rk365 Privacy Policy

1 Who We Are — The Data Controller

rk365 ("the Company", "we", "us", "our") is the data controller responsible for the personal information collected and processed through the rk365 online casino and sports betting platform, accessible at rk365.app ("the Platform"). rk365 operates under an international gaming license and is committed to handling all player data in accordance with internationally recognised data protection principles.

For the purposes of this Privacy Policy, "personal data" means any information that identifies or could reasonably be used to identify you as a natural person — including your full name, CNIC number, date of birth, Pakistani mobile number, residential address, email address, IP address, and PKR transaction records.

This Privacy Policy applies exclusively to data collected through the rk365 Platform. It does not govern the privacy practices of third-party websites, payment processors, or service providers that may be referenced within the Platform — those parties maintain their own separate privacy policies.

2 Personal Data We Collect

rk365 collects the following categories of personal data from registered players and Platform visitors:

rk365 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or biometric data, except where expressly required by applicable regulatory identity verification standards.

3 How We Collect Your Data

rk365 collects personal data through the following means:

• Direct Collection: Data you provide voluntarily when creating your rk365 account, completing KYC verification, making PKR deposits or withdrawals, or contacting rk365 support via Live Chat or email.
• Automated Collection: Technical data such as IP addresses, device identifiers, and session data collected automatically when you access the rk365 Platform, through cookies, web beacons, and server log files.
• Payment Processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and MCB when you complete a deposit or withdrawal through the rk365 cashier.
• Identity Verification Providers: Verification results and document authentication data provided by rk365's contracted KYC service providers when you submit identity documents for account verification.
• Third-Party Analytics: Anonymised and aggregated Platform usage statistics from analytics tools used to monitor and improve rk365 Platform performance. These tools do not receive personally identifiable information.

4 How We Use Your Personal Data

rk365 uses the personal data we collect for the following specific purposes:

• Account Management: To create, maintain, and administer your rk365 account, including processing your PKR deposits and withdrawals via JazzCash, EasyPaisa, and Pakistani bank transfers.
• Identity & Age Verification: To confirm that you meet the minimum age requirement of 21 years and to verify your identity in compliance with rk365's international licensing obligations and anti-money laundering requirements.
• Service Delivery: To provide you with access to rk365 casino games, sports betting markets (including PSL and international cricket), live dealer tables, and all other Platform features.
• Customer Support: To respond to your queries, resolve disputes, process responsible gaming requests (such as deposit limit adjustments or self-exclusion applications), and maintain a record of your communications with the rk365 support team.
• Legal & Regulatory Compliance: To fulfil rk365's obligations under its international gaming license, including record-keeping, anti-money laundering (AML) monitoring, and reporting obligations to relevant regulatory authorities.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other activities that breach rk365's Terms & Conditions.
• Responsible Gaming: To monitor player activity patterns for signs of problem gambling behaviour and to administer responsible gaming tools including deposit limits, session reminders, and self-exclusion periods.
• Platform Improvement: To analyse aggregated and anonymised usage data for the purpose of improving the rk365 Platform's performance, usability, and range of services offered to Pakistani players.
• Marketing Communications: To send you promotional offers, bonus notifications, and Platform updates, where you have provided consent to receive such communications. You may withdraw this consent at any time by contacting rk365 support.

5 Legal Basis for Processing

rk365 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to deliver the rk365 services you have contracted to receive — including account management, game access, and PKR payment processing.
• Legal Obligation: Processing required to comply with rk365's obligations under its international gaming license, applicable anti-money laundering legislation, and lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing undertaken for the legitimate business interests of rk365, including fraud detection, Platform security monitoring, responsible gaming oversight, and Platform improvement — where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You retain the right to withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Third-Party Disclosure

rk365 does not sell your personal data. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and MCB receive the minimum transactional data necessary to process your PKR deposits and withdrawals. These processors operate under their own privacy and security frameworks.
• KYC & Identity Verification Providers: rk365's contracted identity verification partners receive copies of identity documents you submit for KYC verification. These partners are bound by strict confidentiality and data security obligations.
• Regulatory Authorities: rk365 will disclose player data to its licensing regulatory authority, law enforcement agencies, or government bodies where required to do so by law or under the conditions of its international gaming license.
• Legal Proceedings: rk365 may disclose personal data where required by a court order, subpoena, or other binding legal process issued in a jurisdiction with authority over the Company.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of rk365's business, player data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

