At kp66, we treat the personal information of our players with the same seriousness we apply to platform security. This Privacy Policy explains in plain terms what data we collect, why we collect it, how it is stored and used, and the rights you hold as a kp66 account holder. If you have any questions after reading this document, our support team is available around the clock.
These six principles underpin how kp66 handles your personal data. They are not a substitute for the full policy below — please read the complete document for all details.
kp66 collects only the personal data that is strictly necessary to operate your account, process transactions in PKR, comply with KYC obligations, and deliver the gaming services you have signed up for. We do not harvest data for the sake of it.
kp66 does not sell, rent, or trade your personal information to third parties for marketing or commercial purposes. Your data is shared only where required for service delivery — such as with payment processors like JazzCash and EasyPaisa — or where we are legally required to disclose it.
All data transmitted between your device and the kp66 platform is protected by 256-bit SSL encryption over TLS 1.3. Financial data is processed through PCI-DSS compliant gateways. Sensitive account data is stored in encrypted form and is never held in plain text on our servers.
As a kp66 account holder, you have the right to access, correct, port, and request deletion of your personal data at any time, subject to our legal retention obligations. Contact our support team at [email protected] to submit a data subject request — we respond within 30 days.
kp66 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable regulations. Transaction records are retained for a minimum of five (5) years for AML compliance. Account data is deleted within 90 days of confirmed account closure.
In the unlikely event of a data breach that poses a risk to your rights and freedoms, kp66 will notify affected account holders without undue delay and in accordance with our obligations under applicable data protection law. We maintain an internal incident response procedure reviewed quarterly.
1.1 This Privacy Policy governs the collection, use, storage, and disclosure of personal data by kp66 (referred to as "kp66", "we", "us", or "our") in connection with the operation of the online gaming platform accessible at kp66.bio. It applies to all registered players, visitors to the website, and any individual who contacts kp66 through our support channels.
1.2 kp66 acts as the data controller in respect of the personal data collected through the platform. This means kp66 determines the purposes and means of processing your personal data and is responsible for ensuring it is handled in compliance with applicable data protection principles.
1.3 Where kp66 engages third-party service providers — such as payment processors, KYC verification providers, or game software suppliers — those parties act as data processors on kp66's behalf and are bound by contractual obligations to process personal data only as directed by kp66 and in accordance with appropriate security standards.
1.4 This policy should be read in conjunction with the kp66 Terms & Conditions and any specific terms applicable to individual promotions or services. In the event of a conflict between this policy and the Terms & Conditions on a data protection matter, this Privacy Policy shall prevail.
2.1 kp66 collects personal data from you in three primary ways: information you provide directly, information generated automatically through your use of the platform, and information received from third parties in connection with identity verification and payment processing.
2.2 Information You Provide Directly:
2.3 Information Collected Automatically:
2.4 Information from Third Parties:
3.1 kp66 uses the personal data we collect for the following specific purposes:
| Purpose | Data Used |
|---|---|
| Account creation & management | Name, email, date of birth, contact details, login credentials |
| KYC identity & age verification | CNIC / passport details, address, date of birth, document images |
| Processing deposits & withdrawals | Payment method details, transaction amounts, IP address |
| Fraud prevention & AML compliance | Transaction history, IP address, device ID, watchlist screening results |
| Delivering gaming services | Account preferences, game session data, bet history |
| Customer support | Communication history, account activity logs |
| Responsible gaming tools | Deposit limits, session data, self-exclusion status |
| Platform analytics & improvement | Anonymised usage data, session metrics, feature interaction logs |
| Legal & regulatory compliance | Full account data, transaction records, KYC documentation |
| Promotional communications (with consent) | Email address, gaming preferences, opt-in status |
3.2 kp66 does not use automated decision-making that produces legal or similarly significant effects without human oversight, except where required for real-time fraud prevention. In such cases, affected players may request human review of any automated decision by contacting our support team.
3.3 Where kp66 sends you promotional communications by email, you may opt out of such communications at any time by using the unsubscribe link contained in any such email or by contacting our support team directly. Opting out of marketing communications will not affect your ability to receive transactional or account-related messages, which are necessary for the operation of your account.
4.1 kp66 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
4.2 Where kp66 relies on legitimate interests as the legal basis for processing, we carry out a balancing test to ensure that our interests do not override your fundamental rights and freedoms. You may request information about any such balancing test by contacting our support team.
