Your Privacy Matters at ent365

1.1 This Privacy Policy ("Policy") is issued by ent365 ("ent365", "we", "us", or "our") and applies to all personal data collected through the ent365 website located at https://ent365.app and all associated services, mobile applications, and platforms operated under the ent365 brand (collectively, the "Platform").

1.2 ent365 is committed to protecting the privacy and personal data of every player who accesses the Platform. This Policy has been prepared in accordance with internationally recognised data protection principles and the requirements of ent365's gaming licence. It sets out in plain language the types of personal data we collect, our purposes for processing that data, the legal bases upon which we rely, how long we retain data, and the rights you hold as a data subject.

1.3 By registering for an ent365 account, accessing the Platform, or providing us with personal data in any other way, you acknowledge that you have read, understood, and agreed to this Policy. If you do not agree with any part of this Policy, you must immediately cease using the Platform and contact our support team to arrange account closure.

1.4 This Policy should be read alongside the ent365 Terms & Conditions, which govern the overall relationship between you and ent365. In the event of any conflict between this Policy and the Terms & Conditions on matters relating exclusively to data privacy, this Policy shall prevail.

2.1 ent365 collects personal data in three principal ways: data you provide directly to us, data collected automatically through your use of the Platform, and data received from third parties. The categories of personal data we collect are described below.

Data You Provide Directly

• Identity Data: Full legal name as it appears on your CNIC, date of birth, gender, and nationality;
• Contact Data: Email address, Pakistani mobile number (JazzCash or EasyPaisa-linked where applicable), and residential address including city and province;
• Verification Data: CNIC number, CNIC scan or photograph, selfie or live facial verification image, and proof of address documents (utility bill, bank statement);
• Financial Data: Payment method details including JazzCash wallet number, EasyPaisa account, HBL/UBL/Meezan Bank account details (masked for security), transaction history, deposit and withdrawal records;
• Account Data: Username, encrypted password, account preferences, responsible gaming settings, and communication preferences;
• Support Data: The content of any messages, emails, or live chat conversations you initiate with our support team.

Data Collected Automatically

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers;
• Usage Data: Pages visited, game sessions played, bet history, session durations, click patterns, and navigation paths on the Platform;
• Location Data: General geographic location derived from your IP address (city and country level only — we do not collect precise GPS coordinates);
• Cookie and Tracking Data: Information collected via cookies, pixel tags, and similar technologies as further described in Section 6.

Data from Third Parties

• Identity verification data from KYC and anti-money laundering (AML) service providers;
• Fraud prevention and risk scoring data from licensed third-party fraud detection services;
• Payment confirmation and transaction status data from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank;
• Self-exclusion status data from gaming licence authority databases where applicable.

3.1 ent365 processes your personal data only for specific, legitimate purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use personal data are set out below.

• Account Creation and Management: To register your ent365 account, verify your identity, maintain your account settings, and manage your player profile;
• Platform Services: To provide access to sports betting markets, casino games, live dealer tables, and all other ent365 products and services;
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other supported payment methods;
• KYC and AML Compliance: To verify your identity, assess source of funds, and comply with anti-money laundering, counter-terrorism financing, and gaming licence obligations;
• Responsible Gaming: To monitor gambling behaviour for signs of problem gambling, enforce player-requested limits and self-exclusion orders, and provide access to responsible gaming tools;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and other prohibited conduct;
• Customer Support: To respond to your queries, complaints, and support requests via live chat and email;
• Marketing Communications: To send you promotional offers, bonus notifications, and product updates — only where you have opted in to receive such communications and subject to your right to opt out at any time;
• Platform Improvement: To analyse usage patterns, conduct A/B testing, and improve the design, performance, and functionality of the Platform;
• Legal Compliance: To comply with applicable laws, regulatory obligations, court orders, and requests from law enforcement or gaming licence authorities.

4.1 ent365 processes personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:

• Contractual Necessity: Processing required to fulfil our obligations under the ent365 Terms & Conditions, including account management, payment processing, and service delivery;
• Legal Obligation: Processing required to comply with KYC, AML, gaming licence, and other applicable regulatory requirements;
• Legitimate Interests: Processing necessary for our legitimate business interests including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided that such interests are not overridden by your rights and interests;
• Consent: Processing based on your freely given, specific, and informed consent — principally for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5.1 ent365 shares personal data with third parties only where necessary and only in the circumstances described below. All third-party service providers engaged by ent365 are contractually required to process personal data in accordance with applicable data protection standards and solely for the purposes authorised by ent365.

