Privacy Policy – 375pk Online Betting Platform

1 Introduction

This Privacy Policy ("Policy") describes how 375pk ("we", "us", "our", "the Platform") collects, processes, stores and discloses personal data relating to users ("you", "your") of the website accessible at https://375pk.cam (the "Site").

375pk is an English-language online betting and casino information platform serving users primarily in Pakistan. We recognise that the personal data you share with us is sensitive — particularly information related to identity verification, financial transactions and gambling activity. This Policy sets out our obligations and your rights under applicable data protection frameworks.

By accessing or using the Site, registering an account, or completing any transaction, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Site.

                Note for Pakistani Users: Pakistan's Personal Data Protection Bill and related regulations are evolving. 375pk endeavours to align its data handling practices with internationally recognised data protection principles. This Policy does not constitute legal advice. If you have concerns about data protection rights applicable to you as a Pakistani resident, we recommend consulting qualified legal counsel.
              

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

"Personal Data" — Any information that identifies or can reasonably be used to identify a natural person, directly or indirectly. This includes name, CNIC number, email address, device identifiers and financial account details.
"Processing" — Any operation performed on personal data, including collection, storage, organisation, retrieval, use, disclosure, erasure or destruction.
"Data Controller" — 375pk, which determines the purposes and means of processing your personal data.
"Data Processor" — A third party that processes personal data on behalf of 375pk, such as payment processors, identity verification providers and cloud infrastructure services.
"Sensitive Data" — A subset of personal data requiring heightened protection, including government-issued identity documents (e.g., CNIC, passport), financial information and data relating to health or legal status.
"Cookies" — Small text files placed on your device by the Site to store preferences, session information and usage analytics data.
"KYC" — Know Your Customer — the identity and age verification process required under anti-money laundering obligations and platform eligibility rules.
"Consent" — A freely given, specific, informed and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.

3 Personal Data We Collect

We collect personal data through several channels, including account registration, KYC verification, platform transactions, customer support interactions and automated technical means. The categories of data we collect are detailed below.

3.1 Account & Registration Data

Full legal name
Date of birth
Email address
Mobile phone number
Country and city of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar)
Username and encrypted password
Communication language preference

3.2 Identity Verification (KYC) Data

Government-issued photo identity document — for Pakistani users, this typically means a Computerised National Identity Card (CNIC) or valid passport
Proof of residential address (utility bill, bank statement or official correspondence)
Selfie or liveness photograph matched against identity documents
Source-of-funds documentation where required by AML obligations

⚠ Document Handling Warning: KYC documents must only be submitted through the Platform's official secure portal over HTTPS. Never transmit your CNIC, passport, or financial documents via social media, unofficial email accounts, or unencrypted channels. 375pk staff will never request your full password, PIN or CVV number.

3.3 Financial & Transaction Data

Deposit and withdrawal amounts and timestamps
Payment method type (e.g., bank transfer via HBL, UBL, Meezan Bank or Bank Alfalah; mobile wallet reference via Easypaisa or JazzCash; Raast transfer identifiers)
Transaction reference numbers
Account balance history and betting/wagering records

                Payment Provider Note: References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are included for user familiarity only. These providers do not endorse, affiliate with or support gambling operations. Data shared with payment processors is governed by those providers' own privacy policies in addition to ours.
              

3.4 Usage & Technical Data

IP address and approximate geolocation derived from it
Device type, operating system and browser version
Session timestamps, page views and navigation paths
Clickstream data and in-platform search queries
Referring URLs and marketing attribution identifiers

3.5 Communications Data

Content of support tickets, live chat transcripts and email correspondence
Survey responses and feedback submissions
Responsible gambling tool requests and self-exclusion records

4 How We Use Your Personal Data

We use the personal data we collect for the following purposes. Where processing requires your consent, we will obtain that consent separately and record it.

Purpose	Data Categories Used	Legal Basis
Account registration and management	Account data, contact details	Contract performance
Identity and age verification (KYC)	KYC documents, selfie data	Legal obligation; contract
Processing deposits and withdrawals	Financial data, payment method details	Contract performance
Anti-money laundering (AML) compliance	Transaction data, KYC data, source of funds	Legal obligation
Fraud prevention and security monitoring	Technical data, transaction patterns	Legitimate interests
Customer support and dispute resolution	Communications data, account data	Contract performance
Responsible gambling management	Gambling activity, self-exclusion records	Legal obligation; legitimate interests
Platform analytics and improvement	Usage and technical data	Legitimate interests
Marketing communications (opted-in users only)	Contact details, preferences	Consent
Legal and regulatory compliance	All relevant data categories	Legal obligation

5 Legal Basis for Processing

375pk processes your personal data on the following legal grounds:

5.1 Contract Performance

Processing is necessary to provide the services you have requested — including account creation, transaction processing, KYC verification and customer support. Without this processing, we cannot fulfil our contractual obligations to you.

5.2 Legal Obligation

Certain processing activities are required by applicable law, including anti-money laundering regulations, age verification obligations and financial record-keeping requirements. We are not able to waive these obligations regardless of your preferences.

5.3 Legitimate Interests

We process some data on the basis of our legitimate interests as a platform operator, including fraud prevention, platform security, responsible gambling monitoring and product analytics. We have assessed that these interests are not overridden by your fundamental rights and freedoms, but you may object to legitimate-interests processing at any time (see Section 9).

5.4 Consent

Where we rely on consent — for example, for direct marketing communications or non-essential cookies — we will obtain your explicit, freely given consent before processing. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

375pk does not sell your personal data to third parties. We share personal data only in the circumstances described below, and only to the extent necessary for the stated purpose.

6.1 Service Providers & Data Processors

We engage carefully vetted third-party processors who act strictly on our instructions and are contractually bound to confidentiality and data protection standards equivalent to our own. These include:

Payment processors — to facilitate deposits and withdrawals through the payment methods available in the cashier.
Identity verification providers — to carry out automated and manual KYC document checks and liveness verification.
Cloud infrastructure providers — to host, store and back up platform data in secure environments.
Fraud detection services — to identify suspicious account activity, money laundering indicators and bonus abuse patterns.
Analytics providers — to generate aggregated, anonymised usage insights that help us improve platform performance.

6.2 Regulatory & Legal Disclosures

We may disclose personal data to competent authorities, regulators, law enforcement agencies or courts where required to do so by applicable law, court order or other legally enforceable process. We will, where permitted, notify you of such a requirement before disclosure.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of our business, your personal data may be transferred to the acquiring entity. We will notify you of any such transfer and ensure that the receiving party is bound by data protection obligations no less stringent than those in this Policy.

6.4 With Your Consent

We may share personal data with additional third parties in circumstances not described above, but only with your explicit, prior consent.

Our Commitment: 375pk does not sell, rent, or trade personal data with advertisers, data brokers, or marketing aggregators. Your data is used to operate your account and fulfil our platform obligations — nothing more.

7 Cookies & Tracking Technologies

375pk uses cookies and similar technologies to operate the platform, maintain your session, personalise content and analyse usage. The categories of cookies we use are as follows:

Cookie Type	Purpose	Consent Required
Strictly Necessary	Session management, authentication, security tokens, CSRF protection. The platform cannot function without these.	No — exempt
Functional	Remembering language preference, display settings and previously entered form data for convenience.	No — legitimate interest
Analytics	Aggregated, anonymised data on page views, navigation paths and session durations to improve platform design.	Yes — consent required
Marketing	Attribution tracking for promotional campaigns. Used only where you have opted in to marketing communications.	Yes — consent required

You may manage your cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will prevent core platform functionality from operating correctly. Withdrawing consent for analytics or marketing cookies will not affect your ability to use the platform.

8 Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations.

Data Category	Retention Period	Basis
Account and registration data	Duration of account + 5 years post-closure	Regulatory / AML obligation
KYC identity documents	Duration of account + 5 years post-closure	AML / legal obligation
Transaction and financial records	Duration of account + 7 years post-closure	Financial records legislation
Betting and wagering history	Duration of account + 5 years post-closure	Regulatory obligation
Customer support communications	3 years from last interaction	Legitimate interests / dispute resolution
Marketing consent records	Until withdrawn + 3 years	Consent management obligation
Analytics / technical data	Up to 26 months (anonymised thereafter)	Legitimate interests
Self-exclusion records	Duration of exclusion + 5 years minimum	Responsible gambling obligation

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data cannot be immediately deleted due to technical constraints, it is placed in restricted access storage pending scheduled deletion.

9 Your Rights as a Data Subject

Subject to applicable law and certain exceptions, you have the following rights regarding your personal data held by 375pk. To exercise any of these rights, please contact us using the details in Section 15.

Right of Access

Request a copy of all personal data we hold about you, along with information about how it is processed.

Right to Rectification

Request correction of inaccurate or incomplete personal data. Account details can be updated directly in settings.

Right to Erasure

Request deletion of your personal data where it is no longer necessary for its original purpose, subject to legal retention obligations.

Right to Restriction

Request that we restrict processing of your data while a rectification request or objection is under review.

Right to Portability

Request a machine-readable copy of data you have provided, where processing is based on consent or contract.

Right to Object

Object to processing based on legitimate interests or carried out for direct marketing purposes. We will cease unless compelling grounds override your objection.

How to Exercise Your Rights: Submit a written request to [email protected] (plain text — not a clickable link; copy into your mail application). Include your registered username, registered email address and a clear description of the right you wish to exercise. We will respond within a reasonable timeframe and may need to verify your identity before processing the request.

10 Data Security

375pk implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration or destruction. Our security framework includes:

Transport Layer Security (TLS/HTTPS) — All data transmitted between your browser and our platform is encrypted in transit using current TLS protocols.
Encryption at rest — Sensitive personal data, including KYC documents and financial records, is encrypted in storage using industry-standard cryptographic methods.
Access controls — Personal data is accessible only to authorised personnel who require it to perform their specific job functions. Role-based access controls and audit logging are in place.
Password security — User passwords are stored as salted cryptographic hashes. Plaintext passwords are never stored or transmitted.
Security monitoring — We operate continuous monitoring for suspicious access patterns, brute force attempts and anomalous transaction activity.
Third-party security assessments — Our infrastructure and data processors are subject to periodic security reviews.

Despite these measures, no internet-based system is entirely free from risk. We cannot guarantee absolute security against all possible attack vectors. In the event of a data breach that poses a material risk to your rights, we will notify affected users and relevant authorities in accordance with our obligations under applicable law.

Your Role in Security: You are responsible for keeping your login credentials confidential and using a strong, unique password. Enable two-factor authentication where available. Do not share your account with any third party. Contact support immediately if you suspect unauthorised access to your account.

11 International Data Transfers

375pk and some of its third-party service providers operate infrastructure located outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than your country of residence.

Where such transfers occur, we take steps to ensure that adequate protections are in place, including:

Using service providers that implement data protection standards consistent with internationally recognised frameworks.
Entering into data processing agreements that require processors to maintain confidentiality and security obligations at least equivalent to those described in this Policy.
Conducting due diligence on the security practices of all third-party processors handling personal data.

By using 375pk, you acknowledge that your personal data may be transferred internationally as described in this section.

12 Children & Minors

The 375pk platform is strictly for adults. We do not knowingly collect personal data from individuals under 18 years of age, or a higher minimum age where required by the applicable jurisdiction.

If we discover or are notified that a user under the minimum age has registered an account or submitted personal data, we will immediately suspend the account, delete the associated personal data and forfeit any associated balances in accordance with our Terms & Conditions.

If you are a parent or guardian and believe a minor has registered on our platform, please contact us immediately at [email protected] (plain text — copy into your mail application). We take underage gambling prevention extremely seriously and will act without delay on all such reports.

13 Third-Party Links & Services

The 375pk platform may reference third-party services, payment providers or other resources. Any such references are for informational context only. 375pk does not maintain external links to third-party websites from within the platform's navigation or content structure.

Where third-party services are integrated into the platform (such as payment gateways or identity verification tools), those services operate under their own privacy policies. 375pk is not responsible for the privacy practices of third-party processors beyond the contractual data protection obligations we impose on them as described in Section 6.1.

14 Updates to This Privacy Policy

375pk reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, platform features or regulatory requirements. The "Last Updated" date at the top of this page will be revised accordingly.

Where changes are material — meaning they affect your rights or how your data is processed in a significant way — we will make reasonable efforts to notify active account holders via email or an in-platform notification before the changes take effect. For minor or clarificatory updates, the revised Policy will simply be posted to this page.

Your continued use of the platform following publication of a revised Policy constitutes your acceptance of the updated terms. If you disagree with any revision, you must cease using the platform and may request account closure.

15 Contact Us & Complaints

For all privacy-related queries, data subject rights requests, or concerns about how 375pk handles your personal data, please contact our team using the details below.

Data Queries & Rights Requests:
Email: [email protected]
(Plain text only — not a clickable link. Copy this address into your mail application.)

Subject Line: Use "Privacy Request — [Your Username]" to help us route your query promptly.

Response Timeframe: We aim to acknowledge all privacy requests within 5 business days and to resolve them within 30 days. Complex requests involving large volumes of data may take longer; we will notify you if an extension is required.

Languages: English is our primary support language. Urdu-language assistance is available on request.

15.1 Complaints

If you are not satisfied with how we have handled your personal data or responded to a rights request, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. We would, however, appreciate the opportunity to address your concern directly before you escalate — please contact us first and we will make every effort to resolve the matter.