Privacy Policy — 786ko Data Commitment

786ko is an internationally licensed online casino and sports betting platform accessible at 786ko.bio. The 786ko platform is operated by the brand entity holding the applicable international gaming licence under which the platform provides its services to players, including players based in Pakistan.

For the purposes of this Privacy Policy, "786ko", "we", "us", and "our" refer to the 786ko platform operator. "You", "your", and "player" refer to any individual who accesses the 786ko platform, creates a registered account, or otherwise interacts with our services.

786ko acts as the data controller in respect of personal data collected directly through the platform. Where we engage third-party processors — for example, for KYC verification or payment processing — those processors act under our instruction and are bound by contractual data protection obligations.

786ko collects personal data across several categories depending on how you interact with the platform. The table below summarises the principal categories of personal data we hold about registered players:

786ko does not collect special categories of sensitive personal data (for example, health data, racial or ethnic origin, or political opinions) except where you voluntarily disclose health-related information in the context of a responsible gaming request such as a self-exclusion application. Such data is used solely to facilitate the requested responsible gaming measure.

786ko collects personal data through the following primary channels:

786ko processes your personal data for specific, defined purposes. For each purpose, we rely on one of the following legal bases: performance of a contract with you, compliance with a legal obligation, our legitimate interests (where those interests are not overridden by your rights), or your explicit consent.

• Account creation and management — necessary for the performance of our contract with you as a registered player.
• Identity verification and KYC compliance — required by our international gaming licence obligations and applicable anti-money laundering law.
• Payment processing — necessary for the performance of the deposit and withdrawal services you have requested.
• Fraud prevention and security monitoring — based on our legitimate interest in protecting the platform and other players from financial crime and account compromise.
• Responsible gaming monitoring — required by our international gaming licence as a mandatory player protection obligation.
• Customer support and dispute resolution — necessary for the performance of our contract and our legitimate interest in resolving complaints fairly.
• Platform analytics and improvement — based on our legitimate interest in understanding how the platform is used and improving the player experience.
• Direct marketing communications — based on your explicit opt-in consent, which you may withdraw at any time via your account dashboard or by contacting support.
• Regulatory reporting — required by our legal obligations under applicable anti-money laundering and gaming regulatory frameworks.

786ko does not sell your personal data. We share personal data only in the following specific and limited circumstances:

786ko takes payment data privacy particularly seriously given the financial nature of our platform. The following specific rules apply to how we handle payment-related personal data:

• Full payment card numbers, if applicable, are never stored on 786ko servers. Card transactions, where supported, are tokenised by the payment processor before any data reaches 786ko systems.
• JazzCash and EasyPaisa mobile wallet identifiers are stored in encrypted form and are used exclusively for deposit crediting, withdrawal processing, and AML compliance matching.
• Bank account details (IBAN, account number) provided for HBL, UBL, or Meezan Bank transfers are held securely and used only to process your requested transactions and to comply with withdrawal verification requirements.
• Cryptocurrency wallet addresses provided for USDT or BTC transactions are retained in transaction logs as required by anti-money laundering compliance obligations.
• All payment data is subject to the same encryption and access-control standards applied to identity data — access within 786ko is restricted to authorised finance and compliance personnel only.

The 786ko platform uses cookies — small text files placed on your device — and similar tracking technologies to support core platform functionality, maintain your session, and gather anonymised usage analytics. The categories of cookies used by 786ko are as follows:

You can manage your cookie preferences at any time via the cookie settings panel accessible from the footer of the 786ko platform. Please note that disabling strictly necessary cookies will prevent core platform functionality from operating correctly.

786ko retains personal data for as long as is necessary to fulfil the purpose for which it was collected, comply with our legal and regulatory obligations, resolve disputes, and enforce our agreements. The following general retention periods apply:

• Account and identity data: Retained for a minimum of five years following the date of account closure, as required by anti-money laundering regulations applicable to our gaming licence.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction in line with AML compliance requirements.
• KYC verification documents: Retained for the duration of the account relationship plus a minimum of five years post-closure, or for longer periods if required by regulatory direction.
• Communications and support data: Retained for three years from the date of the communication unless the communication relates to an ongoing dispute or regulatory matter.
• Analytics and behavioural data: Retained in anonymised or aggregated form indefinitely; identifiable behavioural data is retained for the duration of the account relationship plus one year.
• Marketing consent records: Retained for the duration of the account relationship. Withdrawn consent records are retained for three years from the date of withdrawal to demonstrate compliance.

786ko implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 786ko platform;
• One-way cryptographic hashing for stored passwords — your login credentials are never stored in readable form;
• Role-based access controls restricting access to personal data to authorised 786ko personnel on a strict need-to-know basis;
• Two-factor authentication (2FA) availability for player accounts;
• Continuous security monitoring of platform infrastructure for intrusion attempts and anomalous access patterns;
• Regular security assessments including penetration testing by independent security specialists;
• Incident response procedures to detect, contain, and report data breaches in accordance with applicable regulatory obligations.

786ko respects your rights in relation to the personal data we hold about you. The following rights are available to all 786ko account holders:

To exercise any of the above rights, please contact the 786ko Data Protection team via the support email address listed in Section 14. 786ko will acknowledge your request within five business days and aim to provide a substantive response within 30 days. Where a request is particularly complex or numerous, this period may be extended by a further 30 days with notice.

Please note that certain rights are subject to limitations. For example, the right to erasure cannot override our mandatory AML and gaming licence data retention obligations. Where we are unable to fully satisfy a request, we will explain the reasons in our response.

786ko applies mandatory age verification as part of its KYC process. All accounts are required to submit government-issued identification confirming the account holder is 21 years of age or older before withdrawal privileges are activated. Age verification checks may also be triggered at registration or at any time the platform identifies a risk that an account may be held by a minor.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms. If you believe a minor has registered an account on 786ko, please contact our support team immediately at the email address listed in Section 14.

786ko operates under an international gaming licence and may process or store personal data on servers located outside Pakistan. Where personal data is transferred internationally, 786ko ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy.

These safeguards may include:

• Contractual data protection clauses binding the recipient to equivalent data protection standards;
• Processing within jurisdictions recognised as providing an adequate level of data protection by relevant regulatory frameworks;
• Technical measures such as end-to-end encryption ensuring data remains protected throughout any international transfer.

786ko reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates to applicable law, our licensing obligations, or changes to the way we operate the platform. The effective date at the top of this policy will be updated whenever material changes are made.

Where changes are material — meaning they significantly affect how we process your personal data or the rights available to you — 786ko will notify registered players via the email address associated with their account at least 14 days before the changes take effect. Continued use of the 786ko platform following the effective date of a revised Privacy Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to remain informed about how 786ko protects your personal data. The current version of this policy is always accessible at 786ko.bio/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how 786ko has handled your personal data, please contact the 786ko Data Protection team:

786ko is committed to resolving all data protection concerns fairly and promptly. If you are dissatisfied with our response, you have the right to escalate your complaint to the relevant data protection supervisory authority or the regulatory body overseeing our international gaming licence.