pak68 Privacy Policy
Your Data. Your Rights.

Introduction

pak68 ("the Platform", "we", "us", "our") is Pakistan's premier online gaming destination, providing sports betting, live casino, slot games, and crash game products to users across Pakistan in a secure, PKR-native environment. In delivering these services, pak68 collects and processes certain personal data about its users.

This Privacy Policy ("Policy") sets out in clear terms what personal data pak68 collects, the purposes for which it is processed, the legal bases that justify that processing, how long data is retained, who it may be shared with, and the rights that users hold over their own information. This Policy applies to all users of the pak68 platform, regardless of whether they access the platform via desktop browser, mobile browser, or any pak68 application.

This Policy should be read alongside the pak68 Terms and Conditions, which govern the contractual relationship between you and pak68. By creating a pak68 account or by continuing to use the platform, you acknowledge that you have read and understood this Policy.

pak68 is committed to maintaining the highest standards of data protection. We do not treat privacy compliance as a box-ticking exercise — we treat it as a core operational responsibility and a matter of trust with the players and communities we serve across cities like Karachi, Lahore, Islamabad, Faisalabad, and beyond.

Who We Are

pak68 is an internationally licensed online gaming operator accessible at https://pak68.pro. For the purposes of data protection law, pak68 acts as the data controller in respect of all personal data collected from users of the platform — meaning we determine the purposes and means by which your personal data is processed.

Our data protection contact for all privacy-related enquiries, rights requests, and complaints is the pak68 Privacy Team, reachable at the contact details set out in Section 15 of this Policy. All formal privacy correspondence should be directed to our support email address as specified in that section.

Data We Collect

pak68 collects the following categories of personal data from its users. The specific data points collected will depend on the nature of your interaction with the platform.

pak68 does not collect or process special categories of sensitive personal data (such as health data, racial or ethnic origin, religious beliefs, or political opinions) except where a user voluntarily discloses such information in the context of a responsible gaming self-assessment or support interaction, in which case it is handled with an elevated standard of care and processed solely for the user's protection.

How We Collect Your Data

pak68 collects personal data through the following means:

• Direct Submission: Information you provide directly when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or submitting a responsible gaming request.
• Automated Technical Collection: Technical and usage data collected automatically when you access the platform, including via cookies, server logs, and session tracking technologies as described in Section 8.
• Payment Providers: Transaction confirmation data received from payment processors including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and Raast when you make deposits or request withdrawals.
• Identity Verification Partners: Confirmation data from authorised KYC and identity verification service providers used to verify the identity and age of account holders during the KYC process.
• Fraud Prevention Services: Risk signals and fraud indicators from third-party fraud prevention systems used to protect the integrity of the pak68 platform and its users.

How We Use Your Data

pak68 uses the personal data it collects for the following purposes:

1. Account Management: To create, maintain, and administer your pak68 account, authenticate your identity at login, and manage your account preferences and settings.
2. Service Delivery: To provide you with access to the full range of pak68 gaming, betting, and casino products, including processing your bets, game sessions, and real-money transactions in PKR.
3. KYC & Age Verification: To verify that you are at least 21 years of age and to confirm your identity in accordance with our licensing obligations and anti-money laundering requirements.
4. Payment Processing: To process your deposits and withdrawal requests via your chosen payment method and to maintain accurate financial records of all PKR transactions on your account.
5. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account abuse, unauthorised access, and other prohibited conduct on the platform.
6. Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling, to administer self-exclusion and limit tools requested by users, and to enforce mandatory responsible gaming interventions where required.
7. Customer Support: To respond to your enquiries, process complaints, and provide technical or account-related assistance via live chat or email.
8. Legal & Regulatory Compliance: To comply with applicable legal obligations, respond to lawful requests from regulatory or law enforcement authorities, and maintain records required by our licensing conditions.
9. Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving platform performance, game selection, user experience, and service quality.
10. Marketing Communications: Where you have provided your consent, to send you promotional offers, bonus notifications, and news about pak68 products relevant to Pakistani users. You may withdraw this consent at any time through your account settings.

