Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how kp67 ("kp67", "we", "us", "our"), operating the online gaming information and entertainment platform accessible at https://kp67.cam ("Platform"), collects, processes, uses, stores, discloses and protects personal data relating to individuals who visit or use the Platform ("Users", "you", "your").

This Policy forms part of your agreement with kp67 and should be read alongside our Terms & Conditions. By accessing or using the Platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the data practices it describes where consent is the applicable lawful basis.

kp67 is committed to handling your personal data responsibly, proportionately and transparently. We recognise that users of our Platform include individuals from across Pakistan — including major cities such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — and we take seriously our obligation to protect the privacy of every person who interacts with kp67.

2 Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, directly or indirectly, including but not limited to name, email address, device identifiers and location data.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure or destruction.
• "Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, kp67.
• "Processor" means a third party that processes Personal Data on behalf of the Controller under a written agreement.
• "Consent" means a freely given, specific, informed and unambiguous indication of a User's agreement to the processing of their Personal Data for a stated purpose.
• "Cookie" means a small text file placed on a User's device by a website, used to store information about that User's session, preferences or behaviour on the site.
• "KYC Data" means identity and verification documentation submitted by a User in connection with Know Your Customer compliance procedures.
• "Special Category Data" means Personal Data revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data or other categories afforded heightened protection under applicable data protection law.

3 Data We Collect

kp67 collects Personal Data from Users through a number of channels, including direct submission during account registration, automated collection during Platform use, and from third-party service providers where applicable. The categories of data we collect include:

• Full legal name, date of birth, gender (where provided).
• Email address and mobile phone number used for account communications and verification.
• Residential address, including city and country of residence.
• Username, hashed password and account security preferences.
• Preferred currency and language settings.

• Government-issued identification documents (e.g., Pakistani CNIC, passport, driving licence).
• Proof of residential address documentation.
• Source of funds documentation, where required during enhanced due diligence.
• Payment method verification documents, where applicable.

• Deposit and withdrawal transaction records, including amounts in PKR and other supported currencies.
• Payment method identifiers (e.g., last four digits of a card, mobile wallet reference numbers). Payment provider names referenced on the Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are cited for user familiarity only and do not imply any formal data-sharing arrangement with those providers.
• Transaction dates, times and reference identifiers.

• IP address, browser type and version, operating system and device type.
• Pages visited, time spent on pages, click paths and interaction events.
• Game session data, including games played, bet amounts, session duration and results.
• Sports betting activity, including markets accessed, bets placed, odds accepted and outcomes.
• Search queries entered within the Platform.

• Content of support tickets, live chat transcripts and email correspondence with kp67.
• Feedback, survey responses and voluntary communications submitted through the Platform.
• Records of marketing communications sent and User response (open rates, click-throughs).

Retention periods are indicative and may be extended where required by applicable law, regulatory direction or ongoing legal proceedings.

4 Lawful Basis for Processing

kp67 relies on the following lawful bases to process your Personal Data, in accordance with applicable data protection legislation:

• Contract Performance: Processing necessary to create and manage your Account, process transactions, and deliver the Services you have requested — including account registration, KYC verification and payment processing.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, fraud prevention and record-keeping requirements imposed by the operator's licence jurisdiction.
• Legitimate Interests: Processing necessary for the legitimate interests of kp67, including Platform security monitoring, fraud detection, service improvement, and internal analytics — provided those interests are not overridden by your rights and freedoms.
• Consent: Where you have given explicit consent, such as for the receipt of marketing communications or the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 How We Use Your Data

kp67 processes your Personal Data for the following specific purposes:

• Account Management: Creating, maintaining and administering your Account, including processing registration, verifying your identity and managing your Account settings and preferences.
• Service Delivery: Enabling your use of the Platform's games, sports betting markets, live casino features and responsible gambling tools.
• Transaction Processing: Processing deposits and withdrawals, managing Account balances, and maintaining accurate financial records.
• Regulatory Compliance: Fulfilling KYC, AML and responsible gambling obligations as required by the applicable operator licence jurisdiction.
• Fraud Prevention & Security: Detecting, investigating and preventing fraudulent activity, money laundering, account takeovers and other security threats to the Platform and its users.
• Customer Support: Handling support queries, complaints, account recovery requests and responsible gambling tool activations.
• Responsible Gambling: Monitoring Account activity to identify indicators of problem gambling and applying responsible gambling interventions including deposit limits, cooling-off periods and self-exclusion where appropriate.
• Platform Improvement: Analysing aggregate usage patterns to improve Platform performance, content quality and user experience.
• Marketing Communications (with consent): Sending promotional offers, bonus notifications and relevant Platform updates where you have opted in to receive such communications. You may opt out at any time.

6 Data Sharing & Disclosure

kp67 does not sell your Personal Data to third parties. We may share your data in the following limited circumstances:

• Service Providers (Processors): We engage third-party technology and service providers — including payment processors, identity verification services, cloud infrastructure providers, analytics platforms and customer support software vendors — who process data strictly on our behalf under written data processing agreements. These processors are contractually prohibited from using your data for any purpose beyond the specific service they deliver to kp67.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or request from a competent regulatory or law enforcement authority, kp67 may disclose Personal Data without prior notice to you. We will only do so to the extent legally required.
• Fraud Prevention & Financial Crime: Personal Data may be shared with fraud prevention organisations, financial intelligence units and similar bodies where kp67 has a legal obligation or legitimate interest in preventing financial crime.
• Business Transfers: In the event of a merger, acquisition, sale of assets or similar corporate transaction involving kp67, your Personal Data may be transferred to a successor entity, subject to equivalent privacy protections.

kp67 does not share Personal Data with third-party advertisers or data brokers for marketing profiling purposes.

