w367 Privacy Policy

1. Introduction

w367 ("the Platform", "we", "us", "our") operates the online gaming and betting platform accessible at w367.app. In the course of providing our services to Pakistani players and other users, we collect and process certain personal information. This Privacy Policy sets out in clear and straightforward terms what information we collect, why we collect it, how we use it, how long we keep it, and the rights you hold over that information.

w367 is committed to handling personal data with transparency, integrity, and security. We recognise that Pakistani players entrust us with sensitive information — including identity documents, financial details, and gaming behaviour — and we take that responsibility seriously. Every data practice described in this policy reflects a genuine commitment to privacy, not merely regulatory compliance.

2. Data We Collect

w367 collects personal information in the following categories, depending on how you interact with the Platform:

2.1 Registration & Account Data

• Full legal name as it appears on your CNIC
• Date of birth (for mandatory age verification)
• Email address and/or Pakistani mobile number
• Username and encrypted password
• Preferred currency and language settings

2.2 Identity Verification (KYC) Data

• Computerised National Identity Card (CNIC) number and scan/photograph of the document (front and back)
• Any additional identity or proof-of-address documents requested during enhanced due diligence
• Selfie or liveness verification image where required by verification procedures

2.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and methods (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa/Mastercard, USDT TRC20)
• Mobile wallet identifiers where applicable (e.g. registered JazzCash or Easypaisa number)
• Bank account details submitted for withdrawal processing
• Transaction history and account balance records

w367 does not store full card numbers or mobile wallet PINs. Payment processing is handled by compliant third-party gateways that apply their own data security standards.

2.4 Gaming Activity Data

• Bets placed, games played, outcomes, and session duration
• Bonus usage, wagering history, and promotional participation
• Responsible gaming settings, self-exclusion requests, and limit configurations

2.5 Technical & Device Data

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser information
• Session identifiers and login timestamps
• Cookie and similar tracking data (see Section 8)

2.6 Communications Data

• Records of support interactions via live chat or email
• Survey responses and feedback submitted voluntarily
• Correspondence relating to disputes, complaints, or account queries

3. How We Use Your Data

w367 uses personal data for the following purposes:

• Account management: Creating, verifying, operating, and closing your w367 account.
• Identity and age verification: Fulfilling mandatory KYC obligations to confirm that all players are 18 years of age or older and to verify identity before processing withdrawals.
• Payment processing: Processing deposits and withdrawals in PKR through your chosen payment method, and maintaining accurate financial records.
• Fraud and security: Detecting, investigating, and preventing fraudulent activity, money laundering, duplicate accounts, and other prohibited conduct.
• Platform improvement: Analysing how Pakistani players use w367 to improve game performance, navigation, and support quality.
• Responsible gaming: Monitoring gaming behaviour to identify patterns associated with problem gambling and to apply responsible gaming tools where appropriate.
• Communications: Sending account-related notifications, transaction confirmations, security alerts, and — where you have opted in — promotional communications.
• Legal compliance: Maintaining records and responding to lawful requests from regulatory or law enforcement authorities.

4. Legal Basis for Processing

w367 processes personal data under the following legal bases:

• Contract performance: Processing necessary to deliver the services you have contracted for when registering a w367 account.
• Legal obligation: Processing required to comply with applicable KYC, anti-money-laundering, and data retention laws.
• Legitimate interests: Processing for fraud prevention, security, platform integrity, and responsible gaming monitoring, where these interests are not overridden by your rights.
• Consent: Processing for optional marketing communications, where you have explicitly opted in. You may withdraw consent at any time through account settings or by contacting support.

5. Data Sharing & Third Parties

w367 does not sell or rent personal data. We share information only in the following limited circumstances:

• Payment processors: Transaction data is shared with payment gateways and banking partners (including JazzCash, Easypaisa, and banking institutions) strictly to process your deposits and withdrawals.
• Identity verification providers: KYC documents may be processed by a third-party identity verification service operating under contractual data security obligations.
• Game studios and software providers: Certain game session data may be shared with licensed game providers for game delivery, RNG certification, and fair-play audit purposes.
• Regulatory and law enforcement authorities: w367 will disclose personal data to competent authorities where required by law or in response to a valid legal process.
• Analytics providers: Aggregated and anonymised usage data may be shared with analytics tools to improve Platform performance. This data does not identify individual users.

All third parties with whom w367 shares personal data are contractually required to maintain appropriate security standards and to use data only for the specified purpose.

6. Data Retention

w367 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, and audit requirements. In general:

• Account and identity data is retained for a minimum of five years following account closure, in accordance with anti-money-laundering record-keeping standards.
• Transaction records are retained for a minimum of five years from the date of the transaction.
• Gaming activity logs are retained for a minimum of two years following account closure.
• Support communications are retained for a minimum of two years.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

7. Security Measures

w367 applies industry-standard technical and organisational security measures to protect personal data from unauthorised access, disclosure, loss, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your browser or device and w367's servers.
• Encryption at rest for sensitive data fields including CNIC details and financial records.
• Role-based access controls ensuring that only authorised personnel access personal data, and only to the extent required by their role.
• Regular security assessments and penetration testing of Platform infrastructure.
• Two-factor authentication (2FA) available to all Players as an additional layer of account security.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that materially affects your rights, w367 will notify affected users as required by applicable law.

8. Cookies & Tracking Technologies

w367 uses the following types of cookies and similar technologies:

• Essential cookies: Necessary for the Platform to function — including session management, authentication, and security tokens. These cannot be disabled without impairing Platform functionality.
• Analytics cookies: Used to understand how visitors interact with the Platform — pages visited, session duration, and device type. Data is aggregated and does not personally identify users.
• Preference cookies: Store your language, currency, and display preferences to improve your experience on return visits.

You may manage cookie settings through your browser. Disabling non-essential cookies will not prevent you from using the Platform but may affect certain functionality. w367 does not serve third-party advertising cookies.

9. Your Privacy Rights

Subject to applicable law, you have the following rights in relation to your personal data held by w367:

• Right of access: Request a copy of the personal data w367 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to restrict processing: Request that w367 temporarily suspend the processing of your data while a dispute or objection is resolved.
• Right to data portability: Receive a copy of data you have provided to w367 in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact the w367 support team. We will respond to all verifiable requests within a reasonable timeframe. Identity verification may be required before processing data access or deletion requests.

10. Children's Privacy

w367 is strictly an 18+ platform. We do not knowingly collect personal information from individuals under 18 years of age. If we become aware that a minor has registered an account, the account will be closed immediately, any balance reviewed in accordance with applicable policies, and the personal data of the minor securely deleted. If you believe a minor has accessed w367, please contact support immediately.

11. International Data Transfers

w367 operates internationally and may transfer personal data to servers or third-party processors located outside Pakistan. Where such transfers occur, w367 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this policy, including contractual data protection obligations with all data processors.

12. Third-Party Links

The w367 platform does not include links to external third-party websites. All links within the Platform navigate to internal pages of w367.app. w367 bears no responsibility for the privacy practices of any third-party service providers whose interfaces may appear within embedded game content, where such providers maintain their own separate privacy policies.

13. Changes to This Privacy Policy

w367 reserves the right to update this Privacy Policy at any time. Where changes are material, notice will be provided through the Platform or by email to your registered address. The "Last Updated" date at the top of this page will reflect the date of the most recent revision. Continued use of the Platform following any update constitutes your acceptance of the revised policy.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the w367 support team. The platform email address is [email protected]. Please do not send CNIC scans, card details, or account passwords by email. For security queries or data requests, live chat support is also available from any page of the Platform.