pak67 ("we", "us", "the Company") is committed to protecting the privacy and personal data of every player who registers and plays on our platform. This Privacy Policy is a legally binding document that forms part of your agreement with pak67 when you create an Account and use any of our services, including cricket betting, live dealer tables, slots, crash games, and all associated payment and support functions.
Please read this Privacy Policy carefully before completing your pak67 registration. By accessing the Platform and submitting your registration details, you confirm that you have read, understood, and agreed to the data practices described herein. If you do not agree, you must not use the pak67 Platform.
This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference and form part of the complete agreement between you and pak67.
Who We Are
pak67 is Pakistan's premier online casino and sports betting platform, operating at pak67.biz under an international gaming licence. The Company acts as the data controller in respect of all personal data collected from users of the Platform. As data controller, pak67 determines the purposes for which, and the means by which, your personal data is processed.
For all data protection enquiries, you may contact our dedicated data team at the email address provided in Section 13 of this Policy. We aim to respond to all data-related queries within 72 hours of receipt.
Data Controller: pak67 | Platform: pak67.biz | Contact: [email protected] | Licence: International Gaming Licence
Data We Collect
pak67 collects personal data through several channels: directly from you during registration and account management; automatically through your use of the Platform; and from third-party identity verification and payment service providers. The categories of personal data we collect are detailed below.
2.1 Identity & Registration Data
When you create a pak67 Account, we collect the following identity information:
- Full legal name as it appears on your Pakistani CNIC
- CNIC number and a scanned copy or photograph of your CNIC document
- Date of birth (used for mandatory 21+ age verification)
- Residential address in Pakistan (city, province, postal code)
- Pakistani mobile number (used for OTP-based two-factor authentication)
- Email address (used for account correspondence and security alerts)
- Username and encrypted password
2.2 Financial & Transaction Data
To process deposits and withdrawals, pak67 collects and stores the following financial data:
- JazzCash and EasyPaisa mobile wallet identifiers linked to your Account
- Bank account details for HBL, UBL, and Meezan Bank transfers (account title and IBAN)
- Visa/Mastercard debit card details (card number masked to last 4 digits; full card data is never stored by pak67 and is handled exclusively by our PCI-DSS-certified payment processor)
- USDT wallet addresses (TRC-20 and ERC-20)
- Full transaction history including deposit amounts, withdrawal amounts, dates, and payment method used
- Bonus credits received and wagering history against those credits
2.3 Gameplay & Behavioural Data
pak67 automatically records gameplay data for every registered Account, including:
- Games played, bet amounts, outcomes, and session durations
- Responsible gaming tool usage (deposit limits set, cool-off periods activated, self-exclusion requests)
- Device type, operating system, browser version, and screen resolution
- IP address and approximate geographic location at each login
- Login timestamps and session activity logs
2.4 Communications Data
When you contact pak67 support — whether via live chat, email, or any other channel — we retain records of that communication, including the content of messages, timestamps, and any attachments you provide. This data is used to resolve your query, improve our support quality, and maintain a record of the interaction for compliance purposes.
pak67 does not collect more personal data than is strictly necessary for the purposes described in this Policy. We apply the principle of data minimisation across all collection points on the Platform.
How We Use Your Data
pak67 uses your personal data only for the purposes set out below. We do not use your data for any purpose incompatible with those for which it was originally collected without first obtaining your explicit consent.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and authentication | Identity data, mobile number, email, password | Contractual necessity |
| Age and identity verification (KYC) | CNIC number, date of birth, CNIC scan | Legal obligation / Licence requirement |
| Processing deposits and withdrawals | Financial data, transaction history | Contractual necessity |
| Anti-money laundering (AML) monitoring | Transaction patterns, source of funds | Legal obligation |
| Responsible gaming monitoring | Gameplay data, session logs, tool usage | Legal obligation / Legitimate interest |
| Fraud prevention and security | IP address, device data, login history | Legitimate interest |
| Customer support | Communications data, account data | Contractual necessity |
| Marketing communications (opt-in only) | Email, mobile number, gameplay preferences | Consent |
| Platform improvement and analytics | Anonymised behavioural data, device data | Legitimate interest |
Marketing opt-out: If you have consented to receive promotional communications from pak67 and wish to withdraw that consent, you may do so at any time by updating your notification preferences in your Account dashboard or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Legal Basis for Processing
pak67 processes your personal data on the following legal bases, as applicable to each processing activity:
- Contractual Necessity: Processing required to perform the contract with you — i.e., to operate your Account, process transactions, and deliver the gaming services you have subscribed to.
