Privacy Policy

1. Introduction

This Privacy Policy ("Policy") explains how pl67, accessible at pl67.cam ("Platform", "we", "us", "our"), collects, uses, stores, shares and protects the personal data of individuals ("User", "you") who access or use our services. pl67 is an English-language online gambling information platform serving users in Pakistan and other jurisdictions.

We take your privacy seriously. This Policy is written in plain, professional English to ensure that every pl67 user — whether based in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar or elsewhere — clearly understands how their information is handled.

By registering an account, accessing the Platform or otherwise using our services, you acknowledge that you have read and understood this Policy. This Policy should be read alongside our Terms & Conditions. In the event of any conflict between this Policy and a separate data processing agreement, the separate agreement shall prevail in respect of its subject matter.

2. Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure or deletion.
• "Data Controller" means pl67, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of pl67, under our instructions and pursuant to a data processing agreement.
• "Consent" means a freely given, specific, informed and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "Cookies" means small data files placed on your device by the Platform to store session information and usage preferences.
• "KYC" means Know Your Customer — the identity and age verification process required under applicable regulations.
• "AML" means Anti-Money Laundering — the set of regulatory obligations applicable to financial services operators.

3. Data We Collect

pl67 collects the following categories of Personal Data, depending on your level of engagement with the Platform:

3.1 Data You Provide Directly

• Registration details: full legal name, date of birth, email address, phone number and chosen username;
• KYC documents: Pakistani CNIC, passport, proof of address and, where required, source-of-funds documentation;
• Financial details: deposit and withdrawal preferences, transaction records and payment method information (e.g., bank account or mobile wallet references including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah — referenced as contextual identifiers only);
• Communications: support tickets, chat transcripts, email enquiries and feedback submitted through the Platform.

3.2 Data Collected Automatically

• Technical data: IP address, browser type and version, operating system, device type, screen resolution and time zone;
• Usage data: pages visited, games accessed, bets placed, session start/end times and responsible gambling tool interactions;
• Cookie and tracker data: session identifiers, preference settings and analytical event data as described in Section 9.

3.3 Data from Third Parties

• Identity verification results from licensed KYC service providers;
• Fraud and risk signals from anti-fraud screening services;
• Payment status confirmations from payment processing partners.

4. How We Collect Data

We collect your Personal Data through the following channels:

• Account registration: when you complete the sign-up form on the Platform;
• KYC submission: when you upload identity and address documents through the secure verification portal;
• Transactions: when you make deposits, request withdrawals or claim bonuses;
• Platform interaction: automatically as you browse pages, launch games or use Platform features — via cookies, server logs and similar technologies;
• Customer support: when you contact us by email or live chat;
• Third-party services: when our verification or fraud-screening partners share data with us as part of a compliance check.

5. Data Processing Purposes

We process your Personal Data for the following purposes:

6. Legal Basis for Processing

Where applicable data protection law requires a legal basis for processing Personal Data, pl67 relies on the following:

• Contract performance: processing necessary to provide the services you have requested, including account management, transaction processing and KYC;
• Legal obligation: processing required to comply with applicable AML, licensing and regulatory requirements;
• Legitimate interests: processing necessary for fraud prevention, Platform security and aggregate analytics, where those interests are not overridden by your rights;
• Consent: processing for direct marketing communications and non-essential cookies, where you have provided explicit, freely given consent.

Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing prior to withdrawal. Withdrawal of consent may limit your access to certain Platform features.

7. Data Sharing & Disclosure

7.1 Service Partners

We share your Personal Data with trusted third-party service providers who assist us in operating the Platform, including:

• Identity verification and KYC service providers;
• Payment processing partners (payment method references such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are contextual only — actual payment processing is subject to each provider's own privacy policy);
• Cloud infrastructure and hosting providers;
• Fraud detection and anti-money laundering screening services;
• Customer support platform providers.

All service partners are bound by contractual data processing agreements that restrict the use of your data to the specific services they provide on our behalf.

7.2 Legal & Regulatory Disclosure

We may disclose your Personal Data to competent authorities, regulators or law enforcement agencies where required by applicable law, a court order or a lawful regulatory demand. We will notify you of such disclosures where we are legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of our business, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections. We will notify affected users in advance where practicable.

