Privacy Policy — How Masti 365 Protects Your Data

01Introduction — Who We Are and Why This Policy Matters

This Privacy Policy explains how Masti 365 — the online betting and casino platform operating at masti365.ws — collects, uses, stores, shares and protects the personal information of its players and website visitors. It applies to all products and services available on the Masti 365 platform, including sports betting, cricket betting, PSL markets, online casino, poker, roulette, Aviator and live dealer games.

We know that Pakistani players are increasingly aware of how their data is being used by online platforms, and rightly so. The aim of this policy is to be genuinely transparent — not to bury important information in legal language that nobody reads. If there is anything in this policy that is unclear, you are welcome to contact us at support@masti365.ws and we will explain it in plain terms.

By registering an account or using the Masti 365 platform, you acknowledge that you have read and understood this Privacy Policy. This policy should be read alongside our Terms and Conditions and our Responsible Gaming policy, which together govern your relationship with Masti 365.

02Personal Data We Collect from You

Masti 365 collects personal data in three ways: information you provide directly when registering or using the platform, information generated automatically through your use of the platform, and in limited cases, information received from payment providers for verification purposes.

2.1 Information You Provide Directly

2.2 Information Collected Automatically

When you access the Masti 365 platform, our systems automatically collect certain technical information to ensure the platform works correctly and securely. This includes your IP address, device type and operating system, browser type and version, the pages you visit and the time you spend on them, session duration and session identifiers, and your approximate location derived from IP address (not precise GPS location).

This technical data is used for security monitoring, fraud prevention, platform performance optimisation and aggregate analytics. It is not used to build personal profiles for marketing purposes.

03How Masti 365 Uses Your Personal Data

Masti 365 uses the personal data it collects for the following specific purposes, and no others:

• Account creation and management: Setting up and maintaining your Masti 365 account, authenticating your login, managing your account settings and communicating important account-related information.
• Identity verification (KYC): Verifying your identity and age before processing withdrawals, as required by our anti-money laundering obligations and our commitment to preventing underage gambling.
• Transaction processing: Processing deposits, withdrawals and any refunds in Pakistani Rupees (PKR) through your chosen payment method on Masti 365.
• Platform security and fraud prevention: Detecting and preventing unauthorised account access, bonus abuse, account duplication, money laundering and other prohibited activity as described in our Terms and Conditions.
• Responsible gaming: Monitoring account activity for signs of problem gambling behaviour and administering player-requested tools such as deposit limits and self-exclusion.
• Customer support: Responding to your queries, resolving disputes and maintaining a record of correspondence for quality assurance purposes.
• Legal compliance: Complying with applicable legal and regulatory obligations including record-keeping requirements.
• Platform improvement: Using aggregated, anonymised analytics to understand how players use the Masti 365 platform and to improve its functionality and user experience.

Masti 365 does not use your personal data for automated decision-making that produces legal effects or significantly affects you, except for automated fraud screening which may trigger a manual review of your account where indicators of fraudulent activity are detected.

04Legal Basis for Processing Your Data

Masti 365 processes personal data on the following legal bases:

• Contract performance: Most of the data processing described in Section 3 is necessary to perform the contract between Masti 365 and you — that is, to operate your account, process your transactions and provide the services you have signed up for.
• Legal obligation: Some processing — particularly identity verification (KYC) and transaction record-keeping — is required for Masti 365 to comply with its anti-money laundering and other legal obligations.
• Legitimate interests: Platform security monitoring, fraud prevention and aggregate analytics are carried out on the basis of Masti 365's legitimate interests, which we have assessed to be proportionate and not to override your privacy rights.
• Consent: Where Masti 365 wishes to send you marketing communications about new promotions, bonuses or products, we will ask for your explicit consent. You can withdraw consent at any time — see Section 11 for details.

05Sharing Your Personal Data — Who Sees It

Masti 365 does not sell your personal data to any third party. We share data only in the limited circumstances set out below, and only to the extent necessary for each purpose.

5.1 Payment Processors

When you make a deposit or withdrawal, the transaction data necessary to process the payment is shared with the relevant payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, or your bank or card provider. Each payment provider processes this data under their own privacy policy and security standards. Masti 365 does not have ongoing access to your payment credentials beyond what is needed to process the transaction.

5.2 Identity Verification Services

To fulfil KYC requirements, Masti 365 may use third-party identity verification services to cross-check documents you submit. These services process your identification documents solely for verification purposes and are prohibited from using your data for any other purpose.

5.3 Game and Technology Providers

The casino, poker and live dealer games on Masti 365 are powered by third-party software providers including Evolution Gaming. These providers may receive your player identifier (not your personal details) as part of game session data. No personally identifiable information beyond what is technically necessary for game operation is shared with game providers.

5.4 Legal Requirements

Masti 365 will disclose personal data to law enforcement, regulatory authorities or other third parties where required to do so by applicable law, court order or legal process. We will notify you of any such disclosure where we are legally permitted to do so.

