JK667 Privacy Policy – How We Protect Your Data in Pakistan

This Privacy Policy explains how JK667 (accessible at jk667.biz) collects, uses, stores, and protects personal information provided by players registered on the platform. JK667 is committed to handling all player data responsibly and transparently, in a manner that respects the privacy expectations of Pakistani players and complies with applicable data protection principles.

When you register on JK667, deposit funds, play any game, or contact our support team, you are providing personal information that JK667 needs in order to deliver its services. This Privacy Policy describes every significant category of data collection on JK667, the purpose for which that data is used, the legal basis under which it is processed, who it may be shared with, and how long it is retained before deletion.

JK667 takes the privacy of Pakistani players seriously. The platform does not sell personal data to advertisers, does not share player information with unrelated third parties for marketing purposes, and does not store sensitive payment credentials (such as full card numbers or banking passwords) on its own servers. This policy is written to be clear and readable — not buried in language that makes it hard to understand what actually happens to your information.

JK667 collects personal data from players through four main channels: information you actively provide during registration and account management; information generated automatically by your use of the platform; information collected through cookies and similar tracking technologies; and information provided by third-party payment processors as part of transaction processing.

Information you provide directly to JK667:

• Your full legal name and date of birth (used for age verification and KYC);
• A valid Pakistani mobile number (used for account security, SMS verification, and withdrawal confirmation);
• An email address (used for account correspondence and security notifications);
• Your CNIC number and — on your first withdrawal — a clear image of your CNIC (used for identity verification);
• Your Easypaisa or JazzCash account number, bank IBAN, or card details (last 4 digits and bank name only — full card numbers are handled by the card payment processor, not stored by JK667).

Information generated automatically by your use of JK667:

• IP address and approximate geographic location at the time of login;
• Device identifiers, operating system version, and browser type;
• Game session records including games played, wagers placed, and results;
• Deposit and withdrawal transaction records including amounts, timestamps, and payment methods used;
• Responsible gaming tool settings including deposit limits and self-exclusion status.

JK667 does not collect biometric data, does not access your phone's contact list or camera, and does not collect personal data from social media accounts beyond what you explicitly provide during registration.

JK667 uses the personal data it collects strictly for the purposes described at the time of collection. The platform does not repurpose data for functions unrelated to operating the gaming service. The primary uses of personal data on JK667 are:

• Account creation and management: Your name, contact details, and identity information are used to create and maintain your JK667 account, verify your identity, and ensure one account per person policy compliance.
• Payment processing: Your registered payment method details are used exclusively to process deposits and withdrawals in PKR. Payment credentials are verified against your account identity to prevent fraud and ensure payouts reach the correct person.
• KYC and regulatory compliance: Your CNIC details and supporting documentation are used to satisfy identity verification requirements before your first withdrawal on JK667. These records are retained as required by applicable financial compliance obligations.
• Security and fraud prevention: Device identifiers, IP addresses, and transaction patterns are used to detect suspicious activity, prevent unauthorised account access, identify duplicate accounts, and protect JK667 players from fraud.
• Responsible gaming monitoring: Transaction volume, session frequency, and self-exclusion records are monitored to identify potential problem gambling patterns and to enforce responsible gaming tool settings activated by players.
• Platform improvement: Anonymised usage data and game session statistics are used to understand how Pakistani players interact with JK667, informing game selection, interface design, and payment method priorities.
• Player communications: Your contact details are used to send transactional communications including deposit confirmations, withdrawal notifications, account security alerts, and responsible gaming check-in messages. JK667 does not send promotional email without your explicit opt-in consent.

JK667 does not sell personal data to any third party. Personal information is only shared with third parties where it is strictly necessary to deliver JK667's services, comply with legal requirements, or protect the security of the platform and its players. The categories of third parties who may receive player data from JK667 are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT network operators, and card payment gateways receive the minimum personal data necessary to process a specific transaction. These processors maintain their own privacy policies and data security standards applicable to their respective services.
• KYC and identity verification providers: JK667 uses third-party KYC verification services to confirm player identity. These services receive CNIC data for verification purposes and are bound by contractual data processing agreements with JK667.
• Regulatory authorities and law enforcement: JK667 will disclose player data to Pakistani regulatory authorities, law enforcement agencies, or courts where required to do so by valid legal process, court order, or applicable law. JK667 does not make such disclosures voluntarily beyond legal requirements.
• Fraud prevention and security partners: Anonymised or aggregated pattern data may be shared with fraud detection service providers to identify and prevent platform abuse. These partners do not receive individually identifiable player data.
• Game content providers: Third-party game studios whose titles are hosted on JK667 may receive anonymised session data related to their games for technical support and audit purposes. They do not receive player identity or payment information.

