pk670 Privacy Policy

1 Who We Are

pk670 is an online sports betting and casino platform operating under an international gaming license, serving English-speaking Pakistani users through the domain pk670.app. References in this Privacy Policy to "pk670", "we", "us", and "our" refer to the pk670 platform and its operating entity in its capacity as the data controller responsible for the personal information of all registered Members.

As a licensed gaming operator, pk670 is subject to the data protection and privacy obligations stipulated under its international gaming license. These obligations are incorporated into, and form part of, the standards described in this Policy.

2 Scope of This Policy

This Privacy Policy applies to all personal data collected by pk670 through the following channels:

• The pk670 website accessible at pk670.app and any associated subdomains;
• The pk670 progressive web application (PWA) and any future native mobile applications;
• Direct communications with pk670's customer support team, including Live Chat, email, and any support ticketing system;
• Promotional and marketing communications sent to Members who have opted in to receive them;
• Third-party identity verification, payment processing, and KYC services engaged by pk670 on your behalf.

This Policy does not apply to third-party websites, applications, or services that may be referenced on the pk670 platform. Any external links are provided for informational purposes only, and pk670 is not responsible for the privacy practices of those third parties.

By creating a pk670 account or continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood its contents. If you do not agree with any part of this Policy, you must discontinue use of the Platform and request account closure.

3 Data We Collect

3.1 Registration Data

When you create a pk670 account, we collect the following information:

• Full legal name (as it appears on your government-issued identity document);
• Date of birth (to verify you are 21 years of age or older);
• Email address and mobile phone number;
• Residential address (city, province, and postal code — Pakistan-based addresses only for standard accounts);
• Username and encrypted password (passwords are never stored in plain text).

3.2 Identity Verification (KYC) Data

To comply with our international gaming license obligations and anti-money-laundering (AML) requirements, pk670 may request the following documents at any time:

• A scanned or photographed copy of your CNIC (Computerised National Identity Card), passport, or driving licence;
• A recent proof of address document (utility bill, bank statement, or similar) dated within the last three months;
• Documentation confirming ownership of the payment method used (e.g., JazzCash or EasyPaisa account screenshot, HBL or UBL bank statement);
• Source of funds documentation where deposits exceed defined thresholds under AML policy.

3.3 Transaction Data

pk670 records all financial transactions conducted through the platform, including deposit amounts, withdrawal requests, wagering history, bonus credits, and account balance movements. Transaction data is maintained in PKR and is subject to mandatory retention periods under our gaming license.

3.4 Technical & Device Data

When you access pk670, our systems automatically collect certain technical information, including:

• IP address and approximate geolocation (country and city level);
• Device type, operating system, and browser version;
• Session timestamps, pages visited, and interaction logs;
• Cookie identifiers and similar tracking technologies (see Section 6).

3.5 Communications Data

Any messages, support tickets, Live Chat transcripts, or emails you send to pk670 are retained for customer service quality, dispute resolution, and regulatory audit purposes. Communications data is stored securely and accessible only to authorised pk670 staff.

3.6 Summary of Data Categories

4 How We Use Your Data

pk670 uses the personal data described in Section 3 for the following purposes:

• Account administration: Creating, managing, and securing your pk670 account, including password recovery, two-factor authentication, and session management;
• Identity and age verification: Confirming that you are 21 years of age or older and that your identity matches the details provided at registration;
• Payment processing: Facilitating deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, USDT TRC20, and Retail Cash, as well as processing withdrawal requests to your verified payment method;
• Regulatory compliance: Fulfilling our obligations under our international gaming license, including KYC verification, AML monitoring, responsible gaming reporting, and audit trail maintenance;
• Fraud and security: Detecting and preventing fraudulent account activity, duplicate registrations, money laundering, bonus abuse, and other prohibited conduct outlined in the pk670 Terms and Conditions;
• Customer support: Responding to your queries, resolving disputes, and maintaining service quality records;
• Responsible gaming: Monitoring betting patterns and account activity to identify potential problem gambling behaviour and, where appropriate, proactively applying responsible gaming tools;
• Platform improvement: Analysing aggregated, anonymised usage data to improve the pk670 website, games lobby, and overall user experience;
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates — only to Members who have explicitly opted in to receive such communications. You may opt out at any time.

