kp67 Privacy Policy — How We Protect Your Data

This Privacy Policy applies to the kp67 online sports betting and casino platform, accessible at kp67.bet and through any associated mobile interfaces. In this document, references to "kp67", "we", "us", or "our" refer to the operators of the kp67 platform and its data processing activities.

kp67 operates as a data controller in respect of the personal data provided by users registered on the platform. As data controller, kp67 determines the purposes and means by which personal data is processed and is responsible for ensuring that all processing activities comply with applicable data protection and privacy standards.

This Privacy Policy applies to all users of the kp67 platform, including registered account holders, visitors who browse the site without registering, and any individual whose personal data is processed in connection with the kp67 Services. It applies regardless of the device or method used to access kp67 — whether desktop, mobile browser, or mobile application.

kp67 collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the site, and from third-party verification and payment partners as part of our KYC and payment processing obligations.

The following table summarises the categories of personal data kp67 collects and the primary source of each category:

kp67 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, biometric data (other than a photograph for KYC identity matching), or health data — except where a user voluntarily discloses such information in the context of a responsible gaming or self-exclusion request.

kp67 uses the personal data it collects for clearly defined operational, legal, and safety purposes. We do not use your data for purposes that are incompatible with those stated below without first obtaining your consent or having a clear legal basis to do so.

• Account Registration & Management: Processing your registration, verifying your identity, maintaining your account, and communicating essential account information such as password resets, deposit confirmations, and withdrawal updates.
• Providing the kp67 Services: Enabling sports betting on PSL, international cricket, and other events; operating live casino games; delivering slot gaming experiences; processing deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.
• KYC & Age Verification: Verifying that you are at least 21 years of age and that your identity matches the details provided at registration, as required under applicable compliance standards.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, unauthorised account access, bonus abuse, and other prohibited conduct as defined in the kp67 Terms & Conditions.
• Responsible Gaming Monitoring: Monitoring betting patterns for indicators of problem gambling behaviour; applying and enforcing deposit limits, loss limits, and self-exclusion arrangements as requested or required.
• Legal & Regulatory Compliance: Fulfilling record-keeping, reporting, and audit obligations under applicable gaming compliance frameworks and financial regulations.
• Customer Support: Responding to enquiries, complaints, and responsible gaming requests submitted via live chat or email.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve site performance, betting market offerings, and the overall user experience for players across Karachi, Lahore, Islamabad, and Faisalabad.
• Marketing Communications: Sending promotional offers, bonus notifications, and event alerts — only where you have opted in to marketing communications. You may opt out at any time by contacting kp67 support.

Every personal data processing activity conducted by kp67 rests on one or more of the following recognised legal grounds:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you as a registered kp67 account holder — including account administration, payment processing, and delivery of betting and gaming services.
• Legal Obligation: Processing required for kp67 to comply with applicable laws and regulations, including KYC/AML obligations, age verification requirements, and regulatory reporting duties.
• Legitimate Interests: Processing conducted for kp67's legitimate business interests where those interests are not overridden by your rights — including fraud detection, platform security, responsible gaming monitoring, and aggregated analytics for service improvement.
• Consent: Processing based on your freely given, specific, and informed consent — principally for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

kp67 does not sell your personal data. We share your data only with carefully selected categories of recipients where it is strictly necessary for the purposes described in this Policy, and only under appropriate contractual or legal obligations.

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive transaction data necessary to process your deposits and withdrawals. These parties act as independent data controllers in respect of your payment data under their own privacy policies.
• KYC & Identity Verification Providers: Third-party identity verification services may receive your identity documents and personal details to perform KYC checks on kp67's behalf. These providers operate under strict data processing agreements with kp67.
• Game Technology Providers: Casino and slot game providers integrated into the kp67 platform receive session data and wager information necessary to operate and audit their games. All providers are contractually bound to handle your data securely.
• Regulatory & Law Enforcement Authorities: kp67 may disclose personal data to gaming regulators, financial intelligence authorities, or law enforcement agencies where required by law or where kp67 has a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm.
• Professional Advisers: Legal counsel, auditors, and compliance consultants engaged by kp67 may access personal data where necessary for their professional advisory role, under strict professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of kp67's business or assets, personal data may be transferred to the acquiring entity subject to equivalent privacy protections. kp67 will notify registered users of any such transfer prior to data being transferred.

In all cases where kp67 shares data with third-party processors, we ensure that appropriate data processing agreements are in place requiring those parties to protect your data to at least the same standard as kp67 itself.

kp67 takes the security of financial data with the utmost seriousness. Given that our primary user base in Pakistan transacts via JazzCash, EasyPaisa, and bank transfers through institutions such as HBL, UBL, and Meezan Bank, the following security measures are in place for all financial data processing:

• All financial transactions are transmitted over 256-bit SSL/TLS encrypted connections. No financial data is ever transmitted in plain text.
• kp67 does not store complete bank account numbers or mobile wallet PINs. Only tokenised references and transaction confirmation codes are retained in our systems.
• Payment data is processed through certified payment gateway infrastructure that complies with applicable financial data security standards.
• Withdrawal requests are matched against the verified payment methods on your kp67 account to prevent third-party fund transfers.
• Large transactions and unusual transaction patterns are subject to enhanced due diligence review under kp67's AML compliance programme.

kp67 uses cookies and similar tracking technologies to operate the platform, maintain your session, and improve the user experience. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies do not contain personally identifiable information by themselves, but may be linked to your kp67 account when you are logged in.

kp67 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in, security tokens that protect against CSRF attacks, and cookies that store your responsible gaming preferences. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language, display settings, and last-used payment method to provide a smoother experience across sessions.
• Analytics Cookies: Collect anonymised data about how users navigate the kp67 platform — which pages are most visited, average session duration, and common exit points. This data is used solely to improve the platform and is never linked back to individual user accounts without consent.
• Marketing Cookies: Used only where you have consented to receive personalised promotional content. These cookies track which promotions you have viewed or engaged with to avoid showing you irrelevant or repetitive offers.

