pl365 Privacy Policy

This Privacy Policy ("Policy") is issued by pl365 ("we", "us", "our"), the operator of the online gaming platform accessible at https://pl365.app. This Policy applies to all individuals who register an account, access, or otherwise interact with the pl365 platform, including players located in Pakistan and other permitted jurisdictions.

pl365 is committed to protecting the privacy and personal data of all users. This Policy describes in clear terms what personal data we collect, the purposes for which it is used, the legal bases upon which processing is carried out, and the rights available to you as a data subject.

By registering an account on pl365 or by continuing to use the platform, you acknowledge that you have read, understood, and agreed to the data practices described in this Policy. If you do not agree with any part of this Policy, you should discontinue use of the pl365 platform and contact our support team to request account closure.

This Policy should be read alongside the pl365 Terms & Conditions, which govern your overall use of the platform. In the event of any conflict between these documents, the Terms & Conditions shall prevail to the extent of the inconsistency, unless this Policy specifically addresses the matter.

pl365 collects personal data from you in the following ways: information you provide directly during registration and account use; information generated automatically through your use of the platform; and information obtained from third-party service providers such as payment processors and identity verification services.

The categories of personal data we collect include:

pl365 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose beyond those listed here without first obtaining your explicit consent or updating this Policy.

• Account creation and management: To register your account, verify your identity, and maintain your player profile on the pl365 platform.
• Age and identity verification (KYC): To comply with our legal obligations to verify that all players are aged 21 or above, and to confirm that players are who they say they are. This is a non-negotiable requirement for all pl365 accounts.
• Transaction processing: To facilitate deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT, and to maintain accurate records of all financial activity on your account.
• Regulatory compliance and anti-money laundering (AML): To monitor transactions for suspicious activity, file reports where required under applicable AML regulations, and respond to lawful requests from regulatory or law enforcement authorities.
• Responsible gaming: To monitor gaming behaviour for indicators of potential gambling harm, enforce self-exclusion requests, and apply account restrictions where our responsible gaming obligations require it.
• Platform security and fraud prevention: To detect and prevent unauthorised account access, bonus abuse, multi-accounting, and other forms of fraud or prohibited conduct.
• Customer support: To respond to your queries, complaints, and support requests via live chat and email, and to maintain records of communications for quality assurance and dispute resolution.
• Platform improvement: To analyse aggregated usage data to improve the functionality, design, and content of the pl365 platform. This analysis uses anonymised or pseudonymised data wherever possible.
• Marketing communications (where consented): To send you promotional offers, bonus updates, and platform news via email or in-platform notifications, where you have opted in to receive such communications.

pl365 processes your personal data only where a valid legal basis exists for doing so. The legal bases we rely upon are as follows:

• Contractual necessity: Processing necessary to perform our contract with you — that is, to operate your account and deliver the pl365 gaming services you have registered for. Without this processing, we cannot provide our services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, AML transaction monitoring, age verification, and responding to lawful authority requests.
• Legitimate interests: Processing carried out for pl365's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and internal analytics, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — most notably for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

pl365 does not sell your personal data to any third party. We share personal data only where strictly necessary and only with the categories of recipients described below, each of whom is bound by confidentiality obligations and data protection requirements consistent with this Policy:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT processing partners receive transaction-relevant data solely to process your deposits and withdrawals. We share only the minimum data required to complete each transaction.
• Identity verification providers: Third-party KYC and age verification service providers receive your identity documents and personal details solely for the purpose of verifying your identity and age as required by our operating standards.
• IT and hosting providers: pl365's platform infrastructure relies on secure third-party hosting and cloud service providers. These providers store and process data on our behalf under strict data processing agreements and are not permitted to use your data for their own purposes.
• Game content providers: Providers of slot games, live casino content, sports data feeds, and fishing game content may receive pseudonymised session and usage data to facilitate game delivery and audit game outcomes. These providers do not receive your full identity or financial data.
• Regulatory and law enforcement authorities: pl365 will disclose personal data to competent authorities where required to do so by law, court order, or regulatory mandate. We will notify you of any such disclosure where legally permitted to do so.
• Professional advisers: Legal, accounting, and audit professionals engaged by pl365 may access personal data on a need-to-know basis, subject to professional confidentiality obligations.

pl365 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and to comply with applicable legal and regulatory retention requirements. The following retention periods apply as a general guide:

• Account data and KYC documents: Retained for the duration of your account plus a minimum of 5 years following account closure, in accordance with applicable AML and record-keeping regulations.
• Transaction records: All deposit and withdrawal records are retained for a minimum of 5 years from the date of the transaction, as required for financial compliance and audit purposes.
• Support communications: Chat and email support records are retained for 2 years from the date of the interaction, unless they relate to an ongoing dispute or regulatory matter, in which case retention is extended until the matter is fully resolved.
• Technical and usage data: Automatically collected platform usage data is retained for 12 months, after which it is either deleted or anonymised for aggregate analytics purposes.
• Marketing preferences: Records of your marketing consent and opt-out history are retained for the life of your account and for 2 years following account closure.

When personal data is no longer required and its retention period has expired, pl365 will securely delete or anonymise the data using industry-standard methods to ensure it cannot be recovered or reconstructed.

pl365 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include:

• Encryption in transit: All data transmitted between your device and the pl365 platform is encrypted using TLS (Transport Layer Security) protocols. This applies to account login, deposits, withdrawals, and all other platform interactions.
• Encryption at rest: Sensitive personal data stored on pl365 servers — including CNIC data, financial references, and identity verification documents — is stored using AES-256 encryption.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. pl365 employees and contractors are granted data access only to the extent required for their specific role, and all access is logged and audited.
• Two-factor authentication (2FA): All pl365 administrative systems that process personal data require 2FA. Players are strongly encouraged to enable 2FA on their own accounts for additional protection.
• Regular security assessments: pl365 conducts periodic security reviews and vulnerability assessments of its platform infrastructure to identify and address potential security weaknesses proactively.
• Data breach response: In the event of a personal data breach that poses a risk to your rights and freedoms, pl365 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

pl365 uses cookies and similar technologies (including local storage and session tokens) to operate and improve the platform. The types of cookies we use are as follows:

• Essential cookies: These are strictly necessary for the platform to function. They include session authentication tokens, security cookies, and cookies that remember your login state. Essential cookies cannot be disabled without preventing core platform functionality.
• Performance cookies: These collect anonymised data about how players interact with the pl365 platform — such as which pages are visited most frequently and where errors occur. This data helps us improve platform performance and user experience.
• Functional cookies: These remember your preferences — such as language settings, preferred payment method, and display preferences — to provide a more personalised experience on repeat visits.
• Analytics cookies: pl365 uses aggregated analytics data to understand overall platform usage patterns. This data is pseudonymised and is not used to personally identify individual players.

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, please note that disabling essential cookies will affect your ability to log in and use the pl365 platform normally. Disabling non-essential cookies will not affect your core gaming experience.

As a player whose personal data is processed by pl365, you have the following rights in relation to your personal information. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request" and include your registered account username.

• Right of access: You have the right to request a copy of the personal data pl365 holds about you, along with information about how it is used and with whom it is shared. We will provide this information within 10 business days of a verified request.
• Right to rectification: If any personal data pl365 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For KYC-verified data, corrections may require submission of updated documentation.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. Please note that this right is subject to legal retention requirements — pl365 cannot delete data that we are legally required to retain, such as AML transaction records. We will inform you of any applicable restrictions when processing your request.
• Right to restrict processing: In certain circumstances, you may request that pl365 pause the processing of your personal data while a query or complaint is being investigated.
• Right to data portability: You may request that pl365 provide you with a copy of your personal data in a structured, commonly used, machine-readable format, where technically feasible.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests. pl365 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

pl365 is strictly an adult gaming platform. Our services are available only to individuals who are aged 21 years or older. We do not knowingly collect personal data from any person under the age of 21.

As part of our registration and KYC process, all new players are required to verify their age using a valid CNIC or equivalent government-issued identity document. Any account found to belong to a person under the age of 21 will be immediately suspended, all transactions will be cancelled, and any deposited funds will be returned to the originating payment method.

If you believe that a minor has registered an account on pl365, please contact our support team immediately at [email protected]. We take reports of underage access extremely seriously and will investigate all such reports as a priority.

As an internationally operating gaming platform, pl365 may process or store personal data on servers or through service providers located outside of Pakistan. Where personal data is transferred internationally, pl365 ensures that appropriate safeguards are in place to protect your data to the same standard required under this Policy.

• International transfers are carried out only to jurisdictions that provide an adequate level of data protection, or under contractual arrangements (such as standard data protection clauses) that require the recipient to protect the data to an equivalent standard.
• Third-party service providers involved in international data transfers — including cloud hosting providers and identity verification platforms — are required to maintain data security and confidentiality obligations consistent with this Policy.
• pl365 does not transfer Pakistani player data to any jurisdiction in a manner that would undermine your fundamental privacy rights or expose your data to unreasonable risk.

If you would like more information about the specific safeguards applied to international data transfers involving your personal data, please contact our support team.

pl365 may send you marketing communications about bonuses, promotions, new games, and platform updates. The following rules govern how we handle marketing communications:

• Marketing communications are sent only to players who have opted in to receive them during registration or through their account settings. We do not send unsolicited marketing messages.
• You can opt out of marketing communications at any time by updating your notification preferences within your pl365 account, or by contacting our support team. Opt-out requests are processed within 5 business days.
• Opting out of marketing communications will not affect your ability to receive essential account communications — such as deposit/withdrawal confirmations, security alerts, and KYC verification notices — which are sent regardless of marketing preference.
• pl365 does not share your contact details with third-party advertisers or marketing agencies for the purpose of sending you marketing communications from those third parties.

pl365 reserves the right to update or modify this Privacy Policy at any time. When material changes are made, we will notify registered players by email and/or through a prominent notice on the pl365 platform at least 7 days before the changes take effect.

• The "Last Updated" date at the top of this Policy will be revised each time an update is made.
• Your continued use of the pl365 platform after a revised Policy takes effect constitutes your acceptance of the updated terms.
• If you do not agree with the updated Policy, you should discontinue use of the platform and request account closure before the effective date of the changes.
• Minor updates — such as corrections of typographical errors, clarifications that do not materially affect your rights, or updated contact details — may be made without advance notice.

We encourage all players to review this Privacy Policy periodically to stay informed about how pl365 protects your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way pl365 handles your personal data, please reach out to our support team using the contact details below. We are committed to resolving all privacy-related queries promptly and transparently.

• Email: [email protected] — use the subject line "Privacy Query" for fastest routing. Responses within 24 hours.
• Live Chat: Available 24/7 directly on the pl365 platform. Average response time under 2 minutes — the fastest way to get an answer for urgent privacy concerns.
• Data Rights Requests: Use the subject line "Data Rights Request" and include your registered username and a clear description of your request. We acknowledge all data rights requests within 48 hours.