This Privacy Policy applies to pk68 (referred to throughout as "pk68", "we", "us", or "our") and covers all interactions with the pk68 platform at pk68.xyz, including account registration, deposits, gameplay, withdrawals, and customer support communications. pk68 is the data controller for all personal information collected through its platform.
By registering on pk68 or using any part of the platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described here. This policy should be read alongside our Terms and Conditions and Responsible Gaming policy, both of which also govern your relationship with pk68.
If you have questions about how pk68 handles your data at any point, you can contact our team directly at support@pk68.xyz. We aim to respond to all privacy-related enquiries within 48 hours.
pk68 collects personal data through several routes: information you provide directly when registering or contacting support, information generated automatically by your use of the platform, and in some cases information provided by payment partners as part of transaction processing. The categories of data we collect are listed below.
Information you provide directly:
- Full name and date of birth
- Mobile phone number and email address
- CNIC number (where required for identity verification)
- Account login credentials (password stored in hashed form only)
- Support chat and email communications
- Responsible gaming preferences and limit settings
Information collected automatically:
- Device type, operating system, and browser version
- IP address and approximate geographic location
- Session timestamps, pages visited, and features used within pk68
- Betting history, game history, and wagering patterns
- Deposit and withdrawal transaction records
Information from payment partners:
- Transaction confirmation references from Easypaisa, JazzCash, NayaPay, SadaPay, and bank transfer systems
- Card type and last four digits (for Visa/Mastercard transactions)
- Payment method account identifiers necessary for withdrawal processing
pk68 does not store full card numbers or payment account credentials on its own servers. All payment data is handled by our authorised payment processing partners using their own secure, certified infrastructure.
The types of data we hold can be summarised as:
pk68 uses your personal data only for purposes that are necessary to operate the platform, comply with our legal obligations, or that you have explicitly consented to. We do not process your data for purposes unrelated to your relationship with pk68.
| Purpose | Data Used |
|---|---|
| Creating and managing your pk68 account | Name, mobile number, date of birth, login credentials |
| Processing PKR deposits and withdrawals | Payment method details, transaction references, identity data |
| Age and identity verification | Name, date of birth, CNIC number, identity documents |
| Fraud prevention and anti-money-laundering checks | Identity data, payment history, device data, IP address |
| Providing customer support | Account details, communication history, transaction records |
| Responsible gaming monitoring and intervention | Gaming activity, wagering patterns, session data |
| Sending promotional communications (with consent) | Mobile number, email address, game preferences |
| Improving platform performance and features | Anonymised usage data, device data, session data |
pk68 does not use your personal data to build profiles for sale to third-party advertisers, and we do not use your data for targeted advertising outside of the pk68 platform. If you have opted in to receive promotional communications from pk68, you can opt out at any time by contacting support or updating your notification preferences within your account settings.
pk68 processes personal data under the following legal bases depending on the purpose of processing:
- Contract performance: Processing your identity, contact, and financial data to create and manage your pk68 account, process deposits and withdrawals, and deliver the gaming services you have registered to use.
- Legal obligation: Processing identity data and transaction records to comply with applicable anti-money-laundering obligations, age verification requirements, and financial regulations.
- Legitimate interests: Processing device data, session data, and gaming patterns to detect and prevent fraud, protect the security of the platform, monitor for responsible gaming concerns, and improve the platform's features and performance.
- Consent: Sending promotional communications about pk68 offers, new games, and tournaments. You can withdraw this consent at any time without affecting any other aspect of your account.
Where pk68 relies on legitimate interests as the basis for processing, we have assessed that the processing is proportionate and that your interests and rights are not overridden. You have the right to object to processing based on legitimate interests – see section 10 for how to exercise this right.
All financial transactions on pk68 are conducted in Pakistani Rupees (PKR) through trusted local payment partners including Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer, and Visa/Mastercard. The security and privacy of your payment information is a priority for pk68.
pk68 does not store full card numbers, full mobile wallet credentials, or bank account details on its own servers. When you make a deposit or request a withdrawal, the transaction is processed through our payment partners' secure, certified infrastructure. pk68 retains only the information necessary to confirm transactions, reconcile your account balance, and comply with financial record-keeping obligations – specifically transaction references, amounts, timestamps, and the last four digits or partial identifier of the payment method used.
