bk365 Privacy Policy

1Introduction

This Privacy Policy is issued by bk365 ("bk365", "we", "us", "our") and applies to all personal data collected, processed, and stored in connection with your use of the bk365 online betting and gaming platform accessible at bk365.lat, including all associated mobile web interfaces and downloadable applications (collectively, the "Platform").

bk365 is committed to protecting the privacy and security of all users of the Platform. We process personal data in accordance with applicable international data protection standards and the conditions of our international gaming license. This Privacy Policy explains our data practices clearly so that you can make informed decisions about your personal information when using bk365.

By registering an account, making a deposit, or otherwise using the bk365 Platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you should not use the bk365 Platform.

2Data Controller

For the purposes of this Privacy Policy, bk365 acts as the data controller in respect of all personal data collected through the Platform. As data controller, bk365 determines the purposes and means of processing your personal information and is responsible for ensuring that such processing complies with applicable data protection law.

bk365 operates under an international gaming license. The legal entity holding the gaming license is the registered data controller for all player personal data processed through the bk365 Platform. Contact details for data-related enquiries are provided in Article 17 of this policy.

3Data We Collect

bk365 collects the following categories of personal data in connection with your use of the Platform:

3.1 Identity Data

Full legal name, date of birth, gender, nationality, and CNIC (Computerised National Identity Card) number or equivalent government-issued identification number. This data is collected at registration and verified during the KYC process.

3.2 Contact Data

Email address, mobile phone number, and city of residence (e.g., Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi). Contact data is used to manage your account, communicate important account notifications, and deliver customer support.

3.3 Financial Data

Payment method details including JazzCash account numbers, EasyPaisa wallet identifiers, bank account numbers for HBL, UBL, and Meezan Bank transfers, USDT TRC20 wallet addresses, and SadaPay identifiers. bk365 does not store full bank account credentials directly; these are processed via secure payment gateway partners.

3.4 Verification Documents

Scanned copies or clear photographs of government-issued identity documents (CNIC front and back), proof of payment method ownership, and proof of address where requested during enhanced KYC review.

3.5 Transactional Data

Full records of all deposits, withdrawals, bets placed, games played, bonus claims, session durations, and account balance history. Transactional data is retained for regulatory compliance purposes.

3.6 Technical and Device Data

IP address, device type, operating system, browser type and version, device identifiers, time zone, and language settings. This data is collected automatically when you access the Platform.

3.7 Usage Data

Clickstream data, page view history, feature usage patterns, session start and end times, search queries within the Platform, and customer support interaction logs.

Data Category	Examples	Collection Point
Identity	Name, CNIC, DOB	Registration / KYC
Contact	Email, phone, city	Registration
Financial	JazzCash number, bank account	Cashier / Withdrawal
Verification	CNIC scan, address proof	KYC process
Transactional	Bet history, deposits	Platform use
Technical	IP address, device ID	Automatic / Cookies
Usage	Clickstream, session time	Automatic / Analytics

4How We Collect Your Data

bk365 collects personal data through the following methods:

• Direct submission: Data you provide when registering an account, completing the KYC process, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and similar tracking technologies when you access the bk365 Platform.
• Third-party sources: Identity verification data from KYC and age verification service providers; fraud risk signals from anti-fraud screening partners; device reputation data from security service providers.
• Payment processors: Transaction confirmation and payment status data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other integrated payment partners.

5Lawful Basis for Processing

bk365 processes your personal data only where a valid lawful basis exists. The applicable lawful bases are as follows:

• Contractual necessity: Processing required to register your bk365 account, process your bets, manage deposits and withdrawals, and deliver the core services you have requested.
• Legal obligation: Processing required to comply with our obligations under anti-money laundering (AML) regulations, KYC requirements under our gaming license conditions, and any applicable data protection law.
• Legitimate interests: Processing for fraud prevention, responsible gaming monitoring, security threat detection, and platform analytics, where such processing does not override your fundamental privacy rights.
• Consent: Processing for direct marketing communications, non-essential cookies, and any other processing activities where consent is the stated lawful basis. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6How We Use Your Data

bk365 uses the personal data described in Article 3 for the following specific purposes:

1. To create, maintain, and manage your bk365 account, including authentication and session management.
2. To verify your identity and age (21+) in compliance with our gaming license KYC obligations.
3. To process deposits, settle winnings, and execute withdrawal requests in Pakistani Rupees (PKR).
4. To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, and other prohibited conduct.
5. To enforce our responsible gaming controls, including monitoring for problem gambling indicators and applying any self-imposed limits or exclusions on your account.
6. To provide personalised game recommendations, bonus offers, and promotional communications where you have consented to receive them.
7. To respond to customer support queries, complaints, and dispute resolution requests.
8. To conduct platform analytics that inform technical improvements, product development, and user experience optimisation.
9. To comply with requests from regulatory authorities, law enforcement agencies, or gaming license compliance requirements.
10. To send essential account notifications, security alerts, and service updates regardless of your marketing consent preference.

7KYC & Age Verification

bk365 maintains a strict 21+ minimum age policy. Age verification is mandatory for all players before any withdrawal is processed and may be required at any earlier stage at bk365's discretion. KYC verification involves the submission of a valid CNIC or equivalent government-issued photo identification document confirming your date of birth and legal name.

bk365 may use third-party identity verification service providers to authenticate the documents submitted during the KYC process. These providers act as data processors on behalf of bk365 and are contractually bound to process your identity documents only for the purposes of verification and to retain them only for as long as required by applicable law.

Documents submitted for KYC purposes are stored in an encrypted document management environment with access restricted to authorised compliance personnel only. KYC documents are not used for any purpose other than identity and age verification and anti-money laundering screening.

8Data Sharing & Disclosure

bk365 does not sell, rent, or trade your personal data to any third party for commercial gain. Personal data is shared only in the following circumstances and only to the minimum extent necessary:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other integrated payment partners receive the minimum transactional data required to process your deposit or withdrawal.
• KYC and identity verification providers: Identity documents and verification data are shared with our contracted KYC service providers solely for the purpose of identity and age verification.
• Game software providers: Your account identifier and gaming activity data may be shared with third-party game software providers (such as Pragmatic Play, PG Soft, and Evolution Gaming) to the extent required to deliver their games on the bk365 platform.
• Fraud prevention and AML agencies: Transaction data and identity indicators may be shared with anti-money laundering screening and fraud prevention service providers.
• Regulatory and legal authorities: bk365 will disclose personal data to gaming regulators, law enforcement agencies, or courts when required to do so by applicable law, court order, or the conditions of our gaming license.
• Business transfers: In the event of a merger, acquisition, or sale of the bk365 business or assets, player data may be transferred to the acquiring entity subject to the same privacy protections described in this policy.

All third-party service providers with whom bk365 shares personal data are required to enter into data processing agreements that impose obligations equivalent to those in this Privacy Policy and restrict use of the data to the stated processing purposes only.

9International Data Transfers

bk365 is an internationally operated platform and your personal data may be stored or processed in countries outside Pakistan. Where personal data is transferred to a country that does not provide the same level of data protection as your home jurisdiction, bk365 ensures that appropriate safeguards are in place, such as standard contractual clauses or equivalent data transfer mechanisms.

All international data transfers carried out by bk365 are subject to the same security standards described in Article 13 of this policy, regardless of the jurisdiction in which the processing takes place.

10Data Retention

bk365 retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy and to comply with our legal, regulatory, and contractual obligations. The following general retention periods apply:

Data Type	Retention Period	Reason
Account & identity data	5 years after account closure	AML / gaming license requirement
KYC documents	5 years after account closure	Regulatory compliance
Transaction records	5 years after last transaction	AML / financial record keeping
Customer support records	3 years after last interaction	Dispute resolution / quality review
Technical / device logs	12 months from collection	Security monitoring
Marketing consent records	Until withdrawn + 1 year	Consent audit trail

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with bk365's data destruction procedures. Anonymised, aggregated data may be retained indefinitely for statistical and research purposes, as it cannot be used to identify individual players.

11Cookies & Tracking Technologies

bk365 uses cookies and similar tracking technologies on the Platform to ensure security, maintain session continuity, remember your preferences, and analyse how the Platform is used. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function correctly. They maintain your logged-in session, apply security tokens, and prevent cross-site request forgery. These cookies cannot be disabled.
• Functional cookies: Remember your language preference, display settings, and recently viewed game categories. Disabling these cookies may reduce personalisation features.
• Analytics cookies: Collect anonymised data about how visitors navigate the Platform to help bk365 improve usability and performance. No personal identity is attached to analytics data.
• Security cookies: Used to detect and prevent fraudulent logins, identify device fingerprints for security monitoring, and flag suspicious account activity patterns.