- Legal Obligation: Processing required to comply with our obligations under our international gaming licence, including KYC, AML monitoring, responsible gaming enforcement, and regulatory reporting.
- Legitimate Interest: Processing carried out for purposes that are reasonably expected by you and that do not override your fundamental privacy rights — including fraud prevention, platform security, and anonymised analytics used to improve the player experience.
- Consent: Processing based on your explicit, informed, freely given, and withdrawable consent — primarily for direct marketing communications and the use of non-essential cookies.
Where pak67 relies on legitimate interests as the legal basis for processing, we have conducted a balancing test and concluded that our interests are not overridden by your rights and freedoms as a data subject. You may request details of any such balancing test by contacting our data team.
Data Sharing
pak67 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your personal data only in the specific, limited circumstances described below.
5.1 Payment Processors
To process deposits and withdrawals, pak67 shares the minimum necessary financial data with our licensed and PCI-DSS-certified payment processing partners, including the operators of JazzCash and EasyPaisa integrations, our bank transfer gateway, and our cryptocurrency payment processor. These partners are contractually bound to process your data solely for the purpose of executing the payment transaction and are not permitted to use it for any other purpose.
5.2 Identity Verification Providers
pak67 uses a licensed KYC technology partner to verify the authenticity of CNIC documents submitted during account verification. Your identity documents are transmitted to this partner over an encrypted connection and are used solely for the purpose of verification. The partner retains a verification record but does not use your data for any unrelated purpose.
5.3 Game Content Providers
Game providers including Evolution Gaming, Pragmatic Play, and Habanero may receive a session token and anonymised player identifier when you launch one of their games. These providers do not receive your name, CNIC details, or financial information. Their use of session data is governed by their own privacy policies and their contractual agreements with pak67.
5.4 Regulatory Authorities
pak67 is required, as a condition of its international gaming licence, to cooperate fully with regulatory authorities, financial intelligence units, and law enforcement agencies in any lawful investigation. Where pak67 receives a valid legal order or regulatory demand for disclosure of player data, we will comply and, where legally permitted, will notify the affected player.
pak67 will never share your personal data with third-party advertisers, data brokers, or commercial marketing companies. Any unsolicited communication claiming to be from pak67 that requests your personal details should be treated as fraudulent and reported to [email protected] immediately.
Data Retention
pak67 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by our operating licence or applicable law. The following retention schedule applies:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data (name, CNIC, email, mobile) | 5 years after Account closure | AML and KYC regulatory requirement |
| Transaction and financial records | 7 years after transaction date | Financial record-keeping obligation under gaming licence |
| Gameplay session logs | 3 years after session date | Responsible gaming monitoring and dispute resolution |
| Customer support communications | 3 years after last interaction | Quality assurance and dispute evidence |
| Marketing consent records | Until consent is withdrawn + 1 year | Proof of consent for compliance purposes |
| Security and fraud logs (IP, device) | 2 years after Account closure | Fraud prevention and investigation |
Once the applicable retention period has expired, pak67 will securely delete or anonymise your personal data. Anonymised data — which cannot be used to identify you — may be retained indefinitely for statistical and analytical purposes.
Security Measures
pak67 takes the security of your personal data extremely seriously and has implemented a comprehensive set of technical and organisational security measures to protect your data against unauthorised access, loss, alteration, or disclosure.
7.1 Technical Safeguards
- TLS 1.3 Encryption: All data transmitted between your browser or app and the pak67 Platform is encrypted using TLS 1.3, the current industry standard for transport layer security.
- At-Rest Encryption: Sensitive personal data stored in pak67's databases, including CNIC details and financial records, is encrypted at rest using AES-256 encryption.
- OTP Two-Factor Authentication: Every login to a pak67 Account requires OTP verification sent to your registered Pakistani mobile number, providing a second layer of protection against unauthorised access.
- Password Hashing: Account passwords are never stored in plain text. They are hashed using bcrypt with a per-user salt before storage.
- PCI-DSS Compliance: Card payment processing is handled exclusively by our PCI-DSS Level 1 certified payment processor. pak67 does not store, process, or transmit full card numbers on its own servers.
7.2 Organisational Safeguards
- Access to personal data within pak67 is restricted on a strict need-to-know basis. Only staff members who require access to perform their job functions are granted access, and all access is logged and audited.
