4pk365 Privacy Policy —
How We Protect Your Data

For the purposes of this Privacy Policy, the data controller responsible for the personal data of 4pk365 players is the entity operating the 4pk365 platform under its international gaming license. 4pk365 is responsible for determining the purposes and means of processing your personal data in connection with the operation of our sports betting, live casino, slots, crash games, bingo, and all associated account management services accessible at 4pk365.one.

All privacy-related enquiries, data subject access requests, and complaints regarding data processing by 4pk365 should be directed to our support team. Contact details are provided in Section 16 of this Policy.

This Privacy Policy applies to all personal data collected and processed by 4pk365 in connection with:

• Registration and maintenance of a player Account on the 4pk365 platform.
• Use of any 4pk365 product or Service, including sports betting, live casino games, slot games, crash games, bingo, and instant games.
• Deposits, withdrawals, and all payment processing activities conducted through 4pk365 payment partners including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK.
• Customer support communications conducted via live chat, email, or any other channel.
• Participation in promotions, bonus programs, loyalty schemes, or any other 4pk365 marketing activity.
• Use of the 4pk365 website at 4pk365.one, including passive data collection via cookies and similar technologies.

This Policy does not apply to third-party websites, services, or applications that may be linked to or accessible from the 4pk365 platform. 4pk365 is not responsible for the privacy practices of any such third parties.

4pk365 collects personal data through several channels. The categories of data collected, and the contexts in which they arise, are set out in the table below.

4pk365 processes personal data only where a valid legal basis exists. The legal bases on which we rely, and the categories of processing to which each applies, are as follows:

• Contract Performance: Processing your Identity Data, Contact Data, and Financial Data is necessary for us to provide the 4pk365 Services in accordance with our Terms & Conditions, including Account management, payment processing, and bet settlement.
• Legal Obligation: Processing for KYC verification, anti-money laundering (AML) compliance, responsible gaming monitoring, and record retention is required to comply with our obligations under our international gaming license.
• Legitimate Interests: Processing Technical Data for fraud detection, platform security, and service improvement is carried out on the basis of 4pk365's legitimate business interests, balanced against the rights and freedoms of our players.
• Consent: Where we send marketing communications by SMS, email, or push notification, we do so on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without penalty.

4pk365 uses collected personal data for the following specific purposes:

5.1 Account Management & Service Delivery

• Creating, maintaining, and securing your 4pk365 Account.
• Verifying your identity and eligibility (including age verification — 21+ requirement).
• Processing deposits and withdrawals via JazzCash, EasyPaisa, and other supported payment methods in PKR.
• Settling bets and paying out winnings accurately.
• Providing customer support in English and Urdu.

5.2 Regulatory Compliance & Anti-Fraud

• Conducting KYC and ongoing due diligence in accordance with our gaming license obligations.
• Monitoring for and detecting suspicious transaction patterns consistent with money laundering or fraud.
• Detecting and preventing the use of automated bots or other prohibited software.
• Identifying and preventing multi-accounting and bonus abuse.
• Maintaining records required by regulatory authorities for audit purposes.

5.3 Responsible Gaming

• Monitoring gaming activity to identify patterns potentially indicative of problem gambling.
• Enforcing player-set deposit limits, loss limits, session limits, and self-exclusion orders.
• Proactively contacting players where responsible gaming monitoring flags potential concern.

5.4 Platform Improvement & Analytics

• Analysing aggregated, anonymised usage data to improve platform performance and user experience.
• Testing new features and products before full deployment.
• Optimising page load performance for Pakistani mobile networks and budget Android devices.

5.5 Marketing Communications (Consent-Based Only)

• Sending promotional offers, bonus notifications, and game updates via SMS, email, or push notification — only where you have given explicit consent.
• Personalising promotional content based on your gaming preferences and activity history.

4pk365 shares personal data with third parties only in the following limited circumstances, and only to the extent necessary for the relevant purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK receive the financial data necessary to process your deposits and withdrawals. These entities are independently regulated financial institutions operating under their own privacy and security standards.
• Game Providers: Certified gaming studios (including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Hacksaw Gaming) may receive your session identifiers in connection with live dealer and RNG game product delivery. They do not receive your full personal profile.
• Regulatory Authorities: We may be required to disclose personal data to our licensing authority, or to law enforcement or regulatory bodies acting with lawful authority, where required by applicable law or our gaming license conditions.
• KYC & Identity Verification Providers: Third-party identity verification services may process your CNIC data and photographs for the sole purpose of verifying your identity and age in compliance with our gaming license requirements.
• Fraud Prevention Services: We share Technical Data (such as IP addresses and device fingerprints) with fraud detection service providers to protect the platform and its players from criminal activity.
• Legal Proceedings: We may disclose personal data where required by court order, subpoena, or other legally binding demand.

All third parties with whom 4pk365 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for purposes other than those for which it was disclosed.

4pk365 retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with our legal obligations under our gaming license. The following retention periods apply:

• Account Data (Identity, Contact, Financial): Retained for the duration of your Account relationship with 4pk365, and for a period of five (5) years following Account closure, in compliance with anti-money laundering record-keeping requirements under our gaming license.
• Gaming Activity Data: Retained for five (5) years from the date of each transaction or gaming event, for regulatory compliance and dispute resolution purposes.
• KYC Documents (CNIC copies, photographs): Retained for five (5) years from the date of verification, in compliance with gaming license KYC record-keeping obligations.
• Technical Data (IP logs, session data): Retained for twelve (12) months from collection, unless required to be retained longer for active fraud investigation or legal proceedings.
• Customer Support Communications: Retained for three (3) years from the date of the communication, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of consent validity and for three (3) years following withdrawal of consent, to demonstrate compliance.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to any individual player.

