Privacy Policy – pk68login Data Protection & User Rights

pk68login is an online gaming and sports betting platform operating at pk68login.bet. For the purposes of data protection, pk68login is the data controller — meaning we are responsible for how your personal data is collected, stored and used.

This Privacy Policy applies to all users of the pk68login website and platform, including visitors who have not registered an account and registered players who actively use the gaming services. If you are using pk68login from within Pakistan, this policy governs how your data is handled.

This policy should be read alongside the pk68login Terms and Conditions, which together form the full legal framework governing your relationship with pk68login.

pk68login collects only the personal data that is genuinely needed to operate your account, process your transactions and keep the platform safe and compliant. We do not collect data for the sake of it. Below is a breakdown of the categories of data we hold:

pk68login collects personal data through the following channels:

• Direct submission: When you fill in the registration form, complete identity verification, make a deposit or withdrawal, contact customer support or respond to a promotion on pk68login.
• Automated collection: When you browse or use the pk68login platform, our servers and analytics tools automatically log technical data including your IP address, device information and navigation behaviour. This happens on every page visit, whether or not you are logged in.
• Third-party verification services: When you submit identity documents for KYC verification, pk68login may use a third-party identity verification provider to confirm the authenticity of the documents. That provider returns a verification result to pk68login — we do not receive or store raw biometric data from this process.
• Payment processors: When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay or other methods, the payment processor confirms the transaction reference and amount. pk68login receives confirmation data but not your full wallet credentials or banking PIN.
• Game providers: When you play a game from a third-party provider integrated into pk68login, that provider may collect gameplay data directly. This is governed by the provider's own data handling practices.

pk68login uses your personal data for the following specific purposes. For each purpose, there is a clear legal basis — we do not process data without a legitimate reason:

• Account management: To create, maintain and secure your pk68login account. Legal basis: contract performance.
• Transaction processing: To process deposits, withdrawals and internal account transfers in PKR. Legal basis: contract performance.
• Identity verification (KYC): To confirm your age, identity and the source of your funds, as required under anti-money-laundering obligations. Legal basis: legal compliance.
• Fraud prevention and security: To detect and prevent fraudulent account activity, collusion, bot usage and money laundering. Legal basis: legitimate interest and legal compliance.
• Responsible gaming: To monitor gambling patterns that may indicate problem gambling, to enforce deposit limits and self-exclusion requests, and to send welfare check messages where appropriate. Legal basis: legal compliance and legitimate interest.
• Customer support: To respond to your queries, process complaints and maintain a record of support interactions. Legal basis: contract performance.
• Platform improvement: To analyse usage patterns in order to improve the pk68login platform, fix bugs and develop new features. Legal basis: legitimate interest. All such analysis uses aggregated or anonymised data wherever possible.
• Marketing communications: To send you promotional offers, bonus notifications and platform news, where you have consented or where we have a legitimate interest based on your existing relationship with pk68login. You can opt out at any time.

pk68login does not sell your personal data to third parties. We share data only in the following limited and controlled circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay and card payment processors receive the transaction data necessary to process your deposit or withdrawal. They do not receive your gaming history or other account data.
• Identity verification providers: Third-party KYC service providers receive your identity documents and name for the sole purpose of confirming your identity. They are contractually prohibited from using this data for any other purpose.
• Game providers: When you play a game, the relevant provider receives your account identifier and gameplay data. Game providers integrated into pk68login are required to meet our data protection standards as a condition of their integration.
• Regulatory and legal authorities: If required by applicable law or by a valid order from a competent authority, pk68login may be obliged to disclose certain account or transaction data. We will inform you if this occurs unless we are legally prohibited from doing so.
• Anti-fraud networks: pk68login participates in responsible gaming and fraud prevention networks. Where required, we may share flagged account data with these networks to prevent serious harm. This is done under strict data sharing agreements.
• Technology and hosting providers: Our servers, databases and software infrastructure are operated by third-party technology providers who process data on our behalf under binding data processing agreements.

pk68login uses cookies and similar tracking technologies to ensure the platform works correctly and to understand how players use the site. Here is a breakdown of the types of cookies we use:

Most modern browsers allow you to block or delete cookies through your settings. Note that disabling essential cookies may mean some parts of pk68login no longer function correctly. Analytics and marketing cookies can be disabled without affecting your core gaming experience.

pk68login does not use fingerprinting technologies designed to re-identify users who have cleared their cookies, except as part of anti-fraud monitoring where there is a specific security reason to do so.

pk68login retains personal data for as long as it is needed for the purpose for which it was collected, or as long as required by applicable legal obligations. The following retention periods apply:

• Active account data: Held for the duration of your account relationship with pk68login plus an additional 5 years after account closure, to comply with anti-money-laundering record-keeping requirements.
• Financial transaction records: A minimum of 5 years from the date of each transaction, as required under applicable financial regulations.
• Identity verification documents: Retained for a minimum of 5 years after account closure or the last transaction, whichever is later.
• Customer support communications: Retained for 2 years from the date of each interaction, to support dispute resolution and service improvement.
• Technical and usage logs: Typically retained for 12 months. Aggregated, anonymised analytics data may be retained indefinitely.
• Marketing consent records: Retained for as long as the consent is active, plus 1 year after opt-out to demonstrate compliance.

