kp365 Privacy Policy

kp365 ("kp365", "we", "us", "our") is an internationally licensed online gaming platform operating at kp365.bio, providing sports betting, live casino, slot games, Super Bingo, Plinko, and related gaming entertainment services to eligible players including those based in Pakistan.

kp365 acts as the data controller in respect of the personal data of registered users and visitors to the kp365 Platform. As data controller, kp365 determines the purposes and means by which your personal data is processed, and is responsible for ensuring that processing is conducted lawfully, fairly, and transparently.

This Privacy Policy applies to all personal data collected and processed by kp365 in connection with your use of the Platform — whether you are a registered account holder, a visitor browsing the site without logging in, or a person who contacts kp365 customer support.

kp365 collects the following categories of personal data from users of the Platform:

kp365 adheres to the principle of data minimisation — we collect only the personal data that is genuinely necessary for the specific purpose for which it is being collected. We do not collect sensitive personal data such as religious beliefs, political opinions, or medical information.

kp365 collects personal data through the following channels and mechanisms:

• Direct registration: Data you actively provide when creating your kp365 account — including your name, Pakistani mobile number, date of birth, and selected username and password.
• KYC verification submissions: Documents and images you upload when completing identity verification at kp365's request, typically prior to your first withdrawal.
• Deposits and withdrawals: Transaction metadata generated when you use JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, or other accepted payment channels through the kp365 cashier.
• Platform use: Gaming activity, betting records, session logs, and responsible gaming settings generated automatically as you use the kp365 Platform.
• Customer support interactions: Communications you initiate via live chat, email to [email protected] or [email protected], or any feedback form on the Platform.
• Automated technologies: Cookies, session tokens, web beacons, and server log files that capture technical and behavioural data each time you visit or interact with the kp365 Platform. See Section 7 for full cookie details.
• Third-party verification partners: Where kp365 uses an accredited KYC or identity verification service provider, that provider may supply the result of their verification checks to kp365 (but kp365 does not receive raw database records from third-party identity systems).

kp365 uses the personal data we collect for the following specific purposes:

• Account creation and management: To register your kp365 account, maintain your profile, and authenticate your identity each time you log in.
• Service delivery: To provide you with access to cricket betting markets, PSL wagering, live casino tables, slot games, Super Bingo, Plinko, and all other kp365 gaming products and features.
• Payment processing: To process PKR deposits, verify payment method ownership, execute withdrawal requests, and maintain accurate financial records for your account.
• Identity and age verification (KYC): To confirm that you are who you say you are, that you are at least 21 years of age, and that you are using payment methods you legitimately own — as required by kp365's operating licence obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, account takeover attempts, money laundering activity, and other conduct that violates kp365's Terms and Conditions.
• Responsible gaming compliance: To apply and monitor the deposit limits, loss limits, session timers, and self-exclusion settings you configure on your account, and to proactively identify players showing signs of problem gambling behaviour.
• Customer support: To respond to your enquiries, resolve complaints, process account requests, and maintain records of your support interactions.
• Legal and regulatory compliance: To meet anti-money laundering (AML) obligations, record-keeping requirements under kp365's gaming licence, and other applicable legal duties.
• Platform improvement: To analyse aggregated and anonymised usage patterns, game performance data, and player behaviour trends to improve the kp365 Platform, add features, and fix issues.
• Marketing communications: To send you relevant promotional offers, bonus notifications, and game updates — where you have opted in to receive such communications. See Section 14 for your opt-out rights.

kp365 processes your personal data on one or more of the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to fulfil kp365's obligations under the Terms and Conditions you agreed to at registration — including providing gaming services, processing payments, and managing your account.
• Legitimate interests: Processing that kp365 carries out for its legitimate business interests, such as fraud prevention, platform security, responsible gaming monitoring, and general Platform improvement — provided these interests are not overridden by your data protection rights.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC obligations under kp365's gaming licence, AML compliance requirements, and data retention obligations imposed by financial regulators.
• Consent: Processing carried out on the basis of your freely given, specific consent — in particular, sending you direct marketing communications. Where consent is the legal basis, you retain the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

kp365 shares your personal data only in the following limited and controlled circumstances:

