On This Page
Privacy at a Glance
Registration details, transaction history, device and session data, and communication records with our support team.
To operate your account, process PKR transactions, comply with security requirements, and improve the platform.
Masti 365 staff with a legitimate need, regulated payment processors, and authorities where legally required. Never sold to advertisers.
You can access, correct, or request deletion of your data at any time by contacting our support team.
1. Introduction
This Privacy Policy explains how Masti 365 ("we", "us", "our") collects, uses, stores, and protects the personal information of members and visitors of the platform at masti365.im. It applies to all users of the platform, whether you are browsing as a guest, a registered member, or actively using casino games and sports betting services.
By registering an account or continuing to use the Masti 365 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described here. If you do not agree with any part of this policy, please do not continue using the platform.
This policy is part of a wider set of agreements that include the Terms and Conditions and the Responsible Gaming Policy. These documents should be read together to get a full picture of your rights and our obligations.
Masti 365, operating at masti365.im, is the data controller for all personal information collected through the platform. Our support team can be reached at support@masti365.im for any data-related queries.
Data Encrypted in Transit
All data transmitted between your device and Masti 365 servers uses industry-standard TLS encryption. Nobody can intercept your information mid-transfer.
Never Sold to Advertisers
Masti 365 does not sell, rent, or lease your personal data to third-party advertisers or data brokers. Your information stays within the platform and its regulated service providers.
Access Controls
Only Masti 365 staff with a defined operational need can access your personal data. Access is logged, reviewed, and restricted on a need-to-know basis.
2. Personal Data We Collect
When you use Masti 365, we collect two broad categories of personal data: information you provide directly, and information generated automatically as you use the platform.
Information You Provide
- Registration data: Your full name, date of birth, mobile number, and email address when you create an account.
- Identity verification documents: Where KYC (Know Your Customer) verification is required, we may request a copy of your CNIC or other government-issued identity document.
- Payment information: Mobile wallet identifiers (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details for IBFT transfers, or card details for Visa/Mastercard transactions. Card numbers are processed by PCI-compliant payment providers and are not stored on Masti 365 servers.
- Communication records: Messages sent to our support team via live chat or email.
- Preferences and settings: Responsible gaming limits, notification preferences, and account settings you configure.
Information Collected Automatically
- Device and browser data: IP address, device type, operating system, browser type and version, and screen resolution.
- Session data: Pages visited, time spent on each section, games played, bets placed, and navigation patterns within the platform.
- Transaction logs: Dates, times, amounts, and outcomes of all deposits, withdrawals, bets, and casino rounds.
- Cookies and similar technologies: See Section 7 for a full explanation of how cookies work on Masti 365.
3. Why We Collect Your Data
Masti 365 does not collect data for the sake of it. Every piece of information we hold serves a specific purpose. Here is a plain-language breakdown of what we do with the data we collect:
- Running your account: We need your name, mobile number, and date of birth to create and maintain your Masti 365 account, verify your identity, and process your PKR balance.
- Processing payments: Deposit and withdrawal transactions via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard require payment-related data to be shared with the relevant processor in order to complete the transaction.
- Security and fraud prevention: Device data, IP addresses, and transaction logs help us identify unusual activity, protect your account from unauthorised access, and detect patterns associated with fraud or money laundering.
- Age and identity verification: We are required to verify that all members are aged 18 or above before they can deposit or play.
- Responsible gaming obligations: We use account activity data to monitor for signs of problematic gambling behaviour and to apply the limits or restrictions you request.
- Customer support: Communication records are used to investigate and resolve your queries, complaints, or disputes.
- Platform improvement: Aggregated and anonymised usage data helps us understand how players navigate the platform and where improvements are needed.
- Marketing communications: If you have consented to receive promotional messages, we use your contact details to send relevant offers. You can opt out at any time – see Section 12.
