365 vegas Privacy Policy —
Your Data, Your Rights, Our Commitment

01 Who We Are

This Privacy Policy is issued by 365 vegas, the operator of the online gaming platform accessible at 365vegas.win (referred to in this document as "365 vegas", "we", "us", or "our").

365 vegas is Pakistan's dedicated online gaming destination, providing live casino games, jackpot slots, Rocket Crash, Cockfighting, and sports betting to registered players across Pakistan. Our platform is designed specifically for Pakistan players, with all accounts denominated in Pakistani Rupees (PKR) and all support delivered in English.

For the purposes of data protection, 365 vegas is the data controller responsible for the personal information you provide when you register an account, make a deposit, or use any part of the 365 vegas platform.

02 Personal Data We Collect

365 vegas collects the following categories of personal data from Pakistan players. We collect only what is necessary for the purposes described in this Privacy Policy.

2.1 Registration Data

When you create a 365 vegas account, we collect your chosen username, your Pakistani mobile number or email address, and your chosen password (stored in encrypted form — we never store plaintext passwords). You may optionally provide your full name at registration, though full name verification is completed during the KYC process.

2.2 Identity Verification Data (KYC)

Before processing your first withdrawal, 365 vegas is required to verify your identity. This involves collecting a copy of your Pakistani CNIC (Computerised National Identity Card) or passport, a proof-of-address document (such as a recent utility bill or bank statement), and verification of your payment method registered in your name. This data is used exclusively for identity verification and legal compliance.

2.3 Financial Data

365 vegas collects records of your PKR deposits, withdrawals, and in-platform gaming transactions. We record the amount, method, timestamp, and status of each transaction. For Easypaisa and JazzCash deposits, we record the mobile wallet number used. For bank transfers, we record the account number and bank name. We do not store full debit or credit card numbers — card payment data is processed by our PCI-DSS compliant payment partners.

2.4 Gaming Activity Data

365 vegas maintains records of your gaming history — including games played, wagers placed, outcomes, and bonus usage — for operational, compliance, and responsible gaming purposes. This data allows us to identify unusual patterns that may indicate problem gambling behaviour and to comply with anti-money-laundering (AML) requirements.

2.5 Technical and Device Data

When you access the 365 vegas platform, our servers automatically collect your IP address, browser type, operating system, device type, and session timestamps. This information is used to maintain platform security, investigate unauthorised access attempts, and optimise the 365 vegas experience across different devices used by Pakistan players.

2.6 Communication Data

If you contact 365 vegas support — by email, live chat, or other channels — we retain records of those communications. This enables us to provide consistent support and to resolve disputes or complaints effectively.

03 How We Collect Your Data

365 vegas collects personal data through the following methods:

• Direct submission: Data you provide when registering your account, completing KYC, making deposits or withdrawal requests, setting responsible gaming limits, or contacting our support team.
• Automated collection: Technical data collected automatically when you access the 365 vegas platform, including IP address, browser data, session cookies, and device identifiers.
• Payment processors: Transaction confirmation data shared by our Pakistan payment partners — including Easypaisa, JazzCash, SadaPay, Raast, HBL, and UBL — following a deposit or withdrawal instruction from your account.
• Identity verification partners: Confirmation of identity document authenticity during the KYC process. We work with regulated third-party identity verification providers who are contractually prohibited from using your CNIC data for any purpose beyond our verification request.
• Fraud detection systems: Automated signals from our internal fraud and AML monitoring tools, which analyse patterns in registration, login, and transaction behaviour.

04 Why We Use Your Personal Data

365 vegas uses your personal data for the following purposes:

05 Legal Basis for Processing

365 vegas processes your personal data on one or more of the following legal bases, depending on the purpose:

• Contractual necessity: Processing that is required to provide the 365 vegas gaming service under our Terms & Conditions — including account management, PKR transaction processing, and KYC verification.
• Legal obligation: Processing required to comply with applicable law — including anti-money-laundering (AML) regulations, identity verification requirements, and record-keeping obligations.
• Legitimate interests: Processing that is necessary for our legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring — provided these interests are not overridden by your rights.
• Consent: Processing carried out on the basis of your specific, freely given consent — primarily for marketing communications. You may withdraw consent for marketing at any time without affecting your account.

06 Sharing Your Personal Data

365 vegas does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share your personal data only in the following limited circumstances:

6.1 Payment Processors

We share financial transaction data with our PKR payment partners — including Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, MCB Bank, Meezan Bank, Bank Alfalah, Visa, Mastercard, and USDT processing partners — to the extent required to process your deposit or withdrawal instruction. Each payment partner is contractually bound to use your data only for the specific transaction.

6.2 Identity Verification Partners

Your CNIC or passport data may be shared with our contracted third-party KYC verification provider during the identity verification process. This provider is prohibited from retaining or using your data beyond the scope of the verification request from 365 vegas.

6.3 Legal and Regulatory Authorities

365 vegas may disclose personal data to law enforcement, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or regulatory requirement. In such cases, we share only the minimum data required to satisfy the legal obligation.

6.4 Business Continuity

In the event of a merger, acquisition, or transfer of the 365 vegas business, your personal data may be transferred to the new operator subject to the same privacy protections described in this policy. We will notify Pakistan players of any such transfer in advance where we are permitted to do so.

