pak67 Privacy Policy – How We Protect Your Personal Data

This Privacy Policy describes how pak67, operated at pak67.click, collects, processes, stores, and protects the personal data of its registered players and website visitors. It applies to all interactions with the pak67 platform — including account registration, deposits and withdrawals, game play, customer support communications, and browsing of the pak67 website.

When we say "personal data" in this policy, we mean any information that can be used to identify you directly or indirectly — including your name, contact details, payment information, device identifiers, and records of how you use the pak67 platform.

pak67 is committed to handling your personal data with care, transparency, and in accordance with applicable data protection standards. We have designed our data practices to be minimal — we only collect what we genuinely need to operate the platform and fulfil our legal obligations — and proportionate — we don't retain data longer than necessary.

By creating an account on pak67 and using the platform, you acknowledge that you have read this Privacy Policy and understand how your personal data will be processed. If you do not agree with how pak67 handles data, you should not use the platform and may request account closure at any time.

pak67 collects personal data in three ways: information you provide directly during registration and account use; information generated automatically by your use of the platform; and information provided by third-party verification services where identity checks are required.

The amount of data pak67 collects about any individual player depends on the level of activity on the platform. A player who registers but never deposits provides less data than a player who uses the full range of games, bonuses, and payment methods. In all cases, data collection is limited to what is necessary for the specific function involved.

pak67 uses your personal data for the following specific purposes. Each purpose has a clear operational or legal justification — we do not process personal data speculatively or "just in case."

• Account creation and management: Your identity and contact data allow pak67 to create, maintain, and manage your account, verify your eligibility to play, and communicate with you about account matters.
• Transaction processing: Financial data is used to process deposits and withdrawals in PKR, reconcile account balances, and maintain accurate transaction records for auditing purposes.
• Identity verification (KYC): pak67 is required by its operating obligations to verify the identity of players, particularly at higher transaction volumes. KYC data is used solely for this verification purpose.
• Fraud prevention and platform integrity: Technical and usage data is analysed to detect suspicious account behaviour, identify potential fraud, prevent money laundering, and protect the integrity of games for all players.
• Customer support: Communication data is used to understand and resolve player queries, complaints, and disputes. Support communications are retained to ensure consistency and accountability in the resolution process.
• Responsible gaming monitoring: Usage data — particularly patterns of play, session duration, and betting amounts — is monitored to identify potential indicators of problem gambling behaviour. pak67 may use this data to proactively reach out to players who show concerning patterns.
• Platform improvement: Aggregated, anonymised usage data is used to understand how players interact with the pak67 platform, identify areas for improvement, and inform product development decisions. This data cannot be linked back to individual players.
• Marketing communications: With your consent, pak67 may send you information about promotions, new games, and platform updates. You can withdraw consent for marketing communications at any time through your account settings or by contacting support.

pak67 does not use personal data to make automated decisions that have significant legal or similarly significant effects on individual players without human review. Automated systems on pak67 — such as fraud detection — flag accounts for human review rather than making final determinations independently.

pak67 processes your personal data on one or more of the following legal bases, depending on the specific purpose:

• Contract performance: Processing necessary to fulfil our obligations to you as a registered player — including operating your account, processing transactions, and providing games and services. Without this processing, pak67 cannot provide the platform to you.
• Legal obligation: Processing required to comply with applicable regulations — including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and data retention mandated by financial regulations.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests do not override your fundamental rights and freedoms.
• Consent: Processing for optional purposes — particularly marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting any other aspect of your account.

pak67 does not sell, rent, or trade your personal data to any third party for commercial purposes. Full stop. Data sharing from pak67 only occurs in the following specific, justified circumstances:

• Payment processors: Certified third-party payment service providers (supporting Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payments) receive the transaction data they need to process your deposit or withdrawal. They receive no more information than is necessary for the transaction.
• Identity verification providers: Where KYC checks are required, pak67 works with accredited identity verification services. These providers process identity documents under their own certified privacy standards and are contractually prohibited from using your data for any other purpose.
• Technology and platform providers: pak67's platform operates using licensed software and infrastructure providers who may process limited technical data as part of service delivery. These providers are bound by data processing agreements and cannot use pak67 player data independently.
• Legal and regulatory authorities: Where required by law — including orders from courts, regulatory investigations, or anti-money laundering reporting obligations — pak67 will disclose personal data to the relevant authority. We will only disclose what is legally required and, where permitted by law, will inform the affected player.
• Business succession: In the event of a merger, acquisition, or transfer of substantially all of pak67's assets, player data may be transferred to the acquiring entity. Players will be notified of any such transfer and the privacy practices of the new entity before the transfer takes effect.

All third parties who receive personal data from pak67 are contractually required to handle it in accordance with applicable data protection standards. pak67 does not share data with third parties in jurisdictions that do not maintain adequate data protection standards without appropriate safeguards in place.

The security of your financial information is a top priority at pak67. Because the platform serves Pakistani players transacting in PKR through local payment systems, we have built our payment security practices specifically around those channels.

