3pk365 Privacy Policy

📄Introduction

This Privacy Policy ("Policy") is published by 3pk365 ("Company," "we," "us," or "our") and applies to all users of the 3pk365 website accessible at 3pk365.one, including all associated pages, casino and sportsbook services, account management interfaces, and customer support channels (collectively, the "Platform").

3pk365 is committed to protecting the personal data of every registered Player on the Platform. This Policy is designed to give you a clear, honest, and comprehensive account of how your information is handled — from the moment you begin the 3pk365 registration process through every transaction, support interaction, and session on the Platform thereafter.

This Policy should be read alongside the 3pk365 Terms & Conditions and Responsible Gaming policy. In the event of any inconsistency between this Policy and those documents on matters of data protection, this Privacy Policy shall prevail.

🏢Data Controller

3pk365 acts as the data controller in respect of all personal data processed in connection with the Platform and Services. As data controller, 3pk365 determines the purposes for which personal data is collected and the means by which it is processed, and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently in accordance with applicable data protection legislation.

For all matters relating to data protection, privacy rights, or the processing of your personal information, the designated point of contact at 3pk365 is the Data Protection team, reachable via the contact information provided in Section 16 of this Policy.

📋Personal Data We Collect

3pk365 collects personal data from Players in categories that are proportionate to the Services provided. The categories of personal data we collect include:

3pk365 does not collect special categories of sensitive personal data — such as racial or ethnic origin, political opinions, religious beliefs, or health information — except where a Player voluntarily discloses such information in the context of a responsible gaming support request or a KYC-related inquiry, and only to the extent strictly necessary for the purpose at hand.

🔍How We Collect Personal Data

3pk365 collects personal data through the following channels and mechanisms:

• Direct Collection: Information you provide actively during account registration, KYC document submission, form completion, support chat interactions, or email correspondence with the 3pk365 team.
• Automated Technical Collection: Data collected automatically through cookies, web beacons, pixel tags, server logs, and similar tracking technologies when you access or interact with the 3pk365 Platform. See Section 7 for full cookie details.
• Payment Processing Partners: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 payment processors in connection with deposit and withdrawal requests.
• Third-Party Verification Services: Identity and age verification data received from KYC/AML compliance service providers used by 3pk365 to fulfil its regulatory obligations.
• Fraud Detection Systems: Behavioural and technical data aggregated by 3pk365's internal and third-party fraud detection systems to identify unusual or suspicious account activity.

⚖️Purpose & Legal Basis for Processing

3pk365 processes personal data only where a lawful basis exists for doing so. The primary legal bases on which 3pk365 relies are: (a) the performance of a contract with the Player (i.e., providing the Services described in the Terms & Conditions); (b) compliance with applicable legal and regulatory obligations; (c) the legitimate interests of 3pk365 in operating a secure, commercially viable platform; and (d) the consent of the Player in specific circumstances, including direct marketing.

The following table summarises the purposes for which 3pk365 processes personal data and the corresponding legal basis:

• Account Creation & Management: To create, maintain, and administer your 3pk365 Account, including login authentication and account settings. Legal basis: Contractual necessity.
• Identity & Age Verification (KYC): To verify that you are who you claim to be and are at least 21 years of age before processing withdrawals. Legal basis: Legal obligation and contractual necessity.
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20. Legal basis: Contractual necessity.
• Anti-Money Laundering (AML) Compliance: To monitor transaction patterns and report suspicious activity as required under applicable AML regulations. Legal basis: Legal obligation.
• Customer Support: To respond to your queries, complaints, and support requests via live chat and email, in English and Urdu. Legal basis: Contractual necessity and legitimate interests.
• Responsible Gaming Compliance: To implement and monitor deposit limits, self-exclusion periods, and other responsible gaming tools activated on your account. Legal basis: Legal obligation and legitimate interests.
• Fraud Prevention & Platform Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bot usage, and other breaches of the Terms & Conditions. Legal basis: Legitimate interests and legal obligation.
• Platform Improvement: To analyse behavioural and technical data for the purpose of improving the 3pk365 Platform's performance, game selection, and user experience. Legal basis: Legitimate interests.
• Marketing Communications: To send promotional emails, SMS notifications, and in-platform messages about 3pk365 bonuses, new games, and special offers to Players who have opted in to marketing. Legal basis: Consent.

🤝Data Sharing & Disclosure

3pk365 does not sell, rent, or trade your personal data to third parties for their own independent commercial purposes. Personal data is shared only in the limited circumstances described below, and always subject to appropriate contractual safeguards requiring the recipient to process your data only for the specified purpose and with equivalent confidentiality standards:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 infrastructure providers receive the financial data necessary to process your deposit and withdrawal transactions in PKR.
• KYC & Identity Verification Providers: Third-party identity verification and AML screening services receive the personal and documentary data required to complete your KYC verification and to screen your identity against applicable sanctions lists.
• Game Content Providers: Third-party game studios and RNG certification bodies may receive anonymised session data for purposes of game performance auditing, RTP calculation, and responsible gaming monitoring.
• Fraud Detection & Cybersecurity Partners: Technical and behavioural data may be shared with specialist fraud detection providers to identify and prevent platform abuse, multi-accounting, and financial crime.
• Regulatory Authorities: 3pk365 may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts of law where required to do so by applicable law, a court order, or a valid regulatory request.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of the 3pk365 business or any substantial part thereof, personal data held on registered Players may be transferred to the relevant successor entity, subject to the same privacy protections as described in this Policy.

