pk365 Privacy Policy

For the purposes of this Privacy Policy, the data controller in respect of all personal data collected through the pk365 platform (accessible at pk365.today) is the legal entity operating the pk365 gaming platform under its international gaming licence. References to "pk365", "we", "us", or "our" throughout this Policy refer to that entity.

pk365 is responsible for determining the purposes and means of processing your personal data. If you have any questions about how your data is handled, or if you wish to exercise any of the rights described in Section 10 of this Policy, you may contact our Data Protection contact point via the 24/7 live chat facility on pk365.today. All data-related enquiries will be directed to the appropriate team and responded to within the timelines set out in Section 15.

This Privacy Policy applies to all personal data collected from users located in Pakistan and processed in connection with the operation of the pk365 gaming platform, including its sports betting, live casino, and slot game products. It applies to data collected via the website, mobile browser access, and any pk365 communications channels including live chat and support correspondence.

pk365 collects and processes personal data across the following categories. The specific data points collected within each category are detailed in the table below.

pk365 collects your personal data through the following channels and mechanisms:

• Direct Submission at Registration: When you create a pk365 account, you directly provide your name, CNIC number, mobile number, date of birth, and chosen password. This is the primary source of your identity and contact data.
• KYC Document Uploads: When you initiate the identity verification process to unlock full withdrawal functionality, you upload CNIC images and proof-of-address documents directly to the pk365 secure document portal.
• Payment Transactions: When you make a deposit or request a withdrawal, your payment method details (JazzCash number, EasyPaisa number, bank account details) are captured and recorded in association with your account transaction history.
• Gaming Platform Usage: Your betting and gaming activity is automatically recorded by the pk365 platform systems as it occurs. Every bet placed, game session started, and spin completed generates a log entry associated with your account.
• Support Interactions: When you contact pk365 Support via live chat or any other channel, the content of those interactions — including any personal data you voluntarily disclose during support correspondence — is retained as part of your support record.
• Automated Technical Collection: Certain technical data is collected automatically by pk365's servers when you access the platform, including IP addresses, device identifiers, and session metadata. This data is collected passively without requiring any action on your part.
• Cookies and Analytics Technologies: As described in detail in Section 9, pk365 uses cookies and related technologies to collect session data, performance metrics, and user preference information.

pk365 processes your personal data for the following specific purposes. For each purpose, the corresponding legal basis under Section 5 is indicated:

• Account Creation and Management: Processing your registration data to create, maintain, and administer your pk365 account, including account security, login verification, and two-factor authentication. (Legal basis: Contract performance)
• Identity Verification and KYC Compliance: Processing your CNIC and supporting documents to verify your identity, confirm your age (21+ requirement), and comply with our anti-money laundering obligations under our gaming licence. (Legal basis: Legal obligation)
• Payment Processing: Processing your financial data to execute deposit requests, process withdrawal instructions, investigate payment disputes, and maintain accurate transaction records. (Legal basis: Contract performance)
• Gaming Service Delivery: Processing your gaming activity data to operate the sportsbook, casino, and slot game products you use, including bet settlement, jackpot calculations, and bonus tracking. (Legal basis: Contract performance)
• Fraud Prevention and Security: Analysing account activity, login patterns, IP address data, and transaction behaviour to detect, investigate, and prevent fraud, money laundering, bonus abuse, and prohibited conduct as defined in the pk365 Terms and Conditions. (Legal basis: Legitimate interest)
• Responsible Gaming Monitoring: Reviewing gaming activity patterns to identify behaviour potentially indicative of problem gambling and to operationalise responsible gaming tools including deposit limits, session timers, and self-exclusion requests. (Legal basis: Legal obligation / Legitimate interest)
• Customer Support: Using your account data and communication history to investigate and resolve support queries efficiently and accurately. (Legal basis: Contract performance)
• Platform Improvement and Analytics: Using aggregated and anonymised usage data to understand how Pakistani players interact with pk365 features, to identify technical performance issues, and to guide product development decisions. (Legal basis: Legitimate interest)
• Regulatory Compliance and Reporting: Retaining records as required by gaming licence obligations and applicable law, and providing data to regulatory or law enforcement authorities upon receipt of valid legal process. (Legal basis: Legal obligation)
• Marketing Communications: Sending promotional communications about pk365 offers, bonuses, and platform updates to users who have opted in to receive such communications (see Section 12 for opt-out rights). (Legal basis: Consent)

pk365 relies on the following legal bases to process your personal data, as referenced against each processing purpose in Section 4:

