Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how pa67 ("pa67", "we", "us", "our") collects, uses, stores, shares and protects personal data relating to individuals ("User", "you", "your") who access or use the pa67 platform at https://pa67.cam, including any associated mobile interfaces or services operated under the pa67 brand.

pa67 is an English-language online casino and sports betting information platform designed for Pakistani users. It covers cricket betting markets, PSL and ICC tournament wagering, live casino games, slots and associated entertainment content — with a PKR-friendly display and a mobile-first layout built for players across Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.

By accessing and using pa67, you acknowledge that you have read, understood and agree to the data practices described in this Policy. Where your consent is required for a specific processing activity, we will request it explicitly and separately.

Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, phone number, device identifiers, IP address and financial account references.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, pa67 and/or the Operator whose platform pa67 interfaces with.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of the Data Controller under a binding data-processing agreement.
• "Consent" means a freely given, specific, informed and unambiguous indication of your wishes, expressed by a clear affirmative action, by which you agree to the processing of your Personal Data for a stated purpose.
• "Cookie" means a small text file placed on your device by pa67 or a trusted third-party service when you visit the Platform, used to maintain session state, remember preferences or gather usage analytics.
• "KYC" means Know Your Customer — the identity verification process used to confirm a User's identity in compliance with anti-money laundering obligations.
• "Platform" means the pa67 website at https://pa67.cam, associated subdomains and any mobile-optimised versions of the service.

Data We Collect

pa67 collects Personal Data through direct interactions (such as account registration and support correspondence), automated technical means (such as cookies and server logs), and, where applicable, from third-party identity verification or payment-processing partners. The categories of data collected include:

3.1 Registration & Identity Data

When you register an account, we collect your full legal name, date of birth, residential address, email address, phone number and preferred currency. For Pakistani users, this may include a Pakistani national identity card (CNIC) number where required for KYC verification. This data is necessary to create and administer your account and to comply with applicable regulatory obligations.

3.2 Financial Data

To process deposits and withdrawals, we collect payment-method references such as mobile wallet identifiers (e.g., Easypaisa or JazzCash account numbers used as references), Raast ID references, or bank account details linked to HBL, UBL, Meezan Bank or Bank Alfalah. We do not store full card numbers on our servers — such data is processed directly by our PCI-DSS compliant payment processors. These references are collected as operational context only and do not imply any endorsement or affiliation with the named providers.

3.3 Technical & Usage Data

We automatically collect device and network data when you access the Platform, including IP address, browser type and version, operating system, screen resolution, referring URL, pages visited, time spent on each page, click-path data and session duration. This data is used for platform security, fraud prevention and aggregate performance analysis.

3.4 Communications Data

If you contact our support team — whether by email at [email protected], live chat or any other channel — we retain records of that correspondence, including message content, timestamps and any attachments, for quality assurance, dispute resolution and regulatory compliance purposes.

3.5 Responsible Gambling Data

Where you make use of responsible gambling tools — such as deposit limits, session time reminders or self-exclusion — we record the settings applied and dates of activation. This data is essential to honour your self-management preferences and to meet our duty-of-care obligations.

Data Processing

We process your Personal Data only for the purposes stated in this Policy and only to the extent necessary to fulfil those purposes. The primary purposes for which pa67 processes Personal Data are:

• Account Management: Creating, maintaining and administering your account, including authentication, profile updates and account-closure processing.
• Service Delivery: Enabling access to betting markets, casino games, live dealer content, odds feeds and all other Platform features.
• Payment Processing: Facilitating deposits and withdrawal requests through the Operator's cashier system, including currency handling for PKR-denominated accounts.
• KYC & AML Compliance: Verifying your identity and monitoring transactions for suspicious activity in accordance with applicable anti-money laundering and counter-terrorism financing obligations.
• Customer Support: Responding to your queries, complaints and feedback in a timely and accurate manner.
• Platform Security: Detecting, preventing and investigating fraud, bonus abuse, collusion, account takeover attempts and other harmful activity.
• Responsible Gambling: Applying and honouring the deposit limits, loss limits, time limits and self-exclusion preferences you have set on your account.
• Marketing Communications: Sending you promotional offers, bonus notifications and news updates — only where you have provided your explicit consent or where a legitimate-interest basis applies, and always with a clear unsubscribe mechanism.
• Legal Obligations: Fulfilling record-keeping, reporting and disclosure obligations imposed by applicable law, regulatory directives or lawful court orders.

Legal Basis for Processing

Every processing activity carried out by pa67 rests on one of the following recognised legal bases. The table below maps our principal processing purposes to their applicable legal basis:

Data Sharing & Disclosure

pa67 does not sell, rent or trade your Personal Data to third parties for their own commercial purposes. We may share your data only in the limited circumstances described below:

6.1 Operator & Platform Partners

Where pa67 interfaces with an underlying licensed Operator's platform, your registration data, KYC documents and transaction records are shared with that Operator to the extent necessary for account creation, payment processing and regulatory compliance. The Operator is bound by its own privacy obligations under its applicable licensing framework.

