pak67 Privacy Policy

pak67 is committed to protecting the personal data of every player who registers and uses the platform. This Privacy Policy describes the data practices of pak67 — Pakistan's premier online casino and sports betting platform — in relation to the personal information of its registered users.

This policy has been drafted to reflect the obligations pak67 accepts under its international gaming license, which includes specific requirements relating to player data protection, KYC (Know Your Customer) procedures, anti-money laundering compliance, and responsible gaming data management.

Pakistan's online players, whether based in Karachi, Lahore, Islamabad, Faisalabad, or any other city, have a legitimate expectation that their personal data is handled with care and professionalism. pak67 takes that expectation seriously and has built its data infrastructure accordingly.

For the purposes of this Privacy Policy, the data controller responsible for the personal data of pak67 users is the company operating the pak67 platform under its international gaming license (hereinafter referred to as "pak67", "we", "us", or "our").

As the data controller, pak67 is responsible for determining the purposes for which personal data is collected and the manner in which it is processed. pak67 processes personal data in accordance with the applicable data protection standards mandated by its gaming license regulatory framework.

For all data protection inquiries, requests, or complaints, the pak67 data protection contact is reachable at: [email protected] (displayed as plain text — not a clickable link).

pak67 collects personal data across several categories. The specific data collected from an individual user depends on the extent of their engagement with the platform — registration, KYC verification, payment processing, gaming activity, and support interactions each generate different categories of data.

pak67 collects personal data through the following means:

• Direct submission: Data you provide when creating a pak67 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or responding to surveys;
• Automated collection: Technical data collected automatically by pak67's servers and analytics systems when you access the platform — including IP addresses, device identifiers, browser cookies, and session logs;
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or Visa/Mastercard networks when you initiate a deposit or withdrawal;
• Identity verification providers: Where pak67 uses a third-party identity verification service to cross-reference CNIC data against national databases as part of the KYC process;
• Fraud prevention systems: Data received from third-party fraud detection and risk-scoring services that pak67 uses to protect the platform and its players from fraudulent activity.

pak67 processes your personal data for the following specific purposes:

• Account creation and management: To register your pak67 account, authenticate your identity at login, and maintain your account in good standing;
• KYC and identity verification: To fulfil the identity verification requirements imposed by pak67's international gaming license, including age verification to enforce the strict 21+ policy;
• Payment processing: To facilitate PKR deposits through JazzCash, EasyPaisa, and Pakistani bank transfers, and to process withdrawals to your registered payment accounts;
• Gaming services delivery: To operate cricket betting markets, casino games, slots, poker tournaments, and Andar Bahar tables — including tracking your bet history, maintaining your PKR wallet balance, and crediting winning payouts;
• Responsible gaming compliance: To implement and monitor deposit limits, session controls, self-exclusion orders, and reality checks as required under pak67's licensing obligations;
• Anti-money laundering (AML): To monitor transactions for suspicious patterns, report where required to relevant authorities, and maintain the financial integrity of the pak67 platform;
• Customer support: To handle your inquiries, resolve disputes, and improve the quality of support interactions;
• Security and fraud prevention: To detect, investigate, and prevent fraudulent account activity, multi-accounting, bonus abuse, and cyberattacks targeting the pak67 platform;
• Marketing communications: To send promotional offers, bonus notifications, and platform updates — only where you have explicitly opted in to receive such communications at registration.

pak67 relies on the following legal bases to process your personal data:

pak67 does not sell your personal data. We share personal data only with the following categories of third parties, and only to the extent necessary to fulfil the purposes described in Section 5 above:

• Payment service providers: JazzCash (Jazz/WARID), EasyPaisa (Telenor), HBL, UBL, Meezan Bank, and Visa/Mastercard network processors receive transaction data necessary to process your PKR deposits and withdrawals;
• Identity verification providers: Third-party KYC and document verification services receive identity data — including CNIC scans — to verify your eligibility and age as required under pak67's licensing terms;
• Fraud prevention services: Risk-scoring and fraud detection platforms receive technical and behavioural data to assess suspicious activity patterns;
• Game content providers: Third-party casino game developers who supply slot titles, live dealer software, or poker engines may receive anonymised gaming session data for technical and audit purposes — they do not receive personally identifiable player information;
• Regulatory authorities: pak67 is legally required to share certain financial and identity records with its gaming license regulator and, in cases of suspected money laundering or financial crime, with law enforcement or financial intelligence authorities;
• Legal and professional advisers: Where necessary, pak67 may share data with legal counsel, auditors, or insurers under strict confidentiality obligations.