Key points about how pak67 handles your payment data:

• pak67 does not store your Easypaisa PIN, JazzCash PIN, NayaPay credentials, SadaPay credentials, bank account details, or card numbers on pak67 servers. These are handled entirely by certified payment processors.
• What pak67 does retain is a transaction reference number, the payment method type used, the PKR amount, the timestamp, and the transaction status (successful/pending/failed). This is necessary for account balance management and dispute resolution.
• All payment-related pages on pak67 are served over HTTPS with SSL/TLS encryption. Data transmitted between your browser or mobile device and the pak67 platform is encrypted in transit.
• pak67's payment team reviews transaction patterns for anomalies. Unusual deposit-withdrawal activity — particularly without corresponding genuine play — is flagged for review as part of AML obligations.

pak67 does not keep your personal data indefinitely. Retention periods are set based on the purpose for which each category of data was collected and any applicable legal requirements:

• Account data (identity, contact): Retained for the duration of your account and for five years following account closure. This retention period reflects standard financial regulatory requirements applicable to gaming operators.
• Transaction records: Retained for seven years following each transaction. This is the standard period required for financial record-keeping and potential regulatory audit.
• KYC / identity verification documents: Retained for five years following the completion of the verification process or the closure of the account, whichever is later.
• Customer support communications: Retained for three years following the resolution of the relevant query or dispute.
• Technical and usage data (logs): Retained for up to 24 months in detailed form, then retained in anonymised aggregated form for platform analysis purposes without time limit.
• Marketing consent records: Retained for as long as you hold a pak67 account. Even if you withdraw marketing consent, we retain a record that consent was withdrawn (but not the contact data itself for marketing use).

When retention periods expire, pak67 permanently deletes or anonymises the relevant data. We do not retain data "just in case" beyond the periods stated above. Players can request information about what specific data pak67 holds about them at any time — see Section 9 for your rights.

pak67 uses cookies and similar tracking technologies on its website and platform. A cookie is a small text file stored on your device when you visit a website. pak67 uses three categories of cookies:

You can manage cookie preferences through your browser settings. Most browsers allow you to view, block, and delete cookies. Note that blocking essential cookies will prevent you from logging into and using the pak67 platform. Instructions for managing cookies in common browsers (Chrome, Firefox, Safari) are available in each browser's help documentation.

As a pak67 player, you have specific rights over your personal data. These rights are real and exercisable — they are not just listed for show. Here is what each right means in practice:

To exercise any of these rights, contact pak67 at support@pak67.click with the subject line "Privacy Rights Request" and a description of your request. pak67 will verify your identity before actioning the request and will respond within 30 days. If the request is complex or involves large volumes of data, we may extend this by an additional 30 days but will notify you of the extension.

pak67 is strictly an adults-only platform. We do not knowingly collect, process, or retain personal data from any person under the age of 18. The minimum age to register on pak67 is 18 years, and this is a firm requirement with no exceptions.

If pak67 discovers that personal data has been collected from a person under 18 — whether through the registration process or otherwise — that data will be deleted immediately, the associated account will be closed, and any deposits made will be returned. pak67 uses age verification procedures at registration to enforce this policy.

pak67 implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• Transport security: All connections between user devices and the pak67 platform are encrypted using SSL/TLS. The platform does not accept unencrypted HTTP connections for any page that involves account data or financial transactions.
• Access controls: Personal data is accessible only to pak67 staff who have a specific operational need for it. Access is role-based and logged. No individual employee has unrestricted access to the entire player data set.
• Data storage security: Personal data is stored on servers with appropriate physical and logical security controls. Data backups are encrypted and stored separately from primary data.
• Monitoring and incident response: pak67 monitors its systems for security incidents and has documented incident response procedures. In the event of a data breach affecting player data, affected players will be notified promptly in accordance with applicable obligations.
• Regular audits: Security practices and systems are reviewed regularly by pak67's technical team and periodically by independent security specialists.

While pak67 takes all reasonable steps to secure your personal data, no digital system can guarantee absolute security. Players play an important role in their own data security by using strong unique passwords for their pak67 accounts and not sharing login credentials with anyone.

pak67 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable regulations, or the features of the platform. The date of the most recent update is displayed at the top of this page.

When we make material changes to this policy — meaning changes that affect your rights or the way we use your data in a meaningful way — we will notify registered players by email to the address associated with their account, and by displaying a prominent notice on the platform, at least 7 days before the change takes effect.

Minor changes — such as wording clarifications that do not alter the substance of the policy — may be made without advance notice. We encourage players to review this page periodically to stay informed of any updates. Your continued use of pak67 following the effective date of any revision constitutes your acknowledgment of the revised policy.

If you have any questions about this Privacy Policy, want to understand more about how pak67 handles your personal data, or wish to exercise any of your privacy rights, please contact us:

• Email: support@pak67.click — use subject line "Privacy Enquiry" for privacy-related matters
• Live Chat: Available 24/7 within the pak67 platform — ask to be connected to the data privacy team for formal requests
• Response commitment: Privacy enquiries receive an initial response within 48 hours; formal rights requests are actioned within 30 days