k6666 Privacy Policy

Introduction & Scope

This Privacy Policy ("Policy") is issued by k6666 ("k6666", "we", "us", "our") and applies to all personal data collected, processed, and stored by k6666 in connection with the operation of the k6666 online casino and sports betting platform accessible at https://k6666.live (the "Platform"), including all associated mobile browser interfaces and services offered thereon.

This Policy describes our practices with respect to: the categories of personal data we collect from players and visitors; the purposes for which we process that data; the legal basis on which we rely; the third parties with whom we may share data; the security measures we employ to protect it; the rights you hold as a data subject; and how you may exercise those rights.

This Policy applies to all registered k6666 players, prospective players who interact with the Platform without registering, and any other individual whose personal data k6666 processes in connection with the Platform's operation. By registering a k6666 account or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and that you consent to the processing activities described herein where such processing is consent-based.

Data Controller

For the purposes of applicable data protection law, k6666 acts as the data controller in respect of all personal data collected from players and visitors to the Platform. As data controller, k6666 determines the purposes and means of the processing of personal data collected in connection with the Platform's operation.

Where k6666 engages third-party service providers to process personal data on its behalf — such as payment processing providers, KYC verification services, or fraud prevention platforms — those providers act as data processors under written contractual arrangements that require them to process data only on k6666's documented instructions and to maintain appropriate security measures.

All enquiries, subject access requests, and complaints relating to k6666's handling of your personal data should be directed to k6666's support team using the contact details set out in Section 15 of this Policy.

Categories of Personal Data We Collect

k6666 collects and processes the following categories of personal data in connection with the operation of the Platform:

k6666 does not intentionally collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or criminal records) unless specifically required for AML or regulatory compliance purposes, in which case we will seek your explicit consent unless another lawful basis applies.

How We Collect Your Personal Data

k6666 collects personal data through the following means:

• Direct provision by you: When you register a k6666 account, complete identity verification, make a deposit or withdrawal, contact customer support, or participate in a promotion, you directly provide personal data to k6666.
• Automated collection: As you interact with the k6666 Platform, technical data including your IP address, device information, and cookies are collected automatically by k6666's platform infrastructure.
• Third-party verification providers: When k6666 conducts KYC checks on your account, identity and document verification data may be received from third-party verification service providers to whom you have provided your documents.
• Payment processors: When you complete a transaction via JazzCash, EasyPaisa, or a bank transfer, payment transaction confirmation data is received from the relevant payment service provider to record the transaction on your k6666 account.
• Fraud and AML screening services: k6666 may receive risk signals and flagging data from third-party fraud prevention and sanctions screening providers as part of its AML compliance programme.

Purposes of Processing & Legal Basis

k6666 processes personal data for the following purposes, relying on the specified legal bases:

• Account registration and management — necessary for the performance of the contract between you and k6666 (the k6666 Terms & Conditions).
• Age and identity verification (KYC) — necessary for compliance with k6666's legal obligations under applicable anti-money laundering and gaming regulations.
• Processing deposits and withdrawals in PKR — necessary for the performance of the contract and for compliance with financial regulatory obligations.
• Fraud prevention and platform security — necessary for k6666's legitimate interests in protecting the integrity of the Platform and the safety of all players.
• Responsible gaming monitoring — necessary for compliance with k6666's legal obligations and for k6666's legitimate interests in promoting safe gambling practices.
• Customer support and dispute resolution — necessary for the performance of the contract and for k6666's legitimate interests in maintaining service quality.
• Sending promotional and bonus communications — based on your consent, which you may withdraw at any time via account settings or by contacting support.
• Platform analytics and improvement — based on k6666's legitimate interests in improving the Platform experience, subject to your cookie preferences.

