pk666 Privacy Policy

1. Data Controller

pk666 is the data controller responsible for personal data collected through the pk666.today platform. The platform is operated under an international gaming license framework, and data processing activities are conducted in compliance with the data protection obligations imposed by that framework.

All data protection enquiries, rights requests, and complaints should be addressed to the pk666 Data Protection contact at: [email protected] (plain text — not a clickable link).

Where pk666 engages third-party service providers to process personal data on our behalf (such as KYC verification partners or payment processors), those parties act as data processors under written agreements that impose data protection obligations consistent with this Policy.

2. Personal Data We Collect

pk666 collects personal data through several touchpoints. The categories of data collected, and the context in which they are collected, are described below:

2.1 Registration Data

When you create a pk666 account, we collect:

• Full legal name (as it appears on your CNIC);
• Pakistani mobile number (primary account identifier);
• Date of birth (for age verification purposes);
• City of residence (Karachi, Lahore, Islamabad, Faisalabad, or other);
• Preferred currency (PKR by default for Pakistani players);
• Account password (stored as a one-way cryptographic hash — never in plain text).

2.2 Identity Verification (KYC) Data

To comply with our licensing and anti-money laundering obligations, we collect the following documents and data when you request a withdrawal:

• Scanned or photographed copy of your CNIC (front and back);
• Selfie photograph (requested in specific circumstances for liveness verification);
• Proof of payment method (e.g., screenshot of your JazzCash or EasyPaisa account showing your registered mobile number).

2.3 Financial Transaction Data

• Deposit and withdrawal amounts, timestamps, and payment method references;
• Mobile wallet numbers (JazzCash, EasyPaisa, SadaPay) used for transactions;
• Bank account details (account name, bank name, account number) for HBL, UBL, or Meezan Bank transfers;
• USDT TRC20 wallet addresses used for crypto transactions.

2.4 Gameplay & Betting Activity Data

• Game sessions, wager amounts, game outcomes, and win/loss history;
• Sports betting market selections, stake amounts, bet outcomes, and settlement history;
• Bonus claim and wagering progress records;
• Session timestamps and session duration data.

2.5 Technical & Device Data

• IP address at time of registration and at each login;
• Device type, operating system version, and browser type;
• Mobile network provider (e.g., Jazz, Zong, Telenor, Ufone);
• Platform access logs and error reports.

2.6 Communications Data

• Content and metadata of support communications via live chat or email;
• Responsible gaming tool usage records (deposit limit settings, self-exclusion requests, session limit configurations).

3. Purpose of Processing & Legal Basis

pk666 processes personal data only for specified, legitimate purposes. The table below sets out each processing purpose and its legal basis:

pk666 does not process personal data for automated decision-making that produces significant legal effects for players, except where required by our AML screening obligations. In such cases, players have the right to request human review of any automated determination.

4. Cookies & Tracking Technologies

The pk666 platform uses cookies and similar technologies to deliver core functionality, maintain your session state, and analyse platform usage. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Required for the platform to function. These include session management cookies that keep you logged in during your pk666 session and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality;
• Functional Cookies: Remember your preferences such as language settings and responsible gaming configurations (e.g., deposit limit display preferences). These improve your experience but are not strictly required;
• Analytics Cookies: Used to understand how players interact with the platform — which games are visited most frequently, where navigation drop-offs occur, and how pages perform on different devices and networks. Analytics data is processed in aggregate and does not identify individual players by name;
• Security Cookies: Detect unusual login patterns, identify potentially compromised sessions, and support fraud prevention monitoring.

pk666 does not use third-party advertising or tracking cookies. No behavioural data from the pk666 platform is shared with advertising networks or data brokers.

You may control cookie behaviour through your browser settings. Disabling strictly necessary cookies will impair your ability to use the pk666 platform, including the pk666 Login functionality.

5. Data Sharing & Third Parties

pk666 does not sell, rent, or trade your personal data to any third party for commercial purposes under any circumstances. Personal data is shared with third parties only in the following limited and documented scenarios:

• Payment Processors: Transaction data is shared with payment processing partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 processors) solely for the purpose of executing your requested deposit or withdrawal. These partners are subject to their own applicable data protection frameworks;
• KYC / Identity Verification Partners: Where automated identity verification is used, CNIC data and associated verification photographs are processed by our KYC technology partner under a data processing agreement. These partners do not retain your data beyond the verification process;
• Regulatory Authorities: pk666 is obligated to report certain transaction data and player information to our licensing authority and, where required by applicable anti-money laundering law, to financial intelligence authorities. Such disclosures are made only where legally mandated;
• Law Enforcement: Where pk666 receives a valid legal order requiring disclosure of player data, we will comply with such order. Where legally permissible, we will inform the affected player that such a disclosure has been requested;
• Technical Infrastructure Providers: Cloud hosting, server infrastructure, and security monitoring providers may process certain technical data (including IP addresses and access logs) as part of delivering infrastructure services. These providers are contractually bound to process data only as instructed by pk666 and are prohibited from using it for their own purposes.

6. International Data Transfers

pk666 operates under an international gaming license framework, and elements of our platform infrastructure may involve data processing in jurisdictions outside Pakistan. Where personal data is transferred internationally, pk666 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy.

Applicable safeguards for international transfers include contractual clauses that impose data protection obligations on receiving parties, technical security measures (encryption in transit and at rest), and access controls that limit data visibility to authorised personnel.

Where you wish to obtain further information about the specific safeguards applied to international transfers of your personal data, please contact pk666 at [email protected].

7. Data Security Measures

pk666 implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Encryption in Transit: All data transmitted between your device and pk666 servers is encrypted using TLS 1.2 or higher. This applies to all platform pages including the pk666 Login page, account dashboard, deposit pages, and support chat;
• Encryption at Rest: Sensitive personal data (including CNIC images, financial data, and account credentials) is encrypted in storage using industry-standard symmetric encryption;
• Password Security: Account passwords are stored as salted cryptographic hashes. pk666 never stores or transmits your password in plain text, and pk666 staff cannot retrieve your password — only reset it through a verified process;
• Access Controls: Access to player personal data within pk666's internal systems is restricted on a strict need-to-know basis. All internal access to sensitive player data is logged and subject to periodic audit;
• Two-Factor Authentication: Players are encouraged to enable 2FA on their pk666 accounts for additional login security. 2FA is available from the account security settings panel;
• Intrusion Detection: pk666's infrastructure is monitored for unusual access patterns, DDoS attempts, and other security events on a continuous basis.

In the event of a data breach that is likely to result in a risk to player rights, pk666 will notify affected players promptly and will take immediate remediation steps. Notification will be provided via the registered mobile number or email on the affected account.

8. Data Retention Periods

pk666 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, and in line with our mandatory regulatory obligations. Specific retention periods by data category are as follows:

• Account Registration Data: Retained for the lifetime of the account plus 5 years following permanent account closure (regulatory minimum for gaming operators);
• KYC / Identity Documents: Retained for 5 years from the date of verification, or 5 years from the date of account closure, whichever is later — in compliance with anti-money laundering retention requirements;
• Transaction Records (Deposits & Withdrawals): Retained for 5 years from the date of each transaction;
• Gameplay & Betting History: Retained for 3 years from the date of each game session or settled bet, then archived for 2 further years before deletion;
• Support Communications: Retained for 2 years from the date of the communication, or 1 year from account closure, whichever is later;
• Technical Access Logs: Retained for 12 months from the date of each log entry;
• Self-Exclusion Records: Retained indefinitely to prevent re-registration during an active permanent self-exclusion, and for 7 years after the expiry of time-limited self-exclusions.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes re-identification technically infeasible.

