pk767 Privacy Policy —
How We Handle Your Personal Data

For the purposes of this Privacy Policy, the data controller responsible for the collection and processing of your personal data in connection with the pk767 platform is pk767 ("pk767," "the Controller," "we," "us"). As data controller, pk767 determines the purposes for which and the means by which your personal data is processed.

pk767 operates the online gaming and sports betting platform available at pk767.org, which serves players in Pakistan and operates under internationally recognised gaming licensing standards. All personal data processed through the pk767 platform is handled in accordance with the principles set out in this Policy and applicable international data protection frameworks.

This Privacy Policy covers all personal data collected and processed by pk767 directly. Where pk767 engages third-party service providers who process data on our behalf (including payment processors, game studios, and fraud prevention services), those arrangements are governed by data processing agreements that bind those parties to equivalent standards of data protection.

pk767 collects personal data across several categories depending on how you interact with the Platform. The following table summarises the categories of personal data we collect and typical examples within each category.

pk767 does not collect special category data (such as biometric data, health information, or political opinions) except where expressly required by anti-money laundering or licensing obligations and only with your explicit consent or under a lawful basis for processing.

pk767 collects personal data through the following primary means:

Data you provide directly to pk767 when you: register a pk767 account; complete identity verification or KYC procedures; make a deposit or withdrawal request via JazzCash, EasyPaisa, or bank transfer; contact pk767 customer support; respond to a survey or promotional offer; or update your account profile settings.

Data collected automatically when you visit or use the pk767 platform, including via cookies, pixel tags, session recording tools, and server log files. This includes your IP address, device fingerprint, browser configuration, pages visited, games launched, and the duration and timing of your sessions.

pk767 may receive data about you from third-party sources including:

• Payment providers: JazzCash and EasyPaisa may share transaction confirmation data and mobile number verification results;
• Identity verification services: Third-party KYC and document verification providers used to authenticate your identity;
• Fraud prevention databases: Screening services used to detect and prevent fraudulent account activity and money laundering;
• Responsible gaming registries: Where you have registered with a self-exclusion scheme and those registries share relevant data with licensed gaming operators.

pk767 processes your personal data only where a valid legal basis for processing exists. The legal bases we rely upon are as follows:

• Contractual necessity: Processing required to perform our obligations under our Terms and Conditions with you, including account management, payment processing, and game provision;
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and gaming licensing conditions;
• Legitimate interests: Processing necessary for pk767's legitimate business interests, including fraud prevention, platform security, abuse detection, customer service improvement, and internal analytics — where such interests are not overridden by your fundamental rights and freedoms;
• Consent: Where pk767 relies on your consent as the basis for processing — specifically for direct marketing communications and non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

pk767 uses the personal data we collect for the following specific purposes:

• Account creation and management: To register your pk767 account, verify your identity and age, maintain your account profile, and manage your PKR wallet balance;
• Transaction processing: To process deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank and to process withdrawal requests to your registered payment method;
• Gaming and betting services: To provide access to casino games, live dealer tables, slots, cricket markets, PSL betting, boxing odds, and all other pk767 gaming services;
• Customer support: To respond to your support queries, complaints, account issues, and to maintain records of interactions for quality assurance;
• Legal compliance: To fulfil our AML, KYC, and gaming licensing obligations, including transaction monitoring, suspicious activity reporting, and record-keeping as required by our licence;
• Responsible gaming: To monitor your gaming activity, apply deposit limits and self-exclusion tools you have requested, and to identify patterns that may indicate harmful gaming behaviour;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, and other security incidents;
• Platform improvement: To analyse usage patterns, conduct A/B testing, and improve the performance, design, and content of the pk767 platform;
• Marketing communications: Where you have opted in, to send you promotional offers, bonus notifications, and platform updates via email or SMS. You may opt out at any time through your account settings.

pk767 does not sell your personal data to third parties. We share your personal data only in the following limited and controlled circumstances:

pk767 engages carefully selected third-party service providers who process data on our behalf under contractual data processing agreements. These providers include payment gateway operators (JazzCash, EasyPaisa, HBL), identity verification and KYC service providers, fraud detection and AML screening tools, cloud hosting providers, and customer support platform operators. These providers are permitted to use your data only as instructed by pk767 and for the specific services they provide.

Game studios whose titles appear on the pk767 platform (such as Evolution, Pragmatic Play, and PG Soft) may receive your session data and anonymised player identifiers for game certification, RTP verification, and technical support purposes. No personally identifiable information is shared with game studios beyond what is strictly necessary for platform functionality.

pk767 may disclose your personal data to law enforcement agencies, regulatory authorities, or government bodies where required by applicable law, court order, or gaming licensing obligation. We will endeavour to notify you of any such disclosure where legally permitted to do so.

