k365 Privacy Policy — How We Handle Your Personal Data

1 Introduction & Scope

This Privacy Policy ("Policy") is published by k365 ("k365", "we", "us", "our", "the Company"), the operator of the online casino and sports betting platform accessible at k365.site. This Policy applies to all personal data collected and processed by k365 in connection with your registration, use, and interaction with the k365 platform, including all games, betting markets, payment services, promotional programmes, customer support interactions, and associated communications.

k365 operates under an international gaming license, which imposes data protection obligations that we are legally required to fulfil. This Policy is designed to comply with those obligations and to provide you, as a k365 player based in Pakistan, with full and honest transparency about how your personal data is managed.

By registering a k365 account and using the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, you should not create a k365 account or use the platform's services.

2 Personal Data We Collect

k365 collects personal data through multiple channels in the course of your platform use. The categories of data collected are as follows:

Data Category	Specific Data Points	Collection Method
Registration Data	Full legal name, date of birth, email address, phone number, username, password (hashed)	Provided directly by you during account creation
Identity Verification (KYC)	CNIC copy, proof of address, selfie photograph for biometric comparison	Submitted by you for withdrawal verification
Financial Data	JazzCash number, EasyPaisa number, bank account details (HBL/UBL/Meezan), card numbers (masked), transaction history	Provided during deposit / withdrawal transactions
Gaming Activity	Bet history, game session logs, wager amounts, game outcomes, bonus usage, responsible gaming limit settings	Automatically recorded by k365 platform systems
Technical & Device Data	IP address, device type, browser type and version, operating system, session timestamps, login location data	Automatically collected via platform access
Communications Data	Live chat transcripts, email correspondence, support ticket content	Generated through your interaction with k365 support
Marketing Preferences	Email opt-in/opt-out status, notification preferences	Provided by you during registration or via account settings

3 How k365 Uses Your Personal Data

k365 processes your personal data for the following purposes, each grounded in a lawful basis described in Section 4:

• Account Management: Creating, maintaining, verifying, and closing your Player Account; authenticating your identity on each k365 login session; and communicating account-related information such as balance updates, bet confirmations, and transaction receipts.
• Payment Processing: Processing deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard; maintaining accurate transaction records; and reconciling financial accounts.
• KYC & Identity Verification: Verifying that you meet the 21+ age requirement; confirming ownership of your registered payment methods; and fulfilling the identity verification obligations required under our international gaming license.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, bonus abuse, multiple account creation, and other forms of misconduct that breach the k365 Terms & Conditions.
• Responsible Gaming: Monitoring gaming patterns to identify indicators of problematic behaviour; applying player-requested responsible gaming controls (deposit limits, loss limits, self-exclusion); and proactively contacting players where concern for wellbeing warrants outreach.
• Legal & Regulatory Compliance: Fulfilling obligations under our international gaming license including record-keeping, audit support, and reporting requirements imposed by our licensing authority.
• Customer Support: Responding to queries, resolving disputes, processing complaints, and improving support quality through training and quality assurance.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand platform performance, identify bugs, and improve the overall k365 player experience — including game loading speeds relevant to Pakistani network conditions.
• Marketing Communications: Sending promotional emails, SMS notifications, and in-platform messages about k365 bonuses, promotions, and new game releases, where you have provided explicit opt-in consent. You may withdraw consent at any time through your account settings.

4 Legal Basis for Processing

k365 processes personal data in accordance with the following legal grounds:

5 Data Sharing & Third Parties

k365 does not sell, rent, or trade personal data with third parties for their independent commercial purposes. Data is shared with third parties only in the following defined circumstances, and only to the extent strictly necessary:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard receive transaction-relevant data required to process your deposits and withdrawals. These providers operate under their own privacy frameworks and are contractually obligated to handle k365 player data in accordance with applicable data protection standards.
• KYC / Identity Verification Providers: k365 uses accredited third-party identity verification services to authenticate player identity documents (CNIC) and confirm age. These providers receive only the data necessary for the verification task and are prohibited from using that data for any other purpose.
• Game Software Providers: Third-party game providers whose titles are available on the k365 platform receive game session data necessary to deliver gameplay outcomes and calculate results. These providers do not receive full personal data profiles.
• Fraud & Security Services: k365 works with fraud detection and cybersecurity partners to protect the platform and its players. These partners process IP address and behavioural data under strict data processing agreements.
• Regulatory & Law Enforcement Authorities: k365 may disclose personal data to its licensing authority, law enforcement agencies, or other regulatory bodies where required by law, court order, or in response to a legitimate regulatory investigation.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of k365's business, personal data may be transferred to the relevant successor entity. Players will be notified in advance of any such transfer and given the opportunity to close their accounts if they do not consent.

