kp67 Privacy Policy

1. Who We Are

This Privacy Policy is published by kp67, the operator of the online casino and sports betting platform accessible at kp67.org (the "Platform"). kp67 is the data controller responsible for the personal data collected from players who access, register on, or transact through the kp67 Platform.

kp67 operates under an international gaming licence and is subject to the data protection obligations imposed by that regulatory framework. This Policy applies to all players and visitors of kp67.org, regardless of the device or location from which the Platform is accessed, including players based in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and across Pakistan.

For all data-related enquiries, players may contact kp67 at [email protected]. Please mark the subject line of any data-related communication as "Privacy Request" to ensure it is routed to the correct team.

2. Personal Data We Collect

kp67 collects personal data across several categories. The table below sets out what we collect, from whom, and for what primary purpose.

kp67 does not collect special category personal data (such as health information, racial or ethnic origin, political opinions, or religious beliefs) unless specifically required for responsible gaming assessments at the player's own initiative.

3. How We Collect Your Data

kp67 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to any kp67 communication;
• Automatically through the Platform — via server logs, session tracking systems, and cookies when you access and interact with kp67.org;
• From payment service providers — including JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and Allied Bank, who may share transaction confirmation data with kp67 as part of payment processing;
• From identity verification providers — third-party KYC service providers who assist kp67 in verifying the authenticity of identity documents submitted during account verification;
• From fraud prevention and AML screening services — databases consulted by kp67 as part of its regulatory compliance procedures, including sanctions lists and politically exposed persons registers.

4. Legal Basis for Processing

kp67 processes personal data on the following legal grounds:

• Performance of a contract — the majority of data processing carried out by kp67 is necessary to operate your account, process your bets and transactions, and deliver the gaming services you have requested;
• Legal obligation — kp67 is required by its gaming licence and applicable AML/KYC regulations to collect, verify, and retain certain identity and financial data for specified periods;
• Legitimate interests — kp67 processes technical and usage data to maintain platform security, detect and prevent fraud, and improve the quality of the gaming experience. Where legitimate interests are relied upon, kp67 has assessed that these interests are not overridden by your fundamental privacy rights;
• Consent — where kp67 sends optional marketing communications, it relies on your explicit opt-in consent. You may withdraw this consent at any time by updating your account preferences or contacting [email protected].

5. How kp67 Uses Your Personal Data

kp67 uses the personal data it holds for the following purposes:

• To create and administer your kp67 account and provide full access to the Platform's gaming and betting services;
• To verify your identity and age (21+) as required by kp67's regulatory obligations and these Terms;
• To process deposits and withdrawals through your chosen payment method in Pakistani Rupees;
• To detect, investigate, and prevent fraud, money laundering, account takeover, and other financial crimes affecting the kp67 Platform;
• To comply with the requirements of kp67's international gaming licence, including mandatory reporting obligations to regulators;
• To operate responsible gaming tools including deposit limits, loss limits, session timers, and self-exclusion — and to monitor player activity for signs of problem gambling behaviour;
• To communicate with you regarding your account, transactions, promotions (where you have consented), and any changes to kp67's policies;
• To resolve customer support requests, complaints, and disputes;
• To analyse usage patterns and improve the design, performance, and game selection of the kp67 Platform;
• To send you marketing communications about kp67 promotions, bonuses, and new features — only where you have provided explicit consent, and only via the communication channel you have authorised.

6. Data Sharing & Disclosure

kp67 does not sell, rent, or trade your personal data with third parties for their own commercial purposes. kp67 shares personal data only in the following limited circumstances:

• Payment service providers — JazzCash, EasyPaisa, Raast, 1LINK, and banking partners receive only the financial data necessary to process your specific deposit or withdrawal transaction;
• Identity verification providers — KYC partners receive identity document images and personal details solely for the purpose of verifying your identity and age on behalf of kp67;
• Gaming software providers — studios supplying casino games, live dealer titles, and sports data feeds to the kp67 Platform receive session-level data necessary to deliver and record game outcomes correctly;
• Regulatory authorities — kp67 discloses data to its licensing regulator and to law enforcement or financial intelligence authorities where required by applicable law or a valid legal order;
• Fraud prevention and AML screening services — aggregated or pseudonymised data may be shared with third-party screening services to verify identity and check against sanctions and watchlists;
• Professional advisers — legal counsel, auditors, and compliance consultants engaged by kp67 may access limited personal data under strict confidentiality obligations.

All third parties with whom kp67 shares personal data are contractually required to process that data only for the specified purpose, to maintain appropriate technical and organisational security measures, and to delete or return the data when the purpose is fulfilled.

7. Cookies & Tracking Technologies

kp67 uses cookies and similar tracking technologies on kp67.org to operate the Platform effectively and to understand how players interact with it. The following categories of cookies are used:

• Strictly necessary cookies — required for the Platform to function. These include session management, login authentication, and security tokens. These cookies cannot be disabled without breaking core Platform functionality;
• Functional cookies — store your Platform preferences such as language selection, preferred game display settings, and responsible gaming tool configurations so that they persist across sessions;
• Analytics cookies — collect aggregated, anonymised data about how pages are navigated, which features are used most frequently, and how long sessions last. This data is used to improve the kp67 Platform. kp67 does not use third-party advertising analytics tools;
• Security cookies — help kp67 detect suspicious activity such as login attempts from unrecognised devices and unusual session behaviour that may indicate account compromise.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to or using the kp67 Platform. kp67 does not use cross-site tracking cookies or share cookie data with advertising networks.

