The master365 Privacy Policy —
How We Protect Your Data in Pakistan

master365 (referred to in this Privacy Policy as "master365", "we", "us", or "our") is the operator of the online casino and sports betting platform accessible at master365.pro (the "Platform"). master365 is the data controller responsible for the personal data of all registered players and visitors.

This Privacy Policy governs the collection, use, storage, and disclosure of personal data by master365 in connection with your use of the Platform, including the master365 login system, PKR wallet, casino games, sports betting markets, cockfighting, jackpot slots, and all support interactions.

For any privacy-related queries, contact our Data Protection Officer via our 24/7 English support channels. Contact details are provided in Section 15 of this Policy.

master365 collects the following categories of personal data from Pakistan players:

master365 does not knowingly collect special category data (such as health data, religious beliefs, or biometric data beyond standard CNIC photo verification).

master365 collects personal data through the following methods:

• Directly from you: When you register a master365 account, complete KYC verification, make a PKR deposit, request a withdrawal, contact our support team, or update your account settings.
• Automatically: When you access and browse the master365 Platform, our servers automatically record technical data including your IP address, device identifiers, browser information, and session activity. This occurs via server logs, cookies, and similar technologies (see Section 7).
• From payment providers: When you deposit via NayaPay, JazzCash, Easypaisa, Raast, or a Pakistan bank transfer, master365 receives confirmation data from the payment provider confirming the transaction amount, sender account reference, and timestamp.
• From identity verification services: Where master365 uses automated KYC verification tools, identity data may be cross-referenced against Pakistani government records to confirm CNIC authenticity.
• From fraud prevention services: master365 may receive risk signals or flags from third-party anti-fraud systems that inform account security decisions.

master365 uses your personal data for the following purposes:

• Account registration and management: To create and maintain your master365 account, verify your identity, and manage your PKR wallet.
• Transaction processing: To process PKR deposits, facilitate withdrawals to your NayaPay, JazzCash, Easypaisa, or bank account, and maintain accurate financial records.
• Game delivery: To provide access to live casino games, jackpot slots, cockfighting markets, and sports betting in accordance with your account settings.
• Customer support: To respond to queries, resolve disputes, and provide 24/7 English-language assistance via Live Chat, WhatsApp, Telegram, and email.
• Legal and regulatory compliance: To comply with anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and any applicable legal obligations including reporting to regulatory authorities.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, multiple account registrations, bonus abuse, and other prohibited conduct.
• Responsible gaming: To monitor gaming patterns and apply responsible gaming tools, including deposit limits and self-exclusion, in accordance with your choices and master365's duty of care.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the master365 Platform, fix technical issues, and develop new features relevant to Pakistan players.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to Pakistan players who have opted in to receive such communications.

master365 processes your personal data on the following legal bases:

• Contractual necessity: Processing necessary to provide the master365 Platform services under the agreement formed when you register an account and accept the Terms & Conditions — including account creation, game delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable AML laws, KYC regulations, licensing conditions, and any regulatory or law enforcement requests — including CNIC verification and financial transaction records.
• Legitimate interests: Processing undertaken to pursue master365's legitimate business interests, including fraud prevention, platform security, abuse detection, and anonymised analytics, where these interests are not overridden by your rights.
• Consent: Where you have given specific, informed consent — for example, opting in to receive marketing communications from master365. You may withdraw consent at any time without affecting the lawfulness of prior processing.

master365 does not sell your personal data to any third party. We share personal data with external parties only in the following limited circumstances:

• Payment service providers: NayaPay, JazzCash, Easypaisa, Raast, SadaPay, and Pakistan commercial banks — to process your PKR deposits and withdrawals. Data shared is limited to the minimum required to complete the transaction.
• Game providers: Evolution Gaming, Pragmatic Play Live, JILI, PG Soft, Asia Gaming, BBIN, and other certified studios — data required to authenticate your game session is shared with the relevant provider. Game providers operate under strict data processing agreements with master365.
• KYC and identity verification services: Third-party identity verification providers who assist with CNIC authentication and fraud screening. These providers act as data processors under contract with master365 and may not use your data for their own purposes.
• Regulatory and law enforcement authorities: When required by law — including Pakistani financial regulators, AML reporting bodies, or court order. master365 will, where legally permissible, notify you of such disclosures.
• Technology and infrastructure providers: Cloud hosting, data security, and IT support providers who process data on master365's behalf under strict confidentiality obligations. These providers are prohibited from accessing your data for any purpose beyond delivering services to master365.
• Business transfers: In the event that master365's business is acquired, merged, or restructured, your personal data may be transferred as part of that transaction. You will be notified prior to such transfer via your registered Pakistan mobile number or email address.