All third parties with whom JK667 shares personal data are required to handle that data solely for the stated purpose, maintain appropriate security standards, and not share it further without JK667's authorisation. JK667 does not transfer personal data outside of the regions necessary to deliver the services described in this policy.

Given that JK667 handles real PKR transactions for Pakistani players, payment data security is treated as a platform-critical concern rather than a secondary consideration. JK667's approach to financial data protection is built around a principle of minimal storage: the platform retains only the information needed to confirm that a payment method belongs to you and to process future transactions to the same method.

For Easypaisa and JazzCash transactions, JK667 stores your registered mobile wallet number alongside your account identity. This number is not shared with any third party beyond what is necessary to process a specific withdrawal, and it is encrypted at rest in JK667's database systems. Full wallet credentials and PINs are never requested by JK667 and are not part of the information flow between the player, JK667, and the wallet provider.

For card payments, JK667 uses a PCI-DSS compliant third-party card payment gateway. Full card numbers, CVV codes, and card PINs are handled entirely within the payment gateway's secure environment and are never stored on JK667's own servers. JK667 retains only the last four digits of a registered card number alongside the card issuing bank name — sufficient to allow you to identify which card you have registered, without creating a security risk in the event of any unauthorised access to JK667's systems.

For bank IBFT transactions, JK667 stores your registered IBAN for withdrawal processing. IBANs are stored in encrypted form and are only accessed during active withdrawal processing. JK667 does not have access to your online banking credentials and never requests them.

JK667 uses cookies and similar browser storage technologies to enable core platform functionality, maintain your login session, support security monitoring, and — with your consent — analyse how Pakistani players use the platform. Cookies do not give JK667 access to your device's files or other applications.

When you first visit jk667.biz, a cookie consent banner gives you the option to accept or decline non-essential cookies. Essential cookies — those required for the platform to function, including session authentication — cannot be disabled without logging out of JK667. All other cookie categories require your explicit consent before they are placed.

JK667 does not use third-party advertising cookies. The platform does not share cookie data with advertising networks or data brokers. Analytics data collected through JK667's own analytics tools is used solely to understand platform performance and is not combined with personally identifiable information for profiling purposes.

JK667 retains personal data only for as long as it is needed for the purpose for which it was collected, or as required by applicable law. The platform applies retention schedules aligned with the nature of each data category:

• Account and identity data (name, contact details, CNIC): retained for the duration of your active JK667 account plus a minimum of 5 years following account closure, to support dispute resolution and regulatory compliance;
• Financial transaction records (deposit and withdrawal history, payment method registration): retained for 7 years from each transaction date, in accordance with financial recordkeeping requirements applicable to payment services;
• KYC documentation (CNIC images submitted for identity verification): retained for 7 years from the date of collection, regardless of account status;
• Device and access logs (IP addresses, login timestamps): retained on a 90-day rolling basis under normal operating conditions; specific records implicated in a security investigation may be retained until that investigation is closed;
• Usage and analytics data (game sessions, click paths): retained for 13 months in non-anonymised form, after which data is either deleted or converted to fully anonymised aggregate statistics with no connection to individual player identities;
• Responsible gaming records (limit settings, self-exclusion records): retained for the duration of the account plus 5 years to support ongoing responsible gaming monitoring obligations.

When a retention period expires, JK667 securely deletes the relevant data from its active systems. For backup systems, deleted data is purged within the next scheduled backup cycle in accordance with JK667's data deletion protocols.

