Privacy Policy — kz567

1 Introduction

This Privacy Policy ("Policy") is issued by kz567 ("kz567", "the Platform", "we", "us", "our") and applies to all users ("you", "your", "User") who access, browse or otherwise use the website located at https://kz567.cam and all associated content, features and services.

kz567 is an English-language online gaming information platform principally serving users in Pakistan and internationally. We are committed to protecting your personal data and handling it with care, transparency and in accordance with applicable data-protection principles.

This Policy is to be read in conjunction with our Terms & Conditions. By continuing to use the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.

2 Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including name, email address, IP address, device identifiers and financial data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure or deletion.
• "Data Controller" means kz567, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means a third party that processes Personal Data on behalf of kz567 under a contractual arrangement.
• "Cookies" means small text files placed on your device by a website to store information about your browsing preferences and activity.
• "KYC" means Know Your Customer — the identity verification process required by gaming operators and applicable financial regulations.
• "User" has the same meaning as defined in the kz567 Terms & Conditions.

3 Data We Collect

kz567 collects the following categories of personal data, limited to what is necessary for the purposes described in this Policy:

3.1 Identity & Contact Data

• Full legal name and date of birth (for account registration and age verification)
• Email address (for account management and communications)
• City and country of residence (for jurisdictional assessment and localised content)

3.2 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Browser type, version and operating system
• Device type (desktop, mobile, tablet) and screen resolution
• Pages visited, time spent on pages, click-path data and referring URLs
• Session duration and frequency of visits

3.3 Account & Transaction Data

• Account login credentials (stored in hashed, encrypted form — plaintext passwords are never retained)
• Deposit and withdrawal records, including payment method category references (e.g., e-wallet, bank transfer, cryptocurrency)
• Bonus and promotional activity history
• KYC documentation submitted for identity verification purposes

3.4 Communication Data

• Content of messages sent to our support team via email or live chat
• Records of support interactions for quality assurance and dispute resolution purposes

3.5 Responsible Gambling Data

• Self-imposed limit settings (deposit limits, session time limits, loss limits)
• Self-exclusion requests and active exclusion status
• Responsible gambling tool interaction history

4 How We Collect Data

We collect personal data through the following means:

4.1 Direct Collection

Data you provide voluntarily when registering an account, completing KYC verification, contacting support, submitting a responsible-gambling request or otherwise interacting with the Platform.

4.2 Automated Collection

Technical and usage data collected automatically through standard web technologies including cookies, web beacons, server logs and analytics tools when you browse the Platform. See Section 10 (Cookies & Tracking) for further detail.

4.3 Third-Party Sources

Identity verification data may be cross-referenced with third-party KYC service providers as part of our compliance obligations. We do not receive or store marketing lists from external parties.

5 Data Processing & Use

kz567 processes your personal data for the following specific purposes only. We do not use your data for any purpose incompatible with those listed below.

6 Legal Basis for Processing

kz567 relies on the following lawful bases for processing personal data:

• Contractual Necessity: Processing required to perform our obligations to you under the Terms & Conditions, including account management, transaction processing and customer support.
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML obligations, age verification requirements and any regulatory reporting duties imposed by the operator's licensing jurisdiction.
• Legitimate Interests: Processing for purposes such as platform security, fraud detection, analytics and service improvement, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on consent as a legal basis — for example, for non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7 Data Sharing & Disclosure

7.1 We Do Not Sell Your Data

kz567 does not sell, rent, trade or otherwise transfer your personal data to third parties for commercial or marketing purposes. This is an unconditional commitment.

7.2 Service Providers (Data Processors)

We share personal data with carefully selected third-party service providers who process data on our behalf, strictly under contractual data-processing agreements and solely to assist us in operating the Platform. These categories include:

• KYC and identity verification providers
• Payment processing infrastructure providers
• Cloud hosting and server infrastructure providers
• Analytics and platform-performance monitoring providers
• Customer support software providers
• Cybersecurity and fraud-prevention services

7.3 Legal and Regulatory Disclosure

We may disclose personal data to competent authorities, regulatory bodies, law enforcement agencies or courts where we are legally required or compelled to do so. In such cases, we will disclose only the minimum data necessary to comply with the relevant obligation.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of kz567's assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer in advance where practicable, and the successor entity will be bound by commitments no less protective than those set out in this Policy.

8 Data Retention

We retain personal data for no longer than is necessary for the purposes for which it was collected, taking into account applicable legal, regulatory, accounting and reporting requirements.

