Tiger365 Privacy Policy — Your Data, Explained Plainly

Tiger365 is an online gaming platform operated at tiger365.ws, serving players located in Pakistan. For the purposes of this Privacy Policy, "Tiger365", "we", "us" and "our" refer to the entity operating the tiger365.ws platform. "You" and "your" refer to any individual who registers an account, visits the platform or interacts with Tiger365 in any capacity.

Tiger365 is the data controller for all personal information collected through the platform. This means we determine the purposes and means of processing your personal data and are responsible for ensuring it is handled appropriately. If you have any questions about how Tiger365 handles your data, the right place to start is with us directly — contact details are in Section 15.

This Privacy Policy applies to all personal data collected through the tiger365.ws website, any mobile interface or application associated with Tiger365 and any communications between you and Tiger365 through any channel (live chat, email, SMS or telephone).

Tiger365 collects personal data in three ways: information you provide directly, information generated automatically by your use of the platform and information we receive from third parties (such as payment processors) in connection with your account.

Information you provide directly:

• Registration data: Your full legal name, mobile phone number, date of birth, and any additional information requested during account setup.
• Identity verification documents: CNIC (Computerised National Identity Card) number and a copy of your CNIC or passport, a selfie or biometric photo for identity matching — collected only when KYC verification is triggered (typically before first withdrawal).
• Payment information: Easypaisa or JazzCash mobile number, bank account or IBAN details, Visa/Mastercard details where relevant — collected for deposit and withdrawal processing. Tiger365 does not store full card numbers; payment card data is handled by our PCI-DSS-certified payment processors.
• Communications: The content of any messages sent to Tiger365 support via live chat, email or any other channel.
• Responsible gaming information: Deposit limits, self-exclusion periods and any other responsible gaming preferences you set through your account dashboard.

Information collected automatically:

• IP address and approximate geographic location derived from IP.
• Device type, operating system, browser type and version.
• Session data: pages visited, time on page, game sessions played, bet history, deposit and withdrawal history.
• Cookie identifiers and similar tracking data (see Section 9 for full cookie information).
• Login timestamps and authentication logs.

Information from third parties:

• Transaction confirmation data from Easypaisa, JazzCash, NayaPay, SadaPay and banking partners to verify deposits and withdrawals.
• Identity verification results from any third-party KYC service used to process your identity documents.
• Fraud and risk signals from payment network partners where relevant to account security.

Tiger365 uses personal data for clearly defined purposes. We do not use your data in ways that would reasonably surprise you given the context in which it was collected.

Tiger365 does not use your personal data for automated decision-making that has legal or similarly significant effects on you without human review. Any account action arising from automated fraud or bot detection is reviewed by a Tiger365 team member before being finalised.

Tiger365 processes personal data on one or more of the following legal grounds depending on the specific processing activity:

• Contract performance: Processing your registration data, payment details and game history is necessary to operate the Tiger365 platform and fulfil the contract with you as a player.
• Legal obligation: Processing identity documents and transaction data to comply with KYC, anti-money laundering and age verification obligations.
• Legitimate interests: Processing device and session data for platform security, fraud prevention and responsible gaming monitoring — activities necessary to protect both Tiger365 and its players where our interests do not override your privacy rights.
• Consent: Where Tiger365 processes data based on your consent — such as sending you promotional communications — you can withdraw that consent at any time without affecting the lawfulness of prior processing.

Tiger365 does not sell personal data. We share data only with the limited categories of recipients described below, and only to the extent necessary for the stated purpose.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, banking partners and Visa/Mastercard processing networks receive the payment information necessary to process your deposits and withdrawals. These parties process your data under their own privacy policies and are subject to their own regulatory obligations.
• Identity verification providers: Where Tiger365 uses a third-party KYC service to process your identity documents, your document images and biometric data are shared with that service for verification purposes only and are not retained beyond the verification process.
• Game software providers: Some game titles on Tiger365 are provided by third-party software developers. These providers may receive anonymised session data for technical performance purposes. They do not receive personally identifiable information about you.
• Legal and regulatory authorities: Tiger365 will disclose personal data to law enforcement, regulatory bodies or courts where required by law or in response to a valid legal request. Tiger365 will notify you of such disclosures where legally permitted to do so.
• Fraud prevention services: Anonymised or pseudonymised risk signals may be shared with fraud detection network partners to improve platform security. No directly identifiable personal data is shared for this purpose.

Because Tiger365 handles real-money transactions in Pakistani Rupees, financial data receives particular attention in our privacy framework. Here is exactly how it works in practice for Pakistani players:

When you make a deposit via Easypaisa or JazzCash, the mobile number associated with your wallet is recorded in your Tiger365 account for transaction reconciliation purposes. The transaction amount, timestamp and reference number are stored in your account history. Tiger365 does not have access to your Easypaisa or JazzCash PIN or password at any point.

When a withdrawal is requested, Tiger365 verifies that the destination payment method belongs to you — the registered account holder — before processing. This verification step is a security measure to prevent funds being sent to unauthorised accounts. Tiger365 does not send withdrawals to third-party accounts under any circumstances.

Identity verification (KYC) is triggered before your first withdrawal or where Tiger365's fraud monitoring system identifies a need for verification. The KYC process requires submission of your CNIC or passport. These documents are reviewed by Tiger365's compliance team and, where a third-party KYC service is used, by that service. Documents are stored securely for the period required by applicable law and deleted when retention is no longer necessary.