- All payment data transmitted between your device and pk68 is protected by TLS 1.3 encryption.
- pk68 does not pass your payment credentials to any third party except the payment processor directly handling your transaction.
- Transaction records are retained for the period required by applicable financial record-keeping obligations and then securely deleted.
- Where pk68 is required to verify the source of funds – typically for large or unusual transactions – you may be asked to provide additional documentation. This information is handled under the same data protection standards as all other personal data.
pk68 uses cookies and similar tracking technologies to operate the platform, maintain your session, and understand how players use the platform so we can improve it. The types of cookies used on pk68 are described below.
- Essential cookies: Required for the platform to function. These handle session management, login state, and security. You cannot opt out of essential cookies and continue to use pk68.
- Functional cookies: Remember your preferences such as language settings and notification preferences to improve your experience. These are enabled by default but can be disabled.
- Analytics cookies: Used by pk68 to understand how players navigate the platform – which pages are most visited, where players encounter difficulties, and how usage patterns change over time. Analytics data is aggregated and anonymised. pk68 uses its own internal analytics rather than third-party advertising networks.
pk68 does not use third-party advertising cookies or share cookie data with advertising networks. The data collected through cookies is used solely to operate and improve the pk68 platform. You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging into your pk68 account.
pk68 does not use cross-site tracking, fingerprinting, or any technology designed to follow your activity outside of the pk68 platform. Your browsing behaviour on other websites is not known to pk68 and is not used in our processing.
pk68 does not sell your personal data to any third party under any circumstances. Your data is only shared with third parties where it is necessary to deliver the services you have requested, comply with legal obligations, or protect the security of the platform. The categories of third parties with whom pk68 shares data are:
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, banking partners, and card payment processors receive the financial information necessary to complete your deposit or withdrawal transaction. Their handling of your data is governed by their own privacy policies and security standards.
- Identity verification partners: Where pk68 uses a third-party verification service to confirm your identity or age, the minimum necessary data is shared for this purpose only. Verification partners are contractually prohibited from using your data for any other purpose.
- Fraud prevention services: pk68 may share anonymised or pseudonymised data with fraud prevention partners to detect and prevent fraudulent activity and money laundering.
- Regulatory and law enforcement authorities: pk68 may be required to disclose personal data to regulatory bodies, law enforcement agencies, or courts where legally obligated to do so. pk68 will only make such disclosures where required by valid legal process.
- Infrastructure and hosting providers: pk68's technical infrastructure partners who host and operate the platform's servers have access to data as necessary to provide those services. They are contractually bound to handle your data only on pk68's instructions and in accordance with this policy.
All third parties with whom pk68 shares data are required to handle it in accordance with applicable data protection standards. pk68 maintains data processing agreements with all service providers who handle personal data on our behalf.
pk68 retains your personal data for as long as necessary to provide you with the services you have requested, comply with our legal obligations, resolve disputes, and enforce our agreements. The following retention guidelines apply:
- Active account data: Retained for the full duration of your account's active status and for a period of five years after account closure, to satisfy financial record-keeping and anti-money-laundering compliance obligations.
- Transaction records: Financial transaction records are retained for a minimum of five years in line with standard financial record-keeping requirements.
- Identity verification documents: Retained for the period required to comply with applicable KYC (Know Your Customer) and AML (Anti-Money Laundering) obligations, typically five years from the date of verification or account closure, whichever is later.
- Support communications: Retained for two years following the resolution of the relevant support interaction, to allow for follow-up and dispute reference.
- Anonymised analytics data: May be retained indefinitely in anonymised, aggregated form as it cannot be used to identify any individual player.
When data is no longer required, pk68 deletes or anonymises it securely. Where you exercise your right to erasure (see section 10), pk68 will delete your personal data within 30 days, subject to any legal obligation to retain specific records for a longer period.
