pa365 Privacy Policy — How We Protect Your Data

1.1 pa365 operates the online casino and sports betting platform accessible at pa365.vip. As part of delivering our services — including account management, sports betting, live dealer games, slot games, payment processing, and responsible gaming tools — pa365 necessarily processes certain categories of personal data relating to our users.

1.2 This Privacy Policy has been written to provide a clear, honest, and complete account of how pa365 handles personal data. We have designed our data practices to align with internationally recognised data protection standards and the obligations imposed by our gaming licence authority.

1.3 This Privacy Policy applies to all pa365 users, including visitors to pa365.vip who have not yet registered an account, registered account holders, and former account holders whose data we are required to retain for regulatory purposes. It applies across all devices and access methods — desktop browser, mobile browser, and any pa365 mobile application.

1.4 Where this Privacy Policy uses the term "personal data", it refers to any information that relates to an identified or identifiable individual. This includes obvious identifiers such as your full name and CNIC number, as well as less obvious data such as your IP address, device identifier, and betting history when these can be linked back to you as an individual.

2.1 pa365 collects personal data across several categories depending on your level of interaction with the platform. The table below sets out the main categories of data we collect, along with examples of the specific data points within each category.

2.2 pa365 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data beyond what is strictly necessary for responsible gaming assessments (for example, information you voluntarily provide when requesting a self-exclusion or deposit limit).

3.1 pa365 collects personal data through the following channels:

• Direct provision by you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey, you directly provide us with personal data.
• Automated technical collection: As you use pa365.vip, our servers automatically record technical data including your IP address, device type, browser, and navigation patterns. This data is collected via server logs, cookies, and similar tracking technologies.
• Payment processors: When you transact via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20, we receive transaction confirmation data from the relevant payment processor to reconcile deposits and withdrawals.
• Identity verification providers: pa365 may use third-party KYC and AML screening services to verify the identity documents you submit. These services return verification results to pa365 and may flag matches against sanctions or politically exposed persons (PEP) databases.
• Customer support interactions: Any communications you initiate with the pa365 support team — via live chat, email, or any other channel — are recorded and stored as part of your account record.

4.1 pa365 processes your personal data only for specific, legitimate purposes. The table below maps each processing purpose to the data category used:

4.2 pa365 will never sell your personal data to third parties for their own marketing purposes. We do not share your data with advertisers, data brokers, or unrelated commercial entities.

5.1 Every data processing activity carried out by pa365 rests on one of the following legal bases:

• Contractual necessity: The majority of pa365's data processing is necessary to perform the contract between pa365 and you as a registered user — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal obligation: pa365 is required by its gaming licence and applicable anti-money laundering regulations to collect, verify, and retain certain categories of personal data — particularly identity documents and transaction records. This processing cannot be avoided or opted out of.
• Legitimate interests: pa365 processes Technical Data and Gaming Activity for fraud detection, account security, platform analytics, and responsible gaming monitoring on the basis of our legitimate interest in maintaining a safe and compliant platform.
• Consent: Where pa365 relies on consent as the legal basis for processing — most notably for marketing communications — you retain the right to withdraw that consent at any time without affecting the lawfulness of any processing that took place before withdrawal.

6.1 pa365 does not share your personal data with third parties except in the specific circumstances described below. All third parties with whom pa365 shares data are contractually required to handle that data securely and in accordance with applicable data protection standards.

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and our USDT TRC20 processing partner receive the minimum data necessary to execute your requested transaction.
• KYC/AML verification providers: Third-party identity verification and sanctions screening services receive the identity documents and data points required to complete KYC checks on pa365's behalf.
• Game providers: Live dealer game and slot providers who supply games within the pa365 platform may receive anonymised or pseudonymised session data necessary to deliver game functionality. These providers do not receive your full identity data.
• Regulatory authorities: pa365 is obligated to disclose account and transaction data to our licensing authority and to financial intelligence units where required by law, court order, or regulatory directive.
• Fraud prevention agencies: Where pa365 suspects fraud, money laundering, or match-fixing, relevant data may be shared with fraud prevention agencies, other licensed gambling operators, or law enforcement bodies.

6.2 pa365 does not transfer your personal data to countries with inadequate data protection standards without first implementing appropriate safeguards such as contractual data protection clauses. All international data transfers are subject to pa365's data transfer policy.

7.1 pa365 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The retention periods below represent our standard practice:

7.2 When data reaches the end of its applicable retention period, pa365 will securely delete or anonymise it. Anonymised data — which can no longer be attributed to any identifiable individual — may be retained indefinitely for statistical and analytical purposes.

8.1 pa365.vip uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience. A cookie is a small text file placed on your device by a website you visit. Cookies enable pa365 to recognise your browser, maintain your session, and store your preferences.

8.2 pa365 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the pa365 platform to function correctly. They manage your login session, maintain your account security state, and enable core features such as depositing and withdrawing. These cookies cannot be disabled.
• Analytics Cookies: pa365 uses analytics tools to understand how users navigate the platform — which pages are visited most, where users drop off, and how features are used. This data is aggregated and anonymised and helps pa365 improve the user experience. Analytics cookies can be disabled via your browser settings.
• Functional Cookies: These cookies store your preferences such as language settings, preferred currency display, and responsible gaming tool configurations, so that you do not need to reset them on each visit.
• Marketing Cookies: If you have opted into marketing communications, pa365 may use cookies to track which promotions you have seen or interacted with, so that we can avoid sending you repeat communications about offers you have already viewed.

8.3 You can control and delete cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will impair the functionality of the pa365 platform and may prevent you from accessing your account.

9.1 pa365 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction.

• 256-bit SSL/TLS Encryption: All data transmitted between your device and pa365.vip is encrypted using industry-standard 256-bit TLS encryption. This applies to all pages of the platform, not just payment pages.
• Encrypted Data Storage: Sensitive data fields — including CNIC numbers, payment account details, and KYC documents — are encrypted at rest in pa365's database infrastructure.
• Access Controls: Access to personal data within pa365's systems is restricted to staff who have a demonstrated operational need for that data. Access is governed by role-based permissions and all access events are logged and audited.
• SMS OTP Two-Factor Authentication: pa365 offers SMS OTP two-factor authentication for all user accounts, providing an additional layer of protection beyond your password against unauthorised account access.
• Fraud & Anomaly Detection: pa365 operates automated systems that monitor account activity in real time for patterns consistent with account takeover, fraud, or unauthorised access. Suspicious activity triggers automatic security alerts.

9.2 Despite these measures, no internet transmission or electronic storage system can be guaranteed to be 100% secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, pa365 will notify affected users in accordance with our obligations under applicable data protection law.

10.1 As a pa365 user, you hold the following rights in relation to your personal data. These rights can be exercised by contacting pa365 support at any time:

10.2 pa365 will respond to all data rights requests within 30 days of receipt. Where a request is complex or numerous, pa365 may extend this period by a further 60 days, with notice given to you. pa365 will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive.

10.3 Please note that some rights are subject to legal limitations. For example, the right to erasure cannot override pa365's legal obligation to retain AML records for five years after account closure. Where pa365 cannot fulfil a data rights request in full, we will explain the specific limitation that applies.

11.1 pa365 is strictly an adult platform. No person under the age of 21 is permitted to register an account, access the platform, or use any pa365 service. pa365 does not knowingly collect or process personal data relating to persons under the age of 21.

11.2 pa365's KYC verification process — which includes CNIC verification — serves as a primary control against under-age access. All accounts are required to complete identity verification before depositing or playing, and the verified date of birth must confirm the user is 21 years of age or older.

11.3 Parents and guardians in Pakistan who are concerned about minors accessing online gaming platforms are encouraged to use internet filtering software and to report any underage access to pa365 support without delay.

12.1 pa365.vip may contain links to third-party websites or services — for example, links to payment providers or game certification bodies. pa365 has no control over the privacy practices or content of these third-party websites and is not responsible for how they collect, use, or protect your personal data.

12.2 pa365 recommends that you read the privacy policy of any third-party website you visit via a link from pa365.vip before submitting any personal data to that site. The pa365 Privacy Policy applies solely to data processed by pa365 in connection with pa365.vip and its associated services.

13.1 pa365 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made to this policy, pa365 will notify registered users by email and/or via an on-platform notification prior to the changes taking effect.

13.2 The "Last Updated" date at the top of this page indicates when this Privacy Policy was most recently revised. We encourage you to review this page periodically. Your continued use of the pa365 platform after a revised Privacy Policy has been posted constitutes your acceptance of the updated policy.

13.3 If you do not accept a revised version of this Privacy Policy, you should stop using the pa365 platform and may request account closure by contacting support. Any data already collected under a prior version of this policy that is subject to a legal retention obligation will continue to be retained in accordance with that obligation.

14.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data pa365 holds about you, please contact our Data Protection team. We are available 24 hours a day, 7 days a week via live chat on the pa365 platform.

14.2 For written privacy enquiries and data rights requests, you may also reach us at the following address (plain text — not a clickable link):

14.3 pa365 aims to acknowledge all written privacy enquiries within 2 business days and to resolve data rights requests within 30 days. For matters requiring urgent attention — such as suspected unauthorised access to your account — we recommend contacting us via live chat for the fastest possible response.