masti365 Privacy Policy — How We Protect Your Data in Pakistan

This Privacy Policy ("Policy") explains how masti365 ("we", "us", "our", "masti365") collects, processes, stores and protects the personal data of registered users ("you", "Player") who access the masti365 platform at masti365.bid.

At masti365, we understand that handing over personal information to an online platform requires trust. Pakistani players who register with us are sharing their real names, mobile numbers, payment details and sometimes identity documents. We do not take that lightly. This Policy exists to give you a clear, honest account of what happens to that information — not to bury important details in legal jargon that nobody reads.

This Policy applies to all masti365 services, including sports betting, cricket betting, PSL betting, jackpot slots, Teen Patti, live dealer casino games, and any promotional features accessible through masti365.bid.

By registering an account on masti365, you confirm that you have read this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should not register or use the masti365 platform.

masti365 collects personal data in several ways — directly when you provide it to us, automatically as you use the platform, and from third parties such as payment processors. Here is a full breakdown of the categories of data we collect.

2.1 Data You Provide Directly

2.2 Data Collected Automatically

When you access masti365, our systems automatically collect certain technical data including:

• IP address and approximate location (city/region level — masti365 does not use precise GPS tracking).
• Device type, operating system and browser version.
• Pages visited, features used, time on platform and navigation paths.
• Betting and gaming history (bets placed, outcomes, deposit and withdrawal history).
• Session duration and frequency of visits.

2.3 Data from Third Parties

masti365 may receive data about you from third-party service providers including:

• Payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, banks) — confirmation of payment status and account holder name.
• Identity verification services — confirmation that submitted identity documents are valid.
• Fraud prevention services — risk scores and flags based on device and behavioural signals.

masti365 uses the personal data we collect for specific, clearly defined purposes. We do not use your data for anything that is not described in this Policy, and we do not sell it to third parties for marketing or advertising purposes.

Core Service Purposes

• Account management: Creating and maintaining your masti365 account, verifying your identity, and providing access to all platform features.
• Processing transactions: Handling PKR deposits and withdrawals via your chosen local payment method — Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT or card.
• Bet and game settlement: Recording bets, calculating payouts, crediting winnings and maintaining an accurate account balance history.
• Customer support: Responding to your queries, resolving payment issues and processing account requests via live chat and email.

Safety, Legal and Compliance Purposes

• Age and identity verification: Confirming you are 18 or older and that you are who you say you are before allowing withdrawals above verification thresholds.
• Anti-money laundering (AML): Monitoring deposit and withdrawal patterns to detect suspicious activity and comply with legal AML obligations.
• Fraud prevention: Identifying and blocking fraudulent account creation, payment fraud and bonus abuse attempts.
• Responsible gaming: Identifying signs of problem gambling behaviour — such as rapid escalation of deposits or session length patterns — and triggering appropriate interventions or alerts.

Improving the masti365 Platform

• Analysing anonymised usage data to improve platform performance, identify popular features and fix technical issues.
• Testing new features and betting market formats on the basis of aggregated player behaviour data.

masti365 processes your personal data on the following legal grounds, depending on the type of data and the purpose of processing:

• Contractual necessity: Processing your identity data, payment data and betting history is necessary to perform the contract between you and masti365 — in other words, to operate your account and deliver the services you signed up for.
• Legal obligation: Identity verification, AML monitoring and record retention are required by applicable laws and regulations. masti365 must process this data to remain compliant.
• Legitimate interest: Fraud detection, platform security monitoring and product improvement are conducted on the basis of masti365's legitimate business interests, provided those interests do not override your fundamental privacy rights.
• Consent: Marketing communications and certain optional analytics features are processed only on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

masti365 does not sell your personal data to any third party under any circumstances. We share data only in the specific and limited situations described below.

Service Providers

masti365 works with carefully selected third-party service providers who process data strictly on our behalf and under our instructions. These include:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay and banking partners — to process your PKR deposits and withdrawals.
• Identity verification providers: For CNIC and document verification during KYC checks.
• Cloud hosting and infrastructure providers: Secure server infrastructure on which the masti365 platform operates.
• Fraud prevention and cybersecurity firms: To protect accounts and transactions from fraudulent activity.

All service providers are bound by data processing agreements that prohibit them from using masti365 player data for any purpose other than the specific service they are contracted to provide.

