Privacy Policy

1. Introduction

k66y ("we", "us", "our") is committed to protecting and respecting the privacy of every individual who accesses or registers on the k66y platform at k66y.net (the "Platform"). This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by k66y.

This Policy applies to all visitors and registered members of the Platform, including those accessing from Karachi, Lahore, Islamabad, Faisalabad, and other locations across Pakistan. By using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read in conjunction with our Terms & Conditions, which together constitute the entire agreement governing your relationship with k66y.

2. Data Controller

For the purposes of applicable data protection legislation, k66y is the data controller in respect of the personal information collected through and in connection with the Platform. As data controller, k66y determines the purposes for which and the manner in which personal data is processed.

k66y operates under an internationally recognised gaming licence and is therefore subject to the data protection obligations imposed by the relevant regulatory authority. Any enquiries regarding our data controller status or our data protection practices may be directed to our support team at the contact details listed in Section 14 of this Policy.

3. Information We Collect

3.1 Information You Provide Directly

When you register for a k66y account or interact with the Platform, we may collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, and Pakistani CNIC (Computerised National Identity Card) number or equivalent government-issued identification.
• Contact Data: Residential address in Pakistan, email address, and mobile phone number.
• Financial Data: Payment method details (mobile wallet identifiers for JazzCash and EasyPaisa, or bank account details for HBL, UBL, and Meezan Bank), transaction history, deposit amounts, and withdrawal requests. Full payment credentials are not stored on our servers; they are processed through our compliant payment partners.
• Profile Data: Your chosen username, account preferences, gaming history, betting records, and responsible gaming limit settings.
• Communications Data: Records of any correspondence between you and our customer support team, including live chat transcripts and email exchanges.
• Verification Data: Copies of documents submitted as part of our KYC (Know Your Customer) process, including identity documents and proof of address.

3.2 Information Collected Automatically

When you access the Platform, we automatically collect certain technical and usage data, including:

• IP address and approximate geographic location derived from IP data.
• Device type, operating system, browser type and version.
• Pages visited, time spent on each page, links clicked, and navigation paths through the Platform.
• Session start and end times, game rounds played, and bet values.
• Cookies and similar tracking technologies as described in Section 7.

4. How We Use Your Data

k66y processes your personal data for the following purposes:

1. Account Management: To create, maintain, and administer your k66y account, including verifying your identity and age (21+) as required by our licensing obligations.
2. Service Delivery: To enable you to deposit funds, place bets, participate in games, and withdraw winnings via your chosen payment method.
3. Regulatory Compliance: To fulfil our obligations under our gaming licence, including anti-money laundering (AML) checks, responsible gaming monitoring, and reporting obligations to competent authorities.
4. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, cheating, unauthorised account access, and other prohibited activities.
5. Customer Support: To respond to your enquiries, resolve disputes, process complaints, and deliver technical assistance.
6. Responsible Gaming: To monitor gameplay patterns and intervene where behaviour suggests potential problem gambling, in accordance with our responsible gaming commitments.
7. Platform Improvement: To analyse aggregate usage data and improve the functionality, content, and user experience of the Platform.
8. Communications: To send you account notifications, security alerts, transaction confirmations, and, where you have consented, promotional communications about k66y offers and features.

5. Legal Basis for Processing

k66y relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing is necessary to perform the contract between you and k66y (i.e., to provide the gaming services you have registered for).
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including KYC, AML, and responsible gaming requirements imposed by our licensing authority.
• Legitimate Interests: Processing is necessary for our legitimate interests in operating a safe, secure, and commercially viable platform, provided these interests are not overridden by your rights and freedoms.
• Consent: Where we send you optional marketing communications or use non-essential cookies, we rely on your freely given, informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

6.1 Service Providers

We engage trusted third-party service providers to assist in operating the Platform. These may include payment processors (including the operators of JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank integration services), game software providers, identity verification agencies, fraud prevention services, and customer support technology providers. All third-party processors are contractually obligated to process your data only on our instructions and to maintain appropriate security standards.

6.2 Regulatory & Legal Disclosure

We may disclose your personal data to our gaming regulatory authority, law enforcement agencies, financial intelligence units, or other government bodies where we are legally required or authorised to do so. This includes disclosures made in connection with AML investigations, court orders, or regulatory inspections.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all assets of k66y, your personal data may be transferred to the acquiring entity. We will notify you before your data becomes subject to a different privacy policy.

7. Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device and remember certain information about your visit, such as your language preference and login status.

7.2 How k66y Uses Cookies

We use the following categories of cookies on the Platform:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable core features such as secure login, session management, and fraud prevention. These cookies cannot be disabled without breaking core functionality.
• Performance Cookies: Collect anonymised, aggregated data about how visitors use the Platform (e.g., pages visited, error messages). This data helps us improve site performance. No personally identifiable information is collected through performance cookies.
• Functional Cookies: Remember your preferences, such as language settings and display options, to provide a more personalised experience.

k66y does not use advertising or cross-site tracking cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may impair your ability to use the Platform.

8. Data Retention

k66y retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with our legal and regulatory obligations. Specifically:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, to satisfy AML and regulatory record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC Documents: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by applicable law or regulatory direction.
• Customer Support Records: Retained for three (3) years from the date of the last interaction.
• Marketing Consent Records: Retained for the duration of your consent and for a reasonable period thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual.

9. Security Measures

k66y implements a multi-layered approach to data security, including the following technical and organisational measures:

• Transport Layer Security (TLS): All data in transit between your device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. Role-based access controls and multi-factor authentication are enforced for all staff with data access.
• Intrusion Detection: Real-time monitoring systems detect and alert on suspicious activity, unauthorised access attempts, and unusual data patterns.
• Regular Audits: Our security posture is reviewed through periodic internal audits and independent third-party penetration testing.
• Incident Response: We maintain a documented data breach response plan. In the event of a breach affecting your rights and freedoms, we will notify you and the relevant authority within the timeframes required by applicable law.

10. Your Data Rights

Subject to applicable law and our regulatory obligations, you have the following rights in respect of your personal data held by k66y:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we limit how we use your personal data in certain circumstances.
• Right to Data Portability: You may request receipt of your personal data in a structured, machine-readable format, where technically feasible.
• Right to Object: You may object to our processing of your personal data where we rely on legitimate interests as our legal basis.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our Data Support team using the contact details in Section 14. We will respond to all verifiable requests within thirty (30) calendar days. We may need to verify your identity before processing your request.

11. Minors' Privacy

The k66y Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. If we discover that a member is under the required minimum age, we will immediately suspend their account, void any transactions, and securely delete all associated personal data.

If you are a parent or guardian and believe that a minor in your care has provided personal data to k66y without your consent, please contact us immediately at the details in Section 14. We will take prompt action to investigate and remediate.

12. Third-Party Links

The k66y Platform may contain hyperlinks to third-party websites or services (for example, links to payment provider portals). These third-party sites operate under their own independent privacy policies, for which k66y accepts no responsibility or liability.

We encourage you to review the privacy policy of any third-party site you visit. The inclusion of a link on the k66y Platform does not constitute an endorsement of that site or its privacy practices.

13. Changes to This Privacy Policy

k66y reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered members via email notification or a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this Policy will be revised accordingly.

Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by k66y, please contact our Data Protection team through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 within the k66y Platform once logged in
• Response Time: All privacy-related written requests are acknowledged within 48 hours and responded to within 30 calendar days

This Privacy Policy was last reviewed and updated on 1 January 2026. This version supersedes all previously published versions of the k66y Privacy Policy.