• Identity Verification Providers: Licensed KYC and AML service providers for the purpose of verifying player identity and conducting source-of-funds assessments;
• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other payment service providers required to process deposits and withdrawals;
• Fraud Prevention Services: Third-party fraud detection and risk management platforms used to identify and prevent fraudulent activity on the Platform;
• Gaming Platform Providers: Game software providers whose products are hosted on the ent365 Platform — limited to the technical data necessary for game delivery;
• Customer Support Tools: Third-party live chat and customer relationship management platforms used to deliver support services;
• Analytics Providers: Anonymised and aggregated usage data may be shared with analytics service providers for the purpose of improving Platform performance;
• Regulatory and Law Enforcement Authorities: Personal data may be disclosed to gaming licence authorities, financial regulators, or law enforcement agencies where we are legally required to do so.

6.1 ent365 uses cookies and similar tracking technologies to operate the Platform, improve user experience, and support security and fraud prevention functions. A cookie is a small text file stored on your device when you visit a website.

6.2 The types of cookies used on the ent365 Platform are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies manage your session, maintain login state, and enable secure access to your account. They cannot be disabled;
• Functional Cookies: Used to remember your preferences such as language, game lobby filters, and responsible gaming settings;
• Analytical Cookies: Used to collect anonymised data about how players use the Platform, including pages visited and session duration, to help us improve the Platform;
• Security Cookies: Used by our fraud detection systems to identify suspicious behaviour and protect account security.

6.3 You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform, including your ability to log in or access certain features.

6.4 ent365 does not use advertising or third-party tracking cookies for the purpose of serving targeted advertisements on external platforms.

7.1 ent365 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations.

7.2 The following retention periods apply to the principal categories of personal data held by ent365:

7.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ent365's data disposal procedures.

8.1 ent365 implements technical and organisational security measures commensurate with the sensitivity of the personal data we hold. These measures are designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure.

8.2 The key security measures in place include:

• Encryption in Transit: All data transmitted between your device and the ent365 Platform is protected using TLS 1.3 with 256-bit encryption;
• Encryption at Rest: Sensitive personal data including CNIC information and financial data is encrypted at rest using AES-256 encryption;
• Access Controls: Access to personal data is restricted to ent365 personnel with a legitimate need to access that data, governed by role-based access controls and multi-factor authentication;
• Intrusion Detection: The Platform is monitored continuously for signs of unauthorised access, suspicious activity, and security vulnerabilities;
• Regular Security Audits: The Platform undergoes periodic security audits and penetration testing conducted by independent security professionals;
• Incident Response: ent365 maintains a documented incident response procedure to ensure any data breach is identified, contained, and reported in accordance with applicable regulatory requirements.

8.3 Whilst ent365 takes all reasonable steps to protect your personal data, no internet transmission is entirely secure. You are responsible for maintaining the confidentiality of your account login credentials and for ensuring your device is adequately protected.

9.1 As an ent365 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our Data Protection team using the details in Section 13.

• Right of Access: You have the right to request a copy of the personal data we hold about you and to receive information about how it is being processed;
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal and regulatory retention obligations;
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data;
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transfer it to another data controller;
• Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis, and to opt out of direct marketing at any time;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10.1 The ent365 Platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data relating to individuals under the age of 21.

10.2 As part of the account registration and KYC process, ent365 requires all players to submit proof of age. Any account identified as belonging to a person under the age of 21 will be suspended immediately, all associated personal data will be securely deleted (except where retention is required for legal or regulatory compliance), and the matter will be escalated in accordance with our responsible gaming obligations.

10.3 If you are a parent or guardian and you believe that a minor has accessed or registered on the ent365 Platform, please contact us immediately at the address set out in Section 13. We will investigate and take prompt action.

11.1 Due to the international nature of ent365's operations and the third-party service providers we engage, your personal data may be transferred to and processed in countries outside of Pakistan. This may include countries in which the level of data protection legislation differs from that applicable in Pakistan.

11.2 Where personal data is transferred internationally, ent365 ensures that appropriate safeguards are in place to protect your data. These safeguards include:

• Contractual clauses with the receiving party that impose data protection standards equivalent to those applicable under our gaming licence;
• Transfer only to countries or organisations that provide an adequate level of data protection as recognised by applicable international standards;
• Technical safeguards including encryption of data both in transit and at rest.

11.3 For further information about the safeguards applicable to international data transfers, please contact our Data Protection team using the details in Section 13.

12.1 ent365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. The most current version of this Policy will always be published on this page, with the effective date displayed at the top of the document.

12.2 Where a material change is made to this Policy, ent365 will provide advance notice to registered players via email or an on-platform notification at least 14 days prior to the change taking effect.

12.3 Your continued use of the ent365 Platform following the effective date of any amendment constitutes your acknowledgment of and agreement to the revised Policy. If you do not accept the revised Policy, you must cease using the Platform and contact our support team to close your account.

13.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ent365, please contact our Data Protection team through any of the following channels:

13.2 ent365 takes all data privacy queries seriously and will acknowledge receipt of your request promptly. Please note that for security purposes, we may need to verify your identity before processing any data rights request.