pak360 Privacy Policy
How We Handle Your Personal Data

pak360 is an online gaming and sports betting platform operating at pak360.bet, serving players across Pakistan and internationally under international gaming licensing standards. For the purposes of this Privacy Policy, pak360 acts as the data controller — meaning we determine the purposes and means by which your personal data is processed.

This Privacy Policy applies to all personal data processed in connection with:

• Your registration and use of a pak360 account.
• Your participation in any pak360 product, including the sportsbook, live casino, slots, and Pearls of Bingo.
• Any communication you initiate with pak360 via live chat, email, or any other support channel.
• Your interaction with pak360.bet, including browsing behaviour tracked via cookies and similar technologies.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which govern your use of the pak360 platform.

pak360 collects personal data in three primary ways: data you provide directly, data generated automatically through your use of the platform, and data received from third-party verification or payment partners.

pak360 uses your personal data only for legitimate, clearly defined purposes. The following sets out every material use of your data on the platform:

• Account creation and management: Your registration data is used to create and maintain your pak360 account, authenticate your identity at each login, and manage your account settings and preferences.
• Age and identity verification (KYC): Your CNIC and supporting documents are used to confirm that you are at least 21 years of age and that your identity matches your registered account details, in compliance with responsible gaming and anti-money laundering obligations.
• Payment processing: Financial data is used to facilitate deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20, and to process withdrawals back to your verified payment method.
• Game and platform delivery: Technical and gaming activity data is used to deliver, personalise, and improve the pak360 gaming experience, including ensuring your account balance and bet history are correctly maintained.
• Fraud prevention and security: Technical data, gaming behaviour, and transaction patterns are analysed by pak360's fraud detection systems to identify and prevent fraudulent activity, money laundering, bonus abuse, and unauthorised account access.
• Responsible gaming monitoring: Gaming activity and account data are used to identify patterns consistent with problem gambling behaviour, enabling pak360 to intervene proactively in the interest of player welfare.
• Marketing communications: Where you have opted in, your contact details and preferences are used to send you promotional offers, bonus notifications, and platform updates. You can withdraw marketing consent at any time from your account settings.
• Legal and regulatory compliance: pak360 is required by its licensing obligations and applicable law to retain certain data for defined periods and to report specified information to relevant authorities. Your data may be used for these compliance purposes.
• Customer support: Communications data is used to manage and resolve your support queries, complaints, and account-related requests efficiently.

pak360 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you accept at registration — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations, KYC requirements under our licensing conditions, and tax or financial reporting requirements.
• Legitimate interests: Processing carried out for pak360's legitimate business interests, where those interests are not overridden by your privacy rights — including fraud prevention, platform security, and improving the quality of our services.
• Consent: Where you have given explicit consent — for example, opting in to receive marketing communications or agreeing to non-essential cookie categories. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

For each processing activity described in Section 3, the applicable legal basis is the most appropriate of the above four, applied in accordance with the principles set out in this Privacy Policy.

pak360.bet uses cookies and similar tracking technologies to operate the platform effectively, improve user experience, and — where you have consented — to deliver relevant promotional content.

The categories of cookies used on pak360.bet are as follows:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, CSRF protection tokens, and load balancing cookies. These cannot be disabled without impacting platform functionality.
• Performance & Analytics Cookies: Used to understand how users interact with pak360.bet — for example, which pages are visited most frequently and where users encounter navigation difficulties. This data is aggregated and anonymised.
• Functional Cookies: Store your preferences such as language selection, last-visited game category, and account display settings to provide a more personalised experience on return visits.
• Marketing Cookies: Used only where you have given explicit consent, to track engagement with pak360 promotional content and tailor offers to your interests. You may withdraw this consent at any time.

Your cookie preferences can be managed via the cookie settings panel available at the bottom of any page on pak360.bet, or through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your pak360 account.

pak360 does not sell, rent, or trade your personal data to any third party. Data is shared with third parties only in the limited circumstances described below, and only to the extent necessary for the specific purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and SadaPay receive the minimum financial data necessary to process your deposit or withdrawal. Each payment partner is bound by its own privacy policy and applicable Pakistani financial regulation.
• Identity verification (KYC) providers: pak360 works with licensed KYC and AML compliance technology partners to verify CNIC documents and conduct liveness checks. These partners process data under strict data processing agreements with pak360.
• Gaming software providers: The third-party game studios and live casino operators whose products are available on pak360 receive anonymised session tokens and game-play data necessary to deliver game results and calculate winnings. They do not receive your identity or payment data.
• Regulatory and law enforcement authorities: pak360 may be legally required to disclose specified data to licensing authorities, financial intelligence units, or law enforcement agencies. Such disclosures are made only in response to lawful, documented requests.
• Fraud prevention networks: pak360 participates in industry fraud prevention data-sharing initiatives where permitted. Participation involves sharing anonymised fraud signals — not personally identifiable information — to protect the integrity of the gaming ecosystem.

pak360 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any longer retention period required by law or regulation. The following general retention periods apply:

• Account and registration data: Retained for the duration of your active account relationship with pak360, plus a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification, or longer where required by licensing authority record-keeping obligations.
• Transaction records: All deposit and withdrawal records are retained for a minimum of 5 years in accordance with AML and financial compliance requirements.
• Gaming activity logs: Bet history and game session records are retained for 3 years from the date of the relevant activity, after which they are anonymised and retained in aggregate form for statistical purposes only.
• Support communications: Live chat transcripts and email correspondence are retained for 2 years from the date of the last interaction in the relevant thread.
• Marketing data: Retained until you withdraw consent or request deletion, subject to the minimum retention periods above where the same data category overlaps.

Upon expiry of the applicable retention period, pak360 will securely delete or irreversibly anonymise your personal data. If you request account closure, pak360 will initiate deletion of non-legally-required data within 30 days of the closure being processed, while retaining data subject to mandatory retention periods.

pak360 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Key security measures include:

• TLS/SSL encryption: All data transmitted between your device and pak360.bet is encrypted in transit using current TLS standards, preventing interception of your credentials, payment details, or account data.
• Encryption at rest: Sensitive personal data — including CNIC details and financial account references — is encrypted at rest using AES-256 or equivalent standards within pak360's secure data infrastructure.
• Access controls: Access to personal data within pak360's internal systems is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for administrative access.
• Penetration testing: pak360's platform and data infrastructure undergo regular independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: pak360 maintains a documented data breach response plan. In the event of a confirmed breach affecting personal data, the plan specifies notification timelines, containment procedures, and user communication protocols.

While pak360 takes all reasonable steps to protect your data, no system is entirely immune to security risk. You also play a role in keeping your account secure — choosing a strong, unique password and not sharing your login credentials with anyone are among the most effective steps you can take.

As a pak360 user, you hold the following rights in respect of your personal data. These rights can be exercised by contacting pak360 support via live chat or email at [email protected]:

• Right of Access: You have the right to request a copy of the personal data pak360 holds about you, together with information about how it is being processed. pak360 will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Minor updates such as contact number or city of residence can often be made directly within your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where you object to processing and there is no overriding legitimate interest. Note that mandatory retention obligations (Section 7) may mean pak360 is unable to delete certain categories of data immediately.
• Right to Restriction: You may request that pak360 restrict processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: For data processed on the basis of consent or contractual necessity, you have the right to receive a machine-readable copy of your personal data for the purpose of transferring it to another service provider.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including direct marketing. Once you object to marketing, pak360 will cease marketing communications immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

pak360 operates a strict 21+ only policy. The platform is not intended for use by any person under the age of 21, and pak360 does not knowingly collect personal data from anyone under that age.

Age verification is conducted as part of the KYC process required before any withdrawal is processed, and pak360 employs automated screening tools to flag accounts that may not satisfy the age eligibility requirement. Any account determined to belong to a person under the age of 21 will be immediately suspended and all personal data associated with that account will be deleted, subject only to any retention obligations imposed by law.

If you are a parent or guardian and you believe a minor in your care has registered an account on pak360, please contact us immediately at [email protected]. pak360 will investigate and take swift action to close the account and delete the minor's data.

We strongly recommend the use of parental control software on shared devices to prevent minors from accessing online gaming platforms. pak360 supports responsible gaming initiatives that include safeguarding children from exposure to gambling content.

pak360 is operated under international gaming licensing standards, and elements of the platform's technical infrastructure — including cloud hosting, game delivery networks, and KYC verification services — may involve processing your personal data in jurisdictions outside Pakistan.

Where personal data is transferred internationally, pak360 ensures that appropriate safeguards are in place, which may include:

• Contractual clauses in data processing agreements with third-party vendors that impose data protection obligations equivalent to those applicable in the originating jurisdiction.
• Processing exclusively with vendors who operate in jurisdictions recognised as providing an adequate level of data protection.
• Applying additional technical security controls — such as end-to-end encryption — where cross-border transfers involve sensitive categories of personal data.

By registering a pak360 account, you acknowledge that your personal data may be processed in jurisdictions outside Pakistan as described in this Policy. If you have questions about the specific safeguards applicable to any cross-border transfer of your data, please contact pak360 support.

pak360 reviews this Privacy Policy periodically and will update it where necessary to reflect changes in our data processing practices, applicable law, or our platform offerings. The "Last Updated" date displayed at the top of this page will be revised each time a material change is made.

For material changes to this Policy — particularly those that affect your rights or the way we use your data — pak360 will provide advance notice via an in-account notification or email to your registered address, where reasonably practicable, before the changes take effect.

Your continued use of pak360.bet following publication of an updated Privacy Policy constitutes your acknowledgement of the revised Policy. If you do not agree with any change, you may close your account by contacting support before the revised Policy takes effect.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how pak360 handles your personal data, please reach out through the following channels:

• Live Chat: Available 24/7 directly from your pak360 account dashboard — the fastest route for account-specific privacy queries.
• Email: [email protected] — for formal written privacy requests or complaints. Please use the subject line "Privacy Request" or "Privacy Complaint" and include your registered username.

pak360 aims to acknowledge all privacy-related communications within 2 business days and to provide a full response within 30 calendar days of receipt. For complex requests, pak360 may extend this period by a further 30 days, in which case you will be notified of the extension and the reason for it.

If you are not satisfied with pak360's response to your privacy complaint, you have the right to escalate the matter to the data protection supervisory authority or dispute resolution body designated under pak360's licensing framework. Details of the applicable body are available on request from the support team.