bk365 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

bk365 is an online sports betting and casino platform operating at bk365.bio, built specifically for Pakistani players. In the context of this Privacy Policy, references to "bk365," "we," "us," or "our" refer to the operator of the bk365 platform and its authorised data processing entities operating under the bk365 international gaming licence.

bk365 acts as the data controller in respect of all personal data collected through the bk365 platform. This means bk365 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection standards and the obligations imposed by our international gaming licence.

This Privacy Policy applies to all players who register a bk365 account, visit the bk365 website, use any bk365 gaming product, or contact bk365 customer support — regardless of whether they are located in Karachi, Lahore, Islamabad, Faisalabad, or any other city in Pakistan or internationally.

The categories of personal data that bk365 may collect about you include, but are not limited to, the following:

bk365 collects personal data through the following channels:

• Direct Submission by You: When you register a bk365 account, complete KYC verification, make a deposit or withdrawal, contact bk365 support via live chat or email, or participate in a promotion, you directly provide us with personal data.
• Automated Technical Collection: When you access the bk365 platform from any device — whether in Karachi, Lahore, or elsewhere — our systems automatically record technical data including your IP address, device identifiers, browser type, and session activity. This collection is necessary for platform security, fraud detection, and the delivery of a stable, personalised gaming experience.
• Third-Party Payment Processors: When you use JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or Raast to fund your bk365 account, our payment integration partners provide bk365 with confirmation data relating to the transaction, including the payment method identifier and transaction amount. bk365 does not receive your full banking credentials.
• Identity Verification Providers: bk365 may use licensed third-party identity verification services to cross-check the identity documents you submit during KYC. These services return a verification result to bk365 without bk365 retaining the raw identity data beyond what is necessary.
• Cookies and Tracking Technologies: bk365 uses cookies and similar technologies as described in Section 7 of this Privacy Policy to collect session and behavioural data when you visit and use the bk365 platform.

bk365 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary to enter into or perform our contract with you — specifically, to operate your bk365 account, process deposits and withdrawals, settle bets, and deliver gaming services. Without this processing, bk365 cannot provide its services to you.
• Legal Obligation: Processing is required to comply with our legal and regulatory obligations under the bk365 international gaming licence, including anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, and responsible gaming mandates. This processing is not optional and cannot be refused by the player.
• Legitimate Interests: Processing is necessary for bk365's legitimate interests, provided those interests are not overridden by your rights. Legitimate interest processing at bk365 includes platform security, fraud detection, prevention of prohibited conduct, service improvement, and business analytics.
• Consent: Where processing is not covered by the above bases — primarily in the context of marketing communications — bk365 will seek your explicit and informed consent before proceeding. Consent, where given, may be withdrawn at any time without affecting processing carried out prior to withdrawal.

The specific purposes for which bk365 processes your personal data are as follows:

• Account Creation and Management: Creating, maintaining, and managing your bk365 player account, including storing your login credentials, maintaining your PKR wallet balance, and recording your transaction and gaming history;
• Identity Verification (KYC): Verifying your identity and age in compliance with our licensing obligations, including processing CNIC documents and cross-checking submitted information against third-party verification databases;
• Payment Processing: Processing your deposits via JazzCash, EasyPaisa, and other supported Pakistani banking channels, and facilitating the timely processing of withdrawal requests to your registered payment method;
• Responsible Gaming Compliance: Monitoring gaming patterns to identify potential problem gambling behaviour, applying responsible gaming tools where triggered by player-set limits, and fulfilling self-exclusion requests;
• Fraud Prevention and Security: Detecting and preventing fraudulent account activity, money laundering through the platform, bonus abuse, multiple account operation, and unauthorised access attempts;
• Customer Support: Responding to enquiries, resolving complaints, processing account recovery requests, and delivering ongoing support to bk365 players via live chat and email;
• Legal and Regulatory Compliance: Fulfilling bk365's reporting obligations to our licensing authority, producing records in response to lawful regulatory or law enforcement requests, and maintaining the mandatory AML transaction records;
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the bk365 platform design, game library, user experience, and performance for Pakistani players;
• Marketing Communications: Where you have provided consent, sending you promotional offers, bonus notifications, and relevant bk365 platform updates via email or SMS.

bk365 does not sell your personal data to any third party. bk365 may share your personal data with the following categories of third parties solely for the purposes described in this Privacy Policy:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and USDT processing partners receive the minimum data necessary to process your deposit or withdrawal transaction. These providers operate under their own privacy policies and security standards;
• Identity Verification Providers: Licensed KYC and AML compliance service providers receive identity document data for the purpose of verifying your identity. These providers are bound by confidentiality obligations and applicable data protection regulations;
• Game Software Providers: Third-party casino game providers (including slot providers, live dealer studio operators, and sports data providers) may receive your player identifier and relevant gaming session data to deliver their games within the bk365 platform. No additional personal data is shared beyond what is necessary for game delivery;
• Regulatory and Law Enforcement Authorities: bk365 is legally required to disclose player data to our licensing authority, financial intelligence units, or law enforcement agencies where required by a valid legal request, court order, or regulatory obligation. bk365 will only comply with lawful requests and will seek to notify affected players where legally permitted to do so;
• Professional Advisors: bk365's legal counsel, auditors, and compliance consultants may access player account data on a strictly confidential basis where required for the purposes of professional advice, financial audit, or regulatory review.

bk365 uses cookies — small text files stored on your device — and similar tracking technologies to enable certain platform functions and to improve your experience. The categories of cookies used by bk365 are as follows:

