k666 Privacy Policy

Who We Are — The Data Controller

k666 is an online casino and sports betting platform operating at k666.lol and targeting Pakistani players. For the purposes of this Privacy Policy, k666 acts as the Data Controller — meaning that k666 determines the purposes for which and the manner in which any personal data relating to platform users is processed.

k666 operates under international gaming regulatory oversight and is committed to processing personal data in accordance with applicable data protection principles, including those relating to lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

All data protection queries, requests to exercise data rights, or privacy-related concerns should be directed to the k666 support team at [email protected] with the subject line "Privacy — Data Request." k666 will acknowledge receipt within 24 hours and provide a substantive response within 30 calendar days of a verified request.

Scope and Application of This Privacy Policy

This Privacy Policy applies to all personal data collected, processed, or stored by k666 in connection with:

• The k666 website accessible at k666.lol and any subdomain or mobile-optimised version thereof.
• The registration, management, and operation of player accounts on the k666 platform.
• All financial transactions processed through the k666 cashier, including deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20, as well as withdrawal requests to any of these payment channels.
• All gaming activity conducted through the k666 Casino, sportsbook, live dealer section, and any other product available through the k666 platform.
• Communications between players and the k666 customer support team, whether conducted via live chat, email, or any other channel made available on the platform.
• The k666 promotional and marketing communications programme, where players have consented to receive such communications.

This Policy does not apply to third-party websites or services that may be referenced in k666 communications but are operated independently of the k666 platform. k666 is not responsible for the privacy practices of third-party websites.

Categories of Personal Data We Collect

k666 collects the following categories of personal data in connection with the provision of its services to registered Pakistani players and website visitors:

Identity and Contact Data

Financial and Transaction Data

Gaming Activity Data

Technical and Device Data

Identity documents submitted for KYC purposes — including CNIC copies, passport scans, utility bills, and proof of payment method ownership — are treated as sensitive personal data and are subject to heightened security and access controls within k666's data infrastructure.

How k666 Collects Your Personal Data

k666 collects personal data through the following primary channels:

• Direct Registration: When you create a k666 account, you provide identity and contact data including your Pakistani mobile number, full name, and date of birth directly through the registration form.
• Account Activity: As you use the k666 platform — making deposits via JazzCash or EasyPaisa, placing bets on cricket or casino games, navigating the site, or contacting support — data relating to those activities is automatically generated and recorded in association with your account.
• KYC Verification Submissions: When k666 requests identity verification documents (typically at the withdrawal stage or upon triggering a compliance review threshold), you submit identity documents directly to k666's secure KYC processing system.
• Payment Processing: When you transact through the k666 cashier, financial data is generated and shared with the relevant payment processor (JazzCash, EasyPaisa, banking partners, or crypto processing services). k666 retains the transaction record but does not store full card or wallet credentials on its own servers.
• Cookies and Automated Technologies: k666 uses cookies and similar tracking technologies to collect technical and device data automatically when you visit the k666 website. See Section 8 of this Policy for full details of k666's cookie practices.
• Support Communications: When you contact k666 via live chat or email, the content of those communications and any personal data contained within them is recorded for quality assurance, training, and account management purposes.

Purposes for Which k666 Uses Your Personal Data

k666 uses the personal data it collects for the following defined purposes:

k666 will not use your personal data for any purpose that is incompatible with the purposes listed above without providing you with prior notice and, where required, obtaining your consent.

Legal Basis for Processing Your Personal Data

k666 processes personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between k666 and the player — including operating the player account, processing financial transactions, providing access to games, and delivering customer support. Without this processing, k666 cannot provide the services described in the Terms and Conditions.
• Legal Obligation: k666 is required to process certain categories of personal data to comply with legal and regulatory obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) verification, responsible gaming regulations, and responses to lawful requests from competent authorities.
• Legitimate Interests: k666 processes certain data on the basis of its legitimate interests, including the detection and prevention of fraud, the security of the platform and its infrastructure, and the analysis of gaming patterns to improve the player experience — provided these interests are not overridden by the player's fundamental rights and freedoms.
• Consent: Where k666 sends promotional or marketing communications by SMS or email, this processing is conducted on the basis of the player's freely given, informed, and revocable consent. Consent can be withdrawn at any time by contacting k666 support or updating notification preferences in account settings, without affecting the player's ability to continue using the platform.

