Notice to Players: This Privacy Policy ("Policy") describes how pak361 ("we", "us", "our") collects, uses, stores, and protects the personal data of registered players and website visitors ("you", "your"). By registering an account on pak361, you confirm that you have read and understood this Policy. This Policy forms part of the pak361
Terms & Conditions.
01Introduction & Scope
pak361 is an online casino and sports betting platform operated for Pakistani players and the broader international market. We take data privacy seriously — not because compliance requires it, but because our players deserve to know exactly how their information is handled.
This Policy applies to all personal data collected through:
- The pak361 website at pak361.org and all associated sub-pages.
- The account registration and KYC verification process.
- All deposit, withdrawal, and transaction activity conducted on the platform.
- Live chat, email support, and any other communication channel you use to contact pak361.
- Cookies and analytics tools deployed on the pak361 website.
This Policy does not apply to third-party websites or services that may be referenced from pak361.org. We have no control over the privacy practices of external parties and encourage you to review their policies independently.
Pakistani Player Focus: pak361 is specifically designed for players in Pakistan — including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and Peshawar. All data processing activities are conducted with Pakistani players' interests in mind, including the use of locally familiar payment methods such as JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast.
02Data We Collect
2.1 Registration Data
When you create a pak361 account, we collect the following personal information:
- Full legal name (as it appears on your CNIC or passport)
- Date of birth (to verify the 21+ age requirement)
- Residential address (city, province, postal code)
- Email address
- Mobile phone number
- Preferred currency (PKR)
2.2 Identity Verification (KYC) Data
As part of our KYC process — which is required before processing withdrawals — we may collect:
- A copy of your CNIC (Computerised National Identity Card) or valid passport
- Proof of residential address (utility bill, bank statement, or equivalent dated within 3 months)
- A selfie or live photo for facial verification purposes
- Documentation confirming the source of funds for high-value accounts, where required under AML obligations
2.3 Transaction & Activity Data
pak361 automatically records all financial and gaming activity associated with your account, including:
- Deposit and withdrawal amounts, dates, methods, and reference numbers
- Bet history, including stake amounts, odds, markets, and outcomes
- Bonus claims, wagering activity, and promotion participation records
- Session logs including login timestamps and session duration
2.4 Technical & Device Data
When you access pak361.org, our servers and analytics tools automatically collect certain technical data:
- IP address and approximate geolocation (country/city level)
- Device type, operating system, and browser version
- Referring URL and on-site navigation behaviour
- Cookie identifiers (see Section 7 for full cookie details)
2.5 Communication Data
When you contact pak361 support — whether via live chat or email at [email protected] — we retain a record of that communication, including the content of your messages, timestamps, and any supporting documents you share. This record is used for quality assurance, dispute resolution, and regulatory compliance purposes.
Data Minimisation: pak361 applies a data minimisation principle. We only collect information that is genuinely needed for the stated purposes. If you believe we are holding data about you that is not relevant to your account or required by law, you have the right to raise this with us (see Section 10).
03How We Use Your Data
pak361 uses your personal data for the following specific purposes:
- Account Management: To create, maintain, and administer your pak361 account, including processing your PKR deposits and withdrawals via JazzCash, EasyPaisa, and other accepted payment methods.
- Identity Verification: To verify that you are who you say you are and that you meet the 21+ age requirement, as required under our operating standards and responsible gaming obligations.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account takeovers, money laundering, and any other conduct that violates our Terms and Conditions.
- Responsible Gaming: To monitor your gaming behaviour for signs of problem gambling, to honour deposit limit and self-exclusion requests, and to comply with our responsible gaming obligations.
- Customer Support: To respond to your queries, resolve disputes (including bet settlement disputes on PSL and cricket markets), and manage complaints.
- Legal & Regulatory Compliance: To meet our obligations under applicable AML regulations, international gaming licensing requirements, and data retention laws.
- Marketing Communications: If you have opted in, to send you promotional communications about pak361 bonuses, PSL betting offers, slot promotions, and casino events. You can withdraw this consent at any time.
- Platform Improvement: To analyse aggregated, anonymised usage data to improve the pak361 platform, identify technical issues, and develop new features.
No Automated Decision-Making That Harms You: pak361 does not use automated decision-making that produces legal or similarly significant effects on you without the ability to request human review. Where automated tools are used (for example, in fraud screening), a human review is available upon request.
04Legal Basis for Processing
pak361 processes your personal data under the following legal bases:
- Contract Performance: Processing necessary to fulfil the agreement between you and pak361, including account registration, transaction processing, and bet settlement.
- Legal Obligation: Processing required to comply with AML regulations, KYC requirements, and data retention obligations imposed by our international gaming licence.
- Legitimate Interests: Processing carried out in pursuit of pak361's legitimate business interests — including fraud prevention, platform security, and product improvement — where those interests are not overridden by your privacy rights.
