Privacy Policy

1 Introduction

This Privacy Policy ("Policy") sets out the data-processing practices of pk68io ("we", "us", "our", "the Platform"), accessible at https://pk68io.cam (the "Site"). It applies to all personal data collected from users ("you", "your") who access or interact with the Site, whether as registered account holders or anonymous visitors.

By using the pk68io platform, you acknowledge that you have read and understood this Policy. If you do not agree with any aspect of it, you should discontinue use of the Site and contact us to request deletion of any data already collected.

This Policy is to be read alongside the pk68io Terms & Conditions, which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions, this Policy shall prevail with respect to data-processing matters.

2 Definitions

The following terms carry the meanings assigned below throughout this Policy:

3 Data We Collect

pk68io collects personal data through several channels: directly from you during account registration and verification; automatically through your use of the Site; and in limited cases from third-party identity verification or fraud-prevention providers.

3.1 Registration & Account Data

When you create an account, we collect:

• Full legal name as it appears on your government-issued identity document
• Date of birth (for age verification — users must be 18+ or the higher minimum required by the operator/license jurisdiction)
• Email address and mobile phone number
• Residential address (city, province, country — e.g., Karachi, Lahore, Islamabad, Rawalpindi)
• Username and securely hashed password credentials

3.2 Identity Verification (KYC) Data

To comply with KYC and AML requirements, we may collect copies of:

• Government-issued national identity card (CNIC) or passport
• Proof of address documentation
• Selfie or facial-comparison image where required by the operator's verification process

3.3 Financial & Transaction Data

When you make deposits or request withdrawals, we collect transaction records including amounts in PKR/Rs, timestamps, payment method references and transaction status. Payment method details (e.g., wallet account references for Easypaisa, JazzCash or Raast, or bank account details for HBL, UBL, Meezan Bank, Bank Alfalah) are processed solely for the purpose of facilitating the transaction and AML compliance. These payment brands are referenced as familiar Pakistani payment rails — not as endorsers of gambling.

3.4 Technical & Usage Data

Automatically collected technical data includes:

• IP address, approximate geolocation (country/city level), and ISP
• Device type, operating system, browser type and version
• Pages viewed, time on site, click paths and session duration
• Referral source (how you arrived at the Site)
• Cookie identifiers and session tokens (see Section 9)

3.5 Communications Data

If you contact our support team via email or live chat, we retain a record of the correspondence — including your name, contact details, the content of messages and timestamps — for quality assurance and dispute-resolution purposes.

4 Lawful Basis for Processing

pk68io processes personal data only where a valid lawful basis exists. The applicable basis varies by data category and processing activity:

• Contractual necessity: Processing required to register your account, verify your identity, process deposits and withdrawals, and provide platform services you have requested.
• Legal obligation: Processing required to comply with applicable KYC, AML, tax reporting and regulatory obligations imposed on the operator.
• Legitimate interests: Processing carried out for platform security, fraud prevention, abuse detection, technical troubleshooting and aggregate analytics — where these interests are not overridden by your fundamental rights.
• Consent: Processing of non-essential cookies, marketing communications and certain analytics where your prior opt-in consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Purposes of Processing

Your personal data is processed for the following stated purposes only:

6 Data Sharing & Disclosure

pk68io does not sell, rent or trade your personal data. Disclosure to third parties occurs only in the following circumstances, and only to the extent strictly necessary:

6.1 Service Providers (Processors)

We engage third-party processors to assist with specific functions, including identity verification services, payment processing infrastructure, hosting and server management, and customer-support software. All processors operate under written data-processing agreements that restrict their use of your data to the specific service they are providing.

6.2 Regulatory & Law Enforcement Authorities

We will disclose personal data to competent regulatory bodies, law-enforcement agencies or courts where required to do so by law, court order or valid legal process. We will not notify you of such disclosure where prohibited by law.

6.3 Business Transfers

In the event of a merger, acquisition, restructure or sale of the business or its assets, personal data held on our platform may be transferred to the successor entity. You will be notified of any such transfer and the privacy terms applicable to the transferred data before the transfer takes effect.

6.4 Fraud Prevention Networks

Where permitted by applicable law, we may share limited account and transaction data with industry fraud-prevention networks to protect against money laundering, bonus abuse and identity fraud. Data shared for this purpose is subject to strict use limitations.

7 Data Retention

pk68io retains personal data for only as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active account data: Retained for the duration of your account relationship with pk68io.
• KYC and identity documents: Retained for the period required by applicable AML regulations following account closure — typically a minimum of five years from the date of the last transaction or account activity.
• Transaction records: Retained for a minimum of five years for AML, tax and regulatory compliance purposes.
• Support correspondence: Retained for up to three years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution.
• Technical and analytics data: Aggregated and anonymised analytics data may be retained indefinitely. Personally identifiable technical logs are typically retained for no longer than 12 months.
• Marketing data: Retained until you withdraw consent or opt out of communications.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identified individual.

