Contents
- 1. Introduction
- 2. Definitions
- 3. Data Controller
- 4. Data We Collect
- 5. How We Collect Data
- 6. Data Processing
- 7. Legal Basis
- 8. Data Sharing
- 9. International Transfers
- 10. Data Retention
- 11. Cookies & Tracking
- 12. User Rights
- 13. Children's Privacy
- 14. Security Measures
- 15. Third-Party Links
- 16. Policy Amendments
- 17. Contact Us
1 Introduction
zk67 (hereinafter "zk67", "the Platform", "we", "us" or "our") operates the online casino and sports betting website accessible at https://zk67.cam (the "Website"). We take the privacy of our users seriously and are committed to protecting the personal data of every individual who interacts with the platform.
This Privacy Policy (the "Policy") sets out in formal terms how we collect, use, disclose, store, protect and otherwise process your personal data when you register an account, make transactions, place bets or wagers, interact with our customer support team, or otherwise access any feature of the zk67 platform.
This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the platform and are incorporated herein by reference. By registering an account or using the zk67 platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein.
Note for Pakistani Users: Pakistan's legal framework for data privacy continues to evolve. This Policy is designed to align with internationally recognised data protection principles. Nothing in this Policy constitutes legal advice regarding Pakistani data protection law. Users who have concerns about applicable local privacy obligations are advised to consult qualified legal counsel.
2 Definitions
In this Policy, the following terms shall have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including but not limited to name, date of birth, email address, CNIC number, IP address, transaction records and device identifiers. |
| "Processing" | Any operation performed on personal data — including collection, storage, retrieval, use, disclosure, erasure or destruction, whether by automated or manual means. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, the Data Controller is zk67 as operated by the platform's licensing entity. |
| "Data Processor" | A third party that processes personal data on behalf of zk67, strictly under instruction and subject to contractual data protection obligations. |
| "Consent" | A freely given, specific, informed and unambiguous indication of your agreement to the processing of your personal data for a stated purpose. |
| "KYC" | Know Your Customer — identity and age verification procedures required by the operator, including submission of government-issued identification such as a CNIC or passport. |
| "AML" | Anti-Money Laundering — regulatory controls and procedures used to detect and prevent financial crime, including transaction monitoring and source-of-funds checks. |
| "Cookie" | A small text file placed on your device by the Website to store information about your browsing session, preferences or activity patterns. |
3 Data Controller Information
The Data Controller responsible for the personal data processed in connection with the zk67 platform is the operating entity licensed to run the platform under its applicable jurisdiction. zk67 does not hold a Pakistani gambling license and is not regulated by any Pakistani governmental authority, the PTA, the State Bank of Pakistan or any provincial regulator.
For data-related queries, corrections, access requests or erasure requests, please contact our dedicated support team via the contact details provided in Section 17 of this Policy. We will respond to all privacy-related requests within a reasonable timeframe.
4 Personal Data We Collect
zk67 collects personal data across several categories depending on how you interact with the platform. The categories of data we may collect include, but are not limited to, the following:
4.1 Registration Data
When you create an Account, we collect: full legal name, date of birth, residential address, email address, phone number and chosen username. This information is necessary to create and maintain your Account.
4.2 Identity Verification (KYC) Data
To comply with age verification and AML obligations, we may collect: copies of government-issued photo identification (such as a Computerised National Identity Card (CNIC) or passport), proof of address documentation (such as a utility bill or bank statement), and selfie or liveness check images. These documents must be submitted through the platform's secure HTTPS verification portal.
4.3 Financial & Transaction Data
We collect records of all deposits, withdrawals, wagers, wins, losses, bonus transactions and associated timestamps. Payment method references used on the platform — such as mobile wallet categories (Easypaisa, JazzCash, Raast) or bank transfer references (HBL, UBL, Meezan Bank, Bank Alfalah) — are logged for transaction record-keeping and AML compliance. None of these payment providers are data processors for zk67 unless explicitly confirmed through a live integration.
4.4 Technical & Device Data
We automatically collect technical data including: IP address, device type and model, operating system, browser type and version, session timestamps, page-view logs and clickstream data. This data is used for security monitoring, fraud detection and platform optimisation.
4.5 Communications Data
Records of your communications with our customer support team — whether via live chat, email or any other support channel — are retained for quality assurance, dispute resolution and compliance purposes.
4.6 Behavioural & Gaming Data
We record your gaming activity including game selections, bet sizes, session duration, responsible gambling tool usage and any self-exclusion or limit-setting history. This data is used to operate the platform, fulfil responsible gambling obligations and improve the user experience.
5 How We Collect Your Data
We collect personal data through the following mechanisms:
- Direct collection: Information you actively provide during registration, KYC verification, payment processing or when contacting support;
- Automated collection: Technical and behavioural data collected automatically when you access and use the platform, through server logs, cookies and similar technologies;
- Third-party sources: Where permitted, we may receive data from identity verification providers, fraud prevention services or payment processing partners strictly for KYC, AML or fraud prevention purposes;
- Publicly available sources: In limited circumstances related to AML checks, we may consult publicly available databases or sanction screening lists.