Legal Bases for Processing

pak68 processes your personal data only where a valid legal basis exists for doing so. The applicable legal bases are as follows:

• Contract Performance: Processing necessary to perform our contractual obligations to you under the pak68 Terms and Conditions — including account management, service delivery, and payment processing.
• Legal Obligation: Processing required for pak68 to comply with applicable legal and regulatory requirements, including KYC, anti-money laundering obligations, and record-keeping requirements under our operating licence.
• Legitimate Interests: Processing carried out on the basis of pak68's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of marketing communications. Where consent is the legal basis, you retain the right to withdraw it at any time without detriment.

Data Sharing & Disclosure

pak68 may share your personal data with the following categories of recipients under appropriate data protection safeguards:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20 processing partners, solely to the extent necessary to process your deposits and withdrawals.
• Identity Verification Providers: Authorised KYC service providers engaged to verify the identity and age of pak68 account holders as required by our licensing obligations.
• Fraud Prevention & Security Partners: Third-party providers of fraud detection, risk assessment, and platform security services who process data on behalf of pak68 under strict contractual data processing agreements.
• IT & Infrastructure Providers: Cloud hosting, database management, and technical infrastructure providers who process data solely on pak68's instructions and under binding data processing terms.
• Regulatory & Law Enforcement Authorities: Where pak68 is required by law, court order, or regulatory direction to disclose personal data to a competent authority. pak68 will challenge any requests it believes to be unlawful or disproportionate.
• Professional Advisers: Legal counsel, auditors, and compliance consultants, bound by professional confidentiality obligations, where necessary for pak68 to obtain professional advice or to defend or prosecute legal claims.

All third parties with whom pak68 shares personal data are required to implement appropriate technical and organisational security measures and to process data only for the specified, lawful purposes for which it has been shared.

Cookies & Tracking Technologies

pak68 uses cookies and similar tracking technologies to operate the platform, remember your session, analyse usage patterns, and deliver a personalised gaming experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load balancing cookies. They cannot be disabled without impairing core platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, preferred payment method, and responsible gaming limit settings to provide a more personalised experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users navigate the pak68 platform, which pages are visited most frequently, and where users encounter difficulties — helping us improve the platform over time.
• Security & Fraud Prevention Cookies: Used to identify suspicious access patterns, detect bot activity, and protect pak68 user accounts from unauthorised access.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the availability of some platform features. pak68 does not use third-party advertising or behavioural targeting cookies for the purpose of selling advertising to external parties.

Data Retention

pak68 retains personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable legal, regulatory, and licensing obligations. The following general retention periods apply:

• Account & Identity Data: Retained for the duration of your account relationship with pak68, plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial & Transaction Records: Retained for a minimum of five (5) years from the date of the transaction to satisfy financial record-keeping and licensing audit obligations.
• Gaming & Betting Records: Retained for the duration of the account relationship and for a minimum of two (2) years following account closure for dispute resolution and audit purposes.
• Customer Support Records: Retained for two (2) years from the date of the interaction, or longer where the interaction relates to an ongoing dispute, investigation, or legal matter.
• Responsible Gaming Records: Self-exclusion and limit records are retained for a minimum of five (5) years to prevent circumvention of exclusion periods and to demonstrate compliance with responsible gaming obligations.
• Marketing Consent Records: Retained for as long as you remain subscribed to marketing communications, plus two (2) years following withdrawal of consent as evidence of the consent lifecycle.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with pak68's internal data lifecycle procedures. Anonymised or aggregated data that can no longer identify you may be retained indefinitely for statistical and analytical purposes.

Your Rights

As a user of the pak68 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the pak68 Privacy Team using the details in Section 15:

1. Right of Access: You have the right to request a copy of the personal data that pak68 holds about you, along with information about how it is being used. We will respond to verified access requests within thirty (30) days.
2. Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update certain account details directly through your pak68 account settings.
3. Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data. This right is not absolute and does not apply where retention is required for legal compliance, fraud prevention, or the resolution of outstanding disputes.
4. Right to Restrict Processing: You may request that pak68 restricts the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested or while an objection is being considered.
5. Right to Data Portability: Where processing is based on contract or consent and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
6. Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. pak68 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
7. Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time through your account settings or by contacting support, without affecting the lawfulness of processing carried out prior to withdrawal.

pak68 will not charge a fee for responding to rights requests and will respond within the timeframes required under applicable law. We may request verification of your identity before processing a rights request to ensure we do not inadvertently disclose data to an unauthorised party.

