bk365 Privacy Policy

This Privacy Policy ("Policy") is issued by bk365 ("bk365", "we", "us", "our") and describes how we collect, use, store, protect and share personal data when you access or use the bk365 website at https://bk365.cam and all associated services, features and content (collectively, the "Platform" or "Services").

bk365 is committed to protecting the privacy of all users, including those accessing the Platform from Pakistan and other jurisdictions. This Policy is written in plain English and is intended to be read and understood by real people — not just legal professionals. Where we use technical or legal terms, we explain them.

By registering an account or using the Services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, you should discontinue use of the Platform immediately.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies or can identify a living individual, directly or indirectly, including name, email address, IP address, device identifier and financial transaction data.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transfer or deletion.
• "Data Controller" — bk365, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — a third party that processes personal data on behalf of bk365 under a contractual agreement and our instructions.
• "KYC Data" — identity and address verification documents collected as part of Know Your Customer compliance obligations.
• "Sensitive Data" — a subset of personal data warranting heightened protection, including financial account details, identity document numbers and responsible-gambling-related disclosures.
• "Cookie" — a small text file stored on your device by your browser when you visit the Platform, used for session management, analytics or personalisation.

bk365 collects personal data in the following categories:

3.1 Registration & Account Data

• Full legal name
• Date of birth (for age verification)
• Email address
• Username and hashed password
• Residential address (country, city — including Pakistani cities such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar, where provided)
• Phone number (where provided for 2FA or account recovery)

3.2 KYC & Identity Verification Data

• Government-issued identification document (national ID, passport, driving licence)
• Proof of address documentation
• Source of funds documentation (where enhanced due diligence applies)
• Photographs or scanned copies of identity documents

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts (denominated in PKR or other supported currency)
• Payment channel identifiers (masked — we do not store full payment account credentials)
• Transaction history, timestamps and reference numbers
• Betting and gaming activity records

3.4 Technical & Usage Data

• IP address and approximate geolocation (country and city level)
• Device type, operating system and browser information
• Session duration, pages visited and feature interactions
• Error logs and crash reports

3.5 Communications Data

• Support chat transcripts and email correspondence
• Feedback, complaint and survey responses
• Marketing preference records (opt-in/opt-out status)

bk365 collects personal data through the following methods:

• Directly from you — when you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, contact support or respond to surveys.
• Automatically — through cookies, server logs and analytics tools when you browse and interact with the Platform. Technical data such as your IP address and browser type is collected automatically upon each visit.
• From third-party verification services — identity verification providers used for KYC processing may provide supplementary data to verify the accuracy of information you have provided.
• From payment processors — transaction confirmation data is shared with bk365 by our payment processing partners to complete deposits and withdrawals. Payment channel names such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are referenced contextually; these providers share only transaction-level confirmation data necessary to process your request.

bk365 processes your personal data on one or more of the following legal bases, as applicable to the specific processing activity:

• Contractual necessity: Processing required to provide you with the Services you have requested, including account management, transaction processing and support communications.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC and AML obligations under the laws of our licence jurisdiction.
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud detection, security monitoring, platform improvement and responsible gambling enforcement, provided these interests are not overridden by your rights and interests.
• Consent: Where required by applicable law, we will obtain your explicit consent before processing data for specific purposes such as marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bk365 uses the personal data we collect for the following purposes:

• To create, verify and manage your bk365 Account
• To process deposits, withdrawals and betting transactions in PKR or other supported currencies
• To conduct KYC/AML identity verification as required by our regulatory obligations
• To detect, investigate and prevent fraudulent activity, money laundering, collusion and other prohibited conduct
• To enforce our Terms & Conditions and other applicable policies
• To provide customer support and respond to your queries and complaints
• To deliver promotional communications and offer information, where you have opted in to receive such communications
• To administer responsible gambling tools, including deposit limits, cool-off periods and self-exclusion, and to enforce self-exclusion where applicable
• To analyse platform usage, improve Services and resolve technical issues
• To comply with applicable legal and regulatory requirements and to respond to lawful requests from competent authorities

bk365 does not sell, rent or trade your personal data to any third party. We share personal data with carefully selected third-party processors only to the extent necessary to deliver the Services and comply with our obligations. All processors are bound by contractual data processing agreements requiring them to maintain appropriate security and confidentiality standards.

Categories of third-party processors we engage include:

• Identity verification providers — to conduct KYC checks on new and existing accounts
• Payment processing partners — to facilitate deposit and withdrawal transactions
• Fraud prevention and security services — to detect and prevent prohibited activity on the Platform
• Cloud infrastructure and hosting providers — to store and process data securely
• Analytics and performance monitoring services — to understand Platform usage and improve performance
• Customer support tools — to manage support ticket workflows and communications
• Responsible gambling database operators — where required by our licence jurisdiction to check or register self-exclusion status

We may also disclose personal data to competent authorities (including law enforcement, regulatory bodies and courts) where we are legally required or permitted to do so, or where disclosure is necessary to protect the rights, property or safety of bk365, our users or the public.

As an international platform, bk365 and its processors may store and process your personal data in countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction. Where such transfers occur, we implement appropriate safeguards to protect your data, which may include standard contractual clauses, data processing agreements or other recognised transfer mechanisms.

By using the Services, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan. Such transfers are undertaken only to the extent necessary to deliver the Services and subject to the safeguards described in this Policy.

bk365 retains personal data for as long as your Account is active and for a further period as required to fulfil the purposes described in this Policy, comply with our legal obligations, resolve disputes and enforce our agreements.

Specific retention principles include:

• Account and transaction data: Retained for a minimum of five years following Account closure to comply with AML and financial record-keeping obligations applicable to our licence jurisdiction.
• KYC documents: Retained for the minimum period required by applicable law, typically five years from the date of the last transaction or Account closure, whichever is later.
• Support communications: Retained for up to three years from the date of the communication unless a longer period is required for dispute resolution.
• Technical and usage logs: Typically retained for up to 12 months unless required for ongoing investigations.
• Self-exclusion records: Retained indefinitely to prevent re-registration by self-excluded users during the applicable exclusion period.

When personal data is no longer required for any applicable purpose, it is securely deleted or anonymised in a manner that prevents re-identification.

bk365 uses cookies and similar tracking technologies to operate the Platform, enhance your experience and gather analytics data. A cookie is a small text file stored in your browser. We use the following categories of cookies:

You can control and delete cookies through your browser settings. Disabling essential cookies will affect the functionality of the Platform. Disabling analytics or functional cookies may limit your personalised experience. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

Subject to applicable law and certain conditions, you have the following rights in relation to your personal data held by bk365. To exercise any of these rights, please contact us using the details in Section 15.

The bk365 Platform is strictly intended for adults aged 18 years or older — or the higher minimum age required by the operator's licence jurisdiction. bk365 does not knowingly collect personal data from any person under the applicable minimum age.

Age verification is conducted as part of the KYC process. If we have reasonable grounds to believe that a user is under the minimum age, we will immediately suspend the Account, conduct a verification review and, where a minor has been identified, permanently close the Account, return any real-money balance to the verified source and delete the personal data of the minor from our records to the extent permitted by applicable law.

If you believe that a minor has registered an Account on bk365, please notify us immediately at the contact details provided in Section 15.

bk365 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures include:

• TLS (Transport Layer Security) encryption for all data in transit between your device and our servers
• Encryption of sensitive data at rest using industry-standard algorithms
• Role-based access controls limiting internal access to personal data on a need-to-know basis
• Multi-factor authentication for staff accessing production systems
• Regular security assessments and vulnerability testing
• Incident response procedures for detecting, reporting and responding to personal data breaches

While we take all reasonable steps to protect your data, no internet transmission or electronic storage system is entirely immune to security risk. We encourage you to maintain strong, unique passwords for your bk365 Account and to enable two-factor authentication. You are responsible for maintaining the security of your own device and access credentials.

In the event of a personal data breach that poses a risk to your rights and freedoms, bk365 will notify you and applicable supervisory authorities as required by the laws of our licence jurisdiction.

bk365 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law or Platform functionality. Material changes will be communicated to you via email to your registered address or via a prominent notice on the Platform prior to taking effect.

The "Last updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any changes constitutes your acknowledgement and acceptance of the revised Policy.

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by bk365, please contact our support team using the details below. All privacy-related requests will be acknowledged within 3 business days and resolved within the timeframes required by applicable law (typically 30 days from receipt of a valid, verified request).

Please note that in order to protect your personal data, we will need to verify your identity before processing any access, correction or deletion request. You may be asked to provide proof of identity before we proceed with any request. We will not charge a fee for processing reasonable data subject requests.