4. Legal Basis for Processing
We process your personal data on one or more of the following legal bases depending on the specific purpose:
- Contract performance: Processing necessary to create and operate your account and to execute the services you have requested, including deposits, withdrawals, and gameplay.
- Legal obligation: Compliance with applicable security, anti-money-laundering, age verification, and responsible gaming requirements.
- Legitimate interests: Fraud prevention, platform security, and improvement of the gaming experience, provided these interests do not override your rights.
- Consent: Marketing communications and non-essential cookies, where you have given explicit consent which you may withdraw at any time.
Data Processing Summary
| Data Category | Primary Purpose | Legal Basis |
|---|---|---|
| Name, date of birth, mobile number | Account creation and identity verification | Contract |
| CNIC / identity document | Age and KYC verification | Legal Obligation |
| Payment method identifiers | Processing PKR deposits and withdrawals | Contract |
| Transaction and bet history | Account records, responsible gaming, disputes | Legal Obligation |
| Device and IP data | Security, fraud prevention | Legitimate Interest |
| Support communications | Dispute resolution and service quality | Legitimate Interest |
| Marketing preferences | Sending relevant promotions and offers | Consent |
| Cookies (non-essential) | Platform analytics and session improvement | Consent |
6. Payment Data and Financial Information
Because Masti 365 handles real PKR transactions, payment data is subject to additional care beyond standard personal information handling.
- Card numbers and full bank account details for Visa/Mastercard transactions are handled by PCI-DSS compliant payment processors. Masti 365 does not store full card numbers on its own servers.
- Mobile wallet identifiers (Easypaisa account numbers, JazzCash numbers, NayaPay, SadaPay) are stored only to the extent necessary to process withdrawals to your registered account.
- A full transaction log – including dates, amounts, and methods – is retained as required for financial compliance, responsible gaming monitoring, and dispute resolution.
- Any withdrawal request is matched against the payment method used for deposit. This is a fraud prevention measure designed to protect you as much as the platform.
7. Cookies and Tracking Technologies
Masti 365 uses cookies and similar technologies to make the platform work properly and to understand how it is being used. A cookie is a small text file stored on your device by your browser when you visit the platform.
Types of Cookies We Use
- Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit. You cannot opt out of essential cookies without stopping the platform from working.
- Analytics cookies: Used to understand which pages are visited most often, how long sessions typically last, and which features are used. This data is aggregated and anonymised. We use analytics solely to improve the platform experience for Pakistani players.
- Preference cookies: Store your in-platform settings such as language preference and responsible gaming limits so you don't have to re-enter them each session.
You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using Masti 365 but may affect the way certain features behave across sessions.
Encrypted Data Storage
Personal data stored on Masti 365 servers is encrypted at rest. Even in the unlikely event of a server breach, your data is not readable without the encryption keys.
Breach Notification
In the event of a data breach affecting your personal information, Masti 365 will notify affected members promptly and take immediate steps to contain and investigate the incident.
8. Security of Your Data
Protecting your personal data is a genuine operational priority at Masti 365, not just a compliance exercise. The technical and organisational measures we have in place include:
- TLS encryption for all data transmitted between your device and the platform.
- Encryption at rest for sensitive personal data stored on platform servers.
- Access controls that limit which staff members can view personal data, with access logs reviewed regularly.
- Two-factor authentication options available for your account to add an additional layer of login security.
- Regular security reviews of the platform infrastructure to identify and address vulnerabilities.
- Payment processor compliance with PCI-DSS standards for all card data handling.
Despite these measures, no internet-connected system can guarantee absolute security. In the event of a data breach, Masti 365 will take immediate steps to contain the incident and notify affected members without undue delay.
You play an important role in keeping your account secure. Use a strong, unique password for your Masti 365 account. Do not share your login credentials with anyone. If you suspect your account has been accessed without your permission, contact support immediately via live chat.