6.2 Identity Verification Providers

We engage specialist KYC providers to verify the identity documents you submit during account registration. These providers process your identity data solely for verification purposes under binding data-processing agreements and are not permitted to use your data for any other purpose.

6.3 Payment Processors

Transaction data is shared with payment processors to facilitate deposits and withdrawals. Payment processors handle financial data under the PCI-DSS security standard and applicable financial regulation. References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are provided as contextual familiarity for Pakistani users; their inclusion does not imply affiliation with or endorsement by those institutions.

6.4 Legal & Regulatory Authorities

We may disclose Personal Data to law-enforcement agencies, regulatory bodies, courts or other governmental authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property or safety of pa67, its users or third parties.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring or sale of assets involving pa67, Personal Data held by pa67 may be transferred to the acquiring entity as part of that transaction. You will be notified via the Platform before your data becomes subject to a materially different privacy policy.

Cookies & Tracking Technologies

pa67 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your session, to remember your preferences and to generate aggregate analytics data that helps us improve the user experience for players across Pakistan.

7.1 Cookie Categories

7.2 Managing Cookies

You can manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to block, delete or audit cookies stored on your device. Please note that disabling strictly necessary cookies may impair core Platform functionality, including login persistence and session security. Disabling analytics or marketing cookies will not affect your ability to use betting or casino features.

Data Retention

pa67 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law, regulatory obligation or legitimate business need. The key retention periods applicable to different categories of data are summarised below:

• Account & Identity Data: Retained for the duration of your account, and for a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in line with financial record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.
• Support Correspondence: Retained for three (3) years from the date of the last interaction, unless the content is relevant to an ongoing dispute or legal proceeding.
• Technical & Usage Logs: Retained for up to twelve (12) months, after which they are anonymised or deleted.
• Marketing Consent Records: Retained for the duration of your active consent, plus three (3) years following withdrawal, to evidence the consent history.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

Your Rights as a User

Subject to applicable law and regulatory limitations, you hold the following rights in relation to your Personal Data held by pa67. To exercise any of these rights, please contact us at [email protected] with your full name, registered email address and a clear description of your request.

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about the purposes for which it is processed, the categories of data involved and the recipients to whom it has been disclosed.
• Right to Rectification: If any of your Personal Data is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where consent has been withdrawn, or where processing is otherwise unlawful. This right is subject to overriding legal and regulatory retention obligations.
• Right to Restriction: You may request that we restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interest at any time. You have an absolute right to object to the use of your Personal Data for direct marketing purposes.
• Right to Withdraw Consent: Where processing relies on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

Data Security

pa67 implements a layered set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• Transport Layer Security (TLS 1.2 or higher) encryption for all data in transit between your device and our servers.
• Encryption of sensitive data fields at rest using current industry-standard algorithms.
• Role-based access controls ensuring that only authorised personnel with a legitimate need-to-know basis can access Personal Data.
• Regular internal security audits and vulnerability assessments of Platform infrastructure.
• Two-factor authentication (2FA) requirements for administrative access to data systems.
• Incident response procedures designed to detect, contain and notify affected Users of any personal data breach within the timeframes required by applicable law.

Despite these measures, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account password and for using a secure network when accessing pa67. If you suspect that your account has been compromised, contact us immediately at [email protected].

Minors & Age Restriction

pa67 is strictly intended for adults aged 18 years or older, or the higher minimum age required by the Operator or the applicable license jurisdiction. We do not knowingly collect Personal Data from individuals below the applicable minimum age.

Where we discover or have reasonable grounds to believe that Personal Data has been provided by a minor — whether through misrepresentation of age at registration or any other means — we will promptly suspend the associated account, investigate the circumstances, delete or restrict the data as appropriate, and forfeit any associated account balance in accordance with our Terms & Conditions.

International Data Transfers

pa67 is an internationally operated platform. In the course of delivering our services, your Personal Data may be transferred to, stored in, or processed in countries outside Pakistan. These countries may have data-protection laws that differ from those in Pakistan.

Where such transfers take place, we ensure that appropriate safeguards are in place to protect your data, including: contractual clauses that impose equivalent data-protection standards on recipients, transfers only to jurisdictions with recognised adequate protections, or transfers necessary to perform a contract between you and pa67 (e.g., processing a payment through an internationally located processor).

By using pa67, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Pakistan where necessary for the operation of the Platform and the delivery of its services.

Amendments to This Policy

pa67 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — for example, modifications to how we share data, the categories of data we collect, or your rights — we will notify registered Users via a prominent Platform announcement or a direct communication to the email address on file, prior to the change taking effect.

The "Last Updated" date at the top of this document reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how we protect your data. Continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of the updated terms.

Previous versions of this Policy are available on request by contacting [email protected].

Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or your Personal Data held by pa67, please reach out using the details below. All correspondence must be submitted in English. Our support team operates on Pakistan Standard Time (PST, UTC+5).