Privacy Policy — How pk66 Protects Your Personal Data

This Privacy Policy is published by pk66, the operator of the online casino and sports betting platform available at pk66-taka.com ("the Platform," "pk66," "we," "us"). For the purposes of data privacy, pk66 acts as the data controller — meaning we determine why and how your personal information is processed in connection with your use of our services.

This policy applies to all personal data collected and processed in connection with:

• Registration of a pk66 player account.
• Deposits and withdrawals made through any supported payment method.
• Gaming activity, including bets placed, games played, and outcomes recorded.
• Communications with pk66's support team via any channel.
• Use of the pk66 website and any associated mobile applications or platforms.
• Participation in promotions, bonuses, or loyalty programmes on pk66.

This policy does not apply to third-party websites, apps, or services that may be linked from pk66 or accessed in connection with pk66 but are independently operated. Those services have their own privacy policies and practices.

pk66 collects personal data through three main channels: information you provide directly, information generated automatically through your use of the platform, and information received from third parties in the course of verification and payment processing.

Information you provide directly:

• Registration data: Mobile phone number, chosen password, and date of birth. These are required to create a pk66 account.
• Verification documents: If required for identity verification or high-value withdrawal processing, we may request a copy of your national identity card (CNIC) or other government-issued ID.
• Payment information: Mobile wallet numbers (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details for IBFT transfers, or card details for Visa/Mastercard transactions. Card details are processed exclusively by certified payment processors and are not stored by pk66.
• Support communications: Messages, complaints, or requests you send to pk66's support team, including the content of those communications.

Automatically collected data:

• Device information: device type, operating system, browser type and version.
• IP address and approximate geographic location derived from it.
• Session data: pages visited, time spent, features used, games played, bets placed, and outcomes.
• Cookie and tracking data as described in Section 7 of this policy.

Data from third parties: Payment processors confirm transaction status to pk66. Identity verification providers may confirm name and CNIC validity. Fraud prevention systems may share risk signals related to your account activity.

pk66 uses your personal data for specific, defined purposes. We do not use your data for purposes beyond those described here without your explicit consent.

pk66 does not use your personal data to make fully automated decisions that have significant legal or similarly significant effects on you without human review. Fraud risk assessments are supported by automated systems but are reviewed by our security team before account actions are taken.

pk66 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: Processing necessary to provide you with the pk66 service you signed up for — including account management, gaming, and payment processing. Without this processing, we cannot provide the service.
• Legal obligation: Processing required to comply with applicable laws — including age verification, identity checks for financial transactions, and responsible gaming obligations.
• Legitimate interests: Processing that pk66 undertakes for its legitimate business interests where those interests are not overridden by your privacy rights — including fraud prevention, platform security, and service quality improvement.
• Consent: For optional processing activities such as marketing communications. Where consent is the basis, you have the right to withdraw it at any time without affecting the legality of processing already carried out.

pk66 does not sell, rent, or trade your personal information to any third party for commercial purposes. Data sharing is limited strictly to what is necessary for the delivery of our services and compliance with legal obligations.

Parties that may receive your data:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, Pakistani banks facilitating IBFT, and Visa/Mastercard card processing networks — receive transaction details necessary to execute deposits and withdrawals. These providers have their own data protection obligations.
• Identity verification providers: Certified KYC (Know Your Customer) services that confirm identity document validity when verification is required for your account.
• Fraud prevention services: Systems that help pk66 detect and prevent fraudulent transactions, multi-accounting, and other security threats. These services receive device and transaction signals and return risk assessments.
• Game providers: Licensed game providers (Pragmatic Play, Evolution Gaming, PG Soft, etc.) receive a session token and your account identifier to deliver game content. They do not receive your mobile number, payment details, or identity documents.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory instruction, pk66 may be required to disclose certain player data. We will only do so to the extent legally required and will notify you where permitted by law.

Financial transactions on pk66 involve some of the most sensitive personal data processed by the platform. pk66 takes the security of payment data extremely seriously and has implemented specific protections for it.

Card data: pk66 does not store your Visa or Mastercard card numbers, CVV codes, or expiry dates on our own servers. Card payments are processed entirely through a certified PCI-DSS compliant payment gateway. pk66 receives only a tokenised reference that confirms the transaction was successful, without storing the underlying card details.

Mobile wallet data: Your Easypaisa and JazzCash wallet numbers are stored encrypted in pk66's systems to facilitate withdrawals. These are treated as sensitive personal data with access restricted to the minimum necessary personnel.

