kp365 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how kp365 ("kp365", "we", "us", "our") collects, uses, stores, shares, and protects personal information about individuals ("you", "Player", "User") who visit, register on, or otherwise interact with the kp365 platform at kp365.ws, including all casino games, sports betting markets, PKR wallet features, customer support channels, and promotional communications.

kp365 takes its data protection obligations seriously. This Policy has been prepared to ensure that every kp365 player — including all Pakistani users accessing the platform from cities such as Karachi, Lahore, Islamabad, Faisalabad, and beyond — understands exactly how their personal data is handled and what control they retain over it.

This Privacy Policy should be read alongside the kp365 Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and kp365. By creating a kp365 account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

kp365 is the data controller in respect of all personal data collected through the kp365 platform. As data controller, kp365 determines the purposes and means by which personal data is processed. kp365 operates under an international gaming licence and processes personal data in accordance with the data protection requirements attached to that licence.

For all data-related enquiries — including access requests, correction requests, and deletion requests — please contact the kp365 Data Protection team via the 24/7 live chat available on the kp365 platform, or by email at the address listed in Section 14 of this Policy.

3. Personal Data We Collect

kp365 collects only the personal data that is necessary for the specific, legitimate purposes set out in this Policy. The categories of personal data collected by kp365 are as follows:

3.1 Identity & Registration Data

• Full legal name (as it appears on your CNIC, passport, or driving licence)
• Date of birth (used to verify the 21+ age requirement)
• Pakistani CNIC number or passport number
• Residential address (city, district, province)
• Gender (where provided voluntarily)

3.2 Contact Data

• Email address (used for account communications and support)
• Mobile phone number (used for account security and support)

3.3 Financial & Transaction Data

• PKR deposit and withdrawal transaction records
• Payment method identifiers (e.g., JazzCash account number, EasyPaisa account number, HBL/UBL/Meezan Bank account details)
• Account balance history and bonus transaction records
• Betting history and game play records

3.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session logs including login times, session duration, and pages visited
• Game activity logs and sports betting history

3.5 Identity Verification (KYC) Documents

• Scanned copies or photographs of identity documents (CNIC front and back, passport bio-data page, or driving licence)
• Proof of PKR payment method ownership (e.g., JazzCash or EasyPaisa account screenshots)
• Selfie or liveness verification images (where required for enhanced KYC)

3.6 Communications Data

• Records of live chat conversations with kp365 customer support
• Email correspondence with the kp365 support team
• Responses to kp365 surveys or promotional participation records

4. How We Collect Your Data

kp365 collects personal data through the following means:

4.1 Directly From You

The majority of personal data kp365 holds is provided directly by you during the account registration process, KYC verification submissions, deposit and withdrawal transactions, communications with the support team, and participation in kp365 promotions.

4.2 Automatically Through Platform Use

When you access and use the kp365 platform, certain technical data is collected automatically by our systems. This includes IP address logging, session duration tracking, device fingerprinting for fraud prevention purposes, and game activity logging for dispute resolution and regulatory audit trail purposes.

4.3 From Third-Party Service Providers

kp365 may receive supplementary data about you from trusted third-party service providers engaged to support platform operations, including:

• KYC / Identity Verification Providers: who may cross-reference the identity documents you submit against authoritative databases;
• Payment Processors: including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, who confirm the success or failure of PKR transactions;
• Fraud Prevention and AML Services: who flag transactions or account patterns consistent with money laundering or fraudulent activity;
• Analytics Providers: who supply aggregated, anonymised usage data to help kp365 improve the platform experience.

5. Purpose & Legal Basis for Processing

kp365 processes your personal data only where a valid legal basis exists. The table below summarises the primary purposes for which kp365 processes personal data and the corresponding legal basis for each:

6. How We Share Your Data

kp365 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of third parties only where necessary and only to the extent required for the stated purpose:

6.1 Payment Processing Partners

To process your PKR deposits and withdrawals, kp365 shares relevant transaction and identity data with its approved payment processing partners — JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. These parties receive only the minimum data necessary to execute and verify your transaction.

6.2 KYC and Identity Verification Providers

kp365 engages specialist third-party KYC and identity verification services to process the identity documents you submit as part of the account verification process. These providers are contractually bound to process your data solely for KYC purposes and may not use it for any other commercial purpose.

6.3 Fraud Prevention and AML Service Providers

kp365 shares relevant account and transaction data with fraud detection and anti-money laundering service providers engaged to protect the platform and its players from financial crime. These parties process data strictly under data processing agreements with kp365.

6.4 Regulatory and Licensing Authorities

As an internationally licensed gaming operator, kp365 may be required to disclose player data to its licensing authority or other competent regulatory bodies as part of routine compliance reporting, audit processes, or in response to specific regulatory enquiries or legal orders.

6.5 Group Companies and Technology Partners

kp365 may share data with technology service providers — including game software providers, platform hosting services, and customer support tools — who process data on kp365's behalf under strict data processing agreements that prohibit any unauthorised use of player data.

