365gam Privacy Policy —
How We Handle Your Data

This Privacy Policy ("Policy") describes how 365gam ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of individuals ("Players", "Users", "You") who access or use any service available through 365gam.bet, including account registration, casino gaming, sports betting, jackpot slots, cockfighting, and all associated payment and support functions.

By registering a 365gam account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not register an account or use any 365gam service.

This Policy forms part of, and should be read together with, the 365gam Terms & Conditions.

1 Data Controller

For the purposes of applicable data protection law, 365gam is the data controller responsible for the personal data of Pakistan players collected through the 365gam.bet platform. All data protection enquiries and subject access requests should be addressed to the 365gam Data Protection Team at [email protected] with the subject line "Data Privacy Request".

2 Personal Data We Collect

365gam collects the following categories of personal data from Pakistan players:

Data Category	Specific Data Points	Collection Method
Identity Data	Full legal name, CNIC number, date of birth, selfie photograph	Account registration & KYC verification
Contact Data	Pakistan mobile number, email address	Account registration
Financial Data	Easypaisa/JazzCash account numbers, HBL/UBL account references, deposit and withdrawal amounts in PKR, transaction timestamps	Payment processing
Gaming Data	Bet history, game session records, casino activity logs, sports betting selections	Platform activity
Technical Data	IP address, device type and model, browser type, operating system, session timestamps	Automatic collection via platform
Communications Data	Support chat transcripts, email correspondence, complaint records	Customer support interactions
Responsible Gaming Data	Deposit limits, session time settings, self-exclusion status, responsible gaming tool usage history	Account settings & responsible gaming features

3 How We Use Your Personal Data

365gam uses your personal data for the following specific, documented purposes:

• Account Management: To create, maintain, and operate your 365gam account, including processing your login and managing your PKR balance.
• Identity Verification (KYC): To verify your identity in accordance with anti-money laundering obligations, confirm your minimum age of 18 years, and prevent fraud.
• Payment Processing: To process PKR deposits via Easypaisa, JazzCash, Raast, HBL, and UBL, and to process withdrawal requests to your verified payment methods.
• Gaming Services: To provide access to live casino tables, jackpot slots, sports betting, cockfighting, Fortune Ox, and all other game products in the 365gam lobby.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, collusion, bonus abuse, money laundering, and other prohibited conduct as defined in the 365gam Terms & Conditions.
• Responsible Gaming: To monitor gaming patterns for signs of potential gambling-related harm, to operate responsible gaming tools including deposit limits and self-exclusion, and to comply with player protection obligations.
• Customer Support: To respond to your enquiries, process complaints, and provide assistance with account and payment issues.
• Legal and Regulatory Compliance: To comply with applicable anti-money laundering laws, financial reporting requirements, and any other legal obligations.
• Platform Improvement: To analyse aggregate, anonymised usage data to improve platform performance, game selection, and the overall player experience for Pakistan users.
• Communications: To send you important account notifications, security alerts, and — where you have provided consent — promotional communications about 365gam offers and new products.

4 Legal Basis for Processing

365gam processes your personal data on the following legal bases:

• Contractual Necessity: Processing necessary to provide the gaming services you have contracted for — including account creation, payment processing, and game access.
• Legal Obligation: Processing required by applicable law — including KYC identity verification, AML transaction monitoring, and age verification.
• Legitimate Interest: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate usage analysis, where these interests are not overridden by your data protection rights.
• Consent: For marketing communications and any optional data processing not covered by the above bases. You may withdraw consent for marketing communications at any time by contacting the support team at [email protected].

5 Data Sharing and Third Parties

365gam does not sell, rent, or trade your personal data. Data is shared with third parties only in the following specific circumstances:

• Payment Processors: Your payment details are shared with the relevant payment service providers — including Easypaisa, JazzCash, and banking partners — solely to process your deposits and withdrawals. These providers are bound by their own data protection obligations.
• Identity Verification Providers: CNIC documents and selfie photographs may be processed by a third-party identity verification service to assist with KYC compliance. These providers are contractually bound to process identity data only for the purpose of verification on behalf of 365gam.
• Game Software Providers: Game providers such as Pragmatic Play, PG Soft, and Evolution Gaming receive limited technical data (session tokens and bet details) necessary to deliver their games. These providers do not receive your identity or financial data.
• Fraud Prevention and Security Services: Technical data including IP addresses and device identifiers may be shared with fraud prevention platforms to detect and prevent account abuse.
• Legal and Regulatory Authorities: 365gam will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by applicable law or court order. 365gam will notify you of such disclosure where legally permitted to do so.
• Professional Advisors: In limited circumstances, anonymised or aggregated data may be shared with legal counsel, auditors, or financial advisors under confidentiality obligations.

