k6666 Privacy Policy

This Privacy Policy ("Policy") describes how k6666 ("we", "us", "our", the "Company") collects, uses, stores, shares, and protects the personal information of individuals ("you", "the User") who access or use the k6666 platform available at https://k6666.games, including all associated services, mobile interfaces, and customer support channels (collectively, the "Platform").

We are committed to handling your personal data with the highest standards of care, transparency, and security. This Policy has been prepared in alignment with internationally recognised data protection principles and applies to all users of the Platform regardless of location, with particular consideration given to players in Pakistan — including those accessing the Platform from Karachi, Lahore, Islamabad, Faisalabad, and beyond.

By registering an account on k6666 or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact our support team to close your account.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of our overall user agreement.

For the purposes of this Policy, k6666 is the data controller responsible for the personal information collected through the Platform. As data controller, we determine the purposes and means by which your personal data is processed.

If you have any questions, concerns, or requests relating to how your personal data is handled by k6666, please contact our dedicated privacy team at:

Email: [email protected]

Our support team is available 24 hours a day, 7 days a week and will direct any data-related enquiries to the appropriate internal team for handling within the timeframes specified in Section 10.

k6666 collects personal data in the following categories, depending on how you interact with the Platform:

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, unless this is strictly required by law enforcement or regulatory authorities in specific circumstances.

We process your personal data only for specific, legitimate purposes. The table below maps each data category to the purposes for which it is used:

1. Account Management: Creating, maintaining, and securing your k6666 player account, including password reset and multi-factor authentication.
2. Payment Processing: Facilitating PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard, and processing withdrawal requests to verified payment methods.
3. Identity Verification (KYC): Complying with Know Your Customer requirements to confirm your identity, age (21+), and the legitimacy of your payment instruments before approving transactions above defined thresholds.
4. Responsible Gaming Monitoring: Analysing gameplay patterns to identify potential signs of problem gambling and enforcing self-exclusion, cooling-off, and deposit limit settings at the User's request or at the Company's discretion.
5. Anti-Fraud and AML Compliance: Detecting, investigating, and preventing fraudulent activity, money laundering, and other financial crimes in line with applicable legal obligations.
6. Customer Support: Responding to queries, complaints, and disputes submitted through any support channel, and maintaining a record of communication history.
7. Platform Improvement: Using anonymised and aggregated usage data to improve game performance, platform navigation, and overall user experience.
8. Marketing Communications: Sending promotional emails, bonus notifications, and platform updates to users who have opted in to receive such communications. You may opt out at any time.
9. Legal Compliance: Meeting reporting obligations to regulatory authorities, responding to lawful requests from law enforcement, and preserving records as required by applicable law.

We do not use automated decision-making or profiling in a manner that produces significant legal effects on users without providing an opportunity for human review.

Each processing activity carried out by k6666 rests on at least one of the following legal bases:

1. Contractual Necessity: Processing that is required to perform our obligations under the Terms & Conditions you accepted at registration — including account management, payment processing, and delivering gaming services.
2. Legal Obligation: Processing required by applicable laws and regulations, including KYC requirements, AML obligations, and responses to lawful orders from regulatory or law enforcement bodies.
3. Legitimate Interests: Processing necessary for our legitimate business interests — such as fraud prevention, platform security, and improving our services — provided these interests are not overridden by your rights and freedoms.
4. Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily in the context of marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

k6666 does not sell your personal data. We may share your information with the following categories of recipients, strictly on a need-to-know basis and subject to confidentiality obligations:

1. Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card network processors receive the minimum financial data required to authorise and settle transactions.
2. KYC and Identity Verification Providers: Third-party identity verification services that assist in confirming the authenticity of documents submitted during the KYC process.
3. Fraud Prevention and AML Services: Specialist third-party platforms that analyse transaction patterns for indicators of money laundering, account takeover, and bonus abuse.
4. Game Content Providers: Licensed game studios and RNG certification bodies that operate the casino games and live dealer tables available on the Platform. These partners receive only anonymised player session data sufficient for game delivery and fairness auditing.
5. Regulatory and Law Enforcement Authorities: Where we are legally obliged or permitted to disclose your data in response to a court order, regulatory audit, or formal law enforcement request.
6. Professional Advisors: Legal counsel, auditors, and insurers who are contractually bound to maintain confidentiality of any personal data disclosed to them.

