Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is published by 2pk365 ("the Platform", "we", "us", "our") and applies to all personal data collected from users ("you", "your") who access or register on the website located at 2pk365.cam. This Policy is incorporated by reference into the 2pk365 Terms & Conditions and forms part of the binding agreement between you and the Platform.

2pk365 is an English-language online betting and live casino platform primarily serving adult users in Pakistan and other jurisdictions where individual access to such platforms is not explicitly prohibited. Our services include cricket betting — covering PSL, ICC T20 World Cups, bilateral series and domestic tournaments — alongside football, UFC, esports, live casino games and slots.

We are committed to handling your personal data responsibly, transparently and in accordance with applicable data protection standards. This Policy explains what data we collect, why we collect it, how we use and protect it, and what rights you hold over your own information. Please read it carefully before registering an Account or using the Platform in any capacity.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

3 Data We Collect

2pk365 collects Personal Data across several categories depending on the nature of your interaction with the Platform. The categories of data we may collect include:

Registration & Identity Data

• Full legal name, date of birth and gender as provided at registration.
• National identity credentials — for Pakistani users, this typically means your CNIC number submitted during KYC verification.
• Email address and mobile phone number used to create and verify your Account.
• Residential address including city, province and country (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar).

Financial & Transaction Data

• Deposit and withdrawal amounts, methods and timestamps.
• Payment instrument references — such as mobile wallet identifiers associated with Easypaisa, JazzCash or Raast, or bank account references for HBL, UBL, Meezan Bank or Bank Alfalah transactions. These references are used solely to process your transactions and are not shared with the payment providers for marketing or unrelated purposes.
• Cryptocurrency wallet addresses used for BTC or USDT transactions.
• Wagering history, game session data and bonus utilisation records.

Technical & Device Data

• IP address, browser type and version, operating system and device model.
• Session timestamps, page visit sequences and click-path data collected via server logs and analytics tools.
• Cookie identifiers and similar tracking technologies as described in Section 8.

Communications Data

• Records of Live Chat conversations, Help Center ticket submissions and email correspondence with our support team.
• Feedback, complaints and dispute records associated with your Account.

4 How We Collect Your Data

We collect Personal Data through the following channels and mechanisms:

• Direct registration: When you create an Account on 2pk365, you provide registration data directly. This includes your name, email address, date of birth and contact number entered into the registration form.
• KYC submissions: When you submit identity documents to complete verification, we collect the data contained in those documents — typically a copy of your CNIC or passport and, where required, proof of address.
• Transaction activity: Each deposit, withdrawal and wagering transaction generates a record that includes payment method references, amounts and timestamps.
• Platform usage: Your interactions with the Platform — including pages visited, bets placed, games launched and time spent — are recorded automatically through server logs and analytics systems.
• Cookies and similar technologies: As described in Section 8, cookies placed on your device during your visit collect session and behavioural data.
• Support interactions: When you contact our support team via Live Chat or the Help Center, the content of those interactions is recorded and associated with your Account.
• Third-party verification services: Where we use external KYC or fraud-detection providers to verify your identity or assess risk, those providers may return data to us as part of the verification response.

5 Legal Basis & Purpose of Processing

2pk365 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

Where we rely on consent as a legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawal of consent for essential data processing may result in Account restrictions or closure.

6 Data Processing

Your Personal Data is processed for the following specific purposes. We have set out each purpose alongside the category of data involved so you can understand precisely how your information is used:

