dk168 Privacy Policy

1. Who We Are

This Privacy Policy is issued by dk168 ("dk168", "we", "us", "our"), the operator of the online gaming platform accessible at https://dk168.bio. dk168 is the data controller in respect of personal data collected through the Platform and is responsible for ensuring that such data is processed in accordance with applicable data protection principles and the obligations imposed by our international gaming licence.

If you have any questions about this Policy, how dk168 handles your data, or wish to exercise any of your data rights, please contact us using the details set out in Section 15 of this Policy. Our Data Protection contact is available at [email protected] and responds within 24 hours on business days.

2. Personal Data We Collect

dk168 collects the following categories of personal data from players in Pakistan:

dk168 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers beyond what is contained in your CNIC for identity verification purposes.

3. How We Collect Your Data

3.1 Directly From You

The majority of the personal data dk168 holds about you is provided directly by you during:

• The account registration process (name, date of birth, CNIC, email, mobile number);
• KYC verification document uploads;
• Deposit and withdrawal requests (payment method details);
• Communications with our customer support team via live chat or email;
• Participation in promotions, surveys, or feedback requests.

3.2 Automatically During Platform Use

When you access and use the dk168 Platform, certain technical data is collected automatically by our systems, including your IP address, device identifiers, browser configuration, pages visited, session duration, and gameplay activity. This data is collected through server logs, cookies, and analytics tools as described in Section 7 of this Policy.

3.3 From Third Parties

In certain circumstances, dk168 may receive personal data about you from third parties, including:

• Identity verification providers — who confirm the authenticity of your CNIC and personal details;
• Payment processors — who confirm the status and ownership of your JazzCash, EasyPaisa, or bank account;
• Fraud prevention services — who flag high-risk patterns associated with known fraudulent identities or devices;
• Gaming licensing authorities — who may share information relevant to player protection obligations.

4. Why We Use Your Data

dk168 uses your personal data for the following specific purposes:

• Account creation and management: Setting up, operating, and maintaining your player account on the Platform;
• Identity verification: Confirming you are who you say you are, and that you are at least 21 years of age, as required under our licensing obligations;
• Transaction processing: Executing deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK in Pakistani Rupees (PKR);
• Legal and regulatory compliance: Fulfilling our obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and gaming licensing regulations;
• Fraud and security: Detecting, investigating, and preventing fraudulent transactions, multi-accounting, and other illegal activity;
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and proactively offering responsible gaming tools;
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions;
• Service improvement: Analysing aggregated, anonymised platform usage data to improve the dk168 gaming experience;
• Marketing communications: Sending you information about bonuses, promotions, and platform updates — but only where you have given your explicit consent and only through the channels you have authorised.

5. Legal Basis for Processing

dk168 processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:

• Contractual necessity: Processing required to fulfil the contract between you and dk168 — i.e., to operate your gaming account, process your transactions, and provide the services you have signed up for;
• Legal obligation: Processing required to comply with applicable laws and our gaming licence conditions — including KYC verification, AML transaction monitoring, and age verification;
• Legitimate interests: Processing conducted for dk168's legitimate business interests, including fraud prevention, platform security, service improvement, and responsible gaming monitoring — provided these interests are not overridden by your fundamental rights;
• Consent: Processing based on your explicit consent — primarily for marketing communications and optional data analytics features. You may withdraw consent at any time without penalty.

6. Sharing Your Personal Data

6.1 Who We Share Data With

dk168 does not sell your personal data. We share it only with the categories of recipients listed below, and only to the extent strictly necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK — to process your financial transactions;
• Identity verification providers: Third-party KYC services used to verify your CNIC and confirm your identity and age;
• Game content providers: Licensed game studios whose titles appear on the dk168 platform — limited to anonymised session and gameplay data necessary for game functionality;
• IT and platform infrastructure providers: Cloud hosting, security, and database service providers who process data on our behalf under strict data processing agreements;
• Regulatory and law enforcement authorities: Where we are legally required to disclose information under applicable law, court order, or regulatory directive — including reporting obligations under AML regulations;
• Professional advisers: Lawyers, auditors, and insurers, where necessary for legal advice, audit processes, or insurance claims — all of whom are bound by confidentiality obligations.

6.2 Data Processing Agreements

All third parties who process personal data on behalf of dk168 are required to enter into formal data processing agreements. These agreements impose strict obligations on the processor regarding data security, confidentiality, purpose limitation, and sub-processing restrictions. dk168 regularly reviews the compliance of its third-party processors.

7. Cookies & Tracking Technologies

7.1 What Cookies We Use

dk168 uses cookies and similar tracking technologies on the Platform. The categories of cookies in use are:

• Essential cookies: Required for the Platform to function — including session authentication, security tokens, and load-balancing cookies. These cannot be disabled without breaking the Platform;
• Functional cookies: Remember your preferences such as language, display settings, and last-visited game categories to improve your experience;
• Analytics cookies: Collect anonymised, aggregated data about how players navigate the Platform, which pages are most visited, and where errors occur. This data is used solely to improve the Platform;
• Responsible gaming cookies: Track session duration and activity patterns to power our responsible gaming tools such as session time reminders and cooling-off enforcement.

