pkg365 Privacy Policy —
How We Protect Your Data

This Privacy Policy is issued by pkg365 (hereinafter "pkg365", "we", "us", or "our"), the operator of the online casino and sports betting platform accessible at pkg365.net and all associated sub domains (hereinafter "the Platform"). This Policy applies to all personal data collected, processed, stored, and shared by pkg365 in connection with the provision of its services to registered players, visitors, and prospective users — with specific reference to Pakistani nationals and residents who form pkg365's primary user base.

This Privacy Policy governs all data processing activities related to: account registration and management, identity verification (KYC), financial transactions, gaming activity, customer support interactions, marketing communications, and all technical data generated through your use of the pkg365 platform. It applies regardless of the device or method through which you access pkg365.

By using the pkg365 platform, you acknowledge that you have read this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the platform and contact our support team to request account closure.

pkg365 collects only the personal data that is strictly necessary for the lawful, safe, and effective operation of the platform. The following table sets out the categories of personal data we collect from Pakistani players:

pkg365 does not collect sensitive categories of personal data beyond what is required for identity verification and responsible gaming purposes. We do not collect biometric data, health data, or religious/political affiliation data from our players.

pkg365 collects personal data through the following mechanisms:

3.1 Directly From You

• At the point of account registration, when you provide your name, CNIC, mobile number, and email address;
• During the KYC verification process, when you upload identity documents and selfie photographs;
• When you make a deposit or withdrawal request and provide payment method details;
• When you contact pkg365 support via live chat or email;
• When you participate in promotions, surveys, or feedback exercises on the platform.

3.2 Automatically Through Platform Use

• Through cookies, web beacons, and similar tracking technologies when you browse the pkg365 website — see Section 8 for full cookie details;
• Through server logs that automatically record your IP address, device information, access times, and pages viewed;
• Through the gaming system, which records all wagering activity, session data, and game outcomes associated with your account;
• Through security and fraud detection systems that monitor login patterns, transaction behaviour, and device fingerprints.

3.3 From Third-Party Sources

• From identity verification service providers used to validate CNIC authenticity;
• From payment processors confirming the ownership and registration status of JazzCash, EasyPaisa, or bank accounts linked to your pkg365 profile;
• From publicly available databases used for AML screening and sanctions compliance.

pkg365 processes personal data only where a valid legal basis exists for doing so. The legal bases on which we rely are as follows:

• Contractual Necessity: Processing required to fulfil the contract between you and pkg365 — including account registration, KYC verification, payment processing, game provision, and customer support;
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money-laundering (AML) laws, age verification requirements, and data retention mandates imposed by pkg365's regulatory framework;
• Legitimate Interests: Processing carried out in pursuit of pkg365's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and platform analytics — where these interests do not override your fundamental rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit, freely withdrawable consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

pkg365 uses the personal data it collects for the following purposes:

5.1 Platform Operation

To create and maintain your pkg365 account, process your deposits and withdrawals in PKR, provide access to all gaming and betting products on the platform, deliver customer support in English and Urdu, and send you transactional notifications related to your account activity.

5.2 Identity Verification and Compliance

To verify your identity through CNIC-based KYC, to confirm that you meet the 21+ age requirement before granting access to real-money gaming, to conduct AML screening, and to maintain compliance records required by pkg365's regulatory obligations. KYC data is processed with the highest level of care given its sensitive nature.

5.3 Responsible Gaming

To monitor your gaming activity for patterns that may indicate problem gambling behaviour, to enforce any responsible gaming limits or restrictions you have set on your account, and to contact you if our responsible gaming systems identify activity that warrants proactive player welfare intervention.

5.4 Security and Fraud Prevention

To detect and prevent unauthorised access to your account, to identify and investigate suspected fraud, duplicate account activity, money laundering, and bonus abuse, and to maintain the integrity of the pkg365 platform for all genuine players.

5.5 Platform Improvement

To analyse aggregated, anonymised usage data to understand how Pakistani players interact with the pkg365 platform, to identify technical issues, and to improve the design, functionality, and performance of the platform over time.

5.6 Marketing Communications

To send you promotional offers, bonus notifications, and platform updates where you have opted in to receive marketing communications. You may opt out of marketing emails at any time by contacting support at [email protected] or by adjusting your account notification preferences. Opting out of marketing does not affect the delivery of essential transactional communications.

pkg365 does not sell your personal data to third parties for commercial marketing purposes under any circumstances. We share your data only in the following limited and controlled circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment providers receive the minimum data necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy frameworks and regulatory obligations;
• KYC and Identity Verification Providers: Specialist identity verification service providers receive your CNIC data and verification photographs for the sole purpose of completing the identity verification process required by pkg365's compliance framework;
• Game Content Providers: Third-party game studios providing RNG and live dealer games to the pkg365 platform may receive anonymised session and game data for the purpose of technical performance monitoring. No personally identifiable information is shared with game providers without your knowledge;
• Regulatory and Law Enforcement Authorities: pkg365 may disclose personal data to competent authorities where required by applicable law, court order, or regulatory demand — including in connection with AML investigations, fraud prevention, or age verification compliance audits;
• Professional Advisors: Legal, financial, and technical advisors engaged by pkg365 may have access to personal data on a strictly need-to-know basis, subject to professional confidentiality obligations.

Given the financial nature of the pkg365 platform, the security of payment data is treated with the highest operational priority. The following security measures apply to all financial data processed through pkg365:

• All payment transactions — whether via JazzCash, EasyPaisa, or bank transfer — are processed over encrypted connections using industry-standard 256-bit SSL/TLS protocols;
• pkg365 does not store full JazzCash or EasyPaisa account credentials, bank account numbers, or payment authentication codes on its servers. Payment processing is handled through tokenised connections with authorised payment gateways;
• All withdrawal requests are processed only to payment accounts that have been verified as belonging to the account holder during the KYC process. Withdrawals to unverified or third-party payment accounts are not permitted;
• Financial transaction records — including deposit and withdrawal history in PKR — are maintained by pkg365 as required by regulatory obligations and are available to you at any time through your account transaction history.

pkg365 will never request your full payment account password, full bank account details, or one-time PIN codes (OTPs) through live chat, email, or any other communication channel. If you receive a request for this information from someone claiming to represent pkg365, please report it to support immediately as it may constitute a phishing attempt.

The pkg365 website uses cookies and similar tracking technologies to ensure the platform functions correctly, to improve your experience, and to provide anonymised analytics that help us understand how Pakistani players interact with the platform.

8.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and cookies that maintain your login state. These cookies cannot be disabled without preventing you from using the platform;
• Functional Cookies: Remember your preferences, such as language settings and responsible gaming tool configurations, to provide a personalised experience across sessions;
• Analytics Cookies: Collect anonymised data about how pages are accessed, which features are used most, and where technical errors occur. This data is used only to improve the pkg365 platform and is not linked to your individual identity;
• Marketing Cookies: Used only where you have explicitly consented to receive personalised promotional content. These cookies help pkg365 deliver relevant offers based on your platform activity.

8.2 Cookie Management

On your first visit to pkg365, you will be presented with a cookie consent notice that allows you to accept or decline non-essential cookie categories. You may update your cookie preferences at any time through your account settings. You may also control cookies through your browser settings, though disabling strictly necessary cookies will impair your ability to use the platform.

pkg365 retains personal data only for as long as is necessary for the purposes for which it was collected, or for as long as required by applicable law or regulatory mandate. The following general retention periods apply:

• Account and Identity Data (KYC): Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, as required by AML compliance obligations;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial record-keeping requirements applicable to gaming operators;
• Gaming Activity Records: Retained for a minimum of three (3) years from the date of the activity, for the purposes of dispute resolution, responsible gaming auditing, and regulatory reporting;
• Customer Support Communications: Retained for two (2) years from the date of the last support interaction, for quality assurance and dispute resolution purposes;
• Marketing Consent Records: Retained for the duration of the consent and for one (1) year following its withdrawal, as evidence of the consent status at the time communications were sent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard data destruction procedures. Where anonymisation is applied, the resulting data may be retained indefinitely for statistical and analytical purposes in a form that cannot be linked back to any individual.

