pal365 Privacy Policy —
Your Data, Clearly Explained

pal365 ("we", "us", "our") operates the online gaming platform available at pal365.net (the "Platform"). We are committed to protecting the privacy and personal data of all users who register, access, or interact with the Platform, including players across Pakistan.

This Privacy Policy explains what personal data pal365 collects from players and other users, why we collect it, how we use it, who we may share it with, how long we keep it, and what rights you have in relation to your personal data.

This Privacy Policy should be read alongside the pal365 Terms & Conditions, which govern your use of the Platform generally. By registering for a pal365 account or using the Platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

For the purposes of applicable data protection law, pal365 is the data controller in respect of the personal data collected and processed through the Platform. This means pal365 determines the purposes for which, and the manner in which, your personal data is processed.

pal365 operates the Platform for players based in Pakistan and is committed to upholding data privacy standards consistent with established international best practices for the protection of personal information.

If you have any queries about this Privacy Policy or wish to exercise any of your data rights described in Section 11, you may contact pal365's data privacy contact point via the channels listed in Section 15.

pal365 collects the following categories of personal data in connection with the provision of its Services:

pal365 does not collect special categories of sensitive personal data (such as health data, racial or ethnic origin, or religious beliefs) as part of its standard gaming services.

pal365 collects your personal data through the following means:

• Directly from you: When you register for a pal365 account, complete identity verification, make a deposit or withdrawal, contact customer support, or submit any form or communication through the Platform.
• Automatically: When you access the Platform, our servers automatically record technical information including your IP address, browser fingerprint, device identifiers, pages visited, and session duration. This data is collected via server logs and first-party cookies.
• From third-party payment processors: When you initiate a transaction via Easypaisa, JazzCash, HBL, or another approved payment provider, pal365 receives confirmation data from that provider including transaction references and payment method identifiers (but not full card numbers, which are handled exclusively by the payment processor).
• From identity verification providers: When you submit identity documents as part of the Know Your Customer (KYC) process, pal365 may use a third-party identity verification service to validate the authenticity of the documents and the accuracy of the information you have provided.
• From fraud and security monitoring systems: pal365 uses automated tools to monitor Platform activity for signs of fraud, money laundering, bonus abuse, or other Prohibited Conduct. These systems generate data about account behaviour that is used for security and compliance purposes.

pal365 uses your personal data for the following purposes:

• Account management: To create and maintain your pal365 Account, authenticate your pal365 Login sessions, and manage your account settings and preferences.
• Service delivery: To provide access to all pal365 gaming Services, including live casino, jackpot slots, sports betting on Serie A, Cockfighting markets, and all other Platform features.
• Transaction processing: To process PKR deposits and withdrawals, reconcile transactions, and maintain accurate financial records associated with your account.
• Identity verification and KYC compliance: To verify your identity and age (18+ requirement) as required for responsible gaming compliance and to prevent underage gambling.
• Fraud prevention and security: To detect, investigate, and prevent fraud, money laundering, bonus abuse, account takeovers, and other unlawful or prohibited activity on the Platform.
• Customer support: To respond to your queries, complaints, and responsible gaming requests via live chat, email, WhatsApp, or Telegram.
• Responsible gaming: To monitor gaming patterns that may indicate problematic gambling behaviour and to administer the responsible gaming tools available in your account dashboard, including deposit limits and self-exclusion.
• Marketing communications: Where you have given your consent, to send you information about pal365 promotions, bonuses, and new game releases relevant to your interests. You may withdraw this consent at any time through your account settings or by contacting support.
• Platform improvement: To analyse aggregated, anonymised data about how players use the Platform in order to improve user experience, game selection, and technical performance.
• Legal compliance: To comply with applicable legal obligations, including anti-money laundering requirements, and to respond to lawful requests from competent authorities.

pal365 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: Processing that is necessary to perform the contract constituted by the pal365 Terms & Conditions, including account management, transaction processing, and service delivery.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC, anti-money laundering, and age verification requirements.
• Legitimate interests: Processing carried out for pal365's legitimate business interests, including fraud prevention, Platform security, and service improvement, where those interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific, and informed consent, including the sending of marketing communications. Where processing is based on consent, you have the right to withdraw that consent at any time.

pal365 does not sell your personal data. We may share your personal data with the following categories of third parties only to the extent necessary and in accordance with this Privacy Policy:

• Payment processors: Easypaisa, JazzCash, HBL, Visa/Mastercard network operators, and USDT settlement providers, to facilitate PKR deposits and withdrawals. These processors are contractually bound to process your data only for payment purposes.
• Identity verification providers: Third-party KYC service providers engaged to verify identity documents submitted during account verification. These providers act as data processors under contract with pal365.
• Game software providers: The third-party studios whose games are featured on the pal365 Casino platform may receive limited session and bet-history data for the purpose of game RNG certification and dispute resolution.
• Fraud and security services: Third-party providers of fraud detection, cybersecurity, and anti-money laundering screening tools who process data on pal365's behalf under strict data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory demand, pal365 may disclose personal data to competent legal or governmental authorities.
• Professional advisers: Lawyers, auditors, and other professional advisers engaged by pal365, subject to appropriate confidentiality obligations.

