This Privacy Policy describes how 365gem collects, uses, stores, shares and protects your personal data when you use our platform. We are committed to handling your information transparently and responsibly. Please read this document carefully before creating an account.
A plain-English summary before you read the full policy below.
365gem collects personal data strictly for account operation, transaction processing, KYC compliance and platform improvement. We do not collect data we have no use for.
Your personal information is never sold, rented or traded to third parties for their own marketing or commercial purposes. Full stop.
All data in transit is encrypted via TLS/SSL. Data at rest is protected through access controls and standard encryption practices. We conduct regular security reviews.
You can request a copy of your data, ask us to correct inaccuracies, request deletion, or object to certain processing activities. We take these rights seriously.
We use cookies for session management, security and platform analytics only. We do not use advertising trackers or cross-site behavioural profiling cookies.
For any data-related query — access requests, corrections, deletion or complaints — contact us at the support email listed in Section 12 of this policy.
365gem ("we", "us", "our" or the "Operator") operates the online gaming and sports betting platform accessible at https://365gem.cam (the "Platform"). This Privacy Policy (the "Policy") sets out how we collect, use, store, share and protect the personal data of individuals ("you", "your" or "Data Subject") who register for an account, access the Platform or otherwise interact with our services.
This Policy is an integral part of the 365gem Terms and Conditions and should be read alongside them. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with the data practices described here, please do not use the Platform.
Our Platform is designed primarily for adult users in Pakistan. Where we reference payment methods familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — those references are for contextual purposes only. They do not constitute an endorsement by those providers or any affiliation with 365gem. We process payment-related personal data only as necessary to facilitate your transactions in accordance with this Policy.
Important: This Policy does not constitute legal advice. Applicable data protection legislation may vary depending on your jurisdiction. Pakistani users should note that data protection frameworks applicable in your country may differ from those in the operator's licensing jurisdiction. Nothing in this Policy overrides your rights under applicable local law.
In this Policy, the following expressions carry the meanings set out below:
When you register an account or use the Platform, you provide us with Personal Data including:
When you access the Platform, our systems automatically collect certain technical data:
We may receive Personal Data about you from third-party sources, including:
365gem does not collect or store full payment card numbers. Payment data is handled by third-party payment processors under their own security and compliance obligations. We store only tokenised references or partial identifiers required for transaction management.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Name, date of birth, CNIC, passport | Account registration, KYC, age verification |
| Contact Data | Email, phone number, address | Account communication, support, notifications |
| Financial Data | Deposit/withdrawal records, wallet identifiers | Transaction processing, AML compliance |
| Technical Data | IP address, device ID, browser info | Security, fraud prevention, platform analytics |
| Usage Data | Betting history, session logs, feature interactions | Account management, responsible-gambling monitoring |
| Communications Data | Support tickets, live chat transcripts | Customer service, dispute resolution, training |
365gem uses your Personal Data for the following purposes:
We do not use your Personal Data for automated decision-making in a way that produces significant legal effects without human review, except where required by applicable law or fraud prevention systems, in which case you have the right to request a human review of the decision.
Where applicable data protection legislation requires a legal basis for processing, 365gem relies on the following grounds:
We engage third-party Data Processors to perform services on our behalf. These include KYC and identity verification providers, payment processing and gateway services, cloud hosting and infrastructure providers, fraud detection and AML screening services, and customer support software providers. All Data Processors are contractually required to process data only on our documented instructions and to implement appropriate technical and organisational security measures.
We may disclose your Personal Data to competent authorities, regulators, law enforcement bodies or courts where we are required to do so by law, court order, or regulatory direction; where disclosure is necessary to prevent, detect or prosecute fraud, money laundering or other criminal activity; or where disclosure is required to protect the rights, property or safety of 365gem, our users or the public.
In the event of a merger, acquisition, restructuring or sale of all or part of our business, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify you via the email address on your account before your Personal Data becomes subject to a materially different privacy policy.
365gem does not sell, rent, licence or trade your Personal Data to any third party for that third party's own commercial or marketing purposes under any circumstances.
Payment provider references: When you make a deposit or withdrawal, transaction data is shared with the relevant payment processor solely to complete the transaction. This includes mobile wallet providers and bank transfer intermediaries commonly used in Pakistan. Sharing this data does not constitute selling your data and does not create any relationship between those providers and your 365gem account beyond the processing of the specific transaction.
