dk168 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is issued by dk168 ("dk168", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at dk168.org and all associated mobile interfaces and sub-domains (collectively, the "Platform").

This Policy sets out how dk168 collects, uses, stores, shares, and protects the personal data of individuals who register accounts on, access, or interact with the Platform ("Players", "Users", "you"). It also describes your rights in relation to your personal data and how you may exercise them.

dk168 is committed to handling personal data responsibly and in compliance with the applicable data protection provisions of our international gaming licence. Where Pakistani players are concerned, we apply the highest practicable standard of data protection as a matter of operational principle, irrespective of whether a specific legislative mandate applies in the player's local jurisdiction.

By registering a dk168 account, accessing the Platform, or interacting with any dk168 service, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must not use the dk168 Platform.

2 Data Controller

2.1 For the purposes of this Privacy Policy, dk168 is the data controller in respect of all personal data collected from Players using the Platform. As data controller, dk168 determines the purposes and means by which your personal data is processed.

2.2 dk168 operates the Platform under an international gaming licence issued by a recognised gaming regulatory authority. Our licence obligations include specific requirements regarding the collection, storage, and protection of player data, including identity verification records, financial transaction data, and responsible gaming information.

2.3 Contact details for the dk168 data protection function are provided in Section 15 of this Policy. All formal data subject requests and privacy-related correspondence should be directed to the contact details specified in that section.

3 Data We Collect

dk168 collects the following categories of personal data from Players. The specific data points collected in each category depend on your level of account activity and verification status.

3.1 Special Categories of Data. dk168 does not intentionally collect special category personal data (such as health data, ethnic origin, or political opinions) from Players, except where a Player voluntarily discloses health-related information in the context of a responsible gaming or self-exclusion request. Such information is used solely to administer the player's responsible gaming preferences and is not used for any other purpose.

4 How We Collect Data

dk168 collects personal data through the following means:

• Directly from you: When you register an account, complete identity verification, make deposits or withdrawals via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, contact the support team, or use any Platform feature that requires you to submit information.
• Automatically: When you access and use the Platform, dk168's servers automatically record technical data including your IP address, device identifiers, session duration, page views, and error logs. This occurs whether or not you are logged in to your dk168 account.
• Via Cookies and Tracking Technologies: dk168 uses cookies, pixel tags, and similar technologies to collect behavioural and preference data as described in Section 10 of this Policy.
• From Third Parties: dk168 may receive data from identity verification service providers, payment processors (including mobile wallet operators and banks), fraud prevention services, and gaming regulatory authorities. Data received from third parties is used only for the purposes stated in this Policy.

5 Purpose & Legal Basis for Processing

dk168 processes your personal data only for defined, lawful purposes. The following table sets out each primary processing purpose and its corresponding legal basis.

6 Data Sharing & Disclosure

6.1 General Principle. dk168 does not sell, rent, or trade your personal data to third parties for their own independent marketing or commercial purposes. Data is shared with third parties only in the circumstances described below.

6.2 Service Providers. dk168 engages third-party service providers who process personal data on our behalf under binding data processing agreements. These providers include:

• Payment processors and mobile wallet operators (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) for the purpose of processing PKR deposits and withdrawals
• Identity and age verification services (KYC providers) for the purpose of verifying player identity in compliance with our gaming licence
• Fraud prevention and anti-money laundering screening services
• Game software providers who supply casino games operated on the dk168 Platform
• Cloud hosting and infrastructure providers who store Platform data
• Customer support platform providers who facilitate live chat and email communications
• Analytics providers who assist with Platform performance monitoring

All service providers are required to process player data only on dk168's documented instructions and to implement appropriate technical and organisational security measures.

6.3 Regulatory and Legal Disclosure. dk168 may disclose personal data to gaming regulatory authorities, financial intelligence units, law enforcement agencies, or courts where required to do so by applicable law, by the terms of our gaming licence, or pursuant to a valid legal order or judicial warrant. dk168 will not notify players of such disclosures where prohibited from doing so by law.

6.4 Business Transfers. In the event that dk168's business or any part of it is sold, merged, acquired, or otherwise transferred to a third party, your personal data may form part of the transferred assets. You will be notified in advance of any such transfer where practicable, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

7 International Data Transfers

7.1 dk168 operates internationally and your personal data may be transferred to, stored in, and processed in countries other than Pakistan. This includes countries where dk168's server infrastructure is hosted and where third-party service providers operate.

