kp68 Privacy Policy

1. Controller Identity

For the purposes of applicable data protection law, the data controller responsible for the personal data of users of the kp68 platform at kp68.org ("Platform") is kp68 ("kp68", "we", "us", "our"). kp68 operates the Platform as an English-language online betting and casino service targeting Pakistani users. Any reference to "you" or "your" in this Privacy Policy refers to you as a registered or prospective user of the Platform.

kp68 can be contacted in relation to any data protection matter by email at the address shown in the footer of this website. kp68 is committed to responding to privacy-related enquiries within a reasonable timeframe.

2. Data We Collect

kp68 collects personal data in the following categories, depending on how you interact with the Platform:

2.1 Registration Data

• Full legal name
• Date of birth (used for 18+ age verification)
• Pakistani mobile number (e.g., +92 3xx format) and/or email address
• Residential address (city, province, postal code)
• Preferred currency (PKR)
• Username and hashed password

2.2 Identity Verification Data

• Copy of government-issued identity document (CNIC, passport)
• Proof of address document where requested
• Selfie or facial verification image where required for enhanced KYC
• Source of funds declaration where required by our compliance obligations

2.3 Financial & Transaction Data

• Payment method details (JazzCash account number, Easypaisa number, bank account details, card details — stored in tokenised form only)
• Deposit and withdrawal history
• PKR wallet balance records
• Betting and gaming transaction history

2.4 Usage & Technical Data

• IP address and approximate geolocation
• Device type, browser type and version, operating system
• Session logs, login timestamps, and access history
• Pages visited, features used, and interaction patterns within the Platform
• Betting preferences and game history (used for personalisation and responsible gaming monitoring)

2.5 Communications Data

• Contents of support chat transcripts and email correspondence with kp68
• Your stated preferences regarding marketing communications
• Feedback and survey responses

3. How We Use Your Data

kp68 uses the personal data we collect for the following purposes:

• Account creation and management: To register your kp68 account, verify your identity, and maintain your user profile.
• Service delivery: To process deposits via JazzCash, Easypaisa, and other PKR payment methods; to process withdrawals; to settle bets and casino wagers; and to provide access to all Platform features following kp68 login.
• Age and identity verification: To confirm you meet the 18+ minimum age requirement and to comply with Know Your Customer (KYC) obligations.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, multi-accounting, and any misuse of the Platform or its payment infrastructure.
• Responsible gaming: To monitor gambling patterns and identify indicators of problem gambling; to enforce self-exclusion orders; and to administer player protection tools such as deposit limits and session controls.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Legal compliance: To comply with applicable anti-money laundering (AML), counter-terrorism financing (CTF), and data protection obligations, and to respond to lawful requests from regulatory or law enforcement authorities.
• Marketing communications: Where you have opted in, to send you promotional offers, bonuses, and product updates relevant to your kp68 usage. You may withdraw consent at any time via your account settings.
• Platform improvement: To analyse usage data in aggregate form to improve Platform performance, content, and user experience.

4. Legal Basis for Processing

kp68 processes your personal data under one or more of the following legal bases:

• Contract performance: Processing necessary to provide the services you have registered to receive under the kp68 Terms & Conditions.
• Legal obligation: Processing required to comply with applicable law, including AML/KYC regulations and responsible gaming requirements.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform improvement, where these interests are not overridden by your data protection rights.
• Consent: Where kp68 relies on consent as a legal basis (primarily for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing

kp68 does not sell, rent, or trade your personal data to any third party for that party's own marketing purposes. kp68 may share your personal data with the following categories of recipients, strictly as necessary:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa, Mastercard, and USDT gateway providers, solely to process transactions you have initiated.
• Identity verification providers: Third-party KYC and document verification services used to confirm age, identity, and source of funds in accordance with our compliance obligations.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Play'n GO, Ezugi, and other licensed B2B game providers who may receive anonymised session data for RTP and fairness auditing purposes.
• Regulatory and law enforcement authorities: Where kp68 is legally required to disclose information by court order, regulatory demand, or applicable law.
• Service providers: Cloud hosting, customer support platform, and analytics vendors engaged by kp68 under contractual data processing agreements that prohibit further use of your data outside the agreed scope.