Third-Party Disclosure & Data Sharing

k6666 does not sell, rent, or commercially transfer your personal data to third parties for their own marketing or commercial purposes. k6666 may share your personal data with the following categories of third parties, strictly to the extent necessary for the purposes described in Section 05:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processors engaged by k6666 receive the financial transaction data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party document verification services receive the identity documents you submit during KYC to perform age and identity checks on k6666's behalf.
• Fraud prevention and AML compliance services: Screening providers receive necessary data points to perform transaction monitoring and sanctions screening as required by k6666's AML obligations.
• Platform hosting and infrastructure providers: Cloud hosting and CDN providers that store and serve the k6666 Platform process technical data as data processors under k6666's instruction.
• Customer support platform providers: The third-party live chat and ticketing system used by k6666's support team processes communications data in the course of handling support requests.
• Regulatory and law enforcement authorities: k6666 may be required by applicable law, court order, or regulatory direction to disclose personal data to competent authorities. k6666 will comply with any such legally binding requirement and will, where permitted by law, notify affected players of any such disclosure.

International Data Transfers

k6666 operates under international gaming regulations and may engage service providers whose infrastructure is located in jurisdictions outside Pakistan. Where personal data is transferred outside Pakistan to a third country, k6666 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

Such safeguards may include: contractual clauses that impose data protection obligations on the receiving party; processing agreements that replicate relevant data protection standards; or reliance on the receiving party's certification under a recognised international data protection framework.

By registering and using the k6666 Platform, you acknowledge that your personal data may be processed in jurisdictions outside Pakistan as described above, subject to the safeguards k6666 maintains in respect of such transfers.

Data Retention

k6666 retains personal data only for as long as it is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law, regulatory obligations, or legitimate business needs such as dispute resolution.

The following general retention periods apply, though they may be extended where required by law or ongoing investigations:

• Active account data: Retained for the lifetime of your k6666 account and for a minimum period of five (5) years following account closure, in accordance with standard AML record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification, or longer if required by regulatory direction.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in line with financial record-keeping obligations.
• Customer support correspondence: Retained for three (3) years from the date of the last interaction, or longer if the correspondence relates to an unresolved dispute.
• Technical and log data: Retained for up to twelve (12) months unless required for longer periods by security investigations or legal proceedings.

On expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

Cookies & Tracking Technologies

k6666 uses cookies and similar tracking technologies on the Platform to enable essential platform functionality, to analyse user behaviour, and — where you have consented — to deliver relevant content and promotions. The following cookie categories are used on the k6666 Platform:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable secure login sessions, maintain your session state across page navigations, and support the operation of the k6666 account dashboard. These cookies cannot be disabled without rendering the Platform non-functional.
• Performance & Analytics Cookies: These cookies collect anonymised or pseudonymised data about how visitors use the k6666 Platform — such as which pages are visited most often and how users navigate between sections — to help k6666 improve the Platform experience. These are only set with your consent.
• Functionality Cookies: These cookies remember your preferences (such as language settings and responsible gaming limit configurations) to provide a more personalised experience on return visits.
• Security Cookies: These cookies support k6666's fraud detection and platform security infrastructure by identifying unusual access patterns and helping to distinguish legitimate players from automated bots.

Your Rights as a Data Subject

Subject to applicable data protection law and certain exemptions, you have the following rights in relation to the personal data k6666 holds about you:

• Right of Access: You have the right to request a copy of the personal data k6666 holds about you, along with information about how it is being used. k6666 will provide this within a reasonable timeframe upon receipt of a verified request.
• Right to Rectification: You have the right to request correction of any personal data k6666 holds about you that is inaccurate or incomplete. Many details can be updated directly through your k6666 account dashboard.
• Right to Erasure: In certain circumstances, you have the right to request that k6666 delete personal data it holds about you. This right is subject to k6666's legal retention obligations — in particular, k6666 is required to retain certain financial and KYC records for a minimum of five years after account closure regardless of an erasure request.
• Right to Restrict Processing: You have the right to request that k6666 restrict the processing of your personal data in certain circumstances, such as while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract and is carried out by automated means, you have the right to receive the personal data you provided to k6666 in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to k6666's processing of your personal data where that processing is based on k6666's legitimate interests. You also have an unconditional right to object to the processing of your data for direct marketing purposes.
• Rights in Relation to Automated Decision-Making: k6666 may use automated processes for certain account-related decisions such as fraud risk scoring and responsible gaming limit triggers. You have the right to request human review of any decision made solely by automated means that significantly affects you.

