pak366 Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings assigned to them below:

• "pak366" / "we" / "us" / "our" — the operator of the pak366 platform at pak366.org, holding an international gaming licence.
• "Platform" — the pak366 website, all associated sub-pages, features, games, betting services, and any related mobile application.
• "Player" / "you" / "your" — any individual who visits, registers on, or uses any service of the pak366 Platform.
• "Personal Data" — any information that identifies or could reasonably be used to identify a living natural person, including name, email address, date of birth, national identity number, financial data, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, and deletion.
• "Third Party" — any natural or legal person other than you and pak366, including payment processors, KYC verification providers, analytics platforms, and game software providers.
• "KYC" — Know Your Customer: the identity verification process used by pak366 to comply with its obligations under its international gaming licence and applicable anti-money laundering regulations.
• "Cookies" — small text files placed on your device by the pak366 Platform to facilitate session management, analytics, and personalisation.

pak366 is an internationally licensed online gaming and sports betting platform serving players in Pakistan and other eligible jurisdictions. The pak366 Platform is operated by the entity holding the applicable international gaming licence, acting as the data controller for all Personal Data collected through the Platform.

As data controller, pak366 determines the purposes and means by which your Personal Data is processed. Where pak366 engages third-party service providers to process data on its behalf, those providers act as data processors and are bound by contractual obligations requiring them to process data only as directed by pak366 and in accordance with applicable data protection standards.

pak366 collects the following categories of Personal Data in connection with the operation of the Platform and the provision of gaming and betting services:

pak366 does not intentionally collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly necessary for identity verification purposes as required by KYC regulations.

pak366 collects Personal Data through the following channels and mechanisms:

• Direct collection: Data you voluntarily provide when creating an Account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically as you interact with the Platform, including via cookies, web beacons, server logs, and session tracking technologies.
• Third-party sources: Identity and fraud verification data received from our authorised KYC and AML service providers following your consent to the verification process. Financial data received from our payment processors (JazzCash, EasyPaisa, and banking partners) in connection with processing your transactions.
• Public sources: In limited circumstances related to fraud prevention or AML compliance, pak366 may consult publicly available sources such as sanctions lists or court records.

pak366 processes your Personal Data only where a valid legal basis exists. The principal legal bases on which pak366 relies are as follows:

• Contractual necessity: Processing that is required to perform the contract between you and pak366, including operating your Account, processing deposits and withdrawals, and settling bets and casino game results.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, AML transaction monitoring, age verification, and regulatory reporting obligations imposed under pak366's international gaming licence conditions.
• Legitimate interests: Processing necessary to pursue the legitimate business interests of pak366, including fraud detection, platform security, IT system management, responsible gaming monitoring, and internal analytics — provided those interests are not overridden by your rights and interests.
• Consent: Where pak366 relies on your consent — for example, for optional marketing communications or non-essential cookies — you may withdraw that consent at any time by contacting [email protected] or adjusting your Account notification preferences. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

pak366 uses the Personal Data it collects for the following purposes:

• Creating and managing your pak366 Account, including verifying your identity and age (21+ requirement) at registration and on an ongoing basis.
• Processing and reconciling your PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard.
• Delivering sports betting, live casino, slots, and other gaming services, and recording the outcomes of all wagers and game rounds.
• Providing customer support through live chat and email, including investigating and resolving complaints and disputes.
• Complying with our legal and regulatory obligations under pak366's international gaming licence, including AML screening, transaction monitoring, and mandatory reporting.
• Monitoring gameplay and transaction patterns to detect and prevent fraud, collusion, bonus abuse, match fixing, and other prohibited conduct as described in the pak366 Terms and Conditions.
• Operating our responsible gaming tools, including enforcing deposit limits, loss limits, self-exclusion requests, and cooling-off periods that you have activated on your Account.
• Sending you transactional notifications regarding your Account, deposits, withdrawals, and promotional offers — subject to your notification preferences.
• Improving and developing the pak366 Platform through aggregated and anonymised analytics, user research, and A/B testing.
• Enforcing our Terms and Conditions, including taking action against Accounts that breach our policies.

pak366 does not sell, rent, or otherwise transfer your Personal Data to unaffiliated third parties for their own commercial purposes. Your data may be shared only in the following circumstances and only to the extent strictly necessary:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard receive only the transactional and identity data required to process your specific payment instruction.
• KYC and AML providers: Authorised identity verification and sanctions-screening service providers receive the identity documents and data you submit during verification, solely for the purpose of completing that verification.
• Game software providers: Third-party casino game studios and RNG certification bodies receive limited technical and session data required to deliver and certify game outcomes. These providers do not receive your full identity or financial profile.
• IT and platform service providers: Cloud hosting, cybersecurity, and analytics service providers who process data on behalf of pak366 as data processors under binding data processing agreements.
• Regulatory and law enforcement authorities: pak366 may be legally required to disclose Personal Data to gaming regulators, financial intelligence units, tax authorities, or law enforcement agencies in response to lawful requests, court orders, or mandatory reporting obligations.
• Corporate restructuring: In the event of a merger, acquisition, or sale of all or substantially all of pak366's assets, Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party data processors engaged by pak366 are required to process Personal Data only on pak366's documented instructions, implement appropriate technical and organisational security measures, and not sub-process data without prior written authorisation from pak366.

pak366 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The principal retention periods applied by pak366 are as follows:

• Active Account data: Retained for the duration of your Account relationship with pak366 and for a period of five (5) years following the permanent closure of your Account, to comply with AML, fraud investigation, and gaming licence record-keeping requirements.
• KYC verification documents: Retained for a minimum of five (5) years following the end of the business relationship, in accordance with international AML standards applicable under pak366's gaming licence.
• Transaction and wager records: Retained for a minimum of five (5) years to support regulatory reporting, audit, and dispute resolution obligations.
• Customer support communications: Retained for three (3) years following the closure of the relevant support case, unless the matter is subject to ongoing legal proceedings.
• Technical and usage data: Retained for up to twenty-four (24) months in identifiable form, after which it is aggregated and anonymised for analytical purposes.
• Marketing consent records: Retained for as long as you remain an active player and for three (3) years following Account closure, to demonstrate compliance with consent requirements.

