Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 67pak ("67pak", "we", "us", "our") collects, uses, stores, shares and protects the personal data of individuals ("User", "you", "your") who access or use the online betting and gaming information platform located at https://67pak.cam ("Platform").

67pak is committed to handling your personal data responsibly, transparently and in accordance with applicable data protection principles. We have designed this Policy to be clear and accessible to Pakistani users — players from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and beyond — who deserve to understand precisely how their information is handled when they use the Platform.

By accessing the Platform or creating a registered account, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not consent to this Policy, you must not use the Platform.

2. Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, IP address and payment details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" means 67pak, the entity that determines the purposes and means of Processing Personal Data collected through the Platform.
• "Data Processor" means any third party that Processes Personal Data on behalf of 67pak under a written data-processing agreement.
• "KYC" means Know Your Customer — the identity and document verification process required to activate accounts or process withdrawals.
• "Cookies" means small text files placed on your device by the Platform that collect information about your browsing behaviour and preferences.
• "Consent" means any freely given, specific, informed and unambiguous indication of your agreement to the Processing of your Personal Data for a stated purpose.
• "Legitimate Interests" means a legal basis for Processing where 67pak has a genuine business need that is not overridden by your privacy rights and interests.

3. Data We Collect

67pak collects the following categories of personal data, depending on your interaction with the Platform:

3.1 Registration & Identity Data

• Full legal name as it appears on a government-issued identity document
• Date of birth (used to verify age eligibility — 18+ or higher minimum)
• Gender (where voluntarily provided)
• Residential address including city (e.g., Karachi, Lahore, Islamabad)
• Nationality and country of residence
• CNIC number or passport number (submitted during KYC verification)

3.2 Contact Data

• Email address (primary communication channel)
• Mobile phone number (for account security and two-factor authentication)
• Preferred language for support (English or Urdu)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction histories (amounts, dates, methods)
• Payment method identifiers — such as bank account numbers linked to HBL, UBL, Meezan Bank or Bank Alfalah, or mobile wallet identifiers for Easypaisa, JazzCash or Raast — collected for transaction processing and fraud prevention only; these references do not imply gambling endorsement by any payment provider
• Balance and wagering activity records for regulatory and KYC purposes

3.4 Technical & Usage Data

• IP address and approximate geolocation derived therefrom
• Device type, operating system and browser version
• Session timestamps, page visit logs and feature interaction data
• Referral source (how you arrived at the Platform)

3.5 Responsible Gambling Data

• Self-reported problem gambling status (where voluntarily disclosed)
• Deposit limit, session limit and self-exclusion settings you configure
• Behavioural risk indicators used by our responsible gambling monitoring system

4. How We Collect Data

67pak collects personal data through the following methods:

• Directly from you — when you complete a registration form, submit KYC documents, contact support or update your account profile.
• Automatically — through cookies, server logs, session-tracking technologies and analytics tools when you browse or interact with the Platform.
• From payment processors — transaction confirmation data received from payment gateways to reconcile deposits and withdrawals.
• From identity verification providers — document scan results and identity match scores returned by third-party KYC service providers engaged by 67pak.
• From fraud prevention services — risk signals and device fingerprinting data from anti-fraud partners used to detect multi-accounting, bot activity and financial crime.

5. Purposes of Processing

67pak processes your personal data for the following specific, defined purposes:

• Account Management: Creating, maintaining, verifying and closing your registered account on the Platform.
• KYC & AML Compliance: Verifying your identity, age and source of funds in accordance with our anti-money laundering and know-your-customer obligations.
• Transaction Processing: Executing deposits, withdrawals and bonus credits to and from your account balance.
• Customer Support: Responding to your queries, complaints and escalations through Live Chat, email and other support channels.
• Responsible Gambling Monitoring: Detecting signs of problem gambling behaviour and enforcing self-imposed limits, cooling-off periods and self-exclusion instructions.
• Fraud & Security: Detecting, investigating and preventing fraudulent activity, multi-accounting, bot usage and financial crime on the Platform.
• Platform Improvement: Analysing aggregated usage data to improve the Platform's features, performance, content and user experience.
• Legal Compliance: Meeting our obligations under applicable laws and responding to lawful requests from competent authorities.
• Marketing Communications: Sending you promotional offers, bonus notifications and platform updates where you have provided explicit consent. You may withdraw this consent at any time.

6. Legal Basis for Processing

Each purpose for which 67pak processes your personal data is supported by one of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and 67pak — including account creation, transaction processing and delivering platform services.
• Legal Obligation: Processing required to comply with KYC, AML and other applicable regulatory requirements.
• Legitimate Interests: Processing necessary for fraud detection, platform security, responsible gambling monitoring and platform analytics — provided our interests do not override your fundamental privacy rights.
• Consent: Marketing communications and optional data collection where you have actively opted in. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Disclosure

67pak does not sell your personal data. We share personal data only in the following limited circumstances:

7.1 Service Providers (Data Processors)

We engage third-party service providers who process personal data on our behalf under binding data processing agreements. Categories include: KYC verification providers, payment gateways, fraud prevention services, cloud hosting providers, customer support platform operators and analytics tools. These parties are contractually prohibited from using your data for any purpose beyond the service they provide to 67pak.

7.2 Regulatory & Law Enforcement

We may disclose personal data to competent authorities, courts or regulators when required to do so by law, court order or in response to a valid formal legal request. 67pak will notify you of any such disclosure where permitted by law.