6 Data Retention Periods

k365 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any overriding legal or regulatory retention requirements. The following retention periods apply:

• Active Account Data: Retained for the full duration of your Player Account relationship with k365.
• Transaction & Financial Records: Retained for a minimum of five (5) years following the transaction date in compliance with anti-money laundering regulations applicable under our international gaming license.
• KYC Identity Documents: Retained for a minimum of five (5) years following account closure or the date of the last transaction, in line with financial crime prevention requirements.
• Customer Support Records: Retained for two (2) years from the date of the support interaction, unless the matter relates to a formal dispute or regulatory investigation.
• Marketing Communications Data: Retained until you withdraw marketing consent, after which your contact details are removed from marketing lists within 14 days.
• Technical Logs: IP access logs and session data are retained for up to 12 months for security and fraud investigation purposes.

Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised using industry-standard data erasure methods. Data that has been anonymised and can no longer be linked to any identifiable individual may be retained indefinitely for analytical purposes.

7 Data Security Measures

k365 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• AES-256 SSL Encryption: All data in transit between your device and k365 servers is encrypted using 256-bit SSL — the same standard deployed by major international financial institutions.
• Encryption at Rest: Sensitive data stored in k365 databases — including KYC documents and payment information — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. k365 employees and contractors can only access the data required for their specific job functions, and all access is logged and audited.
• Two-Factor Authentication (2FA): k365 offers 2FA for player accounts and requires 2FA for all internal administrative systems as a baseline security control.
• Intrusion Detection & Monitoring: k365's systems are monitored continuously for suspicious activity, unauthorised access attempts, and anomalous data access patterns using automated threat detection tools.
• Regular Security Audits: k365 conducts regular third-party security penetration testing and vulnerability assessments to identify and remediate potential weaknesses before they can be exploited.
• Data Breach Response: k365 maintains a documented data breach response procedure. In the event of a breach that poses a risk to player rights, affected players will be notified as promptly as possible and in accordance with our licensing obligations.

8 Your Data Rights

As a k365 player, you hold the following rights with respect to your personal data. These rights are genuine and exercisable — k365 will not obstruct or penalise you for exercising them.

To exercise any of the above rights, contact k365 via live chat support (available 24/7 from your account dashboard) or by email at [email protected]. Please clearly identify the right you wish to exercise and provide sufficient information to verify your identity. k365 will respond to all rights requests within 30 calendar days.

9 Cookies & Tracking Technologies

k365 uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and — where you have provided consent — deliver targeted marketing. The following cookie categories are in use:

• Strictly Necessary Cookies: Essential for the platform to function. These cookies maintain your k365 login session, preserve your game state, and enable the cashier. You cannot opt out of these without ceasing to use the platform.
• Functional Cookies: Enable the platform to remember your preferences — language, currency display, preferred payment method — to deliver a more personalised experience. These can be disabled in your browser settings but may affect platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players use the k365 platform — which pages are visited, which games are played most, and where technical errors occur. This data informs platform improvements. Analytics cookies process no personally identifiable information.
• Marketing Cookies: Used only where you have provided explicit consent, to deliver relevant promotional content about k365 offers. These cookies can be disabled via the cookie preference centre in your account settings, or through your browser settings.

Most web browsers accept cookies by default, but you can configure your browser to reject or delete cookies at any time. Note that disabling strictly necessary cookies will prevent you from accessing your k365 account. For detailed instructions on managing cookies in popular browsers, consult your browser's help documentation.

10 Minors — Strict 21+ Policy

k365 operates a strict minimum age requirement of 21 years for all platform users. The k365 Platform is not intended for, directed at, or accessible to any person under the age of 21.

k365 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe a minor has created a k365 account, please contact us immediately at [email protected] so we can investigate and act without delay.

k365 also supports the use of parental control software and third-party tools that can restrict access to online gaming and betting content on devices shared with, or used by, minors. We strongly encourage households with children to deploy such tools as an additional protective measure alongside our own age verification procedures.

11 Changes to This Privacy Policy

k365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, licensing obligations, or applicable law. All amendments will be published on this page with an updated effective date.

Where changes are material — meaning they significantly affect the rights of players or how their personal data is processed — k365 will notify registered players by email and via an on-platform notification at least 14 days before the amended Policy takes effect. Continued use of the k365 Platform after the effective date of any updated Policy constitutes acceptance of the changes.

Where changes are non-material — such as typographical corrections, formatting adjustments, or clarifications that do not alter the substance of the Policy — these may take effect immediately without prior notice.

12 Contact, Data Protection Officer & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data by k365, you may contact us through the following channels:

• Live Chat Support: Available 24 hours a day, 7 days a week from your k365 account dashboard. Average response time under 5 minutes. Available in English and Urdu.
• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" to ensure prompt routing to our data protection team.

k365 maintains a designated Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection obligations under our licensing authority. Data rights requests addressed to the DPO will receive a formal written response within 30 calendar days.

If you are not satisfied with k365's response to a privacy concern or data rights request, you have the right to escalate your complaint to the supervisory authority or independent dispute resolution mechanism applicable under the jurisdiction of our international gaming license. Details of the relevant authority will be provided upon request.