kp67 Privacy Policy

1. Data Controller

1.1 kp67 is the data controller responsible for your personal data collected through the Platform. As data controller, kp67 determines the purposes and means by which your personal information is processed, in accordance with applicable data protection legislation.

1.2 kp67 is an internationally incorporated platform. Regardless of where our servers are located, we are committed to handling data in a manner consistent with recognised international data protection standards, including principles of purpose limitation, data minimisation, and storage limitation.

2. Personal Data We Collect

2.1 kp67 collects personal data that you provide directly and data generated through your use of the Platform. The categories of personal data we process include:

• Identity Data: Full legal name, date of birth, and government-issued identity document details (collected for age verification and KYC purposes).
• Contact Data: Email address, mobile phone number, and residential address. For Pakistani users, this may include city references such as Karachi, Lahore, Islamabad, Rawalpindi, or Faisalabad.
• Financial Data: Payment method details sufficient to process transactions, including JazzCash account references, Easypaisa wallet identifiers, and bank account details (HBL, UBL, Meezan Bank, Bank Alfalah, etc.). Full card or full account numbers are not stored by kp67 — payments are processed via our payment service providers.
• Account Data: Username, password (stored in hashed form), account preferences, and login history.
• Transaction Data: Records of all deposits, withdrawals, bets placed, games played, bonuses claimed, and wagering history on the kp67 Platform.
• Technical Data: IP address, device type, browser type and version, operating system, and session identifiers collected automatically when you access the Platform.
• Usage Data: Pages visited, features used, time spent on the Platform, and interaction patterns with games and betting markets.
• Communications Data: Records of correspondence with kp67 support, including chat transcripts and email exchanges.

2.2 kp67 does not intentionally collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless specifically required for responsible gaming purposes (for example, where a user discloses a problem gambling condition in the context of a self-exclusion request).

3. How We Use Your Personal Data

3.1 kp67 processes your personal data only for specific, legitimate purposes. The primary purposes for which we use your data are:

• Account Management: To create, verify, and manage your kp67 account, including identity verification (KYC) and age verification checks. Ensuring that only eligible adults aged 18 and above access the Platform is a core obligation of kp67.
• Service Delivery: To operate and provide all betting, casino, slots, lottery, and related services available on the kp67 Platform in Pakistani Rupees.
• Payment Processing: To facilitate PKR deposits and withdrawals via JazzCash, Easypaisa, and supported bank transfer methods, and to maintain accurate transaction records.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, and any misuse of the kp67 Platform. This includes monitoring for multiple account activity, unusual transaction patterns, and unauthorised access attempts.
• Legal Compliance: To meet applicable legal, regulatory, and reporting obligations, including anti-money laundering (AML) and know-your-customer (KYC) requirements.
• Responsible Gaming: To support responsible gaming measures, including enforcing self-exclusion requests, applying deposit and loss limits, and monitoring usage patterns for signs of problem gambling behaviour.
• Customer Support: To respond to your queries, complaints, and requests submitted via kp67 support channels.
• Platform Improvement: To analyse usage patterns and technical data to improve the performance, reliability, and features of the kp67 Platform.
• Marketing Communications: To send you relevant promotional offers, bonus notifications, and platform updates where you have provided consent or where permitted by applicable law. You may withdraw marketing consent at any time via Account Settings.

4. Legal Basis for Processing

4.1 kp67 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you as a registered kp67 user, including account management, service delivery, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML/KYC obligations and age verification requirements.
• Legitimate Interests: Processing carried out in pursuit of kp67's legitimate business interests — including fraud prevention, security, and Platform improvement — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your explicit consent, principally in the context of marketing communications. You have the right to withdraw consent at any time.

5. Data Sharing & Third Parties

5.1 kp67 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with carefully selected third parties only in the following circumstances:

• Payment Service Providers: JazzCash, Easypaisa, and banking partners require transaction data to process deposits and withdrawals on your behalf. These providers operate under their own privacy policies and are bound by contractual data protection obligations.
• Identity Verification Providers: Third-party KYC and age verification services may process identity documents and other data on kp67's behalf to complete required verification checks.
• Technology Service Providers: Cloud hosting, data analytics, and platform infrastructure providers may process technical and usage data in the course of providing services to kp67. All such providers are bound by appropriate data processing agreements.
• Game Content Providers: Casino and slot game providers may receive session identifiers and gameplay data necessary to deliver and settle game outcomes. No additional personal identifiers are shared beyond what is operationally required.
• Regulatory & Law Enforcement Authorities: Where required by law, court order, or regulatory direction, kp67 may disclose personal data to competent authorities.

5.2 Any third parties with whom kp67 shares personal data are required to process such data only for the specified purpose and in accordance with applicable data protection standards. kp67 does not authorise third-party processors to use your data for their own independent purposes.

6. Cookies & Tracking Technologies

6.1 kp67 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Required for core Platform functionality, including session management, login persistence, and security measures. These cannot be disabled without affecting Platform usability.
• Analytics Cookies: Used to understand how users interact with the kp67 Platform — which pages are most visited, how sessions flow, and where technical issues occur. This data is aggregated and anonymised where possible.
• Preference Cookies: Store your language, currency, and display preferences to provide a consistent experience across sessions.

6.2 You can manage cookie preferences through your browser settings. Note that disabling essential cookies will impair your ability to use core kp67 Platform features, including account login.

7. Data Retention

7.1 kp67 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting requirements. Specific retention periods include:

• Account data and transaction records are retained for a minimum period following account closure to satisfy AML and legal compliance obligations.
• KYC and identity verification documents are retained for the period required under applicable regulations.
• Marketing communication records and consent logs are retained for the duration of the marketing relationship plus a reasonable period for evidence of consent.
• Technical and usage data is typically retained in aggregated or anonymised form for analytical purposes after individual session data has been purged.

7.2 When data is no longer required for any lawful purpose, kp67 will securely delete or anonymise it in accordance with our internal data governance procedures.

8. Data Security

8.1 kp67 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• HTTPS/TLS encryption for all data transmitted between your device and the kp67 Platform.
• Passwords stored in hashed, salted form — kp67 staff cannot view your plain-text password.
• Two-factor authentication (2FA) available for all kp67 accounts to provide an additional layer of login security.
• Access controls and role-based permissions limiting internal access to personal data to staff with a documented operational need.
• Regular security assessments and monitoring for anomalous access patterns or potential data breaches.

8.2 Notwithstanding the above, no online platform can guarantee absolute security. In the event of a material data breach affecting your personal data, kp67 will notify affected users and relevant authorities as required by applicable law.

9. Your Rights

9.1 Subject to applicable law, you have the following rights in respect of your personal data held by kp67:

• Right of Access: You may request a copy of the personal data kp67 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to kp67's legal retention obligations.
• Right to Restriction: You may request that kp67 restrict processing of your data in certain circumstances.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

9.2 To exercise any of the above rights, contact kp67 support at [email protected] (plain text — not a clickable link). kp67 will respond to valid data requests within a reasonable timeframe and in accordance with applicable law. We may require identity verification before processing certain requests.

10. Changes to This Privacy Policy

10.1 kp67 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to registered users via email notification or prominent on-Platform notice. The date of the most recent revision is displayed at the top of this page.

10.2 Continued use of the kp67 Platform following notification of changes constitutes your acceptance of the updated Policy. If you do not agree to any amendment, you should cease use of the Platform and contact kp67 support to initiate account closure if required.