Privacy Policy
How 395bet Handles Your Data

This Privacy Policy is issued by 395bet ("395bet", "we", "us", "our"), an internationally licensed online gaming platform operating the website at https://395bet.im. 395bet acts as the data controller in respect of all personal data collected from registered players and website visitors in connection with the provision of its gaming and related services.

This policy applies to all personal data collected through the 395bet website, mobile application, customer support channels, and any other touchpoint through which you interact with the 395bet platform. It applies to registered players, prospective players who have begun but not completed the registration process, and anonymous visitors to the 395bet website.

395bet collects personal data that falls into the following categories. We collect only what is necessary for the purposes described in this policy.

395bet does not collect or store complete payment card numbers. Where card payment options are made available, full card processing is handled exclusively by PCI-DSS compliant payment processors, and 395bet receives only a tokenised reference.

395bet collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when registering your 395bet account, completing identity verification (KYC), making deposits or withdrawal requests, contacting customer support, or responding to surveys and promotions.
• Automated collection: Technical data collected automatically when you access the 395bet platform, including IP address, device identifiers, browser fingerprint data, and session activity logs. This data is collected via server logs, cookies, and similar tracking technologies described in Section 7.
• Third-party sources: Identity and address verification data received from accredited KYC and anti-fraud service providers when we verify your registration details. Payment confirmation data received from JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and other payment processors used on the 395bet platform.
• Publicly available sources: In limited circumstances connected with fraud prevention or sanctions screening, 395bet may cross-reference data against publicly available databases or regulatory watchlists.

395bet uses the personal data it collects for the following specific purposes. Each purpose is linked to a lawful basis set out in Section 5.

• Account registration and management: To create, verify, and maintain your 395bet player account, and to authenticate your identity at login.
• Identity verification (KYC): To verify your age (21+ requirement), identity, and address in compliance with our licence obligations and anti-money-laundering regulations.
• Payment processing: To process your deposits and withdrawal requests via JazzCash, EasyPaisa, Raast, bank transfer, and other supported payment channels in PKR.
• Gaming services delivery: To operate sports betting, live casino, slots, crash games, and all other 395bet products and to calculate and pay out winnings accurately.
• Responsible gaming compliance: To monitor gaming patterns for signs of problem gambling, to enforce self-exclusion and deposit limit requests, and to comply with our responsible gaming obligations under our international licence.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, collusion, and other prohibited conduct on the 395bet platform.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of communications for quality assurance and regulatory purposes.
• Marketing communications: To send you promotional offers, PSL betting updates, and platform news where you have opted in to receive such communications. You may opt out at any time via your account settings.
• Legal and regulatory compliance: To comply with applicable laws, respond to regulatory enquiries, and fulfil our obligations under our international gaming licence.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the performance, design, and feature set of the 395bet platform.

395bet processes your personal data on the following legal bases, each of which applies to one or more of the purposes described in Section 4:

• Contractual necessity: Processing required to fulfil our obligations to you under the 395bet Terms and Conditions — including account management, payment processing, game delivery, and customer support.
• Legal obligation: Processing required to comply with our obligations under applicable law and our international gaming licence, including KYC verification, anti-money-laundering checks, and responsible gaming monitoring.
• Legitimate interests: Processing necessary for our legitimate interests in preventing fraud, maintaining platform security, improving our services, and enforcing our Terms and Conditions, where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your specific, informed, and freely given consent — principally in connection with direct marketing communications and non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

395bet does not sell your personal data. We share personal data with third parties only in the following limited and controlled circumstances:

• Payment processors: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and other payment service providers who process your deposits and withdrawals. These providers receive only the data necessary to complete the relevant transaction.
• Identity verification providers: Accredited KYC and document verification service providers engaged to verify your identity and age as part of our registration and ongoing compliance processes.
• Fraud prevention and AML services: Third-party fraud detection, anti-money-laundering screening, and sanctions checking service providers who assist 395bet in identifying and preventing prohibited financial activity.
• Technology infrastructure providers: Cloud hosting, platform infrastructure, and software providers who process personal data on 395bet's behalf under binding data processing agreements that require them to maintain appropriate security standards.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory directive, 395bet may disclose personal data to competent authorities. 395bet will notify you of such disclosures where legally permitted to do so.
• Dispute resolution providers: In the event of a player dispute escalated beyond our internal process, relevant data may be shared with the applicable dispute resolution body operating under our gaming licence.