6 Data Processing — Purposes of Use
zk67 processes your personal data for the following purposes:
| Purpose | Data Used |
|---|---|
| Account creation and management | Registration data, email address, username |
| Identity and age verification (KYC) | CNIC/passport, date of birth, selfie/liveness data, address proof |
| Payment processing and transaction records | Financial data, payment method references, PKR balance history |
| AML compliance and fraud prevention | Transaction data, KYC documents, IP address, device data |
| Platform operation and security | Technical data, IP address, session logs, device identifiers |
| Customer support and dispute resolution | Communications data, account history, transaction records |
| Responsible gambling obligations | Gaming activity data, limit settings, self-exclusion records |
| Platform analytics and improvement | Anonymised or aggregated behavioural and technical data |
| Legal and regulatory compliance | All categories of data, as required by applicable law or order |
7 Legal Basis for Processing
Where data protection legislation applies to zk67's operations, we rely on the following legal bases for processing personal data:
- Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions — including account creation, payment processing, KYC, and delivery of gaming services;
- Legal obligation: Processing required to comply with applicable AML regulations, age verification requirements, sanctions screening obligations and any lawful order from a competent authority;
- Legitimate interests: Processing for fraud prevention, platform security, analytics and service improvement, where our legitimate interests are not overridden by your fundamental rights;
- Consent: Processing for optional purposes — such as marketing communications — where we have obtained your explicit, informed and freely given consent. You may withdraw consent at any time without affecting lawfulness of prior processing.
8 Data Sharing & Disclosure
zk67 does not sell your personal data to third parties. We do not share your personal data with third-party advertisers or data brokers. We may, however, disclose your personal data to the following categories of recipients in the circumstances described:
- Identity verification and KYC providers: Third-party verification services used to confirm identity, age and address, operating under strict contractual data protection requirements;
- Payment processing partners: To the extent necessary to facilitate your deposits and withdrawals, relevant financial transaction data may be shared with payment processing intermediaries. This does not constitute endorsement by any named payment provider;
- Fraud prevention and AML services: Specialist third-party services used to screen transactions and detect suspicious activity, operating under data processing agreements;
- Game and technology providers: Generic technology partners providing slot, live dealer, sports data or other gaming services may receive session data necessary to operate their services within the platform;
- Legal and regulatory authorities: We will disclose personal data to competent legal or regulatory authorities if required to do so by a valid court order, regulatory request or applicable law. We will notify you of such disclosure to the extent permitted by law;
- Business successors: In the event of a merger, acquisition or transfer of business assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection standards.
Payment Provider Clarification: References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah on this platform are contextual only. None of these institutions are data processors for zk67 unless a verified live integration exists. These names are referenced solely as familiar Pakistani payment rail categories.
9 International Data Transfers
Given that zk67 is an internationally operated platform, your personal data may be transferred to, stored in, and processed in countries outside Pakistan. Such transfers may occur to the jurisdiction in which the operator holds its license, and to jurisdictions where our technology partners and data processors operate.
Where personal data is transferred internationally, zk67 takes steps to ensure that appropriate safeguards are in place — including contractual data protection clauses and transfer mechanisms consistent with internationally recognised standards. You acknowledge that by using the platform you consent to such international transfers, subject to the protections described in this Policy.
10 Data Retention
zk67 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law or regulation. The following general retention principles apply:
- Account data: Retained for the duration of your Account and for a minimum period following Account closure as required by applicable AML, gambling regulation and financial record-keeping obligations (typically five years or as determined by the operator's licensing jurisdiction);
- KYC documents: Retained for the period required by AML obligations from the date of last activity, typically not less than five years;
- Transaction records: Retained in accordance with financial record-keeping requirements applicable to the operator's license jurisdiction;
- Support communications: Retained for a reasonable period to assist with dispute resolution and regulatory compliance;
- Technical and session logs: Retained for a shorter period appropriate to their purpose, typically rolling security logs.
When data is no longer required for any stated purpose and no legal obligation to retain it subsists, it will be securely deleted or anonymised.
11 Cookies & Tracking Technologies
The zk67 platform uses cookies and similar tracking technologies to operate and improve the Website. Cookies are small text files stored on your device that help us recognise returning users, remember session preferences and analyse usage patterns.
11.1 Types of Cookies We Use
- Essential cookies: Strictly necessary for the platform to function — including session authentication, security tokens and load-balancing cookies. These cannot be disabled without affecting platform functionality;
- Analytical cookies: Used to understand how users navigate the platform, which pages are most visited and where technical errors occur. This data is used in aggregated or anonymised form to improve the platform;
- Functional cookies: Used to remember your preferences such as language settings, account display options and responsible gambling tool configurations;
- Performance cookies: Used to monitor and optimise page load speeds and server response times, particularly important for users in cities across Pakistan where network conditions may vary.
11.2 Cookie Control
You may control or delete cookies through your browser settings. Note that disabling essential cookies may prevent you from accessing parts of the platform. Continued use of the zk67 platform constitutes acknowledgement of our use of necessary cookies.
12 Your Rights as a Data Subject
Depending on applicable data protection legislation in your jurisdiction, you may be entitled to exercise the following rights in respect of your personal data. To exercise any of these rights, contact our support team via the details in Section 17.
Right of Access
You have the right to request a copy of the personal data we hold about you and to be informed of the purposes for which it is processed.
Right to Rectification
You may request correction of any inaccurate or incomplete personal data we hold about you. We will act on valid rectification requests without undue delay.
Right to Erasure
In certain circumstances you may request deletion of your personal data. This right is subject to legal retention obligations — in particular AML and gambling regulation requirements that mandate minimum retention periods.
Right to Restrict Processing
You may request that we limit the way we use your personal data in certain circumstances — for example, where you contest the accuracy of the data or object to a particular processing purpose.
Right to Portability
Where technically feasible and legally applicable, you may request that we provide your personal data in a structured, commonly used and machine-readable format for transfer to another service.
Right to Object
You may object to the processing of your personal data on the basis of legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
Exercising Your Rights: We will respond to all data subject rights requests within 30 days of receipt. We may request additional identification to verify the request before processing it. Some requests — particularly erasure requests — may be declined or partially fulfilled where data retention is required by law.
13 Children's Privacy
The zk67 platform is strictly intended for adults aged 18 years or older — or the higher minimum age required by the operator's license jurisdiction or applicable local law. We do not knowingly collect personal data from individuals under the applicable minimum age. Age verification is conducted as a mandatory part of the KYC process.
If you believe that a person under the minimum age has registered an Account or provided personal data to zk67, please contact our support team immediately. We will take prompt action to investigate and delete any such data, and to close any associated Account.
Being of the applicable minimum age does not imply that gambling is lawful in your jurisdiction. Players are responsible for verifying the legal position under local law before using the platform.
14 Security Measures
zk67 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration or destruction:
- HTTPS/TLS encryption: All data transmitted between your device and the zk67 platform is protected with industry-standard TLS encryption;
- Access controls: Access to personal data within the organisation is restricted to authorised personnel on a need-to-know basis, with role-based access controls and audit logging;
- Secure document handling: KYC documents are processed exclusively through the platform's HTTPS-secured verification portal. Documents must never be submitted through unsecured channels such as WhatsApp, Telegram or unencrypted email;
- Account security: Optional two-step login verification and login activity monitoring are available to all registered Users;
- Incident response: zk67 maintains procedures for detecting, assessing and responding to personal data breaches in a timely manner.
While we apply industry-standard security practices, no online system can guarantee absolute security. We encourage all Users to maintain strong, unique passwords for their Account and to activate two-step verification where available.
15 Third-Party Links & Services
The zk67 platform may reference third-party services — including payment rail categories and technology partners — in its content. This Policy does not apply to the data practices of third parties. If you interact with any third-party service, you do so subject to that party's own privacy policy and terms of use.
zk67 is not responsible for the data practices, content or security of any third-party platforms or services. The display of payment method names such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah on the platform is contextual only and does not imply that those providers process your data on behalf of zk67 unless explicitly confirmed through a live integration.
16 Amendments to This Policy
zk67 reserves the right to update or revise this Privacy Policy at any time. Material changes will be communicated by updating the "Last Updated" date at the top of this page and, where appropriate, by direct notification to registered Users via the email address on file or via an in-platform notice.
Continued use of the zk67 platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to remain informed of how we handle your personal data.
17 Contact Us
For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data — including requests to exercise your rights under Section 12 — please contact the zk67 support team.
Support is available 24 hours a day, 7 days a week via live chat on the platform.
Email contact (plain text — not a clickable link):
When submitting a data rights request, please include your Account username, the nature of your request, and sufficient information to allow us to verify your identity before acting on the request. We will acknowledge all privacy-related requests promptly and aim to resolve them within 30 days.
Our Privacy Commitments
Six principles that govern how we handle your personal data at zk67 every day.
Clear & Honest Disclosure
We tell you plainly what data we collect, why we collect it and who we share it with. No hidden processing, no opaque data flows, no vague "we may share" clauses without context.
TLS Encryption & Access Controls
All platform traffic is TLS-encrypted. Internal access to personal data is role-based and audited. KYC documents are handled exclusively through secure HTTPS portals.
We Never Sell Your Data
Your personal data is never sold to advertisers, data brokers or marketing networks. Full stop. Data shared with third parties is limited to what is strictly necessary for operating the platform.
Data Rights Supported
Access, rectification, erasure, portability and objection rights are all supported. Submit a request to our 24/7 support team and we will respond within 30 days.
Purpose Limitation
We collect only the data necessary for stated purposes — account management, KYC, AML, security and support. Data is not repurposed beyond what you were informed of at collection.
Defined Retention Periods
Data is retained only as long as required for its purpose or by applicable law. Once the retention period ends, data is securely deleted or anonymised — not kept indefinitely by default.
Questions About Your Privacy?
Our support team is available around the clock. You can also review our full Terms & Conditions or visit the FAQ for answers to common questions about account data and security.
🔞 18+ only, or the higher minimum required by the operator/license jurisdiction. Gambling involves financial risk. Local laws may restrict gambling — players are responsible for checking local regulations.