2pk365 Privacy Policy

This Privacy Policy ("Policy") is issued by 2pk365 ("the Company," "we," "us," or "our") and applies to all personal data collected and processed through the 2pk365 online gaming platform at 2pk365.one and any associated mobile applications, features, or services (collectively, "the Platform").

2pk365 is Pakistan's premier online gaming platform, serving over 850,000 registered players across Karachi, Lahore, Islamabad, Faisalabad, Multan, Peshawar, and beyond. The Platform offers cricket betting, live casino, slots, fishing games, and bingo — all transacted in Pakistani Rupees (PKR) via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. Given the financial and personal nature of the services 2pk365 provides, the responsible handling of player personal data is a matter of the highest operational priority.

By creating an account on 2pk365 or otherwise accessing or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not accept the terms of this Policy, you must immediately cease using the Platform and close your account by contacting our support team.

2pk365, operating under an international online gaming licence, acts as the Data Controller in respect of personal data collected through the Platform. As Data Controller, 2pk365 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.

For all data protection enquiries, requests to exercise your rights, or complaints relating to the processing of your personal data by 2pk365, please contact us using the details provided in Section 16 of this Policy. We endeavour to respond to all data protection enquiries within 30 days of receipt.

2pk365 collects personal data through multiple channels including: your account registration and KYC verification process; your ongoing use of the Platform and its games and services; your communications with our support team; and technical data collected automatically by our Platform infrastructure. The specific categories of data collected are detailed in the Quick Reference Table on this page.

3.1 Data You Provide Directly

When you register an account with 2pk365, you provide identity and contact data including your full legal name, date of birth, Pakistani CNIC number, email address, and mobile number. When you complete KYC verification, you additionally provide document images including a copy of your CNIC and proof of address. When you make deposits or request withdrawals, you provide financial data including your JazzCash or EasyPaisa mobile number, or banking details for HBL, UBL, or Meezan Bank transactions.

3.2 Data Collected Automatically

The 2pk365 Platform automatically collects technical and usage data during your sessions. This includes your device's IP address, browser type and version, operating system, device identifiers, session timestamps, pages and games accessed, and interaction patterns. This data is used primarily for security monitoring, fraud prevention, and platform improvement purposes.

2pk365 uses your personal data exclusively for the purposes specified in this Policy. The primary uses of personal data by 2pk365 are as follows:

• Account Management: Creating, verifying, maintaining, and securing your 2pk365 account, including authentication, password resets, and two-factor verification via your registered Pakistani mobile number.
• Regulatory Compliance: Fulfilling Know Your Customer (KYC) and anti-money-laundering (AML) obligations required by our international gaming licence, including verifying your identity, age, and the source of your funds where required.
• Payment Processing: Processing deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank in Pakistani Rupees, maintaining transaction records, and resolving payment disputes.
• Gaming Services: Providing and recording your gaming activity across cricket betting, live casino, slots, fishing games, and bingo, including maintaining bet records for dispute resolution purposes.
• Responsible Gaming: Monitoring gaming activity to identify patterns that may indicate problem gambling, enforcing self-imposed limits and exclusions, and fulfilling our duty of care obligations under our licensing framework.
• Customer Support: Responding to your queries, complaints, and requests through live chat and email, and maintaining records of support interactions for quality assurance and training purposes.
• Security and Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, account compromise, money laundering, bonus abuse, and other prohibited conduct.
• Platform Improvement: Analysing usage patterns and technical data to improve the Platform, fix issues, and develop new features that better serve our Pakistani player community.
• Marketing: Where you have given your consent, sending you information about 2pk365 promotions, new game releases, and relevant Platform updates. You may withdraw marketing consent at any time.

2pk365 processes your personal data on one or more of the following legal bases:

• Contract Performance: Processing necessary to perform the contract between you and 2pk365 — including providing gaming services, processing payments, and managing your account.
• Legal Obligation: Processing required to comply with our legal and regulatory obligations — including KYC verification, AML record-keeping, age verification, and tax reporting where applicable.
• Legitimate Interests: Processing in pursuit of 2pk365's legitimate business interests — including fraud prevention, security monitoring, and Platform improvement — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in relation to marketing communications and non-essential cookies and analytics. Where processing is based on consent, you have the right to withdraw that consent at any time.

2pk365 does not sell, rent, or trade your personal data. We share personal data with third parties only where strictly necessary and only in the following categories of circumstances:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive transaction data necessary to process your deposits and withdrawals in Pakistani Rupees. Each payment provider processes this data under their own privacy policies and applicable Pakistani financial regulation.
• Technology and Service Providers: 2pk365 engages technology partners including game studios, live casino providers, cloud hosting providers, and IT security vendors. These parties access personal data only to the extent required to deliver their contracted services and are bound by strict data processing agreements.
• Regulatory and Licensing Authorities: Our international gaming licence requires us to share certain player and transaction data with our licensing regulatory body upon request. We may also share data with financial intelligence units and law enforcement agencies where required by applicable anti-money-laundering and counter-terrorism-financing regulations.
• Fraud Prevention Services: 2pk365 may share technical data and transaction patterns with industry-recognised fraud prevention services to identify and block fraudulent activity across our Platform.
• Professional Advisers: In circumstances involving legal disputes, audit requirements, or regulatory examinations, 2pk365 may share relevant personal data with legal counsel, accountants, or auditors under strict confidentiality obligations.

As 2pk365 operates under an international gaming licence and engages technology providers from multiple jurisdictions, your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, 2pk365 takes all reasonable steps to ensure that your personal data receives an equivalent level of protection to that which it would receive if processed within Pakistan.

Safeguards applied to international data transfers by 2pk365 include: contractual clauses in data processing agreements with service providers requiring equivalent data protection standards; ensuring that recipients are located in jurisdictions recognised as providing adequate data protection; and applying technical and organisational security measures appropriate to the sensitivity of the data transferred.

2pk365 retains your personal data for the minimum period necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by applicable law or regulatory obligation. Our standard retention periods are as follows:

• Account and Identity Data: Retained for the duration of your active account and for a period of five years following permanent account closure, in compliance with anti-money-laundering record-keeping requirements.
• Financial Transaction Records: Retained for five years from the date of each transaction, as required by financial regulation applicable to licensed gaming operators.
• Gaming Activity Records: Retained for three years post-account closure, for dispute resolution and regulatory audit purposes.
• Support Communication Records: Retained for two years from the date of the relevant support interaction.
• Marketing Data: Retained until you withdraw your marketing consent or close your account, whichever is earlier.
• Technical and Log Data: Typically retained for 90 days for security monitoring purposes, except where a longer retention period is required for an ongoing security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 2pk365's internal data lifecycle procedures.

2pk365 implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL encryption for all data transmitted between your device and our servers;
• Encryption of sensitive personal data at rest on our server infrastructure;
• Role-based access controls restricting internal access to personal data to authorised personnel with a documented operational need;
• Multi-factor authentication for all internal staff accessing systems that process personal data;
• Regular third-party penetration testing and security vulnerability assessments;
• Continuous server-side monitoring for anomalous access patterns and potential security incidents;
• Secure data disposal procedures for physical and digital media containing personal data.

The 2pk365 Platform uses cookies and similar tracking technologies to enable Platform functionality, maintain your logged-in session, and — where you have provided consent — to collect analytics data that helps us improve the Platform experience for Pakistani players. The cookie categories used by 2pk365 are detailed in the table below this section.

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from accessing core Platform functions including account login. Non-essential cookies — analytics and functional categories — can be disabled without affecting core Platform access.

Subject to applicable law and our regulatory obligations, you have the following rights in respect of personal data held by 2pk365:

• Right of Access: You may request a copy of the personal data 2pk365 holds about you, together with information about how it is used and shared.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held about you. Some corrections can be made directly through your account settings.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. This right is subject to our legal and regulatory data retention obligations, which may require us to retain certain data for specified periods.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a correction request is under review.
• Right to Data Portability: Where processing is based on your consent or contract performance, you may request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing of your personal data where the legal basis is legitimate interests. You also have an unconditional right to object to direct marketing processing at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted before withdrawal.

To exercise any of these rights, please submit a written request to [email protected]. We will acknowledge your request within 72 hours and respond in full within 30 calendar days.

The 2pk365 Platform is strictly for adults aged 21 and above. 2pk365 does not knowingly collect personal data from any individual under the age of 21, and the Platform takes active steps to prevent access by minors through mandatory age verification during the account registration process.

If 2pk365 becomes aware that personal data has been collected from an individual under 21 years of age, the relevant account will be permanently closed, all associated funds returned to the registered payment method, and all personal data relating to the minor deleted without undue delay. If you believe that 2pk365 may have inadvertently collected data from a minor, please contact us immediately at [email protected] so that appropriate action can be taken.

2pk365 may, where you have provided your consent, send you marketing communications relating to 2pk365 promotions, new game announcements, seasonal offers, and platform updates. Marketing communications may be delivered via email, SMS to your registered Pakistani mobile number, or in-platform notifications.

You can withdraw your consent to marketing communications at any time by:

• Updating your communication preferences in the notification settings section of your 2pk365 account;
• Clicking the unsubscribe link included in any marketing email;
• Contacting our support team at [email protected] with a request to opt out of marketing.

Opting out of marketing communications does not affect the delivery of transactional communications — such as deposit confirmations, withdrawal notifications, security alerts, and support responses — which are sent on the basis of contract performance rather than marketing consent.

The 2pk365 Platform engages third-party game studios and live casino providers whose software and streaming infrastructure is integrated within the Platform. While 2pk365 carefully vets all third-party providers and requires them to maintain data processing standards consistent with this Policy, each provider operates under their own data governance frameworks.

2pk365 is not responsible for the privacy practices of third-party payment service providers, including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, in relation to data processed by those providers under their own terms and policies. We recommend reviewing the privacy policies of your chosen payment provider for information about how they process your financial data.

2pk365 reserves the right to update and amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we provide. Where a change materially affects your rights or the way we process your personal data, we will provide at least 14 days' advance notice by:

• Sending a notification to your registered email address;
• Displaying a prominent notice on the 2pk365 Platform throughout the notice period.

Your continued use of the 2pk365 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the changes. The current version of this Policy — including its effective date — will always be accessible on this page. If you do not accept a revised Policy, you must close your account before the revised Policy takes effect.

For any queries, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 2pk365, please contact our Data Protection team through the following channel:

• Email: [email protected]
• Live Chat: Available 24/7 in Urdu and English on the 2pk365 Platform

We will acknowledge receipt of your enquiry within 72 hours and provide a substantive response within 30 calendar days. For complex requests, we may request additional information from you to verify your identity before processing.

If you are not satisfied with 2pk365's response to your data protection complaint, you have the right to escalate your complaint to the data protection authority in your jurisdiction, or to the supervisory authority associated with 2pk365's operating licence jurisdiction.