pk666 Privacy Policy

1About This Policy

This Privacy Policy ("Policy") describes how pk666 ("pk666", "we", "us", "our") collects, processes, stores, and shares personal data in connection with your use of the pk666 online casino and sports betting platform, accessible at pk666.asia (the "Platform").

This Policy applies to all personal data processed in relation to registered player accounts, prospective players who interact with the Platform without registering, and individuals who contact pk666 Support. It should be read alongside the pk666 Terms & Conditions, which govern the contractual relationship between you and pk666.

By registering an account or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with how pk666 handles personal data as described here, you should not register an account or use the Platform.

2Data Controller

pk666 is the data controller responsible for personal data processed in connection with the Platform. As data controller, pk666 determines the purposes and means of personal data processing and is accountable for ensuring that processing is carried out lawfully, fairly, and transparently.

For all data protection enquiries, requests to exercise your rights, or to raise a concern about how your data is handled, please contact the pk666 Data Protection team via the contact details set out in Section 15 of this Policy.

3Personal Data We Collect

pk666 collects the following categories of personal data, depending on your interaction with the Platform:

4How We Collect Your Data

pk666 collects personal data through the following means:

• Directly from you: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting Support, or updating account details.
• Automatically: Technical data collected via cookies, web beacons, and server logs when you access or interact with any part of the pk666 Platform.
• Third parties: Identity verification data from KYC service providers; fraud signal data from anti-fraud systems; payment confirmation data from payment processors including JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah.

5Purposes of Processing & Legal Basis

pk666 processes personal data for the following purposes, each of which is supported by a specific lawful basis:

• Account registration and management — Necessary for the performance of the contract between you and pk666.
• Processing deposits, withdrawals, and financial transactions — Necessary for the performance of the contract; also required by anti-money laundering legal obligations.
• Identity verification and KYC compliance — Compliance with legal obligations applicable to online gaming operations.
• Fraud prevention and security — Legitimate interests of pk666 in protecting the Platform and its players from fraud, account takeover, and money laundering.
• Providing customer support — Performance of the contract; legitimate interests in maintaining service quality.
• Responsible gaming monitoring — Legitimate interests and legal compliance; to identify and support players showing signs of problem gambling behaviour.
• Platform analytics and improvement — Legitimate interests of pk666 in improving the Platform experience for all players.
• Marketing communications — Consent (where given); you may withdraw consent at any time as described in Section 13.
• Legal and regulatory compliance — Compliance with applicable laws, court orders, and regulatory requirements.

6Disclosure to Third Parties

pk666 does not sell personal data. We may disclose your personal data to the following categories of third parties only to the extent necessary for the purposes described in Section 5:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment service providers used to process PKR deposits and withdrawals. These processors receive only the data necessary to complete your transaction.
• Identity Verification Providers: Third-party KYC and anti-money laundering service providers who verify identity documents and cross-reference provided information against regulatory databases.
• Fraud Prevention Services: Third-party services that analyse usage patterns to detect and prevent fraudulent activity, account takeover, and bonus abuse.
• IT Infrastructure Providers: Hosting, cloud storage, and database providers who process data on behalf of pk666 under data processing agreements that impose strict confidentiality and security obligations.
• Regulatory Authorities and Law Enforcement: Where required by applicable law, court order, or regulatory directive, pk666 may disclose personal data to competent authorities without prior notice to the relevant player.
• Professional Advisers: Legal, audit, and compliance advisers where necessary for the operation of pk666's business, subject to professional confidentiality obligations.

7International Data Transfers

To deliver the pk666 Platform, some personal data may be transferred to, stored in, or processed in jurisdictions outside Pakistan. Where such transfers occur, pk666 implements appropriate safeguards to ensure that your data receives a standard of protection equivalent to that described in this Policy.

These safeguards include standard contractual clauses approved for international data transfers, data processing agreements with all third-party service providers, and technical security measures including encryption of data in transit and at rest.

