pk767 Privacy Policy

1. Introduction

pk767 ("we", "us", "the Platform") operates the online casino and sports betting platform accessible at pk767.app. We respect the privacy of every individual who visits, registers on, or interacts with pk767, and we are committed to protecting your personal information in accordance with applicable data protection legislation and international best practices.

This Privacy Policy ("Policy") explains, in clear terms, what personal data pk767 collects from you, why we collect it, how we use it, with whom we share it, how long we retain it, and what rights you have in relation to it. This Policy applies to all registered players, prospective players, and visitors to the pk767 platform, including Pakistani users accessing the platform from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, and all other locations.

By registering on or using pk767, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of the platform.

2. Data Controller

pk767 acts as the data controller in respect of the personal data processed under this Policy. The data controller is responsible for determining the purposes and means of processing your personal data and for ensuring that such processing is carried out in compliance with applicable data protection law.

For all data protection enquiries or to exercise your rights under this Policy, please contact our Data Protection team using the details provided in Section 16 of this Policy.

3. Personal Data We Collect

pk767 collects personal data in the following categories:

• Registration data: Full legal name, date of birth, Pakistani mobile number, email address, and any other information submitted during account creation.
• Identity verification data: CNIC number, passport details, photographic identity document images, and proof of address documentation collected during KYC verification.
• Financial data: PKR transaction records, JazzCash or Easypaisa account references, HBL/UBL/Meezan Bank/Bank Alfalah account details where provided for withdrawals, deposit and withdrawal history, and bonus transaction records.
• Gaming activity data: Bet history, game session logs, wagering patterns, win/loss records, and any voluntary limit settings applied to your account.
• Technical data: IP address, device type, browser type and version, operating system, session timestamps, and connection logs generated when you access pk767.
• Communication data: Records of support chat conversations, email correspondence, and any other communications you initiate with pk767.
• Preference data: Account settings, game preferences, language preferences, and marketing consent records.

pk767 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data except where identity document images are processed strictly for mandatory KYC verification purposes, after which original documents are not retained beyond the legally required period.

4. How We Use Your Personal Data

pk767 uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, and managing your pk767 account, processing authentication, and enabling access to platform services.
• Transaction processing: Processing PKR deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other supported payment methods.
• KYC and AML compliance: Verifying your identity, confirming your age (18+ requirement), and meeting anti-money-laundering and counter-terrorism-financing obligations under applicable licensing conditions.
• Customer support: Responding to enquiries, resolving disputes, and providing 24/7 player assistance.
• Fraud prevention and security: Detecting and preventing fraud, unauthorised account access, money laundering, and prohibited conduct as defined in the pk767 Terms & Conditions.
• Responsible gaming: Monitoring gaming patterns for early signs of problem gambling and enabling the operation of voluntary limit-setting and self-exclusion tools.
• Legal and regulatory compliance: Meeting reporting obligations to regulatory authorities, responding to lawful requests from competent authorities, and retaining records as required by law.
• Service improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates where you have provided explicit consent to receive such communications.

5. Legal Basis for Processing

pk767 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and pk767, including account management, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable law, including KYC/AML obligations, age verification requirements, and regulatory reporting.
• Legitimate interests: Processing necessary for pk767's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, provided such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and optional tracking, which relies on your explicit consent and which you may withdraw at any time without affecting the lawfulness of prior processing.

6. KYC & Identity Verification

pk767 operates a tiered Know Your Customer ("KYC") verification process as required by its licensing conditions and AML obligations. All players must complete at least Tier 2 KYC verification before any withdrawal is processed. KYC data, including CNIC images and proof of address documents, is processed securely by pk767 and, where applicable, by a certified third-party identity verification provider under a strict data processing agreement.

Identity documents submitted for KYC purposes are stored in encrypted form and are accessible only to authorised compliance personnel. Document images are retained for the legally required minimum period and then securely deleted. pk767 does not use KYC document data for any purpose other than identity verification and regulatory compliance.

7. Payment Data

pk767 does not store full payment card numbers or complete mobile wallet account credentials on its own servers. Payment transactions are processed by PCI-DSS compliant payment service providers. pk767 retains transaction reference numbers, transaction amounts in PKR, timestamps, and payment method type (e.g., JazzCash, Easypaisa, HBL) for account management and regulatory compliance purposes.

All PKR deposit and withdrawal transactions are logged and may be audited by pk767's compliance team as part of ongoing AML monitoring obligations.

8. Cookies & Tracking Technologies

pk767 uses cookies and similar tracking technologies to ensure the proper functioning of the platform and to improve your experience. The categories of cookies used by pk767 are:

• Strictly necessary cookies: Required for platform functionality, including session authentication and security tokens. These cannot be disabled.
• Performance cookies: Used to measure page load performance and identify technical errors. Data is collected in aggregated, anonymised form.
• Functionality cookies: Used to remember your preferences, such as language settings and game display preferences.
• Analytics cookies: Used to understand how players navigate the platform, which pages are most visited, and how features are used. This data is aggregated and not personally identifiable. Analytics cookies require your consent.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may impair platform functionality. Consent-based cookies will only be set following your affirmative action.

9. Third-Party Sharing

pk767 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment service providers receive transaction data strictly necessary to process your deposits and withdrawals.
• KYC/identity verification providers: Certified identity verification platforms that process document images under strict data processing agreements and applicable data protection law.
• Game content providers: Third-party game studios (e.g., Evolution Gaming, Pragmatic Play, and others certified by eCOGRA or GLI) receive only the anonymised session and bet data necessary to operate games within the pk767 lobby.
• Regulatory authorities: pk767 may be required to disclose player data to licensing authorities, financial intelligence units, or law enforcement agencies pursuant to a lawful order or mandatory reporting obligation.
• Legal and compliance advisors: Legal counsel and compliance consultants engaged by pk767 who are bound by professional confidentiality obligations.

All third-party service providers engaged by pk767 are subject to contractual data protection obligations, including data processing agreements where required by applicable law, and are permitted to use your personal data only for the specific purposes for which it was shared.

10. Data Retention

pk767 retains personal data for the following periods:

• Account data: Retained for the duration of the account relationship and for a period of five (5) years following account closure, as required by applicable AML legislation.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial record-keeping requirements.
• KYC documents: Retained for five (5) years following the end of the business relationship, after which document images are securely deleted. Transaction reference records may be retained longer where required by law.
• Gaming activity logs: Retained for three (3) years, after which they are anonymised or deleted.
• Support communications: Retained for two (2) years from the date of the last communication, unless a longer period is required in connection with an ongoing dispute.
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year as evidence of the consent transaction.

Upon expiry of the applicable retention period, pk767 will securely delete or anonymise personal data in accordance with its data deletion procedures.

11. International Data Transfers

pk767 may transfer personal data to service providers located outside Pakistan for the purposes of payment processing, KYC verification, and game platform operation. Where such transfers occur, pk767 ensures that appropriate safeguards are in place, including contractual clauses that provide data protection standards equivalent to those applicable under this Policy.

If you would like further information about the safeguards applied to international data transfers, please contact the pk767 Data Protection team using the details in Section 16.

12. Your Data Rights

Registered pk767 players have the following rights in relation to their personal data, exercisable by submitting a written request to the pk767 Data Protection team:

• Right of access: You may request a copy of the personal data pk767 holds about you.
• Right of rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations that may override this right.
• Right to data portability: You may request your personal data in a structured, machine-readable format for transfer to another service provider where technically feasible.
• Right to restrict processing: You may request restriction of processing in certain circumstances, such as where you contest the accuracy of data while a correction is pending.
• Right to object: You may object to processing based on legitimate interests, including profiling. You have an unconditional right to object to processing for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

pk767 will respond to all data subject requests within 30 calendar days of receipt. Where a request is complex, pk767 may extend this period by a further 30 days with prior notice.

13. Children's Privacy

pk767 is strictly an 18+ platform. We do not knowingly collect or process the personal data of individuals under the age of 18. If pk767 becomes aware that personal data has been submitted by a person under 18, that data will be immediately deleted and the associated account will be permanently closed. If you believe a minor has registered on pk767, please notify us immediately using the contact details in Section 16.

14. Security Measures

pk767 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• TLS 1.3 encryption for all data in transit between your device and pk767 servers.
• AES-256 encryption for sensitive data stored at rest, including passwords (stored as salted bcrypt hashes) and financial record fields.
• Role-based access controls ensuring that personal data is accessible only to authorised personnel with a documented business need.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Audit logging of all access to personal data within pk767 internal systems.
• ISO 27001-aligned information security management practices governing all data processing operations.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, pk767 will notify affected players without undue delay and in accordance with applicable notification requirements.

15. Changes to This Privacy Policy

pk767 may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or platform operations. Material changes will be communicated to registered players via the mobile number or email address on file at least 7 days before the changes take effect, except where immediate changes are required by law.

The current version of this Policy is always accessible at pk767.app/privacy-policy. The version number and effective date are displayed at the top of this document. Your continued use of pk767 following the effective date of any revised Policy constitutes your acceptance of the changes.

16. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a data protection complaint, please contact the pk767 Data Protection team:

pk767 aims to resolve all privacy-related enquiries and complaints satisfactorily. If you are not satisfied with pk767's response to a complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.