7.2 When transferring personal data outside the country of collection, dk168 ensures that appropriate safeguards are in place to protect your data to the same standard as described in this Policy. These safeguards include binding contractual clauses with data processors, adherence to the data protection standards required by our gaming licence, and technical security measures including encryption in transit and at rest.

7.3 By using the dk168 Platform and providing your personal data, you acknowledge and consent to the international transfer of your data as described in this section.

8 Data Retention Periods

8.1 dk168 retains personal data for no longer than is necessary for the purposes for which it was collected, taking into account our legal and regulatory obligations, operational requirements, and the need to resolve disputes or enforce agreements.

8.2 The following retention periods apply as a general guideline:

• Active Account Data: Retained for the duration of your active dk168 account relationship plus a period of five (5) years from account closure, to satisfy regulatory and anti-money laundering record-keeping requirements.
• KYC and Identity Verification Records: Retained for a minimum of five (5) years from the date of verification, or longer if required by applicable law or gaming licence conditions.
• Financial Transaction Records (PKR deposits, withdrawals): Retained for seven (7) years from the date of each transaction, in compliance with standard financial record-keeping requirements.
• Customer Support Communications: Retained for three (3) years from the date of the communication, unless relevant to an ongoing dispute or legal proceeding.
• Marketing Consent Records: Retained until you withdraw consent or request deletion, plus one (1) additional year as evidence of prior consent.
• Technical and Log Data: Retained for twelve (12) months from collection, unless required for longer retention for security investigation or legal purposes.

8.3 Upon expiry of the applicable retention period, dk168 will securely delete or anonymise your personal data in accordance with its data disposal procedures. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.

9 Security Measures

9.1 dk168 implements comprehensive technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and dk168 servers is encrypted using 256-bit SSL/TLS protocols. The padlock symbol displayed in your browser address bar confirms this encryption is active.
• Encryption at Rest: Sensitive data stored on dk168 servers — including identity verification records and financial information — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within dk168's systems is restricted on a strict need-to-know basis. Employees who require access to player data for legitimate operational purposes are subject to confidentiality obligations and access is logged and audited.
• Two-Factor Authentication: dk168 offers optional two-factor authentication (2FA) on player accounts, providing an additional layer of security beyond the standard username and password login.
• Regular Security Audits: dk168 engages independent security professionals to conduct regular penetration testing and security audits of Platform infrastructure.
• Segregated Player Funds: Player PKR balances are held in accounts segregated from dk168's operational funds, protecting player assets in the event of a business disruption.

9.2 Data Breach Notification. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, dk168 will notify affected players without undue delay, consistent with our obligations under our gaming licence and applicable legal requirements.

9.3 Your Responsibility. The security of your dk168 account is a shared responsibility. You are responsible for maintaining the confidentiality of your login credentials. dk168 recommends enabling 2FA, using a unique strong password for your dk168 account, and logging out of the Platform when using shared or public devices.

10 Cookies & Tracking Technologies

10.1 dk168 uses cookies and similar tracking technologies (including pixel tags and local storage) to operate the Platform, improve user experience, and collect analytical data about Platform usage.

Types of Cookies Used by dk168

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include cookies that maintain your logged-in session, remember your language and currency preferences, and enable security features such as CSRF protection. These cookies cannot be disabled without impairing Platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated, anonymous information about how Players interact with the dk168 Platform — including which pages are visited most frequently, how long players spend on each section, and which games are most popular. This data helps dk168 improve the Platform experience for Pakistani players.
• Functionality Cookies: Used to remember your preferences across sessions, such as your preferred game categories, notification settings, and responsible gaming configurations.
• Marketing Cookies: Used, where you have consented, to display relevant dk168 promotional content. These cookies track whether you have viewed a particular promotion and help dk168 measure the effectiveness of its marketing activities.

10.2 Cookie Management. You can configure your browser to block, restrict, or delete cookies at any time. Please note that disabling strictly necessary cookies will impair your ability to use the dk168 Platform, including your ability to log in to your account and process PKR transactions. Instructions for managing cookies are available in your browser's help documentation.