06Cookies and Tracking Technologies

Masti 365 uses cookies — small text files stored on your device — and similar technologies to make the platform work correctly and securely. Here is exactly what we use and why:

Masti 365 does not use advertising cookies, cross-site tracking pixels or any technology designed to follow your activity across other websites. You can manage or delete cookies at any time through your browser settings. Note that disabling session or security cookies will prevent you from logging into your Masti 365 account.

07How Long We Keep Your Data

Masti 365 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable legal obligations. The specific retention periods we apply are as follows:

• Account data (name, contact details, date of birth): For the duration of your account plus 5 years after account closure, to comply with anti-money laundering record-keeping requirements.
• Identity documents (CNIC, passport): For the duration of your account plus 5 years after closure.
• Transaction records (deposits, withdrawals, bet history): 5 years from the date of the transaction, in line with financial record-keeping requirements.
• Support correspondence: 3 years from the date of the most recent communication.
• Technical log data (IP addresses, session logs): 90 days, unless a specific security investigation requires longer retention.
• Marketing consent records: For the period during which consent is active, plus 2 years after consent is withdrawn.

When data reaches the end of its retention period, it is either permanently deleted from Masti 365's systems or fully anonymised so that it can no longer be linked to any individual.

08Security Measures — How We Protect Your Data

Masti 365 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction or alteration:

• 256-bit SSL/TLS encryption on all data transmitted between your device and Masti 365 servers
• Encrypted storage for sensitive personal data including identity documents and payment references
• Access controls ensuring that Masti 365 staff can only access player data to the extent required by their specific role
• Two-factor authentication available for all player accounts and required for all internal staff accounts
• Continuous security monitoring to detect unusual access patterns or potential data breaches
• Regular security audits of systems and processes handling personal data
• Staff training on data protection obligations and security procedures

In the event of a personal data breach that poses a risk to player rights, Masti 365 will notify affected players promptly and take all necessary steps to contain and remediate the breach. We take our data security obligations seriously — a breach would be a serious failure of our duty to players and we work hard to prevent it.

09Your Privacy Rights as a Masti 365 Player

As a player on Masti 365, you have a number of rights in relation to your personal data. You can exercise any of these rights by contacting our support team at support@masti365.ws. We will respond within 30 days of receiving your request.

To exercise any of these rights, email support@masti365.ws with the subject line "Privacy Rights Request" and describe your request clearly. We may need to verify your identity before processing certain requests to protect against unauthorised access to another player's data.

10Children's Privacy — Strict 18+ Policy

Masti 365 is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. If we discover that a player has registered while under 18 years of age, we will immediately close the account, forfeit any winnings as required by our Terms and Conditions, and delete the personal data collected in connection with that account.

If you are a parent or guardian and believe that a minor may have registered on Masti 365, please contact us immediately at support@masti365.ws. We take underage gambling extremely seriously and will act on any such report without delay.

11Marketing Communications and Your Preferences

Masti 365 sends marketing communications — including information about new promotions, bonuses, tournaments and platform features — only to players who have explicitly consented to receive them. You can give or withdraw consent in your Masti 365 account settings under the "Communication Preferences" section at any time.

Withdrawing marketing consent will not affect your account, your ability to use any Masti 365 product or any other aspect of your relationship with us. You will continue to receive essential service communications — such as account confirmations, withdrawal notifications and security alerts — regardless of your marketing preferences.

Masti 365 does not engage in SMS spam or unsolicited messaging. If you receive communications that appear to be from Masti 365 but that you did not consent to, or that seem suspicious, please report them to our support team immediately.

12Third-Party Links and External Services

The Masti 365 platform does not contain links to external websites for general browsing purposes. All navigation on the platform stays within masti365.ws. The games provided by third-party suppliers (e.g., Evolution Gaming) operate within the Masti 365 interface and do not redirect you to external websites.

Payment processing is handled through payment provider interfaces (e.g., Easypaisa, JazzCash) which may briefly direct you to a secure payment page operated by that provider. Any data you provide directly to a payment provider on their own interface is subject to that provider's privacy policy, not Masti 365's.

Masti 365 is not responsible for the privacy practices of any third-party payment providers, game suppliers or other service providers, except to the extent that we have contractual obligations governing how they handle data on our behalf.

13Updates to This Privacy Policy

Masti 365 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. When material changes are made, we will notify registered players via email and will display a notice on the platform.

The date at the top of this Privacy Policy always reflects the most recent update. Your continued use of the Masti 365 platform after the effective date of any update constitutes your acknowledgement of the revised policy. We encourage you to review this policy periodically.

If you have questions about any update to this policy, contact us at support@masti365.ws before continuing to use the platform.

14Contact Masti 365 About Privacy

If you have any questions, concerns or requests relating to this Privacy Policy or to how Masti 365 handles your personal data, please contact our team through the following channels:

• Email: support@masti365.ws — please use the subject line "Privacy Policy Query" or "Privacy Rights Request" so we can route your message appropriately
• Live Chat: Available 24/7 directly within the Masti 365 platform — our support team can answer general privacy questions immediately and escalate data subject requests to the appropriate team

We aim to respond to all privacy-related enquiries within 3 business days and to resolve data subject requests within 30 days. If your request requires additional information to process, we will let you know promptly.