pk67 Privacy Policy — Pakistan Data Notice

1 Who We Are

pk67 is the online gaming and sports betting platform operated at pk67.wine, serving players across Pakistan. When this Privacy Policy refers to "pk67", "we", "our" or "us", it means the operating entity behind the pk67.wine platform.

For the purposes of data protection, pk67 acts as the data controller — meaning we determine what personal data is collected, why it is collected, and how it is handled. If you have any questions about how pk67 processes your personal information, the contact details are in Section 12.

2 Data We Collect About You

pk67 collects personal data in three ways: information you provide directly, information generated automatically when you use the platform, and in limited cases, information received from third parties to verify your identity or detect fraud.

3 How pk67 Uses Your Personal Data

Every use of your data at pk67 serves one of the following clearly defined purposes:

• Account creation and management: Your identity and contact data is used to create and maintain your pk67 account, verify your identity, and communicate important account-related information.
• Processing deposits and withdrawals: Financial data is used to process transactions in PKR through your chosen payment method (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card) and to reconcile your account balance.
• Fraud prevention and security: Technical data and activity patterns are analysed to detect suspicious behaviour, prevent unauthorised access, identify duplicate accounts, and protect the integrity of the pk67 platform.
• Legal compliance: pk67 is required by applicable regulations to perform Know Your Customer (KYC) checks, retain certain transaction records, and cooperate with lawful requests from regulatory or law enforcement authorities.
• Responsible gaming: Activity data is used to monitor gaming behaviour and trigger responsible gaming prompts or interventions where patterns suggest a player may be experiencing harm. See our Responsible Gaming page.
• Marketing communications (opt-in only): Where you have opted in, your contact data and activity preferences are used to send you relevant promotions, bonus offers, and product updates from pk67.
• Platform improvement: Aggregated, anonymised activity and technical data is used to analyse platform performance, improve user experience, and develop new features at pk67.

4 Legal Basis for Processing

pk67 processes your personal data only where there is a valid legal basis for doing so. The four bases that apply to pk67's processing activities are:

• Contractual necessity: Most processing is necessary to fulfil the contract between pk67 and you as a player — operating your account, processing payments, settling bets. Without this processing, pk67 cannot provide its service.
• Legal obligation: Certain processing is required by law — for example, KYC identity verification, transaction record-keeping, and cooperation with lawful regulatory requests.
• Legitimate interests: Fraud prevention, platform security, and responsible gaming monitoring are carried out based on pk67's legitimate interests, which do not override your fundamental rights.
• Consent: Marketing communications are sent only where you have given explicit, freely withdrawn consent. You can withdraw marketing consent at any time from your account settings without affecting your ability to use pk67.

5 Who pk67 Shares Your Data With

pk67 shares personal data with third parties only in the following defined circumstances:

• Payment processors: Your financial data is shared with the payment provider you use (e.g., Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or your card network) solely to complete your transaction. These providers have their own privacy policies and are bound by their regulatory obligations.
• Identity verification services: Where KYC checks are required, pk67 may use a regulated identity verification service to confirm the authenticity of CNIC documents. These services are bound by strict confidentiality agreements with pk67.
• Fraud prevention networks: In the event of suspected fraud or money laundering, pk67 may share limited data with fraud prevention services or financial crime prevention organisations to protect players and the integrity of the platform.
• Regulatory and law enforcement authorities: pk67 will disclose personal data to government, regulatory, or law enforcement authorities where required to do so by a valid, lawful request. pk67 will not disclose data in response to informal or unlawful requests.
• Technology service providers: Certain technical functions of pk67 (such as cloud hosting and customer support software) are provided by carefully vetted third parties who process data only on pk67's instructions and under binding data processing agreements.

6 How Long pk67 Keeps Your Data

pk67 retains personal data only as long as necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and identity data: Retained for the duration of your active pk67 account, plus 5 years after account closure to meet regulatory record-keeping requirements.
• Transaction records: Financial transaction data is retained for 5 years from the date of each transaction, in compliance with applicable anti-money laundering regulations.
• Activity and gaming data: Retained for 3 years from the date generated, or for the duration of any ongoing responsible gaming intervention.
• Marketing preference data: Retained until you withdraw consent or close your account, whichever comes first.
• Technical and log data: Retained for 12 months from generation, unless required longer for a specific security investigation.

When data reaches the end of its retention period, pk67 securely deletes or anonymises it so that it can no longer be associated with any individual player.

7 Your Rights Over Your Personal Data

As a pk67 player, you have the following rights over personal data that pk67 holds about you. To exercise any of these rights, contact pk67 support (details in Section 12). We respond to all valid requests within 30 days.

8 Cookies & Tracking Technologies

pk67 uses cookies and similar technologies to ensure the platform functions correctly and to improve the player experience. A cookie is a small text file stored on your device. Here is how pk67 uses them:

You can control cookies through your browser settings. Blocking essential cookies will impair pk67's ability to function correctly. Optional cookie categories can be managed from the cookie preferences panel on the pk67 platform.

9 How pk67 Secures Your Data

pk67 employs a layered security approach to protect the personal data of every Pakistani player on the platform:

• Encryption in transit: All data exchanged between your device and pk67 servers is encrypted using TLS 1.3. Connections that do not meet this standard are rejected.
• Encryption at rest: Personal and financial data stored on pk67 servers is encrypted using AES-256.
• Access controls: Access to personal data within pk67 is restricted to authorised staff on a strict need-to-know basis. All access is logged and audited.
• Two-factor authentication: Players are encouraged to enable 2FA on their pk67 accounts. Internal pk67 systems require 2FA for all staff accessing sensitive data.
• Regular security audits: pk67 conducts periodic vulnerability assessments and penetration tests on its platform infrastructure.
• Incident response: In the event of a data breach that affects your personal information, pk67 will notify affected players within 72 hours of becoming aware of the incident, and will take immediate steps to contain and remediate the breach.

Despite these measures, no internet-connected system can guarantee absolute security. pk67 urges all players to use a strong, unique password and to enable 2FA to protect their own account.

10 Children and Minors

pk67 is strictly for adults aged 18 and over. pk67 does not knowingly collect personal data from anyone under the age of 18. If it comes to our attention that a minor has registered at pk67, we will immediately close the account, void any transactions, and securely delete all personal data associated with that account.

If you are a parent or guardian and believe your child may have created a pk67 account, please contact pk67 support immediately using the details in Section 12. We will act on your report with urgency.

11 Changes to This Privacy Policy

pk67 will update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or improvements to how we explain our practices. The current version number and effective date are displayed at the top of this page.

Where changes are material — for example, if we propose to use your data in a way not previously described — pk67 will notify you by email before the change takes effect and will give you a reasonable opportunity to review the updated policy. For minor or administrative updates, the change will be reflected in the version number on this page.

Continued use of pk67 following the effective date of any updated Privacy Policy constitutes acceptance of the changes. If you object, please contact pk67 support to discuss your options, including closing your account.

12 How to Contact pk67 About Privacy

If you want to exercise any of your data rights, have a question about this Privacy Policy, or want to raise a privacy complaint, please contact the pk67 data team through the following channels:

• Email: privacy@pk67.wine (dedicated privacy contact)
• Live Chat: Available 24/7 from within your logged-in pk67 account
• General Support: support@pk67.wine

Please clearly mark your message as a "Privacy Request" so it reaches the right team quickly. pk67 aims to acknowledge all privacy requests within 48 hours and to resolve them within 30 days.