Protecting your personal data and financial information is a core priority for pk68. We implement technical and organisational security measures appropriate to the nature and sensitivity of the data we hold. These include:
- AES-256 encryption for all personal data stored on pk68 servers
- TLS 1.3 encryption for all data transmitted between your device and the pk68 platform
- Bcrypt password hashing – your login password is never stored in readable form
- Multi-factor authentication available for all player accounts
- Automated monitoring for unusual login patterns, suspicious transaction activity, and potential security incidents
- Regular third-party security audits and penetration testing of the pk68 platform
- Strict access controls limiting which pk68 team members can access personal data, with access logged and audited
- Secure data deletion procedures for data that has passed its retention period
No online platform can guarantee absolute security against all threats. However, pk68 applies industry-standard security practices and continuously reviews them. If you notice any suspicious activity on your account, contact our support team immediately via live chat.
In the event of a data security incident that affects your personal data, pk68 will notify you promptly in accordance with applicable notification obligations, describing what happened, what data was affected, and what steps pk68 is taking in response.
As a pk68 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at support@pk68.xyz. pk68 aims to respond to all data rights requests within 48 hours and to fulfil them within 30 days.
Right of Access
Request a copy of all personal data pk68 holds about you, including account information, transaction history, and gaming activity.
Right of Rectification
Request correction of inaccurate personal data held on your pk68 account. You can update most contact details directly within your account settings.
Right of Erasure
Request deletion of your personal data. Note that pk68 may be legally required to retain certain records (financial and identity data) for a minimum period even after account closure.
Right to Restrict Processing
Request that pk68 limit its processing of your data in specific circumstances, for example while a complaint is being investigated.
Right to Portability
Request your personal data in a structured, machine-readable format that you can transfer to another service where technically feasible.
Right to Object
Object to pk68's processing of your data based on legitimate interests, or to receiving marketing communications. Withdrawing marketing consent does not affect your account.
To exercise any of these rights, email support@pk68.xyz with the subject "Data Rights Request" and include your registered mobile number and a description of your request. pk68 may ask for identity verification before processing a data request to protect against unauthorised access.
pk68 is strictly an adults-only platform. No person under the age of 18 may register for or use pk68 under any circumstances. pk68 does not knowingly collect personal data from anyone under the age of 18. If pk68 becomes aware that personal data has been collected from a minor, the account will be closed immediately and all associated data will be deleted, subject to any legal obligation to retain records of the underage access for regulatory purposes.
Parents and guardians who become aware that a minor in their household has accessed pk68 should contact support@pk68.xyz immediately. pk68 will act on such notifications promptly and will not penalise parents who report underage access in good faith.
pk68 recommends that parents and guardians use device-level parental controls to prevent minors from accessing online gaming platforms. pk68 supports the use of parental control software and filtering tools.
pk68 reviews this Privacy Policy regularly and updates it when our practices change or when there are changes in applicable law that require us to update our disclosures. The date of the most recent update is shown at the top of this page.
Where changes to this policy are material – meaning they significantly affect how we collect or use your personal data – pk68 will notify registered players via their registered mobile number or email address before the changes take effect. We will also display a notice within the pk68 platform for a period after material changes are made.
If you continue to use pk68 after the effective date of a revised Privacy Policy, you will be deemed to have accepted the updated policy. If you do not accept the revised policy, you should close your account before the effective date. The most current version of this policy is always available at pk68.xyz/privacy-policy.
For any questions, concerns, or requests related to your personal data and this Privacy Policy, please contact the pk68 privacy team through the channels below. We aim to acknowledge all privacy-related enquiries within 24 hours and to respond substantively within 48 hours.
Privacy Enquiries: support@pk68.xyz (subject: "Privacy Enquiry")
Live Chat: Available 24/7 on pk68 – typically responds within 5 minutes
Data Rights Requests: Acknowledged within 24 hours, fulfilled within 30 days
If you are not satisfied with pk68's response to a privacy concern, you have the right to escalate the matter to the appropriate regulatory authority in your jurisdiction. pk68 will cooperate fully with any such investigation.