pak367 Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") describes how pak367 ("pak367", "we", "us", "the Company") collects, uses, stores, and discloses personal information about individuals ("you", "User", "Player") who access or use the pak367 platform, including the website located at pak367.org, the mobile interface, sportsbook, live casino, slot games, and all associated services (collectively, "the Platform").

1.2 pak367 is committed to protecting the privacy of its users and to handling personal data responsibly, transparently, and in accordance with the data protection obligations of its international gaming licence.

1.3 By accessing the pak367 Platform or creating an account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you must not access or use the pak367 Platform.

1.4 This Privacy Policy should be read together with the pak367 Terms & Conditions and Responsible Gaming Policy. In the event of any conflict between this Policy and those documents regarding data handling, this Privacy Policy shall take precedence.

2. Data Controller

2.1 For the purposes of this Privacy Policy, pak367 acts as the data controller in respect of personal data collected through the Platform. As data controller, pak367 determines the purposes and means by which your personal data is processed.

2.2 Where pak367 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, or customer support platforms — those providers act as data processors under binding contractual obligations that require them to handle your data only as instructed by pak367 and in compliance with applicable data protection standards.

2.3 For all data-related enquiries, requests, or complaints, you may contact pak367 directly at [email protected].

3. Data We Collect

3.1 pak367 collects the following categories of personal information from users of the Platform:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, CNIC number, nationality	Account registration, KYC verification, age verification
Contact Data	Email address, Pakistani mobile number, residential address	Account management, support communications, regulatory notices
Financial Data	JazzCash / EasyPaisa account numbers, bank account details, USDT wallet addresses, transaction history	Processing deposits and withdrawals, fraud prevention, AML compliance
Technical Data	IP address, device type, browser type and version, operating system, session identifiers	Platform security, fraud detection, service optimisation
Usage Data	Pages visited, games played, bet history, session duration, login timestamps	Responsible gaming monitoring, platform improvement, personalisation
KYC Documents	Copies of CNIC, utility bills, selfies for facial verification, payment method screenshots	Identity verification, regulatory compliance, fraud prevention
Communications Data	Support chat transcripts, email correspondence, complaint records	Customer service, dispute resolution, quality assurance

3.2 pak367 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification purposes under KYC obligations.

4. How We Collect Your Data

4.1 Directly from you: The majority of personal data pak367 holds about you is information you provide directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.

4.2 Automatically: When you access the pak367 Platform, certain technical and usage data is collected automatically through cookies, server logs, and similar tracking technologies. This includes your IP address, device identifiers, and details of your interactions with the Platform.

4.3 From third parties: pak367 may receive personal data about you from third-party identity verification providers, fraud prevention agencies, and payment processors as part of our KYC and anti-money laundering compliance processes. We may also receive information from responsible gaming self-exclusion registries where you have registered with such a service.

5. How We Use Your Data

5.1 pak367 uses your personal data for the following purposes:

• Account Creation and Management: To set up, maintain, and administer your pak367 account, including verifying your identity and age;
• Processing Transactions: To process your deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and USDT TRC20, and to maintain accurate financial records;
• Regulatory Compliance: To fulfil pak367's obligations under its international gaming licence, including KYC, anti-money laundering (AML), and counter-terrorism financing (CTF) requirements;
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling, enforce deposit and loss limits you have set, and give effect to self-exclusion or cooling-off requests;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account misuse, money laundering, and other prohibited conduct;
• Customer Support: To respond to your queries, complaints, and requests efficiently and accurately;
• Platform Improvement: To analyse usage patterns, conduct internal research, and develop and test new features and services;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications.

5.2 pak367 will not use your personal data for any purpose that is incompatible with the purposes described in this Policy without first obtaining your explicit consent or establishing a separate lawful basis for doing so.

6. Legal Basis for Processing

6.1 pak367 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and pak367, including account management, payment processing, and service delivery;
• Legal Obligation: Processing required to comply with applicable laws, regulations, and licensing requirements, including KYC, AML, and CTF obligations;
• Legitimate Interests: Processing necessary for pak367's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have given freely provided, specific, informed, and unambiguous consent which you may withdraw at any time.

7. Data Sharing

7.1 pak367 does not sell, rent, or trade your personal data to any third party. Data is shared only in the following limited circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and USDT TRC20 wallet infrastructure providers receive financial data necessary to process your transactions;
• KYC and Identity Verification Providers: Third-party verification services receive identity documents and contact data for the purpose of confirming your identity and age;
• Fraud Prevention Agencies: Aggregated or anonymised data may be shared with fraud detection services to identify and prevent suspicious activity;
• Game Software Providers: Third-party casino game studios may receive pseudonymous usage data necessary to deliver and support the games you play;
• Regulatory and Law Enforcement Authorities: pak367 will disclose personal data to regulators, licensing authorities, or law enforcement agencies where required to do so by applicable law or court order;
• Responsible Gaming Registries: Where you have self-excluded or requested exclusion from marketing, we may register your details with relevant self-exclusion databases as required by our licensing obligations.

7.2 All third-party service providers who process personal data on behalf of pak367 are bound by written data processing agreements that require them to maintain appropriate security standards and process data only as instructed by pak367.

8. International Data Transfers

8.1 As an internationally licensed platform serving Pakistani users, pak367 may transfer personal data to servers or service providers located outside Pakistan. Where such transfers occur, pak367 takes reasonable steps to ensure that your data receives a standard of protection consistent with the principles described in this Policy.

