Your Privacy at bk67
— Secure, Transparent, Respected

This Privacy Policy ("Policy") is published by bk67 ("the Platform", "we", "us", "our") and applies to all personal data collected from individuals ("Users", "you", "your") who access or use the bk67 website, mobile-optimised interface, sports betting markets, casino games, or any associated services available at bk67.bio.

bk67 is primarily designed for English-speaking Pakistani users and processes a significant proportion of its transactions in Pakistani Rupees (PKR) using locally preferred payment methods including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and SadaPay. Accordingly, this Policy has been drafted with particular attention to the data practices relevant to users based in Pakistan.

This Policy should be read alongside the bk67 Terms & Conditions, which govern the overall use of the platform. By registering an account on bk67 or by continuing to use the platform, you acknowledge that you have read, understood, and accepted this Privacy Policy in full.

For the purposes of this Privacy Policy, bk67 acts as the data controller — meaning bk67 determines the purposes and means by which your personal data is collected and processed. All data collection, processing, and storage activities carried out by bk67 are performed in accordance with the applicable international gaming regulatory framework under which bk67 operates.

bk67 has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and for handling data-related enquiries, access requests, and complaints from users. You can contact the DPO using the contact details provided in Section 14 of this Policy.

bk67 collects personal data through the following channels and methods:

• Direct provision at registration: When you create a bk67 account, you directly provide your name, date of birth, mobile number, and preferred payment method details. This data is essential for account creation and cannot be omitted.
• KYC document submission: When bk67 requests identity verification, you submit copies of your CNIC, passport, or driving licence, and where required, proof of address documents such as utility bills or bank statements.
• Transaction activity: Each deposit, withdrawal, and bet placed on bk67 generates a transaction record that is stored as part of your account history. This includes amounts, timestamps, payment methods used, and game or market identifiers.
• Automated technical collection: bk67 automatically collects IP addresses, device identifiers, browser type, operating system information, and session timestamps when you access the platform. This data is collected passively and is used primarily for security and fraud detection.
• Cookies and tracking technologies: bk67 uses session cookies, persistent cookies, and analytical tracking identifiers. Full details are provided in Section 8 of this Policy.
• Customer support interactions: When you contact bk67 support via live chat or email, the contents of those interactions are recorded and stored as part of your account record.
• Responsible gaming self-declarations: If you voluntarily submit a responsible gaming request (such as a self-exclusion request or deposit limit), that information is recorded and processed specifically to give effect to your request.

bk67 processes personal data for the following specific purposes, each of which is supported by a defined legal basis:

• Account management: To create, maintain, and administer your bk67 account, including processing your login credentials, managing your betting wallet, and applying your account preferences.
• Identity and age verification: To verify that you are who you claim to be and that you are at least 21 years of age, in accordance with our strict 21+ age policy and applicable regulatory requirements.
• Payment processing: To facilitate deposits into and withdrawals from your bk67 account via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20, and to maintain accurate transaction records in PKR.
• Fraud and AML monitoring: To detect and prevent unauthorised account access, bonus abuse, multi-accounting, money laundering, and other prohibited activities. This includes automated monitoring of transaction patterns and betting behaviour.
• Responsible gaming: To monitor your betting activity for indicators of problem gambling and to give effect to any responsible gaming requests you submit, including deposit limits, cool-off periods, and self-exclusion.
• Customer support: To respond to your queries, resolve disputes, and process complaints efficiently and accurately.
• Legal and regulatory compliance: To fulfil bk67's obligations under applicable gaming regulations, anti-money laundering requirements, and any lawful requests from competent authorities.
• Platform improvement: To analyse aggregate, anonymised usage data to improve the bk67 platform, fix bugs, and enhance the user experience for Pakistani players.

bk67 does not sell, rent, or trade your personal data to any third party. However, we may share your data with a limited number of trusted parties where it is strictly necessary to operate the platform or comply with legal obligations:

• Payment processors: Your payment method details are shared with the relevant payment service providers (e.g. JazzCash, EasyPaisa, HBL systems) solely for the purpose of processing your transactions. These providers are contractually bound to handle your data securely and only for payment processing purposes.
• KYC and identity verification providers: In some cases, bk67 may use a third-party identity verification service to process KYC documents. These providers are bound by strict data processing agreements and may not use your data for any other purpose.
• Game content providers: Third-party game studios whose titles are hosted on bk67 may receive anonymised session and game-play data for the purpose of game performance monitoring. No personally identifiable information is shared with game providers.
• Regulatory and law enforcement authorities: bk67 may be required to disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required by a valid legal order or where bk67 has a legal obligation to report suspicious activity.
• Fraud prevention services: bk67 may share device identifiers and IP address data with industry fraud prevention databases to detect and block known fraudulent actors.

bk67 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable regulatory and legal obligations. The following general retention periods apply:

• Account data and KYC records: Retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years following the date of the transaction.
• Betting and game activity logs: Retained for a minimum of three (3) years following the relevant activity.
• Customer support records: Retained for two (2) years following the resolution of the relevant support interaction, or longer where a dispute or regulatory matter remains open.
• Self-exclusion records: Retained indefinitely to prevent re-registration by self-excluded users, even after the formal exclusion period has expired.
• Technical and session data: Retained for up to twelve (12) months from the date of collection, after which it is anonymised or deleted.

Where you request deletion of your personal data and there is no overriding legal obligation requiring retention, bk67 will action the deletion request within 30 days. Where data must be retained for regulatory purposes, bk67 will inform you of the specific retention obligation and the expected deletion date.

bk67 implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the bk67 platform is encrypted using industry-standard 256-bit SSL/TLS protocols. This applies to registration, login, deposits, withdrawals, and all support interactions.
• Secure data storage: Personal data is stored on servers housed in certified, access-controlled data centres. Physical and logical access to these servers is restricted to a minimal number of authorised personnel.
• Access controls: Internal access to personal data is granted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Two-factor authentication: bk67 supports two-factor authentication (2FA) for user accounts. We strongly encourage all users, particularly those in Karachi, Lahore, and other major Pakistani cities with high account activity, to enable 2FA to protect their accounts.
• Intrusion detection: bk67 operates automated intrusion detection and anomaly monitoring systems that alert our security team to unusual access patterns or potential data breaches in real time.
• Regular security audits: The bk67 platform undergoes periodic security assessments, including penetration testing, to identify and remediate vulnerabilities before they can be exploited.

bk67 uses cookies and similar tracking technologies to operate certain essential platform functions and to improve the user experience for Pakistani users. The following categories of cookies are used on the bk67 platform:

• Essential cookies: These cookies are strictly necessary for the bk67 platform to function. They maintain your login session, store your authentication token, and preserve your account settings across pages. Essential cookies cannot be disabled without impairing core platform functionality.
• Security cookies: Used to detect and prevent fraudulent login attempts, cross-site request forgery, and other security threats. These cookies are essential and cannot be disabled.
• Analytical cookies: bk67 uses anonymised analytical cookies to understand how users navigate the platform — for example, which pages are visited most frequently and where users encounter difficulty. This data is processed in aggregate and is not linked to individual identities.
• Preference cookies: These store your optional platform preferences such as language settings and display options. They are not essential but improve your experience on return visits.

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential or security cookies may prevent you from logging into your bk67 account or using certain platform features. For further guidance on managing cookies in popular Pakistani mobile browsers, refer to your device's browser help documentation.

As a user of the bk67 platform, you have the following rights with respect to your personal data. These rights can be exercised by contacting the bk67 Data Protection Officer using the details in Section 14:

• Right of access: You have the right to request a copy of all personal data that bk67 holds about you. bk67 will provide this information in a structured, readable format within 14 business days of receiving a valid request.
• Right to rectification: If any personal data bk67 holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to erasure: You may request that bk67 delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal obligation to retain certain data for regulatory compliance purposes.
• Right to restriction: You may request that bk67 restrict the processing of your personal data in specific circumstances — for example, while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on your consent or on a contractual basis, you have the right to receive your personal data in a machine-readable format and to request that it be transferred to another data controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where bk67 relies on legitimate interest as the legal basis for processing. bk67 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to the withdrawal.

The bk67 platform is strictly for users aged 21 years and above. bk67 does not knowingly collect personal data from individuals under the age of 21. Our registration process includes an age declaration step, and bk67 reserves the right to request proof of age at any point during the account lifecycle.

Where bk67 discovers or has reasonable grounds to believe that an account belongs to a person under the age of 21, the account will be immediately suspended, all associated data will be reviewed, and the account will be permanently closed. Any funds deposited by an underage user will be returned to the verified payment source. No bonus or wagering activity conducted by an underage account holder will be honoured.

bk67 operates under an international gaming regulatory framework and its data infrastructure may involve servers and service providers located outside of Pakistan. Where personal data is transferred internationally, bk67 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by this Policy.

Such safeguards may include contractual clauses requiring the recipient to process personal data in accordance with applicable data protection standards, or the use of service providers that are certified to recognised international data security standards. Where we rely on third-party processors, they are bound by data processing agreements that restrict them to processing your data only on bk67's documented instructions.

The bk67 platform integrates with a number of third-party services in order to deliver its full range of features. These include payment processing services (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay), game content providers, and platform security tools. bk67's Privacy Policy applies only to data processed directly by bk67.

Where your data is passed to a third-party service provider for a specific purpose (such as processing a JazzCash payment), that provider's own privacy policy will govern how they handle the data within their systems. bk67 recommends that you review the privacy policies of your chosen payment service provider for details on how they process your financial data.

bk67 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, changes in applicable regulatory requirements, or improvements to the platform. When material changes are made, bk67 will publish the updated Policy on this page and update the "Last Updated" date displayed at the top of the document.

Where changes are significant — for example, where bk67 introduces a new category of data processing or a new sharing arrangement — bk67 may additionally notify you via a platform notification or via the contact details registered to your account. Your continued use of the bk67 platform after an updated Policy has been published constitutes your acceptance of the revised terms.

We encourage you to review this Policy periodically to stay informed about how bk67 is protecting your personal data. If you have any concerns about a change to this Policy, please contact our DPO before continuing to use the platform.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how bk67 handles your personal data, please contact the bk67 Data Protection Officer. Our DPO is available to respond to data-related enquiries from all users, including those based in Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan.

bk67 takes all privacy complaints seriously. If you are not satisfied with how bk67 has handled your data concern, you have the right to escalate the matter to the relevant data protection authority or gaming regulatory body under whose framework bk67 operates.