At the end of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

As a data subject whose Personal Data is processed by pak366, you hold the following rights. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and include your Account username for verification purposes. pak366 will respond within thirty (30) days of receipt.

• Right of access: You may request a copy of the Personal Data that pak366 holds about you, together with information about the purposes for which it is processed, the categories of data held, and the recipients with whom it has been shared.
• Right to rectification: You may request the correction of any inaccurate or incomplete Personal Data held about you. You may also update certain Account details directly through your pak366 Account settings.
• Right to erasure: You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right is subject to pak366's legal obligations to retain certain data under gaming licence and AML regulations, which may override erasure requests in specific circumstances.
• Right to restriction: You may request that pak366 restrict the processing of your Personal Data in certain circumstances, such as while the accuracy of data you have disputed is being verified.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your Personal Data where pak366 relies on legitimate interests as its legal basis, and you believe your rights and interests override those legitimate interests. You may also object at any time to the use of your data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

The pak366 Platform uses cookies and similar tracking technologies to operate correctly, maintain your session, and improve your experience. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function. These cookies manage your login session, maintain your Account authentication state, and enable core security features. They cannot be disabled without disrupting Platform functionality.
• Performance and analytics cookies: Used to collect aggregated, anonymised data about how players interact with the Platform — including pages visited, features used, and error encounters — to help pak366 improve its services. These cookies do not identify you personally.
• Functionality cookies: Remember your preferences such as language settings, game display preferences, and notification choices to provide a more personalised experience.
• Fraud detection and security cookies: Used by pak366's fraud prevention systems to identify suspicious session patterns, detect bot activity, and flag potentially fraudulent transactions for review.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair or prevent your ability to use the pak366 Platform. pak366 does not use third-party advertising or behavioural profiling cookies.

The pak366 Platform is strictly intended for adults aged 21 years and over. pak366 does not knowingly collect, process, or retain Personal Data from any person under the age of 21.

If pak366 discovers or has reason to believe that an Account is held by a person under the age of 21, that Account will be immediately suspended, all associated Personal Data will be reviewed, and any funds held in the Account will be withheld pending investigation in accordance with pak366's minor protection and responsible gaming obligations under its gaming licence.

Parents and guardians who believe their child has registered an Account on pak366 are strongly encouraged to contact [email protected] immediately so that the matter can be resolved without delay. pak366 takes underage access to its Platform extremely seriously and will act swiftly on any such report.

pak366 operates under an international gaming licence and may engage service providers — including cloud infrastructure providers, KYC verification platforms, and game studios — whose servers and operations are located outside Pakistan. As a result, your Personal Data may be transferred to and processed in countries other than Pakistan.

Where such international transfers occur, pak366 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within the Platform's primary jurisdiction. These safeguards may include:

• Contractual clauses in data processing agreements that impose equivalent data protection obligations on the recipient.
• Transfers only to countries or organisations that have received an adequacy determination from a recognised data protection authority.
• Technical and organisational measures — including encryption in transit and at rest — that mitigate the risks associated with cross-border data transfers.

You may request further information about the specific safeguards applicable to any international transfer of your data by contacting [email protected].

pak366 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, without limitation:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the pak366 Platform.
• Encryption of sensitive Personal Data and financial data at rest within pak366's secure data infrastructure.
• Strict role-based access controls ensuring that pak366 staff can only access Personal Data to the extent required by their specific role and responsibilities.
• Regular penetration testing and independent security audits conducted by qualified cybersecurity professionals.
• Multi-factor authentication options for player Accounts to reduce the risk of unauthorised login.
• Continuous monitoring of platform infrastructure for anomalous activity, intrusion attempts, and data breach indicators.
• A documented incident response procedure enabling pak366 to detect, investigate, contain, and notify affected parties of data breaches in a timely manner.

While pak366 employs industry-standard security practices, no digital platform can guarantee absolute security. You are encouraged to use a strong, unique password for your pak366 Account and to enable any available two-factor authentication feature to further protect your Account from unauthorised access.

pak366 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or the services we provide. Where changes are material, pak366 will notify active players via email or an in-platform notification at least fourteen (14) days before the revised Policy takes effect.

The updated Privacy Policy will be published on this page with a revised "Last Reviewed" date. Your continued use of the pak366 Platform after the effective date of any update constitutes your acknowledgment of the revised Policy. If you do not agree with the updated terms, you must cease using the Platform and contact [email protected] to close your Account.

pak366 recommends that players review this Privacy Policy periodically to stay informed of any changes that may affect the handling of their Personal Data.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how pak366 has handled your Personal Data, please contact the pak366 Data Protection team using the details below:

pak366 takes all privacy complaints seriously. Upon receipt of a complaint, we will acknowledge it promptly, investigate the matter thoroughly, and respond with our findings and any remedial action taken within thirty (30) days. Where a complaint cannot be resolved within thirty days due to its complexity, pak366 will notify you of the delay and provide an estimated resolution timeline.

If you remain dissatisfied with pak366's response to your privacy complaint, you may escalate the matter to the relevant data protection supervisory authority or the dispute resolution body designated under pak366's international gaming licence. pak366 will cooperate fully with any such supervisory investigation.