365gam Privacy Policy

This Privacy Policy ("Policy") is published by 365gam ("the Company", "We", "Us", "Our"), the operator of the online gaming platform accessible at 365gam.asia and all associated interfaces, mobile experiences, and API services (collectively, "the Platform"). For the purposes of applicable data protection legislation, 365gam acts as the Data Controller in respect of all personal data collected from players and visitors who interact with the Platform.

We understand that personal data is sensitive. Pakistani players who register with 365gam trust us with information that is genuinely important — from national identity card numbers provided during KYC verification, to mobile wallet details linked to JazzCash or EasyPaisa accounts, to gaming activity records. This Policy explains clearly and honestly what data we hold, why we hold it, how we protect it, and how you can exercise control over it at any time.

This Policy should be read in conjunction with our Terms & Conditions. Where a conflict exists between this Policy and the Terms, this Policy shall govern with respect to matters of data processing and privacy.

365gam collects personal data across several categories, depending on the nature of your interaction with the Platform. We collect only the data that is necessary and proportionate to the specific purpose for which it is required.

365gam collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide voluntarily during account registration, KYC document uploads, payment form completion, support ticket submission, or voluntary profile updates.
• Automated Platform Interaction: Data collected automatically as you use the Platform, including game session data, betting activity logs, device identifiers, and IP address information captured through standard server logging.
• Payment Processors: Transaction confirmation data received from third-party payment processors including JazzCash, EasyPaisa, and banking partners, necessary to verify deposit and withdrawal completion.
• Identity Verification Partners: Data returned from authorised third-party KYC service providers engaged to verify the authenticity of identity documents submitted during account verification.
• Cookies and Tracking Technologies: Session and preference data collected via cookies and similar browser-based technologies. See Section 9 (Cookies) for full details.
• Fraud Prevention Services: Risk signals and device fingerprinting data received from integrated fraud detection systems used to protect player accounts and Platform integrity.

365gam processes personal data only for defined, specific purposes. We do not use data for purposes incompatible with those disclosed at the point of collection. The primary purposes for which 365gam processes personal data are set out below.

Identity, contact, and credential data are used to create and maintain your 365gam account, authenticate your login sessions, and deliver the services you have requested. This processing is necessary for the performance of the contract between you and 365gam.

Identity documents including CNIC scans are processed for the purpose of age verification (confirming you meet the 21+ requirement) and anti-money-laundering compliance. This processing is a legal obligation and a condition of account activation.

Financial data is used to process deposit and withdrawal transactions via your chosen payment method — including JazzCash, EasyPaisa, SadaPay, HBL, UBL, Allied Bank, Meezan Bank, and USDT TRC20 — and to maintain an accurate record of all account transactions.

Technical and behavioural data is used to detect, prevent, and investigate fraudulent activity, multi-accounting, collusion, money laundering, bonus abuse, and other prohibited conduct. This processing is a legitimate interest of both 365gam and its player community.

Gaming activity data — including session duration, wagering patterns, and deposit frequency — is used to power our responsible gaming tools, including automated alerts, deposit limit enforcement, and the detection of behavioural patterns that may indicate problem gambling. This processing protects your fundamental interests as a player.

Communications data and account information are accessed by support agents solely for the purpose of resolving support tickets, investigating disputes, and responding to player queries submitted through our live chat or email channels.

Certain data must be retained and disclosed in compliance with applicable gaming regulations, anti-money-laundering legislation, and court or regulatory orders. Processing for these purposes is a legal obligation that 365gam cannot waive.

365gam relies on the following legal bases to justify its processing of personal data, in accordance with applicable international data protection standards:

• Contractual Necessity: Processing required to fulfil our contract with you — including account creation, game access, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable law, including KYC identity verification, anti-money-laundering record-keeping, and regulatory reporting.
• Legitimate Interests: Processing in pursuit of 365gam's legitimate business interests — including fraud prevention, Platform security, and system integrity — where these interests are not overridden by your fundamental rights.
• Consent: Where 365gam processes data on the basis of consent (for example, optional marketing communications), you have the right to withdraw that consent at any time by updating your communication preferences within your account settings.
• Vital Interests: In exceptional circumstances, processing may be necessary to protect the vital interests of a player or another person — for example, where there is a serious concern about a player's welfare in the context of problem gambling.

365gam shares personal data only with carefully selected third parties under strict contractual data protection obligations, and only to the extent necessary for the purposes described in this Policy. The categories of third parties with whom 365gam may share your data are as follows:

• Payment Service Providers: JazzCash, EasyPaisa, SadaPay, HBL, UBL, Meezan Bank, Allied Bank, and cryptocurrency network processors — solely to facilitate deposit and withdrawal transactions on your account.
• Identity Verification Partners: Authorised KYC service providers engaged to validate the authenticity of identity documents. These partners are bound by strict data processing agreements and may not use your data for any independent purpose.
• Game Content Providers: Game providers whose titles are accessible through the 365gam lobby may receive limited technical session data for the purpose of game functionality, RNG certification, and fairness auditing.
• Fraud Detection & Cyber Security Services: Third-party security platforms engaged to detect and prevent fraudulent activity, account takeover attempts, and other Platform threats.
• Legal & Regulatory Authorities: Government bodies, regulatory authorities, or courts of competent jurisdiction where disclosure is required by applicable law or compelled by valid legal process.
• Professional Advisors: Legal counsel, auditors, and compliance advisors engaged in connection with Platform operations — subject to applicable professional confidentiality obligations.