• Payment processors: Transaction data is shared with kp365's accepted Pakistani payment partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK) solely to process your deposit and withdrawal instructions. These partners operate under their own privacy policies and regulatory obligations.
• KYC and identity verification providers: Where kp365 uses a specialist third-party KYC service to verify your identity documents, the data you submit for verification is processed by that provider under a data processing agreement with kp365.
• Game content providers: Technical session data — such as bet amounts and game results — is processed by kp365's licensed game providers to operate casino games and return accurate results. These providers do not receive your full personal profile.
• Regulatory and law enforcement authorities: kp365 will disclose personal data to relevant regulatory bodies, gaming authorities, financial intelligence units, or law enforcement agencies where required to do so by law, court order, or as part of a formal investigation.
• Professional advisors: kp365's legal counsel, auditors, and compliance advisors may access limited personal data where necessary to provide their professional services to kp365 under strict confidentiality obligations.
• Business succession: In the event of a merger, acquisition, or sale of kp365's business or assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer in advance.

All third parties to whom kp365 discloses personal data are required to maintain its confidentiality, use it only for the specified purpose, and apply appropriate technical and organisational security measures.

kp365 uses cookies and similar tracking technologies on the Platform to provide a functional, secure, and personalised experience. A cookie is a small text file stored on your device by your browser when you visit a website. kp365 uses the following categories of cookies:

• Essential / Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in, security cookies that protect against cross-site request forgery, and cookies that remember your language and currency preferences. These cookies cannot be disabled without rendering the Platform non-functional.
• Functional Cookies: Store your preferences such as responsible gaming limit settings, game lobby filters, and notification preferences, so these do not need to be re-entered on every visit.
• Analytics Cookies: Collect aggregated, anonymised information about how players use the kp365 Platform — which pages are visited most, where users exit the site, and how games are navigated. This data helps kp365 improve the Platform experience. No individually identifiable data is shared with analytics providers.
• Security and Fraud Detection Cookies: Used to identify and prevent fraudulent login attempts, detect account sharing, and flag suspicious session patterns that may indicate bonus abuse or automated bot activity.

You may control cookies through your browser settings. However, disabling essential cookies will prevent you from logging into your kp365 account and using the Platform's core functions. kp365 does not use third-party advertising or retargeting cookies.

kp365 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your browser or device and kp365 servers is encrypted using 256-bit SSL/TLS protocols — the same standard used by major international banks and financial institutions.
• Password hashing: User passwords are never stored in plain text. kp365 uses industry-standard cryptographic hashing algorithms with salting to store password data — meaning even in the event of an internal data breach, your actual password cannot be recovered from stored data.
• Two-factor authentication (OTP): kp365 uses one-time password SMS verification for new device logins and high-value account operations, adding an additional layer of protection beyond your password alone.
• Access controls: Access to personal data within kp365's operational systems is restricted on a strict need-to-know basis. Staff members access only the data necessary to perform their specific role, and all access is logged and audited.
• Network security: kp365 servers are protected by firewalls, intrusion detection systems, and regular penetration testing conducted by independent security specialists.
• KYC document security: Identity documents submitted for KYC verification are stored in encrypted document storage systems with strict access logging, separate from transactional account data.

kp365 retains your personal data for different periods depending on the category of data and the purpose for which it was collected:

• Active account data: Retained for the duration of your kp365 account's active status and for a minimum period of 5 years following account closure, to meet anti-money laundering record-keeping obligations under kp365's gaming licence.
• KYC verification documents: Retained for a minimum of 5 years from the date of verification, in accordance with applicable AML and identity verification regulatory requirements.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping legal obligations.
• Customer support records: Retained for 2 years from the date of the last support interaction, unless the record relates to an unresolved complaint or legal matter in which case it is retained until final resolution plus 1 year.
• Marketing consent records: Retained for as long as your marketing consent is active plus 2 years following withdrawal of consent, to demonstrate that communications were sent lawfully.
• Technical and analytics data: Aggregated and anonymised analytics data has no fixed retention period as it contains no personally identifiable information. Raw server logs containing IP addresses are retained for a maximum of 12 months.

When the applicable retention period expires, kp365 will securely delete or anonymise your personal data so that it can no longer be associated with you. Where full deletion is not immediately possible due to technical constraints (e.g., data held in backup systems), the data will be isolated from further processing until deletion can be completed.