- Consent: Processing based on your freely given, informed consent — specifically for marketing communications. You have the right to withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
05Data Sharing & Disclosure
5.1 We Do Not Sell Your Data
pak361 does not sell, rent, or commercially trade your personal data to any third party. This is an absolute commitment, with no exceptions.
5.2 Permitted Disclosures
pak361 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to confidentiality obligations:
- Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK — to process your PKR deposits and withdrawals. These processors receive only the data necessary to complete the transaction.
- KYC & Identity Verification Providers: Third-party identity verification services used to process CNIC verification and document checks.
- Fraud Prevention Services: Specialist fraud detection and AML screening services, which process transaction and behavioural data to identify suspicious activity.
- Regulatory & Licensing Authorities: Our international gaming licence authority may require access to certain player data records for audit and compliance purposes.
- Law Enforcement: Where we are required by a valid legal order, court order, or law enforcement request to disclose player data, we will comply. Where permitted by law, we will notify the affected player before disclosure.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of all or part of pak361's business, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and the implications for their data.
Subprocessor Standards: All third-party service providers who process data on pak361's behalf are subject to contractual data processing agreements that require them to implement appropriate technical and organisational security measures and to process data only for the purposes we specify.
06Payment Data & KYC Information
6.1 Payment Data Handling
pak361 does not store full payment card numbers or complete banking credentials on its own servers. Payment transactions are processed through secure, PCI-compliant payment gateways operated by our payment partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK). pak361 retains only the minimum transaction reference data necessary for reconciliation, dispute resolution, and AML compliance — such as the last four digits of a card number, the payment method type, and transaction amounts and dates.
6.2 KYC Document Security
KYC documents — including CNIC copies, passport scans, and proof-of-address documents — are stored in an encrypted document vault with strict access controls. Access to KYC documents is limited to the pak361 compliance team and, where legally required, to our licensing authority. KYC documents are retained for the legally mandated period after account closure (see Section 8) and then securely deleted.
Never Share Credentials Directly: pak361 will never ask you to share your JazzCash PIN, EasyPaisa MPIN, bank password, or any other payment credential directly with our support team. If you receive any communication asking for these credentials that claims to be from pak361, treat it as a phishing attempt and contact us immediately at
[email protected].
07Cookies & Tracking Technologies
7.1 What Cookies We Use
pak361 uses the following categories of cookies on pak361.org:
- Essential Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, security tokens, and CSRF protection cookies. These cannot be disabled without breaking core platform functionality.
- Analytics Cookies: Used to collect anonymised data about how players navigate the pak361 website — which pages are most visited, how long sessions last, and where players encounter issues. This data helps us improve the platform. Analytics data is aggregated and does not identify individual players.
- Preference Cookies: Used to remember your language and display preferences across sessions.
7.2 What We Do Not Use
pak361 does not deploy third-party advertising cookies, cross-site tracking pixels, or retargeting technologies that share your browsing behaviour with external advertising networks.
7.3 Managing Cookies
You can control and delete cookies through your browser settings. Please note that disabling essential cookies will prevent you from logging into your pak361 account and using core platform features. Disabling analytics or preference cookies will not affect your ability to place bets or manage your account.
Browser-Based Control: All major browsers — Chrome, Firefox, Safari, and Edge — provide cookie management tools in their privacy or security settings. Instructions specific to your browser are readily available in each browser's help section.
08Data Retention
pak361 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by law. The following retention periods apply:
| Data Category |
Retention Period |
Basis |
| Account registration data |
Duration of account + 5 years post-closure |
AML legal obligation |
| KYC documents (CNIC, passport) |
Duration of account + 5 years post-closure |
AML legal obligation |
| Transaction records (deposits, withdrawals) |
7 years from transaction date |
Financial regulation |
| Betting history |
Duration of account + 3 years post-closure |
Dispute resolution / legitimate interest |
| Support communications |
3 years from last contact |
Dispute resolution / legitimate interest |
| Marketing consent records |
3 years from consent or opt-out, whichever is later |
Legal compliance |
| Analytics / technical logs |
13 months (rolling) |
Legitimate interest |
After the applicable retention period expires, data is securely deleted or irreversibly anonymised so that it can no longer be associated with an individual player.
09Data Security
pak361 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:
- Encryption at Rest: All sensitive player data stored on pak361's servers is encrypted using AES-256 encryption.
- Encryption in Transit: All data transmitted between your device and pak361.org is protected using TLS 1.2 or higher. The padlock icon in your browser confirms this is active.
- Access Controls: Access to player data within pak361 is restricted on a role-based, need-to-know basis. Staff with access to personal data are subject to strict confidentiality obligations.
- Two-Factor Authentication: pak361 recommends and supports two-factor authentication (2FA) for all player accounts to reduce the risk of unauthorised access.
