Privacy Policy of pkr67

This Privacy Policy governs all personal data processing activities carried out by pkr67 in connection with the operation of its online gaming platform accessible at pkr67.club (the "Platform"). It applies to all users of the Platform regardless of their country of residence, the device they use to access the Platform, or the specific services they interact with.

This Policy should be read alongside pkr67's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Privacy Policy and those documents on matters of data protection, this Privacy Policy shall prevail.

pkr67 acts as the data controller in respect of all personal data collected and processed through the Platform. As data controller, pkr67 is responsible for determining the purposes and means of data processing and for ensuring that such processing is carried out lawfully, fairly, and transparently.

This Policy does not apply to third-party websites, services, or platforms that may be referenced on the pkr67 Platform. pkr67 is not responsible for the privacy practices of any third party and encourages users to review the privacy policies of any external service they interact with.

pkr67 collects personal data that falls into the following categories. We only collect data that is necessary, relevant, and proportionate to the purposes for which it is processed.

pkr67 does not collect or process special categories of personal data (such as health data, racial or ethnic origin, religious beliefs, or biometric data) unless explicitly required by a regulatory obligation, in which case you will be informed separately and your consent obtained where required by law.

pkr67 collects personal data through the following channels and mechanisms:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you interact with the Platform, including through cookies, web beacons, server logs, and session tracking tools. See Section 9 for details on cookies.
• Payment processors: Transaction reference data and confirmation details received from our integrated Pakistani payment providers including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank when you initiate a deposit or withdrawal.
• Identity verification services: Where pkr67 uses third-party KYC verification providers to authenticate your identity documents, those providers may return verification results and associated metadata to pkr67.
• Fraud prevention and AML services: pkr67 may receive risk scoring or alert data from third-party anti-money laundering and fraud detection services as part of its regulatory compliance obligations.
• Publicly available sources: In limited circumstances, pkr67 may consult publicly available government databases or sanctions lists as part of its regulatory due diligence obligations.

pkr67 processes your personal data for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with these stated purposes without first providing notice and, where required, obtaining your consent.

• Account registration and management: To create, maintain, and administer your pkr67 account, including verifying your identity and eligibility to use the Platform.
• Service delivery: To enable you to access and use all features of the Platform including cricket betting, live casino games, slots, virtual sports, and Relax Fishing.
• Payment processing: To process deposits and withdrawals via your selected payment method, and to maintain accurate records of your financial transactions on the Platform.
• KYC and age verification: To verify that you meet the minimum age requirement of 21 years and to confirm the accuracy of the identity information you have provided, as required under international gaming licence conditions.
• Regulatory compliance and AML: To meet our obligations under applicable anti-money laundering, counter-terrorism financing, and gaming regulatory frameworks, including transaction monitoring and suspicious activity reporting.
• Responsible gaming: To monitor gameplay patterns for indicators of problem gambling and to administer responsible gaming tools such as deposit limits, session reminders, and self-exclusion programmes.
• Customer support: To respond to your enquiries, resolve disputes, and process complaints through our support channels.
• Platform security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and technical abuse of the Platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may opt out at any time.
• Analytics and improvement: To understand how users interact with the Platform and to make data-informed improvements to user experience, game selection, and operational performance.

pkr67 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between you and pkr67, including account registration, service delivery, and payment processing.
• Legal obligation: Processing that is required to comply with applicable legal and regulatory obligations, including KYC verification, AML transaction monitoring, and regulatory reporting duties under our international gaming licence.
• Legitimate interests: Processing that is necessary for pkr67's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and business analytics — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for which we have obtained your freely given, specific, informed, and unambiguous consent, including the sending of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

pkr67 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other payment processors necessary to execute your requested transactions. These providers act as independent data controllers for their own payment processing activities.
• KYC and identity verification providers: Third-party services used to verify your identity documents and confirm your age. These providers process your data under strict data processing agreements with pkr67.
• AML and fraud prevention services: External compliance and risk management tools used to detect suspicious transactions and fulfil our regulatory reporting obligations.
• Game content providers: Licensed third-party game studios whose titles are hosted on the pkr67 platform may receive anonymised or pseudonymised session data necessary to deliver gameplay. They do not receive your identity data.
• Regulatory authorities and law enforcement: pkr67 may be required by law or regulatory direction to disclose your personal data to government agencies, financial intelligence units, or law enforcement bodies. Such disclosures are made only to the extent legally required.
• Professional advisers: Legal counsel, auditors, and accountants who are bound by professional confidentiality obligations and who require access to your data to provide their services to pkr67.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of pkr67's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

All third parties with whom pkr67 shares personal data are required to handle that data in a manner consistent with applicable data protection standards. Where pkr67 acts as a data processor on behalf of a third party, or engages a third party as a sub-processor, appropriate contractual safeguards are put in place.

pkr67 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account relationship with pkr67, plus a minimum of 5 years following account closure, as required under anti-money laundering regulations applicable to gaming operators.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction in compliance with financial record-keeping obligations.
• KYC documentation: Retained for the period required by applicable AML and gaming regulatory frameworks, which is typically 5 years from the date of the last transaction or account closure, whichever is later.
• Customer support communications: Retained for 3 years from the date of the interaction, or longer where a dispute or complaint remains unresolved.
• Technical and usage data: Typically retained for 13 months from collection for analytics purposes, after which it is aggregated and anonymised.
• Marketing consent records: Retained for the duration of the consent, plus 3 years thereafter as evidence of consent in the event of a complaint or regulatory enquiry.

