apk67 Privacy Policy

apk67 (referred to throughout this Privacy Policy as "apk67," "we," "us," or "our") operates the online gaming platform accessible at apk67.club. We provide sports betting, live casino games, slots, instant-win titles, and related gaming services primarily to users located in Pakistan.

For the purposes of this Privacy Policy, apk67 is the data controller — meaning we determine the purposes for which your personal data is collected and the manner in which it is processed. If you have any questions about our data practices or wish to exercise your privacy rights, please use the contact details set out in Section 15 of this Policy.

apk67 collects personal data across several categories depending on how you interact with our platform. The table below summarises the types of data we hold and typical examples:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required by responsible gaming obligations (for example, self-exclusion records and problem gambling assessments, which are processed solely to protect users).

apk67 collects personal data through the following channels:

• Direct submission: when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account profile.
• Automated technologies: when you browse apk67.club, our servers and analytics tools automatically record technical data including your IP address, session timestamps, page views, and click events. Cookies and similar tracking technologies are described in detail in Section 7.
• Payment providers: when you transact via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or any other supported payment method, our payment processing partners share transactional confirmation data with us to reconcile your account balance.
• Identity verification partners: during KYC, we may use third-party identity verification services that cross-reference your submitted documents against official registries. These partners are bound by strict data processing agreements.
• Anti-fraud and AML screening tools: we use automated screening services to check user activity against known fraud patterns and watchlists required by applicable anti-money laundering regulations.

apk67 uses your personal data only for defined, legitimate purposes. The table below maps each processing purpose to the relevant data category:

• Account creation and management: Identity Data and Contact Data are used to create and maintain your apk67 account, verify your age (21+ requirement strictly enforced), and provide access to platform features.
• Payment processing: Financial Data is used to process deposits and withdrawals via your chosen payment method, reconcile account balances, and generate transaction records.
• KYC and regulatory compliance: Identity Data and Financial Data are used to fulfil our Know Your Customer, Anti-Money Laundering (AML), and Counter-Terrorism Financing (CTF) obligations.
• Platform delivery and personalisation: Gaming Activity Data and Technical Data are used to deliver game content, maintain session integrity, personalise your homepage experience, and improve platform performance.
• Responsible gaming monitoring: Gaming Activity Data is analysed to identify patterns associated with problem gambling. Where indicators are detected, we may apply protective measures or contact you with responsible gaming information.
• Customer support: Communications Data is used to handle queries, resolve disputes, and maintain a record of interactions for quality assurance.
• Security and fraud prevention: Technical Data and Financial Data are used to detect, investigate, and prevent fraudulent transactions, account takeovers, and other prohibited conduct.
• Marketing communications: Where you have provided explicit consent, Contact Data and Marketing Preferences are used to send you promotional offers, bonus notifications, and news about apk67. You may withdraw consent at any time.

apk67 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing is necessary to perform our contract with you — i.e., to operate your account, process bets, handle deposits and withdrawals, and deliver game services.
• Legal obligation: Processing is required to comply with applicable laws, including AML/CTF regulations, age verification requirements, and financial record-keeping obligations.
• Legitimate interests: Processing is necessary for apk67's legitimate business interests, such as fraud prevention, platform security, and improving our services, provided these interests are not overridden by your privacy rights.
• Consent: For marketing communications and the use of non-essential cookies, we rely on your explicit, freely given, and revocable consent.

apk67 does not sell your personal data. We share personal data only in the limited circumstances described below, and always subject to appropriate data protection safeguards:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast / 1LINK, and other payment partners receive Financial Data and limited Identity Data necessary to execute your transactions.
• Identity verification and KYC providers: Specialist third-party KYC providers receive Identity Data for the sole purpose of verifying your identity and age against official records.
• Game content providers: Third-party game studios and live casino operators receive your username and session token to deliver their games within the apk67 platform. They do not receive your full identity or financial data.
• Fraud prevention and AML screening services: Transaction and identity data may be shared with screening tools to comply with anti-money laundering obligations and detect prohibited conduct.
• Law enforcement and regulatory authorities: We will disclose personal data to government authorities, regulators, courts, or law enforcement agencies where required by applicable law or a valid legal order — including disclosures related to AML investigations.
• Professional advisers: Lawyers, auditors, and consultants engaged by apk67 may access personal data on a need-to-know basis and are bound by confidentiality obligations.

apk67 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit our website. We use the following types of cookies:

• Strictly Necessary Cookies: These are essential for the platform to function. They maintain your login session, remember your preferences, and enable secure transactions. They cannot be disabled without impacting platform functionality.
• Analytics Cookies: These allow us to understand how users navigate apk67 — which pages are visited most, where users drop off, and how long sessions last. This data is aggregated and anonymised. We use this to improve the platform.
• Functional Cookies: These remember your settings (such as preferred language or display preferences) to personalise your experience on return visits.
• Marketing Cookies: With your consent, these cookies track your interactions with promotional content so we can deliver more relevant bonus offers and game recommendations. You may opt out at any time via your account settings.