Children & Minors

pak68 is a 21+ platform. We do not knowingly collect, process, or retain personal data from individuals who are under 21 years of age. Age verification is a mandatory step in the pak68 account registration and KYC process. If pak68 discovers or has reasonable grounds to suspect that personal data has been collected from a person under 21, the relevant account will be immediately suspended, the data will be deleted, and any associated funds will be handled in accordance with applicable regulatory requirements.

If you believe that a minor may have created a pak68 account, please contact our support team immediately via the details in Section 15 so that we can investigate and take prompt action. We take underage gambling extremely seriously and cooperate fully with any investigation into such matters.

Security Measures

pak68 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• End-to-end TLS encryption for all data transmitted between user devices and the pak68 platform.
• Encryption at rest for all stored personal data and financial records.
• Role-based access controls ensuring that pak68 personnel can only access personal data that is strictly necessary for their job function.
• Multi-factor authentication requirements for all pak68 administrative and operational system access.
• Regular penetration testing and security audits conducted by independent security professionals.
• Continuous monitoring of platform infrastructure for anomalous activity, intrusion attempts, and data exfiltration patterns.
• Formal incident response procedures enabling rapid containment, assessment, and notification in the event of a data security breach.

While pak68 employs robust security measures, no system is entirely immune to risk. Users are encouraged to maintain strong, unique passwords for their pak68 accounts, enable two-factor authentication via their registered Pakistani mobile number, and notify pak68 immediately if they suspect any unauthorised access to their account.

International Data Transfers

As an internationally licensed online gaming operator, pak68 may process or store personal data on servers located outside of Pakistan. Where personal data is transferred to countries that may not provide the same level of data protection as your home jurisdiction, pak68 ensures that appropriate safeguards are in place to protect your data, which may include:

• Standard contractual clauses approved by relevant data protection authorities, incorporated into agreements with all data processors handling personal data outside of Pakistan.
• Binding corporate rules or equivalent intra-group data transfer mechanisms where data is processed by pak68 group entities in other jurisdictions.
• Adequacy assessments conducted prior to any new international transfer arrangement to confirm that the destination jurisdiction or the specific recipient provides an adequate level of data protection in practice.

By using the pak68 platform, you acknowledge that your personal data may be transferred to and processed in countries outside Pakistan as described in this section. pak68 will always ensure that such transfers are conducted under appropriate legal safeguards and that your data receives a standard of protection consistent with this Policy.

Changes to This Policy

pak68 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, platform features, or regulatory requirements. When we make material changes to this Policy, we will notify active users via a prominent notice displayed on the pak68 platform and, where appropriate, by email to your registered address.

The updated Policy will take effect from the date specified in the "Effective" field at the top of this document. Your continued use of the pak68 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes, you should cease using the platform and may request account closure through our support team.

We encourage all pak68 users to review this Policy periodically to stay informed about how we protect your personal data. The version number and effective date displayed at the top of this page will always reflect the most current iteration of this Policy.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have concerns about how pak68 handles your personal data, please contact our Privacy Team in the first instance. We are committed to resolving privacy concerns promptly, fairly, and transparently.

All privacy correspondence should be sent to our support email address. Please include your registered username or account identifier in your communication so that we can locate your records and respond efficiently. We aim to acknowledge all privacy enquiries within two (2) business days and to provide a substantive response within thirty (30) days of receipt.

If you are not satisfied with our response to your privacy complaint, you have the right to escalate your complaint to the relevant data protection or regulatory authority in your jurisdiction. pak68 will cooperate fully with any investigation conducted by a competent supervisory authority in connection with data protection matters.

pak68 values the trust that our users across Pakistan place in us when they share their personal data with our platform. We are committed to earning and maintaining that trust through transparent, responsible, and lawful data practices at every level of our operations.