apk68 Privacy & Data Protection Policy

When you register and use the apk68 platform, we collect various categories of personal data. This collection is necessary to provide you with a functional, secure, and legally compliant online betting and casino experience. The categories of data we collect are as follows:

apk68 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification purposes under applicable KYC standards.

apk68 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent:

• Account creation and management: To set up and administer your apk68 account, verify your identity, and maintain your account profile.
• Service delivery: To process your bets on PSL, Asia Cup, ICC, and other sports markets; to provide access to casino games; and to manage your PKR wallet balance including deposits and withdrawals.
• KYC and AML compliance: To verify your identity documents, screen against international sanctions and politically exposed persons (PEP) lists, and report suspicious transactions as required by applicable law.
• Fraud prevention and security: To detect, investigate, and prevent unauthorised account access, payment fraud, multi-accounting, bonus abuse, and other prohibited activities.
• Responsible gaming: To monitor your betting patterns for signs of problem gambling, to enforce deposit limits and self-exclusion requests, and to provide responsible gaming interventions where warranted.
• Customer support: To respond to your queries, investigate complaints, and resolve disputes via our 24/7 support team.
• Platform personalisation: To tailor your apk68 homepage, match recommendations, and promotional offers to your interests and betting history, improving your overall experience.
• Marketing communications: To send you information about apk68 promotions, PSL seasonal offers, and new features — but only if you have opted in to receive such communications. You can opt out at any time via your account settings or by contacting support.
• Legal and regulatory obligations: To comply with applicable laws, regulatory directions, court orders, and law enforcement requests in the jurisdictions in which apk68 operates.

apk68 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil the contract between apk68 and you — including account setup, bet settlement, payment processing, and customer support.
• Legal obligation: Processing required for apk68 to comply with anti-money laundering legislation, KYC regulations, financial record-keeping requirements, and other applicable laws.
• Legitimate interests: Processing carried out for apk68's legitimate business interests — including fraud detection, platform security, and internal analytics — where these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — such as receiving promotional emails about PSL match bonuses or new casino game launches. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

apk68 does not sell, rent, or trade your personal data to third parties. We may share your personal data only with the following categories of recipients, and only to the extent strictly necessary:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum financial data required to process your deposits and withdrawals. These partners are contractually bound to use your data solely for payment processing purposes.
• KYC and identity verification providers: Third-party identity verification services that assist apk68 in validating CNIC documents and screening against AML watchlists. These providers operate under strict data processing agreements.
• Game content providers: Studios such as Evolution Gaming, Pragmatic Play, PG Soft, and others receive anonymised or pseudonymised session data necessary to deliver their games within the apk68 platform. They do not receive your full identity data.
• Fraud and risk management platforms: Specialist platforms that analyse betting patterns and account behaviour to detect fraudulent activity. Data shared is limited to technical and usage data.
• Regulatory and law enforcement authorities: Where required by law, court order, or regulatory direction, apk68 will disclose personal data to the appropriate authority. We will notify you of such disclosure where legally permitted to do so.
• Professional advisors: Legal counsel, auditors, and accountants, subject to professional confidentiality obligations, where necessary for apk68 to receive professional advice.

All third parties with whom apk68 shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose other than the one for which it was shared.

apk68 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain session security, and analyse aggregate platform usage. The following cookie categories are in use on apk68:

• Strictly necessary cookies: Essential for the apk68 platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your language preferences, display settings, and last-visited game categories so you do not need to re-configure them on each visit.
• Analytics cookies: Collect anonymised data about how users navigate the apk68 platform — which sports markets are most popular, how long sessions last, and where users encounter errors. This data is used to improve the platform experience.
• Security cookies: Support our fraud detection systems by helping us identify suspicious session behaviour, unusual device switching, or rapid geographic location changes.

apk68 does not use advertising or third-party retargeting cookies. You may control cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your apk68 account.

apk68 retains your personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies:

When the applicable retention period expires, apk68 will securely delete or anonymise your personal data in accordance with our internal data destruction procedures. Anonymised data — where it is no longer possible to re-identify you — may be retained indefinitely for aggregate statistical analysis.

