1. Who We Are
PL68 ("we", "us", "our") is the operator of pl68.ws, an online gaming and sports betting platform directed at players based in Pakistan. We are the data controller for the personal information you provide when using PL68. This means we determine the purposes and means of processing your data, and we are accountable for how that data is handled.
Our platform covers casino games, slots, crash games, fishing games, card games, live casino and sports betting — all operating in PKR and served primarily to Pakistani players. Because we handle financial transactions, identity verification and gameplay data, responsible privacy management is central to how PL68 operates.
If you have questions about how PL68 handles your personal data, or wish to exercise any of your data rights, you can contact us at privacy@pl68.ws or through the 24/7 live chat support on the platform.
2. Personal Data We Collect
PL68 collects the following categories of personal data:
2.1 Registration & Account Data
- Full legal name
- Date of birth
- Pakistani mobile number
- Email address
- Account username and encrypted password
- City and province of residence
2.2 Verification & Identity Data
- CNIC number (last 4 digits stored; full number processed for verification only)
- Photograph or selfie (where verification requires it)
- Proof of address documentation (utility bill or similar, where requested)
2.3 Financial & Transaction Data
- Deposit and withdrawal amounts and dates
- Masked payment identifiers (e.g., last 4 digits of a card, Easypaisa account reference)
- Transaction reference numbers
- Account balance history
2.4 Gaming & Activity Data
- Games played, bets placed, results and winnings
- Session durations and login timestamps
- Responsible gaming limit settings and self-exclusion history
- Bonus claims and wagering history
2.5 Technical & Device Data
- IP address and general location (city-level)
- Device type, operating system and browser version
- Mobile carrier (where relevant to payment processing)
- Session logs and error reports
2.6 Communication Data
- Support chat transcripts
- Email correspondence with PL68
- Feedback and complaint records
PL68 does not collect sensitive personal data such as biometric data, health information, religious beliefs or political opinions. CNIC full numbers are processed for verification purposes only and are not retained on PL68's servers in their complete form.
3. How We Collect Your Data
PL68 collects personal data through the following channels:
- Direct input: Information you provide when creating an account, updating profile details, completing verification, or contacting support.
- Automated collection: Technical data gathered automatically when you access pl68.ws, including IP addresses, device data and session activity through server logs and cookies.
- Payment processors: Transaction confirmation data returned by Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT processors and card gateways following deposit or withdrawal transactions.
- Identity verification providers: Confirmation data from third-party verification services used to validate identity documents during the KYC process.
- Fraud prevention services: Risk signals from fraud detection partners used to protect player accounts and the platform from suspicious activity.
4. Why We Use Your Personal Data
PL68 uses the personal data it collects for clearly defined purposes:
| Purpose |
Data Used |
Necessary? |
| Account creation and management | Registration data | ✓ Required |
| Age and identity verification (KYC) | Identity & verification data | ✓ Required |
| Processing deposits and withdrawals | Financial & transaction data | ✓ Required |
| Delivering gaming services | Account & activity data | ✓ Required |
| Anti-fraud and security monitoring | Technical, financial & activity data | ✓ Required |
| Regulatory compliance and AML | Identity, transaction & activity data | ✓ Legal obligation |
| Customer support | Communication & account data | ✓ Required |
| Responsible gaming monitoring | Activity & limit data | ✓ Required |
| Platform improvement and analytics | Anonymised technical data | Optional (aggregated) |
| Promotional communications | Contact data | Consent only |
PL68 does not use automated decision-making processes that produce legal or similarly significant effects on players without human review. Automated fraud flagging is reviewed by a human compliance team member before any account action is taken.
5. Legal Basis for Processing
PL68 processes personal data under the following legal bases:
- Contract performance: Processing required to operate your account, process transactions and deliver gaming services under the Terms and Conditions you accepted at registration.
- Legal obligation: Processing required by applicable laws, including anti-money laundering (AML) regulations, gaming licence conditions, and age verification requirements.
- Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring and internal analytics, where these are not overridden by your privacy rights.
- Consent: Processing for optional marketing communications, where you have explicitly opted in. You may withdraw this consent at any time.
6. Who We Share Your Data With
PL68 shares personal data only with parties that need it to deliver services to you or to fulfill legal obligations. We do not sell personal data to third parties under any circumstances.
6.1 Essential Service Partners
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT processors and card networks — transaction data only, as required to process your financial transactions.
- Identity verification providers: Third-party KYC services used to verify your identity and age during the account verification process.
- Game providers: Software providers such as Pragmatic Play, Spribe and Evolution Gaming receive anonymised session tokens required to load and operate their games. They do not receive your personal identity data.
- Fraud prevention services: Risk and security partners that process device fingerprints and behavioural signals to detect account fraud and money laundering.
- IT infrastructure providers: Cloud and hosting service providers on whose infrastructure PL68 operates, subject to strict data processing agreements.
6.2 Legal Disclosure
PL68 may disclose personal data to regulatory authorities, law enforcement bodies or courts where required by applicable law or where disclosure is necessary to protect the rights, property or safety of PL68, its players or the public. In such cases, PL68 will disclose only the minimum information required.
6.3 Business Transfers
In the event of a merger, acquisition or sale of PL68's assets, player data may be transferred as part of that transaction. If this occurs, PL68 will notify registered players via email prior to the transfer and ensure that the receiving entity is bound by privacy commitments at least as protective as those in this policy.
PL68 will never: sell your data to marketing companies, share your information with unrelated third parties without legal basis, or transmit your data to parties outside of essential service operations without your explicit consent.
7. Payment Data & Financial Privacy
Your financial privacy is one of PL68's highest priorities. Pakistani players use local mobile wallets and bank accounts for transactions on pl68 — these involve sensitive financial data that we handle with particular care.
7.1 What PL68 Stores
PL68 does not store your full payment credentials. For Easypaisa and JazzCash, we store only a hashed reference identifier used to match your account with your wallet. For bank transfers, we store the last 4 digits of account numbers for transaction matching. For Visa/Mastercard, full card numbers are handled exclusively by the card processing gateway — PL68 never receives or stores them.
7.2 Transaction Records
Records of all deposit and withdrawal transactions — including amounts, dates, reference numbers and payment method types — are retained for a minimum of 5 years as required by financial regulations applicable to licensed gaming operators. These records are used for dispute resolution, regulatory compliance and fraud investigation.
7.3 Secure Payment Processing
All payment pages and API calls on PL68 use TLS 1.2 or higher encryption. Payment processing partners are selected based on their compliance with financial industry security standards. PL68 conducts due diligence on payment partners before integration and reviews their security posture periodically.
8. Cookies & Tracking Technologies
PL68 uses cookies and similar tracking technologies on pl68.ws to make the platform work correctly and to understand how players use it. Here is what each type of cookie does:
| Cookie Type | Purpose | Required? | Duration |
|---|
| Session |
Keeps you logged in during your visit |
Yes |
Session only |
| Authentication |
Remembers login across sessions if opted in |
Yes |
30 days |
| Analytics |
Anonymised page view and feature usage data |
Optional |
12 months |
| Preferences |
Saves your language and display settings |
Optional |
12 months |
| Security |
Detects suspicious login patterns and CSRF protection |
Yes |
Session only |
PL68 does not use cookies to track you across unrelated third-party websites. You can manage cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality including login persistence and game loading.
9. Data Security
PL68 applies a layered security approach to protect your personal data:
- Encryption: 256-bit SSL/TLS for data in transit; AES-256 for sensitive data at rest including identity verification records.
- Access control: Personal data is accessible only to authorised PL68 staff on a need-to-know basis. All staff access is logged and audited.
- Infrastructure security: PL68 servers are hosted in secured data centres with physical access controls, redundant systems and regular security patching.
- Penetration testing: The pl68 platform undergoes regular third-party penetration testing to identify and remediate security vulnerabilities.
- Incident response: PL68 maintains a data breach response plan. In the event of a breach affecting player data, affected players will be notified within 72 hours of discovery.
- Two-factor authentication: 2FA is available on all player accounts and is strongly recommended. It is enforced for all PL68 staff accounts.
No security system is completely impenetrable. PL68 commits to promptly investigating and responding to any security incidents and to keeping players informed of developments that affect their personal data.
10. Data Retention Periods
PL68 does not keep your personal data longer than necessary. The following retention periods apply:
- Active account data: Retained for the duration of your account and for 5 years after account closure, as required by applicable gaming and financial regulations.
- Transaction records: Retained for a minimum of 5 years from the date of each transaction to meet financial record-keeping obligations.
- Identity verification records: Retained for 5 years post-account closure in compliance with anti-money laundering requirements.
- Support communications: Retained for 2 years from the date of the last interaction in order to maintain quality and resolve escalated complaints.
- Technical logs: Retained for 90 days for security and debugging purposes, then deleted or anonymised.