To exercise any of the above rights, please contact k6666's support team via live chat or email as described in Section 15. k6666 may require verification of your identity before processing any rights request to ensure your data is not disclosed to or amended by an unauthorised party.

Security Measures

k6666 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• End-to-end TLS (Transport Layer Security) encryption for all data in transit between your device and k6666's servers.
• AES-256 encryption for sensitive data at rest, including account credentials and financial records.
• Role-based access controls ensuring that k6666 staff access only the personal data necessary for their specific job function.
• Regular penetration testing and vulnerability assessments of the k6666 Platform infrastructure.
• Multi-factor authentication requirements for access to production systems by k6666 engineering and operations personnel.
• Real-time monitoring and alerting for anomalous access patterns and potential data breach indicators.
• Formal data breach response procedures, including regulatory notification protocols where required by applicable law.

Children & Minors

The k6666 Platform is strictly for adults aged 21 years and above. k6666 does not knowingly collect personal data from individuals under the age of 21. k6666 applies age verification procedures during the account registration process and requires all players to pass KYC age verification before withdrawals are processed or bonuses activated.

If k6666 becomes aware that personal data has been collected from an individual under the age of 21, k6666 will promptly close the associated account, delete the personal data collected from that individual to the extent not required to be retained for regulatory purposes, and withhold any balance pending review in accordance with the Terms & Conditions.

If you are a parent or guardian and believe that a person under 21 in your care has registered a k6666 account, please contact k6666 support immediately via live chat so the account can be closed and the data handled appropriately.

Marketing Communications

With your consent, k6666 may send you marketing communications about new games, promotions, bonuses, and other platform features by email and/or SMS to the contact details registered on your k6666 account. Consent to receive marketing communications is collected during the account registration process and is entirely optional — you can register and use a k6666 account without consenting to marketing communications.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in the notifications section of your k6666 account dashboard.
• Clicking the unsubscribe link included in any k6666 marketing email.
• Contacting k6666 support via live chat and requesting to be removed from marketing communications.

Withdrawal of consent for marketing communications will be processed promptly. Please note that even after opting out of marketing, k6666 will continue to send you transactional communications related to your account — such as deposit confirmations, withdrawal notifications, and security alerts — as these are necessary for the operation of your account and do not require separate consent.

Amendments to This Policy

k6666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, to comply with new or amended legal or regulatory requirements, or to implement improvements to our privacy governance framework.

When material changes are made to this Policy, k6666 will notify registered players by placing a prominent notice on the Platform and/or sending a notification to the email address associated with your k6666 account, providing reasonable prior notice before the changes take effect. The "Last Updated" date at the top of this page will be revised to reflect the date of the most recent amendment.

Your continued use of the k6666 Platform following the effective date of any amended Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree with any changes to the Policy, you should contact k6666 support to discuss your options, which may include account closure.

Contact & Complaints

All privacy-related enquiries, subject access requests, and complaints should be directed to k6666's support team using the following contact channels:

• Live Chat: Available 24 hours a day, 7 days a week from within your k6666 account dashboard. This is the fastest way to reach k6666 for any urgent privacy matter.
• Email: [email protected] (plain text only — not a clickable link).

k6666 aims to respond to all privacy-related enquiries and subject access requests within 30 days of receipt. Where a request is particularly complex or where a high volume of requests has been received, k6666 may extend this period by a further two months, in which case you will be notified of the extension and the reasons for it within the initial 30-day period.

If you are not satisfied with k6666's response to your privacy complaint, you have the right to lodge a complaint with the competent data protection supervisory authority in the jurisdiction in which you reside. k6666 encourages players to contact us directly in the first instance so that we have the opportunity to resolve any concern before it is escalated to a regulatory body.