Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how pkg365, accessible at https://pkg365.cam ("Platform", "we", "us", "our"), collects, uses, stores, shares and protects personal data in connection with your use of the Platform. pkg365 is an English-language online betting and casino information platform built for Pakistani users, covering sports betting, live casino, slots and player guides.

By registering an account, accessing the Platform or otherwise providing personal information to us, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together form the full suite of user-facing legal documentation for the Platform.

2. Definitions

In this Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, storage, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, the Operator of the pkg365 Platform.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller under a contractual arrangement.
• "User" / "You" means any person who accesses, browses or holds a registered account on the Platform.
• "Cookies" means small text files placed on your device by the Platform to support functionality, analytics and session management.
• "KYC Data" means identity documents and verification materials submitted as part of the Know Your Customer process, including CNIC copies, proof of address and payment method verification.
• "Sensitive Data" means Personal Data that warrants a higher standard of protection, including financial account details, government-issued identity information and data relating to health or problem-gambling disclosures.

3. Data We Collect

pkg365 collects Personal Data across three primary categories. The specific data points collected depend on your level of engagement with the Platform — browsing users, registered users and verified users each have different data profiles.

3.1 Registration & Account Data

3.2 Financial & Transaction Data

3.3 Technical & Usage Data

4. How We Collect Your Data

We collect Personal Data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, respond to a survey or participate in a promotion.
• Automatically: Through cookies, log files and tracking technologies when you browse or interact with the Platform. See Section 8 for full cookie details.
• From third parties: Identity verification service providers, fraud detection agencies, payment processors and, where applicable, publicly available sources used for AML screening purposes.

5. Legal Basis for Processing

Where applicable privacy frameworks require a stated legal basis for data processing, pkg365 relies on the following grounds:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions — including account management, deposit processing, bonus fulfilment and withdrawal handling.
• Legal Obligation: Processing required to comply with applicable law, including KYC and AML regulatory requirements, age verification obligations and court or authority orders.
• Legitimate Interests: Processing conducted for our legitimate business interests where these do not override your fundamental rights — including fraud prevention, security monitoring, responsible gambling oversight and platform analytics. You may object to processing on this basis (see Section 12).
• Consent: Processing for optional purposes, such as marketing communications, personalised promotions and optional analytics, conducted only where you have provided clear affirmative consent. Consent may be withdrawn at any time without prejudice to prior processing.

6. How We Use Your Data

pkg365 uses collected Personal Data for the following purposes:

• Creating, managing and securing your account, including authentication and credential recovery.
• Processing deposits and withdrawals in PKR and other supported currencies, and maintaining accurate transaction records.
• Conducting KYC identity verification and ongoing AML screening as required by the Platform's compliance obligations.
• Delivering account-related communications, including transaction confirmations, security alerts and support responses.
• Administering bonuses and promotions, including verifying eligibility, tracking wagering progress and settling promotional rewards.
• Monitoring betting and gaming behaviour for the purpose of identifying problem-gambling indicators and triggering responsible-gambling interventions where appropriate.
• Detecting, investigating and preventing fraud, multi-accounting, bonus abuse and other prohibited conduct as defined in the Terms & Conditions.
• Improving Platform performance, fixing technical issues and analysing aggregate usage patterns to enhance the user experience.
• Sending marketing communications about promotions, new features and relevant offers — only where you have provided consent and subject to your opt-out rights at any time.
• Complying with legal obligations, responding to regulatory enquiries and cooperating with law enforcement where required by applicable law.

7. Data Sharing & Disclosure

pkg365 does not sell your Personal Data to third parties. We may share your data with the following categories of recipient only for the purposes described in this Policy:

• Payment Processors: To facilitate deposits and withdrawals. Payment references such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are used for contextual guidance. Actual payment processing is handled by certified payment service providers under contractual data protection obligations.
• Identity Verification Providers: Specialist KYC and AML service providers that assist with document verification, fraud screening and regulatory compliance checks.
• Technology Service Providers: Cloud hosting, security, analytics and platform infrastructure providers who process data on our behalf under data processing agreements.
• Game Software Providers: Third-party game studios whose software runs on the Platform may receive anonymised or pseudonymised session data necessary for game delivery and RTP verification.
• Regulatory Authorities & Law Enforcement: Where we are legally obliged to disclose Personal Data in response to a court order, regulatory demand or law enforcement request.
• Business Transfers: In the event of a merger, acquisition or sale of the Platform, your Personal Data may be transferred to the successor entity subject to equivalent privacy protections.