All third-party service providers engaged by k6666 are required to implement appropriate technical and organisational security measures and are contractually prohibited from using your data for any purpose beyond the specific service they provide to us.

k6666 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, taking into account our legal, regulatory, and operational requirements:

1. Active Account Data: Retained for the full duration of your account's active status plus a period of five years following account closure, to comply with AML record-keeping requirements.
2. Transaction Records: Financial transaction data is retained for a minimum of seven years to satisfy regulatory and tax record-keeping obligations.
3. KYC Documents: Identity verification documents are retained for five years from the date of submission or from the date of account closure, whichever is later.
4. Support Communications: Customer support records are retained for three years from the date of the last interaction, enabling accurate handling of re-opened disputes.
5. Self-Exclusion Records: If you have requested self-exclusion, a record of your exclusion is retained indefinitely to prevent re-registration during the exclusion period and to honour any permanent self-exclusion request.
6. Marketing Preferences: Records of consent and opt-out are retained for the lifetime of the account to ensure compliance with your stated preferences.

After the applicable retention period expires, your personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with you.

k6666 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

1. Transport Layer Security (TLS): All data in transit between your browser or device and the k6666 platform is encrypted using TLS 1.2 or higher.
2. Data-at-Rest Encryption: Sensitive personal data stored in our databases is encrypted using AES-256 encryption.
3. Access Controls: Access to personal data is restricted to authorised k6666 personnel on a strict need-to-know basis. All access is logged and subject to periodic audit review.
4. Password Security: User passwords are stored exclusively as salted bcrypt hashes. Our systems cannot retrieve your plain-text password — only verify it.
5. Penetration Testing: k6666 commissions independent security assessments of the Platform on a regular basis to identify and remediate vulnerabilities before they can be exploited.
6. Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, k6666 will notify affected users and relevant regulatory authorities within the timeframes required by applicable law.

While we employ robust security measures, no online platform can guarantee absolute security. You are responsible for keeping your login credentials confidential and for notifying us promptly if you suspect any unauthorised access to your account.

k6666 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are as follows:

1. Strictly Necessary Cookies: Essential for the Platform to function correctly. They enable session management, security token verification, and load balancing. These cookies cannot be disabled.
2. Functional Cookies: Remember your preferences such as language settings, preferred currency display (PKR), and lobby layout choices to personalise your experience.
3. Analytics Cookies: Collect anonymised data about how users navigate the Platform — which pages are visited most, where users exit, and how long sessions last. This data is used solely to improve Platform performance.
4. Marketing Cookies: Used to deliver relevant promotional content and to measure the effectiveness of our campaigns. These cookies are only set with your prior consent.

You may manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies will prevent core Platform functionality from working correctly. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

Subject to applicable law and certain conditions, you have the following rights with respect to your personal data held by k6666:

1. Right of Access: You may request a copy of the personal data we hold about you. We will provide this within 30 days of a verified request.
2. Right to Rectification: You may request correction of any inaccurate or incomplete personal data. For basic profile information, you can update this directly in your account dashboard.
3. Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under AML and regulatory law.
4. Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while a dispute about accuracy is being resolved.
5. Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request your data in a structured, machine-readable format.
6. Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. Objections to direct marketing will be honoured immediately and unconditionally.
7. Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of these rights, please contact our support team by email. We will verify your identity before processing your request. All requests are handled within 30 days. If we are unable to fulfil a request due to a legal obligation, we will explain this clearly in our response.

Email: [email protected]

k6666 enforces a strict minimum age policy. Our Platform is intended exclusively for individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from anyone under the age of 21.

As part of our registration and KYC process, all new accounts are subject to age verification. Users who cannot confirm their age to the Company's satisfaction will have their accounts suspended and any deposits returned.

If k6666 becomes aware that personal data has been collected from a minor, we will immediately delete that data, close the associated account, and return any remaining real-money balance to the payment method used for deposit. If you believe a minor may have created an account on our Platform, please contact our support team immediately at [email protected].

For further information on our player protection measures, including parental controls and responsible gaming tools, please visit our Responsible Gaming page.

The k6666 Platform is operated by a company with infrastructure and service partners located in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside of Pakistan. Where such transfers occur, k6666 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law, including:

1. Contractual clauses that require the recipient to apply data protection standards consistent with this Policy.
2. Transferring data only to jurisdictions that provide an adequate level of data protection, as determined by applicable legal standards.
3. Requiring all international data processors to implement security measures consistent with those described in Section 8 of this Policy.

By using the k6666 Platform, you acknowledge and consent to the international transfer of your personal data in the manner described above.

k6666 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the effective date at the top of this page and, where reasonably practicable, notify registered users via email or an in-platform notification.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We recommend reviewing this page periodically, particularly if you return to the Platform after an extended period of inactivity.

If you disagree with any changes to this Policy, you should discontinue use of the Platform and contact our support team to close your account and request deletion of your personal data, subject to our legal retention obligations.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how k6666 is handling your personal information, please reach out to our support team. We are available around the clock to assist you.

Email: [email protected]

Support hours: 24 hours a day, 7 days a week.

When contacting us about a data privacy matter, please include your registered username and a clear description of your request so we can direct your query to the right team and respond as efficiently as possible. Formal data subject requests are handled within 30 days of identity verification.