All financial transactions on the pal365 Platform are processed in Pakistani Rupees (PKR). pal365 records transaction metadata — including the transaction amount, date, time, and a masked reference to the payment method used — within your account history. This record enables you to review your PKR deposit and withdrawal history at any time through the account dashboard.

pal365 does not store full payment instrument credentials. When you use Easypaisa or JazzCash, your mobile wallet PIN is entered directly into the payment provider's interface and is never transmitted to or stored by pal365. Similarly, when bank card payments are processed, full card numbers are handled exclusively by the PCI-DSS certified payment processor and are not stored on pal365's servers.

Transaction records are retained for a minimum period required to comply with applicable financial regulations and anti-money laundering obligations. Refer to Section 10 for details of specific retention periods.

pal365 uses cookies and similar tracking technologies on the Platform to enable certain functions and to improve the user experience. The cookies used by pal365 fall into the following categories:

• Strictly necessary cookies: These cookies are required for the Platform to function. They enable core features such as pal365 Login session management, security, and access to account features. These cookies cannot be disabled without severely impairing the Platform's functionality.
• Functional cookies: These cookies remember your preferences, such as your preferred language, and allow the Platform to provide personalised features. They are set by pal365 and not shared with third parties.
• Analytics cookies: pal365 uses first-party analytics data to understand how players interact with the Platform — for example, which pages are most visited and where technical errors occur. This data is collected in aggregate and is not used to identify individual players for marketing purposes.
• Session security cookies: Cookies used to detect and prevent fraudulent login attempts and other security threats, including cross-site request forgery protection tokens.

You may control or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the pal365 Platform, including the ability to remain logged in across sessions.

pal365 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and to comply with applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your pal365 Account plus a minimum period after account closure as required by applicable law and anti-money laundering regulations.
• Transaction records (PKR deposits and withdrawals): Retained for a minimum of five (5) years from the date of each transaction, consistent with standard financial record-keeping obligations.
• Identity verification documents: Retained for the duration of the account relationship plus the legally required post-closure period.
• Customer support communications: Retained for a period of two (2) years from the date of the interaction, unless the communication relates to a dispute or legal matter, in which case retention is extended until the matter is resolved.
• Gaming history: Retained for the duration of the account plus an archive period required for dispute resolution and regulatory audit purposes.
• Marketing consent records: Retained for as long as you hold an account or until you withdraw consent, plus a reasonable period thereafter to evidence the consent history.

When personal data is no longer required for its original purpose and no legal retention obligation applies, pal365 will securely delete or irreversibly anonymise the data.

You have the following rights in respect of your personal data held by pal365. To exercise any of these rights, contact our support team using the details in Section 15:

pal365 will respond to all valid data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it. There is no charge for exercising your data rights except in cases of manifestly unfounded or excessive requests.

pal365 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, disclosure, alteration, or destruction. These include:

• Transport encryption: All data in transit between your device and the pal365 Platform is encrypted using TLS 1.2 or TLS 1.3, the current industry standard.
• Password hashing: User passwords are never stored in plain text. pal365 stores only a one-way cryptographic hash of each password using a strong hashing algorithm with per-account salting.
• Two-factor authentication (2FA): All pal365 account holders are encouraged to enable 2FA on their accounts for an additional layer of login security. 2FA is available for all Pakistan mobile numbers.
• Access controls: Internal access to personal data is restricted to pal365 personnel and systems that require it for legitimate, documented business purposes. Access rights are reviewed regularly.
• Login anomaly detection: pal365's security systems monitor pal365 Login activity for signs of unauthorised access, including logins from unfamiliar IP addresses or devices, and will alert you if unusual activity is detected.
• Regular security reviews: pal365 conducts periodic security assessments and applies software patches promptly to address known vulnerabilities.

While pal365 takes reasonable and industry-standard precautions, no security measure is infallible. pal365 cannot guarantee the absolute security of your data and is not liable for security breaches that are beyond its reasonable control. We encourage all players to use a strong, unique password for their pal365 account and to enable 2FA.

pal365 is strictly an adult platform. The Services are not directed at or intended for individuals under the age of 18. pal365 does not knowingly collect personal data from anyone under 18 years of age.

Age verification is performed as a mandatory step during account registration. If pal365 discovers that personal data has been collected from a person under 18, that account will be closed immediately and any funds held in the account will be dealt with in accordance with the applicable Terms & Conditions and legal requirements.

If you are a parent or guardian and believe that your child may have registered for a pal365 account or submitted personal information to the Platform, please contact our support team immediately using the details in Section 15. We will investigate and take appropriate action promptly.

pal365 may update this Privacy Policy from time to time to reflect changes in its data practices, legal obligations, or Platform features. Material changes to this Privacy Policy will be communicated to registered players via email or a prominent notice on the Platform at least 7 days before the updated Policy takes effect.

The "Effective Date" shown at the top of this Privacy Policy indicates when the current version took effect. We encourage you to review this Policy periodically to stay informed about how pal365 protects your personal data.

Your continued use of the pal365 Platform after the effective date of any update to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with any change, please close your account before the update takes effect.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way pal365 handles your personal data, please get in touch through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly inside your pal365 account dashboard. This is the fastest way to reach us — response time is typically under 1 minute.
• WhatsApp & Telegram: Available for account and privacy queries. Contact details are provided inside your pal365 account.
• Email: [email protected] — plain text only, not a clickable link. Queries are typically acknowledged within 24 hours.

When submitting a data rights request (see Section 11), please include your registered account username or email address and a clear description of your request so we can locate your records and respond efficiently. For security reasons, pal365 may need to verify your identity before processing a data rights request.