8Data Retention

pk666 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to applicable legal retention requirements. The following general retention periods apply:

• Active account data: Retained for the lifetime of the account and for a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction.
• KYC verification documents: Retained for a minimum of 5 years following account closure or the completion of the relevant transaction.
• Support communications: Retained for up to 3 years from the date of the communication unless relevant to an ongoing dispute.
• Technical and log data: Generally retained for up to 12 months, subject to security investigation requirements.

Where retention beyond these periods is required by law or for the purpose of legal proceedings, data will be retained for the duration of that requirement.

9Cookies & Tracking Technologies

9.1 What Cookies pk666 Uses

The pk666 Platform uses the following categories of cookies and similar tracking technologies:

• Strictly Necessary Cookies: Required for the Platform to function, including session authentication, load balancing, and security tokens. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred games lobby view, and notification settings.
• Analytics Cookies: Collect anonymised data about how players interact with the Platform, which pages are visited most, and where errors occur. Used to improve Platform performance.
• Marketing Cookies: Used to deliver relevant promotional content to players based on their Platform activity. Only set with your explicit consent.

9.2 Managing Cookies

You may manage non-essential cookie preferences via the cookie consent banner displayed on your first visit to the Platform. You may also configure your browser to reject all cookies; however, doing so may impair the functionality of the pk666 Platform, including the ability to maintain a logged-in session.

10Your Data Rights

Subject to applicable law and certain legal exemptions, you have the following rights with respect to personal data that pk666 holds about you:

• Right of Access: Request a copy of the personal data pk666 holds about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Restriction: Request that pk666 restrict processing of your data while a correction or erasure request is assessed.
• Right to Data Portability: Request your personal data in a structured, machine-readable format where technically feasible.
• Right to Object: Object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the pk666 Support team as described in Section 15. pk666 will respond to all valid requests within 30 calendar days, or notify you if an extension is required.

11Security Measures

pk666 implements a comprehensive range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption on all data transmitted between player devices and pk666 servers
• Encryption of sensitive data fields (including financial data and identity document scans) at rest
• Multi-factor authentication requirements for account access on new or unrecognised devices
• Strict access controls limiting internal staff access to personal data on a need-to-know basis
• Regular security audits and penetration testing of Platform infrastructure
• Automated anomaly detection systems monitoring for suspicious login activity and data access patterns

In the event of a personal data breach that poses a material risk to players, pk666 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

12Children's Privacy

The pk666 Platform is strictly intended for adults aged 18 and over. pk666 does not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account closed.

If you are a parent or guardian and believe that a minor in your care may have registered an account on pk666, please contact our Support team immediately so that we can investigate and take appropriate action.

13Marketing Communications

With your consent, pk666 may send you promotional communications about bonuses, new games, tournaments, and special offers via email, SMS, or in-platform notifications. Marketing communications will only be sent where you have opted in during registration or subsequently through Account Settings.

You may withdraw your consent to marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email
• Updating your notification preferences in Account Settings
• Contacting pk666 Support directly to request removal from all marketing lists

Withdrawal of marketing consent does not affect the sending of transactional communications necessary for the operation of your account, such as deposit confirmation, withdrawal notification, and security alerts.

14Changes to This Privacy Policy

pk666 reserves the right to update or amend this Privacy Policy at any time. Material changes — those that affect how we use your personal data in ways that were not previously disclosed — will be communicated to registered players via email or in-platform notification, with a minimum of 14 calendar days' notice before the change takes effect.

The "Last Updated" date at the top of this Policy will be revised each time a substantive change is made. Your continued use of the pk666 Platform following the effective date of any amendment constitutes acceptance of the revised Policy.

15Contact & Complaints

For any questions about this Privacy Policy, to exercise your data rights, or to raise a complaint about how pk666 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 via the chat icon on any page of the pk666 Platform
• Email: [email protected]
• Ticket Support: Submit a formal data rights or privacy request via your Account Dashboard

pk666 will acknowledge privacy and data rights requests within 5 business days and will provide a substantive response within 30 calendar days. If we require additional time or information to fulfil your request, we will notify you promptly with an explanation and revised timeline.

If you are not satisfied with pk666's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction.