ck365 Privacy Policy — How We Protect Your Data

Introduction & Scope

1.1 Controller Identity. This Privacy Policy is issued by ck365 ("ck365," "we," "us," or "the Company"), the operator of the online casino and sports betting platform accessible at ck365.biz. ck365 acts as the data controller in respect of all personal data collected from registered players and website visitors.

1.2 Scope of Application. This Policy applies to all personal data collected by ck365 through: (a) the ck365 website at ck365.biz and all subdomains; (b) the account registration and KYC verification process; (c) deposit, withdrawal, and payment processing activities; (d) customer support interactions whether via live chat, email, or any other supported channel; (e) marketing communications where you have opted in; and (f) any other direct interaction between you and ck365.

1.3 Relationship to Terms. This Privacy Policy forms part of the ck365 Terms & Conditions and should be read alongside them. By registering a ck365 account or using the Platform in any capacity, you acknowledge that you have read and understood this Policy. If you do not agree with any aspect of this Policy, you must not register or continue to use the ck365 platform.

1.4 Pakistani Context. ck365 serves players primarily located in Pakistan. References in this Policy to local payment methods (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, SadaPay), identity documentation (CNIC), and regulatory frameworks reflect the practical reality of operating a platform focused on the Pakistani market. Where international regulatory frameworks impose additional obligations, ck365 applies the higher standard.

Definitions

The following definitions apply throughout this Privacy Policy:

Personal Data We Collect

3.1 Registration Data. When you create a ck365 account, we collect: your full legal name (as per your CNIC), Pakistani mobile number (in +92 format), email address, date of birth, gender, city of residence (e.g., Karachi, Lahore, Faisalabad, Rawalpindi, Islamabad), and preferred currency (PKR). This data is mandatory — without it, a ck365 account cannot be created or operated.

3.2 KYC Identity Verification Data. To fulfil our gaming license and Anti-Money Laundering obligations, ck365 collects: photographs of your Computerised National Identity Card (CNIC) — front and reverse — a live selfie photograph, and biometric facial comparison data used solely to verify that the selfie matches the CNIC photograph. Where enhanced due diligence is required, additional documentation (e.g., proof of address, source of funds declaration) may be collected.

3.3 Financial & Transaction Data. We collect details of all financial transactions on the ck365 platform including: deposit amounts and timestamps, withdrawal requests and processing records, payment method identifiers (JazzCash mobile number, EasyPaisa wallet reference, bank account tail digits, USDT TRC20 wallet address), bet history, win and loss records, and bonus redemption history. This data is retained for regulatory, AML, and dispute resolution purposes.

3.4 Technical & Usage Data. When you access ck365, our systems automatically collect technical data including: IP address, device type and operating system, browser type and version, mobile network operator (Jazz, Zong, Telenor, Ufone, etc.), pages visited, time spent on each section, click path data, session start and end times, and error logs. This data is used for security monitoring, fraud detection, and platform performance optimisation.

3.5 Communication Data. Records of all support communications between you and ck365 — including live chat transcripts, email correspondence, and any other written or recorded interactions — are retained for quality assurance, dispute resolution, and regulatory compliance purposes.

3.6 Responsible Gaming Data. Where you use ck365's responsible gaming tools (deposit limits, session controls, self-exclusion), the settings you apply and their effective dates are recorded and retained. This data cannot be deleted before the self-exclusion or limit period expires, as it is a player protection measure.

How We Use Your Personal Data

4.1 Account Operation. The primary use of your personal data is to operate your ck365 account — creating and maintaining your account record, processing your deposits and withdrawals, recording your bets and game history, managing your PKR wallet balance, and enabling you to log in securely from your registered devices.

4.2 Identity Verification & AML Compliance. Your registration and KYC data is used to verify your identity, confirm your age (minimum 21 years), screen your name and details against sanctions lists and politically exposed person (PEP) databases, and monitor your transactions for patterns consistent with money laundering or terrorist financing as required by our gaming license.

4.3 Fraud Prevention & Security. Technical data — including IP addresses, device fingerprints, and behavioural patterns — is used to detect and prevent unauthorised account access, fraudulent transactions, bonus abuse, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.

4.4 Platform Improvement. Aggregated and anonymised usage data is used to improve the ck365 platform — identifying slow-loading pages, game features that players find confusing, payment methods experiencing friction, and support topics that indicate gaps in documentation. Individual players are never identified in this analysis.

4.5 Customer Support. Communication data is used to handle your support enquiries, investigate and resolve disputes, respond to formal complaints, and maintain quality assurance standards for the ck365 support team.

4.6 Marketing (Where Opted In). Where you have provided explicit consent to marketing communications, your email address and in-platform notification preferences are used to send you promotional offers, bonus announcements, new game notifications, and platform updates relevant to your activity on ck365.

4.7 Legal & Regulatory Compliance. Personal data is retained and disclosed as required by ck365's gaming license obligations, applicable AML and counter-terrorism financing regulations, and any lawful direction from a competent regulatory or law enforcement authority.

Legal Basis for Processing

ck365 processes personal data on the following legal bases, depending on the purpose:

• Contractual Necessity: Processing required to fulfil the ck365 Terms & Conditions — account creation, deposit processing, bet settlement, withdrawal processing, and customer support.
• Legal Obligation: Processing required to comply with ck365's gaming license conditions, AML obligations, KYC requirements, and any applicable regulatory direction — including identity verification, sanctions screening, and transaction monitoring.
• Legitimate Interests: Processing for fraud detection, security monitoring, platform improvement, and dispute resolution where ck365's legitimate interests do not override your fundamental data rights.
• Consent: Processing for direct marketing communications and optional analytics where you have provided explicit, freely given consent. Withdrawal of this consent does not affect processing that occurred lawfully before withdrawal.

Cookies & Tracking Technologies

6.1 Types of Cookies Used. The ck365 website uses the following categories of cookies and similar tracking technologies:

• Essential Cookies: Required for core platform functionality — session authentication, secure login state maintenance, and fraud prevention. These cannot be disabled without breaking platform functionality.
• Performance Cookies: Collect anonymised data about how players navigate the ck365 platform — page load times, error frequencies, and feature usage patterns. Used solely for platform performance improvement.
• Functional Cookies: Remember your preferences — language settings, preferred deposit method, and display preferences — to improve your experience on return visits.
• Analytics Cookies: Used to understand aggregate player behaviour patterns. Where analytics cookies are non-essential, they are only deployed with your consent.

6.2 Managing Cookie Preferences. Non-essential cookies can be managed through your browser settings. Most modern browsers (Chrome, Safari, Firefox) provide controls to view, restrict, or delete cookies on a per-site basis. Disabling non-essential cookies will not prevent you from accessing or playing on ck365, but may affect remembered preferences and display settings.

6.3 Session Security Cookies. ck365 uses session cookies to maintain your authenticated login state during an active gaming session. These cookies are deleted automatically when your browser session ends or when you log out of ck365. They do not persist beyond a single session.

Data Sharing & Third-Party Disclosure

7.1 Principle of Minimum Sharing. ck365 operates on the principle that your personal data is shared with third parties only where there is a specific, documented, and lawful reason to do so. We do not sell, rent, or trade your personal data to any third party for their commercial purposes.

7.2 Categories of Third-Party Recipients. Personal data may be shared with the following categories of recipients:

• KYC Verification Providers: Identity verification platforms that process your CNIC photographs and biometric selfie data to confirm your identity and age. These providers act as data processors under written agreements with ck365.
• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, SadaPay, and USDT TRC20 service providers who process your deposits and withdrawals. Transaction data shared is the minimum required for payment processing.
• Fraud Prevention Services: Third-party services that analyse IP addresses, device fingerprints, and transaction patterns to detect and prevent fraudulent activity on the ck365 platform.
• Game Content Providers: Gaming studios whose games are hosted on the ck365 platform may receive anonymised session data for RNG audit and quality assurance purposes. Individual player identities are not shared with game providers.
• Regulatory and Law Enforcement Authorities: ck365 will disclose personal data to competent authorities where required by law, court order, or under the reporting obligations of its gaming license — including suspicious transaction reports filed under AML regulations.
• Professional Advisors: Legal counsel, auditors, and compliance consultants may access personal data on a need-to-know basis under professional confidentiality obligations.

International Data Transfers

8.1 Cross-Border Processing. ck365 may transfer personal data to processors and partners located outside Pakistan — including KYC verification platforms, fraud prevention services, and the game content studios whose titles appear in the ck365 game library. Where such transfers occur, ck365 ensures they are protected by appropriate contractual safeguards, including standard data protection clauses that impose obligations on the receiving party equivalent to those ck365 applies internally.

8.2 Transfer Safeguards. International transfers of personal data are conducted only where one of the following conditions applies: (a) the receiving country provides an adequate level of data protection as recognised by applicable international standards; (b) ck365 and the recipient have entered into binding standard contractual clauses; or (c) the transfer is necessary for the performance of a contract between you and ck365 (e.g., processing a withdrawal to an international payment network).

8.3 Your Rights on Transfers. You may request information about the specific international data transfers that apply to your personal data by contacting the ck365 privacy team at the contact details provided in Section 16.

Data Retention

9.1 Retention Principles. ck365 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, to comply with applicable legal and regulatory retention obligations, and to resolve any disputes or enforce any agreements that may arise during or after the player relationship.

9.2 Specific Retention Periods. The following retention periods apply as a general guide:

• Active Account Data: Retained for the duration of your active ck365 account plus a minimum of 5 years following account closure, to satisfy AML and gaming license audit requirements.
• KYC & Identity Documents: Retained for a minimum of 5 years following account closure or the last transaction, in compliance with AML record-keeping obligations. CNIC photographs and biometric verification records are subject to this mandatory retention period regardless of any erasure request.
• Transaction Records: All deposit, withdrawal, and betting records are retained for a minimum of 5 years in accordance with financial record-keeping requirements applicable under ck365's gaming license.
• Support Communications: Live chat transcripts and email records are retained for 3 years following the closure of the relevant support interaction.
• Marketing Data: Email addresses and marketing preferences are retained until you withdraw marketing consent, at which point they are removed from active marketing lists. A record that consent was withdrawn is retained to prevent accidental future re-enrollment.
• Technical Logs: IP address logs and session records are retained for 12 months for security and fraud detection purposes.

Data Security Measures

10.1 Technical Safeguards. ck365 implements and maintains the following technical security measures to protect personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data transmitted between players' devices and ck365 servers;
• Encrypted storage of passwords using one-way cryptographic hashing with salt — ck365 staff cannot retrieve or view your password in plain text;
• Tokenised payment processing — ck365 does not store full payment card or bank account numbers at any point in the transaction flow;
• Access-controlled server environments with multi-factor authentication requirements for all staff with data access;
• Regular automated vulnerability scanning and periodic manual penetration testing of the ck365 platform;
• Real-time intrusion detection and alerting systems monitoring for anomalous access patterns.

10.2 Organisational Safeguards. In addition to technical measures, ck365 operates the following organisational controls: staff data access is limited to the minimum required for each role (least-privilege principle); all staff with access to personal data receive mandatory data protection training at onboarding and annually thereafter; data processing agreements are in place with all third-party processors before any data is shared with them.

10.3 Security Incident Response. In the event of a personal data breach that poses a risk to player rights, ck365 will notify affected players within 72 hours of becoming aware of the breach, describing the nature of the data affected, the likely consequences, and the steps ck365 has taken or intends to take to address the breach and prevent recurrence. Regulatory notifications will be made to competent authorities as required by ck365's gaming license conditions.

Exercising Your Data Rights

11.1 How to Submit a Request. To exercise any of the data rights described in Section 11 of this Policy or in the Player Rights Grid on this page, submit a written request through one of the following channels: (a) live chat support on the ck365 website — available 24/7 in Urdu and English; (b) email to the ck365 privacy contact address displayed in the footer of this website and in Section 16 of this Policy.

11.2 Identity Verification for Rights Requests. To protect against fraudulent data access requests, ck365 will verify your identity before processing any data rights request. Verification will be conducted by confirming your registered mobile number, email address, and — for access or erasure requests — one additional identifier from your KYC records. This verification step is mandatory and cannot be bypassed.

11.3 Response Timeframes. ck365 will acknowledge all data rights requests within 3 business days of receipt and will provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, the response period may be extended by a further 60 days — in which case ck365 will notify you of the extension and the reason for it within the initial 30-day period.

11.4 Limitations on Erasure. The right of erasure is subject to legal retention obligations. ck365 cannot delete KYC identity records, transaction histories, or AML monitoring records before the mandatory retention period expires, regardless of an erasure request. Where erasure is refused for this reason, ck365 will explain the specific retention obligation that applies and the date on which erasure will be actioned.

Children's Privacy — Strict 21+ Policy

12.1 Age Restriction. ck365 is strictly prohibited to persons under 21 years of age. ck365 does not knowingly collect or process personal data from any person under 21. Age verification through CNIC-linked KYC is mandatory for all accounts before withdrawals are processed.

12.2 Discovery of Underage Account. Where ck365 discovers or has reasonable grounds to believe that a registered account belongs to a person under 21 years of age, the account will be immediately suspended. All personal data collected in relation to that account will be deleted as soon as the mandatory KYC identity verification records can lawfully be purged. Any deposits made by an underage person will be returned after deduction of applicable transaction processing costs.

12.3 Parental Concern. If you believe your child under 21 has registered on ck365 without your knowledge, contact ck365 support immediately via live chat. ck365 will investigate and take immediate action to suspend the account pending confirmation of the account holder's age.

Marketing Communications

13.1 Opt-In Basis. ck365 sends marketing communications — including promotional offers, bonus notifications, new game announcements, and PSL betting market alerts — only to players who have explicitly opted in to receive them at registration or via Account Settings. Marketing communications are never sent on an opt-out basis.

13.2 Withdrawing Marketing Consent. You may withdraw consent to marketing communications at any time through: (a) the unsubscribe link included in every marketing email; (b) the notification preferences section in Account Settings; or (c) a direct request submitted to ck365 support via live chat. Withdrawal of marketing consent takes effect within 5 business days. Withdrawal does not affect transactional communications — deposit confirmations, withdrawal processing updates, security alerts, and KYC notifications are not marketing communications and will continue to be sent regardless of marketing consent status.

13.3 Marketing Data. ck365 does not share your contact details with third-party advertisers or marketing agencies for their own marketing purposes. Where ck365 uses a third-party email delivery platform to send marketing communications on its behalf, that platform acts as a data processor under a written agreement and is prohibited from using your contact information for any purpose other than delivering ck365's communications.

Third-Party Links & Integrations

14.1 Scope Limitation. This Privacy Policy applies solely to personal data collected and processed by ck365 through the ck365 platform at ck365.biz. The ck365 platform does not include links to external third-party websites or services that are outside ck365's operational control.

14.2 Payment Provider Interfaces. When completing a deposit or withdrawal via JazzCash, EasyPaisa, HBL, or any other supported payment method, you will interact with that payment provider's own interface or confirmation system. Your interaction with those payment provider interfaces is governed by the relevant payment provider's own privacy policy and terms of service. ck365 is not responsible for the data practices of third-party payment providers in respect of data collected directly by those providers through their own interfaces.

Policy Updates & Notification

15.1 Right to Update. ck365 reserves the right to update this Privacy Policy at any time to reflect changes in: applicable law or regulatory requirements; our data processing practices; the third-party processors we engage; or the products and services we offer on the Platform. The most current version of this Policy is always available at ck365.biz/privacy-policy.

15.2 Notification of Material Changes. Where updates to this Policy are material — meaning they affect your rights or the way your data is processed in a significant manner — ck365 will notify all registered players via registered email at least 14 days before the updated Policy takes effect. You will also see an in-platform notification on your next login.

15.3 Continued Use as Acceptance. Continued use of the ck365 platform following notification of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any material change, you should close your ck365 account before the updated Policy takes effect. Account closure requests are processed as described in the Terms & Conditions.

Contact Information & Privacy Complaints

16.1 Privacy Team Contact. For all data privacy enquiries, rights requests, or privacy complaints, contact the ck365 Privacy team. The email address for privacy-related matters is displayed as plain text in the footer of every page on this website. General support queries may be directed to the general support email or via live chat.

16.2 Filing a Privacy Complaint. If you believe ck365 has processed your personal data in a manner that violates this Policy or applicable data protection standards, you may file a formal privacy complaint by submitting a written complaint to the ck365 Privacy team with the subject line "Privacy Complaint." ck365 will acknowledge receipt within 3 business days and will provide a full written response within 30 calendar days.

16.3 Support Availability. The ck365 support team — available in Urdu and English, 24 hours a day, 7 days a week via live chat on the ck365 platform — can assist with initial privacy enquiries and help route formal requests to the correct internal team. For complex data rights matters, direct contact with the Privacy team via email is recommended.