🍪Cookies & Tracking Technologies

The 3pk365 Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. A cookie is a small text file placed on your device by the Platform when you access it. Cookies help 3pk365 remember your login session, maintain your Platform preferences, and analyse how the Platform is used across different devices and sessions.

3pk365 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential to the operation of the 3pk365 Platform. These cookies enable login session maintenance, security verification, and basic Platform navigation. They cannot be disabled without rendering the Platform non-functional.
• Functional Cookies: These cookies remember your preferences — such as your language setting (English or Urdu), preferred deposit method, and casino lobby view — to enhance your experience on the 3pk365 Platform.
• Analytical & Performance Cookies: Used to collect anonymised, aggregated data about how Players navigate and interact with the 3pk365 Platform. This data is used exclusively to improve Platform performance and user experience.
• Security Cookies: Used to support 3pk365's fraud detection and account security systems by identifying unusual session behaviour, multiple login attempts, and device anomalies associated with your Account.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use the 3pk365 Platform, including the login functionality. Most mobile browsers on Android and iOS devices allow you to manage cookies through the browser's privacy settings menu.

🗓️Data Retention

3pk365 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying applicable legal, regulatory, tax, accounting, and reporting requirements. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active 3pk365 Account and for a minimum of five (5) years following permanent account closure, in compliance with AML and KYC record-keeping obligations.
• Transaction Records: All records of PKR deposits, withdrawals, bets placed, games played, and bonus claims are retained for a minimum of seven (7) years following the date of each transaction, as required for financial record-keeping and regulatory audit purposes.
• Communication Records: Live chat transcripts and support email correspondence are retained for three (3) years from the date of the interaction, for quality assurance, dispute resolution, and regulatory purposes.
• Technical and Analytical Data: IP addresses, device logs, and anonymised behavioural analytics data are retained for up to twenty-four (24) months from the date of collection.
• Responsible Gaming Records: Self-exclusion records, deposit limit configurations, and responsible gaming tool activation logs are retained for the duration of the applicable restriction period plus five (5) years thereafter.
• Marketing Consent Records: Records of marketing opt-in and opt-out decisions are retained for three (3) years from the date of the last consent action.

Where personal data is no longer required for any legitimate purpose and no legal retention obligation applies, 3pk365 will securely destroy or anonymise the data in accordance with industry-standard data disposal procedures.

🔒Data Security

3pk365 implements technical and organisational security measures commensurate with the sensitivity of the personal data it processes and the risks associated with operating an online gaming and financial services platform. The principal security measures in place include:

• 256-bit SSL Encryption: All data transmitted between your device and the 3pk365 Platform is encrypted using TLS/SSL protocols with 256-bit key strength — the same standard applied by major international banks and fintech platforms operating in Pakistan.
• Segregated Data Storage: Personal data is stored on secure, access-controlled servers physically and logically segregated from 3pk365's public-facing infrastructure.
• Access Controls: Access to personal data is restricted to 3pk365 personnel and approved data processors who have a documented need to access specific data categories in the performance of their assigned responsibilities.
• Two-Factor Authentication (2FA): All internal 3pk365 administrative systems that process Player personal data require multi-factor authentication for access. Players are also encouraged to enable 2FA on their own 3pk365 Accounts.
• Regular Security Audits: The 3pk365 Platform undergoes regular security assessments and penetration testing by independent cybersecurity specialists to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: 3pk365 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to affected Players, 3pk365 will notify relevant regulatory authorities and affected individuals in accordance with applicable data breach notification requirements.

While 3pk365 takes reasonable and proportionate measures to protect your personal data, no digital transmission or storage system is entirely immune to security risks. Players are also responsible for maintaining the security of their own 3pk365 Account credentials and should notify 3pk365 immediately via support if they suspect unauthorised access to their Account.

✋Your Data Protection Rights

Subject to applicable data protection law, registered 3pk365 Players have the following rights in respect of their personal data held by 3pk365. To exercise any of these rights, please contact the 3pk365 Data Protection team using the contact details in Section 16.