8.2 Transfers to third-party processors in other jurisdictions are governed by contractual safeguards that impose data protection obligations equivalent to those applied by pak367 directly.

9. Data Retention

9.1 pak367 retains your personal data only for as long as is necessary to fulfil the purposes described in this Policy, or for as long as required by applicable law or our international licensing obligations.

9.2 As a general guide, the following retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in line with standard AML record-keeping requirements;
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of the transaction;
• KYC Documents: Retained for the period required by our licensing authority, typically five (5) years following the end of the business relationship;
• Support Communications: Retained for up to three (3) years from the date of the communication, unless a longer period is required in connection with an ongoing dispute;
• Technical and Usage Data: Retained for up to two (2) years from the date of collection, subject to ongoing security or fraud investigation requirements.

9.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any identifiable individual.

10. Security Measures

10.1 pak367 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and pak367 servers;
• Encrypted storage of sensitive data including passwords and financial information at rest;
• Role-based access controls ensuring that staff can only access personal data on a strict need-to-know basis;
• Regular independent security audits and penetration testing of the pak367 Platform;
• Two-factor authentication options available for all registered accounts;
• Continuous monitoring of Platform activity for anomalous patterns that may indicate a security breach.

10.2 Notwithstanding the above measures, no internet-based platform can guarantee absolute security. You are encouraged to use a strong, unique password for your pak367 account and to enable two-factor authentication where available. If you suspect that your account has been compromised, contact pak367 support immediately at [email protected].

11. Cookies & Tracking Technologies

11.1 pak367 uses cookies and similar tracking technologies on the Platform to enhance your user experience, maintain your login session, and analyse Platform usage patterns. Cookies are small text files placed on your device when you visit the Platform.

11.2 The following categories of cookies are used on the pak367 Platform:

• Strictly Necessary Cookies: Essential for the Platform to function correctly, including maintaining your login session and enabling secure payment processing. These cannot be disabled;
• Analytical Cookies: Used to understand how users interact with the Platform, which pages are visited most frequently, and where technical errors occur. This data is used in aggregate to improve the Platform;
• Functional Cookies: Used to remember your preferences, such as your preferred language or game lobby settings, to personalise your experience;
• Marketing Cookies: Used to deliver relevant promotional content based on your interests and Platform activity. These are only set with your explicit consent.

11.3 You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the pak367 Platform, particularly session management and payment processing features.

12. Your Data Rights

12.1 As a pak367 user whose personal data we process, you hold the following rights in relation to your information:

• Right of Access: You have the right to request a copy of the personal data pak367 holds about you, along with information about how it is being used;
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data, subject to overriding legal or regulatory retention obligations;
• Right to Restriction: You have the right to request that we restrict processing of your personal data in certain circumstances, for example where you contest the accuracy of the data;
• Right to Data Portability: Where processing is based on your consent or a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to Object: You have the right to object to processing of your personal data where that processing is based on our legitimate interests;
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

12.2 To exercise any of the above rights, please contact pak367 at [email protected]. We will respond to all verifiable requests within 30 days. In complex or high-volume cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

12.3 pak367 will not charge a fee for exercising your data rights in normal circumstances. However, where requests are manifestly unfounded or excessive, particularly if they are repetitive, pak367 reserves the right to charge a reasonable administrative fee or decline the request.

13. Minors & Age Policy

13.1 The pak367 Platform is strictly for adults aged 21 years and above. pak367 does not knowingly collect personal data from individuals under the age of 21. If we become aware that a user under the age of 21 has registered an account or provided personal data, we will immediately close the account, delete the associated personal data, and return any deposited funds to the original payment source.

13.2 If you are a parent or guardian and believe that a minor has created a pak367 account or provided personal data without your consent, please contact us immediately at [email protected] and we will take prompt action.

14. Marketing Communications

14.1 pak367 may send you email, SMS, or in-platform notifications about promotions, bonuses, new games, and platform updates where you have given explicit consent to receive such communications at the time of registration or subsequently through your account settings.

14.2 You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your account settings dashboard, or by contacting pak367 support. Opting out of marketing communications will not affect your ability to use the pak367 Platform or receive essential service-related notifications such as transaction confirmations and account security alerts.

14.3 Where you have self-excluded from the pak367 Platform, you will be removed from all marketing lists immediately upon the self-exclusion taking effect. pak367 takes all reasonable technical steps to ensure that self-excluded users do not receive promotional communications.

15. Changes to This Policy

15.1 pak367 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data collection or a new purpose for processing — we will notify registered users by email or via a prominent notice on the Platform prior to the changes taking effect.

15.2 Minor or administrative updates, such as corrections to typographical errors or clarification of existing practices, may be made without direct notification. The effective date at the top of this Policy will always reflect the date of the most recent revision.

15.3 Continued use of the pak367 Platform following notification of material changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the revised Policy, you should cease using the Platform and contact support to close your account.

16. Contact & Complaints

16.1 For any questions, concerns, or requests relating to this Privacy Policy or the way pak367 handles your personal data, please contact our support team:

Email: [email protected]

16.2 pak367 takes all privacy complaints seriously. Upon receipt of a complaint, we will acknowledge it within 5 business days and aim to provide a substantive response within 30 days. Where an investigation requires additional time, we will keep you informed of progress.

16.3 If you are not satisfied with the outcome of a complaint submitted to pak367, you may escalate the matter to the relevant data protection authority or dispute resolution body associated with our international gaming licence jurisdiction.

16.4 For responsible gaming related concerns, including self-exclusion requests and problem gambling support, please visit our dedicated Responsible Gaming page.