8. Cookies & Tracking Technologies

pkg365 uses cookies and similar technologies to operate the Platform, maintain your session, analyse usage and support security functions. The principal categories of cookies we use are as follows:

You may manage cookie preferences through your browser settings. Disabling essential cookies will impair Platform functionality. Disabling analytics or marketing cookies will not affect your ability to use core account features.

9. Data Retention

pkg365 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's active status plus a minimum period following account closure as required by applicable AML and gaming compliance regulations — typically a minimum of five (5) years from the date of last transaction.
• KYC Documents: Retained for the regulatory minimum period applicable to the Platform's license jurisdiction from the date of account closure or the date of last relevant transaction, whichever is later.
• Transaction Records: Financial transaction logs are retained for a minimum of five (5) years to satisfy AML record-keeping obligations.
• Support Communications: Chat logs, emails and support tickets are retained for up to three (3) years from the date of the interaction to support dispute resolution.
• Analytics Data: Aggregated, anonymised analytics data may be retained indefinitely as it does not constitute Personal Data in identifiable form.
• Marketing Preferences: Records of consent and opt-out decisions are retained for the duration of your account plus a reasonable period thereafter as evidence of compliance.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Requests for earlier deletion are handled in accordance with Section 12, subject to our legal retention obligations.

10. Data Security

pkg365 implements a range of technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, alteration or disclosure. These measures include:

• TLS (Transport Layer Security) encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data fields at rest, including account credentials and financial identifiers.
• Role-based access controls limiting internal access to Personal Data on a need-to-know basis.
• Regular security assessments and penetration testing of Platform infrastructure.
• Multi-factor authentication options available for user accounts to reduce the risk of unauthorised access.
• Monitoring systems designed to detect unusual login activity, geographic anomalies and suspicious transaction patterns.

11. International Data Transfers

pkg365 operates globally and may use service providers located outside Pakistan, including cloud hosting, analytics, KYC and payment processing infrastructure based in other countries. Where Personal Data is transferred internationally, we take steps to ensure that appropriate safeguards are in place, which may include:

• Contractual clauses that impose data protection obligations on recipient parties consistent with recognised international standards.
• Transfers to jurisdictions assessed as providing an adequate level of data protection relative to the purpose and sensitivity of the data.
• Technical measures including encryption and pseudonymisation to reduce the risk associated with cross-border data movement.

If you would like further information about the specific safeguards applied to any particular international data transfer, please contact us using the details in Section 15.

12. Exercising Your Data Rights

You may exercise any of the data rights described in the overview section of this page by submitting a request to our Data Protection contact. To protect your privacy and account security, all rights requests are subject to identity verification before we action them.

12.1 How to Submit a Request

Submit your data rights request by contacting our support team via Live Chat or by emailing [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request — [Your Request Type]" and your registered account email address. We will acknowledge your request within 72 hours and respond substantively within 30 days of identity verification.

12.2 Limitations on Erasure

The right to erasure ("right to be forgotten") is subject to limitations where we are required to retain data by law. Specifically, KYC records and transaction histories must be retained for the minimum regulatory periods described in Section 9 regardless of an erasure request. We will inform you of any such limitations when responding to your request.

12.3 Withdrawal of Consent

Where we process your data on the basis of consent (such as for marketing communications), you may withdraw that consent at any time by updating your account preferences, clicking the unsubscribe link in any marketing email, or contacting our support team directly. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

13. Children's Privacy

The pkg365 Platform is strictly intended for adults aged 18 or older, or the higher minimum age required by the applicable license jurisdiction. We do not knowingly collect Personal Data from individuals under the minimum age requirement.

14. Amendments to This Policy

pkg365 reserves the right to update or amend this Privacy Policy at any time. The "Last Updated" date at the top of this page will be revised on each amendment. For material changes that significantly affect your rights or the way we use your Personal Data, we will notify registered users by email or through a prominent notice on the Platform prior to the change taking effect.

Your continued use of the Platform following publication of an updated Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you must discontinue use of the Platform and may request account closure in accordance with the Terms & Conditions.

15. Contact Us

For any questions, concerns or requests relating to this Privacy Policy or our data handling practices, please contact our Data Protection team through the following channels:

• Email: [email protected] (plain text only — not a clickable link)
• Subject Line: "Privacy Policy Enquiry" or "Data Rights Request — [Request Type]"
• Live Chat: Available 24/7 via the Platform Help Center
• Help Center: /faq — for general queries about account data and privacy settings

We are committed to resolving privacy concerns promptly. All written enquiries are acknowledged within 72 hours and addressed substantively within 30 calendar days. For complex data rights requests involving third-party verification or regulatory liaison, we will inform you if additional time is required.