pk670 Privacy Policy

1. Introduction

pk670 ("we," "us," "the Company," or "pk670") is committed to protecting the privacy and personal data of all players who register and engage with our online casino and sports betting platform at pk670.org (the "Platform"). This Privacy Policy describes how pk670 collects, uses, stores, shares, and protects personal information provided by or collected from users in connection with their use of the Platform.

This Policy has been prepared in accordance with applicable data protection principles recognised under the pk670 international gaming licence and reflects best-practice standards for personal data handling in the online gaming industry. This Policy applies to all data collected through the Platform, including through the website, any related mobile-optimised pages, live chat communications, support ticket systems, and payment processing flows.

This Privacy Policy should be read alongside pk670's Terms & Conditions, which are available at pk670.org/terms-conditions, and the Responsible Gaming Policy at pk670.org/responsible-gaming. Together, these documents form the complete governance framework governing your relationship with pk670.

2. Data Controller

pk670 acts as the data controller in respect of all personal data collected through the Platform. As data controller, pk670 determines the purposes and means of processing your personal information and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently. If you have any questions about how your data is being handled, you may contact pk670's data support team via the live chat function available on any page of the Platform, or by emailing [email protected] (plain text — not a clickable link).

3. Data We Collect

pk670 collects the following categories of personal data from players:

• Identity Data: Full legal name, date of birth, gender, nationality, and a copy of a government-issued photo identification document such as a CNIC (Computerised National Identity Card) or passport.
• Contact Data: Email address, telephone number, and residential address including city (e.g., Karachi, Lahore, Islamabad, Faisalabad) and postal code.
• Account Data: Your chosen username, encrypted password, account registration date, account status, and player preference settings.
• Financial Data: Payment method details required for processing deposits and withdrawals, including bank account identifiers, JazzCash or EasyPaisa wallet references, HBL or UBL account details, Meezan Bank identifiers, and masked card numbers. pk670 does not store full card numbers on its own servers.
• Transaction Data: Records of all deposits, withdrawals, bonuses applied, wagering activity, game history, and account balance movements.
• Technical Data: IP address, browser type and version, device type, operating system, time zone, and session identifiers collected automatically when you access the Platform.
• Usage Data: Pages visited, games played, betting patterns, session durations, and navigation paths within the Platform.
• Communications Data: Records of live chat conversations, support ticket correspondence, and any other written communications between you and pk670.
• Verification Data: Documents and information submitted in response to Know Your Customer (KYC) or Anti-Money Laundering (AML) requests, including proof of address and proof of payment method ownership.

4. How We Collect Your Data

pk670 collects personal data through the following means:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting support, or filling in any form on the Platform.
• Automated Technologies: Data collected automatically as you interact with the Platform, including through cookies, server logs, and session tracking technologies. See Section 11 (Cookies Policy) for full details.
• Third-Party Service Providers: Data received from payment processors (such as JazzCash, EasyPaisa, and banking partners), identity verification providers, and fraud detection services engaged by pk670 to support platform operations.
• Publicly Available Sources: Where necessary for fraud prevention or AML compliance, pk670 may consult publicly available information sources including sanctions screening databases.

5. How We Use Your Data

pk670 uses your personal data for the following purposes:

• To register and maintain your player account on the Platform.
• To verify your identity and age (21+ requirement) in compliance with our gaming licence obligations.
• To process deposits, withdrawals, and all other financial transactions on your account.
• To deliver the gaming services you request, including live casino games, sports betting markets, and promotional offers.
• To communicate with you regarding your account, including transaction confirmations, security alerts, and support responses.
• To send you promotional communications regarding pk670 offers and new products, where you have provided consent or where we have a legitimate interest in doing so. You may opt out of promotional communications at any time by contacting support.
• To monitor and analyse Platform usage for the purposes of improving user experience, game performance, and site security.
• To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, and other prohibited conduct as described in our Terms & Conditions.
• To fulfil our legal and regulatory obligations under the terms of our international gaming licence, including record-keeping, AML reporting, and responsible gaming monitoring.
• To enforce our Terms & Conditions and resolve any disputes arising from your use of the Platform.

6. Legal Basis for Processing

pk670 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between you and pk670, including account management, payment processing, and delivery of gaming services.
• Legal Obligation: Processing necessary to comply with applicable legal and regulatory requirements, including KYC verification, AML obligations, age verification, and gaming licence conditions.
• Legitimate Interests: Processing carried out for pk670's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your fundamental privacy rights.
• Consent: Where processing is based on your consent — such as marketing communications — you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Sharing Your Data

pk670 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Your data may be shared with the following categories of third parties solely in connection with the operation of the Platform:

• Payment Service Providers: Including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card processing partners, for the purpose of processing your financial transactions.
• Identity Verification Providers: Third-party KYC and age verification services engaged by pk670 to assist with regulatory compliance.
• Fraud Prevention & AML Services: Specialist providers engaged to screen transactions and player activity against sanctions lists and fraud indicators.
• Technology Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers operating under strict confidentiality and data processing agreements with pk670.
• Gaming Software Providers: Where necessary for the delivery of specific games, limited technical session data may be shared with licensed third-party game studios.
• Regulatory & Law Enforcement Authorities: Where required by law, court order, or the conditions of our gaming licence, pk670 may disclose personal data to regulatory bodies, tax authorities, or law enforcement agencies.