7.2 Managing Cookies

You can control cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from logging in and using the Platform. Disabling functional or analytics cookies will not affect your ability to play but may degrade your experience. A cookie preference panel is available on your first visit to the Platform.

8. Data Retention

dk168 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with our regulatory obligations. The following retention periods apply:

• KYC and identity documents: Retained for a minimum of 5 years from the date of account closure, as required under AML and licensing regulations;
• Transaction records: Retained for a minimum of 5 years from the date of the transaction;
• Gaming activity records: Retained for 3 years from the date of the session or bet, unless required longer for an open dispute;
• Support communications: Retained for 2 years from the date of last communication, or until any related dispute is fully resolved;
• Marketing consent records: Retained for the duration of the consent period plus 1 year for audit purposes;
• Technical and log data: Retained for 12 months on a rolling basis, after which older logs are purged from our systems.

Upon expiry of the applicable retention period, personal data is either securely and permanently deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.

9. Your Data Rights

As a player on the dk168 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receipt.

10. Children's Privacy

The dk168 platform is strictly for persons aged 21 years and above. dk168 does not knowingly collect, store, or process personal data from individuals under the age of 21. Age verification is a mandatory step in the registration process, and all accounts are subject to KYC review that confirms date of birth against CNIC records.

If dk168 discovers that personal data has been collected from a person under the age of 21, the account will be immediately closed, all funds deposited (less any bonuses or winnings) will be returned to the payment source, and all personal data associated with the account will be securely deleted. Parents or guardians who believe their child has registered on dk168 should contact us immediately at [email protected].

11. Security Measures

dk168 implements a layered security architecture to protect your personal data against unauthorised access, loss, destruction, or disclosure. Our security measures include:

• Encryption: All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption;
• Access controls: Personal data is accessible only to dk168 staff and authorised processors who have a documented need to access it for their role. Access is governed by role-based permissions and is logged and audited;
• Two-factor authentication: Available on all player accounts and mandatory for administrative access to internal systems;
• Penetration testing: The Platform undergoes regular third-party security testing to identify and address vulnerabilities;
• Incident response: dk168 maintains a formal data breach incident response plan, including procedures for player notification within 72 hours where a breach poses a risk to your rights and freedoms;
• Staff training: All dk168 personnel who handle personal data receive regular training on data protection obligations and security best practices.

Despite these measures, no data transmission over the internet is completely secure. dk168 cannot guarantee the absolute security of data transmitted to or from the Platform, and players should also take their own steps to protect their account credentials.

12. International Data Transfers

As an internationally licensed gaming platform, certain personal data processed by dk168 may be transferred to and stored in jurisdictions outside Pakistan, including the country where our licensing authority is based and where our hosting infrastructure is located. Where such transfers occur, dk168 ensures that appropriate safeguards are in place to protect your data, including:

• Standard contractual clauses approved by the relevant data protection authority;
• Data processing agreements that impose equivalent data protection obligations on the receiving party;
• Transfers only to jurisdictions that provide an adequate level of data protection as assessed by our legal team.

You may request details of any international transfers applicable to your personal data by contacting us at the address in Section 15.

13. Third-Party Services

The dk168 Platform may contain references to third-party services or content providers — for example, licensed game studios whose titles are hosted on the Platform. These third parties operate their own privacy policies, and dk168 is not responsible for the data practices of these third parties in their capacity as independent controllers. Players should review the privacy policies of any third-party services they interact with.

dk168 does not embed third-party social media widgets, advertising pixels, or external analytics trackers that would allow third parties to collect personal data about your Platform activity without your knowledge. Any analytics conducted by dk168 uses first-party data only, processed on infrastructure under our control.

14. Updates to This Privacy Policy

dk168 reserves the right to update this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or a new third-party sharing arrangement — we will notify you by email to your registered address and by displaying a prominent notice on the Platform at least 14 days before the changes take effect.

For minor updates — such as corrections of typographical errors or clarifications that do not alter the substance of any provision — we may update the Policy without prior notice. The "Effective Date" at the top of this Policy will always reflect the date of the most recent version. Continued use of the Platform following any update constitutes acceptance of the revised Policy.

We recommend bookmarking this page and reviewing it periodically, particularly if you are a regular player on dk168.

15. Contact Us & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how dk168 has handled your personal data, please contact our Data Protection team:

Data Protection Contact: [email protected]
Subject Line: "Privacy Policy Enquiry" or "Data Rights Request"
Response Time: Within 30 days for formal data rights requests; within 24 hours for general privacy enquiries on business days
Live Support: Available 24/7 via the chat widget on the Platform — English & Urdu

For responsible gaming concerns — including self-exclusion requests, deposit limit changes, or problem gambling support — please visit our Responsible Gaming page where these requests are handled with priority. You can also find our full Terms & Conditions on the dedicated page.