w367 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is published by w367 ("w367", "we", "us", "our") and applies to all personal data collected from or about users ("you", "your") of the w367 platform, accessible at w367.cam ("Platform"). This Policy should be read together with the Terms & Conditions, which govern your use of the Platform.

w367 is an English-language online betting and live casino platform designed primarily for adult users in Pakistan and other territories where access is not prohibited by applicable law. The Platform presents balances, transactions and content in Pakistani Rupees (PKR) and covers sports markets including cricket, football and UFC, alongside live casino games, slots and table games.

By accessing or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not consent, please discontinue use of the Platform immediately.

2 Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, erasure and destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. In the context of this Policy, this is the Operator of the w367 Platform.
• "Data Processor" means any third party that processes personal data on behalf of the Data Controller under contract and instruction.
• "KYC" means Know Your Customer — the identity verification procedures required by regulatory obligations and internal anti-fraud policies.
• "Cookies" means small text files placed on your device by the Platform to store session and preference information.
• "Applicable Law" means any statute, regulation or directive applicable to the Data Controller's operations and, where applicable, to your jurisdiction.

3 Data Controller

The Data Controller for personal data processed through the w367 Platform is the Operator of the Platform, operating under an international licence where applicable. Enquiries regarding data processing, including requests to exercise data rights, should be directed to:

4 Data We Collect

Depending on how you interact with the Platform, w367 may collect the following categories of personal data:

4.1 Identity & Contact Data

• Full name as provided during registration
• Date of birth (required for age verification)
• Email address and, where provided, mobile number
• Residential address, including city (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Peshawar, Faisalabad or Multan) and country

4.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents (e.g., CNIC, passport)
• Proof of address documentation where requested
• Source-of-funds documentation where applicable under the Operator's AML procedures

4.3 Financial Data

• Deposit and withdrawal transaction records (amounts in PKR, timestamps, methods)
• Account balance history
• Betting and gaming activity records (market types, stakes, outcomes)

4.4 Technical & Device Data

• IP address and approximate geographic location derived from it
• Device type, operating system, browser type and version
• Session identifiers and login timestamps
• Screen resolution and connection type

4.5 Usage & Behavioural Data

• Pages visited, features accessed and navigation paths within the Platform
• Search queries entered within the Platform
• Time spent per session and frequency of visits

4.6 Communication Data

• Content of support enquiries submitted via live chat or email
• Complaint records and their resolution
• Marketing preference records (opt-in and opt-out status)

5 How We Collect Data

w367 collects personal data through the following means:

• Direct provision by you: when you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact support, or set responsible gambling limits.
• Automated technical collection: through cookies, web beacons, server logs and similar technologies that operate when you access the Platform.
• Third-party service providers: identity verification partners, fraud-detection services and payment processors may supply data to us as part of their contracted services. These providers are bound by confidentiality and data-processing agreements.
• Publicly available sources: where necessary for fraud prevention, sanctions screening or regulatory compliance, we may consult publicly available databases.

6 Purposes of Processing & Legal Basis

w367 processes personal data for the purposes and on the legal bases described below. Where "Applicable Law" is referenced as a basis, this refers to the legal obligations of the Operator under its licensing conditions and relevant financial crime legislation.

• Account creation and management: to register your Account, verify your identity and maintain the contractual relationship with you. Legal basis: performance of a contract.
• Age and identity verification (KYC): to confirm that you meet the minimum age requirement (18+ or the higher minimum required by the operator's licence jurisdiction) and to fulfil anti-money laundering (AML) obligations. Legal basis: legal obligation.
• Transaction processing: to process deposits and withdrawal requests, maintain accurate account balance records and resolve payment disputes. Legal basis: performance of a contract.
• Responsible gambling: to monitor betting patterns that may indicate problem gambling, to honour self-exclusion requests and to enforce deposit and loss limits. Legal basis: legal obligation and legitimate interests.
• Fraud prevention and security: to detect, investigate and prevent fraudulent activity, money laundering, collusion and other prohibited conduct. Legal basis: legal obligation and legitimate interests.
• Platform improvement: to analyse usage patterns and improve the performance, usability and content of the Platform. Legal basis: legitimate interests.
• Customer support: to respond to enquiries, resolve complaints and communicate important account updates. Legal basis: performance of a contract and legitimate interests.
• Marketing communications: to send promotional offers, bonuses and news — only where you have given express consent. You may withdraw consent at any time. Legal basis: consent.

7 Data Retention

w367 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention period required by Applicable Law (for example, AML record-keeping obligations that may require retention of transaction records for a defined number of years following Account closure).

• Active Account data is retained for the duration of your Account's existence and for a reasonable period thereafter to resolve any outstanding disputes or regulatory matters.
• KYC documentation is retained in accordance with the Operator's AML policy and applicable regulatory requirements, which may mandate retention for a defined period following the end of the customer relationship.
• Marketing preference records are retained until you withdraw consent, after which they are promptly updated.
• Technical and device data collected via cookies is retained for the duration set out in the Cookie policy applicable at the time of collection.

Once retention periods expire, personal data is securely deleted or anonymised in accordance with our data destruction procedures.

8 Third-Party Data Sharing

w367 does not sell your personal data to third parties. We may share your data only in the following circumstances:

• KYC and fraud-prevention partners: identity verification and fraud-detection service providers who process data on our behalf under written data-processing agreements.
• Legal and regulatory authorities: where disclosure is required by Applicable Law, court order, regulatory direction or the lawful request of a law enforcement authority.
• Game and platform providers: third-party game suppliers integrated into the Platform may receive anonymised session data necessary for game functionality. These providers are contractually prohibited from using such data for independent marketing purposes.
• Business transfers: in the event of a merger, acquisition or sale of assets, personal data may be transferred to the successor entity, subject to the same protections described in this Policy.

9 International Data Transfers

The w367 Platform operates under an international licence and its infrastructure and service providers may be located in jurisdictions outside Pakistan. As a result, your personal data may be transferred to and processed in countries that do not have the same level of data protection laws as your home jurisdiction.

Where such transfers occur, w367 ensures they are conducted in compliance with Applicable Law and subject to appropriate contractual safeguards, such as data-processing agreements containing standard contractual clauses or equivalent protections.

10 Cookies & Tracking Technologies

w367 uses the following types of cookies and tracking technologies:

• Strictly necessary cookies: essential for the Platform to function, including session management, authentication and security tokens. These cannot be disabled without preventing core Platform functionality.
• Functional cookies: remember your preferences, such as language settings and display options, to improve your experience across sessions.
• Analytics cookies: collect anonymised data about how users navigate the Platform to identify improvements. These do not identify you personally.
• Marketing cookies: used only with your prior consent to deliver relevant promotional content. You may withdraw consent at any time through your browser settings or by contacting support.

11 Security Measures

w367 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These include:

• SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encrypted storage of sensitive data including identity documentation and financial records.
• Access controls limiting staff access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of Platform infrastructure.
• Two-step account authentication options for users who choose to enable them.

No system can guarantee absolute security. In the event of a data breach that poses a risk to your rights, w367 will notify affected users and relevant authorities as required by Applicable Law. If you suspect your Account has been compromised, contact us immediately at [email protected].

12 Your Rights as a Data Subject

Subject to Applicable Law, you have the following rights in relation to your personal data held by w367:

• Right of access: you may request a copy of the personal data we hold about you at any time. We will respond within a reasonable period, subject to identity verification.
• Right to rectification: if any personal data we hold is inaccurate or incomplete, you may request that it be corrected. Update requests can also be made directly through your Account settings.
• Right to erasure ("right to be forgotten"): you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing has no other lawful basis. This right does not apply where retention is required by Applicable Law (e.g., AML record-keeping obligations).
• Right to restriction: in certain circumstances, you may request that processing be restricted rather than erased — for example, while the accuracy of data is contested.
• Right to data portability: where processing is based on consent or contract and carried out by automated means, you may request a machine-readable copy of the data you have provided to us.
• Right to object: you may object to processing based on legitimate interests, including profiling for marketing purposes. Where processing is for direct marketing, your objection will be honoured immediately.
• Right to withdraw consent: where processing is based solely on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact us at [email protected]. We may request proof of identity before processing your request. We aim to respond within 30 calendar days.

13 Children & Minors

The w367 Platform is strictly intended for adults aged 18 or older — or the higher minimum age required by the Operator's licence jurisdiction. We do not knowingly collect personal data from persons under the eligible minimum age.

If we become aware that an Account has been opened by or for a person under the eligible minimum age, we will immediately suspend the Account, delete the personal data collected in connection with it to the extent required by law, and forfeit any funds held in that Account in accordance with the Terms & Conditions.

14 Third-Party Links & Services

The w367 Platform does not contain links to external third-party websites. However, third-party game providers integrated within the Platform operate under their own data-processing frameworks. Their processing of technical session data necessary for game delivery is governed by their respective privacy policies and their contractual obligations to w367.

w367 is not responsible for the privacy practices of third-party technology providers beyond the scope of the data-processing agreements in place with those providers.

15 Changes to This Privacy Policy

w367 reserves the right to update this Privacy Policy at any time to reflect changes in processing activities, legal requirements or Platform functionality. The "Last Updated" date at the top of this page will be revised to indicate the effective date of any amendment.

Where changes are material — meaning they significantly affect how your personal data is processed or your rights in relation to it — registered users will be notified via the email address held on their Account. Your continued use of the Platform following notification constitutes acceptance of the revised Policy.

16 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact the w367 support team using the details below:

For further information about your rights as a data subject or the Platform's legal context for Pakistani users, see also our Terms & Conditions and About Us pages.