365gam retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, and in compliance with applicable legal retention requirements. The following general retention principles apply:

• Active Account Data: Personal data associated with an active 365gam account is retained for as long as the account remains open and active.
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure, in compliance with anti-money-laundering legislation applicable to gaming operators.
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, for regulatory compliance and audit purposes.
• Gaming Activity Logs: Retained for a minimum of three (3) years following account closure, for responsible gaming monitoring and dispute resolution purposes.
• Support Communications: Retained for a minimum of two (2) years from the date of final correspondence, to support ongoing dispute resolution and quality assurance.
• Technical & Security Logs: Retained for up to twelve (12) months, subject to ongoing fraud investigation requirements which may extend this period.

Following the expiry of the applicable retention period, data is securely and irreversibly deleted or anonymised in accordance with our data disposal procedures.

365gam implements comprehensive technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or unlawful processing. Our security framework includes but is not limited to:

• Transport Encryption: All data transmitted between your device and 365gam servers is protected by TLS 1.2 or higher (256-bit SSL encryption), the same standard used by international financial institutions.
• Data-at-Rest Encryption: Sensitive stored data — including identity documents and financial information — is encrypted at rest using industry-standard AES-256 encryption.
• Access Controls: Strict role-based access controls limit internal data access to authorised personnel only, on a need-to-know basis. Access logs are maintained and reviewed regularly.
• Two-Factor Authentication: Players are encouraged and have the option to enable two-factor authentication on their 365gam accounts, adding an additional authentication layer to login and withdrawal processes.
• Penetration Testing & Vulnerability Assessments: Regular independent security assessments are conducted to identify and remediate vulnerabilities in the Platform's technical infrastructure.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, 365gam will notify affected players and relevant regulatory authorities within the timeframes required by applicable law.

365gam uses cookies and similar browser-based tracking technologies to operate the Platform, improve the player experience, and support security functions. A cookie is a small text file placed on your device by a website server. Cookies do not contain executable code and cannot extract information from your device beyond what is explicitly stored within them.

• Strictly Necessary Cookies: Required for the Platform to function correctly — including session authentication, security tokens, and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences — such as chosen language, responsible gaming settings, and display preferences — so they persist across sessions without requiring re-entry.
• Analytical Cookies: Collect anonymised usage data to help 365gam understand how players navigate and interact with the Platform, enabling product improvements.
• Security & Fraud Detection Cookies: Used by integrated security systems to identify unusual device behaviour, flag potential account takeover attempts, and support multi-accounting detection.

You may manage non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies through their privacy or security settings menus. Please note that disabling strictly necessary cookies will impair your ability to use the 365gam Platform, including the ability to log in and maintain an authenticated session.

As a data subject whose personal data is processed by 365gam, you have a number of rights under applicable data protection law. We are committed to facilitating the exercise of these rights promptly and without undue friction.

365gam does not knowingly collect, process, or retain personal data from individuals under the age of 21 years. The Platform is strictly intended for adult users who meet the 21+ age requirement. Age verification is conducted as part of the account registration and KYC process for all players.

Parents and guardians concerned about potential underage access to online gaming platforms are encouraged to use parental control software and to monitor the online activity of minors in their care. Information on responsible gaming tools available on the 365gam Platform is available at our Responsible Gaming page.

As an internationally operating gaming platform, 365gam may process and store personal data on servers located outside the country in which you reside. Where personal data is transferred internationally, 365gam ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable international data protection law.

Such safeguards may include: contractual clauses incorporated into agreements with international data processors requiring equivalent data protection standards; reliance on applicable adequacy decisions; or other legally recognised transfer mechanisms. Upon written request, 365gam can provide further information about the specific safeguards applicable to any international transfer of your personal data.

365gam reserves the right to update and revise this Privacy Policy at any time. Material changes to this Policy will be communicated to registered players via email to their registered address, through a notice displayed upon login, or through a prominent notice on the Platform homepage. The "Last Updated" date at the top of this document reflects the date of the most recent revision.

Your continued use of the 365gam Platform following the posting of a revised Privacy Policy constitutes your acknowledgement of the revised Policy. We encourage you to review this document periodically to remain informed about how 365gam protects your personal information.

If you have any questions, concerns, or requests relating to this Privacy Policy or 365gam's handling of your personal data, you may contact our data team through the following channel: