Privacy Policy for zk67 —
Your Data, Your Rights

This Privacy Policy is issued by zk67 ("we", "us", "our") and applies to all players, registered account holders, and visitors who access or use the zk67 platform at https://zk67.vip, including all sub-pages, features, games, and services offered through it.

This policy sets out how zk67 collects, processes, stores, shares, and protects your personal data in connection with your use of our platform. It also describes the rights you hold in relation to your personal data and how you can exercise those rights.

By registering an account, making a deposit, placing a bet, or otherwise using the zk67 platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and use of your information as described herein. If you do not agree with any part of this policy, please discontinue use of the platform and contact our support team to close your account.

zk67 collects several categories of personal data in order to operate our platform, verify player identities, process payments, and comply with our legal obligations. The categories of data we collect are as follows:

zk67 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly necessary for age verification purposes.

zk67 collects your personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting our support team, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically as you navigate and interact with the platform, including via cookies, log files, and session tracking technologies (see Section 9 for cookie details).
• Third-party sources: Identity verification data received from KYC/AML service providers who help us confirm the authenticity of documents you have submitted. Payment confirmation data received from payment processors such as JazzCash and EasyPaisa. Fraud signal data from our licensed fraud-detection partners.
• Device permissions: If you access zk67 via a mobile browser, we may request access to certain device features (such as camera access for liveness verification) solely for the purpose for which permission is requested.

zk67 uses the personal data we collect for the following purposes:

• Account creation and management: To register your account, authenticate your identity at login, maintain your account preferences, and deliver the core features of the zk67 platform to you.
• Identity and age verification: To confirm that you meet the 21+ age requirement and that the information you have provided is accurate, genuine, and not duplicated across multiple accounts.
• Payment processing: To process deposits and withdrawals via your chosen payment method, to reconcile transactions, and to ensure that payments are directed only to verified payment methods registered in your name.
• Anti-money laundering (AML) and fraud prevention: To monitor account activity for patterns consistent with money laundering, terrorist financing, bonus abuse, multi-accounting, or other prohibited conduct as defined in the zk67 Terms & Conditions.
• Customer support: To respond to your queries, resolve disputes, process complaints, and maintain records of our interactions for quality assurance and training purposes.
• Responsible gaming: To monitor your gaming behaviour for indicators of problem gambling, to apply deposit limits or cooling-off periods you have requested, and to enforce any self-exclusion you have initiated.
• Marketing and promotions: To send you information about zk67 offers, bonuses, PSL promotions, and new features — but only where you have explicitly opted in to marketing communications.
• Legal and regulatory compliance: To fulfil our obligations under applicable international gaming regulations, including maintaining records required by our licensing framework and responding to lawful requests from regulatory or law enforcement authorities.
• Platform improvement: To analyse aggregated usage patterns, identify bugs, optimise performance, and develop new features that improve the player experience across Pakistan.

zk67 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing is necessary to perform the contract between you and zk67 — for example, operating your account, processing deposits, settling bets, and facilitating withdrawals.
• Legal obligation: Processing is necessary to comply with a legal obligation applicable to zk67 — for example, KYC identity verification, AML transaction monitoring, and record-keeping requirements under our international gaming licence.
• Legitimate interests: Processing is necessary for zk67's legitimate interests, provided those interests are not overridden by your rights and interests — for example, fraud detection, platform security, and analytics to improve the player experience.
• Consent: Where processing is based on consent — specifically marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Consent withdrawal does not affect your ability to use the platform or access your account.

zk67 does not sell your personal data. We share your data only in the following circumstances and only with the categories of recipients described below:

• KYC and identity verification providers: Third-party identity verification services that assist us in authenticating CNIC documents, conducting liveness checks, and screening against sanctions and PEP (politically exposed persons) lists. These providers act as data processors under contractual obligations consistent with this Privacy Policy.
• Payment processors: Payment service providers including JazzCash, EasyPaisa, SadaPay, Raast, and banking partners (HBL, UBL, Meezan Bank, Allied Bank) receive the minimum financial data necessary to process your deposit or withdrawal transaction. USDT wallet addresses are shared with blockchain network infrastructure for on-chain transaction execution.
• Game providers: Licensed game providers (including Evolution, Pragmatic Play, PG Soft, and Ezugi) receive a pseudonymous player identifier to facilitate your participation in their games. These providers do not receive your full identity data, CNIC details, or payment information.
• IT infrastructure and security providers: Cloud hosting, content delivery network (CDN), DDoS protection, and cybersecurity service providers who process data solely to deliver and protect our platform infrastructure.
• Regulatory and law enforcement authorities: Where required by law, court order, or a lawful request from a competent regulatory authority, zk67 may be obligated to disclose player data. We will notify you of such disclosure requests to the extent permitted by applicable law.
• Professional advisers: Legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations and who require access to data in the course of providing their services to zk67.

All third-party data processors engaged by zk67 are contractually required to process personal data only in accordance with zk67's documented instructions and to implement appropriate technical and organisational security measures.

zk67 operates as an internationally licensed platform and uses service providers whose data processing infrastructure may be located outside Pakistan. Categories of data that may be transferred internationally include account data (for cloud hosting purposes), transaction data (for payment processing), and game session data (for game provider integrations).

Where personal data is transferred to countries that may not provide the same level of data protection as Pakistan, zk67 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses requiring the receiving party to protect data to an equivalent standard.
• Binding corporate rules where the receiving entity is part of the same corporate group as our service provider.
• Adequacy decisions or equivalent regulatory frameworks recognised in the jurisdiction of the receiving party.

You may request further information about the specific safeguards applied to international transfers of your data by contacting our Data Protection team at [email protected].

zk67 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account and identity data (including KYC documents): Retained for the duration of your active account plus a minimum of 5 years following account closure, in accordance with our anti-money laundering record-keeping obligations.
• Transaction and financial data: Retained for a minimum of 5 years from the date of the transaction, consistent with financial record-keeping requirements applicable under our international gaming licence.
• Responsible gaming records: Self-exclusion records and problem-gambling intervention records are retained for a minimum of 7 years to prevent re-registration in breach of an active exclusion.
• Customer support communications: Retained for 3 years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Marketing consent records: Retained for as long as you remain opted in to marketing, plus 3 years following opt-out, to demonstrate compliance with consent requirements.
• Technical and usage data: Generally retained in identifiable form for up to 13 months, after which data is aggregated and anonymised for analytical purposes.

zk67 uses cookies and similar tracking technologies (including session tokens, local storage objects, and pixel tags) to operate the platform, maintain your logged-in session, remember your preferences, and collect analytics data. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as preferred language, odds display format, and notification settings. These improve your experience but are not essential.
• Analytics Cookies: Collect anonymised or pseudonymised data about how players navigate the platform — pages visited, session duration, and interaction patterns. Used to improve platform design and performance.
• Security and Fraud Prevention Cookies: Used to detect and prevent bot activity, credential stuffing, and other malicious behaviour directed at player accounts.

zk67 does not use third-party advertising cookies or cross-site tracking technologies. All cookies used on zk67 serve a functional, analytical, or security purpose directly related to the operation of the platform.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use core platform features. Disabling analytics cookies will not affect your gameplay experience.

zk67 recognises and respects your rights over your personal data. The following rights are available to all zk67 players:

To exercise any of the rights listed above, please contact zk67 via live chat or email at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request and will respond within 30 days. Complex or multiple requests may take up to 60 days, in which case we will notify you of the extended timeline.

zk67 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• Encryption: AES-256 encryption for data at rest; TLS 1.3 for all data transmitted between your device and our servers. All passwords are hashed using a salted bcrypt algorithm — we never store plaintext passwords.
• Access controls: Personal data is accessible only to zk67 staff who require it to perform their specific job function. Access is granted on a least-privilege basis and is subject to regular audit and review.
• Two-factor authentication: zk67 supports and encourages the use of SMS OTP two-factor authentication on all player accounts to protect against unauthorised login attempts.
• Infrastructure security: Our platform infrastructure is hosted behind enterprise-grade firewalls with continuous intrusion detection monitoring, DDoS protection, and automated vulnerability scanning.
• Penetration testing: zk67 conducts regular third-party penetration testing of its platform and resolves identified vulnerabilities within a risk-based remediation timeline.
• Staff training: All zk67 staff who handle personal data receive mandatory data protection and security training as part of their onboarding and on an annual basis thereafter.
• Incident response: zk67 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights, we will notify affected players without undue delay.

The zk67 platform is strictly intended for adults aged 21 and above. zk67 does not knowingly collect personal data from individuals under the age of 21. Age verification is enforced through our CNIC-based KYC process, which all registered players must complete before withdrawals are enabled.

If zk67 becomes aware that personal data has been collected from an individual who is under the age of 21, we will immediately suspend the relevant account, delete the personal data associated with it to the extent permitted by law, and — where applicable — notify relevant authorities.

If you are a parent or guardian and you believe that your child under 21 has registered on the zk67 platform, please contact us immediately at [email protected] so that we can take prompt action.

We strongly recommend that parents and guardians install device-level parental controls on all devices accessible to minors to prevent accidental or intentional access to gambling platforms.

The zk67 platform integrates with third-party services that are necessary for delivering our full range of features. These include licensed game providers, payment processors, KYC verification platforms, and infrastructure service providers.

Each of these third parties operates under its own privacy policy and data processing terms in addition to the contractual obligations they hold with zk67. While we take care to engage only reputable, security-conscious service providers, zk67 is not responsible for the independent privacy practices of third-party services beyond the contractual safeguards we impose on them.

Importantly, the zk67 platform does not contain links to unaffiliated third-party websites. We do not embed third-party advertising networks, social media tracking pixels, or external analytics platforms that would result in your data being shared with parties outside the zk67 service ecosystem.

zk67 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes to applicable law or regulatory requirements, or the introduction of new platform features. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision.

Where changes are material — that is, where they significantly affect how we process your personal data or the rights available to you — zk67 will notify registered players by email or via an in-platform notification prior to the changes taking effect. We may also require you to re-confirm your consent where the changes affect processing activities based on consent.

For minor or non-material amendments (such as corrections to wording, formatting changes, or clarifications that do not alter the substance of the policy), we will update the document without individual notification. We encourage you to review this page periodically to stay informed of how zk67 handles your personal data.

Your continued use of the zk67 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms, provided that material changes are communicated in advance as described above.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data zk67 holds about you, please contact our team using the following channels:

• Live Chat: Available 24/7 inside your account dashboard — the fastest way to reach our support team for privacy-related queries.
• Email: [email protected] — please use the subject line "Privacy Policy Query" or "Data Rights Request" as appropriate so we can route your message to the correct team.

zk67's support team includes staff familiar with the specific data protection concerns relevant to Pakistani players, including questions about CNIC handling, JazzCash and EasyPaisa payment data, and KYC document management. We are available to assist players from Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and across Pakistan around the clock.