8 Security Measures

pk68io implements and maintains appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, disclosure or misuse. These measures include:

• Encryption in transit: All data transmitted between your browser and the Site is protected by HTTPS/SSL/TLS encryption.
• Encryption at rest: Sensitive personal data and payment-related records stored on our servers are encrypted at rest.
• Access controls: Access to personal data systems is restricted to authorised personnel on a role-based, need-to-know basis. Access is logged and audited.
• Password hashing: User passwords are stored using one-way cryptographic hashing algorithms. Plain-text passwords are never stored or transmitted.
• Two-factor authentication: Account security is enhanced through two-factor authentication options for registered users.
• Penetration testing: Regular security assessments and vulnerability reviews are conducted to identify and remediate weaknesses.

While we take these measures seriously, no internet-based system is completely impenetrable. In the event of a data breach that presents a material risk to your rights, we will notify affected users and relevant authorities in accordance with applicable requirements. Users are also responsible for maintaining the confidentiality of their own login credentials.

9 Cookies & Tracking Technologies

pk68io uses cookies and similar technologies to operate the platform, remember your preferences, maintain your session and gather aggregate usage analytics. The following categories of cookies are used:

You may manage or disable cookies through your browser settings. Disabling essential cookies may impair core platform functionality including login and session management. Analytics and functional cookies may be disabled without loss of core features.

10 International Data Transfers

pk68io may transfer personal data to third-party service providers located in countries outside Pakistan. Where such transfers occur, we take steps to ensure that adequate protections are in place, including contractual safeguards consistent with applicable international data-transfer standards.

Users are advised that Pakistan does not currently have a formal adequacy arrangement with the European Economic Area or other data-protection jurisdictions. Our contractual and organisational safeguards are designed to provide an equivalent level of protection regardless of the transfer destination.

11 Minors & Age Gating

pk68io is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18, or under the higher minimum age required by the applicable operator license jurisdiction. All users are required to confirm their age and provide identity documentation demonstrating compliance with the applicable minimum-age requirement during the account registration process.

If pk68io becomes aware that personal data has been collected from a minor without verifiable parental consent, that data will be deleted promptly and the associated account will be permanently closed. Any funds held in such accounts will be dealt with in accordance with applicable regulatory requirements.

Users who share devices with minors are responsible for implementing appropriate access controls to prevent underage access to the platform.

12 Your Data Rights

Subject to applicable law and any overriding legal obligations, you hold the following rights with respect to your personal data processed by pk68io:

To exercise any of the above rights, please contact us using the details in Section 15 below. We will respond to all verifiable requests within a reasonable timeframe. We may require identity verification before fulfilling certain requests to protect against fraudulent access to third-party data.

13 Specific Notice for Pakistani Users

pk68io serves users across Pakistan — including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — and recognises that Pakistan's data-protection regulatory landscape is evolving. The Personal Data Protection Bill has been under consideration in Pakistan for several years. In the absence of a fully enacted and applicable statute, pk68io applies internationally recognised data-protection principles as described in this Policy.

Pakistani users should be aware that:

• Data submitted during KYC verification (including CNIC copies) is processed solely for identity verification and regulatory compliance purposes and is not used for any other purpose without your explicit consent.
• Financial transaction references including payment methods familiar to Pakistani users (Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah) are recorded as part of transaction audit trails for AML compliance. None of these payment providers are implied to endorse the pk68io platform.
• pk68io does not make, sell or transfer any data to the Government of Pakistan, PTA or any Pakistani governmental body except where required by a lawful order or legal obligation.
• Gambling-related laws in Pakistan may restrict or prohibit online gambling. Users are responsible for independently assessing and complying with all applicable laws in their province and at the federal level.

14 Policy Amendments

pk68io reserves the right to update or amend this Privacy Policy at any time. The "Last Updated" date shown at the top of this document will be revised upon any material change. Continued use of the platform following the publication of an updated Policy constitutes acceptance of the revised terms.

Where amendments are material — particularly those that affect the way personal data is used, shared or retained — pk68io will endeavour to notify registered users by email or in-platform notification before the changes take effect. You may, at any time, request deletion of your personal data and close your account if you do not agree with a revised Policy.

15 Contact Us

For all privacy-related enquiries, data-subject access requests, consent withdrawal requests or complaints, please contact the pk68io data team using the details below. Email is the recommended and most efficient channel for formal privacy requests.