10.3 By continuing to use the dk168 Platform after the display of our cookie consent notice, you consent to our use of non-essential cookies as described in this section.

11 Your Rights Regarding Personal Data

Subject to applicable law and the conditions of our gaming licence, dk168 Players have the following rights in relation to their personal data. To exercise any of these rights, please contact us using the details in Section 15.

11.1 Response Timelines. dk168 will respond to all valid data subject requests within thirty (30) days of receipt. Where a request is complex or numerous, this period may be extended by a further thirty (30) days, with notification to you of the extension and the reason for it.

11.2 Identity Verification for Requests. To protect against unauthorised data disclosure, dk168 may require you to verify your identity before processing a data subject request. This is consistent with our KYC obligations and is intended to prevent third-party access to your personal information.

11.3 Limitations. Certain data subject rights are subject to legal limitations. For example, dk168 cannot delete financial transaction records that it is legally required to retain under anti-money laundering legislation, and cannot delete KYC records during the mandatory retention period specified by our gaming licence.

12 Minors & Age Policy

12.1 The dk168 Platform is strictly restricted to persons aged 21 years and above. dk168 does not knowingly collect personal data from individuals below this age threshold.

12.2 dk168 applies age verification procedures at account registration and at the point of first withdrawal request. Where dk168 discovers or has reasonable grounds to suspect that personal data has been provided by an individual under the age of 21, the relevant account will be immediately suspended, all deposited funds will be returned to the original payment source, and the personal data of the underage individual will be deleted from dk168's systems as soon as practicable consistent with any legal reporting obligations.

12.3 If you believe that an individual under the age of 21 has registered a dk168 account, please contact the support team immediately at [email protected].

13 Third-Party Links & Services

13.1 The dk168 Platform may contain references to third-party services, including game providers and payment processors. While dk168 takes care to work with reputable partners, we do not control the privacy practices of third-party services and are not responsible for their privacy policies or data handling procedures.

13.2 When you interact with a third-party service accessed through or in connection with the dk168 Platform — such as your mobile wallet provider (JazzCash, EasyPaisa) or your bank (HBL, UBL, Meezan Bank) — that service's own privacy policy will govern the collection and use of your data in relation to that interaction. dk168 recommends reviewing the privacy policies of any third-party services you use in connection with your dk168 account.

13.3 dk168 is not liable for the privacy practices of third parties, and the inclusion of third-party services in connection with the Platform does not constitute an endorsement of their privacy or security practices.

14 Changes to This Privacy Policy

14.1 dk168 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our gaming licence obligations, business practices, or Platform functionality. The "Last Updated" date at the top of this page will be revised whenever material changes are made.

14.2 Where changes to this Policy are material — meaning they significantly affect your rights or how dk168 processes your personal data — dk168 will notify active account holders by email or through an in-platform notification prior to the changes taking effect, where practicable.

14.3 Your continued use of the dk168 Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Privacy Policy, you should cease using the Platform and may request account closure by contacting the dk168 support team.

14.4 We recommend that all dk168 Players review this Privacy Policy periodically to remain informed about how their personal data is being handled.

15 Contact & Complaints

15.1 Data-Related Enquiries. For any questions, concerns, or requests related to this Privacy Policy or dk168's handling of your personal data, please contact the dk168 data protection team using the following details:

• Privacy & Data Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please include "Privacy Request" or "Data Subject Request" in the subject of your email
• Live Chat: Available 24/7 on the dk168 Platform (Pakistan Standard Time, PKT UTC+5)
• Response Time: All privacy-related requests acknowledged within 48 hours; substantive response within 30 days

15.2 Complaints. If you are not satisfied with dk168's response to a privacy-related concern, you have the right to escalate your complaint to the gaming regulatory authority under whose licence dk168 operates. You may also have the right to complain to a data protection supervisory authority in your jurisdiction. Details of the relevant regulatory authority are available on request from the dk168 support team.

15.3 Useful Links. For information about your rights and responsible gaming support, please refer to our internal pages:

• Responsible Gaming — self-exclusion tools, deposit limits, and support resources
• Terms & Conditions — the full contractual terms governing your dk168 account
• About Us — the dk168 story and our commitments to Pakistani players