Privacy Policy — pkt365

pkt365 is an online casino and sports betting platform operating at pkt365.net, serving English-speaking players across Pakistan. For the purposes of this Privacy Policy, pkt365 acts as the data controller responsible for the personal information collected from users of the Platform.

This Privacy Policy applies to all individuals who visit, register on, or use any part of the pkt365 Platform, including the website, account portal, casino games, sports betting interface, and all associated services. By using pkt365, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

pkt365 collects the following categories of personal data from users of the Platform:

2.1 Identity & Registration Data

• Full legal name
• Date of birth (for age verification purposes)
• Gender (where provided voluntarily)
• Government-issued identification document details (for KYC verification)
• Selfie or photograph (where required for identity verification)

2.2 Contact Data

• Email address
• Mobile phone number
• Residential address and city (e.g., Karachi, Lahore, Islamabad, Faisalabad)

2.3 Financial Data

• JazzCash or EasyPaisa account identifiers
• Bank account details (HBL, UBL, Meezan Bank, or other institutions) provided for withdrawal processing
• Card details (Visa / Mastercard) — card numbers are not stored by pkt365 directly; they are processed via PCI-DSS compliant payment processors
• Deposit and withdrawal transaction history

2.4 Gaming & Betting Data

• Betting history, wager amounts, and settlement records
• Casino game session history and outcomes
• Bonus and promotion usage records
• Responsible gaming tool settings (deposit limits, self-exclusion status)

2.5 Technical & Usage Data

• IP address and approximate geolocation
• Browser type, version, and operating system
• Device identifiers
• Pages visited, session duration, and clickstream data
• Login timestamps and session logs

pkt365 collects personal data through the following means:

pkt365 processes your personal data for the following specific purposes:

• Account Management: To create, maintain, and administer your pkt365 account, including login authentication and account security.
• Age & Identity Verification: To confirm that you are at least 21 years of age and to verify your identity in compliance with our KYC obligations.
• Payment Processing: To process deposits, withdrawals, and refunds in PKR via your chosen payment method.
• Service Delivery: To provide access to casino games, live dealer tables, sports betting markets (including PSL, cricket, and football), and all other platform features.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other security threats.
• Responsible Gaming: To monitor gaming patterns and enforce responsible gaming tools including deposit limits, cool-off periods, and self-exclusion where applicable.
• Legal Compliance: To fulfil obligations under anti-money laundering regulations, licensing requirements, and any lawful requests from regulatory authorities.
• Customer Support: To respond to your support queries, complaints, and data rights requests.
• Platform Improvement: To analyse aggregate usage data and improve the functionality, performance, and content of the pkt365 Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent to receive such communications. You may opt out at any time.

pkt365 processes your personal data on one or more of the following legal grounds:

• Contractual Necessity: Processing required to fulfil our obligations under the pkt365 Terms and Conditions, including account management and payment processing.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC, anti-money laundering, and licensing obligations.
• Legitimate Interests: Processing carried out in pursuit of pkt365's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent, primarily in connection with marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

pkt365 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, Visa, and Mastercard — to facilitate deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party services engaged to verify your identity and age during the registration or withdrawal process.
• Game Content Providers: Licensed casino game and live dealer software providers who supply games featured on pkt365. These providers may process session data in connection with gameplay.
• Analytics Providers: Platform analytics services used to understand aggregate user behaviour and improve the pkt365 experience. Only anonymised or aggregated data is shared where possible.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, a valid court order, or a legitimate regulatory request. pkt365 will notify you of any such disclosure where legally permitted to do so.
• Fraud Prevention Networks: Industry fraud-sharing networks where your data may be checked against known fraud indicators to protect the integrity of the Platform.

All third-party processors engaged by pkt365 are subject to data processing agreements requiring them to handle your data in accordance with applicable privacy standards and solely for the purposes for which they were engaged.

pkt365 uses cookies and similar technologies on the Platform. Cookies are small text files stored on your device that help us recognise returning users, maintain session continuity, and understand how players interact with our services.

Types of Cookies We Use

• Strictly Necessary Cookies: Required for core Platform functionality such as login session management and account security. These cannot be disabled.
• Performance & Analytics Cookies: Used to collect anonymised information about how visitors use pkt365.net, helping us identify and fix issues and improve page performance.
• Functionality Cookies: Store your preferences such as language settings, preferred payment method, and responsible gaming reminder intervals.
• Marketing Cookies: Used where you have consented to receive personalised promotional content. You may opt out of these at any time via your browser settings.

pkt365 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal and regulatory obligations. The following indicative retention periods apply:

• Account & Identity Data: Retained for the duration of your active account relationship with pkt365, plus a minimum of five (5) years following account closure to meet anti-money laundering record-keeping requirements.
• Transaction & Financial Records: Retained for a minimum of five (5) years from the date of each transaction in compliance with financial record-keeping obligations.
• Gaming History: Retained for three (3) years from the date of each session, unless a longer period is required for dispute resolution or regulatory purposes.
• Marketing Consent Records: Retained for the period of consent plus one (1) year following withdrawal of consent, to demonstrate compliance.
• Technical & Log Data: Retained for up to twelve (12) months, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identifiable individual.

pkt365 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and pkt365 servers.
• Encryption of sensitive data at rest, including financial identifiers and identity documents.
• Strict role-based access controls, ensuring that only authorised personnel with a legitimate business need can access personal data.
• Regular security assessments and vulnerability testing of Platform infrastructure.
• Multi-factor authentication requirements for administrative access to data systems.
• Incident response procedures to identify, contain, and notify in the event of a data security breach.

As a pkt365 user, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected]. We will respond within five (5) business days of receiving a verifiable request.