07 Cookies & Tracking Technologies

365 vegas uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and measure platform performance. The following categories of cookies are used:

• Essential cookies: Required for the 365 vegas platform to function. These include session cookies that maintain your login state while you navigate between pages. These cannot be disabled without impairing your ability to use the platform.
• Performance cookies: Collect anonymised data about how Pakistan players use the 365 vegas platform — such as which pages are visited most and how long sessions last. This data is used to improve the platform and does not identify individual users.
• Preference cookies: Remember your chosen language settings and other platform preferences so you do not need to re-enter them each time you visit 365 vegas.
• Security cookies: Used by our fraud detection and account security systems to identify unusual login patterns and protect your 365 vegas account from unauthorised access.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in to your 365 vegas account or using core platform features.

08 Data Security

365 vegas implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• TLS 1.3 encryption: All data transmitted between your device and 365 vegas servers is encrypted using TLS 1.3 with 256-bit AES keys — the same standard used by Pakistan's major banks.
• Encryption at rest: Sensitive data stored on 365 vegas servers — including KYC documents, PKR transaction records, and account credentials — is encrypted at rest.
• Password hashing: Account passwords are never stored in plaintext. They are hashed using a strong one-way algorithm — even 365 vegas staff cannot read your password.
• Two-factor authentication: 365 vegas provides optional 2FA for all Pakistan player accounts, adding a critical second layer of protection beyond the password.
• Access controls: Access to personal data within 365 vegas is restricted to staff with a specific need to access that data, subject to role-based access controls and audit logging.
• Penetration testing: 365 vegas conducts regular security assessments and penetration tests to identify and remediate potential vulnerabilities before they can be exploited.

09 Data Retention

365 vegas retains your personal data for as long as your account is active and for such additional periods as are required by applicable law or our legitimate business needs. Specific retention periods apply as follows:

• Active account data: Retained for the duration of your account and for a period of 5 years following account closure, in accordance with standard financial record-keeping requirements applicable to our business.
• KYC documents: CNIC copies and identity verification documents are retained for a minimum of 5 years following the completion of the verification process or account closure, whichever is later, to meet AML record-keeping obligations.
• Transaction records: PKR deposit and withdrawal records are retained for 5 years following each transaction to meet financial record-keeping requirements.
• Support communications: Records of support interactions are retained for 3 years following the closure of each support case.
• Technical logs: IP address logs and session data used for security purposes are retained for 12 months and then deleted or anonymised.

When retention periods expire, 365 vegas securely deletes or anonymises your personal data so it can no longer be attributed to you. Anonymised data may be retained indefinitely for aggregated platform analytics without being considered personal data.

10 Your Privacy Rights

Every 365 vegas player in Pakistan has the following rights over their personal data. To exercise any of these rights, contact us at [email protected]. We respond to all data rights requests within 30 days at no charge.

11 Children's Privacy

The 365 vegas platform is strictly for adults aged 18 years and above. 365 vegas does not knowingly collect personal data from individuals under the age of 18. If we become aware that a person under 18 has registered an account or submitted personal data, we will immediately close the account, delete the associated personal data, and return any deposits to the payment method used, where technically possible.

If you believe that a minor has accessed 365 vegas and submitted personal data, please contact us immediately at [email protected]. We take this issue extremely seriously and will respond within 24 hours.

12 Marketing Communications

365 vegas may send you promotional communications about new games, jackpot alerts, bonus offers, and platform updates by email or SMS to your registered contact details. Marketing communications are only sent where you have provided your consent during registration or at a later point through your account communication preferences.

You can opt out of marketing communications at any time by updating your preferences in the 365 vegas account settings or by contacting [email protected]. Opting out of marketing does not affect your ability to receive essential account communications — such as withdrawal confirmations, security alerts, KYC requests, or Terms & Conditions update notices.

365 vegas applies responsible advertising practices and does not send promotional material to Players who have activated Self-Exclusion or who are subject to account restrictions related to responsible gaming.

13 Third-Party Services

The 365 vegas platform integrates with third-party game studios, payment providers, and identity verification partners to deliver its services. Each of these partners operates under their own privacy policies, and 365 vegas is not responsible for the data practices of third-party services beyond the contractual data processing agreements we maintain with each partner.

Pakistan players should note that when you make a deposit via Easypaisa, JazzCash, or another payment provider, that transaction is also subject to the privacy policy of the relevant payment provider. 365 vegas recommends reviewing the privacy policies of your chosen payment method where you have concerns about data handling on the payment side.

The 365 vegas platform does not contain links to external websites, and 365 vegas does not endorse or take responsibility for the content or privacy practices of any external sites.

14 Updates to This Privacy Policy

365 vegas reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, 365 vegas will notify registered Pakistan players by email to their registered address and will display a prominent notice on the platform for a minimum of 14 days before the updated policy takes effect.

The current version of this Privacy Policy is always available at 365vegas.win/privacy-policy. The version date is displayed at the top of this document. We encourage you to review this policy periodically so that you remain informed about how 365 vegas protects your personal data.

Your continued use of the 365 vegas platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with any material change, you may close your account and request deletion of your personal data in accordance with Section 10 above.

15 How to Contact Us

For all privacy-related queries, data rights requests, or complaints about how 365 vegas handles your personal information, please contact the 365 vegas Data Protection team using the details below. All requests are handled by English-speaking staff available around the clock.

If you are not satisfied with our response to a privacy complaint, you may escalate the matter through independent dispute resolution channels or applicable regulatory bodies as may be relevant in your jurisdiction. We take all privacy complaints seriously and are committed to resolving them fairly and promptly.