Six Ways kr365 Protects Your Privacy
End-to-End Encryption
All data transmitted between your device and the kr365 servers is encrypted using industry-standard TLS protocols. Your login credentials, payment details, and personal information are never exposed in plain text at any point during transit.
No Data Sales to Third Parties
kr365 does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. Your information is used exclusively to operate and improve the kr365 service as described in this policy.
Purpose Limitation
We collect only the data that is strictly necessary to deliver the kr365 service, comply with legal obligations, and prevent fraud. Data collected for one specific purpose is not repurposed without your explicit consent or a clear legal basis.
Player Rights Respected
You have the right to access, correct, export, and request deletion of your personal data held by kr365. Submit any data rights request to our support team and we will respond within the timeframes set out in this policy.
Defined Retention Periods
kr365 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or tax obligations. Data is securely deleted or anonymised at the end of its retention period.
Breach Notification
In the unlikely event of a data security breach that poses a risk to your rights, kr365 will notify affected players promptly — within 72 hours of becoming aware of the breach — describing the nature of the incident and the steps being taken to address it.
1 Who We Are
This Privacy Policy is issued by kr365 ("kr365", "we", "us", "our"), the operator of the online gaming platform accessible at kr365.app. kr365 is the data controller responsible for the personal data of registered players and visitors to the kr365 website and mobile application.
kr365 is a Pakistan-focused online casino and gaming platform offering live dealer games, Jackpot Slots, Mega Wheel, Cockfighting, and other gaming categories. All services are denominated in Pakistani Rupees (PKR) and are accessed by players across Pakistan, including in Karachi, Lahore, Islamabad, Rawalpindi, Peshawar, and Quetta.
For any privacy-related queries, complaints, or data rights requests, you may contact the kr365 Privacy Team at [email protected] (displayed as plain text — not a clickable link).
2 Personal Data We Collect
The following categories of personal data may be collected by kr365 depending on how you interact with the platform:
| Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, nationality, gender | Registration and KYC verification |
| Contact Data | Email address, Pakistani mobile number, city of residence | Registration and account updates |
| Financial Data | Easypaisa/JazzCash/Raast/HBL/UBL account references, PKR transaction amounts and timestamps | Deposits, withdrawals, KYC |
| Gaming Data | Wagers placed, games played, session durations, wins/losses, bonus usage | Active gaming sessions |
| Technical Data | IP address, device type, operating system, browser version, network carrier | Every platform visit |
| Communication Data | Support chat transcripts, WhatsApp/Telegram message content, email correspondence | Support interactions |
| Marketing Data | Communication preferences, promotional opt-ins/opt-outs, campaign response data | Where consent is given |
3 How We Collect Your Data
3.1 Directly from You
The majority of personal data held by kr365 is provided directly by you during the registration process, when completing identity verification (KYC), when making deposits or withdrawals via Easypaisa, JazzCash, Raast, HBL, UBL, or SadaPay, and when communicating with the kr365 support team via Live Chat, WhatsApp, Telegram, or email.
3.2 Automatically via Technology
When you access kr365.app or the kr365 mobile application, technical data is collected automatically via server logs, cookies, and similar tracking technologies. This includes your IP address, the pages you visit, the duration of your session, and the device and browser you are using. This data helps kr365 identify and resolve technical issues, detect fraud, and improve platform performance for Pakistani network conditions.
3.3 From Third Parties
kr365 may receive limited personal data from third-party identity verification and fraud prevention providers during the KYC process. We may also receive data from payment processors confirming the status and outcome of PKR transactions. Any data received from third parties is used strictly in accordance with this Privacy Policy and only to the extent necessary to complete the relevant process.
4 How and Why We Use Your Data
kr365 uses your personal data for the following specific purposes:
- Account Creation and Management: To register your account, verify your identity, maintain your player profile, and enable access to all kr365 platform features including live games, Jackpot Slots, and the Mega Wheel.
- Payment Processing: To process PKR deposits and withdrawals via your chosen payment method (Easypaisa, JazzCash, Raast, SadaPay, HBL, UBL), verify payment method ownership, and maintain accurate transaction records.
- Legal and Regulatory Compliance: To fulfil Know Your Customer (KYC) obligations, comply with anti-money laundering requirements, respond to lawful requests from regulatory authorities, and maintain records as required by applicable law.
- Fraud Prevention and Security: To detect and investigate suspicious activity, prevent the creation of duplicate accounts, identify and block attempts to circumvent platform rules, and protect the integrity of the gaming environment for all players.
- Responsible Gaming: To monitor gaming patterns that may indicate problematic behaviour, enforce deposit limits and self-exclusion restrictions set by players, and fulfil kr365's duty of care obligations to adult players.