• Contract Performance: Processing that is necessary to perform the contract between you and pk365 — i.e., to deliver the gaming services you have registered to use, to manage your account, and to process your financial transactions. Without this processing, pk365 cannot provide you with any services.
• Legal Obligation: Processing required to comply with legal and regulatory obligations applicable to pk365 under its international gaming licence, including KYC identity verification, AML transaction monitoring, record-keeping requirements, and mandatory reporting obligations.
• Legitimate Interests: Processing that is necessary to pursue pk365's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and anonymous analytics — provided those interests are not overridden by your fundamental rights and freedoms. Where we rely on legitimate interests, we have conducted an assessment confirming the balance favours processing.
• Consent: Processing for which we have obtained your explicit consent prior to commencing, specifically in relation to marketing communications and non-essential cookies. You have the right to withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

pk365 does not sell your personal data to any third party under any circumstances. We do not share your personal data with advertisers, data brokers, or marketing networks. Data sharing is limited strictly to the categories of recipients described below, each of which is bound by confidentiality obligations and data processing agreements with pk365:

• Payment Service Providers: Your financial transaction data is shared with the relevant payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, SadaPay, and USDT network) to the extent necessary to execute your deposit and withdrawal instructions. Each payment provider operates under its own data protection framework.
• KYC and Identity Verification Services: CNIC images and supporting KYC documents are processed through pk365's identity verification service provider, which operates under a data processing agreement. Documents are processed exclusively for identity verification purposes and are not retained by the verification provider beyond the verification event.
• Game Software Providers: Your gaming session data (game type, wager values, outcomes) may be shared with the relevant game studios and platform providers (such as slot game developers) to the minimum extent necessary to deliver game functionality, resolve technical disputes, and ensure RNG integrity. Individual player identity is not shared with game studios beyond what is technically required.
• Fraud Prevention and AML Services: Transaction and behavioural data may be shared with third-party fraud detection and AML screening services to assist in detecting prohibited activity. These providers act as data processors under binding agreements.
• Regulatory and Law Enforcement Authorities: pk365 will disclose personal data to applicable regulatory bodies or law enforcement agencies where required to do so by valid legal process, court order, or statutory obligation under gaming licence requirements. Such disclosures are made to the minimum extent necessary.
• Professional Advisers: Legal, accounting, and auditing professionals retained by pk365 may access account data as necessary in the course of their professional engagement, subject to professional secrecy obligations.

pk365 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected and to comply with applicable legal and regulatory obligations. The following retention framework applies:

Upon expiry of the applicable retention period, personal data is either securely deleted from pk365's systems or irreversibly anonymised such that it can no longer be associated with any identifiable individual. Anonymised aggregated data may be retained indefinitely for platform analytics and statistical purposes.

pk365 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. The principal security controls currently deployed include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the pk365 platform is encrypted using 256-bit SSL/TLS — the same encryption standard used by Pakistan's major commercial banks for online banking. This prevents interception of data in transit by any third party.
• Encrypted Data Storage: Sensitive data fields including passwords (stored only as salted hashes), CNIC numbers, and financial account details are encrypted at rest within pk365's database infrastructure. Raw personal data values are not stored in plain text.
• Access Controls: Access to pk365 systems containing user personal data is restricted to authorised personnel on a strict need-to-know basis. All internal data access is logged and subject to regular audit review. No employee has unrestricted access to the full user database.
• Two-Factor Authentication (2FA): 2FA via SMS OTP is available for all pk365 accounts and is enforced for all internal administrative access to production systems. Players are strongly encouraged to activate 2FA from Account Settings.
• Penetration Testing: pk365's platform undergoes scheduled security penetration testing conducted by independent third-party security firms. Critical vulnerabilities identified are remediated within defined response-time service levels.
• Security Incident Response: pk365 maintains a documented security incident response procedure. In the event of a personal data breach that creates a risk to player rights, affected players will be notified within the timeframe required by applicable regulatory obligations.

pk365 uses cookies and similar browser-based tracking technologies to operate the platform effectively, improve the user experience for Pakistani players, and analyse platform performance. The following categories of cookies are used by pk365:

You may control non-essential cookie categories through the pk365 Cookie Preference Centre, accessible via the cookie banner displayed on your first visit to pk365.today. Strictly necessary and security cookies cannot be disabled. Disabling functional cookies will reset your platform preferences on each visit. You may also manage cookies through your browser's native settings, though this may affect platform functionality beyond pk365's control.

As a registered pk365 user, you hold the following rights in relation to your personal data. You may exercise any of these rights at any time by contacting pk365 Support via live chat or by emailing the data privacy contact address. pk365 will respond to all valid data rights requests within thirty (30) calendar days of receipt:

The pk365 platform is strictly restricted to individuals aged 21 years and above. pk365 does not knowingly collect, store, or process personal data belonging to any person under the age of 21. Age verification is a mandatory step of the pk365 registration and KYC process, and CNIC verification is used to confirm that every registered account holder meets the minimum age requirement.

If pk365 becomes aware, at any point, that personal data has been collected from an individual who is under 21 years of age, the following steps will be taken immediately: the relevant account will be suspended and permanently closed; all personal data associated with that account will be deleted to the extent not required to be retained under mandatory legal obligations; any deposits associated with the account will be returned to the originating payment method; and all winnings generated through the account will be forfeited.

If you are a parent or guardian and believe that a minor may have created a pk365 account, please contact pk365 Support via live chat immediately. We will treat such reports as a priority and take prompt action.

pk365 will only send you promotional communications — including SMS notifications about bonuses, offers, and platform updates — where you have expressly opted in to receive such communications at the time of account registration or subsequently through Account Settings. Marketing opt-in is not a mandatory condition of registration and your access to pk365 services is not affected by declining marketing communications.

If you have opted in to marketing communications, you may withdraw that opt-in at any time by:

• Updating your communication preferences in Account Settings → Notifications;
• Replying STOP to any pk365 SMS message; or
• Contacting pk365 Support via live chat and requesting that marketing communications be ceased.

Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to withdrawal. Transactional and account-related communications — such as deposit confirmations, withdrawal notifications, account security alerts, and KYC status updates — are not marketing communications and will continue to be sent regardless of your marketing opt-in status, as they are necessary for the operation of your account.

The pk365 platform does not contain links to external third-party websites or applications. All content accessible through pk365.today is operated by or under direct licence from pk365. However, the game software integrated into the pk365 casino and slot platform is supplied by third-party game studios. These studios deliver game content within the pk365 platform environment and may collect limited technical session data as described in Section 6.

pk365 is not responsible for the data practices of any payment provider operating independently — such as JazzCash, EasyPaisa, or participating banks — when you interact with their own platforms or apps to initiate a payment to pk365. Those payment providers operate under their own independently published privacy policies, which govern the data they collect through their own interfaces. pk365 only receives the payment confirmation data necessary to credit your account.

pk365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable legal or regulatory requirements, or changes in the technical architecture of our platform. The "Last Revised" date displayed at the top of this Policy and in the effective date bar above will be updated whenever a substantive revision is made.

Where a proposed amendment materially affects the rights of registered players — for example, introducing a new category of data processing or a new category of third-party data sharing — pk365 will provide advance notice to registered users via SMS to the mobile number associated with their account, at least fourteen (14) days prior to the amended Policy taking effect.

Your continued use of the pk365 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any revision, you have the right to request account closure and data deletion as described in Sections 7 and 10 before the revised Policy takes effect.

If you have any questions about this Privacy Policy, about how pk365 processes your personal data, or if you wish to exercise any of the rights described in Section 10, please contact the pk365 Privacy team through the following channel:

If you are not satisfied with pk365's response to your privacy enquiry or data rights request, you have the right to escalate your complaint to the independent dispute resolution body specified under pk365's gaming licence, or to the applicable data protection supervisory authority. Details of the applicable escalation authority are available on request from pk365 Support.