pa67 Privacy Policy

pa67 is an online gaming platform accessible at pa67.org, offering cricket betting, live casino games, slots, and specialty titles to registered players in Pakistan and other permitted jurisdictions. pa67 operates under an internationally recognized gaming license, the details of which are available upon request from our support team.

For the purposes of this Privacy Policy, pa67 acts as the data controller in respect of the personal information you provide during registration, KYC verification, payment processing, and general use of the platform. As data controller, pa67 is responsible for determining the purposes and means by which your personal data is processed.

By registering a pa67 account or continuing to use the platform after this Privacy Policy is published, you acknowledge that you have read and understood how your personal data will be handled as described in this document. If you do not agree with any part of this policy, please discontinue use of the pa67 platform and contact us to close your account.

pa67 collects personal data through several channels during the course of your registration and ongoing use of the platform. The categories of data we collect, and the circumstances in which each category is collected, are set out below.

pa67 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or biometric data beyond the identity document photographs required for KYC compliance under our gaming license obligations.

pa67 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose beyond those listed here without first obtaining your explicit consent or where permitted by our regulatory obligations.

• Account Creation and Management: To register your pa67 account, verify your identity, maintain your account profile, and ensure only one account is held per individual in accordance with our Terms and Conditions.
• KYC and Age Verification: To verify that you meet the minimum age requirement of 21 years, as mandated by our international gaming license, and to confirm your identity prior to processing withdrawal requests above designated thresholds.
• Payment Processing: To facilitate deposits via JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK; and to process withdrawal requests back to your verified payment method. Financial data is shared with payment processors solely for transaction execution purposes.
• Anti-Money Laundering (AML) Compliance: To monitor account activity for indicators of financial crime, report suspicious transactions to relevant regulatory authorities as required by our gaming license, and conduct enhanced due diligence on high-value transactions.
• Responsible Gaming Monitoring: To identify patterns of gaming behaviour that may indicate problem gambling, apply the responsible gaming tools you configure (deposit limits, self-exclusion, cooling-off periods), and fulfil our duty of care obligations under our gaming license.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain a record of support interactions for quality assurance and regulatory audit purposes.
• Platform Security: To detect and prevent fraudulent activity, unauthorised account access, bonus abuse, collusion, and the use of automated betting tools that violate our Terms and Conditions.
• Marketing Communications: To send you information about pa67 bonuses, promotions, and new game releases by email or SMS, where you have consented to receive such communications. You may withdraw this consent at any time.
• Platform Improvement: To analyse anonymised and aggregated usage data for the purpose of improving the pa67 platform, fixing technical issues, and developing new features that better serve Pakistani players.

pa67 processes your personal data on the following legal bases, depending on the specific purpose for which the data is being used:

• Contractual Necessity: Processing your identity data, contact data, and financial data is necessary to enter into and perform our contract with you — namely, the provision of pa67 gaming services as described in our Terms and Conditions. Without this data, we cannot open your account or process your transactions.
• Legal Obligation: pa67 is required by its international gaming license to conduct KYC verification, maintain AML transaction monitoring, implement responsible gaming controls, and retain certain records for regulatory audit purposes. Processing for these purposes is mandatory and cannot be opted out of while you hold a pa67 account.
• Legitimate Interests: pa67 processes certain technical and gaming activity data on the basis of our legitimate interests in maintaining platform security, preventing fraud, ensuring fair play, and improving the quality of our services — provided those interests are not overridden by your privacy rights.
• Consent: Where pa67 processes your data for marketing communications — including promotional emails and SMS notifications about bonuses and new games — we do so only on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time by contacting [email protected] or using the unsubscribe link in any marketing email.

pa67 uses cookies and similar tracking technologies on the pa67.org website to ensure the platform functions correctly, to remember your session and preferences, and to collect anonymised analytics data that helps us understand how Pakistani players navigate and use the site.

The following categories of cookies are used on pa67.org:

• Strictly Necessary Cookies: These cookies are essential for the pa67 website to function and cannot be disabled. They include session authentication cookies that keep you logged into your account and security cookies that protect against cross-site request forgery. No personal data collected by these cookies is shared with third parties.
• Functional Cookies: These cookies remember your preferences — such as your preferred display language, notification settings, and responsible gaming tool configurations — so that you do not need to re-enter them on each visit.
• Analytics Cookies: pa67 uses aggregated, anonymised analytics data to understand overall site usage patterns, identify technical issues, and measure the effectiveness of platform features. Analytics data does not identify individual players and is not shared outside of pa67's internal teams.
• Marketing Cookies: Where you have consented to marketing communications, pa67 may use cookies to track whether you have opened or acted upon a promotional email or notification, so that we can measure campaign effectiveness. You can opt out of marketing cookies through your account communication preferences.

pa67 does not sell, rent, or commercially trade your personal data to any third party. However, in order to deliver our services to you and comply with our regulatory obligations, pa67 shares your data with the following categories of third parties, under strict contractual data protection terms:

• Payment Processors: JazzCash, EasyPaisa, and banking partners (HBL, UBL, Meezan Bank, Raast, 1LINK) receive the minimum financial and identity data necessary to process your deposits and withdrawals. These entities are regulated financial institutions operating under Pakistan's financial regulatory framework.
• Identity Verification Providers: KYC document verification may be facilitated by a licensed third-party identity verification service operating under a data processing agreement with pa67. This service processes your CNIC and identity documents solely for verification purposes and does not retain them beyond the verification event.
• Game Suppliers: Live casino, slot, and specialty game providers (such as those supplying Mermaid Fishing and Ganesh Fortune) may receive a pseudonymised player reference — never your full personal details — to attribute game sessions to your pa67 account balance.
• Regulatory Authorities: pa67 is obligated under its international gaming license to disclose player data to the relevant licensing authority upon formal request, and to report suspicious transactions to anti-money laundering authorities without notifying the account holder, as required by law.
• Legal and Law Enforcement: pa67 may disclose your personal data to law enforcement or judicial authorities where required by a valid court order, subpoena, or equivalent legal process applicable in the jurisdiction of our gaming license.

All third parties with whom pa67 shares personal data are required to handle that data in accordance with applicable data protection standards and are contractually prohibited from using pa67 player data for any purpose beyond the specific service they are providing to pa67.

pa67 operates under an internationally recognized gaming license, and some of the third-party service providers that pa67 works with — including game suppliers and infrastructure providers — may process data in jurisdictions outside of Pakistan. Where personal data is transferred internationally, pa67 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or greater than the protections provided under pa67's gaming license obligations.

Such safeguards may include:

• Contractual clauses in data processing agreements that bind the receiving party to specific data protection standards;
• Transfer only to jurisdictions whose data protection frameworks have been assessed as providing adequate protections for personal data;
• Technical measures such as pseudonymisation and encryption applied prior to any international data transfer.

pa67 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our regulatory obligations under our international gaming license. The following retention periods apply to the principal categories of data pa67 holds:

• Account and Identity Data: Retained for the duration of your active pa67 account and for a period of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements under our gaming license.
• KYC Documents (CNIC, proof of address): Retained for five (5) years from the date of verification, or five years from account closure, whichever is later. Documents are stored in encrypted form and access is restricted to authorised compliance personnel only.
• Transaction and Financial Records: Retained for five (5) years following the date of each transaction, as required for AML audit trail purposes.
• Gaming Activity Logs: Retained for three (3) years from the date of each gaming session, for responsible gaming monitoring, dispute resolution, and regulatory audit purposes.
• Customer Support Communications: Retained for two (2) years from the date of the last communication in each support thread, unless the communication relates to a formal dispute or regulatory matter, in which case it is retained for five (5) years.
• Marketing Consent Records: Retained for the duration of your consent plus one (1) year following withdrawal, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, pa67 will securely delete or anonymise your personal data so that it can no longer be attributed to you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

As a pa67 account holder, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact pa67 at [email protected] with the subject line "Data Rights Request" and include your registered account username and a description of your request.

pa67 is strictly an adults-only platform. Access to, and registration on, pa67 is prohibited for any individual under the age of 21 years. pa67 does not knowingly collect personal data from individuals under the age of 21 under any circumstances.

pa67 employs the following technical and procedural measures to prevent underage access to the platform:

• Mandatory date-of-birth declaration during account registration, with automatic rejection of registrations where the declared age is below 21 years;
• KYC identity verification requiring CNIC submission, which confirms both identity and age independently of self-declaration;
• Ongoing transaction monitoring that flags activity patterns inconsistent with an adult player profile for manual review by the compliance team.

