PKR365 Privacy Policy – How We Protect Your Personal Data

PKR365 ("we", "us", "our") operates the online betting and casino platform available at pkr365.biz. As part of providing this service, PKR365 necessarily collects and processes personal information about the people who use it — including information provided during registration, during gameplay, during financial transactions, and through ordinary use of the platform.

This Privacy Policy explains in plain terms what data PKR365 collects, why it is collected, how it is used, how it is protected, and what rights you have as the person the data belongs to. This policy applies to all users of PKR365, including registered members and visitors who browse the platform without an account.

By creating a PKR365 account, you confirm that you have read and understood this Privacy Policy. This Policy should be read alongside the PKR365 Terms and Conditions, which govern the broader use of the platform. If you disagree with any aspect of this Privacy Policy, please do not create or continue to use a PKR365 account.

PKR365 takes the privacy of Pakistani users seriously. We understand that personal financial and identity data is particularly sensitive in the local context, and we apply the same care to protecting that data that we would want applied to our own.

PKR365 collects personal data in three main ways: data you provide directly, data generated automatically by your use of the platform, and data obtained from third parties for verification or fraud prevention purposes.

Data You Provide Directly

• Registration data: full name, date of birth, email address, mobile phone number, and residential address.
• Identity verification documents: CNIC (Computerised National Identity Card), passport, or other government-issued ID documents where required.
• Payment information: mobile wallet numbers (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details for IBFT transfers, and masked card details for Visa/Mastercard transactions. PKR365 does not store full card numbers — these are handled by our certified payment processors.
• Communications: content of messages you send to PKR365 customer support, live chat transcripts, and email correspondence.
• Responsible gaming preferences: deposit limits, session limits, and self-exclusion requests you set within your PKR365 account.

Data Generated Automatically

• Usage data: pages visited, buttons clicked, time spent on each section, sports and games accessed, and bet history.
• Device and technical data: IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, and language settings.
• Transaction data: deposit and withdrawal amounts, timestamps, payment methods used, and transaction status logs.
• Cookie data: session identifiers, authentication tokens, and analytics identifiers. See Section 5 for full cookie details.

Data from Third Parties

• Identity verification providers: confirmation of identity document validity where we use third-party KYC (Know Your Customer) verification services.
• Fraud detection services: device fingerprinting data and behavioural risk scores used to detect and prevent fraudulent account activity.
• Payment processors: transaction confirmation data returned from Easypaisa, JazzCash, bank IBFT systems, and card processing networks.

Every piece of data that PKR365 collects has a specific purpose. We do not collect data speculatively or for purposes that haven't been considered. Here is a breakdown of the main purposes for which your data is used:

PKR365 does not use your personal data for purposes beyond those listed above without first seeking your explicit consent. If we need to use your data for a new purpose in the future, we will update this Privacy Policy and notify registered users accordingly.

PKR365 processes personal data on one or more of the following legal bases depending on the specific purpose:

• Contractual necessity: processing required to fulfil the contract between PKR365 and you as a user — including account management, bet settlement, and payment processing. Without this data, PKR365 cannot provide its service to you.
• Legal obligation: processing required to comply with applicable legal and regulatory requirements — including age verification (KYC), anti-money laundering (AML) obligations, and responding to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: processing necessary for PKR365's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and anonymous analytics for service improvement — provided these interests do not override your own privacy rights.
• Consent: processing based on your explicit opt-in — specifically, the sending of marketing communications including promotional offers, PSL betting specials, and casino bonus notifications. You can withdraw this consent at any time.

PKR365 uses cookies and similar browser-based tracking technologies to make the platform work correctly, keep your session active while logged in, and understand how users interact with different parts of the site. Here's what each category of cookie does on PKR365:

Essential Cookies

These are required for the platform to function. They maintain your login session, remember your betslip selections, and keep you authenticated as you move between sections. Without essential cookies, PKR365 cannot function correctly. These cannot be disabled.

Functional Cookies

These remember your preferences — such as your preferred deposit method, your language settings, and whether you've closed certain notifications. They improve your experience by not requiring you to re-enter the same choices on every visit.