As a registered kp365 user, you hold the following rights in relation to your personal data. To exercise any of these rights, contact kp365 at [email protected] with the subject line "Data Rights Request":

• Right of Access: You have the right to request a copy of the personal data kp365 holds about you. kp365 will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data kp365 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Corrections to core account data (name, date of birth) may require KYC re-verification.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and kp365 has no overriding legal obligation to retain it. Note that data subject to regulatory retention obligations (such as AML records) cannot be deleted during the mandatory retention period.
• Right to Restriction of Processing: You may request that kp365 restrict the processing of your data in certain circumstances — for example, while you contest the accuracy of data kp365 holds, or where you have objected to processing and kp365 is considering that objection.
• Right to Data Portability: You have the right to receive a copy of the personal data you provided to kp365 in a structured, machine-readable format and to request that it be transferred to another data controller where technically feasible.
• Right to Object: You have the right to object to kp365's processing of your personal data where that processing is based on legitimate interests. kp365 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where kp365 processes your data on the basis of consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

kp365 will respond to all verifiable data rights requests within 30 calendar days. In cases of complexity or high volume, this period may be extended by a further 30 days with prior notification to you.

If kp365 becomes aware that personal data has been collected from an individual under 21 years of age — whether through a registration attempt that bypassed age verification, a KYC review that revealed the account holder's true age, or any other means — the following actions will be taken immediately:

• The account will be suspended and then permanently closed;
• All funds held in the account will be returned to the payment method used to deposit them (less any amounts derived from fraudulently claimed bonuses);
• All personal data collected from the underage individual will be deleted from kp365 systems as swiftly as possible, subject only to any mandatory retention obligations related to the account closure;
• The incident will be reviewed by kp365's compliance team to identify and address any gap in age verification controls.

If you are a parent or legal guardian and have reason to believe that your child has registered a kp365 account, please contact kp365 support immediately at [email protected].

The kp365 Platform may contain references to third-party services such as payment processors (JazzCash, EasyPaisa), game providers, or responsible gaming organisations. When you click through to any third-party platform or service, you leave the kp365 Platform and your interaction with that third party is governed entirely by that party's own privacy policy and terms of use.

kp365 is not responsible for the privacy practices, data security measures, or content of any third-party websites or services. We encourage you to read the privacy policy of any third-party service before submitting personal data to them.

As an internationally licensed online gaming operator, kp365 may process or store certain categories of data on servers located outside Pakistan. Where personal data is transferred outside Pakistan, kp365 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

These safeguards may include standard contractual clauses approved by relevant data protection authorities, binding corporate rules within kp365's operating group, or transfers to countries that have been recognised as providing an adequate level of data protection by the relevant regulatory bodies.

KYC documents and payment-related personal data are processed by certified service providers operating under their own applicable regulatory frameworks and contractual obligations with kp365.

kp365 may send you marketing communications — including promotional bonus offers, new game announcements, PSL betting promotions, seasonal campaigns, and account-specific offers — via SMS to your registered Pakistani mobile number and/or via in-platform notifications, subject to your communication preferences.

kp365 will only send you direct marketing communications where you have:

• Actively opted in to receive marketing messages during registration or through your account Communication Preferences settings; or
• Previously interacted with kp365 in a way that gives kp365 a legitimate basis to send you relevant service-related messages (for example, information about a promotion you previously claimed).

Opting out: You may withdraw consent to receive marketing communications at any time by updating your Communication Preferences in your kp365 account settings, or by contacting kp365 support at [email protected]. Your opt-out request will be processed within 5 business days. Opting out of marketing communications does not affect essential service messages such as account security alerts, withdrawal confirmations, or responsible gaming notifications — these are sent on the basis of contractual necessity and cannot be disabled while your account is active.

kp365 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or operational changes to the Platform. When material changes are made, kp365 will:

• Update the "Last Updated" date at the top of this page;
• Notify registered users of significant changes via SMS to their registered Pakistani mobile number or via an in-platform notification at least 7 days before the changes take effect; and
• Where changes affect processing based on your consent, request fresh consent before the new processing commences.

Your continued use of the kp365 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to remain informed about how kp365 protects your personal data.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by kp365, please contact us through any of the following channels:

• Privacy / Data Rights Enquiries: Email [email protected] — subject line: "Privacy Enquiry" or "Data Rights Request"
• General Support: Live Chat available 24/7 through the kp365 Platform (average response under 5 minutes)
• Feedback & Complaints: Email [email protected]

kp365 customer support and privacy teams are equipped to assist players from across Pakistan — Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Peshawar, Quetta, and all other cities — in English, around the clock.