5 Legal Basis for Processing

pk670 processes your personal data on the following legal grounds:

• Contractual necessity: Processing is required to perform the contract between you and pk670 — i.e., to provide the betting and casino services you have registered to use. This covers account management, payment processing, and service delivery.
• Legal obligation: Processing is required to comply with our international gaming license obligations, including KYC, AML, responsible gaming monitoring, and mandatory data retention requirements.
• Legitimate interests: Processing is necessary for pk670's legitimate business interests, including fraud prevention, platform security, and improvement of services, where those interests are not overridden by your privacy rights.
• Consent: For marketing communications and certain non-essential cookies, pk670 relies on your explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. pk670 uses cookies and similar technologies (including local storage and session identifiers) to operate the platform, remember your preferences, and maintain the security of your session.

6.2 Types of Cookies Used by pk670

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking the service.
• Functional cookies: Remember your language preference, display settings, and responsible gaming configurations (e.g., deposit limits you have set).
• Analytical cookies: Used in aggregate, anonymised form to understand how Members navigate the pk670 platform so we can improve the experience. No personally identifiable data is extracted from analytical cookies.
• Security cookies: Used to detect and prevent fraudulent activity, duplicate logins, and suspicious session behaviour.

6.3 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in or using core platform features. Analytical and functional cookies can be disabled without affecting your ability to place bets or access your account.

7 Third-Party Data Sharing

pk670 shares your personal data with third parties only in the following clearly defined circumstances:

• Payment processors: To facilitate deposits and withdrawals, pk670 shares necessary transaction and identity data with payment service providers including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, and SadaPay. Each provider operates under its own privacy and data security framework.
• KYC and AML service providers: pk670 engages licensed third-party identity verification services to conduct KYC checks. These providers process your identity documents solely for verification purposes and are contractually prohibited from using your data for any other purpose.
• Game software providers: The casino and slots products available on pk670 are supplied by third-party certified game studios. These providers receive anonymised session data to operate game logic; they do not receive your full personal profile.
• Regulatory and law enforcement authorities: pk670 is legally obligated to disclose personal data to gaming regulatory authorities, financial intelligence units, and law enforcement agencies upon receipt of a valid legal request or where required under our gaming license conditions.
• Corporate transactions: In the event of a merger, acquisition, or sale of the pk670 business, Member data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

pk670 does not sell, rent, or otherwise commercially exploit your personal data. All third-party service providers engaged by pk670 are required to implement data security measures consistent with the standards described in this Policy.

8 Data Retention

pk670 retains your personal data for as long as your account is active and for a defined period thereafter, in accordance with our international gaming license obligations and applicable data protection principles.

• Active accounts: All personal data is retained for the full duration of the account relationship.
• Closed accounts: Following account closure, pk670 retains identity, transaction, and KYC data for a minimum of five (5) years to comply with AML, gaming license audit, and tax reporting requirements. This retention period may be extended where a formal investigation or legal dispute is ongoing.
• Marketing data: Where you have opted in to marketing communications, your contact details and communication preferences are retained until you withdraw consent. Upon opt-out, marketing data is suppressed within 30 days.
• Technical logs: Session logs, IP address records, and security event logs are retained for up to 24 months, after which they are deleted or irreversibly anonymised.

Upon expiry of the applicable retention period, pk670 will securely delete or anonymise your personal data in accordance with industry-standard data destruction practices.

9 Data Security

pk670 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• Encryption in transit: All data transmitted between your device and pk670's servers is protected by 256-bit SSL/TLS encryption;
• Encryption at rest: Sensitive personal data, including KYC documents and payment details, is encrypted in storage using AES-256;
• Access controls: Access to pk670's internal systems is restricted to authorised personnel only, managed through role-based access control and multi-factor authentication;
• Password security: Member passwords are stored using one-way cryptographic hashing. pk670 staff cannot view your password in plain text under any circumstances;
• Regular security audits: pk670's platform and data infrastructure are subject to regular penetration testing and security assessments by independent third parties;
• Incident response: In the event of a data breach that poses a material risk to Members, pk670 will notify affected users within 72 hours of becoming aware of the incident, in accordance with our licensing obligations.

