bk67 Privacy Policy

1. Introduction

bk67 ("bk67", "we", "us", "our") operates the online casino and sports betting platform accessible at bk67.app. We are committed to protecting the personal data of every player who registers and uses the bk67 Service, including all players based in Pakistan across cities such as Karachi, Lahore, Islamabad, Rawalpindi, and Faisalabad.

This Privacy Policy sets out in clear terms what personal information bk67 collects, why we collect it, how we use it, who we share it with, and what rights you hold over your own data. By creating a bk67 account or continuing to use the bk67 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

If you do not agree with any aspect of this Privacy Policy, you should not create a bk67 account or submit any personal information to the platform. Existing account holders who withdraw consent for core data processing required for account operation may need to close their bk67 account, as some data processing is a prerequisite for providing the Service.

2. Data Controller

For the purposes of applicable data protection laws, bk67 acts as the data controller in respect of personal data collected from users of the bk67 platform. All data protection enquiries, subject access requests, and complaints should be directed to the bk67 Data Privacy team via the contact details set out in Section 13 of this Policy.

3. Data We Collect

3.1 Registration Data

When you create a bk67 account, we collect the personal information you provide, which typically includes: your full legal name, date of birth, residential address in Pakistan, Pakistani mobile phone number (such as a Jazz, Zong, Telenor, or Warid number), and email address. This information is mandatory for account creation and cannot be withheld.

3.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) compliance process, bk67 may collect copies of identity documents including your Computerised National Identity Card (CNIC), proof of residential address (such as a utility bill or bank statement issued in Pakistan), and proof of payment method ownership. This data is collected to verify your identity and comply with anti-money laundering obligations.

3.3 Financial Data

bk67 collects transaction records associated with your account, including deposit and withdrawal amounts, payment method details (such as JazzCash account numbers or Easypaisa registered numbers), and transaction timestamps. bk67 does not store full debit or credit card numbers on its servers; card payment processing is handled by PCI-compliant third-party payment processors.

3.4 Usage and Behavioural Data

bk67 automatically collects certain technical and behavioural data when you use the platform, including: IP address, device type and operating system, browser type, session duration and timestamps, pages visited within bk67, games played, bets placed, and in-session activity logs. This data is used for platform security, fraud detection, product improvement, and responsible gaming monitoring purposes.

3.5 Communications Data

If you contact bk67 customer support via live chat or email, we retain records of those communications, including the content of messages and any attachments provided, to assist with ongoing support, dispute resolution, and quality assurance.

4. How We Use Your Data

bk67 uses the personal data we collect for the following purposes:

• Account Management — Creating, maintaining, and operating your bk67 account, including processing deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and other supported methods.
• Identity Verification — Conducting KYC checks and verifying your age (18+ requirement) in compliance with our platform obligations.
• Fraud Prevention & Security — Detecting, investigating, and preventing fraudulent transactions, multiple account abuse, bonus abuse, and other prohibited conduct on the bk67 platform.
• Regulatory Compliance — Meeting anti-money laundering (AML) obligations, record-keeping requirements, and any other legal obligations applicable to bk67's operation.
• Responsible Gaming — Monitoring your gaming activity to identify patterns consistent with problem gambling and, where appropriate, reaching out with support resources or applying account restrictions.
• Platform Improvement — Analysing aggregated, anonymised usage data to improve the bk67 user experience, game selection, and mobile performance for Pakistani players.
• Customer Support — Responding to your support queries, processing complaints, and resolving disputes relating to your bk67 account.
• Marketing Communications — Sending you promotional offers, bonus notifications, and product updates via SMS or email, subject to your communication preferences. You may opt out of marketing communications at any time through your bk67 account settings.

5. Legal Basis for Processing

bk67 processes your personal data under the following legal bases:

• Contractual Necessity — Processing required to perform the agreement between bk67 and you as a registered account holder, including account creation, bet settlement, and payment processing.
• Legal Obligation — Processing required to comply with applicable laws, including KYC/AML requirements and record-keeping obligations.
• Legitimate Interests — Processing carried out for bk67's legitimate business interests, including fraud prevention, platform security, and product improvement, where such interests are not overridden by your fundamental rights.
• Consent — Processing of personal data for optional purposes such as marketing communications, where your explicit consent has been obtained. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

6.1 Third-Party Service Providers

bk67 shares personal data with trusted third-party service providers where necessary to deliver the Service. These include payment processors (JazzCash, Easypaisa, and banking partners), KYC and identity verification providers, game software suppliers, cloud hosting and IT infrastructure providers, and customer support tools. All third-party processors are bound by data processing agreements requiring them to protect your personal data to a standard equivalent to this Policy.

