pk66 Privacy Policy — How We Protect Your Personal Data

1.1 pk66 ("the Company", "we", "us", "our") operates the online casino and sports betting platform accessible at pk66.cam. As part of operating this platform for players across Pakistan — including players in Karachi, Lahore, Faisalabad, Islamabad, and beyond — pk66 necessarily collects and processes personal information about its users.

1.2 This Privacy Policy describes in clear, plain language what personal data we collect from you, on what legal grounds we process it, for what purposes it is used, with whom it may be shared, how long we retain it, and what rights you have regarding that data.

1.3 pk66 acts as the data controller in respect of personal data collected through the pk66 platform. We are responsible for determining the purposes and means of personal data processing and for ensuring that such processing is conducted lawfully, fairly, and transparently.

1.4 If you have any questions about this policy or about the personal data pk66 holds about you, please contact our support team via in-app live chat, which is available 24 hours a day, 7 days a week from within your pk66 account dashboard.

2.1 pk66 collects personal data through several channels — directly from you at registration, through your use of the platform, and from third-party verification and payment service providers. The categories of data collected are described below:

2.2 pk66 does not knowingly collect sensitive categories of personal data — such as health data, biometric data, or data relating to religious or political beliefs — except where strictly required for responsible gaming assessments, and only with your explicit consent.

3.1 pk66 uses personal data collected from players for the following purposes:

• Account Management: To create, maintain, and manage your pk66 account, including processing your deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.
• Identity Verification (KYC): To verify your identity and age (21+) in compliance with our gaming licence conditions and international AML obligations before processing withdrawals or on a risk-triggered basis.
• Fraud Prevention and AML: To detect, investigate, and prevent fraudulent transactions, money laundering, match-fixing, and other prohibited conduct on the pk66 platform.
• Platform Personalisation: To tailor your pk66 experience — surfacing relevant game recommendations, PSL cricket betting markets, and promotions that may interest you.
• Customer Support: To respond to your queries, complaints, and responsible gaming requests through pk66's live chat support team.
• Marketing Communications: With your consent, to send you promotional offers, bonus announcements, and platform updates via SMS or email. You may withdraw this consent at any time from your account settings.
• Regulatory Compliance: To fulfil reporting obligations to gaming licensing authorities and, where required by law, to law enforcement agencies.
• Platform Security: To monitor for security threats, unauthorised access attempts, and to manage active login sessions across devices.

4.1 pk66 processes personal data on the following legal grounds, depending on the purpose of processing:

• Contractual Necessity: Processing required to fulfil the contract between you and pk66 — including account creation, payment processing, and game provision — is carried out on the basis that it is necessary to perform that contract.
• Legal Obligation: Certain processing — including KYC identity verification, AML transaction monitoring, and regulatory reporting — is carried out to comply with applicable legal and licensing obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform analytics is carried out on the basis of pk66's legitimate interests, balanced against your privacy rights.
• Consent: Processing for direct marketing communications is carried out only where you have provided explicit consent, which may be withdrawn at any time without affecting the lawfulness of prior processing.

5.1 The pk66 website and platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your login session, to detect fraud, and to analyse how players interact with the platform.

5.2 The following categories of cookies are used by pk66:

• Essential Cookies: Required for the platform to function — login session management, security tokens, and load balancing. These cannot be disabled without affecting your ability to use pk66.
• Analytics Cookies: Used to understand how players navigate the pk66 platform — which game categories are most visited, typical session lengths, and page performance metrics. Data is aggregated and anonymised.
• Preference Cookies: Store your platform preferences such as language settings, notification preferences, and display options between sessions.
• Marketing Cookies: Used with your consent to measure the effectiveness of pk66 promotional campaigns. You may manage your marketing cookie preferences from your account settings.

5.3 You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using pk66, but may limit certain personalisation features.

6.1 pk66 does not sell your personal data. We share personal data only in the following limited circumstances, and only to the extent strictly necessary for the purpose in question:

• Payment Processors: We share necessary transaction data with payment service providers including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank to process your deposits and withdrawals. These providers are subject to their own data protection obligations.
• Identity Verification Providers: We may share identity documents and CNIC data with licensed third-party KYC and identity verification service providers for the purpose of completing your account verification.
• Gaming Technology Suppliers: Game providers who supply live dealer feeds, slot titles, and RNG systems to the pk66 platform may receive session tokens and game activity data for the purpose of delivering those services.
• Regulatory and Law Enforcement Authorities: Where required by applicable law or gaming licence conditions, pk66 may disclose personal data to regulatory bodies, gaming authorities, or law enforcement agencies without prior notice.
• Fraud Prevention Networks: pk66 may share fraud indicators with industry-wide fraud prevention databases to protect all players on the platform.

