a copy of the personal data that 365k holds about you. We will provide this within 30 days of a verified request, in a structured and machine-readable format where technically feasible.
2. Right to rectification: If any personal data held by 365k is inaccurate or incomplete, you have the right to request that it be corrected. Many details — such as your email address and mobile number — can be updated directly from your 365k account settings.
3. Right to erasure ("right to be forgotten"): You may request that 365k delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. Note that this right is subject to our legal obligation to retain certain data for AML and KYC compliance purposes (see Section 8).
4. Right to restrict processing: You have the right to request that 365k restricts the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
5. Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller, where technically feasible and where processing is based on consent or contractual necessity.
6. Right to object: You have the right to object to processing of your personal data carried out on the basis of 365k's legitimate interests. 365k will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
7. Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

365k may send you promotional communications — including bonus offers, free spins notifications, PSL cricket betting promotions, and deposit match alerts — via email or SMS to your registered Pakistani mobile number. These communications are sent only where you have actively opted in to receive them at the time of registration or through your account marketing preferences settings.

You can opt out of marketing communications at any time using any of the following methods:

• Clicking the "Unsubscribe" link included in every 365k promotional email
• Updating your marketing preferences directly in your 365k account settings
• Contacting 365k support via live chat and requesting removal from all marketing lists

Please note that opting out of marketing communications does not affect transactional communications — for example, deposit confirmation messages, withdrawal notifications, KYC verification requests, and security alerts are not marketing communications and will continue to be sent regardless of your marketing opt-out status. These transactional messages are necessary for the operation of your account.

The 365k platform is strictly intended for adults aged 21 years and over. 365k does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account, make a deposit, or use the 365k platform in any capacity.

If 365k becomes aware that personal data has been collected from a person under the age of 21, the associated account will be immediately suspended, all funds will be handled in accordance with our regulatory obligations, and the minor's personal data will be securely deleted from our systems to the extent permitted by law.

365k implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data exchanged between your device and the 365k platform is encrypted using industry-standard 256-bit SSL/TLS protocols. This ensures that your login credentials, payment details, and personal information cannot be intercepted during transmission.
• Encryption at rest: Sensitive data — including KYC documents, financial records, and hashed passwords — is encrypted when stored on 365k servers, using AES-256 encryption or equivalent standards.
• Access controls: Access to personal data is strictly limited to 365k personnel and authorised third-party processors who have a legitimate operational need to access it. Role-based access controls and multi-factor authentication (MFA) are enforced for all internal systems.
• Firewall and intrusion detection: 365k's infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and 24/7 security monitoring to detect and respond to threats in real time.
• Penetration testing: 365k conducts regular security audits and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Data breach response: In the event of a personal data breach that poses a risk to your rights and freedoms, 365k will notify affected players and relevant regulatory authorities without undue delay, in accordance with applicable data breach notification obligations.

While 365k takes every reasonable precaution to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your 365k account password and for logging out of your account on shared devices. If you suspect that your 365k account has been compromised, please contact support immediately via live chat.

The 365k platform may contain references to third-party payment services such as JazzCash, EasyPaisa, HBL Internet Banking, UBL Digital, and Meezan Bank Mobile. When you navigate to these third-party services to complete a payment, you leave the 365k platform and become subject to the privacy policies and data practices of those third parties.

365k is not responsible for the privacy practices of third-party platforms. We encourage you to review the privacy policy of any third-party service before providing your personal data to them. 365k's Privacy Policy applies solely to data collected directly through the 365k platform at 365k.bio.

365k reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform features. When material changes are made, 365k will notify registered players by email to their registered address and/or by a prominent notice displayed on the 365k platform upon login. The updated Privacy Policy will be published on this page with a revised Effective Date.

We encourage you to review this Privacy Policy periodically to stay informed of how 365k is protecting your personal data. Your continued use of the 365k platform after any amendments take effect constitutes your acknowledgement of the revised Privacy Policy. If you do not agree with any changes, you should stop using the platform and contact support to close your account.

If you have any questions, concerns, or complaints regarding this Privacy Policy or 365k's data practices, please contact the 365k Data Privacy team using the details below. Our support team is available 24 hours a day, 7 days a week.

• Live Chat: Available directly from the 365k platform after logging in — the fastest channel for urgent privacy concerns including suspected unauthorised access to your account
• Email: [email protected] (plain text — not a clickable link)

365k aims to acknowledge all privacy-related enquiries within 24 hours and to resolve them fully within 30 calendar days. If you are not satisfied with 365k's response to your privacy complaint, you may escalate the matter to the relevant regulatory authority under our international gaming licence.