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the bk365 platform from functioning correctly. Most modern mobile browsers used by Pakistani players — including Chrome for Android and Safari for iOS — provide accessible cookie management controls in their settings menus.

bk365 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to overriding legal and regulatory retention obligations. The following retention periods apply:

• Active Account Data — Retained for the full duration of your active bk365 account relationship plus a period of five (5) years after account closure, in compliance with anti-money laundering record-keeping obligations under our international gaming licence;
• KYC Documents — Retained for five (5) years following the completion of the identity verification process or the closure of the associated bk365 account, whichever is later, as mandated by AML regulatory requirements;
• Financial Transaction Records — Retained for a minimum of five (5) years from the date of the transaction to satisfy financial record-keeping requirements applicable to licensed gaming operators;
• Customer Support Communications — Retained for two (2) years from the date of the last interaction, to enable resolution of any disputes or complaints that may arise in relation to past support interactions;
• Marketing Consent Records — Retained indefinitely where required to demonstrate the lawful basis for marketing communications, but reviewed and updated whenever consent is withdrawn or preferences are changed;
• Technical and Session Data — Retained for up to twelve (12) months in identifiable form for security and fraud investigation purposes, after which it is anonymised or deleted.

Subject to applicable data protection law and the conditions and limitations set out below, you have the following rights over your personal data held by bk365:

To exercise any of the above rights, contact bk365 support at [email protected]. bk365 will respond to verified data rights requests within 30 calendar days. Identity verification will be required before any data is disclosed or modified in response to an access or rectification request.

bk365 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, and destruction. The measures in place include:

• 256-Bit SSL Encryption: All data transmitted between your device and bk365's servers — including login credentials, KYC documents, and financial transaction data — is encrypted using Transport Layer Security (TLS) with 256-bit key strength;
• Encryption at Rest: Sensitive data categories stored in bk365's databases — including passwords (stored as salted hashes, never in plain text), CNIC numbers, and financial identifiers — are encrypted using AES-256 at rest;
• Access Controls: Internal access to bk365 player data is governed by role-based access control (RBAC). Only authorised personnel whose job function requires access to specific data categories are permitted to view that data, and all internal access is logged and audited;
• Two-Factor Authentication: bk365 offers all players the option to enable two-factor authentication on their accounts, adding an additional layer of protection to the login process beyond username and password;
• Penetration Testing: bk365's platform and infrastructure undergo regular third-party penetration testing to identify and remediate potential security vulnerabilities before they can be exploited;
• Incident Response: bk365 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to affected players, bk365 will notify affected individuals and relevant regulatory authorities within the timeframes required under applicable law.

bk365 operates under an international gaming licence and may process or store personal data on servers located outside Pakistan. Where personal data is transferred to countries that may not provide the same level of data protection as the jurisdiction in which you are located, bk365 ensures that appropriate safeguards are in place prior to any such transfer.

These safeguards may include: contractual data processing agreements incorporating standard data protection clauses; transfers to recipients in countries recognised as providing adequate data protection by relevant regulatory authorities; or transfers that are strictly necessary for the performance of bk365's contract with you (such as the processing of your JazzCash withdrawal request).

By using bk365 and registering an account, you acknowledge that your personal data may be transferred, processed, and stored in countries outside Pakistan for the purposes described in this Privacy Policy.

The bk365 platform is strictly for adults. bk365 does not knowingly collect or process personal data from any individual under the age of 21. If bk365 discovers that personal data has been collected from a person under 21, that account will be closed immediately, all associated data will be deleted in accordance with regulatory requirements, and any funds held in the account will be suspended pending investigation.

Parents and guardians in Pakistan who believe that a minor has registered on bk365 or accessed the platform using their credentials should contact bk365 support immediately at [email protected]. bk365 takes underage access extremely seriously and will investigate and act on all such reports without delay.

bk365 may send you promotional communications — including bonus offers, free bet notifications, PSL season promotions, and platform updates — via email or SMS where you have provided your explicit consent to receive such communications during bk365 registration or at any subsequent point through your account settings.

You may withdraw your consent to receive marketing communications from bk365 at any time by:

• Updating your communication preferences in your bk365 account settings;
• Clicking the "Unsubscribe" link included in any bk365 marketing email;
• Contacting bk365 support at [email protected] with an explicit opt-out request.

Withdrawal of marketing consent does not affect the delivery of transactional communications — including deposit confirmations, withdrawal notifications, account security alerts, and policy update notices — which bk365 is entitled to send without consent as these are necessary for the management of your bk365 account.

bk365 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or the services we provide. The "Last Updated" date at the top of this document will be revised whenever a change is made.

Where changes are material — meaning they significantly affect how your personal data is processed or the rights available to you — bk365 will provide advance notice of those changes via email to your registered bk365 address or via a prominent in-platform notification. Material changes will take effect no earlier than 14 calendar days after such notice is provided.

Your continued use of the bk365 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised policy. If you do not agree with any change to this Privacy Policy, you should cease using bk365 and may request account closure through bk365 support.

For all enquiries, requests, or complaints relating to this Privacy Policy or the processing of your personal data by bk365, please contact us through the following official channels:

bk365 does not operate a telephone privacy line. All data protection requests and privacy complaints must be submitted via email or live chat as described above. bk365 will never request your full password or CNIC number via email or chat — if you receive any such communication, report it to [email protected] immediately as a potential phishing attempt.