All third-party processors engaged by master365 are contractually bound by data protection obligations that are no less stringent than those in this Privacy Policy.

master365 uses cookies and similar tracking technologies on the Platform to ensure proper functionality, analyse usage patterns, and enhance your experience. The following types of cookies are used:

• Strictly necessary cookies: Essential for the master365 Platform to function. These include session authentication tokens, CSRF protection cookies, and login state cookies. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: Store your preferences such as language settings, game display preferences, and responsible gaming configurations, so you don't have to reset them on every visit.
• Analytical cookies: Collect anonymised data about how Pakistan players interact with the Platform — which sections are visited most, how long sessions last, and where errors occur. This data is used to improve the Platform. No personally identifiable information is contained in analytical cookie data.
• Security cookies: Help master365 detect and prevent fraudulent login attempts, bot activity, and account takeover attempts.

master365 does not use advertising or cross-site tracking cookies. You can manage cookie preferences in your browser settings, but disabling strictly necessary cookies will prevent you from logging in to your master365 account.

master365 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit TLS encryption on all data in transit between your device and master365 servers — including the master365 login page, account dashboard, and payment screens.
• AES-256 encryption on all personal data and PKR financial records at rest in master365 databases.
• Password hashing using industry-standard irreversible hashing algorithms. master365 never stores passwords in plain text and cannot recover your password — only reset it.
• Two-factor authentication (2FA) available on all master365 accounts, adding a second layer of identity confirmation via SMS OTP to your registered Pakistan mobile number.
• Access controls: Only authorised master365 personnel with a legitimate operational need may access personal data. Access is logged, audited, and reviewed regularly.
• Real-time fraud monitoring: Automated systems analyse login patterns, transaction behaviour, and account activity to detect and flag suspicious events for manual review.
• Regular security audits: master365 conducts periodic security assessments of its platform infrastructure, payment integrations, and data storage systems.

master365 retains your personal data for different periods depending on the category of data and the purpose for which it was collected:

On expiry of the relevant retention period, master365 will securely delete or anonymise your personal data. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes but cannot be used to identify you.

As a Pakistan player on master365, you have the following rights in relation to your personal data. These rights may be exercised by contacting our 24/7 English support team (see Section 15). We will respond to all verified requests within 30 calendar days.

To exercise any of these rights, contact our 24/7 English support team via Live Chat, WhatsApp, Telegram, or email at [email protected]. We may ask you to verify your identity before actioning a request to ensure data is not disclosed to an unauthorised party.

master365 may send you promotional communications — including bonus offers, PKR deposit match notifications, jackpot alerts, and PSL cricket betting promotions — via SMS to your Pakistan mobile number, email, or WhatsApp, provided you have opted in to receive such communications at registration or through your account settings.

• Marketing communications are entirely optional. You will never lose access to the core master365 Platform by declining marketing messages.
• You can opt out of all marketing communications at any time by updating your communication preferences in your master365 account settings, or by replying STOP to any SMS, or by contacting our support team.
• Opt-out requests are processed within 5 business days. You may continue to receive transactional communications (such as PKR deposit confirmations and withdrawal notifications) regardless of your marketing opt-out status, as these are necessary for your account operation.
• master365 does not use personal data collected from Pakistan players to target advertising on third-party platforms (such as social media networks).

The master365 Platform is strictly for adults aged 18 years and over. master365 does not knowingly collect personal data from individuals under the age of 18.

All master365 account registrations require mandatory age verification through CNIC submission. The CNIC verification process is designed to confirm that the registrant is an adult Pakistani national. Accounts where age verification cannot be confirmed will be suspended pending additional documentation.

Parents and guardians in Pakistan who believe their child may have accessed the master365 Platform should contact our 24/7 English support team immediately at [email protected]. We will take immediate remedial action.

master365 is operated internationally, and your personal data may be processed in countries outside Pakistan. This may include countries where master365's servers are hosted, where third-party game providers operate their studios, or where master365's technology partners are based.

Wherever your data is transferred outside Pakistan, master365 ensures that appropriate safeguards are in place to protect it. These safeguards include:

• Data processing agreements with all international third-party processors that incorporate equivalent data protection obligations to those in this Privacy Policy.
• Transfer only to jurisdictions with recognised data protection frameworks or to organisations that have committed to implement equivalent protective standards.
• Encryption of all data in transit across international network connections, ensuring interception during transfer cannot result in readable data.

If you would like more information about the specific countries in which your data may be processed or the safeguards in place, contact our Data Protection Officer (see Section 15).

master365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal requirements. We will communicate material changes to this Policy by:

• Displaying a prominent notice on the master365 Platform homepage and the Privacy Policy page for a minimum of 14 days before the changes take effect.
• Sending a notification to your registered Pakistan mobile number or email address where the change materially affects how we process your personal data.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We recommend revisiting this Privacy Policy periodically. Your continued use of the master365 Platform after the effective date of any change constitutes acceptance of the revised Policy.

For any questions, concerns, or requests relating to your personal data and this Privacy Policy, please contact the master365 Data Protection team using any of the following channels. All privacy enquiries are handled by our 24/7 English-speaking support team and escalated to our Data Protection Officer where required.

• Email: [email protected] (subject line: "Privacy Request")
• Live Chat: Available 24/7 on the master365 Platform — average response under 2 minutes
• WhatsApp & Telegram: Via the contact links provided on the master365 Platform

We will acknowledge all privacy requests within 48 hours and aim to provide a full substantive response within 30 calendar days. For complex requests, we may request an extension and will notify you accordingly.