Your Privacy Matters to b365

b365 (referred to in this Privacy Policy as "b365", "we", "us", or "our") is the data controller responsible for the personal information collected through the b365 platform at b365.games. As the data controller, b365 determines the purposes and means by which your personal data is processed, and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with applicable data protection laws.

This Privacy Policy applies to all personal information collected from registered users, prospective users, and visitors to the b365 platform, whether accessed via a web browser or any other supported interface. By registering a b365 account or by continuing to use the b365 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

b365 collects personal data from you in three principal ways: information you provide directly when registering or using the platform, information collected automatically when you interact with the platform, and information received from third-party verification and payment providers. The categories of personal data we collect are set out below.

2.1 Information You Provide Directly

2.2 Information Collected Automatically

When you access the b365 platform, we automatically collect certain technical and behavioural data including your IP address, device type, operating system, browser type and version, the pages you visit and the order in which you visit them, timestamps of your sessions, and in-game activity logs such as bets placed, games played, amounts wagered, and outcomes. This data is used to provide and improve the b365 service, detect fraud, and meet our regulatory obligations.

2.3 Information from Third Parties

b365 may receive personal data about you from third-party identity verification providers used to confirm your CNIC details, payment processors used to facilitate PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and fraud detection and anti-money-laundering screening services. Where b365 receives data from third parties, we handle it in accordance with this Privacy Policy and the applicable contractual terms agreed with those third parties.

b365 uses the personal data we collect for the following specific purposes. We will not use your personal data for any purpose that is incompatible with the purposes listed below without first obtaining your consent or establishing a separate legal basis for doing so.

• Account Creation and Management: To register your b365 account, verify your identity and age (21+ requirement), and manage your account on an ongoing basis.
• Service Delivery: To provide you with access to cricket betting, live casino, slots, and all other b365 products and features.
• Payment Processing: To process PKR deposits and withdrawals via your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) and to maintain accurate financial records.
• KYC and Regulatory Compliance: To verify your identity and age in accordance with our licensing obligations, and to meet our anti-money-laundering (AML) and counter-terrorism-financing (CTF) requirements.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and any other activity that may harm b365 or its users.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools including deposit limits, session reminders, and self-exclusion where requested by you or required by our licensing conditions.
• Customer Support: To respond to your support enquiries, resolve complaints, and maintain records of communications for quality assurance and training purposes.
• Service Improvement: To analyse aggregate usage patterns and platform performance data for the purpose of improving the b365 product experience for all Pakistani users.
• Legal Obligations: To comply with applicable laws, regulations, court orders, and requests from regulatory or law-enforcement authorities.
• Marketing Communications: Where you have provided consent, to send you information about b365 promotions, bonuses, and new product features. You may withdraw your marketing consent at any time via your account settings.

b365 processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity in question:

• Contractual Necessity: Processing that is necessary for the performance of the contract between you and b365, including account registration, service delivery, and payment processing.
• Legal Obligation: Processing that is necessary for b365 to comply with a legal obligation, including KYC verification, AML/CTF screening, and responses to regulatory or law-enforcement requests.
• Legitimate Interests: Processing that is necessary for the purposes of b365's legitimate business interests, including fraud prevention, platform security, service improvement, and responsible gaming monitoring, provided that those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing that is based on your freely given, specific, informed, and unambiguous consent, including the sending of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

b365 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of third parties strictly on a need-to-know basis and only to the extent necessary for the purpose described:

5.1 Service Providers

b365 engages third-party service providers who process personal data on our behalf under binding data processing agreements. These include identity verification and KYC providers, payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), cloud hosting and infrastructure providers, fraud detection and AML screening services, and customer support platform providers. All such providers are contractually required to process your data only on b365's instructions and to implement appropriate security measures.

5.2 Regulatory and Law-Enforcement Authorities

b365 may disclose personal data to regulatory bodies, law-enforcement agencies, or courts where we are required to do so by applicable law, court order, or binding regulatory direction. b365 will, where legally permissible, notify you before complying with such a disclosure request.

5.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of b365's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to the privacy terms applicable to your data prior to the transfer taking effect.

b365 uses cookies and similar tracking technologies on the b365.games platform. Cookies are small text files placed on your device that help us recognise you, remember your preferences, keep your session secure, and understand how you use the platform.

