🔐 w367 Privacy Policy

This Privacy Policy is issued by w367 ("w367", "we", "us", "our") and applies to all personal data processed in connection with the operation of w367.org and any associated mobile-optimised interfaces (collectively, the "Platform"). For the purposes of applicable data protection law, w367 acts as the data controller with respect to personal data collected directly from users ("you", "Player") of the Platform.

w367 is a digital gambling brand serving English-speaking Pakistani players and a global audience through w367.org. Our player base spans all major cities in Pakistan — Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, and beyond — as well as international players where w367's services are lawfully accessible.

By creating a w367 account, depositing funds, placing bets, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

w367 collects personal data through multiple channels. The categories of data collected are as follows:

w367 does not collect special categories of personal data (such as health data, biometric data, or religious beliefs) unless specifically required for responsible gaming compliance purposes and with your explicit consent.

w367 processes your personal data for the following purposes:

• Account Management: To create, verify, maintain, and secure your w367 account; to authenticate you on each w367 login; and to communicate essential account information including security alerts and transaction confirmations.
• Payment Processing: To process PKR deposits via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah, and to execute withdrawal requests in accordance with our Terms and Conditions.
• Legal & Regulatory Compliance: To verify your age (18+ requirement), perform identity checks (KYC), conduct anti-money laundering (AML) screening, and comply with applicable regulatory obligations including fraud prevention and reporting duties.
• Service Delivery: To provide access to cricket betting markets (including PSL, ICC tournaments), live casino tables, slots, and all other w367 product features.
• Responsible Gaming: To monitor gambling behaviour for signs of problem gambling; to apply account-level restrictions where required; and to manage self-exclusion, deposit limits, and cooling-off periods.
• Marketing & Promotions: Where you have opted in, to send you promotional communications about w367 bonuses, PSL season promotions, and new features. You may withdraw consent at any time from your account settings.
• Platform Improvement: To analyse aggregated usage data, identify technical issues, optimise page performance for Pakistani mobile networks, and improve the w367 user experience.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, account takeovers, collusion, and other prohibited conduct as defined in our Terms and Conditions.

w367 processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to perform our contractual obligations to you as a registered w367 player, including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws including AML regulations, age verification requirements, and fraud reporting obligations.
• Legitimate Interests: Processing conducted in pursuit of w367's legitimate business interests, including fraud prevention, platform security, and service improvement, provided such interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed consent — principally direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

w367 does not sell your personal data to third parties. We may share your data with the following categories of recipients where necessary and lawful:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and associated payment gateway providers — only the data necessary to process your transaction is shared.
• Identity Verification Providers: Third-party KYC service providers for age and identity verification, including CNIC validation where applicable.
• Game Software Providers: Certified casino game and sportsbook technology providers who supply the games and betting infrastructure underlying w367's platform. These providers process limited technical data necessary for game delivery.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or regulatory directive, w367 may disclose personal data to relevant authorities including financial intelligence units and law enforcement agencies.
• Professional Advisers: Lawyers, accountants, and auditors acting as service providers on a confidential basis where necessary for the operation of w367's business.

All third parties with whom w367 shares personal data are required to handle such data in accordance with applicable data protection law and w367's data processing standards. w367 does not authorise any third party to use your personal data for their own marketing purposes.

w367 uses cookies and similar tracking technologies on the Platform to ensure the website functions correctly and to improve your experience. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your w367 account and security cookies that protect against CSRF attacks. These cannot be disabled.
• Functional Cookies: Remember your preferences including language settings, preferred sports markets (e.g., PSL, cricket), and responsible gaming limit settings.
• Analytics Cookies: Aggregate, anonymised data used to understand how Pakistani players navigate the Platform, which pages load slowly on mobile networks, and which features are most used. No personally identifying information is included in analytics reports.
• Marketing Cookies: Used to measure the effectiveness of w367 promotions where you have consented to marketing communications. These do not track your activity on third-party websites.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform, including completing the w367 login process.

w367 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your w367 account plus a minimum of five years following account closure, in accordance with AML and financial record-keeping requirements.
• Transaction records: Retained for a minimum of five years following each transaction as required for financial compliance purposes.
• KYC / identity documents: Retained for a minimum of five years following account closure or the last transaction, whichever is later.
• Support communications: Retained for three years from the date of the communication.
• Marketing data: Retained until you withdraw consent, subject to a maximum of three years from your last active engagement with w367 marketing materials.

Upon expiry of the applicable retention period, w367 will securely delete or anonymise your personal data.

Subject to applicable law, you have the following rights in respect of your personal data held by w367:

To exercise any of your rights, please submit a written request to w367 at [email protected] (plain text — not a link), clearly identifying yourself and specifying the right(s) you wish to exercise. w367 will respond within 30 days of receiving a valid request. We may request additional documentation to verify your identity before processing a rights request.

Please note that certain rights are subject to limitations under applicable law — for example, w367 may be required to retain certain financial records notwithstanding a right-to-erasure request.

w367 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and w367 servers — the same standard used by major Pakistani banks including HBL and Meezan Bank.
• Encrypted storage of passwords and sensitive account credentials using industry-standard hashing algorithms.
• Two-factor authentication (2FA) available for all w367 accounts, strongly recommended for all players.
• Role-based access controls limiting employee access to personal data to those with a legitimate business need.
• Regular security audits and penetration testing of the w367 platform infrastructure.
• Incident response procedures enabling w367 to detect, contain, and notify affected players of any data breach in accordance with applicable obligations.

Despite these measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your w367 login credentials and for notifying w367 immediately if you suspect any unauthorised access to your account.

w367's services are strictly prohibited for individuals under the age of 18. w367 does not knowingly collect or process personal data relating to persons under 18 years of age. If w367 discovers or is notified that personal data has been collected from an individual under 18, we will immediately close the associated account, forfeit any associated balance in accordance with applicable law, and securely delete the personal data in question.

Parents and guardians who have reason to believe that a minor has created a w367 account or provided personal data to w367 should contact us immediately at [email protected] (plain text — not a link).

w367 may transfer your personal data to recipients located in countries outside of your own jurisdiction, including countries that may not provide the same level of data protection as Pakistan or your country of residence. Where such transfers occur, w367 takes appropriate steps to ensure your data remains protected to an equivalent standard, including through the use of contractual safeguards with data recipients.

Specifically, personal data may be transferred to servers and service providers located in jurisdictions where w367's technology infrastructure is hosted and where certified game providers are domiciled. All such transfers are governed by appropriate data transfer agreements.

w367 reserves the right to update this Privacy Policy at any time. Where material changes are made, w367 will notify registered players by email and/or by prominent notice on the Platform prior to the changes taking effect. The date at the top of this policy reflects the most recent revision.

Your continued use of w367 following notification of changes to this Privacy Policy constitutes your acceptance of the updated policy. If you do not accept the revised policy, you must cease using the Platform and request account closure.

For any privacy-related questions, data subject rights requests, or concerns about how w367 handles your personal data, please contact our data privacy team:

📧 [email protected] (plain text — not a link)
⏰ Response time: within 2 business days for privacy enquiries; within 30 days for formal data subject rights requests.