- All pak67 staff with access to personal data undergo regular data protection training and are bound by confidentiality obligations in their employment contracts.
- pak67 conducts periodic security assessments and penetration tests of the Platform to identify and remediate potential vulnerabilities.
Despite our best efforts, no online platform can guarantee absolute security. If you believe your pak67 Account has been compromised, please contact [email protected] immediately and change your password. We will initiate an immediate security review and temporarily restrict the Account if necessary.
Cookies & Tracking
pak67 uses cookies and similar tracking technologies to operate the Platform, improve your experience, and — where you have given your consent — to serve relevant promotional content. A cookie is a small text file placed on your device when you visit the Platform. Cookies do not contain viruses or executable code and cannot access other data on your device.
8.1 Essential Cookies
These cookies are strictly necessary for the Platform to function and cannot be disabled. They include session management cookies that keep you logged in during your gaming session, security tokens that protect against cross-site request forgery attacks, and load balancing cookies that ensure stable platform performance. No consent is required for essential cookies as they are a fundamental requirement of the service.
8.2 Analytics Cookies
With your consent, pak67 uses anonymised analytics cookies to understand how players navigate the Platform, which games are most popular, and where technical issues may be occurring. This data is aggregated and does not identify you personally. It is used solely to improve the pak67 product experience for all Pakistani players.
8.3 Preference Cookies
Preference cookies remember your Platform settings, such as your preferred language, display preferences, and any responsible gaming reminders you have configured. These cookies improve your experience by ensuring your settings are preserved across sessions.
8.4 Managing Cookies
You can manage your cookie preferences at any time via your browser settings. Please note that disabling essential cookies will prevent the pak67 Platform from functioning correctly and you will be unable to log in or play games. Instructions for managing cookies in all major browsers are widely available from browser support documentation. Withdrawal of consent for non-essential cookies does not affect prior processing.
Your Rights
As a data subject, you hold a number of rights in relation to the personal data pak67 holds about you. These rights are set out below. To exercise any of these rights, please contact our data team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request, and will not charge a fee except in cases of manifestly unfounded or excessive requests.
Please note that some rights are not absolute. For example, the right to erasure does not apply where pak67 is required to retain your data to comply with a legal obligation under its gaming licence — such as the 5-year KYC retention requirement. Where we are unable to fulfil a rights request fully, we will explain the reason in our response.
Children & Minors
The pak67 Platform is strictly intended for adults aged 21 years and above. pak67 does not knowingly collect, process, or store personal data belonging to any person under the age of 21. Age verification via CNIC is a mandatory step in the pak67 registration process, and accounts cannot be activated without successful completion of this step.
If you believe a person under 21 has created a pak67 Account, please notify us immediately at [email protected]. We will suspend the Account, conduct an immediate review, and if the account holder is confirmed to be underage, permanently close the Account and return any deposited funds to the payment source.
Parents and guardians who are concerned about underage access to online gambling platforms are encouraged to install parental control software on shared devices. pak67 can provide guidance on available parental control options for Pakistani users upon request via our support team.
Third-Party Links
The pak67 Platform may, from time to time, contain links to third-party websites or services — for example, links to responsible gaming resources or payment method information pages. pak67 has no control over the privacy practices or content of these third-party sites and is not responsible for their privacy policies.
We recommend that you read the privacy policy of any third-party site you visit from a link on the pak67 Platform. The fact that a link is present on pak67.biz does not constitute an endorsement of that site's privacy practices by pak67.
Policy Changes
pak67 reserves the right to update and amend this Privacy Policy at any time. When we make a material change to how we collect or use your personal data, we will notify you by email to your registered address at least 14 days before the change takes effect. For minor or non-material changes, we will update the "Last Updated" date at the top of this page.
Your continued use of the pak67 Platform following any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you have the right to close your Account before the change takes effect by contacting our support team. The current version of this Privacy Policy is always accessible at pak67.biz/privacy-policy.
Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or the personal data pak67 holds about you, please reach out to our data protection team using the details below. All communications regarding data rights are handled confidentially and with priority.
- Email: [email protected]
- Subject Line for Data Requests: Data Rights Request
- Live Chat: Available 24/7 in your Account dashboard after pak67 Login
- Response Time: Within 72 hours for general queries; within 30 days for formal data rights requests
- Languages: Support available in English and Urdu
pak67 takes every data protection enquiry seriously. If you are not satisfied with our response to your data rights request, you have the right to escalate your complaint to the relevant supervisory authority under our operating jurisdiction.