All third-party service providers engaged by pak67 are vetted for compliance with applicable data protection standards and are bound by contractual obligations that prohibit them from using pak67 player data for any purpose beyond the specific service they provide.

pak67 uses cookies and similar tracking technologies on the pak67.bio website to enable core platform functionality, maintain your authenticated login session, and collect anonymous analytics data about how Pakistani users navigate the platform.

The following categories of cookies are used by pak67:

• Strictly necessary cookies: Required for the pak67 login session to function, for your bet slip to retain selections, and for security measures to operate. These cannot be disabled without breaking core platform functionality;
• Functional cookies: Remember your language preferences, display preferences, and other personalisation settings between sessions on pak67;
• Analytics cookies: Collect aggregated, anonymised data on page views, session durations, and navigation paths to help pak67 understand platform usage patterns and improve the user experience;
• Security cookies: Used to detect and prevent fraudulent login attempts, CSRF attacks, and session hijacking.

pak67 does not use third-party advertising or cross-site tracking cookies. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use pak67 normally, including logging in to your account.

pak67 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by the regulatory obligations of its international gaming license. The following retention schedule applies:

Upon expiry of the applicable retention period, pak67 securely deletes or anonymises personal data so that it can no longer be associated with any individual user. Regulatory retention obligations take precedence over any deletion requests made before the mandatory retention period has elapsed.

pak67 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. The security measures in place include:

• AES-256 encryption at rest: All databases storing personal and financial data are encrypted with AES-256, the same standard used by major international financial institutions;
• TLS 1.3 in transit: All data exchanged between your browser or mobile device and pak67 servers is encrypted using TLS 1.3, ensuring no interception is possible during transmission;
• Two-factor authentication: OTP-based 2FA is available for all pak67 accounts, adding a second verification layer beyond the password on login;
• Access control and role-based permissions: pak67 staff access to personal data is restricted on a strict need-to-know basis. No single employee has unrestricted access to all player data;
• Regular security audits: pak67 undergoes scheduled penetration testing and vulnerability assessments by qualified third-party security firms;
• Data breach response plan: In the event of a confirmed data breach that poses risk to user privacy, pak67 will notify affected users and, where required by applicable regulations, the relevant supervisory authority within the timeframes mandated by pak67's licensing obligations.

As a pak67 account holder, you hold the following rights in relation to your personal data. These rights are subject to applicable legal limitations and the mandatory data retention obligations described in Section 9.

To exercise any of the above rights, submit a written request to [email protected]. pak67 will respond within 30 days of receiving a valid, verifiable request. Identity verification may be required before a request is processed to prevent fraudulent data access by third parties.

If pak67 discovers or reasonably suspects that a registered account belongs to a person under the age of 21, the account will be immediately suspended, all activities will be reversed where possible, and the registered contact information will be retained solely for the purpose of completing the account closure and any associated regulatory reporting. Any funds deposited by a person found to be underage will be returned following identity verification.

If you are a parent or guardian and believe that a person under 21 in your care has registered a pak67 account, please contact pak67 support immediately at [email protected] so the account can be investigated and closed without delay.

As an internationally licensed gaming platform, pak67 may transfer certain personal data to third-party service providers — including payment processors, KYC verification services, and cloud infrastructure providers — that are located or operate servers outside of Pakistan.

Where such transfers occur, pak67 ensures that adequate safeguards are in place to protect your personal data to a standard equivalent to that described in this Privacy Policy. Safeguards include contractual data processing agreements that bind recipient parties to equivalent data protection obligations.

pak67 does not transfer personal data to jurisdictions that do not provide adequate protections for the nature of data involved, without implementing appropriate supplemental safeguards.

pak67 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. The date of the most recent revision is displayed prominently at the top of this document.

Where material changes are made to this Privacy Policy — particularly changes that may affect your rights or the scope of data processing — pak67 will notify registered users via the email address or mobile number on file before the changes take effect, where technically practicable.

Continued use of the pak67 platform after a revised Privacy Policy has been published constitutes your acceptance of the updated terms. If you do not accept a revised Privacy Policy, you should contact pak67 support to initiate account closure before the revised policy takes effect.

For all privacy-related requests, questions, or complaints — including requests to exercise your data protection rights under Section 11 — please contact pak67 through the following channels:

This Privacy Policy was last reviewed and updated on 1 January 2026. It applies to all personal data collected from pak67 users from that date onwards.