As a pkg365 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team via live chat or email at [email protected]:

• Right of Access: You have the right to request a copy of all personal data pkg365 holds about you. We will provide this within 30 days of a verified request;
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held about you. We will process rectification requests within 14 days;
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and where no legal obligation requires its retention. Note that AML and KYC data must be retained for the periods specified in Section 9 regardless of erasure requests;
• Right to Restrict Processing: You have the right to request restriction of processing in certain circumstances — for example, where you dispute the accuracy of your data or where you have objected to processing based on legitimate interests;
• Right to Data Portability: You have the right to receive a copy of data you have provided to pkg365 in a structured, commonly used, machine-readable format;
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring. Note that objecting to certain monitoring may result in platform access restrictions for player safety reasons;
• Right to Withdraw Consent: Where processing is based on consent — including marketing communications and non-essential cookies — you may withdraw your consent at any time without affecting the lawfulness of prior processing.

pkg365 operates exclusively for adults aged 21 and over. The platform does not knowingly collect, process, or store personal data belonging to individuals under the age of 21. The mandatory CNIC-based KYC verification process is the primary technical control through which pkg365 prevents minors from accessing the platform.

If pkg365 becomes aware — through any means — that personal data belonging to a person under the age of 21 has been collected, all such data will be immediately deleted, the associated account will be suspended and closed, and any funds in the account will be returned to the depositing payment method after identity confirmation. The incident will be logged for regulatory compliance purposes.

pkg365 maintains comprehensive technical and organisational security measures designed to prevent unauthorised access to, disclosure of, alteration of, or destruction of personal data held on the platform. These measures include 256-bit SSL/TLS encryption, tokenised payment processing, access-controlled data infrastructure, regular security audits, and staff training on data protection obligations.

In the event that a personal data breach occurs that is likely to result in a high risk to the rights and freedoms of affected individuals, pkg365 will:

• Contain and assess the breach as a priority upon discovery;
• Notify affected account holders as promptly as practicable — and in any case within 72 hours of confirming the nature and scope of the breach — providing clear information about what data was affected, what steps pkg365 is taking, and what actions you may wish to take to protect yourself;
• Maintain an internal record of all data breaches, their scope, and the remedial actions taken, regardless of whether the breach meets the notification threshold.

If you become aware of any security vulnerability, suspicious activity on your pkg365 account, or unauthorised access to your data, please report it to us immediately via live chat so that we can investigate and act without delay.

pkg365 reviews this Privacy Policy regularly and reserves the right to update it at any time to reflect changes in our data processing practices, regulatory requirements, or platform functionality. The "Last Reviewed" date at the top of this document will always reflect the most recent revision.

When material changes are made to this Privacy Policy — particularly changes that affect your rights or the way your personal data is used — pkg365 will notify registered players via the email address on file and will display a prominent notice on the platform for a minimum of 14 days before the changes take effect. For minor updates such as typographical corrections or clarifications that do not alter the substance of the Policy, no advance notice will be provided, but the revised Policy will be published immediately.

Your continued use of the pkg365 platform after any revised Privacy Policy takes effect constitutes your acknowledgement and acceptance of the updated terms. If you do not agree with any material change, you should cease using the platform and contact support to close your account and request a withdrawal of your balance before the effective date of the change.

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data pkg365 holds about you, please contact us through the following channels. All privacy-related queries will be directed to the pkg365 data protection team and handled with priority:

• Live Chat: Available 24/7 directly on the pkg365 platform — average response time 3–5 minutes. Specify "Privacy Query" at the start of your chat to ensure direct routing to the data protection team;
• Email: [email protected] — please include "Privacy Policy Query" in your subject line. Written responses within 2 business days;
• Language: Privacy queries are handled in both English and Urdu by our Pakistan-based support team.

When submitting a data rights request, please provide your full registered name, the email address associated with your pkg365 account, and a clear description of your request. This allows us to verify your identity before processing the request and ensures we act on the correct account.