4pk365 implements a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our technical security measures include:

• 256-Bit TLS Encryption: All data transmitted between your device and 4pk365 servers is encrypted using TLS 1.2 or higher, including across all Pakistani mobile network connections.
• AES-256 Data Encryption at Rest: Personal data stored in 4pk365 databases — including Identity Data, Financial Data, and KYC documents — is encrypted at rest using AES-256 standard encryption.
• Password Hashing: Account passwords are never stored in plain text. They are hashed using a one-way cryptographic function before storage. Even 4pk365 staff cannot retrieve your password.
• Two-Factor Authentication (2FA): 4pk365 offers SMS OTP and authenticator app-based 2FA to all players, providing an additional layer of Account access protection beyond the password.
• Access Controls: Internal access to personal data is restricted to authorised 4pk365 staff on a need-to-know basis. Access logs are maintained and regularly reviewed.
• Penetration Testing: The 4pk365 platform undergoes periodic independent security penetration testing to identify and remediate potential vulnerabilities.
• Data Breach Response Protocol: 4pk365 maintains a documented data breach response plan. In the event of a breach affecting player personal data, affected players will be notified in accordance with our gaming license obligations and applicable data protection requirements.

4pk365 uses cookies and similar tracking technologies on its website to deliver and improve our Services. A cookie is a small text file placed on your device by the 4pk365 website when you visit. The following categories of cookies are used:

You may manage your cookie preferences through your browser settings. Please note that disabling Strictly Necessary cookies will affect the functionality of the 4pk365 platform, including your ability to maintain a logged-in session. Disabling Functional cookies may result in loss of saved preferences.

4pk365 may send you marketing communications — including bonus offers, promotional alerts, new game announcements, and PSL betting previews — by SMS to your registered Pakistani mobile number, by email, or by in-platform notification. All marketing communications are sent only where you have provided explicit consent during account registration or at a subsequent point.

You may withdraw your consent to marketing communications at any time by:

• Updating your communication preferences in Account Settings; or
• Replying STOP to any SMS communication from 4pk365; or
• Contacting our support team and requesting removal from all marketing communications.

Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal, and does not prevent 4pk365 from sending you transactional communications (such as deposit confirmations, withdrawal notifications, or security alerts) which are sent on the basis of contract performance rather than consent.

If 4pk365 discovers or has reasonable grounds to believe that a player Account is held by an individual under 21 years of age, we will:

• Immediately suspend the Account pending investigation.
• Permanently close the Account upon confirmation of underage status.
• Void all bets and forfeit all winnings associated with the Account.
• Securely delete the personal data of the underage individual in accordance with applicable data protection principles, subject to any legal obligation to retain records of the underage access incident.
• Refund any net deposits (original deposit amounts less any amounts already withdrawn) to the payment source where technically possible.

Parents and guardians who believe a minor may have accessed 4pk365 are urged to contact our support team immediately. We will act promptly on all such reports.

As a 4pk365 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our support team with sufficient information to verify your identity. We will respond within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of all personal data held by 4pk365 about you, together with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal obligation to retain certain categories of data under our gaming license (see Section 7).
• Right to Restriction: You have the right to request that processing of your personal data be restricted in certain circumstances — for example, where you dispute the accuracy of the data while we investigate.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without penalty, without affecting the lawfulness of prior processing.

The operation of the 4pk365 platform may involve the transfer of personal data to servers or service providers located outside Pakistan. Such transfers occur in connection with our payment processing partners, game studio providers, KYC verification services, and cloud infrastructure providers.

Where personal data is transferred internationally, 4pk365 implements appropriate safeguards to ensure that the data receives an equivalent level of protection to that applicable under our gaming license jurisdiction, including through the use of contractual data protection clauses with all recipient third parties. By using the 4pk365 platform, you acknowledge and consent to the transfer of your personal data in the circumstances described in this Policy.

The 4pk365 platform incorporates games, tools, and services provided by third-party partners. When you interact with a third-party game or service accessible through 4pk365 — such as a live casino studio stream from Evolution Gaming or an RNG slot from Pragmatic Play — that third party may independently process technical data about your session in accordance with their own privacy policies.

4pk365 exercises contractual oversight over how our technology partners handle data received through the 4pk365 platform, including requiring data processing agreements that align with our privacy commitments. However, 4pk365 is not responsible for the independent privacy practices of any third party acting outside the scope of their contractual relationship with us.

4pk365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, the services we offer, or the regulatory environment applicable to our gaming license. When material changes are made, we will provide advance notice via SMS to your registered Pakistani mobile number or via a prominent notice displayed on the 4pk365 platform before the updated Policy takes effect.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We recommend reviewing this Policy periodically. Your continued use of the 4pk365 platform following publication of an updated Policy constitutes your acceptance of the revised terms.

For all privacy-related enquiries, data subject access requests, consent withdrawal requests, or complaints regarding 4pk365's data processing practices, please contact our support team using the details below. We are committed to responding to all privacy enquiries within 30 calendar days.

If you are dissatisfied with our response to a privacy complaint, you have the right to escalate your complaint to the supervisory authority under our gaming license jurisdiction. Details of the relevant authority will be provided to you upon request.