pk67 Privacy Policy

pk67 is an online casino and sports betting platform operating at pk67.bar, serving players across Pakistan including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and beyond. For the purposes of this Privacy Policy, "pk67", "we", "us", and "our" refer to the pk67 platform and its operating entity.

pk67 is the data controller in respect of all personal information collected from users of the pk67 platform. As data controller, pk67 determines the purposes and means by which your personal data is processed, and bears full responsibility for ensuring that such processing is conducted lawfully, fairly, and transparently.

This Privacy Policy applies to all users of the pk67 website and mobile platform — including registered account holders, visitors who browse without registering, and individuals who contact pk67 customer support. By using the pk67 platform in any capacity, you acknowledge that you have read and understood this Privacy Policy.

pk67 collects personal data from you in three ways: information you provide directly, information collected automatically when you use the platform, and information obtained from verified third-party sources as part of our KYC and fraud prevention obligations.

2.1 Information You Provide Directly

When you register a pk67 account, make a deposit or withdrawal, contact customer support, or participate in a promotion, you may provide us with the following categories of personal data:

• Full legal name as it appears on your government-issued ID (CNIC)
• Date of birth (used for mandatory 21+ age verification)
• Residential address in Pakistan
• Mobile phone number (used for account verification and security alerts)
• Email address (used for account communications and promotional updates where consented)
• CNIC number and scanned copy of CNIC (for KYC identity verification)
• Payment method details, including JazzCash account number, EasyPaisa wallet number, HBL, UBL, or Meezan Bank account details
• Any other information you voluntarily provide in support tickets or live chat transcripts

2.2 Information Collected Automatically

When you access or use the pk67 platform, the following technical and behavioural data is collected automatically:

2.3 Information from Third Parties

pk67 may receive personal data about you from the following third-party sources where legally permissible and necessary for compliance purposes:

• Identity Verification Services: Third-party KYC providers used to verify CNIC authenticity and confirm age eligibility.
• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank may share transaction confirmation data to facilitate deposit and withdrawal processing.
• Fraud Prevention Agencies: Where pk67 has reasonable grounds to suspect fraudulent activity, we may cross-reference your data with fraud prevention databases.

pk67 uses the personal data it collects solely for the following defined and legitimate purposes. We do not use your data for purposes that are incompatible with those listed below without first obtaining your explicit consent.

• Account Registration & Management: To create, maintain, and administer your pk67 account, including processing your pk67 login credentials securely.
• Age & Identity Verification (KYC): To verify that you are aged 21 or over and that your identity matches the information provided at registration. This is a mandatory compliance requirement.
• Payment Processing: To process PKR deposits via JazzCash and EasyPaisa and to execute withdrawal requests to your verified bank or mobile wallet account.
• Customer Support: To respond to your queries, complaints, and support requests submitted via live chat or email.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, money laundering, and other prohibited conduct as described in the pk67 Terms & Conditions.
• Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering regulations, including mandatory transaction reporting requirements.
• Responsible Gaming: To monitor betting patterns and session data for indicators of problem gambling behaviour, enabling proactive outreach from the pk67 Responsible Gaming team where appropriate.
• Platform Improvement: To analyse aggregated and anonymised usage data to improve the performance, functionality, and user experience of the pk67 platform.
• Marketing Communications: To send you promotional offers, bonuses, and platform updates — but only where you have given your explicit consent to receive such communications. You may withdraw consent at any time.

pk67 processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:

• Contractual Necessity: Processing that is necessary to perform the contract between you and pk67 — i.e., to provide you with the pk67 betting and casino service as described in the Terms & Conditions. This covers account creation, payment processing, game provision, and customer support.
• Legal Obligation: Processing that is required for pk67 to comply with applicable legal and regulatory obligations, including KYC identity verification, age verification, and AML transaction monitoring and reporting.
• Legitimate Interests: Processing carried out in pursuit of pk67's legitimate business interests, where those interests are not overridden by your fundamental rights and freedoms. This includes fraud detection, platform security, and aggregate analytics for service improvement.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent. This applies primarily to the sending of marketing and promotional communications. You may withdraw consent at any time by contacting support or updating your account communication preferences.

pk67 does not sell your personal data. We share your personal data with third parties only in the following tightly defined circumstances:

5.1 Service Providers & Processors

pk67 engages a small number of carefully selected third-party service providers who process personal data on our behalf and strictly in accordance with our instructions. These include identity verification providers, payment processing partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), cloud infrastructure providers, and customer support tooling providers. All such providers are bound by data processing agreements that prohibit them from using your data for any purpose other than the specific service they provide to pk67.