Bank account details: IBAN and account numbers provided for IBFT withdrawals are stored encrypted and are used solely to process your withdrawal requests. They are not shared with any party beyond the facilitating bank.

Transaction records: pk66 maintains a complete record of all deposits and withdrawals associated with your account for security, dispute resolution, and regulatory compliance purposes. You can view your complete transaction history in your account dashboard at any time.

All payment-related data transmitted between your device and pk66's servers is protected by 256-bit SSL/TLS encryption. This is verified by our SSL certificate, which you can inspect by clicking the padlock icon in your browser's address bar when on pk66-taka.com.

pk66 uses cookies and similar technologies to make the platform work correctly, to keep your session secure, and to understand how players use the platform so we can improve it. Here's a breakdown of what we use:

Most browsers allow you to control cookie settings. Disabling essential cookies will affect the functionality of pk66 and may prevent you from logging in or completing transactions. Disabling optional cookies does not affect core platform functionality.

pk66 retains personal data only for as long as it is necessary for the purposes described in this policy, taking into account legal, financial, and regulatory retention obligations.

• Active account data: Retained for the full duration of your account's active status. This includes registration details, gaming history, and transaction records.
• Closed account data: After you close your pk66 account (voluntarily or otherwise), we retain your transaction records and identity verification documents for a period of five years. This period is required for financial compliance and fraud investigation purposes.
• Support communications: Retained for two years from the date of the communication, after which they are deleted unless part of an ongoing dispute or legal matter.
• Marketing preferences: Retained until you withdraw consent or for two years of inactivity, whichever comes first. You can update marketing preferences at any time through your account settings or by contacting support.
• Anonymised analytics data: May be retained indefinitely as it contains no personal identifiers and cannot be linked back to any individual player.

When the applicable retention period expires, personal data is either securely deleted or irreversibly anonymised. pk66 does not "just in case" retain data beyond defined periods.

As a player on pk66, you have the following rights in relation to your personal data. These rights can be exercised by contacting our support team at support@pk66-taka.com. pk66 aims to respond to all data rights requests within 30 days.

pk66 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process requires date of birth verification, and accounts flagged as potentially belonging to minors are suspended immediately pending investigation.

If a parent or guardian believes their child has created a pk66 account without authorisation, they should contact our support team immediately at support@pk66-taka.com. Upon confirmation, the account will be closed and any deposited funds will be returned to the original payment source. No winnings generated from an account operated by a minor will be paid out.

pk66 also encourages parents to use available parental control software to restrict access to online gaming platforms for children in their household.

Some of pk66's third-party service providers — including game content providers and fraud prevention systems — may process data on servers located outside Pakistan. When this occurs, pk66 ensures that appropriate safeguards are in place to protect your personal data to standards consistent with this policy.

Safeguards for international transfers include:

• Data processing agreements that contractually require third parties to protect your data and use it only for the purposes pk66 authorises.
• Selection of providers that operate under data protection frameworks recognised as providing adequate protection.
• Technical measures including encryption during transfer and at rest.

If you have questions about where your data may be processed or the safeguards in place for international transfers, please contact us at support@pk66-taka.com.

pk66 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service features. The "Last Updated" date at the top of this page is always current and reflects when the most recent changes were made.

For material changes — those that significantly affect how we process your data or the rights available to you — pk66 will provide notice to registered players via their registered mobile number or a prominent notice on the platform at least 14 days before the changes take effect.

Minor changes that don't materially affect the substance of this policy (such as corrections of typographical errors or formatting improvements) may be made without advance notice but will always be reflected in the updated "Last Updated" date.

Continued use of pk66 after a revised Privacy Policy takes effect constitutes your acceptance of the updated policy. If you do not agree with changes, you should stop using the platform and contact support to close your account.

If you have any questions about this Privacy Policy, want to exercise one of your data rights, want to withdraw consent for optional data processing, or need to report a potential data security concern, please contact the pk66 team directly:

• Email: support@pk66-taka.com
• Subject line: Use "Privacy Policy Query" or "Data Rights Request" so we can route your message to the right team member quickly.
• Response time: We aim to acknowledge all privacy-related queries within 48 hours and provide a full response within 30 days.

When contacting us about a data rights request, please include your registered mobile number so we can verify your identity and locate your account. pk66 will never ask for your account password over email — if you receive any communication purportedly from pk66 requesting your password, please report it to our support team immediately as it may be a phishing attempt.