Privacy Policy — apk365

apk365 ("we", "us", "our", "the Company") is committed to protecting the privacy and personal data of every player who registers and plays on the apk365 platform. This Privacy Policy ("Policy") sets out in clear, straightforward English exactly how we collect, use, store, share, and protect your personal information when you use our online casino and sports betting services at apk365.biz ("the Platform").

We understand that Pakistani players value their personal security and financial privacy deeply. Whether you are based in Karachi, Lahore, Islamabad, Faisalabad, or anywhere else across Pakistan, you can be confident that apk365 handles your data with the same level of care and seriousness that we apply to every aspect of our platform operations.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference into this document. Together, these documents govern the complete relationship between apk365 and its registered players.

apk365 collects personal data across several categories. The specific data points we collect depend on the nature of your interaction with the Platform — browsing as a guest, registering an account, completing KYC verification, making a deposit, or contacting our support team.

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where a player voluntarily discloses health or wellbeing information in the context of a responsible gaming self-exclusion request.

apk365 collects your personal data through three primary channels:

• Directly from you: When you complete the registration form, submit KYC documents, make a deposit, contact our support team, or update your account preferences, you provide data to us directly.
• Automatically: When you access and use the Platform, our systems automatically collect technical and usage data through server logs, session tracking, and cookies. This data is collected regardless of whether you are logged in as a registered player.
• From third parties: We may receive identity verification results from our KYC and Anti-Money Laundering (AML) compliance partners, fraud-risk scores from payment processors, and account activity flags from our responsible gaming monitoring systems. We only receive data from third parties where there is a legitimate legal or contractual basis for doing so.

apk365 processes your personal data for the following specific and documented purposes:

• Account creation and management: To register your account, verify your identity, maintain your player profile, and communicate important account-related information.
• Payment processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, bank transfer, and crypto, and to maintain accurate transaction records.
• KYC and AML compliance: To verify your identity and the source of your funds in accordance with our licensing authority's Know Your Customer and Anti-Money Laundering requirements.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeovers, and prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: To monitor player behaviour for signs of problem gambling, enforce self-exclusion requests, and apply deposit and loss limits as requested or required.
• Customer support: To respond to your enquiries, process complaints, and maintain records of communications for quality and training purposes.
• Marketing and promotions: To send you bonus offers, promotional materials, and platform updates, but only where you have given clear opt-in consent to receive such communications. You may withdraw consent at any time.
• Platform improvement: To analyse aggregate usage data — in anonymised form — to improve game offerings, Platform performance, and user experience.
• Legal and regulatory compliance: To fulfil our obligations under our gaming licence, respond to lawful requests from regulatory authorities, and maintain required records for the legally mandated retention periods.

apk365 processes personal data only where a valid legal basis exists for doing so. The primary legal bases we rely upon are:

• Contractual necessity: Processing required to fulfil the player agreement established when you register on apk365, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with our gaming licence conditions, KYC and AML regulations, and any lawful requests from competent regulatory or law enforcement authorities.
• Legitimate interests: Processing carried out in pursuit of apk365's legitimate business interests — such as fraud prevention, platform security, and responsible gaming monitoring — where those interests are not overridden by your rights and interests.
• Consent: Processing carried out only where you have given freely given, specific, informed, and unambiguous consent. This applies primarily to marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

apk365 does not sell your personal data. We share your data only with the following categories of third parties, and only to the extent strictly necessary for the stated purposes:

• Payment processors and financial institutions: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment partners receive the transaction data needed to process your deposits and withdrawals.
• KYC and AML compliance providers: Third-party identity verification and fraud detection services receive identity document data and transaction risk signals to support our compliance obligations.
• Game software providers: Third-party game studios that supply casino and slot titles to the apk365 Platform may receive anonymised session identifiers for game-state and outcome logging purposes. They do not receive your full identity or financial data.
• Responsible gaming platforms: Where a self-exclusion request is processed, limited data may be shared with industry-recognised self-exclusion registries to enforce the exclusion across participating operators.
• Regulatory and law enforcement authorities: apk365 will disclose personal data to competent authorities where required by law, court order, or our licensing authority's instructions.
• IT and infrastructure service providers: Cloud hosting, database management, and cybersecurity partners process data on our behalf under strict data processing agreements that prohibit any secondary use of your information.

apk365 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing conditions. Our standard retention periods are as follows:

