Introduction
This Privacy Policy ("Policy") explains how 345com ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects personal data relating to registered players, visitors, and prospective users of 345com.net ("the Site") and all associated services and mobile interfaces operated under the 345com brand.
345com is committed to handling your personal information with the utmost care and in compliance with applicable international data protection standards. We believe every Pakistani player deserves to know exactly what data we hold about them, why we hold it, and what we do with it — so this Policy is written in plain English, without unnecessary legal jargon.
This Privacy Policy applies to all 345com products and services including sports betting (cricket, PSL, football, UFC, kabaddi), live casino, slot games, the VIP Programme, and all promotional activities conducted through 345com.net. By creating an account or using the Platform, you confirm your acceptance of this Policy.
This Policy should be read alongside the 345com Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference. If there is any conflict between this Policy and those documents on a privacy matter, this Policy takes precedence.
Data Controller
For the purposes of applicable data protection law, 345com is the data controller of all personal data collected through the Site and its associated services. As data controller, 345com determines the purposes for which and the means by which personal data is processed.
If you have any questions about how 345com processes your personal data, or if you wish to exercise any of your privacy rights described in this Policy, you can contact our Data Protection team directly using the contact details set out in Section 14 of this Policy.
345com operates under an international gaming licence. Your data may be processed in the jurisdiction where our licence is held. Where data is transferred internationally, we ensure appropriate safeguards are in place as described in Section 12 of this Policy.
Data We Collect
345com collects several categories of personal data depending on how you interact with the Platform. The table below summarises what we collect and the primary source of that data:
| Data Category | Examples | Source |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC / passport number | Provided by you at registration and KYC |
| Contact Data | Email address, mobile number, residential address | Provided by you at registration |
| Financial Data | JazzCash / EasyPaisa account number, bank account details, transaction history, deposit and withdrawal records | Provided by you and generated by Platform use |
| Verification Data | Copies of government-issued ID, proof of address, selfie verification images | Provided by you during KYC process |
| Technical Data | IP address, browser type and version, device identifier, operating system, screen resolution, time zone | Automatically collected when you access the Site |
| Usage Data | Pages visited, games played, bets placed, session duration, navigation paths, feature usage | Automatically collected during Platform use |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Generated when you contact support |
| Marketing Preferences | Promotional opt-in/out status, preferred bonus types, communication channel preferences | Provided by you or inferred from Platform activity |
345com does not collect or process special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data for identification purposes, health data, or data concerning sexual orientation. We do not collect payment card numbers directly — all card transactions are handled by PCI-DSS-compliant payment processors.
How We Use Your Data
345com uses your personal data only for legitimate, clearly defined purposes. We do not use your data for purposes that are incompatible with those set out in this Policy. The primary purposes for which we process your personal data are as follows:
- Account Management: To create, maintain, and administer your 345com player account, including processing your registration, verifying your identity, and managing your account settings and preferences.
- Service Delivery: To process your bets, deposits, and withdrawals; to provide access to cricket betting markets, casino games, and slot titles; and to operate all Platform features you use.
- KYC & Age Verification: To verify that you meet our 21+ age requirement and to confirm your identity in compliance with our licensing obligations and anti-money-laundering (AML) requirements.
- Payment Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, SadaPay, USDT TRC20, and Visa / Mastercard, and to investigate any disputed transactions.
- Fraud & Security: To detect and prevent fraud, money laundering, cheating, and other prohibited conduct; to monitor for unusual account activity; and to investigate and act on suspected breaches of our Terms & Conditions.
- Responsible Gaming: To monitor your betting patterns for indicators of problem gambling behaviour and to administer self-exclusion, deposit limits, cool-off periods, and other responsible gaming tools you have activated.
- Customer Support: To respond to your queries and complaints, to maintain records of our communications with you, and to improve the quality of our support service.
- Regulatory Compliance: To fulfil our obligations under applicable gaming regulations, AML law, and the requirements of our international operating licence, including reporting obligations.
- Platform Improvement: To analyse usage patterns, identify technical issues, conduct A/B testing, and improve the overall player experience on 345com.net.
- Marketing Communications: Where you have opted in, to send you information about 345com promotions, bonuses, VIP rewards, and new game releases that we think you will find relevant based on your activity on the Platform.
