Privacy Policy – p67 Pakistan Betting & Casino Platform

1 Who We Are

p67 is an online sports betting and casino platform operating at p67.vin, designed and built specifically for Pakistani players. All services are provided in PKR and the platform is tailored to the local market — from Cricket and PSL betting to Live Casino games and Slots.

For the purposes of this Privacy Policy, "p67", "we", "us" and "our" refer to the platform operator. "You" and "your" refer to any person who visits, registers on or uses the p67 platform in any capacity.

This policy governs how p67 collects, uses, stores and protects personal data. It should be read alongside our Terms and Conditions and Responsible Gaming guidelines.

2 Data We Collect

p67 collects only the information required to provide and maintain platform services. This falls into the following categories:

Registration Data

• Full legal name
• Date of birth (to verify you are 18 or over)
• Email address
• Mobile number
• City and country of residence
• Username and encrypted password

Identity Verification (KYC) Data

• Government-issued photo ID (National Identity Card, passport or driving licence)
• Proof of payment method ownership (account screenshot or confirmation)
• Proof of address (where required for enhanced due diligence)

Transaction & Financial Data

• Deposit and withdrawal history
• Payment method identifiers (JazzCash account number, Easypaisa number, Raast ID or bank details — masked where possible)
• Transaction amounts and timestamps

Usage & Behavioural Data

• Games played, bets placed and session duration
• Device type, operating system and browser
• IP address and approximate location at login
• In-app navigation patterns and feature usage

Communication Data

• Support chat transcripts and email correspondence
• Feedback, complaints and dispute records

3 How We Use Your Data

The data we collect is used for clearly defined purposes only. The table below summarises how each category of data is used:

We do not use your data for profiling unrelated to platform services, and we do not make fully automated decisions that have significant legal or financial effects on you without human oversight.

4 Legal Basis for Processing

p67 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to operate your account, handle transactions and deliver the services you have signed up for.
• Legal obligation: KYC verification, anti-money laundering checks and record-keeping required to operate the platform responsibly.
• Legitimate interests: Fraud prevention, security monitoring, platform improvement and responsible gaming oversight — where these interests do not override your privacy rights.
• Consent: Marketing communications and optional personalisation features. You may withdraw consent at any time by updating your account preferences or contacting support.

5 Payment Data

All financial transactions on p67 are processed in PKR through trusted Pakistani payment partners including JazzCash, Easypaisa, Raast, Bank Transfer, debit and credit cards, and mobile wallets.

p67 does not store full payment credentials on its own servers. When you initiate a deposit or withdrawal, you are interacting with the payment provider's secure gateway. p67 retains only the transaction reference, masked payment method identifier, amount and timestamp necessary for your account statement and dispute resolution.

• JazzCash and Easypaisa transactions are processed via their respective certified APIs under those providers' own data protection standards.
• Bank transfers and Raast payments are processed through your bank's secure systems. p67 receives only the confirmation and reference number.
• Card payments are handled by PCI-DSS compliant payment processors. p67 does not store card numbers, expiry dates or CVV codes.

Transaction records are retained for a minimum of five years for audit and dispute resolution purposes, in line with standard financial record-keeping practices.

6 KYC & Identity Verification

p67 applies a Know Your Customer (KYC) process to verify the identity of account holders before processing withdrawals and for ongoing compliance purposes. KYC documents submitted to p67 are handled with strict confidentiality:

• Documents are reviewed by authorised verification staff only — not shared with third parties beyond what is necessary for verification.
• Identity documents are stored in encrypted form and access is logged and restricted.
• Once verification is complete, documents are retained for the period required by our record-keeping policy and then securely deleted.
• p67 may use a third-party identity verification provider to assist with document checks. Any such provider is bound by strict data processing agreements and may not use your documents for any purpose other than verifying your identity for p67.

7 Cookies & Tracking

p67 uses cookies and similar technologies to ensure the platform works correctly, remember your preferences, and help us understand how users interact with the site and app. The types of cookies we use are:

• Essential cookies: Required for the platform to function — including session authentication, login state and security tokens. These cannot be disabled without affecting your ability to use the platform.
• Functional cookies: Remember your preferences such as language settings, preferred game categories and display options.
• Analytics cookies: Help us understand which features are most used, where users encounter difficulties, and how we can improve the platform. Data collected through analytics cookies is aggregated and does not identify you individually.
• Marketing cookies: Used only if you have opted in to receive personalised promotional content. These allow us to show you relevant bonuses and offers based on your activity on the platform.

You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core betting and casino features of p67, though some personalisation features may not function as expected.