The pk767 platform uses cookies and similar tracking technologies to enhance your experience, maintain your session, and gather analytical data about platform usage. Cookies are small text files placed on your device when you visit a website.

• Strictly necessary cookies: Essential for the basic operation of the pk767 platform, including maintaining your login session, remembering your language preferences, and enabling secure transactions. These cannot be disabled without affecting core functionality;
• Performance and analytics cookies: Used to understand how players navigate the pk767 platform, which games are most accessed, and where technical issues occur. Data collected is aggregated and anonymised;
• Functionality cookies: Remember your preferences such as your preferred deposit method, notification settings, and recent game selections to provide a personalised experience;
• Marketing cookies: Used to deliver relevant promotional content based on your gaming activity where you have consented to receive marketing communications from pk767.

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or receive notifications before cookies are stored. Please note that disabling strictly necessary cookies will impair the functionality of the pk767 platform and may prevent you from accessing certain features including the pk767 login screen. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

pk767 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce agreements. Specific retention periods applicable to different data categories are as follows:

Upon expiry of the applicable retention period, pk767 will securely delete or anonymise your personal data so that it can no longer be associated with you. Where anonymisation is not feasible, data will be securely destroyed using industry-standard methods.

Subject to applicable law and certain conditions, you have the following rights in respect of the personal data pk767 holds about you:

• Right of access: You may request a copy of the personal data pk767 holds about you, together with information about how it is being processed;
• Right to rectification: You may request that pk767 correct any inaccurate or incomplete personal data held in your account. Many basic details can be corrected directly through your account settings;
• Right to erasure: In certain circumstances you may request that pk767 delete your personal data. This right is subject to our legal obligations to retain certain data under AML and gaming licensing requirements;
• Right to restriction: You may request that pk767 temporarily restrict the processing of your data where you contest its accuracy, or where processing is unlawful but you do not wish for it to be erased;
• Right to data portability: Where processing is based on your consent or contractual necessity and carried out by automated means, you may request a copy of your data in a commonly used, machine-readable format;
• Right to object: You have the right to object to processing based on legitimate interests (including profiling for responsible gaming monitoring) and to object to the use of your data for direct marketing purposes at any time;
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

pk767 will not charge a fee for handling a data subject rights request except where requests are manifestly unfounded or excessive, in which case a reasonable administrative charge may apply, or the request may be refused.

pk767 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the pk767 platform, including login credentials and financial transactions;
• Encryption at rest for sensitive stored data including identity records, payment method details, and KYC documentation;
• Access controls limiting internal access to personal data to only those staff and systems with a legitimate operational need;
• Two-factor authentication for internal administrative systems and available as an option for all player accounts;
• Regular security audits and penetration testing conducted by qualified independent cybersecurity professionals;
• Intrusion detection systems and automated alerting for unusual access patterns or data exfiltration attempts;
• Incident response procedures enabling rapid containment and notification in the event of a data security incident.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, pk767 will notify you without undue delay in accordance with applicable data protection obligations.

pk767 enforces mandatory age verification at registration. All applicants are required to confirm they are 21 or older and to provide documentary proof of age during the KYC process. Where pk767 discovers or has reason to believe that personal data has been submitted by or on behalf of a person under the age of 21, we will:

• Immediately suspend the account pending investigation;
• Delete the personal data submitted in connection with that account as expeditiously as possible;
• Refund any deposits made, net of any bonuses claimed, in accordance with our responsible gaming policy;
• Void any winnings generated during the period of underage use in accordance with our Terms and Conditions.

Parents and guardians concerned that a minor may have accessed or attempted to access the pk767 platform should contact pk767 support immediately via live chat. pk767 will investigate and take appropriate action promptly.

pk767 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our gaming licensing obligations. Material changes will be communicated to registered users via the email address on record. The effective date at the top of this document will be updated with each revision.

Where a change is materially adverse to your privacy rights, pk767 will provide at least 14 days' advance notice before the change takes effect. Continued use of the pk767 platform following the updated effective date constitutes your acknowledgement of the revised Policy.

For all privacy-related queries, requests to exercise your data subject rights, or formal complaints regarding pk767's data handling practices, please contact our support team through one of the following channels:

• Live Chat: Available 24/7 via the pk767 platform. Average response time 3–5 minutes;
• Email: [email protected] — plain text address, not a clickable link. Written requests via email will receive a substantive response within 5 business days.

If you are not satisfied with pk767's response to a privacy concern, you have the right to lodge a complaint with the relevant data protection supervisory authority or gaming licensing regulator. pk767 will cooperate fully with any regulatory investigation into our data handling practices.

This Privacy Policy should be read in conjunction with the pk767 Terms & Conditions and our Responsible Gaming policy, both of which contain additional provisions relevant to your use of the Platform and your rights as a pk767 account holder.