• Active account data: Retained for the duration of your account's active status plus any mandatory post-closure retention period required by applicable law or regulatory obligation.
• KYC and transaction records: Typically retained for a minimum of five (5) years following account closure or the last transaction date, in accordance with standard AML/CFT regulatory requirements. Specific retention periods may differ depending on the licensing jurisdiction of the relevant operator.
• Support communications: Retained for up to three (3) years following the resolution of the relevant support interaction, for dispute-resolution and audit purposes.
• Technical and usage data: Anonymised or aggregated analytics data may be retained indefinitely. Individually identifiable technical data is deleted or anonymised after 12 months unless retention is required for security or legal reasons.
• Responsible gambling records: Self-exclusion and limit settings are retained for the active exclusion or limit period and for a reasonable period thereafter to support any potential re-application or regulatory review.

When data is no longer required, it is securely deleted or anonymised in a manner that prevents reconstruction of the original personal data.

9 Security Measures

kz567 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or disclosure:

• HTTPS/TLS Encryption: All data transmitted between your device and the kz567 Platform is encrypted using industry-standard TLS protocols. We enforce HTTPS across all Platform pages without exception.
• Password Hashing: Account passwords are never stored in plaintext. They are processed using a strong, salted cryptographic hashing algorithm before storage.
• Access Controls: Access to personal data within our organisation is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations.
• Two-Factor Authentication (2FA): Users are strongly encouraged to enable 2FA on their accounts to add an additional layer of protection against unauthorised access.
• Regular Security Reviews: Our security posture and data-handling procedures are reviewed periodically to identify and remediate vulnerabilities.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities in accordance with applicable law.

While we take all reasonable precautions, no method of electronic transmission or storage is entirely secure. We cannot guarantee absolute security and encourage users to adopt strong, unique passwords and to enable 2FA on their accounts.

10 Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files stored on your device by your browser when you visit a website. They enable the website to remember your preferences and activity across sessions and are widely used to make websites function efficiently.

10.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled without materially impairing your ability to use core features such as account login and session management.
• Analytics Cookies: Used to understand how users interact with the Platform — which pages are visited most frequently, how users navigate between sections, and where technical issues occur. Data collected is anonymised or aggregated wherever possible.
• Preference Cookies: Store your platform preferences, such as language settings and display configurations, so they persist across sessions.
• Security Cookies: Support our fraud-detection and account-security functions by identifying unusual or suspicious access patterns.

10.3 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Most browsers allow you to block all cookies, block third-party cookies only, or receive notification before a cookie is set. Please be aware that disabling certain cookies may impair the functionality of the Platform. Refer to your browser's help documentation for specific instructions on managing cookie preferences.

11 User Rights

Subject to applicable law, you have the following rights in respect of your personal data held by kz567. To exercise any of these rights, please contact us at [email protected]. We will respond to all verifiable requests within a reasonable timeframe.

12 Children's Privacy

kz567 is strictly an adults-only platform. We do not knowingly collect or process personal data from individuals under the age of 18, or the higher minimum age required by the relevant operator or license jurisdiction. Access by minors is prohibited.

If we become aware that personal data has been collected from a person under the applicable minimum age, we will take immediate steps to delete that data and close the associated account. If you believe a minor has accessed the Platform or submitted personal data, please notify us immediately at [email protected].

13 Third-Party Links & Services

The kz567 Platform may reference or link to third-party gaming operators, payment infrastructure providers and other external services. This Privacy Policy applies only to the kz567 Platform itself. We are not responsible for the privacy practices of any third-party website or service, including any operator to which we may direct users.

When you access a third-party platform through kz567, that platform's own privacy policy will govern the collection and use of your personal data. We strongly recommend that you review the privacy policy of any third-party service before providing your personal data to that service.

14 International Data Transfers

As an internationally operating platform, kz567 may transfer personal data to service providers or infrastructure located outside Pakistan. Where such transfers occur, we take appropriate steps to ensure that your personal data remains protected to a standard comparable to that required under applicable data-protection principles.

Appropriate safeguards for international transfers may include: contractual data-processing agreements incorporating standard clauses; transfers to jurisdictions recognised as providing adequate data protection; or other lawful transfer mechanisms applicable under the laws of the relevant jurisdiction.

15 Amendments to This Policy

kz567 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law or platform features. When material changes are made, we will publish the updated Policy on this page with a revised effective date.

Your continued use of the Platform following publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should discontinue use of the Platform and may request deletion of your account data in accordance with Section 11 (User Rights).

We recommend bookmarking this page and reviewing it periodically. The current effective date is displayed at the top of this Policy.

16 Contact Us

If you have questions, concerns or complaints about this Privacy Policy or our handling of your personal data — or if you wish to exercise any of the data rights described in Section 11 — please contact our Data Privacy team through the following channel:

We aim to acknowledge all privacy-related enquiries within 72 hours and to resolve substantive data-rights requests within 30 days of receipt of a verified request. Where a request is complex or involves a high volume of data, we may notify you of an extension of up to a further 60 days, with an explanation of the reason for the extension.