- Marketing consent records: Retained for the duration of your subscription and for 1 year after unsubscription, as evidence of consent.
Once a retention period expires, PL68 either permanently deletes the data or irreversibly anonymises it so that it can no longer be linked to you as an individual.
11. Your Data Rights
As a PL68 player based in Pakistan, you have the following rights over your personal data. To exercise any of these rights, contact us at privacy@pl68.ws or through the live chat support.
Right of Access
You can request a copy of all personal data PL68 holds about you. We will provide this within 30 days of a verified request, in a commonly readable format.
Right of Correction
If your personal data is inaccurate or incomplete, you can request that we correct it. You can update most account details directly in your account settings, or contact support for assistance.
Right of Erasure
You can request deletion of your personal data where there is no legal obligation to retain it. Note that some data — such as transaction records — must be kept for regulatory reasons even after account closure.
Right to Restrict Processing
In certain circumstances — such as while a complaint is being investigated — you can request that PL68 limits its processing of your data to storage only, pending resolution.
Right to Portability
Where processing is based on your consent or on a contract, you can request that PL68 provides your data in a structured, machine-readable format suitable for transfer to another provider.
Right to Object
You can object to PL68 processing your data on the basis of legitimate interests. You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in any email or by contacting support.
All data rights requests are acknowledged within 72 hours and fulfilled within 30 days. If a request involves large amounts of data or complex processing, we will inform you of any extension within the initial 30-day period. There is no charge for exercising your data rights.
12. Minors and Age Restriction
PL68 is strictly for adults aged 18 and over. We do not knowingly collect, process or retain personal data belonging to individuals under 18 years of age. Age verification is performed during the registration process and before significant withdrawals are processed.
If PL68 discovers that an account has been created by or on behalf of a person under 18, the account will be closed immediately, all gameplay will be voided and any balance will be withheld pending further review. Any personal data associated with the minor's account will be deleted as promptly as applicable legal obligations permit.
If you are a parent or guardian and believe that a minor has accessed PL68 without authorisation, please contact us immediately at privacy@pl68.ws. We will investigate and take appropriate action.
13. Marketing Communications
PL68 sends promotional emails and platform notifications about bonuses, new games, special offers and sporting events to players who have opted in to receive marketing communications. Opting in to marketing is not a condition of registering an account on PL68 — you can use the full platform without receiving marketing messages.
You can opt out of marketing communications at any time by:
- Clicking the "Unsubscribe" link at the bottom of any marketing email
- Updating your notification preferences in your PL68 account settings
- Contacting support and requesting removal from marketing lists
Opt-out requests are processed within 48 hours. Note that even if you opt out of marketing, PL68 will still send you essential account notifications — such as deposit confirmations, withdrawal notifications and security alerts. These are not optional as they are required for the operation of your account.
14. Third-Party Services & Links
PL68 integrates with third-party services — including game providers, payment processors and verification services — to deliver the full platform experience. These third parties have their own privacy policies that govern their handling of data shared with them through the integration. PL68 selects service partners that meet appropriate data protection standards and requires contractual commitments on data handling from all partners.
If pl68.ws ever displays links to external websites — for example, responsible gaming resources — those websites are operated independently of PL68 and have their own privacy policies. PL68 is not responsible for the privacy practices of those sites and recommends reading their policies before submitting personal data to them.
15. Changes to This Privacy Policy
PL68 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable laws or platform functionality. When material changes are made, registered players will be notified by email and/or by a prominent notice on the platform at least 7 days before the changes take effect.
The "Last Updated" date at the top of this page will always reflect the most recent revision. Your continued use of PL68 after a policy update constitutes your acknowledgement of the revised Privacy Policy. If you do not agree with the updated policy, you should stop using PL68 and contact support to arrange withdrawal of your account balance and closure of your account.
We recommend revisiting this Privacy Policy periodically, particularly after receiving a notification of changes from PL68. The most current version is always available at pl68.ws/privacy-policy.
16. Contact PL68 About Privacy
If you have questions, concerns or requests relating to your personal data and how PL68 handles it, please reach out through any of the following channels. Privacy queries are treated as a priority and responded to within 72 hours:
- Email (privacy): privacy@pl68.ws
- General support: support@pl68.ws
- Live chat: Available 24/7 inside the PL68 platform — ask for the privacy team
When contacting us about a data request, please include your registered mobile number or email address and a brief description of your request. This helps us verify your identity and process the request efficiently. We do not charge for handling data rights requests.