7. Data Retention

kp365 retains personal data only for as long as is necessary for the purposes set out in this Policy, or as required by applicable regulatory and legal obligations. The key retention periods applicable to kp365 player data are as follows:

• Account and identity data: Retained for the duration of the account relationship plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• KYC verification documents: Retained for the duration of the account plus five (5) years following account closure;
• Customer support communications: Retained for two (2) years from the date of the last interaction;
• Technical log data: Retained for up to twelve (12) months from the date of collection, subject to ongoing fraud investigation requirements;
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year thereafter as evidence of prior consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with a specific individual. Where anonymisation is not technically feasible, data is securely destroyed.

8. Security Measures

kp365 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the kp365 platform;
• Encryption at rest for sensitive personal data stored on kp365 servers;
• Role-based access controls ensuring that kp365 staff can only access player data that is directly relevant to their authorised job function;
• Multi-factor authentication (MFA) for kp365 administrative systems;
• Regular security audits and penetration testing conducted by independent security specialists;
• Intrusion detection and monitoring systems that flag unusual access patterns in real time;
• Staff data protection training to ensure all personnel handling player data understand their obligations.

While kp365 takes all reasonable measures to protect your personal data, no online platform can guarantee absolute security against all cyber threats. Players are encouraged to use a strong, unique password for their kp365 account and to enable any available two-factor authentication options. If you suspect that your kp365 account has been compromised, please contact our 24/7 support team immediately.

9. Cookies & Tracking Technologies

kp365 uses cookies and similar technologies (such as local storage and session storage) on its platform. These technologies help kp365 deliver a functional, personalised, and secure player experience. The categories of cookies used by kp365 are as follows:

kp365 does not use third-party advertising cookies or behavioural tracking cookies that share your data with external advertising networks. You may manage functional and analytics cookies through your browser settings; however, disabling strictly necessary cookies may impair your ability to use the kp365 platform.

10. Your Data Rights

Subject to applicable law and the data protection requirements of kp365's licensing jurisdiction, all kp365 players hold the following rights in relation to their personal data:

• Right of Access: You may request a copy of all personal data that kp365 holds about you;
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected or updated;
• Right to Erasure: You may request deletion of your personal data, subject to kp365's legal and regulatory retention obligations (see Section 7);
• Right to Restriction: You may request that kp365 restrict its processing of your data in certain circumstances (e.g., while an accuracy dispute is being resolved);
• Right to Data Portability: You may request that kp365 provide your personal data in a structured, machine-readable format;
• Right to Object: You may object to processing of your data carried out on the basis of legitimate interest, including profiling for marketing purposes;
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

To exercise any of the above rights, please contact the kp365 support team via the 24/7 live chat on the kp365 platform or by email. kp365 will respond to all data rights requests within thirty (30) calendar days. In complex cases, this period may be extended by a further sixty (60) days, in which case kp365 will notify you of the extension within the initial thirty-day period.

11. Minors & Age Restriction

The kp365 platform is strictly intended for use by individuals aged 21 years and older. kp365 does not knowingly collect, process, or retain personal data relating to anyone under the age of 21. Age verification is a mandatory step of the kp365 account registration and KYC process.

If kp365 becomes aware — through its KYC processes, responsible gaming monitoring, or any other means — that a player account has been registered by or is being used by an individual under the age of 21, kp365 will immediately suspend the account, void any associated bets or bonuses, and securely delete or anonymise all personal data collected from that individual in accordance with applicable law.

If you have reason to believe that a minor has registered a kp365 account or is using the platform, please report this to the kp365 support team immediately via the 24/7 live chat so that prompt action can be taken.

12. International Data Transfers

As a globally operated online gaming platform, kp365 may transfer your personal data to third-party service providers located outside Pakistan — for example, KYC verification providers, fraud detection services, or platform hosting infrastructure located in other jurisdictions. Where such transfers occur, kp365 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual data processing agreements imposing data protection obligations equivalent to those required under kp365's international gaming licence;
• Transfer only to jurisdictions or service providers that maintain an adequate level of data protection as assessed by kp365's compliance function;
• Minimal data transfer — only the data strictly necessary for the third party to perform its contracted function is transferred.

Details of the specific jurisdictions to which kp365 transfers data are available on request via the kp365 support team.

13. Changes to This Privacy Policy

kp365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in platform operations, applicable law, regulatory requirements, or data processing practices. Where changes are material — meaning they significantly affect the way kp365 processes your personal data or the rights available to you — kp365 will provide advance notice via the email address registered on your kp365 account and/or via a prominent notice displayed on the kp365 platform.

Minor or non-material changes (such as corrections of typographical errors or clarifications that do not alter the substance of the Policy) may be made without prior notice. The "Last Updated" date at the top of this page will always reflect the date on which the current version of the Policy came into effect. Continued use of the kp365 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

Players are encouraged to review this Privacy Policy periodically to remain informed about how kp365 protects their personal data.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy — including data access requests, correction requests, or complaints about how kp365 has handled your personal data — please contact the kp365 Data Protection team through the following channel:

kp365 aims to acknowledge all privacy-related written enquiries within 24 hours and to provide a substantive response within thirty (30) calendar days. For urgent matters such as suspected unauthorised access to your account or a potential data breach affecting your data, please use the 24/7 live chat for the fastest response.