9. Minors & Age Protection

The pk666 platform is strictly restricted to persons aged 21 and over. pk666 does not knowingly collect or process personal data of persons under the age of 21. If we become aware that personal data of an underage person has been collected, we will immediately close the associated account, return any deposited funds to the originating payment method, void any winnings, and securely delete all personal data associated with the account.

If you have reason to believe that a person under 21 has created a pk666 account, please contact [email protected] immediately. pk666 takes underage access seriously and will act on all credible reports promptly.

Parents and guardians who are concerned about access to gambling websites are advised to use parental control software to restrict access to gambling-related content on devices used by minors.

10. Marketing Communications

pk666 may send promotional communications — including bonus offers, tournament announcements, new game launches, and PSL cricket betting promotions — to players who have opted in to receive marketing communications at the time of registration or subsequently through their account settings.

Marketing communications from pk666 are sent via SMS to your registered Pakistani mobile number and, where an email address has been provided, via email. pk666 does not engage in unsolicited marketing (spam).

You may opt out of all marketing communications at any time by:

• Updating your communication preferences in the account dashboard;
• Replying STOP to any SMS communication from pk666;
• Contacting pk666 support at [email protected] with a clear opt-out request.

Opting out of marketing communications does not affect communications that are necessary for account management, security alerts, or transaction confirmations — these will continue regardless of marketing preference settings.

11. Exercising Your Data Rights

To exercise any of the data rights summarised at the top of this page — including access, rectification, erasure, restriction of processing, data portability, or objection — please submit a request to pk666 via:

• Email: [email protected] — subject line: "Data Rights Request";
• Live Chat: Available 24/7 from your pk666 account dashboard following pk666 Login.

We will acknowledge your request within 3 business days and provide a full response within 30 calendar days. Where a request is complex or voluminous, we may extend this period by a further 30 days, in which case we will notify you of the extension within the initial 30-day period.

To protect your privacy and prevent unauthorised access to your data, all data rights requests must be submitted from the contact method registered to your pk666 account, or accompanied by verification of your identity (CNIC). We cannot process data rights requests from unverified sources.

There is no fee for exercising your data rights. Where a request is manifestly unfounded, repetitive, or excessive, pk666 reserves the right to charge a reasonable administrative fee or decline to respond, with written explanation provided to you.

12. Complaints

If you believe pk666 has processed your personal data in a manner that does not comply with this Privacy Policy or applicable data protection obligations, we encourage you to first contact pk666 support at [email protected] to allow us the opportunity to address your concern directly. We will acknowledge privacy complaints within 3 business days and aim to resolve all complaints within 28 days.

If you are not satisfied with pk666's response to your complaint, you may have the right to raise the matter with the data protection supervisory authority applicable under the pk666 licensing framework. Details of the applicable supervisory authority and complaints procedure are available upon written request to pk666 support.

13. Changes to This Privacy Policy

pk666 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, technological developments, or regulatory requirements. When material changes are made to this Policy, pk666 will notify registered players by SMS to their registered Pakistani mobile number at least 7 days before the changes take effect.

The current version of this Privacy Policy is always accessible at pk666.today/privacy-policy. The "Last Updated" date at the top of this document indicates when the most recent revision was made. Continued use of the pk666 platform following notification of a Policy update constitutes your acceptance of the revised Policy.

If you disagree with any changes to this Policy, you may request account closure before the revised Policy takes effect by contacting pk666 support. Closure will be processed in accordance with the pk666 Terms & Conditions.

14. Contact Us

For all privacy-related queries, data rights requests, or concerns about how pk666 handles your personal data, please contact us through the following channels:

• Email: [email protected] — for data rights requests, please use the subject line "Privacy Request";
• Live Chat: Available 24/7 from your account dashboard after pk666 Login — best for urgent or account-specific queries;
• Response Commitment: All privacy queries are acknowledged within 3 business days and resolved within 30 calendar days.

For questions about the full terms governing your use of the pk666 platform, please review our Terms & Conditions. For information about responsible gaming tools and self-exclusion, please visit the Responsible Gaming page.