365gem uses the following categories of cookies and similar technologies on the Platform:
365gem does not deploy advertising cookies, cross-site behavioural tracking pixels or third-party social media tracking scripts that would allow external parties to profile your browsing behaviour outside of the 365gem Platform.
You can control non-essential cookies through your browser's cookie settings. Disabling analytics or functional cookies may affect your experience on the Platform but will not prevent you from accessing core features. For strictly necessary cookies, disabling them through browser settings may prevent the Platform from functioning correctly.
We retain your Personal Data for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal and regulatory obligations. Our standard retention approach is as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity records | Duration of account + minimum 5 years post-closure | AML/KYC regulatory obligation |
| Transaction records | Minimum 5 years from the date of transaction | Financial record-keeping, regulatory requirement |
| Customer support communications | 3 years from closure of the relevant case | Dispute resolution, quality assurance |
| Technical and usage logs | Up to 12 months on a rolling basis | Security monitoring, fraud prevention |
| Marketing consent records | Until consent is withdrawn + 1 year | Compliance with consent-based processing |
When Personal Data is no longer required and the applicable retention period has expired, we delete or anonymise it in a secure manner. Where full deletion is not technically feasible (e.g., encrypted backup media), the data is quarantined and protected until it can be securely destroyed.
365gem operates an international platform. Your Personal Data may be transferred to, stored in, or processed in jurisdictions outside your country of residence — including the jurisdiction in which the Operator is incorporated or licensed, and countries where our Data Processors maintain infrastructure.
Where such transfers occur, we take steps to ensure that your data receives an adequate level of protection consistent with this Policy. These steps may include entering into standard contractual clauses with Data Processors, relying on adequacy decisions where applicable, or implementing equivalent safeguards under the relevant legal framework.
By using the Platform, you acknowledge that your Personal Data may be transferred internationally in the manner described above. If you have questions about the safeguards in place for a specific international transfer, please contact us using the details in Section 12.
Depending on applicable data protection legislation in the jurisdiction governing this Policy, you may have the following rights in relation to your Personal Data held by 365gem:
Request a copy of the Personal Data we hold about you and information about how it is processed.
Request correction of inaccurate or incomplete Personal Data held in your account or records.
Request deletion of your Personal Data where it is no longer needed for the purpose for which it was collected, subject to legal retention obligations.
Request that we restrict processing of your data in certain circumstances, such as while a rectification request is being resolved.
Request a machine-readable copy of Personal Data you have provided to us, where processing is based on consent or contract performance.
Object to processing of your Personal Data based on legitimate interests, including for direct marketing purposes.
Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
Lodge a complaint with a competent supervisory authority or data protection regulator in your jurisdiction if you believe your rights have been violated.
To exercise any of the above rights, please contact us using the details in Section 12. We will acknowledge your request promptly and aim to respond within 30 days. Complex or multiple requests may require up to 90 days; we will notify you if an extension is required. We may need to verify your identity before processing a rights request.
Some rights may be subject to limitations where data must be retained for compliance with legal or regulatory obligations — for example, AML record-keeping requirements may prevent us from deleting certain transaction records before the applicable retention period has expired, even where you have submitted a valid erasure request.
365gem implements technical and organisational measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:
No online platform can guarantee absolute security. We encourage you to use a strong, unique password for your 365gem account, enable any available two-factor authentication, and report suspected unauthorised access to support immediately.
If you have any questions about this Privacy Policy, wish to exercise a data subject right, or need to report a data-related concern, please contact the 365gem support team through the following channels:
For data access requests, deletion requests or consent withdrawals, please include your registered email address and a description of your request. We may ask for additional information to verify your identity before processing the request.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via the email address registered to your account or through a prominent notice on the Platform before the changes take effect. The date at the top of this Policy indicates when it was last reviewed. Your continued use of the Platform following publication of an updated Policy constitutes acceptance of the revised terms.
This Privacy Policy was last reviewed in 2026. Version: 1.0. 365gem is not affiliated with or endorsed by any Pakistani government body, financial regulator or payment provider. References to Pakistani payment methods and cities are provided for contextual purposes only.
Now that you understand how we handle your data, explore the platform, check our FAQ or review our Responsible Gambling tools.
18+ only. Gambling may not be legal in your jurisdiction. Verify local laws before participating.