Privacy Policy – DK365 Online Gaming Platform Pakistan

DK365 is an online gaming platform operating at dk365.im, providing Pakistani players with access to live dealer games, jackpot slots, card games, Ludo, Aviator, football betting and more — all in PKR, via mobile-friendly interfaces designed specifically for use in Pakistan.

When this Privacy Policy refers to "dk365", "we", "our" or "us", it means the operating entity behind dk365.im and all services accessible through that domain. This Privacy Policy applies to all personal data collected through your use of the dk365 platform, including account registration, gameplay, transactions, customer support interactions and your use of this website.

If you have any questions about this Privacy Policy or how dk365 handles your data, contact us at support@dk365.im. Support is available 24/7 in Pakistan Standard Time via live chat on the platform or by email.

DK365 collects personal data in the following categories. The table below explains what we collect, how it is collected, and why it is necessary:

DK365 does not collect sensitive personal data such as biometric information, racial or ethnic origin, political opinions, religious beliefs, or health data except where a player voluntarily discloses health information in the context of a responsible gaming request (for example, informing dk365 of a gambling addiction when requesting self-exclusion).

DK365 collects personal data only where there is a lawful basis for doing so. The legal bases we rely on are:

• Contract performance: We need your account data, payment details and transaction history to provide the gaming services you signed up for — to process your deposits, credit your winnings, and pay out your withdrawals in PKR.
• Legal obligation: As a licensed gaming operator, dk365 is required by its licence to collect and retain certain data for Know Your Customer (KYC) verification, anti-money laundering (AML) compliance, and responsible gaming monitoring.
• Legitimate interests: We collect technical data such as IP addresses and session logs to protect the platform from fraud, detect multiple account abuse, investigate disputes and improve the dk365 gaming experience.
• Consent: We process marketing communication preferences and non-essential cookies only where you have actively consented to receiving them. You may withdraw this consent at any time.

DK365 does not process your personal data for purposes that are incompatible with the purposes set out above. If we ever wish to use your data for a new purpose, we will inform you and obtain any necessary consent before doing so.

The personal data collected by dk365 is used for the following purposes:

• Account management: Creating and maintaining your dk365 account, verifying your identity, managing your login sessions securely.
• Payment processing: Processing deposits from Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card payments; crediting winnings to your balance; processing withdrawal requests to your registered PKR payment method.
• Customer support: Responding to your queries, resolving disputes about game outcomes, investigating complaints and fulfilling your account requests.
• Fraud prevention and security: Detecting and preventing unauthorised account access, multiple account abuse, payment fraud, money laundering and other prohibited conduct as defined in our Terms and Conditions.
• Regulatory compliance: Fulfilling KYC and AML obligations required by dk365's gaming licence, including identity verification for large withdrawals.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players use dk365, which games are most popular, where technical issues occur, and how the platform can be improved.
• Responsible gaming: Monitoring gameplay patterns against responsible gaming criteria, applying limits you have set, and detecting signs of problem gambling behaviour as required under our licence.
• Marketing communications: Sending you information about dk365 promotions, bonuses and new features — only if you have opted in to receive them. You can opt out at any time from your account settings.

DK365 does not sell, rent or trade your personal information to third parties for their commercial use. Your data is shared only in the following limited and controlled circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT networks and card processing partners receive the minimum data necessary to process your transactions — your wallet number or account details and the transaction amount. These partners are contractually bound to use this data only for transaction processing.
• Identity verification providers: Where dk365 uses a third-party KYC service to verify your identity documents, your name, date of birth and document image are shared with that provider. The provider is contractually bound to retain data only for the verification period.
• Regulatory and licensing authorities: DK365 may be legally required to share account and transaction data with its licensing authority, financial intelligence units or law enforcement agencies in response to lawful requests or investigations.
• Game providers: Third-party game studios that supply games available on dk365 may receive anonymised session data for game integrity and certification purposes. Individual player identities are not disclosed to game providers.
• Technology infrastructure providers: Cloud hosting, CDN and cybersecurity providers that support dk365's infrastructure may process data as part of service delivery. These providers operate under strict data processing agreements.

All third parties that process personal data on behalf of dk365 are contractually required to maintain the same standard of data protection that dk365 applies. DK365 does not knowingly permit third parties to use your data for purposes other than those for which it was originally shared.

DK365 implements multiple layers of security to protect your personal data from unauthorised access, disclosure, alteration or destruction:

• Encryption in transit: All data transmitted between your device and dk365 servers is encrypted using 256-bit SSL/TLS. This applies to every page, every login, every deposit and withdrawal request, and every support message.
• Encryption at rest: Personal data stored in dk365's databases is encrypted at rest. Payment credentials are tokenised — we do not store full payment account numbers in readable form.
• Password security: Your dk365 account password is hashed using a strong one-way hashing algorithm before storage. DK365 staff cannot read your password and will never ask you for it.
• Access controls: Access to personal data within dk365 is restricted on a need-to-know basis. Only staff members whose role genuinely requires access to specific data are permitted to view it. All access is logged.
• Fraud detection systems: Automated systems monitor account activity 24/7 for signs of unauthorised access, including unusual login locations, rapid credential attempts and suspicious transaction patterns.
• Regular security audits: DK365 undergoes periodic third-party security assessments. Identified vulnerabilities are addressed within defined response windows based on severity.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that affects your personal information, dk365 will notify you within a reasonable timeframe and take all necessary steps to mitigate the impact.

DK365 uses cookies and similar local storage technologies to make the platform function correctly and to improve your experience. Here is a clear breakdown of what we use and why:

You can manage cookie preferences through your browser settings at any time. Blocking essential cookies will prevent dk365 from functioning correctly — you will not be able to log in or process payments if essential cookies are disabled.

DK365 does not use cookies to track your activity on other websites. Cookies are scoped to dk365.im only.

DK365 retains personal data for as long as it is genuinely necessary for the purposes for which it was collected. The retention periods we apply are:

• Active account data: Retained for the lifetime of your dk365 account. When your account is closed, most personal data is deleted within 48 hours.
• Financial and transaction records: Retained for a minimum of 5 years from the date of the transaction. This is required by anti-money laundering and financial compliance regulations applicable to dk365's gaming licence.
• Identity verification documents: Retained for a minimum of 5 years after account closure as required under KYC compliance obligations.
• Customer support records: Retained for 2 years from the date of the communication, or longer if a dispute is ongoing.
• Technical logs (IP addresses, session data): Retained for 90 days for security monitoring, then anonymised and aggregated for analytics purposes.
• Marketing preferences: Retained until you withdraw consent or close your account.

After the applicable retention period, personal data is securely deleted or anonymised so it can no longer identify you.

As a dk365 player, you have the following rights over your personal data. All requests are processed within 48 hours: