Privacy Policy — 5pk365

5pk365 is an online casino and sports betting platform operating under an internationally recognised gaming licence. For the purposes of data protection law, 5pk365 is the data controller — meaning 5pk365 is the entity that determines why and how your personal data is processed.

The 5pk365 platform is operated for players across Pakistan, including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and other cities. All data processing activities are conducted in accordance with the data protection requirements of the jurisdiction in which 5pk365 holds its gaming licence, as well as with reference to internationally recognised data protection standards.

5pk365 collects personal data through several channels: directly from you when you register an account or contact support, automatically through your use of the platform, and from third-party identity verification and payment service providers. The categories of personal data we collect are set out in the table below.

2.1 Data You Are Not Required to Provide

Certain data fields during registration are optional (for example, a secondary contact number). You are never required to provide more data than is necessary for the specific purpose — however, failure to provide data required for KYC verification will result in account restrictions in accordance with our licensing obligations.

2.2 Sensitive Personal Data

5pk365 does not intentionally collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, health data, or biometric data for identification purposes) except where a government-issued identity document provided for KYC purposes incidentally contains such information. In that case, the information is used solely for the purpose of identity verification and is handled with heightened security measures.

5pk365 uses the personal data it collects for the following purposes. Each purpose is linked to a lawful basis, which is detailed in Section 4.

• Account creation and management: Processing your registration, verifying your identity, maintaining your account, and enabling you to log in and access the 5pk365 platform.
• Processing financial transactions: Facilitating deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, recording transaction history, and detecting payment fraud.
• Regulatory compliance: Meeting Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations imposed by our gaming licence, including transaction monitoring and suspicious activity reporting.
• Providing gaming services: Operating casino games, slot titles, live dealer tables, and cricket and sports betting markets; recording gameplay for audit, dispute resolution, and fairness purposes.
• Responsible gaming: Monitoring your gaming activity to identify potential problem gambling patterns, administering deposit limits, cooling-off periods, and self-exclusion requests.
• Customer support: Responding to your queries, resolving complaints, and maintaining records of support interactions for quality assurance.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, account takeover attempts, collusion, and other prohibited conduct.
• Marketing communications: Sending promotional offers, bonus notifications, and PSL-related betting promotions to account holders who have consented to receive such communications. You may withdraw consent at any time.
• Platform improvement: Analysing aggregated and anonymised usage data to understand how players use 5pk365, identify technical issues, and improve the platform experience.

5pk365 processes your personal data only where it has a valid lawful basis for doing so. The primary lawful bases relied upon by 5pk365 are as follows:

• Contractual necessity: Processing required to create and maintain your account, facilitate deposits and withdrawals, and deliver the gaming services you have signed up for. Without this processing, 5pk365 cannot fulfil its obligations to you as an account holder.
• Legal obligation: Processing required to comply with 5pk365's gaming licence conditions, including KYC identity verification, AML transaction monitoring, age verification, and responsible gaming obligations.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and aggregated analytics — where those interests are not overridden by your data protection rights. 5pk365 has conducted legitimate interest assessments for all data processing activities in this category.
• Consent: Processing for direct marketing communications and non-essential cookies, where you have provided clear, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

5pk365 does not sell your personal data to any third party. Personal data is shared only where strictly necessary with the categories of trusted third parties listed below, all of whom are bound by contractual obligations to handle your data securely and only for the specified purpose.

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — to process your deposits and withdrawals. Each processor receives only the data necessary to complete the specific transaction.
• KYC and identity verification providers: Regulated third-party providers used to verify your CNIC, passport, or other identity documents as required under our gaming licence. These providers operate under their own regulated data protection frameworks.
• Game content providers: Licensed casino game studios and live dealer operators who supply games available on the 5pk365 platform. These providers may receive limited technical session data necessary to deliver their games but do not receive your identity data.
• Fraud prevention services: Third-party fraud detection and risk management providers used to identify suspicious account activity, payment fraud, and prohibited conduct.
• Regulatory authorities: 5pk365's licensing authority and, where legally required, law enforcement agencies or financial intelligence units. Data shared in this context is limited to what is legally required and is subject to confidentiality obligations.
• IT infrastructure providers: Cloud hosting and content delivery providers whose infrastructure powers the 5pk365 platform. These providers process data strictly on 5pk365's instructions and under binding data processing agreements.

5pk365 uses cookies and similar tracking technologies on its platform to ensure the site functions correctly, to remember your preferences, and — with your consent — to analyse usage and deliver relevant promotional content.

6.1 Types of Cookies Used

• Essential cookies: Required for the 5pk365 platform to function. These include session authentication cookies that keep you logged in, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Preference cookies: Remember your language settings, display preferences, and responsible gaming limit configurations. Disabling these means your preferences will not be saved between sessions.
• Analytics cookies: Used with your consent to understand how players navigate the 5pk365 platform, which pages are visited most frequently, and where technical issues occur. Data collected via analytics cookies is aggregated and anonymised.
• Marketing cookies: Used with your consent to track promotional campaign performance and deliver relevant bonus offers. You may withdraw consent for marketing cookies at any time via the cookie preferences panel.

6.2 Managing Your Cookie Preferences

You may review and update your cookie preferences at any time by accessing the Cookie Settings option available in the footer of the 5pk365 platform. You can also manage cookies through your browser settings — however, please note that disabling essential cookies will impair your ability to use the platform. Withdrawing consent for optional cookies does not affect any processing that took place before the withdrawal.

5pk365 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required to comply with our legal, regulatory, and licensing obligations. The table below provides an overview of standard retention periods.

Once the applicable retention period expires, personal data is either securely deleted or irreversibly anonymised so that it can no longer be linked to you as an individual. Anonymised and aggregated data may be retained indefinitely for statistical and business planning purposes.

As an individual whose personal data is processed by 5pk365, you have a number of rights under applicable data protection law. These rights are summarised below. To exercise any of these rights, please contact the 5pk365 Data Protection Officer using the details in Section 13. We will respond to valid requests within 30 calendar days.

5pk365 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS encryption: All data transmitted between your device and 5pk365 servers is encrypted using Transport Layer Security (TLS 1.2 or higher), ensuring your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encryption at rest: Sensitive personal data stored on 5pk365 servers, including identity documents and financial data, is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to 5pk365 employees and contractors who require it to perform their specific role. All staff with data access receive regular data protection training and are bound by confidentiality obligations.
• Multi-factor authentication: Administrative access to 5pk365 internal systems is protected by multi-factor authentication. We strongly recommend that all account holders enable two-factor authentication on their 5pk365 account as an additional layer of personal security.
• Penetration testing: 5pk365 commissions regular independent penetration testing and security audits of its platform to identify and address vulnerabilities before they can be exploited.
• Incident response: 5pk365 maintains a formal data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, you will be notified without undue delay in accordance with our regulatory obligations.

While 5pk365 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your login credentials confidential and for notifying 5pk365 immediately if you suspect any unauthorised access to your account.

As an internationally licensed platform serving players in Pakistan, 5pk365 may transfer personal data to, and process it in, countries outside Pakistan. This may occur, for example, when data is processed by our KYC verification provider, game content providers, or cloud infrastructure services.

Wherever personal data is transferred internationally, 5pk365 ensures that appropriate safeguards are in place to protect your data to an equivalent standard as applies within the jurisdiction of our gaming licence. These safeguards include:

• Contractual clauses that require the recipient to protect your data to the same standard as 5pk365 is required to.
• Transferring data only to third parties that operate within jurisdictions recognised as providing an adequate level of data protection.
• Binding corporate rules where data is shared within a regulated group of companies.

If you would like further information about the specific safeguards in place for international data transfers, please contact the 5pk365 Data Protection Officer.

5pk365 does not knowingly collect personal data from any person under the age of 21. The 5pk365 platform is strictly intended for adults aged 21 and over. Age verification is a mandatory step of the account registration and KYC process, and any account found to be operated by a person under 21 years of age will be immediately suspended.

If 5pk365 becomes aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe your child has registered on the 5pk365 platform, please contact our support team immediately at [email protected] so we can investigate and act without delay.

5pk365 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, licensing obligations, or applicable law. The version number and last updated date at the top of this document will always reflect the most current version.

Where a change is material — meaning it meaningfully affects how your personal data is used or your rights in relation to it — 5pk365 will notify registered account holders by email to their registered address, or via an in-platform notification, at least 14 days before the updated policy takes effect. Your continued use of the 5pk365 platform after the effective date of any updated policy constitutes your acknowledgement of the changes.

We encourage you to revisit this Privacy Policy from time to time to stay informed about how 5pk365 protects your data. Previous versions of this policy are available on request by contacting the Data Protection Officer.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or would like to raise a concern about how 5pk365 handles your personal data, please contact our Data Protection Officer (DPO):

All data rights requests must include your full name as registered on your 5pk365 account and your registered email address so that we can verify your identity before processing the request. We will not act on requests that cannot be sufficiently verified.

If you are not satisfied with our response to a data rights request or complaint, you have the right to escalate the matter to the data protection supervisory authority in the jurisdiction in which 5pk365 holds its gaming licence.