• Account creation and management: Registration data is used to create and maintain your Account, authenticate your login sessions, personalise your experience and apply account-level settings such as deposit limits and responsible gambling preferences.
• Payment processing: Financial data is used to execute deposits and withdrawals, detect payment anomalies, prevent chargebacks and maintain auditable transaction records.
• Identity and age verification: KYC data is processed to confirm that you meet the 18+ age requirement (or the higher minimum required by the operator's licensing jurisdiction), to verify your identity against the details provided at registration, and to satisfy anti-money laundering obligations.
• Responsible gambling monitoring: Wagering history, session data and self-declared information are used to identify patterns that may indicate problem gambling behaviour. Where such patterns are detected, we may apply account-level interventions in accordance with our Responsible Gambling policy.
• Fraud and security: Technical and transaction data is analysed to detect multi-accounting, bonus abuse, unauthorised access, suspicious betting patterns and financial crime.
• Customer support: Communications data is used to resolve your queries, investigate complaints and improve our support processes.
• Platform improvement: Aggregated and anonymised usage data is used to analyse platform performance, identify popular features, troubleshoot technical issues and inform product development.
• Legal and regulatory compliance: Data is retained and, where required, disclosed to competent authorities in accordance with applicable legal obligations.

7 Third-Party Sharing

2pk365 does not sell, rent or trade your Personal Data to third parties for their own marketing purposes. We share data only in the following limited and necessary circumstances:

• Payment processors and financial institutions: Transaction data is shared with the payment service providers involved in processing your deposits and withdrawals. This sharing is necessary to execute your transactions and comply with financial regulations. The payment providers referenced in our platform — Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah and cryptocurrency processors — are independent entities. Their use of your data is governed by their own privacy policies, and 2pk365 does not control their data practices beyond what is specified in our processing agreements.
• KYC and identity verification providers: Identity documents and verification data are shared with third-party KYC platforms for the purpose of confirming your identity and age. These providers are contractually bound to process your data only for the purposes specified and to maintain appropriate security standards.
• Cloud infrastructure and hosting providers: Platform data, including Account information and transaction records, is stored on secure cloud infrastructure. These providers operate as Data Processors under contractual data processing agreements.
• Fraud detection and security services: Technical and behavioural data may be shared with third-party security services to detect and prevent fraudulent activity, bot access and account compromise.
• Regulatory and legal authorities: Where required by applicable law, court order or regulatory direction from a competent authority in the operator's licensing jurisdiction, 2pk365 will disclose the data it holds about you. We will notify you of such disclosures where legally permitted to do so.
• Business restructuring: In the event of a merger, acquisition or transfer of the business, your data may be transferred to the successor entity, subject to equivalent privacy protections and advance notification to affected users where practicable.

8 Cookies & Tracking Technologies

2pk365 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are in use:

You can manage or delete non-essential cookies through your browser settings at any time. Most modern browsers allow you to block all cookies, block third-party cookies only, or clear cookies that have already been set. Please note that disabling essential cookies will impair the functionality of the Platform, and some features may become unavailable.

We do not use cross-site tracking technologies to follow your activity across unrelated third-party websites for advertising purposes.

9 Data Retention

2pk365 retains your Personal Data for the period necessary to fulfil the purposes described in this Policy, to comply with applicable legal and regulatory retention obligations, and to resolve disputes or enforce our Terms. The following indicative retention periods apply:

• Account and registration data: Retained for the duration of your Account and for a period of up to five (5) years following Account closure, to satisfy anti-money laundering record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification, consistent with standard AML/CFT record-keeping obligations applicable in the operator's licensing jurisdiction.
• Transaction and wagering records: Retained for up to five (5) years from the date of each transaction, for financial audit and regulatory compliance purposes.
• Support and communications records: Retained for up to three (3) years from the date of the interaction, to support dispute resolution and quality assurance processes.
• Technical and log data: Retained for up to twelve (12) months for security and performance monitoring purposes, after which they are deleted or anonymised.
• Marketing consent records: Where you have opted in to marketing communications, your consent record is retained for the duration of the consent and for twelve (12) months following withdrawal.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be attributed to you as an individual. Where legal proceedings are ongoing or anticipated, data relevant to those proceedings may be retained until the matter is resolved.