• Right of Access: You have the right to request confirmation of whether 3pk365 processes personal data about you, and if so, to receive a copy of that data along with information about how it is processed.
• Right to Rectification: You have the right to request that 3pk365 correct any inaccurate personal data held about you, or complete any incomplete personal data where doing so would not conflict with legal retention obligations.
• Right to Erasure: In certain circumstances — where personal data is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where processing was unlawful — you may request deletion of your personal data. Note that legal retention obligations may prevent immediate or full erasure in some cases.
• Right to Restriction: You may request that 3pk365 restrict the processing of your personal data in certain circumstances, such as where the accuracy of the data is disputed or where you have objected to processing pending verification of whether 3pk365's legitimate grounds override your interests.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another data controller.
• Right to Object: Where processing is based on legitimate interests, you have the right to object to that processing at any time. 3pk365 must cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where 3pk365 processes your personal data on the basis of your consent — primarily for direct marketing communications — you may withdraw that consent at any time by contacting the 3pk365 support team or using the unsubscribe mechanism in any marketing communication.

3pk365 will respond to all valid rights requests within thirty (30) days of receipt. Where a request is complex or requires significant resource to fulfil, 3pk365 may extend this period by a further sixty (60) days, with notification provided to the Player within the initial thirty-day period. Rights requests are fulfilled free of charge in the absence of manifestly unfounded or excessive submissions.

🌐International Data Transfers

The 3pk365 Platform operates under an internationally issued gaming licence, and the Company's infrastructure — including data storage, payment processing, and game delivery systems — may involve the transfer of personal data to locations outside of Pakistan. Such transfers may include transfers to data processors located in jurisdictions where data protection laws may differ from those applicable in Pakistan.

Where 3pk365 transfers personal data internationally, it ensures that appropriate safeguards are in place to protect the transferred data to a standard at least equivalent to that required under applicable data protection law. Such safeguards include standard contractual clauses between 3pk365 and the recipient data processor, binding corporate rules where applicable, and transfers to jurisdictions that have been assessed as providing an adequate level of data protection.

If you require further information about the specific safeguards applied to international transfers of your personal data, please contact 3pk365 using the details provided in Section 16 of this Policy.

🚫Children's Privacy

The 3pk365 Platform is strictly intended for adults aged 21 years and above. 3pk365 does not knowingly collect or process personal data from individuals under the age of 21. The Platform enforces age verification through mandatory KYC documentation, and any Account found to belong to an individual under the minimum age will be immediately closed and any associated data deleted or securely destroyed to the extent permitted by law.

If you are a parent or guardian and you believe that a minor in your care has accessed or registered on the 3pk365 Platform, please contact the 3pk365 support team immediately using the details in Section 16. 3pk365 will investigate and take prompt action to close the Account and remove the associated personal data.

🔗Third-Party Services & Links

The 3pk365 Platform may reference or interact with third-party services — including game studios, payment processors, and analytics providers — in the delivery of its Services. Each of these third parties operates under its own privacy policy and data protection practices. 3pk365 accepts no responsibility for the privacy practices of third-party service providers, though it carefully evaluates and contractually obligates all third-party data processors as described in Section 6.

Players should be aware that certain third-party game providers integrated into the 3pk365 casino lobby may process limited session data directly for purposes of RNG certification, gameplay integrity, and technical support. Such processing is conducted under strict data processing agreements with 3pk365 and is subject to the safeguards described in this Policy.

📣Marketing Communications

Where you have provided your consent to receive marketing communications from 3pk365, we may send you promotional messages relating to bonuses, new game launches, PSL and cricket betting promotions, seasonal offers, and VIP Programme updates via SMS, email, or in-platform notifications. All marketing communications are sent in English; Players who prefer Urdu communications may request this via the support team.

You may opt out of marketing communications at any time by: (a) clicking the unsubscribe link contained in any marketing email from 3pk365; (b) replying STOP to any SMS marketing message; (c) updating your communication preferences within your 3pk365 Account settings; or (d) contacting the 3pk365 support team via live chat or email.

Withdrawal of marketing consent does not affect the validity of any processing carried out prior to withdrawal, and does not prevent 3pk365 from sending transactional communications — such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts — which are necessary for the performance of the Services.

🔄Changes to This Privacy Policy

3pk365 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in applicable data protection law, regulatory requirements, Platform features, or business practices. The "Last Updated" date at the top of this page will be revised whenever a material change is made to the Policy.

Where changes are material — meaning they significantly affect the way in which 3pk365 processes your personal data or the rights available to you — 3pk365 will endeavour to provide advance notice to registered Players via in-platform notification or email prior to the changes taking effect.

Continued use of the 3pk365 Platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with any changes to this Policy, you should cease using the Platform and may request voluntary Account closure as described in the Terms & Conditions.

📬Contact & Data Rights Requests

For all queries relating to this Privacy Policy, the processing of your personal data, or the exercise of any of your data protection rights, please contact the 3pk365 Data Protection team through the following channels:

• Live Chat: Available directly on the 3pk365 Platform, 24 hours a day, 7 days a week, in both English and Urdu. Live chat is the fastest channel for routine support queries.
• Email: [email protected] — formal data rights requests and privacy complaints should be submitted in writing via email, clearly marked with "Privacy Request" in the subject line. Formal requests are acknowledged within five (5) business days.
• Coverage: The 3pk365 support and data protection team serves Pakistani players across Karachi, Lahore, Islamabad, Faisalabad, and all other cities nationwide, and is available in both English and Urdu.