5.2 Legal & Regulatory Disclosures

pk67 may disclose your personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law — including in connection with AML investigations, fraud reporting, or responses to lawful court orders. In all such cases, pk67 will disclose only the minimum data necessary to comply with the legal requirement.

5.3 Business Transfers

In the event that pk67 undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that arise as a result.

The pk67 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to help us understand how players are using pk67 so we can keep improving it.

6.1 Types of Cookies Used

You can manage or withdraw your cookie consent at any time through your browser's cookie settings. Note that disabling strictly necessary cookies will impair the functionality of the pk67 platform and may prevent you from logging in or placing bets.

pk67 retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with our regulatory and legal obligations. The following retention periods apply:

• Account & Identity Data (CNIC, name, DOB, address): Retained for the duration of your account, plus a minimum of 5 years following account closure, to comply with anti-money laundering record-keeping requirements.
• Transaction Records (deposits, withdrawals, betting history): Retained for a minimum of 5 years from the date of each transaction, as required for financial compliance auditing.
• Customer Support Communications: Retained for 3 years from the date of the last interaction, unless the communication relates to a formal complaint or legal matter, in which case it is retained for 5 years.
• Marketing Consent Records: Retained for 3 years from the date of the last interaction or until consent is withdrawn, whichever is earlier.
• Technical & Log Data (IP addresses, session logs): Retained for 12 months, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, your data is either securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.

pk67 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure.

• 256-bit SSL/TLS Encryption: All data in transit between your device and the pk67 servers is encrypted using industry-standard TLS 1.3 protocols.
• At-Rest Encryption: Sensitive personal data stored on pk67 servers — including CNIC copies and payment method details — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. pk67 staff who do not require access to personal data to perform their job functions are denied access by default.
• Two-Factor Authentication: pk67 recommends and supports two-factor authentication for all account holders. Internal pk67 systems that contain personal data require two-factor authentication for all staff access.
• Regular Security Audits: The pk67 platform and underlying infrastructure undergo regular independent security assessments and penetration testing.
• Breach Response Protocol: In the event of a personal data breach that poses a risk to your rights and freedoms, pk67 has a documented incident response procedure that includes timely notification to affected users.

As a pk67 user, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the pk67 data team via live chat or at the email address listed in Section 13. pk67 will respond to all valid data rights requests within 5 business days.

• Right of Access: You have the right to request a copy of all personal data that pk67 holds about you, together with information about how it is being used.
• Right to Rectification: If any personal data pk67 holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure: You have the right to request that pk67 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for processing. Note that this right is subject to overriding regulatory retention obligations.
• Right to Restrict Processing: You have the right to request that pk67 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object at any time to the processing of your personal data where that processing is based on pk67's legitimate interests, including profiling for responsible gaming monitoring purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The pk67 platform is strictly restricted to users aged 21 years and over. pk67 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the pk67 account registration and KYC process, and no withdrawal will be processed until age has been positively verified.

If pk67 becomes aware that personal data has been collected from an individual who is under the age of 21, that account will be closed immediately, all associated funds will be dealt with in accordance with applicable regulations, and all personal data relating to that individual will be deleted from pk67 systems as promptly as possible.

pk67 primarily processes and stores personal data on servers located within secure data centre facilities. In certain circumstances — for example, where pk67 uses a third-party service provider whose infrastructure is located outside Pakistan — your personal data may be transferred to, stored, or processed in a country other than your country of residence.

In all cases where international transfers of personal data are made, pk67 ensures that appropriate safeguards are in place to protect your data, including the use of standard contractual clauses or equivalent data transfer mechanisms. pk67 will not transfer your personal data to a jurisdiction that does not provide an adequate level of data protection without first implementing appropriate protective measures.

For further information about the specific safeguards applied to any international transfer of your personal data, please contact pk67 using the details in Section 13.

pk67 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, pk67 will notify registered users via email or via a prominent in-platform notification displayed at the time of the next pk67 login. The revised Privacy Policy will be published on this page with an updated effective date at the top of the document.

Your continued use of the pk67 platform after the publication of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with any changes, you should stop using the platform and request account closure before the revised policy takes effect. It is your responsibility to check this page periodically for any updates.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how pk67 handles your personal information, please contact the pk67 data protection team through one of the following channels:

• Live Chat: Available 24/7 directly within the pk67 platform. Identify your query as a "Privacy / Data Request" so it is routed to the correct team. Average response time under 5 minutes. Support available in both Urdu and English.
• Email: [email protected] — for formal written data rights requests and privacy-related complaints. pk67 aims to respond to all email data requests within 5 business days.

When submitting a data rights request, please include your full registered name and the email address associated with your pk67 account so that we can verify your identity before processing the request. This identity verification step is a necessary safeguard to ensure that personal data is not disclosed to unauthorised parties.