pkp365 Privacy Policy

pkp365 (referred to as "pkp365", "we", "us", or "our" throughout this Privacy Policy) is an internationally licensed online gaming operator providing casino games, live dealer tables, sports betting markets, and fishing game titles to registered players. The pkp365 platform is accessible at pkp365.net.

For the purposes of data protection law, pkp365 acts as the data controller in respect of the personal information you provide when registering an account, making deposits or withdrawals, placing wagers, or contacting our support team. As data controller, pkp365 determines the purposes and means by which your personal data is processed.

This Privacy Policy applies to all personal data collected and processed by pkp365 in connection with your use of the pkp365 platform, including data collected via the website, mobile applications (where available), live chat, and email communications.

pkp365 collects only the personal data that is necessary to provide our Services securely, comply with legal obligations, and maintain the integrity of the platform. We collect data in the following categories:

pkp365 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information except where strictly required by our responsible gaming obligations (for example, where a player discloses a gambling-related health concern to our support team).

pkp365 uses your personal data exclusively for the following defined purposes. Each purpose is tied to a specific legal basis described in Section 4:

• Account Management: To create, maintain, and administer your pkp365 player account, including authentication, password resets, and account preference updates.
• Transaction Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain accurate transaction records for your account history.
• Identity & Age Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity in accordance with our KYC obligations under our international gaming licence.
• Anti-Fraud & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other prohibited conduct that may compromise the security of the platform or other players.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling, to apply self-imposed limits set by players, and to enforce self-exclusion orders in compliance with responsible gaming standards.
• Regulatory Compliance: To fulfil obligations under our international gaming licence, including the maintenance of player records, submission of required reports to our licensing authority, and cooperation with lawful requests from competent authorities.
• Customer Support: To respond to support queries, resolve disputes, process complaints, and maintain records of communications for quality assurance and training purposes.
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how players interact with the pkp365 platform and to improve game performance, interface design, and overall user experience.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time.

pkp365 does not use your personal data for automated individual decision-making or profiling that produces legal or similarly significant effects without human review.

Every instance of personal data processing carried out by pkp365 rests on one of the following recognised legal bases:

• Contractual Necessity: Processing that is required to perform the contract between you and pkp365 — i.e., to operate your account and deliver the gaming services you have requested. This covers account creation, transaction processing, and customer support.
• Legal Obligation: Processing that pkp365 must carry out to comply with applicable law, including KYC verification, anti-money-laundering record keeping, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing that serves pkp365's legitimate business interests — such as fraud prevention, platform security, and anonymised analytics — where those interests are not overridden by your rights and freedoms. pkp365 has carried out a legitimate interests assessment for each such use.
• Consent: Processing for marketing communications, optional cookies, and any other purpose for which we have explicitly requested your consent at the point of data collection. You may withdraw consent at any time without affecting the lawfulness of prior processing.

pkp365 does not sell, rent, or commercially transfer your personal data to any third party. We share data only in the following limited and controlled circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum financial data necessary to process your deposit or withdrawal transactions. Each processor operates under its own regulatory framework and data protection obligations.
• Identity Verification Providers: Third-party KYC service providers may process your identity documents on our behalf to perform automated and manual verification checks. These providers act as data processors under strict contractual agreements with pkp365.
• Game Software Providers: The studios and providers whose games are hosted on the pkp365 platform may receive anonymised session data for the purpose of game performance monitoring and RNG certification. They do not receive your personal identity or payment information.
• Regulatory & Licensing Authorities: pkp365 may be required to disclose player data to its international licensing authority or to law enforcement agencies where required by applicable law or legal process. pkp365 will seek to notify you of any such disclosure to the extent permitted by law.
• Fraud Prevention & AML Services: Shared gaming industry fraud prevention databases may receive limited data (such as anonymised device fingerprints or flagged transaction patterns) for the purpose of protecting the platform from abuse. No full identity records are shared.
• Professional Advisers: pkp365's legal, compliance, and auditing advisers may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.

All third parties with whom pkp365 shares personal data are contractually required to process that data only for the specified purpose and in accordance with applicable data protection standards. pkp365 does not permit third-party processors to use your data for their own commercial purposes.

pkp365 uses cookies and similar technologies on the platform for the following purposes:

• Strictly Necessary Cookies: These are essential to the operation of the pkp365 platform. They maintain your authenticated session, store your language preference, and protect against cross-site request forgery. These cookies cannot be disabled without breaking the platform's core functionality.
• Performance Cookies: These collect anonymised data about how players navigate the platform — which pages are visited most, how long sessions last, and where errors occur. This data is used exclusively to improve platform performance. No individual player is identifiable from this data.
• Functional Cookies: These remember your display preferences (such as game lobby layout or notification settings) to provide a more personalised experience on return visits.

You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in and using the platform. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

pkp365 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and our regulatory obligations. The following retention periods apply:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, in compliance with anti-money-laundering record-keeping requirements.
• Transaction Records: Financial transaction records are retained for a minimum of seven (7) years from the date of each transaction, in accordance with standard financial record-keeping obligations.
• KYC Documents: Identity verification documents are retained for five (5) years following account closure or the completion of the applicable regulatory reporting period, whichever is later.
• Support Communications: Live chat transcripts and email correspondence are retained for three (3) years from the date of the interaction, to facilitate dispute resolution and quality assurance.
• Marketing Consent Records: Records of your consent or opt-out for marketing communications are retained for the lifetime of your account plus two (2) years, to demonstrate compliance.
• Technical & Usage Logs: Server and access logs are retained for ninety (90) days for security monitoring purposes, after which they are automatically deleted.

When personal data is no longer required, pkp365 deletes or anonymises it in a secure and irreversible manner. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

pkp365 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• TLS Encryption: All data transmitted between your device and the pkp365 platform is encrypted using TLS 1.2 or higher. The pkp365.net domain enforces HTTPS at all times.
• Data Encryption at Rest: Sensitive data fields — including payment account numbers and identity document scans — are encrypted in our database using AES-256 encryption.
• Access Controls: Access to personal data within pkp365's systems is granted on a strict need-to-know basis. Staff members are assigned role-based permissions, and access to sensitive data is logged and audited.
• Two-Factor Authentication: Internal system access for pkp365 staff requires multi-factor authentication. We also offer 2FA to players for their account login.
• Regular Security Audits: pkp365 conducts periodic penetration testing and security assessments of its platform infrastructure. Critical vulnerabilities are addressed within defined remediation timeframes.
• Incident Response: pkp365 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify you and the relevant regulatory authority within the timeframes required by applicable law.

As a data subject, you have the following rights in respect of your personal data held by pkp365. To exercise any of these rights, contact us at [email protected] with your registered account email address. We will respond within 30 days of receiving a verifiable request.