7.4 No Sale of Personal Data

pl67 does not sell, rent or trade your Personal Data to unrelated third parties for their independent marketing or commercial purposes.

8. Data Retention

We retain your Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be attributed to you.

9. Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device when you visit the Platform. They allow the Platform to remember your session, preferences and usage patterns across pages and visits.

9.2 Categories of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These enable session management, authentication and security controls. They cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences — such as language settings, responsible gambling tool configurations and display preferences — to personalise your experience.
• Analytical Cookies: Collect aggregated, anonymised data about how users interact with the Platform — such as pages most visited, session durations and error events — to help us improve the service.
• Marketing Cookies (with consent only): Track your interactions to deliver relevant promotional content. These are only set if you have given explicit consent.

9.3 Managing Cookies

You can control and delete cookies through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use core Platform features. Detailed instructions for managing cookies are available in the help documentation of all major browsers.

10. Your Rights

Subject to applicable law, you have the following rights in respect of your Personal Data held by pl67:

• Right of Access: Request a copy of the Personal Data we hold about you, along with information on how it is processed.
• Right to Rectification: Request correction of inaccurate or incomplete Personal Data.
• Right to Erasure: Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Restriction: Request that we restrict processing of your Personal Data in certain circumstances, such as while a dispute is under investigation.
• Right to Data Portability: Receive a copy of Personal Data you have provided to us in a structured, commonly used, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting prior lawful processing.

To exercise any of these rights, contact our support team at [email protected]. We will respond within 30 days of receiving a verifiable request. We may need to verify your identity before processing a rights request to protect your account security.

11. Security Measures

pl67 implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data fields at rest within our databases;
• Role-based access controls limiting staff access to Personal Data on a strict need-to-know basis;
• Regular security assessments, penetration testing and vulnerability scanning;
• Incident response procedures for detecting, reporting and managing data security events.

While we take all reasonable precautions, no internet-based system is completely immune to risk. You are responsible for maintaining the security of your account credentials and for notifying us immediately if you suspect unauthorised access to your account.

12. Minors' Privacy

pl67 is strictly an adults-only platform. We do not knowingly collect or process Personal Data from individuals under the age of 18 — or the higher minimum age required by the operator's licensing jurisdiction. Age verification is conducted as part of the KYC process for all users.

If we become aware that Personal Data has been collected from a minor without verifiable parental consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor has accessed the Platform using your account details, please contact our support team immediately and consider enabling parental control software on shared devices.

13. International Data Transfers

pl67 operates internationally and may transfer your Personal Data to countries outside your country of residence — including countries outside Pakistan — in connection with the services provided by our technology and compliance partners. Such transfers may occur to countries that have different data protection standards from those in Pakistan or your jurisdiction of residence.

Where we transfer Personal Data internationally, we implement appropriate safeguards, which may include: standard contractual clauses; data processing agreements with binding data protection obligations; or transfers to recipients in jurisdictions deemed to provide an adequate level of data protection by the relevant supervisory authority.

By using the Platform, you acknowledge that your Personal Data may be transferred internationally as described in this Policy.

14. Policy Amendments

We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or Platform functionality. When we make material changes, we will update the "Effective Date" at the top of this page and, where practicable, notify you by email or by displaying a notice on the Platform.

Your continued use of the Platform following publication of a revised Policy constitutes your acceptance of the changes. If you do not agree to any updated Policy, you must stop using the Platform and may request account closure in accordance with our Terms & Conditions.

We encourage you to review this Policy periodically to stay informed about how we protect your information.

15. Contact Us

If you have any questions, concerns or complaints about this Privacy Policy or the way we handle your Personal Data, please contact our Data Protection team using the details below. We take all privacy enquiries seriously and aim to respond within 30 days.

Email: [email protected] (plain text only — not a clickable link)

When contacting us about a data rights request or privacy concern, please include "Privacy Request" in the subject line of your message and provide sufficient detail for us to identify your account securely. We may need to verify your identity before processing your request.

Our support team is available 24 hours a day, 7 days a week. Assistance is available in English.