9. How Long We Keep Your Data
Masti 365 keeps your personal data only for as long as it is necessary for the purposes it was collected, or as required by law. The general principles are:
- Active account data: Retained for the duration of your membership and for a period of five years after your account is closed, as required for financial compliance and responsible gaming record-keeping obligations.
- Transaction records: Deposit, withdrawal, and betting records are retained for a minimum of five years following the transaction date for financial compliance purposes.
- Identity verification documents: Retained for the period required by applicable security and anti-money-laundering regulations, typically five years from the end of the business relationship.
- Support communications: Retained for three years unless a dispute or legal matter requires longer retention.
- Marketing data: Retained until you withdraw consent or for one year of inactivity in marketing engagement, whichever comes first.
- Analytics data: Aggregated and anonymised after 13 months; individual session data is not retained beyond this period.
When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to you as an individual.
10. Your Data Rights
As a Masti 365 member, you have the following rights regarding your personal data. You can exercise any of these by contacting our support team:
Right of Access
Request a copy of the personal data we hold about you. We will respond within 30 days of a verified request.
Right to Rectification
Ask us to correct inaccurate or incomplete personal data. You can also update most information directly in your account settings.
Right to Erasure
Request deletion of your personal data where we no longer have a legitimate reason to retain it. Note that legally required records cannot be deleted before their mandatory retention period expires.
Right to Restrict Processing
Ask us to limit how we use your data while a correction or objection request is being investigated.
Right to Data Portability
Request your personal data in a structured, commonly used format so you can transfer it elsewhere if you choose.
Right to Object
Object to processing based on legitimate interests, including direct marketing. We will stop that processing unless we can demonstrate compelling legitimate grounds.
Contact Masti 365 support via live chat or at support@masti365.im. We will verify your identity before acting on any data request and will respond within 30 days.
11. Minors and Under-18 Users
Masti 365 is strictly for adults aged 18 and above. The platform does not knowingly collect personal data from anyone under the age of 18. If we discover or are notified that a member is under 18, the account will be suspended immediately, any remaining balance will be returned to the deposit source, and all personal data associated with the account will be deleted as soon as legally permissible.
If you are a parent or guardian and believe your child has created a Masti 365 account, please contact us immediately at support@masti365.im and we will address the matter without delay.
12. Marketing Communications
If you have opted in to receive marketing communications from Masti 365, we may contact you via SMS, email, or in-app notification with information about promotions, bonus offers, and new features relevant to Pakistani players.
- Marketing messages are sent only to members who have explicitly opted in during registration or via their account settings.
- You can opt out of marketing communications at any time by updating your notification preferences in the account settings page, or by clicking the unsubscribe link in any marketing email.
- Opting out of marketing does not affect your ability to use the platform, receive transactional notifications (such as deposit confirmations or withdrawal updates), or receive account security alerts.
- Masti 365 does not share your contact details with third-party marketers.
13. Changes to This Privacy Policy
Masti 365 may update this Privacy Policy from time to time to reflect changes in the platform, applicable law, or our data handling practices. When we do:
- The "Last updated" date at the top of this page will be revised.
- Material changes – those that significantly affect how your data is used or your rights – will be communicated to registered members by email before taking effect.
- A notice will be displayed prominently on the platform for at least 7 days following any significant update.
Continued use of the platform following the effective date of any changes constitutes your acceptance of the updated policy. If you do not accept the changes, please close your account before they take effect.
14. Contact Us About Your Privacy
If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how Masti 365 handles your personal information, please get in touch:
- Live Chat: Available 24/7 on any page of the platform. This is the fastest way to reach us – average response time under 2 minutes during peak hours.
- Email: support@masti365.im – responses within 24 hours on business days.
For responsible gaming concerns, deposit and withdrawal queries, or general platform questions, the FAQ page covers most common topics in plain language and is often the fastest way to find an answer without waiting for a support response.
Any request to access, correct, delete, or restrict your personal data will be handled by a designated member of the Masti 365 team. We will verify your identity before processing the request and will respond within 30 days.