All third parties with whom pk670 shares personal data are required to maintain appropriate data security standards and to use the data only for the purposes for which it was shared.

8. Data Retention

pk670 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law or gaming licence conditions. As a general guide:

• Account Data and Transaction Records: Retained for a minimum of five (5) years from the date of account closure, in compliance with AML record-keeping obligations under our gaming licence.
• KYC and Verification Documents: Retained for the duration of the account relationship and for a minimum of five (5) years thereafter.
• Communications Records: Support and live chat records retained for up to three (3) years from the date of the communication.
• Technical and Usage Data: Retained for up to twelve (12) months from collection, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with pk670's data destruction procedures.

9. Data Security

pk670 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and pk670 servers.
• Encryption of sensitive data fields — including payment details and identity documents — at rest within pk670's secure data infrastructure.
• Role-based access controls ensuring that personal data is accessible only to pk670 staff and service providers with a legitimate need to process it.
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent cybersecurity specialists.
• Two-factor authentication options available to players for additional account-level security.
• Incident response procedures in place to detect, contain, and respond to any data security breach in a timely manner.

While pk670 takes all reasonable precautions to safeguard your personal data, no internet-based platform can guarantee absolute security. Players are reminded of their own responsibility to maintain the confidentiality of their account credentials and to report any suspected unauthorised access to support immediately.

10. Your Rights

Subject to the applicable legal framework governing pk670's operations, you hold the following rights in respect of your personal data:

• Right of Access: You may request a copy of all personal data pk670 holds about you. Requests will be processed within 30 days and fulfilled securely via your verified account email address.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held by pk670. Corrections to core identity data may require re-verification.
• Right to Erasure: You may request deletion of your personal data, subject to pk670's legal retention obligations. Data that pk670 is legally required to retain under its gaming licence conditions cannot be deleted prior to expiry of the mandatory retention period.
• Right to Restriction: You may request that pk670 restrict processing of your personal data in certain circumstances, for example where you have contested the accuracy of the data or where processing is unlawful but you do not wish the data to be erased.
• Right to Data Portability: Where processing is carried out on the basis of your consent or contractual necessity, you may request that pk670 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal data carried out on the basis of legitimate interests, including direct marketing communications. pk670 will cease such processing unless compelling legitimate grounds exist that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact pk670 support via live chat or email at [email protected]. pk670 will respond to all rights requests within 30 days. Where a request is complex or numerous, this period may be extended by a further 60 days, with prior notice provided to you.

11. Cookies Policy

pk670 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly Necessary Cookies: Session cookies required to maintain your logged-in state, prevent cross-site request forgery, and ensure the Platform functions correctly. These cookies cannot be disabled without impairing your ability to use the Platform.
• Performance Cookies: Anonymised analytics cookies used to measure page load times, identify errors, and understand how players navigate the Platform, enabling pk670 to improve performance and user experience.
• Functional Cookies: Cookies that remember your preferences such as language settings, game display options, and responsible gaming limit configurations between sessions.
• Security Cookies: Cookies used to detect and prevent fraudulent account access attempts, including device fingerprinting tokens and login anomaly detection markers.

pk670 does not deploy third-party advertising or behavioural tracking cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may affect Platform functionality. For detailed cookie management guidance, refer to your browser's help documentation.

12. Minors & Age Verification

pk670 strictly prohibits access to the Platform by persons under the age of 21 years. The Company employs a combination of declaration-based age confirmation at registration and documentary KYC verification to enforce this requirement. Where pk670 has reasonable grounds to believe that an account has been registered by or is being used by a person under 21, the account will be suspended immediately pending investigation, and any personal data collected in connection with that account will be handled in accordance with this Privacy Policy and applicable legal requirements.

pk670 does not knowingly collect personal data from minors. If a parent or guardian believes that their child has registered an account on the Platform, they are encouraged to contact pk670 support immediately via live chat so that the account can be closed and the relevant data handled appropriately.

13. International Data Transfers

As pk670 operates under an international gaming licence and engages technology and service providers across multiple jurisdictions, your personal data may be transferred to and processed in countries outside your country of residence. Where such transfers occur, pk670 takes appropriate steps to ensure that your personal data receives an equivalent level of protection as it would in its country of origin, including by entering into appropriate data transfer agreements with the relevant service providers. By using the pk670 Platform, you consent to such international transfers as described in this Policy.

14. Changes to This Privacy Policy

pk670 reserves the right to update or amend this Privacy Policy at any time to reflect changes in legal requirements, licensing conditions, or Platform operations. Where material changes are made, pk670 will notify registered players via email or through a prominent notice displayed on the Platform. The effective date displayed at the top of this page reflects the date of the most recent revision. Your continued use of the Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. Players are encouraged to review this Policy periodically.

15. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which pk670 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 via the chat icon on any page of the Platform — the fastest way to reach pk670 support.
• Email: [email protected] (plain text — not a clickable link). pk670 aims to respond to all written privacy enquiries within 5 business days.

If you are unsatisfied with pk670's response to a privacy complaint, you may escalate the matter to the relevant supervisory authority or dispute resolution body designated under pk670's international gaming licence jurisdiction.