gam365 Privacy Policy — Your Data, Protected.

§ 01 Introduction

This Privacy Policy is issued by gam365.org ("gam365," "we," "us," "our") and governs the collection, processing, storage, and use of personal data relating to all individuals ("Users," "Players," "you") who access, register on, or otherwise interact with the gam365 platform at gam365.org.

gam365 operates as an internationally licensed online casino and sports betting platform serving Pakistani players. As part of that operation, we process personal data in strict accordance with our licensing obligations and applicable data protection standards. We take our responsibility as a data controller seriously — your trust in gam365 depends not just on our games and payments, but on our handling of your personal information.

This policy is written in plain language alongside legal-standard definitions. If any part of it is unclear, you are encouraged to contact us at [email protected] for clarification before providing your data.

§ 02 Data Controller

For the purposes of applicable data protection legislation, gam365.org is the data controller responsible for your personal data. As data controller, gam365 determines the purposes and means by which your personal data is processed.

gam365 operates under an international online gaming license. All personal data processing activities are conducted in compliance with the data protection requirements of that licensing framework. Where third-party data processors are engaged, they act solely on gam365's instructions under written data processing agreements.

§ 03 Categories of Personal Data We Collect

gam365 collects the following categories of personal data from registered users and platform visitors:

gam365 does not collect sensitive personal data such as biometric data, health information, or religious or political beliefs. CNIC document images are collected solely for identity verification purposes and are treated with heightened security controls.

§ 04 How We Collect Your Data

gam365 collects personal data through the following channels:

4.1 Data You Provide Directly

When you register an account on gam365, you provide identity and contact data. When you complete KYC verification, you provide identity documents. When you make a deposit or withdrawal, your financial data is transmitted to gam365 through the relevant payment provider. When you contact support, your communications data is retained.

4.2 Data Collected Automatically

When you access gam365.org, technical data including your IP address, device identifiers, browser type, and session information is automatically collected by our servers. This data collection is standard practice for web platform security and is necessary to protect your account from unauthorized access.

4.3 Data from Third-Party Sources

gam365 may receive identity verification data from licensed KYC service providers engaged to cross-reference the information you have provided. We may also receive fraud alert data from payment processors relating to transactions on your account. In both cases, the third party operates under a data processing agreement with gam365 and no data is transferred beyond what is necessary.

§ 05 Legal Basis for Processing

gam365 processes your personal data on the following legal bases:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary to perform our contractual obligations to you under the gam365 Terms & Conditions — including operating your account, processing deposits and withdrawals, and providing access to games and betting markets.
• Legal Obligation: Processing your identity data for KYC verification and your transaction data for anti-money laundering monitoring is required by gam365's international gaming license. This processing is not optional — it is a mandatory regulatory requirement.
• Legitimate Interests: Processing technical and usage data for fraud prevention, security monitoring, and platform stability is justified by gam365's legitimate interest in maintaining a secure, fair platform for all users — provided that interest is not overridden by your fundamental rights.
• Consent: Where gam365 sends marketing communications (promotional offers, bonus notifications), this is done only where you have provided explicit consent during registration or subsequently opted in. You may withdraw this consent at any time by contacting [email protected].

§ 06 How gam365 Uses Your Personal Data

gam365 uses the personal data we collect for the following purposes:

• Creating and managing your gam365 account, including login authentication and account settings;
• Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported payment methods;
• Verifying your identity and age in compliance with our KYC obligations before processing withdrawal requests;
• Monitoring gameplay patterns for responsible gaming purposes, including identifying indicators of problem gambling behavior and applying protective measures where warranted;
• Detecting, investigating, and preventing fraudulent transactions, multi-accounting, bonus abuse, and other prohibited conduct under the gam365 Terms & Conditions;
• Providing customer support through live chat, Messenger, and email, and maintaining records of those interactions for quality and regulatory compliance purposes;
• Sending account-related communications including transaction confirmations, security alerts, and policy update notifications — these are non-optional service communications;
• Sending promotional communications including bonus offers and platform news — these are sent only with your consent and can be opted out of at any time;
• Complying with reporting obligations to gam365's licensing authority, including player activity reports and anti-money laundering filings where required.

§ 07 Data Sharing and Third-Party Disclosure

gam365 does not sell, rent, or commercially share your personal data with any third party. Data is shared only in the following strictly controlled circumstances:

7.1 Payment Processors

When you make a deposit or withdrawal, the minimum necessary financial data is shared with the relevant payment service provider (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, etc.) to process the transaction. These providers operate under their own privacy policies and regulatory frameworks and are responsible for the security of data within their own systems.

7.2 Identity Verification Providers

For KYC compliance, gam365 engages licensed identity verification service providers. Your CNIC data and proof of address documents are shared with these providers solely for verification purposes. Verification providers are contractually prohibited from using your data for any other purpose.

7.3 Regulatory and Legal Disclosure

gam365 may disclose personal data to its licensing authority, law enforcement agencies, or other competent regulatory bodies where required by law, by the terms of our license, or in response to a valid legal order. gam365 will not voluntarily disclose data to law enforcement beyond what is legally required.

7.4 Fraud Prevention Services

Technical and account data may be shared with licensed fraud prevention services to protect the integrity of the platform. This sharing is strictly limited to the data necessary to assess and mitigate fraud risk.