5.1 kp66 uses cookies and similar tracking technologies on the kp66.bio platform to enhance your experience, maintain your session, and gather anonymised analytics data to improve platform performance.
5.2 The following categories of cookies are used on the kp66 platform:
5.3 You can manage your cookie preferences at any time through the cookie settings panel accessible from the platform footer. Please note that disabling strictly necessary cookies will prevent you from accessing your kp66 account.
5.4 kp66 does not use third-party advertising cookies or cross-site tracking technologies that share your data with external advertisers or data brokers.
6.1 kp66 does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited circumstances:
6.2 Any third party with whom kp66 shares personal data is required to maintain appropriate technical and organisational security measures and to process data only in accordance with kp66's documented instructions.
7.1 As an internationally licensed online gaming platform, kp66 may process and store personal data on servers located outside of Pakistan. Where personal data is transferred to jurisdictions that may not offer the same level of data protection as your home country, kp66 implements appropriate safeguards to ensure your data remains protected.
7.2 Appropriate safeguards for international transfers may include standard contractual clauses, binding corporate rules, or reliance on adequacy decisions by relevant data protection authorities. You may request details of the specific safeguards applicable to any international transfer of your personal data by contacting [email protected].
7.3 All data processed in connection with PKR payment transactions through JazzCash, EasyPaisa, and Pakistani banking partners is processed within systems that comply with the State Bank of Pakistan's applicable directives and data security requirements.
8.1 kp66 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law or regulation. The following retention periods apply as a general guideline:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML / regulatory compliance |
| KYC documents | 5 years post account closure | Legal obligation |
| Transaction records | Minimum 5 years | AML / financial regulation |
| Support communications | 3 years from last interaction | Legitimate interests |
| Gaming session logs | 2 years from session date | Responsible gaming / disputes |
| Marketing consent records | Until consent withdrawn + 1 year | Legal obligation (consent audit) |
| Analytics data (anonymised) | 26 months rolling | Legitimate interests |
8.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Account data is queued for deletion within 90 days of confirmed account closure, subject to any outstanding legal hold requirements.
9.1 As a kp66 account holder, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Subject Request". kp66 will respond within thirty (30) days of receipt of a valid request.
9.2 kp66 will not charge a fee for handling a data subject request unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. kp66 reserves the right to request proof of identity before processing a data subject request in order to protect against unauthorised access to another individual's data.
10.1 kp66 does not knowingly collect personal data from individuals under the age of 21. Our registration process includes a mandatory date-of-birth declaration and is backed by documentary KYC verification to enforce this requirement. If kp66 discovers that personal data has been collected from an individual under the age of 21, that data will be deleted immediately and the account will be permanently closed.
10.2 If you are a parent or guardian and believe that your child has registered a kp66 account or submitted personal data through our platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.
10.3 Players who are concerned about a minor's access to online gaming content are encouraged to use third-party parental control tools and to review the resources available on our Responsible Gaming page.
11.1 kp66 maintains a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated on a regular basis to reflect evolving best practices in information security.
11.2 Key security controls implemented by kp66 include:
11.3 Despite these measures, no internet-connected system can be guaranteed to be completely secure. If you have reason to believe that your kp66 account has been compromised, please contact our support team immediately via live chat or at [email protected] so that we can take immediate protective action.
12.1 kp66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is always displayed at the top of this page.
12.2 Where a proposed change is material — meaning it significantly affects how we use your personal data or the rights available to you — kp66 will notify registered account holders via the email address associated with their account at least seven (7) days before the change takes effect.
12.3 Your continued use of the kp66 platform following the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy. If you do not agree with a material amendment, you have the right to close your account and request deletion of your data in accordance with Section 9 of this policy, subject to applicable legal retention requirements.
13.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by kp66, please contact our Data Protection team through the following channels:
13.2 kp66 is committed to resolving all privacy-related queries and complaints promptly. We aim to acknowledge receipt of all written complaints within two (2) business days and to provide a substantive response within fourteen (14) business days.
13.3 If you are not satisfied with kp66's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority or regulatory body in your jurisdiction. kp66 will cooperate fully with any regulatory investigation conducted in connection with a data subject complaint.
13.4 For matters relating to your account security specifically — such as suspected unauthorised access or a lost password — please contact our 24/7 live chat support immediately so that protective action can be taken on your account without delay.