Sharing Your Personal Data with Third Parties

k666 does not sell personal data to third parties. However, k666 shares personal data with a limited set of third-party service providers and authorities in the following circumstances, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, SadaPay, and cryptocurrency processing services receive the transaction and identity data necessary to process deposit and withdrawal instructions on behalf of k666 players. Each payment provider operates under its own privacy terms in addition to any contractual obligations to k666.
• Game Technology Providers: Certified game providers who supply casino games, live dealer studios, and sportsbook data feeds to the k666 platform may receive limited player session data necessary for game delivery, fair play auditing, and technical support. These providers are prohibited by contract from using player data for their own commercial purposes.
• Identity Verification Services: k666 may engage third-party KYC and identity verification specialists to assist with the processing of CNIC and identity document submissions. These services operate under strict data processing agreements and are prohibited from retaining or reusing identity data beyond the scope of the verification task.
• Fraud Prevention and AML Services: k666 may share transaction and behavioural data with specialist fraud detection and anti-money laundering analytics services for the purpose of identifying and preventing financial crime on the platform.
• Legal and Regulatory Authorities: k666 will disclose personal data to law enforcement agencies, regulatory bodies, tax authorities, gaming licence oversight bodies, or courts of competent jurisdiction where required to do so by applicable law, valid legal process, or in connection with a legitimate investigation into suspected criminal activity.

Cookies and Tracking Technologies

k666 uses cookies and similar tracking technologies on the k666.lol website to enable essential platform functionality, improve the player experience, and — where consented to — support analytics and personalisation. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential to the operation of the k666 platform and cannot be disabled without preventing you from using the site. They include cookies that maintain your login session, remember your security preferences, and enable the cashier to function correctly. No consent is required for strictly necessary cookies.
• Functional Cookies: These cookies enable enhanced functionality, such as remembering your language preferences, your last game category, or your preferred lobby view. Disabling functional cookies may reduce the personalisation of your k666 experience but will not prevent you from accessing the platform.
• Analytics Cookies: k666 uses anonymised analytics data to understand how players navigate the platform, which games and features are most popular, and where the player experience can be improved. Analytics data is aggregated and does not identify individual players.
• Security Cookies: k666 uses cookies to support fraud detection and platform security functions, including identifying unusual device behaviour and flagging potential account compromise attempts.

You may manage cookie preferences through your browser settings. Blocking all cookies will prevent k666 from functioning correctly, including the ability to log in and access your account. k666 does not currently use third-party advertising or retargeting cookies.

Data Security Measures

k666 implements a comprehensive range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to:

• 256-bit SSL/TLS encryption on all data in transit between player devices and the k666 platform infrastructure.
• Encryption at rest for sensitive personal data stored within k666's secure database infrastructure, including identity documents, financial records, and authentication credentials.
• Role-based access controls ensuring that k666 personnel can only access the personal data categories necessary for their specific job functions, with full audit logging of all data access events.
• Regular independent penetration testing and security vulnerability assessments conducted by certified third-party security specialists.
• Real-time intrusion detection and monitoring systems that alert the k666 security team to anomalous access patterns, potential breaches, or suspicious activity on the platform infrastructure.
• Two-factor authentication enforcement for all k666 staff accessing production systems that contain personal data.
• Segregated storage of player funds from operational funds, with corresponding segregation at the data infrastructure level.