As a player registered on JK667, you have the following rights in relation to your personal data. These rights are available to all players regardless of account status, subject to applicable legal limitations on certain categories of data (particularly financial records subject to statutory retention requirements):

• Right of access: You may request a summary of all personal data JK667 holds about you. JK667 will respond within 30 days of receiving a verified request.
• Right to rectification: If any personal data JK667 holds about you is inaccurate or incomplete, you have the right to request correction. For contact details and non-identity information, corrections can be made directly through your JK667 account settings.
• Right to erasure: You may request deletion of your personal data where JK667 no longer has a legal basis to retain it. Note that financial transaction records and KYC documentation are subject to statutory retention requirements that override erasure requests for their applicable periods.
• Right to restriction: You may request that JK667 restrict processing of your data in certain circumstances — for example, while a rectification request is under review.
• Right to object: You may object to JK667's processing of your data where that processing is based on legitimate interest, including the use of usage data for platform analytics.
• Right to withdraw consent: Where JK667 processes data based on your consent (notably usage analytics and non-essential cookies), you may withdraw that consent at any time through your account cookie settings or by contacting support@jk667.biz. Withdrawal does not affect processing that occurred before the withdrawal.

To exercise any of these rights, email support@jk667.biz with your full name, registered mobile number, and the specific request. JK667 will verify your identity before processing any data request and will respond within 30 days. For complex requests, JK667 may extend this period by up to a further 60 days with notification to you of the extension and the reason.

JK667 is strictly an 18+ platform and does not knowingly collect personal data from any individual under the age of 18. All registration processes on JK667 include age verification steps, and KYC verification confirms legal adult status before first withdrawal.

If JK667 discovers that personal data has been collected from a person under 18 — whether through a fraudulent registration or through a minor accessing the platform using another person's details — that account will be immediately suspended, all data associated with the account will be flagged for deletion (subject only to legally mandated retention requirements), and the matter will be handled in accordance with child protection obligations applicable to JK667's operating jurisdiction.

Parents or guardians who believe a minor may have registered on JK667 using false information should contact support@jk667.biz immediately with details. JK667 will investigate promptly and take appropriate action. JK667 also recommends that families with children use device-level parental controls and safe browsing tools to prevent underage access to gaming platforms.

JK667 implements technical and organisational security measures designed to protect player personal data against unauthorised access, disclosure, alteration, and destruction. The key security measures in place on JK667 include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and JK667's servers is encrypted in transit using industry-standard TLS encryption. The padlock icon in your browser confirms this encryption is active during your session.
• Database encryption at rest: Personal data stored on JK667's servers — including identity details, payment method records, and KYC documentation — is encrypted at rest using AES-256 encryption.
• Two-factor authentication: JK667 offers two-factor authentication (2FA) for all player accounts. JK667 strongly recommends activating 2FA, which adds an SMS verification step to the login process and significantly reduces the risk of unauthorised account access.
• Access controls: JK667 staff access to player personal data is limited on a need-to-know basis. No single JK667 staff member has unrestricted access to all player data. Access logs are maintained and reviewed regularly.
• Fraud monitoring: Automated systems continuously monitor login patterns, transaction activity, and device identifiers for indicators of account compromise or fraudulent activity.
• Regular security testing: JK667 conducts periodic security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no online platform can guarantee absolute security against all possible threats. JK667 will notify affected players promptly in the event of a data breach that poses a risk to their rights, and will take immediate remedial action.

JK667 reviews this Privacy Policy periodically and updates it when changes to data collection practices, legal requirements, or platform operations make revision necessary. The "Last Updated" date at the top of this page reflects the most recent revision.

For material changes — those that meaningfully alter how JK667 collects or uses personal data — JK667 will notify registered players by email to their registered address and display a notice on jk667.biz. Where changes require your affirmative consent (for example, new uses of data that were not contemplated when you registered), JK667 will seek that consent before the new processing begins.

Continued use of JK667 following a published update to this Privacy Policy constitutes acceptance of the updated version for processing that does not require affirmative consent. JK667 recommends bookmarking this page and reviewing it whenever you receive a notification of changes.

For any privacy-related questions, data access requests, or concerns about how JK667 handles your personal information, please contact:

Email: support@jk667.biz
Please include "PRIVACY REQUEST" in the subject line and provide your full name and registered mobile number to allow JK667 to verify your identity before processing your request.

JK667 commits to responding to privacy enquiries within 10 business days of receipt for general questions, and within 30 days for formal data subject rights requests (access, erasure, rectification). Where a request requires additional time, JK667 will acknowledge receipt and provide a projected response timeline within the initial 10-day window.

If you are not satisfied with JK667's response to a privacy concern, you may escalate your complaint to the relevant data protection authority applicable to your jurisdiction. JK667 will cooperate fully with any regulatory investigation into its data handling practices.