Legal & Regulatory Disclosure

masti365 may be required to share player data with regulatory authorities, law enforcement agencies or courts where we receive a valid legal request or where we are required to do so by law. In such cases, we will share only the minimum data required to satisfy the legal obligation and will notify the affected player where we are legally permitted to do so.

Business Transfers

In the event that masti365 or its parent entity is involved in a merger, acquisition or sale of assets, player data may be transferred to the successor entity. In such a scenario, you will be notified via your registered contact details before your data is transferred and will be given the option to close your account and request data deletion if you do not consent to the transfer.

masti365 uses cookies and similar tracking technologies to make the platform work properly, remember your preferences and understand how players use the site. Here is a clear explanation of what each category of cookie does.

Cookie Categories Used on masti365

Types of Cookies Used

masti365 does not use third-party advertising cookies. No advertising network has access to your browsing activity through the masti365 platform. You can manage your cookie preferences through the masti365 cookie settings panel available in the footer of every page.

masti365 retains your personal data only for as long as is necessary for the purpose for which it was collected, or as required by law. The following retention periods apply:

After the applicable retention period expires, personal data is either securely deleted or anonymised so that it can no longer be linked back to an individual player. Anonymised data may be retained indefinitely for aggregate statistical purposes.

masti365 implements a layered security framework to protect your personal data from unauthorised access, disclosure, alteration or destruction. Our security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser or device and the masti365 servers. Every page, every bet, every payment is encrypted in transit.
• Encrypted data storage: Sensitive fields such as passwords (stored as salted hashes), CNIC numbers and payment identifiers are encrypted at rest in our databases.
• Access controls: masti365 staff access to player data is granted on a strict need-to-know basis. Support agents can see the minimum data required to help you — they cannot see your password or full payment credentials.
• Regular security audits: Independent third-party penetration testing and security reviews are conducted regularly on the masti365 platform.
• Fraud monitoring: Automated and manual monitoring of unusual access patterns, login attempts and transaction behaviour to detect and respond to security threats quickly.
• Incident response plan: masti365 maintains a documented data breach response procedure. In the event of a confirmed breach affecting your personal data, we will notify you within 72 hours of becoming aware of the breach.

As a masti365 player, you have specific rights regarding your personal data. These rights are genuine and enforceable — masti365 takes data rights requests seriously and responds to them within a reasonable timeframe.

How to Exercise Your Rights

To exercise any of the above rights, contact the masti365 Data team at support@masti365.bid with the subject line "Data Rights Request" and a description of what you are requesting. We will acknowledge your request within 5 business days and fulfil it within 30 days. In complex cases, we may extend this to 60 days with notice to you.

We will not charge a fee for any data rights request unless it is manifestly unfounded or excessively repetitive, in which case we may charge a reasonable administrative fee. We will explain why before proceeding.

masti365 does not knowingly collect personal data from anyone under the age of 18. Our platform is strictly 18+ and we take robust measures to verify player ages during registration and at points of high-value withdrawals.

If we discover or are notified that an account has been registered by a person under 18, we will immediately suspend the account, forfeit any winnings, and securely delete the personal data of the underage individual from our systems as quickly as applicable legal retention obligations allow.

Parents and guardians who believe their child may have registered on masti365 should contact us immediately at support@masti365.bid. We will act on such reports promptly. We also encourage parents to install parental control software on shared devices to prevent minors from accessing online gambling platforms.

masti365 may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to how we explain our processes. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Post the revised Policy here at masti365.bid/privacy-policy.
• Notify registered masti365 players via email or in-platform notification at least 7 days before the changes take effect, where those changes are material.

Your continued use of masti365 after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you may close your account and request data deletion before the changes take effect.

We recommend revisiting this page periodically — the version history below makes it easy to see what has changed.

If you have questions about this Privacy Policy, want to exercise your data rights, or wish to raise a data protection concern, please contact the masti365 team through the following channels:

• Email (Data Requests): support@masti365.bid — subject line "Privacy Policy Query" or "Data Rights Request".
• Live Chat: Available 24/7 on masti365.bid when logged in. For complex data queries, email is preferred as it provides a written record.

We aim to acknowledge all privacy-related communications within 5 business days and to provide a full response within 30 days. For urgent matters — such as suspected unauthorised access to your account — please use live chat for the fastest response.

For concerns specifically related to responsible gaming, self-exclusion, or deposit limits, please visit our Responsible Gaming page which has dedicated pathways for these requests.