8 Third-Party Sharing

p67 does not sell, rent or trade your personal data. We share data with third parties only in the following limited circumstances, and only to the minimum extent necessary:

• Payment processors: JazzCash, Easypaisa, Raast and other payment partners receive the data required to process your transactions.
• KYC verification partners: Where we use a third-party identity verification service, your submitted documents are shared with that partner solely for verification purposes under a strict data processing agreement.
• Platform infrastructure providers: Cloud hosting and server providers who store platform data. These providers are contractually bound to process data only on p67's instructions.
• Customer support tools: Support chat and ticketing platforms used to manage your queries. Support staff access only the information needed to resolve your issue.
• Legal and regulatory requirements: We may disclose personal data to relevant authorities if required by law, court order or to prevent fraud and financial crime. We will notify you of such disclosures where legally permitted to do so.

All third-party processors used by p67 are required to maintain appropriate security standards and use your data only for the specific purpose for which it was shared.

9 Data Retention

p67 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable record-keeping standards. General retention periods are as follows:

• Account data: Retained for the duration of your account and for a period after account closure to allow for dispute resolution and audit purposes.
• Transaction records: Retained for a minimum of five years from the date of the transaction.
• KYC documents: Retained for the period your account is active plus the required post-closure period, after which documents are securely deleted.
• Support communications: Retained for up to two years after the closure of the relevant support ticket, unless the matter relates to an ongoing dispute.
• Analytics data: Aggregated and anonymised after 12 months. Individual usage logs are not retained beyond this period.

When data is no longer required, p67 deletes or anonymises it securely so that it cannot be attributed to any individual.

10 Your Rights

As a user of the p67 platform, you have the following rights in relation to your personal data:

• Right to access: You can request a copy of the personal data p67 holds about you at any time. We will respond to access requests within a reasonable period.
• Right to rectification: If any information we hold about you is inaccurate or incomplete, you have the right to request that we correct it.
• Right to erasure: You can request that we delete your personal data. This right is subject to our legal obligations — for example, we may be required to retain transaction records even if you request erasure of other data.
• Right to restrict processing: You can ask us to limit how we use your data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to data portability: You can request a copy of certain data you have provided to us in a commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you can withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.
• Right to object: You can object to processing based on legitimate interests, including direct marketing.

To exercise any of these rights, contact the p67 support team via live chat or email. We aim to respond to all data rights requests promptly. Identity verification may be required before we action any request to ensure we are releasing or modifying data for the correct account holder.

11 Data Security

p67 takes the security of your personal data seriously and applies appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction or alteration. Security measures include:

• TLS encryption for all data in transit between your device and p67 servers
• Encrypted storage for sensitive data including KYC documents and account credentials
• Access controls — platform staff access personal data only on a need-to-know basis, and all access is logged
• Regular security reviews and vulnerability assessments of platform infrastructure
• Two-factor authentication (2FA) available for your account — strongly recommended to enable in your account settings
• Automatic session timeouts after periods of inactivity to reduce the risk of unauthorised account access

While p67 takes all reasonable precautions, no system is completely immune to security threats. In the event of a data breach that is likely to affect your rights, we will notify affected users as promptly as possible and take immediate remediation steps.

You are also responsible for keeping your own account secure. Use a strong, unique password, enable 2FA, and never share your login credentials with anyone — including anyone claiming to represent p67 support.

12 Children's Privacy

p67 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 18. Age verification is carried out during registration and as part of the KYC process.

If we become aware that personal data has been collected from a person under 18, we will delete that data and close the associated account immediately. If you believe a minor has registered on the platform, please contact our support team without delay so we can investigate and act accordingly.

Parents and guardians who are concerned about underage gambling should visit our Responsible Gaming page for guidance on parental controls and how to flag concerns to our team.

13 Policy Updates

p67 may update this Privacy Policy from time to time to reflect changes in our data practices, platform services or applicable standards. When we make significant changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify active account holders via email or an in-platform notification.

We encourage you to review this page periodically. Your continued use of the p67 platform following any update to this policy constitutes your acknowledgement of the revised version. If you have concerns about any changes, you are welcome to contact our support team for clarification before continuing to use the platform.

14 Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or the way p67 handles your personal data, please get in touch with our team:

• Live Chat: Available directly within your p67 account, 24 hours a day, 7 days a week.
• Email: [email protected] — we aim to respond to all privacy-related queries within 48 hours.

For formal data rights requests — such as requests to access, correct or delete your data — please contact us by email and include your registered account username and a brief description of your request. We may require identity verification before actioning any such request.

For general account queries, live chat remains the fastest way to get assistance. Our support team is trained to handle data privacy questions and will escalate to the appropriate team where needed.