7 PKR Payments & Financial Data

Given the PKR-denominated nature of the rk365 Platform and its integration with Pakistani payment systems, the following specific provisions apply to financial data:

• JazzCash & EasyPaisa: rk365 processes mobile wallet transactions through encrypted API connections with JazzCash and EasyPaisa. rk365 stores transaction reference numbers and PKR amounts for account history and dispute resolution purposes. Full mobile wallet credentials are never stored on rk365 servers.
• Bank Transfers (HBL, UBL, Meezan Bank, MCB): Bank account numbers provided for withdrawal processing are stored in an encrypted format and used exclusively for the purpose of processing outgoing PKR withdrawals to your verified account.
• Transaction History: Your complete PKR deposit and withdrawal history is accessible from your rk365 account dashboard at all times. rk365 retains transaction records for a minimum period of five years in compliance with its regulatory obligations.
• AML Monitoring: rk365 is required under its international gaming license to monitor PKR transaction patterns for indicators of money laundering activity. This monitoring is conducted on an automated basis and does not involve manual review of individual transactions except where an automated flag is triggered.

8 Cookies & Tracking Technologies

rk365 uses cookies and similar tracking technologies to operate and improve the Platform. The following cookie categories are used:

• Strictly Necessary Cookies: These cookies are essential for the rk365 Platform to function. They maintain your logged-in session, store your language preference, and ensure secure navigation between game and cashier sections. These cookies cannot be disabled.
• Performance & Analytics Cookies: These cookies collect anonymised information about how players use the rk365 Platform — such as which game categories are most visited and how long sessions typically last. This data is used to improve Platform performance and user experience.
• Functional Cookies: These cookies remember your Platform preferences, such as your preferred sports markets (PSL, international cricket) or most recently played casino game categories, to provide a more personalised experience on return visits.
• Marketing Cookies: rk365 may use these cookies to display relevant promotional content within the Platform. These cookies are only placed with your consent and do not track your activity on external websites.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use the rk365 Platform. For detailed cookie management instructions specific to your browser, please consult your browser's help documentation.

9 Data Retention

rk365 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to the following minimum retention periods required by our regulatory obligations:

• Account Data: Retained for the duration of your rk365 account and for a minimum of five years following account closure, in compliance with the record-keeping requirements of rk365's international gaming license.
• Financial & Transaction Data: PKR deposit and withdrawal records are retained for a minimum of five years from the date of the transaction, in accordance with anti-money laundering regulatory requirements applicable to licensed gaming operators.
• KYC & Identity Documents: Copies of CNIC and other identity documents are retained for the duration of your account and for five years following closure, or longer where required by a regulatory investigation or legal proceeding.
• Communications Data: Live Chat transcripts and email correspondence are retained for two years from the date of the communication, or longer where relevant to an unresolved dispute or regulatory matter.
• Technical & Usage Data: Server log data and session records are retained for 12 months from collection, after which they are anonymised or deleted.

Following the expiry of the applicable retention period, rk365 will securely delete or anonymise your personal data in accordance with industry-standard data destruction procedures.

10 Data Security Measures

rk365 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the rk365 Platform.
• AES-256 encryption for personal data and financial records stored on rk365 servers.
• Two-factor authentication (2FA) available for all rk365 player accounts — strongly recommended for all Pakistani players accessing the Platform from mobile devices.
• Role-based access controls limiting rk365 staff access to personal data on a strict need-to-know basis.
• Regular independent security audits and penetration testing of the rk365 Platform infrastructure.
• Dedicated information security personnel responsible for monitoring, incident response, and ongoing security policy compliance.

