pl67 Privacy Policy – How We Protect Your Data

1Introduction

pl67 is an online sports betting and entertainment platform serving players in Pakistan. When you use pl67 – whether you are placing a cricket bet, spinning slots, playing live casino games or simply browsing the platform – certain information about you and your activity is collected. This Privacy Policy explains what that information is, why it is collected, how it is processed and what rights you have over it.

We take data privacy seriously. The pl67 platform is built to give players a good experience, and that experience depends on trust. We are committed to being transparent about our data practices. If you have questions about anything in this policy, the support team is available around the clock and is happy to help.

This policy should be read alongside the pl67 Terms and Conditions and Responsible Gaming guidelines. Together these documents form the full agreement between you and pl67.

2Data We Collect

pl67 collects personal data in several ways – directly from you when you register or interact with the platform, automatically through your use of the site or app, and occasionally from third-party verification providers. Here is a breakdown of the categories of data we collect:

Registration & Account Data

• Full name, date of birth and gender
• Email address and contact number
• Username and encrypted password
• Residential address and city
• CNIC or passport number (where provided for verification)

Activity & Usage Data

• Bets placed, games played, results and wagering history
• Deposit and withdrawal records in PKR
• Bonus claims and promotional activity
• Session timestamps, login history and device information
• Pages visited, features used and time spent on the platform

Technical Data

• IP address and approximate geographic location
• Browser type, operating system and device identifiers
• Cookie and session data (see Section 6)
• App version and mobile device type where the pl67 app is used

Communication Data

• Support chat transcripts and email correspondence
• Feedback and complaints submitted to the support team
• Responses to surveys or promotions where you choose to participate

We collect only the data that is reasonably necessary to operate the platform and serve your account. We do not collect data that we do not have a genuine purpose for using.

3How We Use Your Data

The data pl67 collects is used for the following purposes:

pl67 does not use your data for automated profiling that produces legal or significant effects without human review. Analytics are used to improve the platform experience and are not used to unfairly discriminate against any player.

4Payment Data

All financial transactions on pl67 are processed in PKR. When you make a deposit using JazzCash, Easypaisa, Raast, bank transfer or a supported debit or credit card, your payment details are passed directly to the relevant payment processor through a secure, encrypted connection.

pl67 does not store full card numbers, mobile wallet PINs or banking passwords on its own servers. Payment processors used by pl67 operate under their own security standards and privacy policies. The information pl67 retains in relation to payments includes:

• Transaction reference numbers and timestamps
• Deposit and withdrawal amounts in PKR
• Payment method type (e.g. JazzCash, Easypaisa, bank transfer)
• Partial masked identifiers (e.g. last four digits of a card, partial mobile number) for reference and dispute resolution

5Sharing Your Data

pl67 does not sell, rent or trade your personal data to any third party for marketing or advertising purposes. Your data may be shared in the following limited circumstances:

Payment Processors

To process your PKR deposits and withdrawals, pl67 shares the minimum necessary payment data with the relevant payment gateway or mobile money provider, such as JazzCash or Easypaisa. These providers process data under their own privacy frameworks.

Identity Verification Providers

Where identity verification is required – for example when processing your first withdrawal or investigating a dispute – pl67 may share your name, date of birth and identity document details with a third-party KYC (Know Your Customer) verification service. These providers are contractually bound to handle data securely and only for the purpose of verification.

Technology & Service Providers

pl67 uses third-party providers for cloud hosting, analytics, customer support tools and platform security. These providers access data only to the extent necessary to deliver their contracted service to pl67 and are not permitted to use it for their own purposes.

Game Providers

Live casino games and slots on the pl67 platform are supplied by third-party game studios. These providers may receive a player identifier and session token to deliver the game. They do not receive your full name, financial data or contact details.

Legal & Regulatory Obligations

pl67 may disclose personal data to law enforcement agencies, financial intelligence units or other authorities when required to do so by applicable law, court order or to prevent fraud and financial crime. In such cases, pl67 will disclose only what is legally required and will not go beyond that scope.

6Cookies & Tracking

pl67 uses cookies and similar tracking technologies on the website and app. Cookies are small text files stored on your device that help the platform function correctly and remember your preferences. Here is how pl67 uses them:

Essential Cookies

These are required for the platform to work. They manage your login session, keep your account secure and remember your language or region preferences. You cannot opt out of essential cookies while using the platform.