6 Data Security

365gam implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• Encryption in Transit: All data transmitted between your device and the 365gam platform is encrypted using 256-bit SSL/TLS — the same standard used by Pakistan's major commercial banks including HBL and UBL for internet banking services.
• Encryption at Rest: Sensitive personal data — including CNIC documents, payment details, and account credentials — is stored in encrypted form in 365gam's secured data environments.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. 365gam employees can only access the specific data required for their operational role, and all access is logged and monitored.
• Password Security: Account passwords are stored using bcrypt hashing with per-account salt values. 365gam cannot retrieve your actual password — only reset it through verified identity checks.
• Two-Factor Authentication: SMS-based OTP two-factor authentication is available on all Pakistan 365gam accounts and is strongly recommended. This means that even if your password is compromised, an attacker still cannot access your account without physical possession of your registered mobile SIM.
• Security Monitoring: The 365gam platform is monitored continuously for suspicious login patterns, unusual transaction activity, and other security anomalies. Suspicious events trigger automated alerts and human review.
• Penetration Testing: 365gam conducts regular third-party security assessments to identify and remediate potential vulnerabilities before they can be exploited.

7 Data Retention

365gam retains personal data only for as long as required to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active Account Data: All personal data associated with an active 365gam account is retained for the duration of the account relationship.
• Closed Account Data: Following voluntary account closure, personal data is retained for seven years to fulfil anti-money laundering record-keeping requirements and to resolve any post-closure disputes or legal claims.
• KYC Documentation: CNIC documents and identity verification records are retained for seven years from the date of collection, in accordance with standard financial services compliance requirements.
• Transaction Records: PKR deposit, withdrawal, and gaming transaction records are retained for seven years from the transaction date.
• Support Communications: Customer support chat logs and email correspondence are retained for three years from the date of the interaction.
• Marketing Data: If you have consented to marketing communications, your contact details for this purpose are retained until you withdraw consent or for two years from your last interaction with 365gam's marketing communications, whichever comes first.

Upon expiry of the applicable retention period, personal data is securely and permanently deleted from all 365gam systems unless a longer retention period is required by a specific legal obligation in force at that time.

8 Cookies and Tracking Technologies

The 365gam platform uses cookies and similar tracking technologies to deliver a functional, personalised user experience. The following types of cookies may be present on the platform:

• Strictly Necessary Cookies: Required for the platform to function — including maintaining your login session, remembering your trusted device status, and processing your gaming activity. These cannot be disabled without impairing platform functionality.
• Performance Cookies: Collect anonymised data about how Pakistan players interact with the platform — which games are played most frequently, where users navigate, and how pages load on different devices. This data is used in aggregate form only.
• Preference Cookies: Remember your display preferences, language settings, and other personalisation choices.
• Security Cookies: Used to detect fraudulent login attempts and protect your account from unauthorised access attempts.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in or using core platform features.

9 Your Data Rights

As a 365gam account holder, you hold the following rights over your personal data. To exercise any of these rights, contact the support team at [email protected] with "Data Privacy Request" in the subject line. Requests are processed within 30 days.

• Right of Access: You have the right to request a copy of all personal data 365gam holds about you.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data. For identity data such as your name and CNIC number, corrections require submission of updated documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where you object to processing. Note that this right is subject to legal retention obligations — 365gam cannot delete transaction records required to be held by applicable law.
• Right to Restriction: You may request that processing of your data be restricted pending resolution of accuracy disputes or legitimate interest objections.
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interest, including direct marketing communications. Objections to marketing communications will be acted upon immediately. Objections to processing for fraud prevention or legal compliance may be refused where there is a compelling legitimate ground for continued processing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

10 Children's Privacy

365gam does not knowingly collect personal data from any individual under the age of 18. The platform is intended exclusively for adults and registration requires confirmation that the applicant is 18 years of age or older. CNIC-based KYC verification provides a further layer of age verification.

If 365gam becomes aware that an account has been registered by a person under 18, the account will be immediately suspended, all activity will be investigated, and any data collected in connection with the minor's account will be deleted as swiftly as legally possible. If you believe a person under 18 has registered at 365gam, please contact us immediately at [email protected].

11 International Data Transfers

Some of 365gam's service providers — including game software providers, payment processors, and security vendors — may be located in jurisdictions outside Pakistan. Where personal data is transferred internationally, 365gam ensures that appropriate safeguards are in place to protect your data to a standard equivalent to Pakistan data protection principles. These safeguards typically include contractual data processing agreements that obligate service providers to process data only for the specified purpose and to maintain security standards consistent with those applied by 365gam.

12 Changes to This Privacy Policy

365gam reserves the right to update this Privacy Policy at any time to reflect changes in data practices, applicable law, or platform services. Material changes — those that affect how your data is used or your data rights — will be notified to you via email to your registered address at least 14 days before taking effect. A prominent banner will also be displayed on the platform for the same period.

The effective date at the top of this Policy indicates when it was last updated. We encourage you to review this Policy periodically. Your continued use of the 365gam platform after the effective date of a revised Policy constitutes your acceptance of the revised terms.

13 Contact and Complaints

For any privacy-related query, data subject access request, or complaint regarding 365gam's data practices, please contact:

If you are not satisfied with 365gam's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in the jurisdiction applicable to your situation.