8. Data Retention

kp67 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to the minimum retention periods required by kp67's regulatory obligations:

• Account and identity data — retained for a minimum of 5 years from the date of account closure, as required by AML and gaming licence regulations;
• Financial transaction records — retained for a minimum of 5 years from the date of each transaction;
• KYC documentation — retained for a minimum of 5 years from the date of verification, or longer if required by a specific regulatory order;
• Support communications — retained for 3 years from the date of the communication, or longer where the communication relates to an unresolved dispute;
• Usage and technical data — retained for 12 months from the date of collection, after which it is anonymised or deleted;
• Marketing consent records — retained for as long as you hold an active kp67 account, and for 2 years after account closure.

At the end of the applicable retention period, kp67 will securely delete or anonymise personal data such that it can no longer be associated with you as an individual.

9. Data Security

kp67 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the kp67 Platform;
• Encryption of sensitive data fields — including financial account numbers and identity document references — at rest in kp67's databases;
• Access controls limiting internal access to personal data to employees and contractors with a documented operational need;
• Two-factor authentication available for all kp67 player accounts and mandatory for all kp67 internal administrative systems;
• Regular third-party security audits and penetration testing of the kp67 Platform and underlying infrastructure;
• Incident response procedures enabling kp67 to detect, contain, and notify affected players and regulators of any data breach within the timeframes required by applicable law.

No data transmission over the internet is guaranteed to be 100% secure. While kp67 takes all reasonable steps to protect your data, we cannot warrant absolute security. Players are strongly encouraged to use the two-factor authentication feature available on all kp67 accounts and to keep their login credentials confidential.

10. Your Data Rights

As a player whose personal data kp67 processes, you hold the following rights subject to applicable law and kp67's legitimate regulatory obligations:

• Right of access — you may request a copy of the personal data kp67 holds about you;
• Right to rectification — you may request correction of any inaccurate or incomplete personal data held by kp67;
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to kp67's mandatory regulatory retention obligations;
• Right to restriction — you may request that kp67 restricts processing of your data in certain circumstances, for example while the accuracy of data is being verified;
• Right to data portability — you may request a copy of your personal data in a structured, machine-readable format for transfer to another service provider;
• Right to object — you may object to processing based on legitimate interests and to all direct marketing communications at any time;
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact kp67 at [email protected] with the subject line "Data Rights Request". kp67 will respond within 30 calendar days. Where a request is complex or kp67 receives a high volume of requests simultaneously, the response period may be extended by a further 60 days with notice to you.

kp67 may request proof of identity before processing any data rights request to ensure that personal data is not disclosed to an unauthorised third party.

11. Children & Minors

The kp67 Platform is strictly for adults aged 21 years and over. kp67 does not knowingly collect personal data from any individual under the age of 21. If kp67 becomes aware that personal data has been collected from a person under 21, that account will be closed immediately, all data will be deleted or anonymised, and any funds held will be returned to the verified payment source.

If you believe that a person under the age of 21 has registered an account on kp67 or has accessed the Platform using your credentials, please contact us immediately at [email protected].

12. International Data Transfers

kp67 is operated under an international gaming licence, and certain aspects of Platform operation — including data processing by third-party game studios, KYC providers, and infrastructure services — may involve transfer of personal data to countries outside Pakistan. Where such transfers occur, kp67 ensures that adequate protections are in place through one or more of the following mechanisms:

• Standard contractual clauses requiring the receiving party to maintain data protection standards equivalent to those applied by kp67;
• Transfer to a jurisdiction that has been assessed as providing an adequate level of data protection by relevant regulatory authorities;
• Binding corporate rules or equivalent instruments where the recipient is part of kp67's group of companies.

Players may request further information about the safeguards applied to any specific international transfer by contacting [email protected].

13. Third-Party Links & Services

The kp67 Platform may reference responsible gaming organisations, payment method providers, or game certification bodies in informational contexts. This Privacy Policy applies solely to the kp67 Platform. kp67 is not responsible for the privacy practices of any third-party website or service. Players who access third-party resources are subject to the privacy policies of those third parties.

14. Changes to This Privacy Policy

kp67 may update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements, or Platform features. Material changes to this Policy will be communicated to registered players via on-platform notification or email to the registered contact address at least 14 days before the change takes effect.

The effective date at the top of this page will be updated whenever a revision is published. Continued use of the kp67 Platform following publication of a revised Privacy Policy constitutes acceptance of the updated terms. Players who do not accept any revision may request account closure in accordance with kp67's Terms & Conditions.

15. Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data kp67 holds about you:

• Email: [email protected] (subject: "Privacy Request")
• Live Chat: Available 24/7 within the kp67 Platform after login
• Response Time: All privacy-related requests acknowledged within 48 hours; substantive response within 30 days

kp67's support team is available around the clock to assist Pakistani players from Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and every corner of the country with any data-related query.