Analytics Cookies

pl67 uses analytics tools to understand how players use the platform – which pages are visited most, where users drop off and how features perform. This data is aggregated and anonymised where possible. It is used to improve the pl67 experience, not to identify individual users.

Security Cookies

Certain cookies are used to detect unusual activity, prevent fraud and protect the platform from automated attacks. These cookies may record your IP address, device fingerprint and session behaviour for security analysis.

pl67 does not use advertising or retargeting cookies. You will not find cookies on the pl67 platform that track you across other websites for the purpose of showing you adverts elsewhere.

Most browsers allow you to manage or delete cookies through their settings. Note that blocking essential cookies may affect your ability to log in or use certain features on pl67.

7Data Retention

pl67 retains your personal data for as long as your account is active and for a reasonable period after account closure. The specific retention period for each data type depends on the purpose for which it was collected and any applicable legal obligations.

• Account data: Retained for the duration of your account and for up to 5 years after closure for compliance and dispute resolution purposes.
• Transaction records: PKR deposit and withdrawal records are retained for a minimum of 5 years in line with standard financial record-keeping practices.
• Betting & gaming history: Retained for the life of the account and for a defined period after closure to handle disputes or audits.
• Support communications: Chat logs and email correspondence are retained for 2 years from the date of the interaction.
• Technical & session data: Generally retained for a shorter period of 90–180 days unless required for ongoing fraud investigation.

Once data is no longer needed for its original purpose and there is no legal obligation to retain it, pl67 will securely delete or anonymise it.

8Security Measures

pl67 takes the security of your personal data seriously. The platform uses a combination of technical and organisational measures to protect your information against unauthorised access, loss, alteration or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the pl67 platform
• Encrypted storage of account passwords – pl67 stores only a hashed version of your password and cannot retrieve the original
• Two-factor authentication options for account access
• Regular security assessments and vulnerability monitoring
• Access controls that limit staff access to personal data to those who genuinely need it for their role
• Intrusion detection systems and automated alerts for unusual account activity

Despite these measures, no online platform can guarantee absolute security. If you believe your account has been compromised, please contact support immediately and change your password. You are also responsible for keeping your own login credentials safe – do not share your password with anyone.

9Your Rights

As a pl67 player you have the following rights in relation to your personal data. To exercise any of these rights, contact the pl67 support team with your request and account details. We aim to respond within 30 days.

Right to Access

You can request a copy of the personal data pl67 holds about you. This includes account information, transaction history and communication records associated with your account.

Right to Correction

If any of the personal data pl67 holds about you is inaccurate or incomplete, you can request that it be corrected. For account details you can update many of these directly through your account settings. For identity-verified data, a support request may be needed.

Right to Deletion

You may request that pl67 delete your personal data. Note that certain data – particularly financial transaction records – must be retained for a defined period under standard financial compliance practices, even after account closure. Where deletion is not possible in full, pl67 will explain what data must be retained and why.

Right to Restrict Processing

In certain circumstances you may request that pl67 restrict how your data is processed – for example while a dispute about the accuracy of your data is resolved.

Right to Object

You may object to pl67 processing your data for platform analytics or non-essential communications. This will not affect your ability to use the core features of the platform.

Right to Withdraw Consent

Where processing is based on your consent – such as receiving promotional communications – you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

10Children's Privacy

pl67 is strictly for adults aged 18 and over. The platform does not knowingly collect personal data from anyone under the age of 18. If pl67 becomes aware that a registered account belongs to a person under 18, the account will be closed immediately and any personal data associated with it will be deleted in accordance with our retention policy.

If you believe a minor has registered on pl67, please contact the support team immediately so that appropriate action can be taken. pl67 takes underage access seriously and will investigate all such reports promptly. Parents and guardians are encouraged to use device parental controls to prevent minors from accessing online betting platforms.

11Policy Updates

pl67 may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in applicable data protection standards or other relevant developments. The date of the most recent revision is shown at the top of this page.

When a material change is made to this policy, pl67 will take reasonable steps to notify registered players – for example through a notification on the platform or an email to your registered address. Your continued use of pl67 after a policy update constitutes your acceptance of the revised terms.

We encourage you to review this page periodically so you are always aware of how your data is being handled. If you disagree with any update to this policy, you should stop using the platform and contact support to discuss closing your account.

12Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or how pl67 handles your personal data, please reach out to the support team. We are available 24/7 and take all privacy-related queries seriously.

For data access, correction or deletion requests, please include your registered email address and account username so we can locate your records and respond as quickly as possible.