You may manage your non-essential cookie preferences through the Cookie Settings panel accessible in the Platform footer. Note that disabling functional or analytics cookies will not affect your ability to place bets or make transactions on bk365.

12Marketing Communications

Where you have provided consent at registration or subsequently through Account Settings, bk365 may send you promotional communications including bonus offers, new game announcements, PSL season promotions, and other marketing content via email or SMS to your registered phone number.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "Unsubscribe" link in any bk365 marketing email.
• Updating your communication preferences in Account Settings under "Notifications".
• Contacting the bk365 support team via live chat and requesting removal from the marketing list.

Withdrawal of marketing consent will not affect your receipt of essential account communications such as deposit confirmations, withdrawal notifications, security alerts, and KYC verification requests — these are operational communications and are not subject to marketing consent.

bk365 will process your unsubscribe request within 10 business days. You will continue to receive any pre-scheduled campaign messages that were queued before the unsubscribe request was processed.

13Data Security

bk365 employs industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures in place include:

• Encryption in transit: All data transmitted between your device and the bk365 Platform is encrypted using TLS 1.3 protocol. The Platform is accessible exclusively via HTTPS.
• Encryption at rest: Personal data stored in bk365's database infrastructure is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorised bk365 employees and contractors on a strict need-to-know basis. All personnel with access to player data are subject to confidentiality obligations.
• Two-factor authentication: Internal administrative access to player data systems requires multi-factor authentication. Players are also encouraged to enable 2FA on their own accounts.
• Security monitoring: bk365 maintains continuous security monitoring, intrusion detection systems, and regular third-party penetration testing to identify and remediate vulnerabilities.
• Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, bk365 will notify affected players by email and report the incident to the relevant supervisory authority within the timeframes required by applicable law.

While bk365 takes all reasonable steps to protect your data, no system is entirely immune from security risk. You are encouraged to use a strong, unique password for your bk365 account and to enable two-factor authentication to minimise the risk of unauthorised access from your end.

14Your Data Rights

Subject to applicable data protection law and bk365's regulatory retention obligations, you hold the following rights in respect of your personal data:

To exercise any of the above rights, please contact bk365's support team via live chat inside your account or by email at support@bk365.lat. bk365 will acknowledge your request within 48 hours and respond within 30 calendar days. Where a request is complex, this period may be extended by a further 30 days with notification to you.

bk365 will not charge a fee for exercising your data rights unless a request is manifestly unfounded or excessive in scope, in which case a reasonable administrative fee may apply. bk365 reserves the right to refuse requests that would require the deletion of data that we are obliged to retain under gaming license or AML regulations.

15Children & Minors

The bk365 Platform is strictly intended for persons aged 21 years and above. bk365 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account, in accordance with our underage gambling prevention policy.

If you believe that a minor is using or has registered on the bk365 Platform, please contact our support team immediately via live chat or at support@bk365.lat. We take reports of underage gambling seriously and will investigate and act promptly upon every report received.

16Changes to This Privacy Policy

bk365 reserves the right to update or amend this Privacy Policy at any time. When we make material changes to the way we process your personal data, we will notify you by email to your registered address and by a prominent notice on the Platform prior to the change taking effect. The updated Privacy Policy will display the revised effective date at the top of this page.

Continued use of the bk365 Platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Privacy Policy, you should discontinue use of the Platform and may request account closure in accordance with the process described in our Terms and Conditions.

The current version of this Privacy Policy is always available at bk365.lat/privacy-policy. You are encouraged to review this page periodically to stay informed about how your data is being protected and used.

17Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your personal data is being processed by bk365, please contact us using one of the following methods:

• Live Chat: Available 24 hours a day, 7 days a week from within your logged-in bk365 account. Select "Privacy and Data" as your enquiry topic for routing to the data protection team.
• Email: support@bk365.lat — for data subject access requests, privacy complaints, or detailed privacy enquiries. Please include "Privacy Request" in the subject line.

bk365 will respond to all privacy-related enquiries within 48 hours of receipt. For formal data subject access requests, a full response will be provided within 30 calendar days in accordance with applicable data protection law.