All third-party data processors engaged by 395bet are bound by contractual data processing agreements that prohibit them from using your data for any purpose beyond the specific service they are contracted to provide, and that require them to maintain appropriate technical and organisational security measures.

The 395bet platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, to maintain your login session, and to gather anonymised analytics data that helps us improve the platform over time.

The categories of cookies used on 395bet are as follows:

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that keep you logged in during your 395bet visit and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences, such as your selected language, display settings, and responsible gaming tool configurations on 395bet.
• Analytics cookies: Used to collect anonymised data about how players navigate and interact with the 395bet platform. This data is used solely to improve platform performance and user experience. No personally identifiable information is included in analytics reports.
• Marketing cookies: Used only where you have given explicit consent, to deliver relevant promotional communications about 395bet offers. You may withdraw consent for marketing cookies at any time via your browser settings or the 395bet cookie preference centre.

395bet retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and to comply with our legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your active relationship with 395bet, and for a minimum period of five (5) years following account closure, in accordance with our anti-money-laundering and gaming licence record-keeping obligations.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification, or longer if required by the applicable regulatory framework.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, consistent with standard financial record-keeping requirements.
• Customer support communications: Retained for three (3) years from the date of the relevant interaction, for quality assurance and dispute resolution purposes.
• Marketing preferences and consent records: Retained for three (3) years from the date of last interaction, or until consent is withdrawn, whichever is earlier.
• Technical and log data: Retained for up to twelve (12) months for security monitoring and fraud detection purposes, after which it is anonymised or deleted.

When personal data is no longer required for any of the above purposes, 395bet will securely delete or anonymise it in accordance with industry-standard data destruction procedures.

As a data subject, you hold the following rights in respect of your personal data held by 395bet. To exercise any of these rights, please contact our support team using the details in Section 14.

395bet will respond to all valid data rights requests within 30 days of receipt. Where a request is complex or numerous, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

The 395bet platform is strictly restricted to individuals aged 21 years and above. 395bet does not knowingly collect personal data from individuals under the age of 21, and does not permit anyone under 21 to register or access its gaming services under any circumstances.

As part of our mandatory KYC process, all players are required to verify their date of birth and provide government-issued photo identification before their account is fully activated. Any account found to have been registered using false age information will be immediately closed and all associated balances forfeited pending investigation.

If 395bet becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account permanently closed. Parents or guardians who believe their child may have accessed the 395bet platform should contact our support team immediately using the details in Section 14.

395bet implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures in place on the 395bet platform include:

• Transport encryption: All data transmitted between your device and the 395bet platform is encrypted using TLS 1.2 or higher with 256-bit encryption keys.
• Data at rest encryption: Sensitive personal data stored in 395bet databases, including identity documents and financial data, is encrypted at rest using AES-256 or equivalent standards.
• Access controls: Access to personal data within 395bet's internal systems is governed by role-based access controls. Only personnel who require access to fulfil their specific job function are authorised to view personal data.
• Multi-factor authentication: Internal 395bet systems holding personal data require multi-factor authentication for all personnel access.
• Penetration testing: The 395bet platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response: 395bet maintains a documented security incident response procedure. In the event of a confirmed data breach, affected players will be notified promptly, and regulatory authorities will be informed where required.

As an internationally licensed gaming platform, 395bet may process and store personal data on servers located outside Pakistan. Where personal data is transferred internationally, 395bet ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this policy.

Safeguards used for international data transfers include contractual data processing agreements with all third-party processors incorporating standard data protection clauses, and a requirement that all processors maintain security standards equivalent to or exceeding those described in Section 11 of this policy.

If you would like further information about the specific safeguards applied to international transfers of your personal data, please contact our support team using the details in Section 14.

395bet reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, our regulatory obligations, or the services we offer. The date of the most recent revision is displayed prominently at the top of this page.

Where updates to this policy are material — meaning they significantly affect how your personal data is processed or the rights available to you — 395bet will provide advance notice via email to the address registered on your account, or via a prominent in-platform notification, before the changes take effect.

Your continued use of the 395bet platform following the effective date of any updated Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the updated policy, you should close your account and cease using the platform before the changes take effect.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy-related complaint, please contact the 395bet data protection team using the following details:

395bet will acknowledge all privacy-related enquiries within 48 hours and will respond substantively within 30 days of receipt. If you are not satisfied with 395bet's response to a privacy complaint, you retain the right to escalate the matter to the applicable data protection authority or the dispute resolution body operating under our gaming licence.