6.2 Legal Disclosures

bk67 may disclose your personal data to law enforcement agencies, regulatory bodies, or other authorised entities where required by law, court order, or to protect the rights, property, or safety of bk67, its users, or the public. This includes cooperation with investigations into fraud, money laundering, or other criminal activity.

6.3 No Sale of Personal Data

bk67 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. Your information is used solely to provide and improve the bk67 Service and to meet our legal obligations.

7. Cookies & Tracking Technologies

bk67 uses cookies and similar tracking technologies to operate the platform, maintain login sessions, remember your preferences, and analyse platform usage. The types of cookies used by bk67 include:

• Strictly Necessary Cookies — Required for the bk67 platform to function. These cannot be disabled without breaking core functionality such as login sessions and secure transactions.
• Analytics Cookies — Used to collect anonymised data about how users navigate the bk67 platform, helping us identify areas for improvement. These do not identify individual users.
• Functionality Cookies — Store your platform preferences such as language settings and display options to personalise your bk67 experience.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the bk67 platform effectively.

8. Data Retention

bk67 retains personal data for as long as your account is active and for a period thereafter as required by applicable legal, regulatory, and business record-keeping obligations. In general:

• Account registration and KYC data is retained for a minimum of 5 years following account closure to satisfy AML record-keeping requirements.
• Financial transaction records are retained for a minimum of 5 years from the date of each transaction.
• Customer support communications are retained for up to 3 years from the date of the relevant interaction.
• Marketing opt-in records are retained for as long as the consent remains valid or until withdrawn, and for a reasonable period thereafter as proof of prior consent.

Where personal data is no longer required for any legitimate purpose, bk67 will securely delete or anonymise it.

9. Data Security

bk67 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include SSL/TLS encryption for all data transmitted between your device and bk67's servers, access controls limiting data access to authorised personnel on a need-to-know basis, secure encrypted storage of sensitive data including CNIC copies and payment method details, regular security assessments of bk67's platform and infrastructure, and two-factor authentication available to all bk67 account holders.

Despite these measures, no data transmission over the internet can be guaranteed 100% secure. bk67 encourages all Pakistani players to use strong unique passwords for their bk67 accounts and to enable two-factor authentication to further protect their account and PKR balance.

10. Your Rights

Subject to applicable law, you have the following rights regarding your personal data held by bk67:

• Right of Access — Request a copy of the personal data bk67 holds about you (subject access request).
• Right to Rectification — Request correction of any inaccurate or incomplete personal data in your bk67 account.
• Right to Erasure — Request deletion of your personal data where there is no overriding legal basis for bk67 to continue holding it. Note that certain data must be retained to comply with AML and record-keeping obligations regardless of an erasure request.
• Right to Restriction — Request that bk67 restrict processing of your personal data in certain circumstances, for example while a dispute about data accuracy is resolved.
• Right to Object — Object to processing of your personal data carried out on the basis of legitimate interests, including direct marketing.
• Right to Data Portability — Receive a copy of certain personal data you have provided to bk67 in a structured, commonly used, machine-readable format.

To exercise any of the above rights, please contact bk67 using the details in Section 13. bk67 will respond to verified requests within 30 days. We may require identity verification before processing any request affecting your account data.

11. Minors

The bk67 platform is strictly for persons aged 18 years or older. bk67 does not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data from a minor has been submitted, we will immediately close the associated account and securely delete the data. If you believe a minor has created a bk67 account, please contact bk67 support immediately at the address in Section 13.

12. Updates to This Privacy Policy

bk67 reserves the right to amend this Privacy Policy at any time. When material changes are made, registered users will be notified via the mobile number or email address on file, or via a prominent notice on the bk67 platform. The effective date at the top of this document will be updated to reflect any revision. Your continued use of the bk67 Service following notification of changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

For all privacy-related enquiries, subject access requests, data correction requests, or complaints regarding bk67's data practices, please contact the bk67 Data Privacy team:

Email: [email protected]

Please include "Privacy Request" in the subject line of your email along with your registered bk67 username and a description of your request. bk67 aims to acknowledge all privacy requests within 5 business days and provide a full response within 30 days.