7 Data Retention

kp67 retains Personal Data for no longer than is necessary for the purposes for which it was collected, subject to any overriding legal, regulatory or contractual retention obligations. In general:

• Account and identity data is retained for the duration of your active Account and for a minimum of five years following account closure, in accordance with standard AML and financial record-keeping requirements applicable to gaming operators.
• Financial transaction records are retained for the period specified by applicable regulatory frameworks — typically five to seven years.
• Platform usage and behavioural data collected via analytics is retained on a rolling 13-month basis.
• Support and communications records are retained for three years from the date of resolution unless a longer period is required for ongoing dispute resolution.
• Where your Account is closed following identification of fraud or financial crime, relevant data may be retained indefinitely to support ongoing or future investigations.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data destruction procedures.

8 Data Security

kp67 implements appropriate technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between Users and the Platform.
• Encryption of sensitive data at rest, including password hashing using current cryptographic standards.
• Role-based access controls restricting access to Personal Data to authorised personnel only.
• Regular security assessments, penetration testing and vulnerability management processes.
• Data breach response procedures, including notification protocols where a breach is likely to result in risk to Users' rights and freedoms.
• Contractual security obligations imposed on all third-party processors.

While kp67 applies robust security controls, no transmission over the internet or electronic storage system is entirely immune from risk. You are responsible for maintaining the security of your own Account credentials and for notifying kp67 immediately if you believe your Account has been accessed without authorisation.

9 Cookies & Tracking Technologies

kp67 uses cookies and similar tracking technologies to operate the Platform effectively, understand how Users interact with it, and — where consent has been given — deliver a personalised experience. The categories of cookies we use are as follows:

These cookies are essential for the Platform to function and cannot be disabled. They include session authentication tokens, security cookies, load-balancing identifiers and cookies that remember your in-session preferences (such as language settings). These cookies do not require your consent as they are technically necessary for service delivery.

These cookies collect aggregated, anonymised information about how Users interact with the Platform — including which pages are visited, session duration and error reporting. This data helps kp67 improve Platform performance and content quality. These cookies are deployed with your consent where required.

These cookies remember choices you make — such as your preferred currency display (PKR / Rs), game lobby layout, or responsible gambling tool settings — so that you do not have to re-enter them each session.

Where you have consented, these cookies may be used to deliver relevant promotional content and to measure the effectiveness of marketing campaigns. You may withdraw your consent to marketing cookies at any time via your Account settings or browser controls.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent the Platform from functioning correctly.

10 Your Data Protection Rights

Subject to applicable data protection law and any overriding legal obligations, you have the following rights with respect to your Personal Data held by kp67:

To exercise any of the above rights, please contact kp67's support team using the contact details provided in Section 14. We will respond to verified requests within 30 calendar days. In cases of complexity or volume, this period may be extended by a further two months, in which case we will notify you within the initial 30-day period.

We reserve the right to verify your identity before actioning any data subject request to prevent unauthorised access to your Personal Data.

11 Minors

The kp67 Platform is strictly intended for adults aged 18 years and over, or the higher minimum age required by the applicable operator licence jurisdiction. kp67 does not knowingly collect Personal Data from individuals who are below the applicable minimum age.

If kp67 becomes aware that Personal Data has been collected from a minor, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor has registered on the Platform, please contact us immediately using the details in Section 14.

Parents and guardians are encouraged to make use of parental control software and to monitor the online activity of minors in their care. kp67 supports industry-wide efforts to prevent underage gambling and cooperates fully with any regulatory investigation relating to underage access.

12 Specific Notice for Pakistani Users

kp67 serves a significant base of users from Pakistan, including users in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and other cities. We provide this specific notice in recognition of that user base.

Pakistan does not currently have a comprehensive, standalone data protection law equivalent to the EU General Data Protection Regulation (GDPR). The Prevention of Electronic Crimes Act 2016 (PECA) and related instruments contain provisions relevant to digital privacy and data security. kp67 applies data handling standards consistent with international best practice and the requirements of the operator's licence jurisdiction, which may provide protections beyond those currently mandated under Pakistani law.

Cross-border data transfers may occur in the course of providing the Platform's services — for example, where kp67's infrastructure or third-party processors are located in jurisdictions outside Pakistan. Where such transfers occur, kp67 implements appropriate safeguards, including contractual protections, to ensure that your Personal Data receives a standard of protection consistent with this Policy.

13 Changes to This Policy

kp67 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in our data processing practices, the introduction of new Platform features, or feedback from regulatory guidance.

When material changes are made to this Policy, kp67 will notify registered Users by means of a notification within the Platform, by email, or by a prominent notice on the Privacy Policy page, with the "Last Updated" date revised accordingly. Continued use of the Platform following such notification constitutes your acceptance of the revised Policy.

We encourage Users to review this Policy periodically to stay informed about how kp67 protects and processes your Personal Data.

14 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, have concerns about how your Personal Data is being handled, or wish to submit a complaint regarding kp67's data practices, please contact our support team:

If you are not satisfied with how kp67 has handled your privacy concern, you may have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction governing the operator's licence. kp67 will cooperate fully with any such regulatory process.