Analytics Cookies

PKR365 uses anonymised analytics to understand which sections of the platform are most used, how long users spend on different games, and where mobile performance bottlenecks occur. This data is used in aggregate — it is not linked back to individual accounts. Analytics cookies can be opted out of via your browser settings or by contacting PKR365 support.

Marketing Cookies

With your consent, PKR365 may use marketing cookies to show relevant promotional content — including PSL bonus offers and casino promotions — based on your previous activity on the platform. These are only placed with your explicit agreement and can be withdrawn at any time.

PKR365 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data is shared with third parties only in the following limited and necessary circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT systems, and Visa/Mastercard processing networks receive the minimum data necessary to process your deposits and withdrawals in PKR Rs. These parties operate under their own data protection obligations.
• Identity verification (KYC) providers: where PKR365 uses a third-party service to verify your CNIC or other identity documents, your document data is shared with that provider under strict confidentiality agreements. Verification results are returned to PKR365; documents are not retained by providers beyond their operational need.
• Fraud detection services: device and behavioural data may be shared with fraud prevention platforms that help PKR365 identify suspicious account activity, multiple-account creation, and bonus abuse. These services do not use your data for any purpose other than the fraud assessment PKR365 requests.
• Game software providers: when you play games powered by third-party software on PKR365 (e.g., live casino providers or slot game developers), your session data and in-game activity are shared with the provider to facilitate gameplay and settlement. These providers operate under licence and are contractually bound by data protection requirements.
• Regulatory and law enforcement authorities: PKR365 will disclose personal data to applicable regulatory bodies, law enforcement agencies, or courts when required to do so by law. PKR365 will not disclose more information than is legally required in such circumstances.
• Business transfers: in the event that PKR365 undergoes a merger, acquisition, or asset sale, your personal data may be transferred as part of that transaction. You will be notified in advance of any such transfer, and your rights under this Privacy Policy will continue to apply.

No sharing arrangement between PKR365 and any third party permits that party to use your data for their own marketing purposes. Any third party that processes data on PKR365's behalf does so only as a data processor acting under our instructions.

PKR365 takes the security of your personal data seriously and uses a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: all data transmitted between your device and PKR365 servers is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser confirms this encryption is active when you use PKR365.
• Encrypted data at rest: sensitive data — including identity documents, payment details, and account credentials — is stored in encrypted form on PKR365's servers. Encryption keys are managed separately from the data they protect.
• Access controls: PKR365 staff access to personal data is restricted to those with a legitimate operational need. Access is role-based, logged, and regularly reviewed. No PKR365 employee can access your full payment details.
• Regular security audits: PKR365 undergoes periodic security assessments to identify and address vulnerabilities before they can be exploited.
• Incident response: in the event of a confirmed data breach that affects your personal data, PKR365 will notify you within a reasonable timeframe and explain what happened, what data was involved, and what steps are being taken to address the situation.

While PKR365 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You can help protect your own data by using a strong, unique password for your PKR365 account and not sharing your login credentials with anyone.

PKR365 retains personal data only for as long as it is needed for the purpose for which it was collected, or as required by applicable law. Our general retention approach is as follows:

• Active account data: retained for the lifetime of your PKR365 account plus a minimum of 5 years after account closure. This is driven by financial record-keeping obligations and the need to investigate any disputes that may arise after closure.
• Transaction and betting records: retained for a minimum of 5 years from the date of each transaction. This satisfies anti-money laundering record-keeping requirements applicable to financial services platforms.
• Identity verification documents: retained for the duration of your account and for 5 years after closure. If a document was submitted in relation to a compliance or fraud investigation, it may be retained for longer as permitted by law.
• Customer support communications: retained for 3 years from the date of the last interaction, unless the communication relates to an unresolved dispute in which case it is retained until resolution plus 2 years.
• Marketing preferences and consent records: retained for as long as you remain a PKR365 member and for 2 years after account closure, for audit purposes.
• Analytics data: anonymised and aggregated analytics data has no fixed retention period as it cannot be linked back to individuals.

When data is no longer required, PKR365 securely deletes or anonymises it. Secure deletion means data is overwritten or destroyed in a way that prevents recovery.

As a PKR365 user, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact PKR365 at support@pkr365.biz with the subject line "Data Rights Request" and we will respond within 14 business days.