You can manage your cookie preferences through the cookie settings panel accessible from any page on apk67.club. Note that disabling certain cookies may limit your access to some platform features.

apk67 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and to meet applicable legal obligations. Our standard retention periods are as follows:

• Account data (active accounts): Retained for the lifetime of your account and for a minimum period of five (5) years following permanent account closure, in accordance with AML record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years after the end of the business relationship, as required by applicable AML regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming activity logs: Retained for three (3) years for responsible gaming monitoring purposes and dispute resolution.
• Customer support communications: Retained for two (2) years from the date of each interaction.
• Marketing consent records: Retained for the duration of your marketing consent and for one (1) year following withdrawal of consent, as evidence of compliance.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised. Where anonymisation is used, the resulting anonymised data may be retained indefinitely for statistical analysis and platform improvement purposes, as it no longer constitutes personal data.

apk67 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and apk67 servers is encrypted using TLS (Transport Layer Security) protocol.
• Encryption at rest: Sensitive personal data, including financial information and identity documents, is stored in encrypted form in our databases.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff with access to personal data undergo regular privacy and security training.
• Two-factor authentication: apk67 strongly recommends and supports two-factor authentication (2FA) for all user accounts to protect against unauthorised access.
• Regular security audits: Our platform undergoes periodic penetration testing and security assessments by independent specialists.
• Incident response: In the event of a confirmed personal data breach that is likely to result in risk to users, apk67 will notify affected users without undue delay, consistent with applicable data breach notification obligations.

As a user of apk67, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with your registered email address and a description of your request:

• Right of Access: You may request a copy of all personal data we hold about you, along with information about how it is processed. We will respond within 30 days of receiving your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Most contact and preference data can be updated directly in your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where you object to processing. Note that this right is subject to overriding legal obligations — for example, we are required to retain KYC and transaction records for a minimum of five years and cannot delete these on request during that period.
• Right to Data Portability: Where processing is based on consent or contract, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests at any time. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Restrict Processing: In certain circumstances, you may request that we limit the processing of your data — for example, while a rectification request is being assessed.

apk67 is strictly an adult platform. Access is prohibited for individuals under the age of 21. We do not knowingly collect personal data from minors. Our registration process requires users to confirm their date of birth and submit identity documentation during KYC verification to enforce this age restriction.

If apk67 becomes aware that personal data has been collected from a user who is under 21 years of age, we will:

• Immediately suspend the relevant account pending investigation;
• Permanently close the account upon confirmation of the user's age;
• Delete all personal data associated with the account, except where retention is required by applicable law (for example, to maintain a record of the exclusion);
• Return any real-money deposits made by the minor to the original payment source.

If you are a parent or guardian and believe your child may have accessed or registered on apk67, please contact us immediately at [email protected] so we can act without delay.

apk67 sends promotional communications — including bonus offers, game updates, PSL season promotions, and platform news — only to users who have explicitly opted in to receive them. We may use email, SMS to your registered Pakistani mobile number, and in-platform notifications as delivery channels.

You can manage your marketing preferences at any time through:

• The "Notifications & Marketing" section within your apk67 account settings;
• The unsubscribe link included in every promotional email we send;
• Contacting our support team directly at [email protected] and requesting removal from our marketing list.

Opting out of marketing communications will not affect transactional messages — such as deposit confirmations, withdrawal notifications, and account security alerts — which are necessary for the operation of your account and cannot be disabled.

The apk67 platform may contain references to or integrations with third-party services — such as game providers, payment gateways, and identity verification partners. While we take care to work only with reputable service providers, apk67 is not responsible for the privacy practices of third parties.

Each third-party service provider operates under its own privacy policy and data processing practices. We encourage you to review the privacy notices of any third-party service with which you interact through the apk67 platform.

apk67 does not control third-party websites or services and accepts no liability for the manner in which they collect or handle personal data. This Privacy Policy applies solely to personal data processed by apk67 in connection with apk67.club.

apk67 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, applicable laws, or the services we offer. Where changes are material — for example, where we introduce a new category of data processing or a new sharing arrangement — we will notify registered users by email to the address on their account and display a prominent notice on apk67.club for a minimum of seven (7) days prior to the changes taking effect.

The "Effective Date" displayed at the top of this page and in the page header will always reflect the date of the most recent revision. We recommend reviewing this page periodically to stay informed of how apk67 protects your data.

Your continued use of apk67 following notification of a material policy update constitutes your acknowledgment of the revised Privacy Policy. If you do not accept the revised terms, you may close your account and request withdrawal of any remaining balance.

If you have questions about this Privacy Policy, wish to exercise a privacy right, or want to raise a concern about how apk67 has handled your personal data, please contact us using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please include "Privacy Request" or "Data Complaint" in the subject line so we can route your message to the appropriate team.
• Response Time: All privacy-related emails are acknowledged within 48 hours and substantively addressed within 30 calendar days.

If you are not satisfied with apk67's response to your privacy concern, you have the right to escalate the matter to the relevant data protection or supervisory authority in your jurisdiction. apk67 will cooperate fully with any such authority in the investigation of a complaint.