6.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in to your b365 account. These cookies cannot be disabled without affecting core platform functionality.
• Functional Cookies: Used to remember your preferences such as your chosen language, deposit limit display settings, and responsible gaming reminder frequency.
• Analytical Cookies: Used to collect aggregated, anonymised data about how users navigate the b365 platform so that we can identify areas for improvement. This data does not identify you personally.
• Security Cookies: Used to detect and prevent fraudulent activity, including session hijacking and cross-site request forgery (CSRF) attacks.

b365 does not use third-party advertising cookies or tracking pixels that would allow external advertisers to monitor your activity across websites. You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your b365 account.

b365 retains your personal data for only as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law and our licensing obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, b365 will securely delete or irreversibly anonymise your personal data. Where data is anonymised rather than deleted, the anonymised data may be retained and used for statistical and analytical purposes without any retention limit, as it will no longer constitute personal data.

b365 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following:

• TLS/SSL Encryption in Transit: All data exchanged between your device and b365 servers is encrypted using Transport Layer Security (TLS) with a minimum of TLS 1.2.
• AES-256 Encryption at Rest: Sensitive personal data, including CNIC scans, financial account details, and authentication credentials, is stored in encrypted form using AES-256 encryption.
• Access Controls: Access to personal data within b365 is restricted on a strict need-to-know basis. All b365 personnel with access to personal data are subject to binding confidentiality obligations and undergo regular privacy and security training.
• Multi-Factor Authentication: b365 systems that store or process sensitive user data are protected by multi-factor authentication requirements for all internal staff access.
• Regular Security Audits: b365 conducts periodic security assessments and penetration testing of its platform infrastructure to identify and remediate vulnerabilities.
• Incident Response Plan: b365 maintains a documented data breach incident response plan. In the event of a breach affecting your personal data, b365 will notify affected users promptly and take immediate remediation steps.

Subject to applicable law and certain limited exceptions (including restrictions that arise from our AML and licensing obligations), you have the following rights in relation to the personal data b365 holds about you. To exercise any of these rights, please contact b365 support through your account dashboard.

• Right of Access: You have the right to request a copy of the personal data b365 holds about you, together with information about how it is being used.
• Right to Rectification: You have the right to request that b365 corrects any inaccurate or incomplete personal data we hold about you. For identity data linked to your CNIC, corrections may require supporting documentation.
• Right to Erasure: In certain circumstances, you have the right to request that b365 deletes your personal data. This right does not apply where retention is required by law or for the establishment, exercise, or defence of legal claims.
• Right to Restriction: You have the right to request that b365 restricts the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive the personal data you have provided to b365 in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to b365's processing of your personal data where that processing is based on legitimate interests. b365 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

b365 will respond to all valid data rights requests within a reasonable timeframe. Where a request is complex or involves a large volume of data, b365 may extend the response period and will inform you of the extension and the reason for it. b365 will not charge a fee for processing a data rights request unless the request is manifestly unfounded or excessive.

The b365 platform is strictly restricted to individuals aged 21 years and above. b365 does not knowingly collect personal data from individuals under the age of 21. As part of the account registration process, all users are required to confirm that they are aged 21 or above, and this is subsequently verified through our mandatory CNIC-based KYC process.

If b365 discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21, we will immediately close the associated account, delete the personal data collected, and where required by our licensing obligations, report the matter to the appropriate regulatory authority. Any funds deposited to an underage account will be handled in accordance with our Terms and Conditions and applicable regulatory guidance.

b365 primarily stores and processes personal data on servers located within secure data centre facilities. In the course of providing the b365 service and for the purposes described in this Privacy Policy, personal data may be transferred to and processed in countries outside Pakistan, including countries where b365's cloud infrastructure providers or third-party service providers are located.

Where personal data is transferred internationally, b365 takes appropriate steps to ensure that your data receives a level of protection equivalent to that afforded within Pakistan. These steps include entering into binding contractual clauses with international service providers that require them to protect your data to the standard described in this Privacy Policy, and conducting due diligence on the security practices and data protection frameworks of all international partners.

b365 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or the b365 service. The date of the most recent revision is displayed at the top of this page. Where changes are material, b365 will endeavour to notify registered users via their registered email address or mobile number before the revised Policy takes effect.

Your continued use of the b365 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree with the changes, you may close your b365 account in accordance with the account closure process described in the b365 Terms and Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or b365's handling of your personal data, please contact the b365 Data Support team through the support channel accessible from within your logged-in b365 account dashboard. You may also reference the b365 support email address displayed in the footer of this page for written privacy enquiries.

b365 aims to acknowledge all privacy-related enquiries within two (2) business days and to provide a substantive response within a reasonable timeframe. For complex data rights requests, b365 will communicate an expected resolution timeline at the point of acknowledgement.