apk68 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• TLS 1.3 encryption on all data in transit between your device and apk68 servers.
• AES-256 encryption for sensitive data stored at rest, including CNIC numbers and payment identifiers.
• Bcrypt password hashing — your apk68 password is never stored in plain text.
• Two-factor authentication (2FA) available on all apk68 accounts and strongly recommended.
• Continuous intrusion detection and prevention systems (IDS/IPS) monitoring all network traffic.
• Role-based access controls (RBAC) ensuring apk68 staff can only access the minimum personal data necessary for their specific job function.
• Regular independent security audits and penetration testing of the apk68 platform infrastructure.
• Data breach response procedures: In the event of a security breach affecting your personal data, apk68 will notify affected users and relevant authorities within 72 hours of confirming the breach, in accordance with applicable data protection legislation.

As an apk68 user, you have the following rights with respect to your personal data. To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Data Rights Request":

apk68 will respond to all valid data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension within the initial 30-day window. There is no fee for exercising your data rights, unless requests are manifestly unfounded or excessive.

Please note that certain rights — particularly the right to erasure — may be limited where apk68 is required to retain your data to comply with AML, KYC, or other legal obligations. In such cases, apk68 will clearly explain the basis for the limitation in our response to your request.

apk68 is strictly prohibited to individuals under the age of 21. We do not knowingly collect, process, or retain personal data from anyone under this age threshold. Our platform employs multiple layers of age verification designed to prevent underage access:

• Date of birth is collected at registration and validated against the stated minimum age of 21.
• CNIC verification cross-checks the stated date of birth against government-issued identity documentation.
• Withdrawal processing includes a mandatory identity re-verification step that will flag any discrepancy between the registered age and the identity document submitted.
• Our risk team monitors for behavioural indicators that may suggest underage use and will trigger an account review where such indicators are detected.

If apk68 becomes aware that personal data has been collected from a person under the age of 21 — whether through our own detection or a report from a parent or guardian — we will immediately suspend the account, quarantine all associated personal data, void any wagering activity, and initiate a return of deposits to the payment source used. The quarantined data will be securely deleted following the completion of our investigation.

Parents or guardians who believe their child has registered on apk68 should contact us immediately at [email protected]. We treat all such reports as a priority and will respond within 24 hours.

apk68 operates infrastructure and works with service providers located in multiple countries. As a result, your personal data may be transferred to and processed in countries outside Pakistan. Where such international transfers occur, apk68 ensures that appropriate safeguards are in place to protect your data, including:

• Standard contractual clauses (SCCs) incorporated into data processing agreements with international service providers.
• Transfers only to service providers that maintain data protection standards equivalent to or exceeding the protections offered under applicable Pakistani and international data privacy frameworks.
• Regular due diligence reviews of international data processing partners to confirm ongoing compliance with apk68's data protection requirements.

Your personal data will not be transferred to any country that does not provide an adequate level of protection for personal data without your explicit consent or the implementation of appropriate contractual safeguards as described above.

apk68 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, new regulatory requirements, or improvements to our privacy programme. When material changes are made to this policy, apk68 will:

• Update the "Last Updated" date displayed at the top of this page.
• Send an email notification to all registered apk68 users at the email address on file, summarising the key changes.
• Display a prominent in-platform notification for a minimum of 14 days following the publication of the updated policy.

Your continued use of the apk68 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you must cease using apk68 and request account closure by contacting our support team.

The current version of this Privacy Policy supersedes all previous versions. We recommend bookmarking this page and reviewing it periodically, particularly before making any significant account activity such as large withdrawals or submitting KYC documents.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way apk68 handles your personal data, please do not hesitate to get in touch. Our dedicated Data Protection team is available to assist Pakistani players 24 hours a day, 7 days a week.

You can reach apk68's Data Protection team using the following contact details:

• General Support and Data Requests: [email protected] — please use the subject line "Privacy / Data Rights Request" for all data protection queries to ensure your message is routed to the correct team.
• Response Timeframe: All privacy-related queries will receive an acknowledgement within 48 hours and a substantive response within 30 calendar days.
• Complaints: If you are not satisfied with apk68's response to a data rights request, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.