7.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring or sale of all or part of 67pak's business, personal data held by 67pak may be transferred to the acquiring entity. You will be notified of any such transfer and any resulting changes to this Policy.

8. International Data Transfers

Some of 67pak's service providers are located outside Pakistan. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection, 67pak will implement appropriate safeguards such as standard contractual clauses or binding corporate rules to ensure your data remains protected to the standards described in this Policy.

By using the Platform, you acknowledge and consent to your personal data being transferred to and processed in jurisdictions outside Pakistan where 67pak or its service providers operate, subject to the safeguards described above.

9. Data Retention

67pak retains personal data for as long as is necessary to fulfil the purposes described in this Policy, comply with legal obligations and resolve disputes. Specific retention periods are as follows:

• Account & Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with applicable AML retention requirements.
• Transaction Records: Retained for a minimum of five (5) years following each transaction to support AML audit and regulatory reporting obligations.
• KYC Documents: Retained for the period required by the licensing jurisdiction's AML/CFT framework — typically five (5) years from the last transaction or account closure, whichever is later.
• Technical & Usage Logs: Typically retained for up to twelve (12) months unless a longer period is required for fraud investigation or legal proceedings.
• Marketing Consent Records: Retained for the duration of your account and for three (3) years following withdrawal of consent, as evidence of prior consent management.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with industry-standard data destruction procedures.

10. Cookies & Tracking Technologies

67pak uses cookies and similar technologies to operate and improve the Platform. The following categories of cookies are deployed:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable login session persistence, security features and core navigation. Cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: Collect anonymised data about how users interact with the Platform — pages visited, session duration, error events — to help us improve the user experience. Subject to your consent.
• Functional Cookies: Remember your preferences such as language selection, notification settings and display options. Subject to your consent.
• Targeting & Marketing Cookies: Track browsing behaviour across sessions to deliver relevant promotional content. Only deployed where you have provided explicit consent.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core Platform but may affect certain features. For details on the specific cookies in use, refer to the cookie management tool available in your account settings.

11. User Rights

Subject to applicable law and any overriding obligations 67pak holds under AML/KYC regulations, you have the following rights in relation to your personal data:

• Right of Access: Request a copy of the personal data 67pak holds about you, together with information about how it is processed.
• Right to Rectification: Request correction of inaccurate or incomplete personal data held on your account.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding retention obligations.
• Right to Restriction: Request that 67pak restricts processing of your personal data in certain circumstances — for example, while a dispute about accuracy is resolved.
• Right to Data Portability: Receive a copy of personal data you have provided to 67pak in a structured, commonly used, machine-readable format.
• Right to Object: Object to processing based on Legitimate Interests, including profiling for responsible gambling monitoring purposes, where your individual circumstances justify it.
• Right to Withdraw Consent: Withdraw consent for marketing communications or any other processing based solely on your consent, at any time without penalty.

To exercise any of the above rights, please contact us at [email protected]. We will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) calendar days. In complex cases, we may extend this period by a further thirty (30) days with written notice.

12. Children's Privacy

The 67pak Platform is strictly intended for adults aged 18 years or older (or the higher minimum age required by the applicable operator/licence jurisdiction). We do not knowingly collect personal data from individuals under the applicable age threshold.

If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the Platform, please contact us immediately at [email protected].

Parents and guardians are encouraged to use parental control tools to prevent minors from accessing online gambling platforms. 67pak does not offer any services, content or promotions directed at persons under 18.

13. Security Measures

67pak implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and 67pak's servers
• Encryption of sensitive stored data including identity documents and payment identifiers
• Role-based access control — only authorised personnel with a defined operational need can access personal data
• Regular security audits, penetration testing and vulnerability assessments
• Two-factor authentication options for registered user accounts
• Incident response procedures to detect, contain and report data breaches within regulatory timelines

While 67pak takes all reasonable measures to protect your data, no internet transmission or storage system can be guaranteed as 100% secure. In the event of a data breach that is likely to result in significant harm to affected individuals, we will notify you and any applicable regulatory authority promptly in accordance with legal requirements.

14. Third-Party Links

The Platform may contain references or descriptive mentions of third-party services — such as payment providers (Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah) or sports organisations — for contextual and informational purposes. These references are not endorsements, partnerships or affiliations.

Where the Platform contains links to third-party websites or services (for example, responsible gambling support resources), 67pak has no control over and accepts no responsibility for the privacy practices or content of those external sites. We recommend you review the privacy policy of any third-party site you visit.

15. Policy Amendments

67pak may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law or the Platform's features. Where amendments are material — particularly those affecting your rights or the categories of data we collect — we will notify you by email to your registered address or through a prominent notice on the Platform before changes take effect.

Continued use of the Platform following publication of an updated Privacy Policy constitutes acceptance of the revised terms. We recommend you review this Policy periodically. The "Last reviewed" date at the top of this page indicates when the Policy was most recently updated.

16. Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy or how 67pak processes your personal data, please contact our Data Protection team through the following channel:

Please include "Privacy Request" in your subject line along with your registered username and a clear description of your query or concern. We aim to acknowledge all privacy-related enquiries within five (5) business days and provide a full response within thirty (30) calendar days.

For urgent matters — such as suspected data breaches or requests to immediately restrict data processing — please mark your email "Urgent: Privacy" and our team will prioritise your case accordingly.