PA365 Privacy Policy — How We Handle Your Data as a Pakistani Player

PA365 Operations Limited ("PA365", "we", "us", "our") operates the online gaming and sports betting platform accessible at pa365.bet. For the purposes of data protection, PA365 is the data controller — meaning we are the organisation responsible for deciding how and why your personal data is collected and processed.

This Privacy Policy applies to all Pakistani players who register and use the pa365 platform, including through any mobile interface or app. It covers all personal data collected through the pa365 website, payment systems, customer support interactions and any other touch point between you and pa365.

PA365 collects personal data from Pakistani players through three main channels: information you provide directly during registration and account use; information generated automatically by your use of the pa365 platform; and information received from third-party service providers such as payment processors.

PA365 does not collect any special category data (as defined by applicable data protection frameworks) unless it is voluntarily provided by a player in the context of a responsible gaming self-exclusion request, and only then for the purpose of applying and maintaining that exclusion.

PA365 processes your personal data only for specific, documented purposes. We do not use your data in ways that are incompatible with those purposes. The primary uses are:

• Account Registration and Management: To create and maintain your pa365 player account, verify your identity and age, and enable you to access pa365 services.
• Payment Processing: To process PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer and card payments. Payment data is shared only with the relevant payment processor and only to the extent necessary to complete the transaction.
• Identity and Age Verification (KYC): To confirm that you are at least 18 years old and that your identity matches the details provided at registration, as required for compliance purposes. For Pakistani players, this may involve verifying CNIC details.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, bonus abuse, account takeover attempts, money laundering and other prohibited conduct on pa365.
• Responsible Gaming: To monitor gaming patterns for indicators of problem gambling and to administer player-requested tools including deposit limits, self-exclusion and session time limits.
• Customer Support: To respond to your queries, resolve disputes and provide assistance through pa365's live chat and email support channels.
• Legal and Regulatory Compliance: To comply with applicable legal obligations including anti-money laundering requirements, requests from regulatory authorities and court orders.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve pa365's products, features and user experience for Pakistani players.
• Direct Marketing (with consent): To send you promotional offers, bonus announcements and product updates by email or SMS — but only if you have opted in to receive marketing communications and have not subsequently opted out.

PA365 processes personal data on one of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil the pa365 player agreement — account management, payment processing, bet settlement and customer support.
• Legal Obligation: Processing required to comply with legal and regulatory requirements — age verification, KYC/AML checks and responses to lawful authority requests.
• Legitimate Interests: Processing for fraud prevention, platform security and anonymised analytics where these interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing and non-essential cookies, where your explicit consent has been obtained and can be withdrawn at any time.

PA365 does not sell or rent personal data. Data is shared only with third parties in the following categories and strictly on a need-to-know basis:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processing networks and Visa/Mastercard acquiring banks. Data shared is limited to what is necessary to process your specific transaction.
• Identity Verification Providers: Third-party KYC services used to verify CNIC data and conduct liveness checks where required. These providers are contractually bound to use the data only for the stated verification purpose.
• Live Casino Game Providers: Evolution Gaming and Ezugi receive the minimum player data required to deliver live casino game sessions on pa365. No financial data is shared with game providers.
• Fraud Detection Services: Specialised fraud prevention and risk scoring services that help pa365 identify suspicious activity. Data shared is subject to strict data processing agreements.
• Customer Support Platform: The technology platform used to operate pa365's live chat and email support processes player queries and support history on pa365's behalf.
• Regulatory and Legal Authorities: PA365 will share data with law enforcement agencies, regulators or courts where required by law. PA365 will notify affected players of such disclosures unless legally prohibited from doing so.

Payment security is a top priority at pa365 because it is the area where Pakistani players are most exposed to risk. The following specific measures are in place for all PKR payment data:

Easypaisa and JazzCash mobile number associations are stored in encrypted form and are accessible only by the payment processing system when a transaction is initiated. PA365 staff cannot retrieve full payment account numbers. Card data is tokenised — pa365 stores only a non-reversible token and the last four digits of card numbers.

PA365 enforces multi-factor authentication for staff accessing any system that contains payment data. System access logs are retained and reviewed regularly for anomalies.

PA365 uses cookies and similar tracking technologies on the pa365 website to deliver a functional, secure and personalised experience. A cookie is a small text file stored on your device by your browser. PA365 uses four categories of cookies:

You can manage your cookie preferences at any time through your browser settings or pa365's cookie consent tool. Disabling non-essential cookies will not affect your ability to play on pa365 or make PKR deposits and withdrawals.

PA365 retains personal data only for as long as it is necessary for the purpose for which it was collected or for as long as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration your pa365 account is active plus a period of up to 7 years after account closure to meet legal compliance obligations.
• Transaction Records (PKR deposits and withdrawals): Retained for a minimum of 7 years from the date of the transaction in accordance with standard financial record-keeping requirements.
• KYC / Identity Verification Documents: CNIC scans and verification documents are retained for up to 7 years from the date of verification or account closure, whichever is later.
• Gaming Activity Logs: Retained for 5 years from the date of the activity. Used for dispute resolution, responsible gaming monitoring and regulatory compliance.
• Customer Support Records: Support chat transcripts and email correspondence are retained for 3 years from the date of the interaction.
• Marketing Consent Records: Records of opt-in and opt-out are retained for 3 years from the date of the last interaction to demonstrate compliance.

When data is no longer required and its retention period has expired, pa365 securely deletes or anonymises it. Anonymised aggregated data — from which no individual can be identified — may be retained indefinitely for analytical purposes.

Pakistani players using pa365 have the following rights regarding their personal data. To exercise any of these rights, contact pa365 support with your account details and the specific right you wish to invoke.

PA365 is strictly for adults aged 18 and over. PA365 does not knowingly collect personal data from anyone under the age of 18. If we discover or are notified that a player under 18 has registered a pa365 account, we will immediately close the account, delete all associated personal data and return any deposited funds.

PA365 uses age verification procedures during registration and may request CNIC verification at any point to confirm a player's age. PA365 also supports the responsible gaming tools that allow players to self-exclude, which are described in detail at Responsible Gaming.

Some of pa365's technology infrastructure and third-party processors may be located outside Pakistan. Where personal data is transferred outside your country of residence, pa365 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Pakistan.

These safeguards include: contractual clauses in data processing agreements with third parties; ensuring that receiving parties operate in jurisdictions with adequate data protection frameworks; and applying technical measures such as encryption to minimise exposure during transfer.

PA365 does not transfer personal data internationally except where it is necessary to deliver our services — specifically in the context of live casino game delivery and certain payment processing operations. These transfers are minimal in scope and strictly governed by contractual data protection obligations.

PA365 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or platform features. The "Last updated" date at the top of this policy will always reflect the most recent revision.

For material changes — those that significantly affect how your personal data is used or your rights regarding it — pa365 will endeavour to notify affected players via email or an in-platform notification at least 14 days before the change takes effect. Your continued use of pa365 after the effective date of an updated Privacy Policy constitutes acceptance of the revised terms.

We recommend bookmarking this page and reviewing it periodically, especially if you are an active pa365 player. Questions about any specific change can be directed to support@pa365.bet.

If you have any question about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how pa365 handles your personal data, please contact the pa365 Data Protection team through any of the following channels:

If you are not satisfied with pa365's response to a privacy complaint, you have the right to escalate the matter to the relevant regulatory authority in your jurisdiction. PA365 will cooperate fully with any such authority investigation.