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

apk365 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security framework includes:

• Encryption: All data in transit between your device and the apk365 Platform is protected by TLS 1.2 or higher. All data at rest in our databases is encrypted using AES-256.
• Access Controls: Access to personal data within apk365's systems is restricted on a strict need-to-know basis. Staff access is governed by role-based permissions, mandatory authentication, and activity logging.
• Two-Factor Authentication: Privileged access to data systems requires multi-factor authentication. We also encourage all players to enable 2FA on their own apk365 accounts.
• Penetration Testing: apk365's platform undergoes regular independent security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: apk365 maintains a documented data breach response procedure. In the event of a breach affecting player data, affected individuals and the relevant regulatory authority will be notified within the timeframes required by applicable law.

While apk365 employs robust security measures, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect your account has been compromised, contact our support team immediately at [email protected].

apk365 uses cookies and similar tracking technologies (including local storage and session tokens) on the Platform. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

• Strictly Necessary Cookies: These are essential for the Platform to function. They maintain your login session, remember your game state, and enable secure payment flows. These cookies cannot be disabled without breaking core Platform functionality.
• Performance & Analytics Cookies: These collect anonymised data about how players navigate the Platform — which pages are visited most, where errors occur, and how long sessions last. This data is used exclusively to improve Platform performance.
• Functional Cookies: These remember your preferences — such as language settings, display preferences, and responsible gaming tool configurations — so you do not need to re-enter them on each visit.
• Marketing Cookies: These are set only with your explicit consent and track your interaction with promotional content to help us understand which bonus offers are most relevant to your preferences. You may opt out at any time.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in or using real-money features on the Platform. For all other cookie categories, you can opt in or out via the cookie preference centre accessible from the Platform's footer.

As a registered player on apk365, you have the following rights with respect to your personal data. You may exercise any of these rights at any time by contacting us at [email protected]:

• Right of Access: You have the right to request a copy of all personal data apk365 holds about you. We will respond to access requests within 30 calendar days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to our legal retention obligations — we cannot delete data we are required by law to retain.
• Right to Restrict Processing: You may request that we limit the ways in which we use your data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a copy of your data in a structured, commonly used, machine-readable format for transfer to another service.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests. You also have an absolute right to object to the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

apk365 is strictly an adults-only platform. We do not knowingly collect personal data from any individual under the age of 21. Our registration process includes age verification steps, and our KYC process requires government-issued identity documents confirming the player is 21 years of age or older.

If apk365 discovers, at any point, that personal data has been collected from an individual under 21 — whether through misrepresentation during registration or any other means — the following steps will be taken immediately:

• The account will be permanently closed;
• Any deposited funds will be returned to the original payment source;
• Any winnings accumulated will be voided in their entirety;
• All personal data associated with the underage account will be securely deleted, except where retention is legally required for fraud investigation purposes.

As an internationally licensed online casino serving players in Pakistan, apk365 operates infrastructure and engages service providers across multiple jurisdictions. As a result, your personal data may be transferred to, stored in, or processed in countries outside Pakistan.

Whenever personal data is transferred internationally, apk365 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. Safeguards include:

• Transfers to countries with an adequate level of data protection as recognised by relevant regulatory standards;
• Standard contractual clauses or equivalent contractual protections included in our agreements with international service providers;
• Binding corporate rules where applicable within our group of companies.

By using the apk365 Platform and agreeing to this Privacy Policy, you acknowledge and consent to these international transfers as necessary for the operation of the services you have requested.

apk365 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or operational procedures. When we make material changes — those that significantly affect your rights or how your data is used — we will notify you via the email address registered on your account with at least 7 days' notice before the changes take effect.

Minor updates, such as typographical corrections or clarifications that do not change the substance of the Policy, may be made without prior notice. The "Last updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to remain informed about how we protect your information.

Your continued use of the apk365 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a material change, you have the right to close your account and request deletion of your data in accordance with Section 10.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way apk365 handles your personal data, please contact our Data Privacy team directly. All privacy-related correspondence should be submitted in writing to ensure a clear record of your request and our response:

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or to our gaming licence regulatory body. apk365 takes all privacy complaints seriously and will cooperate fully with any regulatory investigation.

We are committed to resolving privacy concerns fairly, transparently, and promptly. No player will be penalised or disadvantaged in any way for raising a legitimate privacy concern with apk365.