p67 Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how p67 ("p67", "we", "us", "our") collects, processes, stores, shares, and protects the personal data of individuals ("you", "User", "Player") who access or use the p67 platform at p67.one, including all associated services, features, games, and betting products offered therein.

p67 takes its data protection obligations seriously. This Policy is designed to give you clear, transparent information about what personal data we collect, why we collect it, what we do with it, who we share it with, how long we keep it, and what your rights are in relation to your personal data held by p67.

This Policy applies to all users of the p67 platform, including registered account holders, visitors who browse p67.one without registering, and any person who contacts p67 via our support channels. This Policy should be read in conjunction with the p67 Terms & Conditions, which govern the overall relationship between p67 and its users.

Data Controller

For the purposes of applicable data protection law, p67 is the data controller in respect of the personal data of individuals using the p67 platform at p67.one. As data controller, p67 determines the purposes and means by which your personal data is processed.

p67 operates under international gaming licensing standards and processes personal data in accordance with the data protection requirements imposed by its applicable licensing jurisdiction. Where p67 engages third-party data processors — such as payment processors, KYC verification providers, and game software suppliers — those processors are required to handle personal data in accordance with data processing agreements that bind them to appropriate data protection standards.

Personal Data We Collect

p67 collects the following categories of personal data from users:

p67 does not collect special category data (as defined under applicable data protection law) except where expressly required for responsible gaming purposes, such as where a user voluntarily discloses health information in the context of a self-exclusion or gambling harm support request.

How We Collect Your Data

p67 collects personal data through the following channels:

• Direct collection: Data you provide when registering a p67 account, completing KYC verification, making deposits, requesting withdrawals, contacting support, or communicating with p67 by any means;
• Automated collection: Technical and usage data collected automatically when you access or use p67.one, including via cookies, web beacons, server logs, and similar tracking technologies;
• Third-party sources: Identity verification data received from KYC verification providers; fraud screening data from fraud prevention services; payment verification data from payment processors including JazzCash and Easypaisa;
• Publicly available sources: Where p67 supplements its records with information from publicly available databases for compliance or fraud prevention purposes.

How We Use Your Personal Data

p67 uses the personal data it collects for the following purposes:

To create and maintain your p67 account; to verify your identity and age; to process deposits and withdrawals via JazzCash, Easypaisa, and other accepted payment methods; to operate betting, casino, and gaming services; to manage bonuses and promotions; to communicate with you about your account.

To comply with applicable anti-money laundering (AML) and Know Your Customer (KYC) obligations; to detect and prevent fraud, money laundering, and other criminal activity; to comply with our licensing obligations; to respond to lawful requests from regulatory authorities and law enforcement.

To monitor gaming behaviour for indicators of potential gambling harm; to apply and enforce responsible gaming limits, cooling-off periods, and self-exclusions set by users; to contact users where we identify concerning gaming patterns, in accordance with our responsible gaming obligations.

To detect, investigate, and prevent unauthorised account access, fraudulent transactions, bonus abuse, and other platform integrity violations; to monitor IP addresses and device fingerprints for suspicious activity patterns.

To analyse platform usage patterns and improve p67's products, features, and user experience; to conduct internal research and analytics; to personalise the platform experience where users have opted in to personalisation.

To send promotional offers, PSL betting updates, and other marketing communications to users who have consented to receive such communications. You may withdraw consent for marketing communications at any time by contacting p67 support or using the unsubscribe mechanism in any marketing email sent to you.

Legal Basis for Processing

p67 processes your personal data on the following legal bases:

• Performance of a contract: Processing necessary to provide the p67 platform services to you as a registered account holder, including account management, payment processing, and gaming operations;
• Legal obligation: Processing necessary to comply with our AML, KYC, licensing, and other regulatory obligations;
• Legitimate interests: Processing for fraud prevention, platform security, internal analytics, and platform improvement, where such interests are not overridden by your rights and interests;
• Consent: Processing for marketing communications and optional personalisation features, where your prior consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

Data Sharing & Disclosure

p67 may share your personal data with the following categories of recipients:

• Payment processors: JazzCash, Easypaisa, and other payment service providers strictly for the purpose of processing your deposits and withdrawals;
• KYC and identity verification providers: Third-party identity verification services used to conduct mandatory KYC checks;
• Fraud prevention services: Third-party fraud screening services that help p67 detect and prevent fraudulent activity;
• Game software providers: Where technical data is shared with certified gaming software providers for the purpose of operating casino and betting games on the p67 platform;
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or lawful request from a competent authority;
• Professional advisers: Lawyers, auditors, and other professional advisers where necessary in connection with the operation of the p67 business;
• Business transfers: In the event of a merger, acquisition, or sale of all or part of p67's business, your data may be transferred as part of that transaction, subject to equivalent data protection obligations being imposed on the recipient.

All third-party data processors engaged by p67 are subject to data processing agreements that require them to implement appropriate technical and organisational security measures and to process personal data only on p67's documented instructions.