Data Retention Periods

k666 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, subject to any applicable legal or regulatory minimum retention requirements. The following general retention principles apply:

• Active Account Data: Personal and gaming data associated with an active k666 player account is retained for the duration of the account's active existence plus the applicable post-closure retention period.
• Closed or Inactive Account Data: Following voluntary account closure or suspension, k666 retains player data for a minimum of five (5) years to comply with anti-money laundering record-keeping requirements and to facilitate the resolution of any disputes or regulatory inquiries that arise after account closure.
• KYC and Identity Documents: Identity verification documents submitted for KYC purposes are retained for a minimum of five (5) years following the most recent verified transaction associated with the account, in line with standard AML and gaming compliance obligations.
• Financial Transaction Records: All deposit, withdrawal, and wagering records are retained for a minimum of five (5) years from the date of the transaction for compliance and audit purposes.
• Support Communications: Records of customer support interactions are retained for a minimum of two (2) years from the date of the interaction and may be retained longer where a communication forms part of an ongoing dispute or complaint record.

Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymised using methods appropriate to the sensitivity and format of the data in question.

Children and Minors — Strict 21+ Policy

k666 does not knowingly collect, process, or store personal data relating to individuals under the age of 21. The k666 platform is strictly intended for adult players aged 21 years and above only. Access by minors is expressly prohibited.

If k666 becomes aware — through player self-disclosure, third-party notification, or internal review — that personal data relating to a person under the age of 21 has been collected in connection with a k666 account, k666 will take immediate steps to:

• Suspend the account pending investigation.
• Withhold any funds in the account pending a review of the circumstances of account creation and any transactions made.
• Delete the personal data of the minor from k666's active systems as promptly as practicable, subject to any legal retention obligations that may apply.

Parents or guardians who have reason to believe that a minor may have registered a k666 account or may be accessing the platform should contact k666 support at [email protected] immediately. k666 will treat all such communications as a priority and respond within 24 hours.

Marketing Communications and Opt-Out

k666 may, where a player has provided explicit consent at registration or thereafter, send promotional communications via SMS to the registered Pakistani mobile number or by email. These communications may include information about new games, seasonal promotions, PSL cricket betting offers, welcome bonus details, and other k666 platform updates.

Consent to receive marketing communications is entirely voluntary and is not a condition of platform access or account registration. Withdrawal of marketing consent does not affect a player's ability to continue using the k666 platform, receiving transactional notifications, or accessing any game or feature.

Players may opt out of marketing communications at any time by:

• Updating notification preferences in the Account Settings section of the k666 platform.
• Replying "STOP" to any k666 marketing SMS received on your registered Pakistani mobile number.
• Contacting k666 support at [email protected] with the subject line "Marketing Opt-Out" and your registered mobile number.

Opt-out requests are processed within 5 business days. Players will continue to receive essential transactional and account security communications regardless of their marketing preferences — these are not marketing messages and cannot be opted out of while a k666 account remains active.

Changes to This Privacy Policy

k666 reviews and updates this Privacy Policy periodically to reflect changes in applicable data protection law, regulatory guidance, k666's data processing practices, or the services offered through the platform. The most recent version of this Policy is always available at k666.lol/privacy-policy.

Where changes are material — meaning they affect the categories of data collected, the purposes for which data is used, the third parties with whom data is shared, or the rights available to players — k666 will notify registered players via SMS to their registered Pakistani mobile number or through a prominently displayed notice on the k666 website prior to the changes taking effect.

Your continued use of the k666 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept any material change to this Policy, you are entitled to request account closure and the deletion of your personal data in accordance with Section 10 of this Policy.

Contact Us and Data Complaints

For all privacy-related queries, data rights requests, or concerns about how k666 handles your personal data, please contact the k666 Data Team using the details below. k666 is committed to responding to all privacy enquiries promptly and in good faith.

• Email: [email protected] — use the subject line "Privacy — [your query type]" for faster routing to the data team.
• Live Chat: Available 24/7 on the k666 platform. Urdu and English support available. For complex data requests, the live chat team will escalate to the data team and provide a written response within the applicable timeframe.

k666 commits to:

• Acknowledging all privacy queries within 24 hours of receipt.
• Providing a substantive response to all data rights requests within 30 calendar days.
• Treating all data complaints with seriousness and investigating them thoroughly before providing a formal resolution.

If you are not satisfied with k666's response to a privacy complaint, you may be entitled to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. k666 encourages players to contact k666 directly in the first instance to allow k666 the opportunity to address any concern before regulatory escalation.