Upon expiry of the applicable retention period, pkr67 will securely delete or irreversibly anonymise your personal data. Where deletion is not immediately possible due to technical constraints (e.g., backup systems), the data will be isolated from active processing until deletion can be completed.

pkr67 implements a comprehensive, layered approach to data security designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and pkr67 servers, ensuring that your credentials, payment information, and personal data cannot be intercepted in transit.
• Encryption at rest for sensitive personal data and financial records stored on pkr67 infrastructure.
• Access controls and role-based permissions ensuring that pkr67 staff can only access personal data that is necessary for their specific job function. All access is logged and audited.
• Multi-factor authentication required for all pkr67 staff accessing production systems and administrative interfaces.
• Regular penetration testing and vulnerability assessments conducted by independent security professionals to identify and remediate potential weaknesses.
• Incident response procedures that govern how pkr67 detects, contains, and reports personal data breaches, including notification to affected users and regulatory authorities within applicable timeframes.

pkr67 uses cookies and similar tracking technologies to operate the Platform, improve user experience, and — where you have consented — to deliver targeted content. The following types of cookies are used:

• Strictly necessary cookies: Essential to the functioning of the Platform. These cookies enable core features such as session management, login authentication, and shopping cart functionality. They cannot be disabled without breaking Platform functionality.
• Functional cookies: Used to remember your preferences and settings (such as language selection and responsible gaming limits) to personalise your experience. These are not strictly necessary but enhance usability.
• Analytics cookies: Used to collect anonymised data about how users navigate and interact with the Platform. This helps pkr67 identify areas for improvement. Analytics data is aggregated and does not identify individual users.
• Marketing cookies: Used to track your interaction with pkr67 promotional content and — where consent has been given — to deliver relevant promotional messages. These cookies are only set following your explicit consent.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. Withdrawing consent for analytics or marketing cookies will not affect your ability to access your account or use any gaming features.

pkr67 does not use cookies to track your activity on third-party websites, and does not participate in cross-site advertising networks.

As a user of the pkr67 platform, you hold the following rights in relation to your personal data. pkr67 is committed to facilitating the exercise of these rights promptly and without undue obstacle. We will respond to all valid rights requests within 30 calendar days of receipt.

• Right of access: You have the right to request a copy of the personal data pkr67 holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update many of your details directly through your account settings.
• Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data in certain circumstances, such as where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. This right is subject to legal retention obligations — we may be required to retain certain data even following an erasure request.
• Right to restriction of processing: You have the right to request that pkr67 temporarily restrict the processing of your data while a complaint or objection is being resolved.
• Right to data portability: Where processing is carried out by automated means on the basis of your consent or a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of pkr67's legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact pkr67's Data Protection contact at [email protected] with the subject line "Data Rights Request". We may need to verify your identity before processing your request to protect against fraudulent requests.

If pkr67 becomes aware that personal data has been collected from a person under the age of 21 without appropriate consent or verification, that data will be deleted immediately and the associated account will be closed. If you believe that pkr67 has inadvertently collected data from an underage individual, please contact us at [email protected] immediately so we can take corrective action.

Parents and guardians are encouraged to monitor the online activities of minors in their care and to use parental control software to restrict access to gambling platforms where appropriate.

As an internationally operating gaming platform, pkr67 may need to transfer your personal data to recipients located in countries outside of Pakistan. Where such transfers occur, pkr67 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection frameworks.

Safeguards used by pkr67 for international data transfers include:

• Contractual clauses that impose data protection obligations equivalent to those applicable in Pakistan on all recipient entities;
• Transfers only to jurisdictions that maintain an adequate level of data protection as assessed against recognised international standards;
• Binding corporate rules where data is transferred within a corporate group;
• Certification mechanisms recognised under applicable data protection frameworks.

You may request further information about the specific safeguards applied to any international transfer of your personal data by contacting pkr67 support.

pkr67 may update this Privacy Policy periodically to reflect changes in our data processing practices, applicable legal requirements, or the services we offer. When a material change is made to this Policy, pkr67 will notify registered users via the email address associated with their account and/or via an in-platform notification, with a minimum advance notice period of 7 days before the updated Policy takes effect.

The "Last Updated" date at the top of this document always reflects when the most recent revision was made. We encourage you to review this Policy periodically to stay informed of how pkr67 protects your information. Your continued use of the Platform after the effective date of a revised Policy constitutes your acknowledgement of the changes.

If any change to this Policy materially reduces your rights or increases the scope of data processing in a way that requires your consent, we will obtain that consent separately before the change takes effect with respect to your data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or pkr67's data processing practices, or if you wish to exercise any of your data rights as described in Section 10, please contact the pkr67 data protection team through the following channel:

pkr67 takes all privacy-related complaints seriously and will acknowledge receipt of your complaint within 5 business days. Where we are unable to resolve your complaint to your satisfaction, you retain the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.