All third parties with whom kp68 shares data are required to maintain appropriate technical and organisational measures to protect your information.

6. Cookies & Tracking Technologies

kp68 uses cookies and similar tracking technologies on the Platform to:

• Maintain your authenticated session following kp68 login
• Remember your preferences (language, display settings)
• Collect aggregate analytics data on Platform usage
• Detect and prevent fraudulent activity

kp68 does not use third-party advertising cookies or retargeting pixels on the Platform. You may configure your browser to block or delete cookies, but doing so may affect the functionality of certain Platform features, including the ability to remain logged in to your kp68 account across sessions.

7. Data Retention

kp68 retains your personal data for as long as your account is active and for a minimum period of five (5) years following account closure, in order to comply with AML, KYC, and regulatory record-keeping obligations. Financial transaction records may be retained for longer periods where required by applicable law. Usage data and session logs are retained for a maximum of 24 months. Communications data is retained for 36 months following the close of the relevant support interaction.

Where data is no longer required for any lawful purpose, kp68 will securely delete or anonymise it.

8. Security Measures

kp68 implements industry-standard technical and organisational security measures to protect your personal data, including:

• 256-bit SSL/TLS encryption for all data in transit between your browser and the kp68 Platform
• Encryption of sensitive data at rest, including payment method tokens and identity documents
• Access controls limiting internal staff access to personal data on a strict need-to-know basis
• Two-factor authentication (2FA) available to all users for kp68 login
• Regular security audits and penetration testing by independent third parties
• Incident response procedures for notifying affected users and relevant authorities in the event of a data breach

While kp68 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are also responsible for maintaining the confidentiality of your kp68 login credentials.

9. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by kp68:

• Access: The right to request a copy of the personal data kp68 holds about you.
• Rectification: The right to request correction of inaccurate or incomplete data.
• Erasure: The right to request deletion of your data, subject to kp68's legal retention obligations.
• Restriction: The right to request that kp68 restrict the processing of your data in certain circumstances.
• Portability: The right to receive your data in a structured, commonly used, machine-readable format where technically feasible.
• Objection: The right to object to processing based on legitimate interests, including direct marketing.
• Withdraw Consent: Where processing is based on consent, the right to withdraw that consent at any time.

To exercise any of these rights, please contact kp68 using the support email address in the footer of this page. kp68 will respond to verified requests within 30 days. kp68 may require identity verification before processing a data rights request.

10. Children's Privacy

The kp68 Platform is strictly for users aged 18 and over. kp68 does not knowingly collect personal data from any person under the age of 18. If kp68 discovers that a registered user is under 18, the account will be immediately suspended, age verification documentation will be requested, and the account will be permanently closed if the user cannot demonstrate that they have reached 18 years of age. Any deposits made by a user confirmed to be under 18 will be returned, and no winnings from that period will be paid out. If you believe a minor has accessed kp68, please contact us immediately.

11. International Data Transfers

kp68 may transfer your personal data to servers, processors, or service providers located outside Pakistan. Where such transfers occur, kp68 ensures that appropriate safeguards are in place — such as standard contractual clauses or equivalent mechanisms — to protect your data to a standard consistent with this Privacy Policy. By using the kp68 Platform, you acknowledge that your data may be processed in jurisdictions outside Pakistan.

12. Updates to This Policy

kp68 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform features. Material updates will be communicated to registered users via in-account notification or email prior to the updated Policy taking effect. The date of the most recent update is shown at the top of this page. Your continued use of the Platform after any update constitutes acceptance of the revised Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kp68 handles your personal data, please contact our data protection team using the support email address shown in the footer of this page. kp68 takes all privacy-related communications seriously and will acknowledge receipt of your enquiry within two (2) business days.