kk66 Privacy Policy

For the purposes of this Privacy Policy, kk66 — operating the online gaming platform accessible at kk66.lol — acts as the data controller in respect of all personal data collected from players who register and use the kk66 platform. kk66 determines the purposes and means by which personal data is processed and is responsible for ensuring that such processing complies with applicable data protection obligations.

kk66 operates under an international gaming licence and maintains its data processing operations in accordance with internationally recognised data protection standards. Where kk66 engages third-party processors to handle personal data on its behalf — such as payment gateway providers and KYC verification services — kk66 ensures those processors are bound by appropriate data processing agreements that reflect the same standards of protection kk66 applies internally.

kk66 collects personal data from players across several stages of interaction with the platform. The categories of data we collect and the specific items within each category are set out in the table below:

kk66 does not collect sensitive personal data — such as racial or ethnic origin, political opinions, religious beliefs, or health data — except where such information is voluntarily disclosed by a player in the context of a responsible gaming self-assessment or support interaction, in which case it is handled with the highest level of confidentiality and used solely for player welfare purposes.

kk66 processes personal data only where a valid lawful basis exists. The primary lawful bases applicable to kk66's data processing activities are:

• Contractual Necessity: The majority of personal data processing by kk66 is necessary for the performance of the contract between kk66 and the player — specifically, operating the player's account, facilitating gaming activity, processing deposits and withdrawals in PKR, and providing customer support.
• Legal Obligation: kk66 is required by its international gaming licence and applicable anti-money laundering (AML) regulations to collect and retain identity and financial data and to conduct Know Your Customer (KYC) checks on all registered players. Processing in this context is mandatory and cannot be refused without affecting the player's ability to use the platform.
• Legitimate Interests: kk66 processes certain technical and gaming activity data on the basis of its legitimate interests in maintaining platform security, detecting fraud and cheating, improving product features, and monitoring for responsible gaming indicators — provided those interests are not overridden by the player's fundamental rights and freedoms.
• Consent: Where kk66 wishes to send marketing communications — including promotional emails, SMS updates about PSL betting offers, and bonus notifications — we rely on your explicit consent. You may withdraw this consent at any time through your kk66 account notification settings.

kk66 uses the personal data it collects for the following specific, documented purposes:

• Account Management: Creating, maintaining, and securing your kk66 player account, including authentication, password reset, and account recovery functions.
• Payment Processing: Facilitating PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast, and processing withdrawal requests to verified payment accounts.
• Identity Verification (KYC): Confirming that registered players are who they say they are, are at least 21 years of age, and are not on any exclusion register — as required by our international gaming licence conditions.
• Anti-Fraud and Security: Monitoring transactions and gaming behaviour for indicators of fraud, money laundering, match-fixing, account takeover, and other prohibited activities described in the kk66 Terms and Conditions.
• Responsible Gaming: Analysing gaming session data to identify behavioural patterns that may indicate problem gambling, and proactively reaching out to players who may benefit from responsible gaming tools or support.
• Platform Improvement: Using aggregated and anonymised gaming activity data to identify areas where the kk66 platform can be improved, including game selection, payment flow optimisation, and interface design adjustments for Pakistani users.
• Customer Support: Using your contact and account data to investigate and resolve support queries, complaints, and disputes in a timely and informed manner.
• Marketing Communications (with consent): Sending personalised bonus offers, PSL and cricket betting promotions, and new game announcements to players who have opted in to marketing communications.
• Legal and Regulatory Compliance: Retaining records and producing reports as required by our gaming licence obligations, AML requirements, and any valid legal or regulatory requests from competent authorities.

kk66 does not sell, rent, or trade your personal data to any third party for commercial gain. Personal data is shared outside of kk66 only in the following limited and necessary circumstances:

• Payment Processors: kk66 shares the minimum necessary financial and identity data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast for the sole purpose of processing your deposit and withdrawal transactions. Each processor operates under their own privacy policy and data processing obligations.
• KYC and Identity Verification Providers: kk66 uses third-party identity verification services to process CNIC scans and liveness checks. These providers are engaged under strict data processing agreements and are not permitted to use your verification data for any purpose other than the verification service they provide to kk66.
• Game Software Providers: kk66's game studio partners may receive anonymised technical data relating to game performance and player session patterns. No personally identifiable information is shared with game studios.
• Regulatory and Law Enforcement Authorities: kk66 will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by a valid legal order, warrant, or regulatory direction. kk66 will, where legally permitted, notify affected players of such disclosure.
• Fraud Prevention Agencies: kk66 may share data with specialist fraud prevention organisations for the purpose of identifying and preventing fraudulent activity across the gaming industry.

kk66 uses cookies and similar tracking technologies on the kk66 platform to provide core functionality, enhance platform performance, and — where you have consented — to personalise your experience. The categories of cookies kk66 uses are as follows:

• Strictly Necessary Cookies: These cookies are essential for the kk66 platform to function. They enable you to log in to your account, maintain your session while navigating between pages, and use core features such as the deposit flow and live casino. These cookies cannot be disabled without preventing you from using the platform.
• Functional Cookies: These cookies remember your preferences — such as your language setting, notification preferences, and responsible gaming settings — so that you do not have to reconfigure them each time you visit kk66.
• Performance and Analytics Cookies: With your consent, kk66 uses anonymised analytics cookies to understand how players navigate the platform, which games and features are most used, and where technical issues occur. This data is used in aggregate form only and cannot be traced back to individual players.
• Session Security Cookies: kk66 uses short-lived session tokens to protect your account from cross-site request forgery (CSRF) and session hijacking attacks. These are security-critical and are always active.

