66pk Privacy Policy

66pk is committed to protecting the privacy and personal data of every player on its platform. This Policy has been prepared in accordance with internationally recognised data protection principles and the requirements of the jurisdiction under which 66pk holds its gaming licence.

This Policy should be read alongside the 66pk Terms & Conditions, which together constitute the full agreement between you and 66pk. Defined terms used in the Terms & Conditions carry the same meaning in this Policy unless otherwise stated.

66pk collects personal data from you through several channels — directly when you register or interact with the platform, automatically through your device and browsing behaviour, and from regulated third-party sources as part of our KYC and fraud prevention obligations. The categories of data we collect include:

• Identity Data: Full name, date of birth, gender, and national identity card (CNIC) number as provided during registration or KYC verification.
• Contact Data: Email address, mobile phone number, and residential address (city, district, province — for example, Karachi, Lahore, Islamabad, Faisalabad).
• Account Data: Username, account balance history, transaction records, game play history, bonus usage, and session logs.
• Payment Data: JazzCash or EasyPaisa mobile wallet number, bank account details (HBL, UBL, Meezan Bank), and transaction reference numbers. Full payment credentials are processed by the relevant payment provider and are not stored on 66pk servers.
• Technical Data: IP address, device type, browser type and version, operating system, screen resolution, and timezone.
• Usage Data: Pages visited, games played, time spent on-platform, click patterns, and search queries within the platform.
• Communications Data: Records of your interactions with 66pk customer support, including live chat transcripts and email correspondence.
• Responsible Gaming Data: Self-exclusion requests, deposit limit settings, session time configurations, and any referrals to responsible gaming support.

66pk uses the personal data it collects for the following purposes:

• To create, verify, and manage your 66pk account and provide access to all platform services including sports betting, casino games, and the VIP programme.
• To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain accurate transaction records.
• To fulfil our KYC (Know Your Customer) and AML (Anti-Money Laundering) obligations under applicable regulatory requirements.
• To administer promotions, bonuses, and VIP programme benefits to which you are entitled.
• To monitor for and prevent fraud, collusion, bonus abuse, and other prohibited conduct as defined in the 66pk Terms & Conditions.
• To provide customer support and respond to your enquiries and complaints.
• To send you service-related notifications, including security alerts, account updates, and policy change notifications.
• To support responsible gaming monitoring, including identifying and acting on indicators of problem gambling behaviour.
• To improve the 66pk platform through analysis of usage patterns, game performance, and player feedback.
• To comply with legal obligations and respond to lawful requests from regulatory or law enforcement authorities.

66pk processes your personal data on the following legal bases, depending on the specific purpose:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions — including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with KYC, AML, and other regulatory requirements imposed on 66pk as a licensed gaming operator.
• Legitimate Interests: Processing carried out in the legitimate interests of 66pk, such as fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your data protection rights.
• Consent: Processing of your data for direct marketing communications, where you have given clear and specific consent that can be withdrawn at any time.

66pk uses cookies and similar tracking technologies on the platform to support core functionality, improve user experience, and gather analytical data about platform usage. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Required for the platform to function, including session management, authentication tokens, and security features. These cannot be disabled.
• Functional Cookies: Used to remember your preferences such as language settings, game view configurations, and responsible gaming tool settings.
• Analytical Cookies: Used to collect anonymised data about how players interact with the platform, which pages are visited most frequently, and where technical errors occur. This data helps us improve the platform experience.
• Marketing Cookies: Only placed with your explicit consent. Used to track engagement with 66pk promotional content and tailor communications to your activity profile.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of parts of the 66pk platform.

66pk does not sell your personal data. We share your data with third parties only in the following limited circumstances, and only where necessary:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the transactional data required to process your deposits and withdrawals. Each provider operates under their own privacy policy and applicable financial regulations.
• KYC & Identity Verification Providers: Where automated identity and document verification is employed, your identity data is shared with licensed verification partners under binding data processing agreements.
• Fraud Prevention Services: Anonymised or pseudonymised behavioural data may be shared with fraud detection providers to identify unusual account activity.
• Regulatory & Law Enforcement Authorities: Where required by a lawful authority or under the terms of the 66pk gaming licence, we may be required to disclose player data to relevant government or regulatory bodies.
• Platform Technology Providers: Infrastructure, hosting, and software providers who support platform operations may process data on our behalf, strictly in accordance with 66pk's instructions and applicable data protection standards.

66pk takes the security of your financial data extremely seriously. All payment transactions on the platform are handled through the respective payment provider's secure infrastructure. 66pk does not store full bank account numbers, JazzCash wallet PINs, EasyPaisa m-PINs, or debit card numbers on its own servers.

The payment information retained by 66pk is limited to transaction reference numbers, deposit and withdrawal amounts (in PKR), timestamps, and the payment channel used. This information is retained for financial audit and regulatory compliance purposes only and is stored in encrypted form with access restricted to authorised personnel.

In accordance with our AML obligations, 66pk may request documentation to verify the source of funds for deposits exceeding defined thresholds. This information is processed solely for regulatory compliance purposes and is not used for any other commercial purpose.

66pk employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• End-to-end TLS 1.3 encryption for all data transmitted between your device and the 66pk platform.
• AES-256 encryption for all personal and financial data stored at rest on 66pk servers.
• Role-based access controls ensuring that only authorised personnel can access specific categories of player data based on their operational role.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Multi-factor authentication requirements for all internal administrative access to systems holding player data.
• Continuous monitoring of platform infrastructure for anomalous access patterns and potential breach indicators.

In the event of a personal data breach that poses a risk to your rights and freedoms, 66pk will notify the relevant supervisory authority within 72 hours of becoming aware of the breach and will inform affected players without undue delay where the breach is likely to result in a high risk to their rights.

66pk retains personal data only for as long as necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law or regulation. Our standard retention periods are as follows:

• Account Data: Retained for the duration of your account and for a period of five years following permanent account closure, in accordance with AML regulatory requirements.
• Transaction Records: Retained for a minimum of five years from the date of the transaction for financial audit and regulatory compliance purposes.
• KYC Documents: Retained for five years following the end of the business relationship, or longer where required by a regulatory authority.
• Customer Support Records: Retained for three years from the date of the last interaction, or longer where the record relates to an open or unresolved complaint.
• Marketing Preferences: Retained until you withdraw consent or request erasure, whichever occurs first.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

As a registered player on 66pk, you hold the following rights in respect of the personal data we process about you. To exercise any of these rights, please contact 66pk support via your account dashboard or the email address in Section 13.

All data subject requests are acknowledged within 72 hours and fulfilled within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days, in which case you will be notified of the extension and the reasons for it.

The 66pk platform is strictly intended for adults aged 21 and above. 66pk does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the registration and KYC process, and accounts found to belong to individuals under the minimum age will be immediately suspended and all associated data will be deleted.

If you believe that a minor has registered on 66pk using false age information, please contact us immediately via the support dashboard so that we can take appropriate action.

66pk reserves the right to update, amend, or replace this Privacy Policy at any time. When material changes are made — for example, changes to the categories of data collected, the purposes for which it is used, or the third parties with whom it is shared — registered players will be notified via the email address associated with their account and through a prominent notice on the platform at the time of next login.

The effective date at the top of this Policy will be updated to reflect the date on which the revised Policy comes into force. We encourage you to review this Policy periodically to remain informed about how 66pk protects your data. Continued use of the platform following the publication of any revised Policy constitutes your acceptance of the changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 66pk processes your personal data, please contact the 66pk Privacy team through the following channels:

Please include your registered 66pk account username and a brief description of your enquiry when contacting us, so that we can identify your account and respond to your request promptly and accurately.