1. Who We Are
This Privacy Policy applies to the k365 online casino and sports betting platform, accessible at k365.bio ("Platform", "k365", "we", "us"). k365 is the data controller responsible for the personal information you provide when registering, depositing, betting, or otherwise interacting with the Platform. If you have any questions about this Policy, please contact us using the details in Section 14.
2. Personal Data We Collect
k365 collects the following categories of personal data in connection with your use of the Platform:
- Identity Data: Full legal name, date of birth, gender, and nationality as provided during registration or KYC verification.
- Contact Data: Email address, phone number, and residential address.
- Identity Verification Documents: Copy of CNIC, passport, driving licence, or other government-issued identification submitted to satisfy KYC requirements.
- Financial Data: Payment method details (JazzCash/Easypaisa account numbers, bank account details, partial card numbers), transaction history, deposit and withdrawal records.
- Account Data: Username, account balance, betting and gaming history, bonus usage, and session activity logs.
- Technical Data: IP address, device identifiers, browser type and version, operating system, and connection timestamps.
- Usage Data: Pages visited within the Platform, games played, bet types, click-stream data, and session duration.
- Communications Data: Records of your interactions with our customer support team, including live chat transcripts and email correspondence.
3. How We Collect Your Data
k365 collects personal data through the following means:
- Direct Provision: Data you enter when registering an account, completing KYC, making a deposit or withdrawal, or contacting support.
- Automated Technologies: Cookies, server logs, and similar tracking technologies collect Technical Data and Usage Data automatically when you interact with the Platform.
- Third-Party Sources: Identity verification providers, payment processors, and fraud-prevention services may supply supplementary data to verify your identity or protect against financial crime.
4. Legal Basis for Processing
k365 processes your personal data on the following legal bases:
- Contractual Necessity: Processing required to perform the contract with you — creating and operating your account, processing deposits, settling bets, and processing withdrawals.
- Legal Obligation: Processing required to comply with applicable anti-money-laundering (AML), know-your-customer (KYC), counter-terrorist financing (CTF), and other regulatory obligations.
- Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your rights.
- Consent: Where you have explicitly opted in to receive marketing communications from k365. You may withdraw this consent at any time.
5. How We Use Your Personal Data
k365 uses the personal data collected for the following purposes:
- Registering and maintaining your k365 account.
- Processing deposits, withdrawals, and bet settlements in PKR.
- Conducting identity verification and age confirmation in accordance with our 18+ policy.
- Complying with AML, KYC, and CTF regulatory obligations.
- Detecting and preventing fraud, money laundering, and other prohibited conduct.
- Monitoring for responsible gaming compliance, including enforcement of self-exclusions and deposit limits.
- Providing customer support via live chat and email.
- Sending you transactional communications (deposit confirmations, withdrawal notifications, security alerts).
- Sending marketing communications where you have provided consent.
- Improving Platform performance, user experience, and game offerings through aggregated analytics.
6. Data Sharing and Disclosure
k365 does not sell your personal data. We may share your data with the following categories of recipient under strict data-processing agreements:
- Payment Processors: JazzCash, Easypaisa, and banking partners (HBL, UBL, Meezan Bank, Bank Alfalah) for the purpose of processing financial transactions.
- Identity Verification Providers: Third-party KYC and age verification services used to confirm your identity and comply with regulatory requirements.
- Fraud Prevention Services: Specialist providers that help detect and prevent fraudulent activity, money laundering, and abuse of the Platform.
- Game Technology Providers: Licensed casino game studios that may process limited session data to deliver certified games.
- Regulatory and Law Enforcement Authorities: Where k365 is legally required to disclose data pursuant to a lawful order, court order, or applicable regulatory requirement.
- IT and Infrastructure Providers: Hosting, cloud, and security service providers that support the technical operation of the Platform under confidentiality obligations.
7. Cookies and Tracking Technologies
The k365 Platform uses cookies and similar technologies. These fall into the following categories:
- Strictly Necessary Cookies: Required for the Platform to function — login sessions, security tokens, and shopping basket equivalents. These cannot be disabled.
- Functional Cookies: Remember your preferences such as language, currency display, and game lobby layout.
- Analytics Cookies: Aggregate, anonymised data on how users navigate the Platform, used to improve performance and user experience.
- Marketing Cookies: Used where you have consented to receive personalised promotional content from k365.
You may manage non-essential cookies through your browser settings. Disabling certain cookies may affect Platform functionality.
8. Data Retention
k365 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfaction of legal and regulatory retention obligations:
- Account data and transaction records: retained for a minimum of 5 years following account closure, as required by applicable AML regulations.
- KYC documentation: retained for the duration of the account relationship and for a minimum of 5 years thereafter.
- Customer support records: retained for 3 years following the close of the relevant support interaction.
- Marketing consent records: retained until consent is withdrawn and for 12 months thereafter as evidence of the consent.
Following the expiry of the applicable retention period, data is securely deleted or anonymised.
9. Data Security
k365 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, and destruction. These measures include:
- TLS encryption for all data transmitted between your device and the Platform.
- Encryption of personal and financial data stored in k365 systems.
- Role-based access controls limiting staff access to personal data to those with a legitimate operational need.
- Regular security assessments and penetration testing of Platform infrastructure.
- Two-factor authentication available to all account holders and enforced for internal administrative access.
No system can be guaranteed 100% secure. In the event of a personal data breach that is likely to result in significant risk to your rights, k365 will notify affected users and relevant authorities in accordance with applicable law.
10. Your Data Protection Rights
Subject to applicable law, you hold the following rights in relation to your personal data held by k365:
- Right of Access: Request a copy of all personal data k365 holds about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal data.
- Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
- Right to Restriction: Request that we limit processing of your data in certain circumstances.
- Right to Data Portability: Receive your personal data in a structured, machine-readable format where processing is based on consent or contract.
- Right to Object: Object to processing based on legitimate interests, including direct marketing.
- Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of the above rights, please contact k365 support (see Section 14). k365 will respond within 30 days. We may require identity verification before fulfilling a request.
11. Children's Privacy
The k365 Platform is strictly for persons aged 18 years and over. k365 does not knowingly collect personal data from persons under 18. If you believe a minor has registered on the Platform, please contact us immediately at the details in Section 14. Upon confirmation, we will delete the account and all associated data without delay.
12. International Data Transfers
k365 operates internationally and may transfer your personal data to processors and service providers located outside your country of residence. Where such transfers occur, k365 ensures that appropriate safeguards are in place — including standard contractual clauses, adequacy decisions, or equivalent protections — to maintain a level of data protection consistent with this Policy.
13. Updates to This Policy
k365 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform features. Material changes will be communicated via email or a prominent Platform notice at least 14 days before the changes take effect. The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Continued use of the k365 Platform following the effective date constitutes acceptance of the revised Policy.
14. Contact and Complaints
For any privacy-related queries, data subject requests, or complaints regarding how k365 handles your personal information, please contact us:
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24/7 within the k365 Platform.
- Response Time: Within 4 hours for general queries; data subject requests fulfilled within 30 days.
If you are not satisfied with k365's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.