You can manage cookie preferences through your browser settings. Please be aware that disabling cookies beyond the strictly necessary category may affect the functionality of certain kk66 platform features. kk66 does not use third-party advertising or retargeting cookies.

kk66 retains personal data for different periods depending on the nature of the data and the purpose for which it was collected:

• Account and Identity Data: Retained for the duration of the player's active account plus a minimum of five (5) years following account closure, as required by our gaming licence AML obligations and applicable financial record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of seven (7) years from the date of each transaction, in compliance with financial regulatory standards.
• Gaming Activity Data: Retained for five (5) years from the date of each session, used for dispute resolution, responsible gaming monitoring, and regulatory reporting during that period.
• Customer Support Communications: Retained for three (3) years from the date of closure of the relevant support interaction, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of the player's account plus three (3) years, to demonstrate compliance with consent obligations.
• Technical and Session Logs: Retained for twelve (12) months, used for security monitoring and fraud detection.

Upon expiry of the applicable retention period, personal data is either securely deleted from kk66's systems or anonymised such that it can no longer be attributed to any individual player.

kk66 takes the security of your personal data seriously and employs a comprehensive set of technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the kk66 platform.
• Encryption of sensitive data fields — including CNIC numbers and payment account identifiers — at rest in kk66's databases.
• Role-based access controls ensuring that only authorised kk66 personnel with a documented operational need can access personal data.
• Regular third-party penetration testing and security audits of the kk66 platform infrastructure.
• Two-factor authentication (2FA) available and strongly recommended for all player accounts.
• Automated monitoring systems that flag unusual login activity and suspicious transactions in real time.
• Incident response procedures that ensure any data breach affecting player data is investigated promptly, contained, and — where required — reported to relevant authorities and affected players without undue delay.

While kk66 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. kk66 encourages all Pakistani players to use strong, unique passwords for their kk66 account, to enable 2FA, and to contact support immediately if they notice any suspicious activity on their account.

kk66 recognises and respects the data rights of all registered players. Subject to applicable law and the conditions attached to each right, Pakistani kk66 players hold the following rights in respect of their personal data:

To exercise any of these rights, please contact kk66 support at [email protected] with the subject line "Data Rights Request" and your registered mobile number. kk66 will acknowledge your request within 48 hours and respond fully within 30 calendar days. Identity verification will be required before kk66 acts on any data rights request.

The kk66 platform is strictly intended for individuals aged 21 years and above. kk66 does not knowingly collect personal data from individuals under the age of 21. The registration process includes an age declaration and kk66 conducts KYC checks that include date of birth verification to enforce this requirement.

If kk66 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a direct report, a parent or guardian's notification, or detection through our internal verification processes — kk66 will immediately suspend the relevant account, delete all associated personal data, and void any associated account balance in accordance with the kk66 Terms and Conditions.

kk66 operates under an international gaming licence and, as a consequence, some personal data processing activities may involve the transfer of data to servers or service providers located outside of Pakistan. Where such transfers occur, kk66 ensures that adequate safeguards are in place to protect your personal data to a standard equivalent to that applied within kk66's primary operating jurisdiction.

Safeguards employed by kk66 for international data transfers include contractual data processing agreements with all third-party recipients, binding corporate rules where applicable, and the use of service providers who maintain internationally recognised security certifications. kk66 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without the contractual safeguards described above.

kk66 reviews this Privacy Policy periodically and updates it to reflect changes in our data processing practices, updates to applicable laws and regulations, or improvements in our transparency obligations. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Where changes are material — meaning they significantly affect how kk66 processes your personal data or the rights you hold — kk66 will notify registered players via the email address or mobile number associated with their account at least fourteen (14) days before the changes take effect. Continued use of the kk66 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

We encourage all kk66 players to revisit this Privacy Policy periodically, particularly before any PSL season when promotional data processing activity increases. The most current version of this Privacy Policy is always available at kk66.lol/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how kk66 has handled your personal data, please get in touch using one of the following channels:

• Email: [email protected] — use subject line "Privacy Enquiry" for all data-related matters.
• Live Chat: Available on the kk66 platform from 10:00 AM to 2:00 AM Pakistan Standard Time (PST), seven days a week.

kk66 commits to acknowledging all privacy-related enquiries within 48 hours and providing a substantive response within 30 calendar days. Where a request is particularly complex or involves a large volume of data, kk66 will inform you of any extension to this timeframe within the initial 30-day window.