§ 08 Cookies and Tracking Technologies

gam365.org uses cookies and similar tracking technologies to operate core platform functions and analyze platform usage. The following cookie categories are used:

• Strictly Necessary Cookies: Required for core platform functionality including authentication session management, bet slip state, and security token handling. These cannot be disabled without breaking the platform.
• Performance Cookies: Used to collect anonymized data on platform usage patterns, page load times, and error frequency. This data is used to optimize platform performance and is not linked to individual user identities.
• Functional Cookies: Used to remember your language preference, login state, and display settings between sessions. These improve your experience but are not strictly necessary.
• Analytics Cookies: Used to understand how users navigate gam365.org in aggregate. Data collected is anonymized and is not shared with advertising networks.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair the functionality of your gam365 account, including login and payment processing.

§ 09 Data Security Measures

gam365 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between user devices and gam365 servers;
• Encryption at rest for all sensitive personal data including identity documents, payment details, and CNIC records;
• Access controls limiting internal access to personal data to employees who require it for their specific role;
• Two-factor authentication requirements for all gam365 internal system access;
• Regular penetration testing and security audits by independent security specialists;
• Automated fraud monitoring and anomaly detection on all account activity;
• Secure data backup procedures with offsite encrypted storage.

While gam365 takes all reasonable measures to protect your data, no internet transmission is completely risk-free. You are responsible for maintaining the security of your gam365 account credentials and should notify us immediately at [email protected] if you suspect any unauthorized account access.

§ 10 Data Retention Periods

gam365 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law and licensing obligations. The following general retention guidelines apply:

• Account and Identity Data: Retained for the duration of your active account relationship with gam365 plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements;
• Transaction and Financial Data: Retained for a minimum of five (5) years following the date of each transaction, as required by financial crime prevention regulations applicable under our license;
• KYC Documentation: Retained for a minimum of five (5) years following account closure or the completion of the KYC process, whichever is later;
• Gameplay Records: Retained for the duration of your active account plus five (5) years for responsible gaming monitoring and regulatory audit purposes;
• Support Communications: Retained for three (3) years from the date of the interaction;
• Technical and Usage Data: Retained in anonymized or aggregated form only after twelve (12) months from collection.

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. You may request deletion of your personal data prior to the end of the applicable retention period where gam365 is not legally obligated to retain it.

§ 11 Your Data Subject Rights

Subject to applicable law and gam365's regulatory obligations, you hold the following rights over your personal data processed by gam365:

• Right of Access: You may request a copy of all personal data gam365 holds about you. We will respond within thirty (30) days of receiving a valid request.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Contact support to update standard profile details, or submit a formal rectification request for more sensitive data corrections.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to gam365's legal retention obligations which may override the erasure request.
• Right to Restrict Processing: You may request that gam365 restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You may object to gam365 processing your personal data on the basis of legitimate interests. You may also opt out of marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request." gam365 will acknowledge your request within seventy-two (72) hours and provide a substantive response within thirty (30) days. Where requests are complex, this period may be extended by a further thirty (30) days with notice to you.

§ 12 Children's Privacy — Strict 21+ Policy

gam365 is strictly an adult platform restricted to users aged 21 years and above. gam365 does not knowingly collect personal data from individuals under the age of 21. Registration requires age confirmation and all accounts are subject to CNIC-based age verification before any withdrawal is processed.

If gam365 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all balances will be frozen pending investigation, and the relevant data will be deleted in accordance with our data retention policy. The relevant data subject rights and parental/guardian notification obligations will be applied in full.

§ 13 International Data Transfers

gam365 operates under an international gaming license and may process data through servers and third-party service providers located outside Pakistan. Where personal data is transferred internationally, gam365 ensures that appropriate safeguards are in place, including:

• Contractual data processing agreements with all third-party processors incorporating adequate data protection standards;
• Technical security measures including encryption in transit and at rest that apply regardless of data location;
• Transfer only to processors whose jurisdiction provides an equivalent or higher standard of data protection.

gam365 does not transfer personal data in a manner that strips away the protections established in this Privacy Policy, regardless of where that processing occurs.

§ 14 Changes to This Privacy Policy

gam365 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, licensing requirements, or applicable law. Where changes are material, gam365 will notify registered users via email to their registered address and/or via an in-platform notification at least fourteen (14) days before the changes take effect.

The "Last Updated" date at the top of this policy confirms when the most recent revision was made. Continued use of gam365 following the effective date of any updated Privacy Policy constitutes your acknowledgment of the revised terms. If you do not agree with a material change, you should close your account before the change takes effect.

§ 15 Contact Us — Privacy Queries & Data Requests

For all privacy-related enquiries, data subject rights requests, or complaints about gam365's handling of your personal data, please contact us through the following channels:

• Email: [email protected] — use subject line "Privacy Request" for data rights queries
• Live Chat: Available 24/7 directly within the gam365 platform for immediate support
• Messenger Support: Available through the official gam365 support channel

If you are unsatisfied with gam365's response to a privacy complaint, you have the right to escalate the matter to gam365's licensing authority through the dispute resolution process outlined in our Terms & Conditions.

For general platform questions and account queries, visit our FAQ page. For responsible gaming support, visit our Responsible Gaming page.