Cookies & Tracking Technologies

p67 uses cookies and similar tracking technologies on p67.one. Cookies are small text files placed on your device when you access the platform. They serve a number of functions essential to the platform's operation and your user experience.

• Strictly Necessary Cookies: Essential for platform operation — session management, login authentication, security tokens, and fraud prevention. These cookies cannot be disabled without impairing platform functionality;
• Functional Cookies: Remember your preferences — language settings, display options, responsible gaming limit reminders — to improve your experience;
• Analytics Cookies: Collect anonymised usage data about how visitors interact with p67.one, used to improve platform design and content. No personally identifiable information is collected by analytics cookies;
• Marketing Cookies: Used to track whether you have visited p67.one previously in order to deliver more relevant promotional information. Only applied where consent has been given.

You can manage or disable cookies through your web browser settings. Please note that disabling strictly necessary cookies will prevent you from using core p67 platform functions including login and deposit. Detailed browser cookie management instructions are available through your specific browser's help documentation.

Data Security

p67 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and p67 servers;
• Encryption of sensitive data at rest, including financial data and identity documents;
• Access controls restricting personal data access to authorised p67 personnel with a legitimate need to access it;
• Two-factor authentication (2FA) available for all p67 account holders;
• Regular security testing and vulnerability assessments of p67 platform infrastructure;
• Incident response procedures for the detection, investigation, and notification of data security incidents.

Data Retention

p67 retains personal data for the following periods:

• Active account data: For the duration of your p67 account plus a minimum of five (5) years following account closure, to meet regulatory and legal obligations;
• KYC and identity documentation: For the duration of the account plus five (5) years following closure, as required by anti-money laundering regulations;
• Financial transaction records: For a minimum of five (5) years from the date of each transaction, as required by applicable financial regulation;
• Responsible gaming records: For the duration of any self-exclusion or cooling-off period, plus five (5) years thereafter;
• Support communications: For up to three (3) years from the date of the communication, unless a longer period is required for dispute resolution;
• Marketing consent records: For the period of consent plus two (2) years following withdrawal of consent, to demonstrate compliance.

Where retention beyond these periods is required by applicable law or regulatory obligation, p67 will retain data for the period required by that law or regulation. Data that is no longer required will be securely deleted or anonymised.

Your Data Rights

Subject to applicable law and p67's regulatory obligations, you have the following rights in relation to your personal data held by p67:

• Right of Access: You have the right to request a copy of the personal data p67 holds about you. p67 will respond to data access requests within 30 days;
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data p67 holds about you;
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances. This right is subject to p67's legal and regulatory retention obligations — data that must be retained for compliance purposes cannot be deleted on request;
• Right to Data Portability: Where processing is based on consent or contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to Restriction: You have the right to request restriction of processing of your personal data in certain circumstances while a dispute about accuracy or lawfulness is resolved;
• Right to Object: You have the right to object to processing based on legitimate interests. You may also object at any time to processing for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact p67 at [email protected] (plain text — do not click this as a link). p67 may require you to verify your identity before processing your request. p67 will not charge a fee for exercising your rights except in cases of manifestly unfounded or excessive requests, where a reasonable fee may be applied.

International Data Transfers

The p67 platform operates internationally and your personal data may be transferred to, stored in, and processed in countries other than Pakistan. Where such transfers occur to countries that do not have data protection laws equivalent to those in the applicable licensing jurisdiction, p67 will implement appropriate safeguards — such as standard contractual clauses or equivalent contractual protections — to ensure that your personal data receives an adequate level of protection during and following any such transfer.

By using the p67 platform, you acknowledge that your personal data may be transferred internationally for the purposes described in this Policy.

Children's Privacy

Age verification is conducted as part of the mandatory KYC process for all p67 account holders. If you believe a person under 18 has registered on p67 or provided their data to p67, please contact us immediately at [email protected] (plain text — not a link). p67 takes under-age gambling extremely seriously and will take immediate action upon notification.

Third-Party Links

The p67 platform does not contain links to third-party websites for commercial or marketing purposes. To the extent that any links to third-party services are present in connection with p67's gaming software providers or payment processors, p67 is not responsible for the privacy practices of those third parties. Users accessing third-party services should review those services' own privacy policies independently.

Policy Updates

p67 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or p67's data processing practices. When material changes are made, p67 will notify registered users via email and/or via a prominent notice on p67.one at least 7 days before the updated Policy takes effect.

The version number and effective date displayed at the top of this page indicate the currently operative version of the Privacy Policy. The most current version of this Policy is always available at p67.one/privacy-policy. Continued use of the p67 platform after the effective date of any revised Policy constitutes acceptance of the revised Policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or p67's handling of your personal data, please contact our support team:

When submitting a data subject request, please include your registered account email address, a clear description of your request, and a copy of your identity document for verification purposes. p67 will acknowledge receipt of all formal privacy requests within 5 business days and will respond in full within 30 days, except in cases of complexity where an extension may be required.