dk365 Privacy Policy

This Privacy Policy ("Policy") describes how dk365 ("dk365", "we", "us", "our") collects, uses, discloses and protects the personal information of individuals ("you", "the User", "the Player") who access or use the dk365 platform, accessible at https://dk365.cam and any associated mobile interfaces.

dk365 is an online sports betting and casino entertainment platform serving users across Pakistan — including players in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — and is committed to handling all personal data responsibly, lawfully and with full transparency.

This Policy should be read in conjunction with the dk365 Terms and Conditions, which govern the overall relationship between you and the platform. Defined terms used but not defined in this Policy carry the meanings assigned to them in the Terms and Conditions.

This Policy is written and published in English. Where any translation exists and there is a conflict between the English version and any translation, the English version shall prevail.

In this Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, email address or one or more factors specific to that person.
• "Processing" — Any operation performed on Personal Data, including but not limited to collection, storage, use, disclosure, erasure and destruction.
• "Data Controller" — The entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, the Data Controller is dk365.
• "Data Processor" — A third party that processes Personal Data on behalf of the Data Controller, acting under instruction.
• "KYC" — Know Your Customer — the identity and age verification process through which users submit identity documentation to confirm eligibility.
• "Sensitive Personal Data" — A subset of Personal Data receiving enhanced protection, including data relating to health, financial position, biometrics and government identification numbers.
• "Consent" — A freely given, specific, informed and unambiguous indication of the data subject's agreement to the processing of their Personal Data for a stated purpose.

The Data Controller responsible for the Personal Data described in this Policy is the operator of dk365. The platform is accessible at https://dk365.cam.

For all data-related enquiries, including requests to exercise your data subject rights, you may contact us using the details set out in Section 14 (Contact Us) of this Policy. Enquiries submitted through Live Chat or the Help Center on the platform will be acknowledged promptly and directed to the appropriate team.

dk365 does not represent that it is licensed, regulated or approved by the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan or any provincial regulatory body. References to familiar Pakistani payment infrastructure — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — appear in this Policy and on the platform as contextual references only and do not imply that any such institution endorses or supports online gambling on this platform.

dk365 collects Personal Data in the following categories, depending on your interaction with the platform:

The table below sets out the primary purposes for which dk365 processes your Personal Data and the corresponding legal basis for each processing activity:

Where dk365 relies on legitimate interests as the legal basis for processing, we have assessed that such interests are not overridden by your fundamental rights and freedoms. You may object to processing carried out on the basis of legitimate interests — see Section 11 (Your Rights) for details.

dk365 does not sell, rent or trade your Personal Data. We may share your data with third parties only in the circumstances described below:

• Service Providers and Data Processors: We engage third-party companies to provide infrastructure services, payment processing support, KYC verification, fraud detection, customer support technology and analytics. These parties process your data solely under our instructions and are contractually prohibited from using it for any other purpose.
• Regulatory and Law Enforcement Authorities: We may disclose Personal Data to competent authorities — including financial intelligence units, licensing regulators and law enforcement agencies — where we are legally required or permitted to do so, including in connection with AML and counter-terrorism-financing (CTF) obligations.
• Professional Advisers: We may disclose Personal Data to legal advisers, auditors and insurers on a confidential basis where necessary in the ordinary course of operating a regulated business.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of all or part of the dk365 business, Personal Data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

In all cases where Personal Data is shared with third parties, we implement appropriate contractual safeguards to ensure that data is processed lawfully and securely.

dk365 retains Personal Data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law or legitimate business necessity. The following general retention principles apply:

• Account Data: Retained for the duration of the account and for a period of at least five (5) years following permanent account closure, in line with standard AML record-keeping requirements under the licensing framework.
• KYC Documentation: Retained for a minimum of five (5) years from the date of the last transaction or account closure (whichever is later), or for such longer period as required by applicable regulatory obligations.
• Transaction Records: Retained for a minimum of five (5) years in accordance with AML obligations.
• Communications Data: Retained for up to three (3) years from the date of the communication, or longer where the matter is subject to ongoing dispute or legal proceedings.
• Marketing Preference Data: Retained until consent is withdrawn. Evidence of consent is retained for a further period following withdrawal to demonstrate compliance.
• Technical/Device Data: Retained in aggregated or anonymised form for analytics purposes without a fixed retention limit. Identifiable technical data is retained for up to twelve (12) months.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised in accordance with our data disposal procedures.

dk365 implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction or disclosure. These measures include, but are not limited to:

• AES-256 encryption for data stored at rest on our servers.
• TLS 1.2 or higher encryption for all data transmitted between your device and the dk365 platform.
• Role-based access controls (RBAC) restricting access to Personal Data to authorised personnel only, on a need-to-know basis.
• Multi-factor authentication (MFA) for administrative access to systems holding Personal Data.
• Regular security assessments, penetration testing and vulnerability scanning of platform infrastructure.
• Security awareness training for all staff with access to Personal Data.
• Incident response and breach management procedures aligned to applicable notification requirements.

Whilst dk365 takes all reasonable precautions to protect your data, no internet transmission or electronic storage system is entirely secure. You are responsible for keeping your account login credentials confidential and for notifying us immediately of any suspected unauthorised access.

The dk365 platform uses cookies and similar technologies (including web beacons and local storage) to operate the platform, maintain session security, and improve user experience. The categories of cookies we use are described below:

• Strictly Necessary Cookies: Essential for the platform to function. These enable core features such as page navigation, account login sessions and security checks. They cannot be disabled without materially impairing platform functionality.
• Functional Cookies: Remember your preferences — such as display settings, language selection and session continuity — to provide a more personalised experience on return visits.
• Performance and Analytics Cookies: Collect anonymised data about how users interact with the platform — which pages are visited most frequently, where errors occur and how sessions flow. This data is used solely to improve the platform and is not used to identify individual users.
• Security Cookies: Help detect and prevent fraudulent activity, bot access and session hijacking by verifying that requests originate from a legitimate user session.

You may configure your browser to refuse or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use core platform functions, including account login. For instructions on managing cookies in your specific browser, consult your browser's help documentation.

dk365 does not use third-party advertising cookies or tracking pixels that share your browsing behaviour with external advertising networks.

dk365 operates an online platform serving users internationally, including users in Pakistan. Personal Data collected from users may be transferred to, stored and processed in jurisdictions outside Pakistan, including the jurisdiction where the platform operator is licensed, and in countries where our Data Processors maintain server infrastructure.

When Personal Data is transferred outside the jurisdiction in which it was collected, dk365 implements appropriate safeguards to ensure that the level of data protection afforded to your data is not materially lower than the protection provided under applicable data protection law. Such safeguards may include standard contractual clauses, data processing agreements incorporating equivalent protections and other lawful transfer mechanisms.

By using the dk365 platform, you acknowledge that your Personal Data may be transferred, stored and processed outside Pakistan in the circumstances described above.

Subject to the limitations imposed by applicable law and the specific circumstances of your Account, you have the following rights in relation to your Personal Data held by dk365:

To exercise any of the rights described above, please contact dk365 using the details set out in Section 14. We will respond to all verifiable data subject requests within the timeframes required by applicable law. We may need to verify your identity before processing a request. We do not charge a fee for reasonable requests but reserve the right to charge a reasonable administrative fee or to decline requests that are manifestly unfounded or excessive.

The dk365 platform is strictly adults only. Users must be at least 18 years of age, or the higher minimum age required by the operator's licensing jurisdiction, to register an account or use the platform. This restriction applies regardless of the jurisdiction from which the user accesses the platform.

dk365 does not knowingly collect Personal Data from individuals under the minimum eligible age. Age is verified as part of the KYC process before withdrawals are processed. If we become aware that Personal Data has been collected from an underage user, we will immediately suspend the Account, void any associated transactions and securely delete the data.

Parents and guardians who believe that a minor has registered an account or provided Personal Data to dk365 should contact our support team immediately using the details in Section 14.

dk365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. Revised versions will be published on this page with an updated "Last Updated" date.

Your continued use of the dk365 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If the changes are material — in particular, if they involve new categories of data collection, new purposes of processing or new categories of data recipient — we will take reasonable steps to bring them to your attention.

We recommend reviewing this Policy periodically to stay informed of how we manage your personal data.

For any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the dk365 data team through the following channels:

• Live Chat: Available 24/7 through the platform interface. For urgent data concerns, Live Chat provides the fastest initial response.
• Help Center: The platform's self-service knowledge base includes a dedicated section on privacy and data requests, with guidance on how to submit formal data subject access requests.
• Email (plain text — not a clickable link): [email protected] — Please use the subject line "Privacy / Data Request" to ensure your message is directed to the appropriate team. Do not include sensitive account information such as passwords or full financial account numbers in email correspondence.

We aim to acknowledge all privacy-related communications within two (2) business days and to provide a substantive response within the timeframe required by applicable law, typically thirty (30) days from receipt of a verified request.

If you are dissatisfied with our response to a privacy concern, you may have the right to lodge a complaint with the applicable supervisory authority in the jurisdiction where the operator holds its licence.