- Customer Support: To respond to your enquiries, resolve account issues, process complaints, and maintain records of support interactions for quality assurance purposes.
- Platform Improvement: To analyse aggregated, anonymised usage data to understand how the platform is used, identify areas for improvement, and develop new features that better serve players in Pakistan.
- Marketing Communications: To send you promotional offers, bonus notifications, and platform news, but only where you have provided explicit consent. You may withdraw marketing consent at any time by contacting [email protected].
5 Legal Basis for Processing
kr365 processes your personal data under one or more of the following legal bases:
- Contract Performance: Processing necessary to register your account, facilitate gaming activity, process payments, and deliver the core kr365 service as agreed when you accepted the Terms & Conditions.
- Legal Obligation: Processing required to comply with applicable laws and regulations, including identity verification, anti-money laundering screening, and record-keeping requirements.
- Legitimate Interests: Processing for fraud prevention, platform security, product improvement, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
- Consent: Processing for marketing communications and the use of non-essential cookies, where you have provided explicit, freely given, informed, and unambiguous consent that can be withdrawn at any time without detriment.
6 Sharing Your Personal Data
kr365 does not sell or rent your personal data. We share your data with third parties only in the specific circumstances described below, and only to the minimum extent necessary:
- Payment Processors: Easypaisa, JazzCash, Raast infrastructure providers, SadaPay, HBL, UBL, and other PKR payment service providers receive the transaction data necessary to process your deposits and withdrawals. These providers have their own privacy policies governing how they handle your data.
- Identity Verification Partners: Third-party KYC and document verification providers receive identity documents and personal details where verification is required. These partners are bound by strict confidentiality obligations.
- Fraud and Security Providers: Specialist fraud detection and cybersecurity service providers may receive technical data (such as IP addresses and device fingerprints) to assist in identifying and preventing fraudulent activity on the platform.
- Legal and Regulatory Authorities: kr365 may disclose your personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required by a valid legal order, subpoena, or regulatory requirement.
- Technology Infrastructure Providers: Cloud hosting, database management, and platform infrastructure providers operate under strict data processing agreements that restrict their use of your data to the provision of services to kr365 only.
7 International Data Transfers
The kr365 platform is operated and primarily hosted with data security standards appropriate for player data. Where any personal data is processed by service providers located outside Pakistan, kr365 ensures that adequate safeguards are in place to protect your data to a standard equivalent to that described in this policy.
Such safeguards may include contractual data protection clauses incorporated into agreements with service providers, confirmation that the recipient jurisdiction maintains adequate data protection standards, or other appropriate technical and organisational measures. You may request further information about the safeguards applied to any specific international transfer by contacting our Privacy Team.
8 Data Retention
kr365 retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, plus any additional period required by legal, regulatory, tax, or accounting obligations. The following general retention periods apply:
- Account and identity data: Retained for the duration of the account relationship and for a minimum of 5 years following account closure, to satisfy anti-money laundering record-keeping requirements.
- Transaction data: PKR deposit and withdrawal records are retained for a minimum of 5 years following the date of the transaction.
- Gaming session data: Retained for a minimum of 2 years following the session date to support dispute resolution and responsible gaming monitoring.
- Marketing data: Retained until you withdraw consent, after which your details will be removed from active marketing lists within 30 days.
- Support communication records: Retained for 2 years following the closure of the support interaction.
- Technical and log data: Typically retained for 12 months unless a security investigation requires extended retention.
At the end of any applicable retention period, kr365 will securely delete or anonymise the relevant personal data. Anonymised data — where it is no longer possible to identify an individual — may be retained indefinitely for statistical and analytical purposes.
9 Your Privacy Rights
As a kr365 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the Privacy Team at [email protected] with your registered account email address and a description of your request.
- Right of Access: You may request a copy of all personal data held by kr365 relating to you. We will respond within 30 days of receiving a verified request.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Minor corrections can often be made directly from within your account settings.
- Right to Erasure: You may request that kr365 delete your personal data. This right applies in certain circumstances but is subject to overriding legal obligations — for example, kr365 may be required to retain certain financial and identity records for regulatory purposes even after an account is closed.
- Right to Restrict Processing: In certain circumstances you may request that kr365 restrict the processing of your personal data while a dispute about its accuracy or lawfulness is being resolved.
- Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interests, though kr365 may be able to demonstrate compelling grounds that override your objection.
- Right to Withdraw Consent: Where processing is based solely on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
kr365 will acknowledge receipt of all rights requests within 5 business days and aim to resolve them within 30 calendar days. Complex requests may require additional time, in which case we will notify you of the extended timeline.