While pk670 takes all reasonable steps to protect your data, no internet transmission or storage system is guaranteed to be 100% secure. Members are responsible for maintaining the security of their own login credentials and devices.

10 Your Privacy Rights

As a registered pk670 Member, you hold the following rights in relation to your personal data. To exercise any of these rights, contact pk670's support team via Live Chat or by writing to support at pk670.app:

• Right of access: You may request a copy of all personal data pk670 holds about you. We will respond within 30 days of receiving a verified request.
• Right to rectification: If any personal data pk670 holds about you is inaccurate or incomplete, you have the right to request its correction. Minor corrections (such as email address updates) can be made directly through your account settings panel.
• Right to erasure: You may request deletion of your personal data. This right is subject to pk670's mandatory retention obligations under its gaming license; data that must be retained for regulatory purposes cannot be deleted ahead of the applicable retention period.
• Right to restrict processing: In certain circumstances, you may request that pk670 limit the processing of your data while a rectification or objection request is being assessed.
• Right to data portability: You may request a structured, machine-readable copy of the personal data you provided to pk670, where technically feasible.
• Right to object: You may object to processing based on legitimate interests, including direct marketing. Objections to marketing will be actioned immediately; other objections will be assessed on a case-by-case basis.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

11 Children & Minors

The pk670 platform is strictly restricted to individuals aged 21 years and older. pk670 does not knowingly collect personal data from anyone below this age. Age verification is a mandatory step in the registration process, and KYC checks are used to confirm compliance.

If pk670 discovers or is notified that personal data has been collected from an individual under the age of 21, the relevant account will be immediately closed, all associated funds will be handled in accordance with the Terms and Conditions, and the personal data of the underage individual will be deleted as promptly as legally permissible.

Parents or guardians who believe a minor has registered a pk670 account should contact support immediately via Live Chat or at support at pk670.app. pk670 takes underage gambling extremely seriously and cooperates fully with responsible gaming investigations.

12 International Data Transfers

pk670 operates under an international gaming license, and certain data processing activities — including KYC verification, game server operations, and security infrastructure — may involve the transfer of personal data to servers or service providers located outside Pakistan.

Where such transfers occur, pk670 ensures that appropriate safeguards are in place, including:

• Contractual data processing agreements with all third-party processors that impose data security and confidentiality obligations equivalent to those described in this Policy;
• Transfers only to jurisdictions or processors that provide an adequate level of data protection as determined by our licensing authority;
• Encryption of all data in transit across international networks.

pk670 does not transfer personal data to countries or entities that do not meet these standards. If you have questions about the specific jurisdictions to which your data may be transferred, contact us at support at pk670.app.

13 Policy Amendments

pk670 reserves the right to update or revise this Privacy Policy at any time. Where amendments are made, the updated version will be published on this page with a revised "Last updated" date. Where changes are material — meaning they significantly affect how your data is used or your rights as a Member — pk670 will notify registered Members via the email address on file at least 14 days before the changes take effect.

Continued use of the pk670 platform after the effective date of any revised Policy constitutes acceptance of the updated terms. If you do not agree with any revisions, you must close your account before the effective date.

It is your responsibility to check this page periodically. The date at the top of this Policy indicates when it was last revised.

14 Contact & Complaints

For any questions, concerns, or formal requests relating to this Privacy Policy or the way pk670 handles your personal data, you may reach us through the following channels:

• Email: support at pk670.app (plain text — not a clickable link)
• Live Chat: Available 24/7 directly within the pk670 platform after login

pk670 aims to acknowledge all privacy-related requests within 5 business days and to resolve them fully within 30 days. If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant supervisory authority under our gaming license jurisdiction.