You may manage your cookie preferences through your browser settings. Disabling cookies beyond the strictly necessary category may affect the functionality of the kp67 platform but will not prevent you from accessing core features provided you are logged in to your account.

kp67 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected or as required by applicable legal obligations. The following retention periods apply to the principal categories of data kp67 holds:

Upon expiry of the applicable retention period, kp67 will securely delete or irreversibly anonymise your personal data. Anonymised data — from which it is no longer possible to identify you — may be retained indefinitely for aggregate statistical analysis and platform improvement purposes.

As a kp67 user, you hold a number of rights in respect of your personal data. kp67 is committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights listed below, contact kp67 support via live chat or email at [email protected], clearly identifying your account and the right you wish to exercise.

• Right of Access: You have the right to request a copy of the personal data kp67 holds about you, along with information about how it is being processed. kp67 will respond to access requests within 30 days.
• Right to Rectification: If any personal data kp67 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update most personal details directly within your kp67 account settings.
• Right to Erasure: In certain circumstances — such as where kp67 no longer needs your data for the purpose for which it was collected and has no legal obligation to retain it — you have the right to request deletion of your personal data. Note that erasure requests cannot be fulfilled where retention is required by law, including AML and KYC record-keeping obligations.
• Right to Restrict Processing: You may request that kp67 restricts processing of your personal data while a dispute about its accuracy or the lawfulness of processing is being resolved.
• Right to Data Portability: You have the right to receive personal data you have provided to kp67 in a structured, commonly used, machine-readable format, and to transmit that data to another service provider where technically feasible.
• Right to Object: You have the right to object to processing of your personal data based on kp67's legitimate interests — including profiling for responsible gaming monitoring — unless kp67 can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

kp67 is strictly an adult platform. Our Services are available exclusively to individuals who are at least 21 years of age. kp67 does not knowingly collect, process, or store personal data relating to individuals under the age of 21.

Age verification is conducted as part of the kp67 registration and KYC process. Where kp67 discovers or is notified that an account has been registered by a person under 21 years of age, we will immediately:

• Suspend and close the minor's account.
• Void any Bonus Funds and winnings associated with the account.
• Securely delete personal data relating to the minor, subject to any legal retention obligations that may apply in connection with the underage registration event itself.
• Refund any real-money deposits at kp67's discretion following a review of the circumstances.

Parents and guardians who believe a minor may have accessed or registered with kp67 are urged to contact kp67 support immediately via live chat or at [email protected] so that the matter can be addressed without delay. kp67 takes underage gambling extremely seriously and cooperates fully with responsible gaming investigations involving minors.

The kp67 platform serves players across Pakistan, but some of the technology infrastructure and third-party service providers we work with — including game technology providers, KYC verification platforms, and analytics tools — may be based in or process data from servers located outside Pakistan.

Where personal data is transferred outside Pakistan to third-party processors or service partners, kp67 ensures that appropriate safeguards are in place to protect your data, including:

• Requiring all international data recipients to enter into data processing agreements with kp67 that impose equivalent data protection obligations to those applied within our own operations.
• Conducting due diligence on third-party processors to verify that adequate technical and organisational security measures are in place before any transfer of personal data occurs.
• Limiting the scope of data shared with international processors to the minimum necessary for the specific service being provided.
• Monitoring the compliance of international processors on an ongoing basis and revoking data access where a processor fails to maintain the required standards.

kp67 does not transfer personal data to jurisdictions that lack adequate data protection frameworks without first implementing contractual safeguards sufficient to protect the rights and interests of the data subjects concerned.

kp67 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or the expansion of our platform services. Where changes are material — meaning they significantly affect the way we process your personal data or your rights in relation to that data — kp67 will notify registered users in advance via email or through a prominent on-site notice.

Non-material amendments, such as clarifications of existing language, corrections of typographical errors, or minor structural reorganisation that does not alter the substance of the Policy, may be published without prior notice. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the kp67 platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes made to this Policy, you should stop using the kp67 platform and may request account closure by contacting kp67 support.

If you have any questions, concerns, or requests relating to this Privacy Policy or kp67's handling of your personal data, please contact our support team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly on the kp67 platform — the fastest channel for urgent privacy or account data concerns.
• Support Email: [email protected] — for written privacy requests, data rights exercises, or formal complaints. Please include your registered account username or email address and a clear description of your request.

kp67 aims to acknowledge all privacy-related enquiries within 2 business days and to resolve substantive requests fully within 30 calendar days. Where a request is particularly complex or involves multiple data categories, kp67 will notify you of an expected extended timeline before the 30-day deadline passes.

If you are not satisfied with kp67's response to your privacy complaint or data rights request, you have the right to escalate your complaint to the relevant data protection or gaming regulatory authority applicable in your jurisdiction. kp67 will cooperate fully with any regulatory investigation into our data processing practices.