10 Cookies and Tracking Technologies
kr365 uses cookies and similar tracking technologies on the kr365.app website and mobile application. Cookies are small data files stored on your device that help the platform function correctly, recognise returning users, and analyse platform usage.
10.1 Essential Cookies
These cookies are strictly necessary for the kr365 platform to operate. They enable core functions such as account login session management, maintaining your PKR balance display, and remembering your language and display preferences. Essential cookies cannot be disabled without severely impairing platform functionality.
10.2 Analytical Cookies
Analytical cookies help kr365 understand how players interact with the platform — which pages are visited most frequently, how long sessions last, and which features are used. This data is aggregated and anonymised and is used solely to improve the platform for all players. Analytical cookies require your consent and can be disabled without affecting core platform functionality.
10.3 Marketing Cookies
Where you have consented, marketing cookies allow kr365 to personalise promotions and bonus offers displayed on the platform based on your gaming activity and preferences. kr365 does not share marketing cookie data with external advertising networks.
You may manage cookie preferences via your browser settings or by contacting the kr365 support team. Disabling all cookies may affect certain aspects of the platform experience.
11 Children's Privacy
kr365 is strictly an adult platform for players aged 18 and above. We do not knowingly collect, process, or retain personal data of individuals under the age of 18. If kr365 becomes aware that personal data has been collected from a person under 18, that data will be deleted immediately and the associated account closed.
If you are a parent or guardian and you believe your child has provided personal data to kr365, please contact us immediately at [email protected]. We take child protection obligations extremely seriously and will act promptly on any verified notification of underage registration.
12 Security Measures
kr365 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:
- TLS Encryption: All data in transit between your device and kr365 servers is encrypted using TLS 1.2 or higher. This applies to the login process, payment transactions, and all account management interactions.
- Encrypted Data Storage: Sensitive personal data including identity documents and payment method references are stored in encrypted form at rest.
- Access Controls: Access to personal data within kr365's internal systems is restricted on a strict need-to-know basis. All staff with access to player data are subject to confidentiality obligations and regular security training.
- Two-Factor Authentication: kr365 offers optional two-factor authentication for player accounts, and enforces multi-factor authentication for all internal staff accessing production systems containing player data.
- Regular Security Audits: The kr365 platform undergoes periodic security assessments and vulnerability testing to identify and remediate potential weaknesses before they can be exploited.
- Incident Response: kr365 maintains a documented data breach response procedure. In the event of a breach affecting player data, notification will be issued within 72 hours of the breach being confirmed.
While kr365 takes every reasonable precaution to protect your data, no system can guarantee absolute security. Players are encouraged to use strong, unique passwords for their kr365 accounts, enable two-factor authentication, and report any suspected unauthorised access to [email protected] immediately.
13 Marketing Communications
Where you have given explicit consent during registration or at any subsequent point, kr365 may send you marketing communications by email, SMS, or in-platform notification. These communications may include information about new games, promotional bonuses, special offers related to the HBL Pakistan Super League cricket season, and other events relevant to your account activity.
You may withdraw your marketing consent and opt out of all promotional communications at any time by:
- Clicking the unsubscribe link included in any kr365 marketing email.
- Updating your communication preferences in your kr365 account settings.
- Contacting the support team at [email protected] with a clear opt-out request.
Your opt-out request will be processed within 5 business days, after which you will no longer receive marketing communications. Please note that transactional messages — such as deposit confirmations, withdrawal approvals, account security alerts, and support responses — are not marketing communications and will continue to be sent regardless of marketing opt-out status, as they are necessary for account management.
14 Changes to This Privacy Policy
kr365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. Where changes are material — meaning they affect your rights or the fundamental ways in which we process your data — kr365 will notify registered players via email to your registered address and/or via a prominent in-platform notification at least 14 days before the changes take effect.
The version date at the top of this page indicates when the policy was last substantively updated. We encourage you to review this Privacy Policy periodically. Your continued use of the kr365 platform following notification of changes constitutes your acknowledgement of the updated policy.
Historical versions of this Privacy Policy are available upon request by contacting the kr365 Privacy Team at [email protected]. This policy was last reviewed and updated on 1 January 2026.
15 Contact the kr365 Privacy Team
If you have any questions, concerns, or requests relating to this Privacy Policy or the way kr365 handles your personal data, please contact our Privacy Team using the details below. We are committed to addressing all privacy enquiries transparently and within a reasonable timeframe.
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24 hours a day, 7 days a week via kr365.app
- WhatsApp & Telegram: Contact details available within your logged-in account dashboard
Our Privacy Team will acknowledge receipt of your enquiry within 2 business days and aim to provide a substantive response within 14 business days. For complex requests or formal data rights submissions, the response window may extend to 30 days, in which case we will notify you of the delay and provide a progress update.