After the applicable retention period, personal data is securely deleted or irreversibly anonymised. Deletion requests from users may be fulfilled ahead of schedule where there is no legal obligation requiring us to retain the data.

Protecting your personal data is a technical and operational priority for pk68login. The following security measures are in place at all times:

• 256-bit SSL/TLS encryption: All data transmitted between your device and pk68login servers is encrypted using industry-standard SSL/TLS protocols. This applies to the website, the gaming client and all API communications with payment processors and game providers.
• Encrypted data storage: Sensitive data fields — including identity document references, financial account references and passwords — are encrypted at rest in our database. Passwords are stored as salted hashes; plain text passwords are never stored.
• Access controls: Access to personal data within the pk68login team is restricted on a strict need-to-know basis. Employees who do not require access to player data in order to do their job do not have it.
• Two-factor authentication: All administrative access to pk68login's internal systems requires multi-factor authentication. Players are encouraged but not yet required to enable 2FA on their own accounts.
• Regular security audits: pk68login undergoes periodic security assessments and penetration tests conducted by independent specialists to identify and resolve vulnerabilities before they can be exploited.
• Breach notification: In the unlikely event of a data breach that affects your personal data, pk68login will notify affected players via their registered mobile number as soon as practicable after the breach is discovered and contained.

As a pk68login player, you have the following rights over your personal data. To exercise any of these rights, contact us at support@pk68login.bet with the subject line "Data Rights Request" and we will respond within 30 days:

• Right of access: You can request a copy of the personal data pk68login holds about you at any time. We will provide this in a readable format within 30 days.
• Right to correction: If any personal data pk68login holds about you is inaccurate or out of date, you have the right to ask us to correct it. Basic information like your mobile number and email can be updated directly in your account settings.
• Right to deletion: You can ask us to delete your personal data. Where there is no legal obligation requiring us to retain the data, we will fulfil this request. Note that we are required to retain financial transaction records and KYC documents for a minimum period, so full deletion of all data may not always be possible for recently active accounts.
• Right to restrict processing: You can ask pk68login to restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved.
• Right to data portability: You can ask for your personal data in a structured, machine-readable format so that you can transfer it to another service if you choose.
• Right to object: You can object to pk68login processing your personal data for marketing purposes at any time. You can also object to processing based on legitimate interest, though we may be able to demonstrate grounds that override your objection in specific cases.

pk68login sends marketing communications — including bonus offers, tournament announcements, seasonal promotions and platform news — via SMS to your registered Pakistani mobile number and via email if provided.

You can opt out of marketing communications at any time using any of the following methods:

• Reply STOP to any SMS message from pk68login.
• Click the unsubscribe link in any marketing email.
• Log into your pk68login account and update your communication preferences in the account settings section.
• Contact live chat or email support@pk68login.bet with "Unsubscribe" in the subject line.

pk68login does not send unsolicited marketing to mobile numbers or email addresses that are not registered on the platform. If you receive communications from an account claiming to be pk68login but you are not a registered player, please contact us immediately at support@pk68login.bet.

pk68login does not knowingly collect personal data from any person under the age of 18. All pk68login services are strictly restricted to adults aged 18 and over. Age verification is conducted at registration and, in some cases, before processing withdrawals.

If pk68login discovers that an account has been registered by a person under 18, the account will be closed immediately, all deposits will be returned to the original payment method and any gameplay data associated with the account will be deleted. No winnings will be paid from an under-age account under any circumstances.

If you are a parent or guardian and believe your child has registered on pk68login, please contact us immediately at support@pk68login.bet so that we can take action promptly.

pk68login may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations or platform features. When material changes are made, we will notify registered players via SMS to the mobile number on file at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page reflects when the policy was last substantively revised. The current version of this policy is always available at pk68login.bet/privacy-policy. Continued use of pk68login after the effective date of any change constitutes your acceptance of the updated policy.

If you have any concern about a change to this policy, contact us at support@pk68login.bet before the effective date and we will explain the change and its implications for your account.

All privacy-related queries, data rights requests and data breach reports should be directed to the pk68login privacy team. We are committed to responding to all formal privacy requests within 30 days:

• Email: support@pk68login.bet — use the subject line "Privacy Request" for all data rights matters and "Privacy Query" for general questions about this policy.
• Live Chat: Available 24/7 directly from your pk68login account. For quick clarifications about how your data is used, live chat is the fastest option.

If you are not satisfied with how pk68login has handled a privacy request or complaint, you have the right to escalate the matter. Send a formal written complaint to support@pk68login.bet with "Formal Privacy Complaint" in the subject line. A senior team member will review your case and respond within 10 business days.