If you are a parent or guardian and believe that your child has registered a pa67 account or accessed the platform, please contact us immediately at [email protected] with the subject line "Underage Account Report" and we will act on your report within 24 hours.

pa67 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS 1.3 Encryption: All data in transit between your browser or mobile device and pa67's servers is encrypted using Transport Layer Security version 1.3, the current industry standard for secure web communications.
• At-Rest Encryption: Personal data stored on pa67's servers — including KYC documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to player personal data within pa67's internal systems is restricted on a strict need-to-know basis. Employees and contractors with access to personal data are subject to confidentiality obligations and undergo regular security awareness training.
• Two-Factor Authentication (2FA): pa67 offers 2FA via Pakistani mobile number OTP for all account holders, and requires 2FA for all internal staff accessing systems that contain player personal data.
• Intrusion Detection: pa67's infrastructure is monitored 24/7 for signs of unauthorised access, with automated alerts and incident response procedures in place to contain and remediate any detected breach.
• Penetration Testing: pa67 conducts regular third-party penetration testing of its web and mobile platform as a condition of its international gaming license, with findings remediated on a priority basis.

pa67 sends marketing communications — including information about bonuses, promotions, new game releases, PSL betting markets, and special offers — only to players who have explicitly opted in to receive such communications during account registration or through their account settings.

Marketing messages from pa67 may be delivered via the following channels, based on the specific preferences you selected during opt-in:

• Email to your registered email address;
• SMS to your registered Pakistani mobile number;
• In-platform notifications displayed when you are logged into your pa67 account.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any pa67 marketing email;
• Replying "STOP" to any pa67 marketing SMS from your registered mobile number;
• Updating your communication preferences in your pa67 account settings; or
• Emailing [email protected] with the subject line "Marketing Opt-Out".

Withdrawal of marketing consent does not affect pa67's ability to send you essential service communications — such as security alerts, account verification messages, withdrawal confirmations, and responsible gaming notifications — which are sent on the basis of contractual necessity rather than consent.

The pa67 website may contain references to game providers, payment partners, and regulatory bodies as part of its informational content. pa67 does not embed third-party tracking scripts or advertising networks on pa67.org beyond those strictly necessary for platform functionality.

Where pa67's game library includes titles provided by third-party game studios, those games are delivered within the pa67 platform environment. The game supplier may receive a pseudonymised session reference to attribute game outcomes to your account balance, but does not receive your full personal details, CNIC, or payment information.

pa67 reviews this Privacy Policy on a regular basis and may update it to reflect changes in applicable data protection law, regulatory requirements under our gaming license, the services we offer, or our internal data handling practices.

When pa67 makes a material change to this Privacy Policy — meaning a change that affects how your personal data is collected, used, or shared in a way that is meaningfully different from the previous version — pa67 will notify you via the email address registered to your account at least 14 days before the change takes effect. For minor or clarificatory amendments that do not affect the substance of your data rights, pa67 will update this page and revise the "Last Reviewed" date at the top of the policy without individual notification.

Your continued use of the pa67 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with a material change to this Privacy Policy, you should contact pa67 at [email protected] before the effective date to discuss your options, including account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or how pa67 handles your personal data, please contact pa67's Data Protection team using the details below. pa67 is committed to resolving all privacy enquiries promptly, fairly, and transparently.

pa67 takes all privacy complaints seriously. If you are not satisfied with pa67's response to a privacy complaint, you may escalate the matter to the relevant supervisory authority in the jurisdiction of our gaming license. Details of the applicable supervisory authority are available upon request from [email protected].