6.2 All third parties to whom pk66 discloses personal data are required to maintain appropriate technical and organisational security measures and to process that data only for the specified purpose.

7.1 pk66 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data in transit between your device and pk66 servers
• AES-256 encryption for sensitive data at rest, including CNIC information and financial identifiers
• Multi-factor authentication options for all pk66 account holders
• Role-based access controls — pk66 staff access personal data only on a strict need-to-know basis
• Regular independent security audits and penetration testing of the pk66 platform
• Automated anomaly detection systems that flag unusual login patterns or access attempts

7.2 Despite these measures, no internet-based system can guarantee absolute security. pk66 will notify affected users and relevant authorities in the event of a personal data breach that poses a material risk to their rights, in accordance with applicable legal obligations.

8.1 pk66 retains personal data for defined periods that reflect the purpose of collection, applicable legal requirements, and our legitimate operational needs. Below are the primary retention categories:

• Account Data (active accounts): Retained for the full duration of your pk66 account, plus a regulatory retention period of five (5) years following account closure, as required by gaming licence and AML obligations.
• KYC Identity Documents: Retained for five (5) years from the date of verification or from the date of account closure, whichever is later. This is a mandatory regulatory retention period.
• Financial Transaction Records: Retained for five (5) years from the date of each transaction in accordance with AML record-keeping requirements.
• Gaming Activity Logs: Retained for three (3) years from the date of each gaming session, for responsible gaming monitoring and dispute resolution purposes.
• Customer Support Correspondence: Retained for two (2) years from the date of last interaction, for quality assurance and dispute management.
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years thereafter as evidence of the consent given.

8.2 Upon expiry of the applicable retention period, pk66 will securely delete or anonymise personal data so that it can no longer be associated with any individual player.

9.1 As a pk66 player, you have the following rights in relation to the personal data we hold about you:

9.2 To exercise any of these rights, please contact pk66 support via in-app live chat from your account dashboard. pk66 will respond to all verified data rights requests within 30 calendar days.

10.1 The pk66 platform is strictly for individuals aged 21 years and above. 21+ Only pk66 does not knowingly collect personal data from individuals under the age of 21.

10.2 If pk66 becomes aware that personal data has been collected from an individual under the age of 21, the account will be immediately suspended, any balance will be returned to the funding payment method, and all personal data associated with that account will be securely deleted in accordance with applicable legal requirements.

10.3 If you have reason to believe that a minor has registered an account on pk66, please contact our support team immediately via in-app live chat so that the matter can be investigated without delay.

11.1 pk66 operates under an international gaming licence and some of the service providers and systems used to deliver the pk66 platform are located in jurisdictions outside Pakistan. As a result, personal data collected from Pakistani players may be transferred to, and processed in, countries other than Pakistan.

11.2 Where such transfers occur, pk66 ensures that appropriate safeguards are in place — including contractual clauses that require recipient parties to maintain data protection standards equivalent to those applied by pk66 itself, or by relying on the adequacy of data protection frameworks applicable in the destination jurisdiction.

11.3 Payment data transmitted to local Pakistani providers such as JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank is processed within Pakistan in accordance with those institutions' own data protection policies and applicable Pakistani financial regulations.

12.1 pk66 may update this Privacy Policy periodically to reflect changes in our data practices, applicable law, or gaming licence requirements. The most current version of this policy is always available at pk66.cam/privacy-policy.

12.2 Where changes are material — meaning they significantly affect the way pk66 processes your personal data or alter your rights — pk66 will notify registered players via SMS to their registered Pakistani mobile number or via email, at least 7 days before the updated policy takes effect.

12.3 The "Last Updated" date at the top of this document reflects when the most recent revision was made. Your continued use of the pk66 platform following publication of an updated Privacy Policy constitutes acceptance of the revised terms.

13.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data pk66 holds about you, please contact our support team. Support is available 24 hours a day, 7 days a week via in-app live chat from within your pk66 account dashboard.

13.2 You may also contact pk66 via the email address displayed in plain text in the Contact section of this website. Please do not send sensitive personal data or identity documents via email without first confirming the correct secure submission process with our support team.

13.3 pk66 is committed to resolving all privacy-related enquiries promptly. Formal data rights requests will receive a written response within 30 calendar days. Where a request is particularly complex or numerous, pk66 may extend this period by a further 30 days with notification to the requester.