Privacy Policy — 0k67

01 Introduction

This Privacy Policy ("Policy") describes how 0k67 ("the Platform", "we", "us", "our"), accessible at https://0k67.cam, collects, uses, stores, discloses and protects personal data relating to users ("you", "your") of our website, mobile interface and associated services.

0k67 is an English-language online betting information and gaming platform designed for Pakistani users. We take the privacy of our users seriously. This Policy is written in plain, accessible English so that you can understand exactly how your data is handled — without needing to decode legal jargon.

By accessing or using the Platform, creating an account or submitting any personal data to us, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Policy, you should not use the Platform.

02 Definitions

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or can be used to identify a natural person, directly or indirectly — including name, identification number, location data, online identifiers or factors specific to physical, economic or social identity.
• "Processing" means any operation or set of operations performed on personal data — including collection, recording, storage, retrieval, use, disclosure, alignment, restriction or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, 0k67 acts as the Data Controller in respect of personal data collected from users.
• "Data Processor" means any entity that processes personal data on behalf of the Data Controller, such as payment service providers or IT infrastructure suppliers.
• "KYC Data" means identity and age verification documents and information submitted by users as part of the Know Your Customer process, including CNIC, passport, proof of address and selfie/liveness data.
• "Cookies" means small text files placed on your device by the Platform to store session and preference information.
• "Third Party" means any person or entity other than you and 0k67.

03 Data We Collect

3.1 Data You Provide Directly

We collect personal data that you actively provide to us, including:

• Registration data: Full legal name, date of birth, email address, residential address, phone number and chosen username and password.
• KYC documents: Government-issued identity documents (e.g., CNIC or passport for Pakistani users), proof of address where required, and selfie or liveness verification images.
• Payment data: Details of the payment method used for deposits and withdrawals — for example, bank account references for HBL, UBL, Meezan Bank or Bank Alfalah transfers, or mobile wallet identifiers for Easypaisa or JazzCash where applicable. We do not store full card numbers on our servers; card processing is handled by PCI-DSS compliant third-party processors.
• Support communications: Content of messages, emails or chat transcripts submitted to our customer support team.
• Responsible gambling data: Limit settings, self-exclusion preferences and any information provided in connection with responsible gambling tools.

3.2 Data Collected Automatically

When you access the Platform, we automatically collect certain technical and usage data:

• IP address and approximate geolocation (country/region level)
• Device type, operating system and browser information
• Session duration, pages visited and navigation paths
• Betting and gaming activity logs (markets viewed, bets placed, game sessions)
• Cookie and similar tracking technology data (see Section 8)

04 Purpose & Legal Basis for Processing

We process your personal data for the purposes and on the legal bases described in the table below:

05 Data Sharing

0k67 does not sell your personal data. We may share personal data with third parties only in the following limited circumstances:

5.1 Service Providers

We engage third-party service providers who process personal data on our behalf as Data Processors, subject to contractual data processing agreements. These include payment processors, identity verification providers, fraud detection services, IT infrastructure and cloud hosting providers, and customer support software providers. These parties are permitted to use your data only for the specific purpose for which it was shared.

5.2 Regulatory and Legal Compliance

We may disclose personal data to regulatory bodies, law enforcement agencies, courts or other public authorities where we are legally required to do so, or where we have a good-faith belief that disclosure is necessary to comply with a legal obligation, enforce our Terms & Conditions, protect the rights or safety of users or third parties, or prevent, investigate or act on suspected fraud, money laundering or other unlawful activity.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or substantially all of the assets of 0k67, personal data held by us may be transferred to the successor entity, subject to equivalent privacy protections as described in this Policy. We will notify affected users of any such transfer as required by applicable law.

06 Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:

• Account data: Retained for the duration of your account's active status, and for a period of at least five (5) years following account closure, in accordance with standard AML and regulatory record-keeping requirements. The applicable retention period may be longer if required by the licensing jurisdiction's regulations.
• KYC documents: Retained for the minimum period required by the applicable anti-money laundering legislation of the licensing jurisdiction, typically five (5) years from the date of verification or from the end of the business relationship, whichever is later.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, or longer where required by applicable law.
• Support communications: Retained for a period of up to three (3) years from the date of the communication, unless a longer period is required in connection with an ongoing dispute or legal proceeding.
• Analytics and usage data: Aggregated and anonymised data may be retained indefinitely for statistical and platform improvement purposes, provided it can no longer be used to identify individual users.
• Marketing consent records: Retained for as long as you remain subscribed, and for a reasonable period thereafter as evidence of consent.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Physical documents, if any, are destroyed using secure methods.

07 Security Measures

0k67 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration or destruction. These measures include:

• SSL/TLS encryption on all data transmitted between your device and our servers.
• Encrypted storage of sensitive personal data, including passwords (stored as salted hashes) and KYC documents.
• Access controls restricting access to personal data to authorised personnel only, on a strict need-to-know basis.
• Two-factor authentication available for user accounts and used internally by staff accessing sensitive systems.
• Regular security assessments and monitoring of systems for vulnerabilities and threats.
• Secure KYC upload portal — all identity documents must be submitted through our HTTPS-verified verification portal. You should never send identity documents via unencrypted email, messaging applications or unsecured channels.

While we take all reasonable steps to protect your data, no internet transmission or electronic storage system is 100% secure. You are responsible for maintaining the security of your account credentials. If you suspect that your account has been compromised, contact our support team immediately.

08 Cookies & Tracking Technologies

0k67 uses cookies and similar tracking technologies to operate the Platform, remember your preferences and analyse usage. The following categories of cookies may be used:

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling certain cookies may affect the functionality of the Platform. We do not use cookies to serve third-party advertising or to build profiles for sale to advertisers.

09 Your Data Rights

Subject to applicable data protection law and certain conditions, you may have the following rights in respect of your personal data. The availability of these rights depends on the legal basis for processing and the jurisdiction of the applicable data protection framework:

To exercise any of these rights, contact our support team via live chat or by email at [email protected]. We will respond to verified requests within a reasonable period as required by applicable law. We may need to verify your identity before processing a request. Where a request is declined or partially fulfilled, we will explain why.

10 Minors

0k67 is strictly intended for adults aged 18 or over — or the higher minimum age required by the operator's licence jurisdiction. We do not knowingly collect personal data from individuals below the minimum age. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

Age verification is a mandatory step in the KYC process. Where age cannot be confirmed to our satisfaction, access to deposits, betting markets and withdrawals will be suspended pending verification. If you have reason to believe that a minor has registered an account, please contact our support team immediately.

11 International Data Transfers

As a platform accessible globally, your personal data may be transferred to and processed in countries other than the country in which you reside, including the licensing jurisdiction in which 0k67 operates and the locations of our third-party service providers' data centres.

Where personal data is transferred internationally, we take reasonable steps to ensure that equivalent protections apply, including through contractual clauses with data processors and the implementation of technical security controls described in Section 7 of this Policy.

12 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, platform features or regulatory requirements. When we make material changes, we will update the "Last reviewed" date at the top of this Policy and, where required by applicable law or the significance of the change, provide notice to users via email or a prominent notice on the Platform.

Your continued use of the Platform following the effective date of an updated Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically so that you remain informed of how we handle your data.

13 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or to the personal data we hold about you, please contact us through the following channel:

If you are not satisfied with our response to a privacy request or complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction applicable to you.