- Regular Security Audits: pak361's platform undergoes regular security assessments and vulnerability testing to identify and remediate potential weaknesses before they can be exploited.
- Incident Response: In the event of a data breach that poses a risk to players, pak361 will notify affected players and relevant authorities without undue delay and in accordance with applicable data breach notification requirements.
Your Role in Security: Security is a shared responsibility. You can significantly reduce the risk to your pak361 account by using a strong, unique password, enabling 2FA, and never sharing your login credentials. If you suspect your account has been compromised, contact pak361 support immediately via live chat.
10Your Rights
As a pak361 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact pak361 support via live chat or write to [email protected] with the subject line "Data Rights Request".
| Right |
What It Means |
Available |
| Right of Access |
Request a copy of all personal data pak361 holds about you. |
Yes |
| Right to Rectification |
Request correction of inaccurate or incomplete data in your account. |
Yes |
| Right to Erasure |
Request deletion of your personal data, subject to legal retention obligations. |
Conditional |
| Right to Restrict Processing |
Request that pak361 pause processing of your data in certain circumstances. |
Conditional |
| Right to Data Portability |
Request your data in a structured, machine-readable format for transfer elsewhere. |
Yes |
| Right to Object to Marketing |
Withdraw consent for marketing communications at any time. |
Yes |
| Right to Object to Automated Processing |
Request human review of any automated decision that significantly affects you. |
Yes |
pak361 will respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
Identity Verification for Rights Requests: To protect your privacy, pak361 will verify your identity before processing any data rights request. We may ask you to confirm details associated with your account before releasing or deleting any personal data. This step is for your protection — it ensures that no third party can access or erase your data by impersonating you.
11Children & Minors
pak361 is strictly an adult platform. We do not permit individuals under the age of 21 to register or use any feature of pak361.org. This age restriction applies to all players regardless of location, including all cities across Pakistan.
We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will immediately close the associated account, refund any deposits in accordance with our Terms and Conditions, and securely delete all personal data associated with that account.
If you are a parent or guardian and believe that a minor in your care has registered an account with pak361, please contact us immediately at [email protected] or via live chat. We will investigate and act promptly.
21+ Age Requirement: Gambling on pak361 is permitted only for individuals who are 21 years of age or older. Age verification is a mandatory step in the KYC process. Attempting to circumvent age verification is a serious violation of pak361's Terms and Conditions and may result in immediate account closure and forfeiture of funds.
12International Data Transfers
pak361 operates under an international gaming licence, and some of our data processing activities — including KYC verification and fraud screening — may involve the transfer of personal data to service providers located outside Pakistan. Where such transfers occur, pak361 ensures that:
- The receiving entity is subject to a data processing agreement that imposes equivalent data protection obligations to those described in this Policy.
- The transfer is carried out using appropriate safeguards, such as standard contractual clauses recognised under international data protection frameworks.
- The volume of data transferred is limited to the minimum necessary for the specific processing purpose.
pak361 does not transfer your personal data to any jurisdiction that does not provide an adequate level of data protection without first implementing appropriate safeguards.
Payment Data Localisation: PKR payment transaction data processed through local Pakistani payment networks — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK — is handled in accordance with the respective network's data processing terms, which are subject to applicable Pakistani financial regulations.
13Policy Updates
pak361 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes to applicable law, or improvements to our platform. When we make material changes to this Policy, we will:
- Update the "Last Updated" date at the top of this page.
- Display a notice on the pak361.org homepage and in the player account dashboard for a minimum of 14 days following the update.
- Where the change is significant — for example, a new category of data collection or a new third-party sharing arrangement — send a direct notification to the email address registered with your pak361 account.
Your continued use of pak361.org following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should stop using pak361 and may request account closure in accordance with the Terms and Conditions.
Version Archive: Previous versions of the pak361 Privacy Policy are available upon request by contacting
[email protected]. If you wish to review an earlier version to understand what policy was in effect at a particular point in time, our support team can provide this.
14Contact & Data Rights Requests
For all privacy-related queries, data rights requests, or concerns about how pak361 handles your personal data, please contact us through the following channels:
- Live Chat: Available 24/7 from any page on pak361.org — the fastest way to reach our support team for privacy queries.
- Email: [email protected] — use the subject line "Privacy Query" or "Data Rights Request" to ensure your message is routed to the correct team. Please allow up to 24 hours for email responses.
pak361 support is available around the clock to serve players across all of Pakistan — whether you are in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, or Peshawar. Privacy and data protection queries are treated with the same priority as account and payment queries.
Formal Privacy Notices: Any formal legal notices relating to data protection must be submitted in writing to
[email protected] with the subject line "Formal Privacy Notice". pak361 will acknowledge receipt of formal privacy correspondence within 5 business days and will respond fully within the timeframes required by applicable law.