Data security is not an afterthought at Tiger365 — it is a core operational requirement. The following technical and organisational measures are in place to protect your personal information:

• Transport layer encryption: All data transmitted between your device and tiger365.ws is encrypted using TLS 1.3 with 256-bit symmetric encryption. The padlock in your browser address bar confirms this is active during your session.
• At-rest encryption: Personal data stored in Tiger365's databases is encrypted at rest. Even in the unlikely event of a database breach, encrypted data is not usable without the decryption keys, which are stored separately.
• Access controls: Tiger365 staff access to personal data is role-based and limited to what is necessary for each team member's function. Support agents can see enough to assist you but cannot see your payment card details or CNIC document images unless required for their specific task.
• Two-factor authentication: Tiger365 internal systems use multi-factor authentication for all staff logins. You can also enable two-factor authentication on your player account for additional security.
• Security monitoring: Tiger365 runs continuous automated security monitoring on its infrastructure to detect unusual access patterns, data exfiltration attempts and other security events in real time.
• Third-party security audits: Tiger365's platform and data handling practices are reviewed by independent security auditors periodically. Findings are actioned before the next audit cycle.

No system is completely impenetrable, and Tiger365 cannot guarantee absolute security. However, the measures above represent a robust, industry-appropriate approach to protecting Pakistani players' personal data. In the event of a data breach that affects your personal information, Tiger365 will notify affected players promptly and provide clear guidance on protective actions you should take.

Tiger365 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data (registration information): Retained for the lifetime of your account plus 5 years after account closure, to meet anti-money laundering record-keeping obligations.
• Identity verification documents (CNIC/passport): Retained for 5 years from the date of verification or account closure, whichever is later, to meet legal KYC retention requirements.
• Transaction records (deposits, withdrawals, betting history): Retained for 7 years from the date of each transaction, consistent with financial record-keeping obligations.
• Support communications: Retained for 2 years from the date of the last interaction in the relevant conversation thread, then deleted.
• Cookie and session data: Session cookies are deleted when you close your browser. Persistent cookies expire according to the timelines stated in Section 9. Analytics data derived from sessions is retained in anonymised aggregate form.
• Self-exclusion records: Retained indefinitely for accounts that have requested permanent self-exclusion, to prevent re-registration by excluded players.

When data is no longer required within the applicable retention period, it is securely deleted from Tiger365's systems using appropriate data destruction methods. Deletion of data from backup systems may take up to an additional 90 days following deletion from live systems.

Tiger365 uses cookies and similar technologies on the platform. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies help Tiger365 deliver a functional and secure platform experience.

Tiger365 does not use third-party advertising or tracking cookies. The analytics tools used by Tiger365 are configured to anonymise IP addresses and do not enable cross-site tracking of your activity on other websites. You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent the platform from functioning correctly.

As a Tiger365 player, you have the following rights in relation to your personal data. These rights are not bureaucratic formalities — Tiger365 takes them seriously and will respond to valid requests promptly.

Tiger365 is strictly for users aged 18 and over. The platform does not knowingly collect personal data from anyone under the age of 18. If Tiger365 discovers that personal data has been collected from a person under 18, that data will be permanently deleted and the associated account closed immediately.

If you are a parent or guardian and believe your child has created a Tiger365 account or provided personal data to Tiger365, please contact us immediately at support@tiger365.ws with the subject line "Minor Account Report". We will investigate and take action within 24 hours of receiving your report.

Tiger365 recommends that parents and guardians who share devices with minors implement device-level parental controls to prevent access to gaming websites. Tiger365 cannot be held responsible for a minor's access to the platform on a shared or uncontrolled device, but takes all reports of underage access seriously and acts on them without delay.

The Tiger365 platform does not contain links to third-party websites for general browsing purposes. Any third-party services integrated into Tiger365 — such as payment processors or game software providers — operate under their own privacy policies and Tiger365 is not responsible for their data practices beyond the contractual obligations Tiger365 imposes on them through data processing agreements.

Where Tiger365 uses a third-party service that processes your personal data on Tiger365's behalf (a "data processor"), we require that service to process data only according to Tiger365's instructions, to implement appropriate security measures and to delete data when no longer required. Tiger365 conducts due diligence on third-party processors before engaging them and reviews these arrangements periodically.

If you choose to access any social media platform or external website in connection with your Tiger365 use, the data practices of those third parties are governed entirely by their own privacy policies and are outside Tiger365's control.

Tiger365 will update this Privacy Policy from time to time to reflect changes in our data practices, new platform features, regulatory requirements or other relevant developments. When material changes are made, Tiger365 will:

• Update the "Last updated" date at the top of this page.
• Notify registered players via the mobile number or email address on their account.
• Where changes significantly affect how we use your data in a way that requires renewed consent, request that consent before the changes take effect.

Tiger365 recommends reviewing this Privacy Policy periodically — at least every three months or following any notification of changes. The current version of the Privacy Policy is always available at tiger365.ws/privacy-policy. Continued use of Tiger365 after the effective date of any update constitutes your acceptance of the revised policy.

For any privacy-related questions, data rights requests or concerns about how Tiger365 handles your personal information, contact us through any of the following channels:

• Email: support@tiger365.ws — use the subject line "Privacy Enquiry" for fastest routing to the correct team member. Responses within 24 hours for non-urgent matters; within 3 hours for urgent data security concerns.
• Live Chat: Available 24/7 within the Tiger365 platform. For privacy matters, the support agent will escalate to the privacy team where necessary.

Tiger365 is committed to resolving privacy concerns fairly and promptly. If you believe Tiger365 has not handled your personal data correctly and you are not satisfied with our response after raising the matter directly with us, you may escalate the complaint to the relevant data protection regulatory authority in your jurisdiction.