You can opt out of marketing communications at any time by updating your preferences in your account settings or by contacting support. Opting out of marketing will not affect our ability to send you essential service notifications about your account, transactions, or security matters.
Legal Basis for Processing
345com processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:
- Contractual Necessity: Processing is necessary to perform our contract with you — specifically, the agreement formed when you register an account and accept our Terms & Conditions. Without this processing, we cannot provide the Platform's core services.
- Legal Obligation: Processing is necessary to comply with applicable laws and regulations, including AML obligations, gaming licence requirements, age verification mandates, and regulatory reporting duties.
- Legitimate Interests: Processing is necessary for 345com's legitimate interests, including fraud prevention, security monitoring, responsible gaming compliance, and Platform improvement, where these interests are not overridden by your fundamental rights and freedoms.
- Consent: For direct marketing communications and non-essential cookies, processing is based on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Sharing Your Data
345com does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data may be shared with carefully selected third parties only in the following circumstances, and always subject to appropriate data protection safeguards:
We share financial and identity data with licensed payment processors to facilitate deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, SadaPay, USDT TRC20, and Visa / Mastercard. These processors are contractually prohibited from using your data for any purpose other than processing your 345com transactions.
We share identity and verification documents with specialist KYC service providers to perform age verification and document authentication as part of our mandatory KYC process. These providers process data solely on our instructions and to the standard required by our operating licence.
Third-party game suppliers who provide casino games, live dealer tables, and slot titles to the 345com Platform may receive limited technical data (such as a pseudonymous player session identifier) to facilitate game launches and resolve technical issues. They do not receive personally identifiable information except where strictly necessary for dispute resolution.
We will disclose personal data to gaming regulatory authorities, financial intelligence units, or law enforcement agencies where we are legally required to do so — for example, in connection with AML reporting obligations, a court order, or a lawful request by a competent authority. We will inform you of any such disclosure where we are legally permitted to do so.
In the event that 345com is acquired by or merges with another entity, your personal data may be transferred to the new entity as part of that transaction. We will notify registered players in advance of any such transfer via the email address on their account.
All third-party service providers who receive your personal data are subject to contractual data processing agreements that restrict how they may use your data and oblige them to maintain appropriate technical and organisational security measures.
Data Retention
345com retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying applicable legal, regulatory, accounting, and reporting requirements. We do not retain data for longer than is necessary or permitted.
| Data Type | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | AML and gaming regulatory obligation |
| KYC verification documents | Duration of account + 5 years after closure | Regulatory and legal compliance |
| Transaction and financial records | Duration of account + 7 years after closure | AML law and financial record-keeping obligations |
| Betting and gaming history | Duration of account + 5 years after closure | Dispute resolution and regulatory audit |
| Customer support communications | 3 years from last communication | Quality assurance and complaint resolution |
| Marketing preferences | Until consent is withdrawn or account is closed | Consent-based processing |
| Technical and usage logs | 13 months from collection | Security monitoring and analytics |
When your personal data is no longer required, we will securely delete or anonymise it. Anonymised data — from which you cannot reasonably be identified — may be retained indefinitely for statistical and analytical purposes.
Data Security
345com implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes, but is not limited to:
- 256-bit SSL/TLS Encryption: All data transmitted between your browser or app and our servers is encrypted using industry-standard TLS 1.2 or higher protocols.
- Password Security: Account passwords are hashed using bcrypt with a high work factor. 345com staff cannot view your plaintext password under any circumstances.
- Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and regular security training.
- Two-Factor Authentication: Two-factor authentication (2FA) is available for all player accounts and is mandatory for accounts with elevated withdrawal limits.
- Intrusion Detection: Our systems are monitored 24/7 for unusual access patterns, automated attacks, and potential data breaches using active intrusion detection and prevention systems.
- Data Breach Response: In the unlikely event of a data breach that affects your rights and freedoms, 345com will notify affected players without undue delay and will take immediate remedial action.
While we take every reasonable precaution to secure your data, no internet-based system can be guaranteed 100% secure. You also have a role to play: keep your 345com password unique and confidential, enable 2FA on your account, and contact us immediately if you suspect unauthorised access.
Cookies & Tracking
345com uses cookies and similar tracking technologies on 345com.net to ensure the Platform functions correctly, to remember your preferences, to maintain your login session, and to gather anonymised analytics that help us improve the player experience. We do not use tracking cookies to build advertising profiles or to share your browsing behaviour with advertising networks.
- Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. You cannot opt out of these without disabling the Platform entirely.
- Functional Cookies: Remember your preferences such as language settings, preferred sports categories, and display options. These improve your experience but are not essential.
- Analytics Cookies: Collect anonymised data about how players use the Platform — which pages are visited most, where players drop off, and which features are most popular. This data is used solely to improve 345com.net.
You can manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to block or delete cookies. Note that blocking certain categories of cookies may affect your ability to use some Platform features, particularly those that require you to remain logged in.
Your Privacy Rights
345com respects your right to control your own personal data. Depending on your circumstances and applicable law, you may have the following rights in relation to the personal data we hold about you:
- Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how we use it and who we share it with.
- Right to Rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
- Right to Erasure: In certain circumstances, you have the right to request that we delete your personal data. This right is subject to our legal obligations to retain certain data — for example, AML record-keeping requirements mean we cannot immediately delete transaction records upon account closure.
- Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while you dispute the accuracy of data we hold.
- Right to Object: You have the right to object to processing of your personal data that is based on our legitimate interests, including profiling for responsible gaming purposes. We will honour this request unless we have compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on your consent — such as marketing communications or non-essential cookies — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
- Right to Data Portability: Where processing is carried out by automated means and based on your consent or a contract, you may request a machine-readable copy of your personal data to transfer to another service provider.
To exercise any of the above rights, please contact our Data Protection team via email at [email protected] or via live chat. We will respond to all valid requests within 30 calendar days. We may need to verify your identity before processing your request.
Some privacy rights cannot be fully exercised while your account remains active, as certain data is required to deliver the service to you. Where a right cannot be fulfilled immediately, we will explain why and indicate when it can be actioned.
Minors & Age Verification
345com strictly prohibits the use of its Platform by anyone under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age. Our mandatory KYC process is specifically designed to verify that every registered player meets this age requirement before they can deposit funds or place bets.
If we discover or are notified that a player has provided false information about their age and is under 21, we will immediately suspend the account, conduct a full review, withhold any winnings accumulated during the period of underage use, and permanently close the account. Any funds deposited by an underage player will be returned to the payment method used, minus any bonuses received.
If you believe a minor in your household has registered on 345com using false age information, please contact us immediately at [email protected]. We will investigate and act promptly. Parental controls and internet filtering tools are also recommended for households with individuals under 21.
Personal data belonging to a minor that was collected in error will be deleted from our systems as quickly as our legal obligations allow. We will not process such data for any purpose other than facilitating the closure of the account and the return of any deposits.
International Transfers
As an internationally operated platform, 345com may transfer your personal data to countries outside of Pakistan in connection with the services described in this Policy — for example, to our licensed operating entity, to cloud infrastructure providers, or to specialist KYC and payment processing partners located in different jurisdictions.
Whenever we transfer personal data internationally, we ensure that an appropriate level of data protection is maintained by implementing one or more of the following safeguards:
- Transferring to countries that have been assessed as providing an adequate level of data protection under applicable law.
- Entering into standard contractual data protection clauses with the receiving party that impose obligations equivalent to those under this Policy.
- Ensuring that the receiving party is subject to binding corporate rules or an equivalent certification framework that provides adequate data protection guarantees.
You may request further information about the specific safeguards we have put in place for any particular international data transfer by contacting our Data Protection team at [email protected].
Changes to This Policy
345com reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this Policy, we will notify registered players via the email address on their account at least 14 days before the changes take effect.
The updated Policy will always be available at 345com.net/privacy-policy. The "Last Updated" date at the top of this page will be revised each time the Policy is amended. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.
Your continued use of the 345com Platform after the effective date of any amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any material change, you have the right to close your account before the change takes effect by contacting our support team.
Contact & Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or the way 345com handles your personal data, please reach out to our Data Protection team using the details below. We are committed to resolving all privacy-related queries promptly and transparently.
If you are not satisfied with how 345com has handled your privacy complaint after going through our internal process, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction, or to the regulatory body overseeing our gaming licence. Details of the applicable supervisory authority will be provided upon request.
All formal privacy complaints should be submitted in writing via email to [email protected] with the subject line "Privacy Complaint", along with your account username, a clear description of your concern, and any relevant supporting information. We will acknowledge receipt within 48 hours and aim to resolve all formal privacy complaints within 14 working days.