While rk365 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. In the event of a data breach that poses a material risk to your rights or interests, rk365 will notify affected players without undue delay in accordance with its regulatory obligations.

11 Your Data Rights

As a registered rk365 player, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of all personal data held by rk365 relating to your account. rk365 will respond to verified data access requests within 30 days.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held by rk365. Name and date of birth corrections require submission of updated identity documentation.
• Right to Erasure: You may request deletion of your personal data where rk365 no longer has a legal basis for retaining it. Please note that rk365 cannot delete data where retention is required by its regulatory obligations — such as AML transaction records and KYC documentation.
• Right to Restriction: You may request that rk365 restrict the processing of your personal data in certain circumstances — for example, while a data accuracy dispute is being resolved.
• Right to Data Portability: You may request a structured, machine-readable copy of personal data you have provided to rk365, where processing is based on your consent or on a contract between you and rk365.
• Right to Object: You may object to rk365 processing your personal data for marketing purposes at any time. You may also object to processing based on legitimate interests, subject to rk365's ability to demonstrate compelling grounds for continued processing.
• Right to Withdraw Consent: Where processing is based on your consent — such as marketing communications — you may withdraw that consent at any time by contacting rk365 support.

To exercise any of the above rights, please contact rk365 support via Live Chat or at [email protected]. rk365 may need to verify your identity before actioning any data rights request.

12 Children & Minors

The rk365 Platform is strictly intended for adults aged 21 years and above. rk365 does not knowingly collect personal data from any individual under the age of 21. If rk365 discovers or is notified that an account belongs to a person under 21 years of age, the account will be immediately closed, all personal data associated with it will be deleted in accordance with rk365's data destruction procedures, and any deposited funds will be handled in accordance with applicable regulatory requirements.

13 International Data Transfers

As an internationally licensed gaming operator, rk365 may transfer personal data to servers or service providers located outside Pakistan. Where such transfers occur, rk365 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that applied within the Platform's primary jurisdiction. These safeguards may include contractual data protection clauses, adequacy determinations, or equivalent binding frameworks recognised under applicable data protection law.

In particular, PKR payment data transmitted to JazzCash and EasyPaisa is processed within Pakistan's domestic payment infrastructure and does not leave Pakistani jurisdiction. Bank transfer data involving HBL, UBL, Meezan Bank, and MCB is likewise processed within Pakistan's regulated banking system.

14 Amendments to This Privacy Policy

rk365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, regulatory requirements, or Platform functionality. Material amendments will be communicated to registered players via the mobile number or email address on file for their rk365 account, and/or by means of a prominent notice on the Platform, at least seven days before the amended policy takes effect.

The effective date at the top of this Privacy Policy indicates when the current version came into force. Your continued use of the rk365 Platform following the effective date of any amendment constitutes acceptance of the updated policy. If you do not accept the amended Privacy Policy, you must close your rk365 account before the effective date of the change.

rk365 recommends that all players review this Privacy Policy periodically to stay informed about how their data is being handled. Archived versions of previous Privacy Policy documents are available on request from rk365 support.

15 Contact & Privacy Complaints

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a privacy complaint, rk365 can be contacted through the following channels:

• Live Chat: Available on the rk365 Platform 24 hours a day, 7 days a week. Average response time is under two minutes during peak hours.
• Email: [email protected] — privacy-related queries are responded to within two business hours during operating hours.
• Support Hours: Pakistan Standard Time, 8am to midnight, every day of the year. Support is available in both English and Urdu.

rk365 is committed to resolving all privacy complaints promptly and fairly through its internal complaints procedure. If you are not satisfied with the outcome of an internal complaint, you may refer the matter to the dispute resolution body specified in rk365's gaming license conditions.