10 Data Security

2pk365 implements a range of technical and organisational measures to protect your Personal Data against unauthorised access, loss, alteration, disclosure or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security) protocols. You should ensure that the padlock icon is visible in your browser's address bar when using the Platform.
• Encryption at rest: Sensitive data fields — including identity document copies and financial records — are encrypted at rest using AES-256 or equivalent encryption standards.
• Access controls: Access to Personal Data is restricted to authorised personnel on a need-to-know basis. Access rights are reviewed periodically, and staff with access to Personal Data are subject to confidentiality obligations.
• Two-factor authentication: Users are encouraged to enable two-factor authentication (2FA) on their Accounts. 2FA is available through the Account security settings and significantly reduces the risk of unauthorised access.
• Penetration testing and vulnerability management: The Platform undergoes periodic security assessments to identify and remediate vulnerabilities.
• Incident response: 2pk365 maintains an internal data breach response procedure. In the event of a breach that poses a material risk to users, affected individuals and relevant authorities will be notified within the timeframe required by applicable law.

11 Your Data Rights

Subject to applicable law and certain conditions, you have the following rights in relation to your Personal Data held by 2pk365:

• Right of access: You have the right to request a copy of the Personal Data we hold about you, along with information about how it is being processed. We will respond to verified access requests within a reasonable timeframe.
• Right to rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain Account details directly through your Account settings.
• Right to erasure: You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies) or where you object to processing on the basis of legitimate interests. This right is subject to overriding legal retention obligations — for example, AML record-keeping requirements may prevent full erasure of transaction records.
• Right to restrict processing: In certain circumstances — such as where you contest the accuracy of your data or object to its processing — you may request that we restrict processing to storage only while the matter is under review.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that we provide your data in a structured, commonly used and machine-readable format for transfer to another controller.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling for responsible gambling monitoring. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting us or adjusting your Account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us through the Help Center or via the email address set out in Section 15. We may need to verify your identity before processing a request. We aim to respond to all valid requests within 30 days, though complex requests may require additional time, in which case we will notify you.

12 International Data Transfers

2pk365 operates as a global online platform. As a result, your Personal Data may be processed and stored on servers located in countries other than Pakistan or your country of residence. These jurisdictions may have data protection laws that differ from those applicable in your home country.

Where Personal Data is transferred outside the operator's primary licensing jurisdiction, 2pk365 ensures that appropriate safeguards are in place to protect your data. These may include:

• Standard contractual clauses or equivalent data transfer mechanisms incorporated into agreements with Data Processors.
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection.
• Binding corporate rules or other approved transfer mechanisms where applicable.

By registering an Account on 2pk365 and accepting these Terms, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Pakistan. If you have concerns about international transfers of your data, please contact us using the details in Section 15 before registering.

13 Children's Privacy

2pk365 is an adults-only platform. We do not knowingly collect, process or retain Personal Data from individuals under the age of 18, or the higher minimum age required by the operator's licensing jurisdiction or applicable local law. Our registration process includes age verification steps designed to prevent minors from creating Accounts.

If we become aware that a minor has registered an Account or provided us with Personal Data, we will promptly close the Account, cancel all pending transactions and securely delete the associated Personal Data to the extent permitted by applicable AML obligations.

14 Amendments to This Policy

2pk365 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the "Last updated" date at the top of this page and, where reasonably practicable, provide advance notice through the Platform — for example, via an in-platform notification or a banner on the homepage.

Your continued use of the 2pk365 Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes and your agreement to be bound by the revised terms. If you do not agree to the revised Policy, you must cease using the Platform and may request Account closure through the Help Center.

We recommend that you review this Policy periodically to stay informed about how we protect your Personal Data. All previous versions of this Policy are available on request through the Help Center.

15 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the way in which 2pk365 processes your Personal Data, you may contact us through the following channels:

• Live Chat: Available 24/7 within your Account dashboard — the fastest route for urgent data privacy queries or account-related concerns.
• Help Center: Self-service articles covering account management, data rights and privacy topics are available within the Platform.
• Email (plain text — not a link): [email protected]

When contacting us about a data rights request, please include your registered Account email address and a brief description of your request so we can locate your records and respond efficiently. We may need to verify your identity before processing the request.

2pk365 serves adult users across Pakistan — including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and beyond — and takes the privacy of all users seriously, regardless of location. This Policy applies equally to all registered users.