Privacy Policy — k66609

01 Introduction

k66609 ("we", "us", "our" or the "Platform") is an English-language online gaming information and guidance platform accessible at https://k66609.cam, developed specifically for users in Pakistan. We are committed to protecting the personal data of every individual who accesses, browses or registers on our Platform.

This Privacy Policy ("Policy") describes in detail how k66609 collects, uses, stores, shares and protects your personal information. It also sets out your rights as a data subject and explains how you can exercise those rights. This Policy applies to all users of the Platform, regardless of their location, but with particular attention to the rights and expectations of Pakistani users accessing the Platform from cities including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.

By using the k66609 Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must discontinue use of the Platform immediately.

02 Definitions

For the purposes of this Policy, the following terms shall have the meanings set out below:

03 Data We Collect

k66609 collects only the personal data that is necessary for the operation of the Platform, the delivery of our services and compliance with applicable legal obligations. We do not engage in the collection of excessive or unnecessary data. The categories of personal data we may collect are as follows:

3.1 Data You Provide Directly

• Registration Information: When you create an account, we collect your email address, chosen username, date of birth and password (stored in hashed form — never as plain text).
• Identity Verification Documents: Where KYC verification is required, we may collect copies of government-issued identification documents such as a valid Pakistani CNIC or passport, and where applicable, a proof of address document.
• Communications: When you contact us by email or through the Platform's designated contact channel, we collect and retain the content of your communications, your contact details and any attachments or supporting documentation you provide.
• Feedback & Survey Responses: If you voluntarily participate in surveys, content feedback requests or user research activities, we collect your responses and any associated identifying information you choose to provide.

3.2 Data Collected Automatically

• Device and Browser Data: IP address, browser type and version, operating system, device type, screen resolution and language settings.
• Usage Data: Pages visited, time spent on each page, referral URLs, navigation paths, click-through patterns and session duration data.
• Cookie Data: Data stored via cookies and similar tracking technologies as detailed in Section 7 of this Policy.
• Log Data: Server-side access logs, error reports and security event records, retained for platform stability and security purposes.

3.3 Data We Do Not Collect

k66609 does not collect the following categories of personal data:

• Financial account details, credit or debit card numbers, or bank account information — we do not process financial transactions.
• Biometric data (other than liveness check images where KYC verification requires it and the user explicitly consents).
• Sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, health data or criminal record information, except where strictly required by applicable AML or regulatory obligations.

04 How We Use Your Data

k66609 uses personal data collected from users for the following specified and legitimate purposes:

05 Legal Basis for Processing

k66609 processes personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:

• Consent (Article 6(1)(a)): Where you have given explicit consent to the processing of your personal data for a specific purpose, such as receiving marketing communications or participating in optional analytics programmes. You may withdraw consent at any time without detriment, though this will not affect the lawfulness of processing carried out prior to withdrawal.
• Contractual Necessity (Article 6(1)(b)): Where processing is necessary to fulfil a contract with you or to take steps at your request prior to entering a contract — for example, account registration and management.
• Legal Obligation (Article 6(1)(c)): Where processing is required to comply with a legal obligation applicable to k66609, including KYC, AML and age verification requirements.
• Legitimate Interests (Article 6(1)(f)): Where processing is necessary for the legitimate interests of k66609, provided those interests are not overridden by your fundamental rights and freedoms. Legitimate interests include fraud prevention, platform security and service improvement through anonymised analytics.

06 Data Sharing & Disclosure

k66609 treats your personal data with strict confidentiality. We do not sell, rent or trade personal data to any third party for commercial marketing purposes. We may disclose personal data in the limited circumstances described below:

6.1 Service Providers

We engage trusted third-party service providers who assist in the operation of the Platform, including hosting and infrastructure providers, analytics platforms, email delivery services and identity verification partners. These providers process data only on our documented instructions and are contractually bound by confidentiality and data protection obligations. They are not permitted to use your data for their own purposes.

6.2 Legal and Regulatory Disclosure

We may disclose personal data to competent courts, law enforcement agencies, regulatory authorities or government bodies where required to do so by applicable law, court order or other binding legal process. We will endeavour to notify affected users of such disclosure where we are legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of assets involving k66609, personal data held by the Platform may be transferred to the successor entity as part of that transaction. Users will be notified of any such transfer and any material changes to data processing arrangements that result from it.

6.4 No Sale of Data

Under no circumstances does k66609 sell or otherwise transfer personal data to third parties in exchange for monetary or other consideration. This prohibition is absolute and applies regardless of the form of the transaction or the identity of the third party.

07 Cookies & Tracking Technologies

k66609 uses cookies and similar technologies to operate the Platform effectively, remember your preferences and analyse how the Platform is used. By continuing to use the Platform after being notified of cookie use, you consent to the placement of cookies in accordance with this Policy.

7.1 Types of Cookies Used

7.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies through their privacy or security settings menus. Please note that disabling essential cookies may impair the functionality of the Platform. Browser-level cookie controls are separate from any Platform-level consent preferences you may have set.

08 Data Retention

k66609 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, tax or accounting obligations. Retention periods are determined on a category-by-category basis:

• Account Data: Retained for the duration of the account's active status, plus an additional period of up to five (5) years after account closure to satisfy AML, fraud prevention and regulatory requirements.
• KYC/Identity Documents: Retained for the period mandated by applicable anti-money laundering regulations following the conclusion of the user relationship — typically five (5) years or as required by the relevant regulatory authority.
• Communication Records: Retained for up to three (3) years from the date of the communication, unless a longer period is required for ongoing dispute resolution or legal proceedings.
• Analytics Data: Aggregated and anonymised analytics data may be retained indefinitely. Individually identifiable usage data is pseudonymised within ninety (90) days of collection.
• Server Logs: Retained for up to twelve (12) months for security monitoring and incident investigation purposes, unless extended by a specific security or legal requirement.

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with k66609's data disposal procedures.

09 Data Security

k66609 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include, but are not limited to:

• SSL/TLS Encryption: All data transmissions between your browser and the Platform are encrypted using industry-standard SSL/TLS protocols. Any Platform page handling personal data will only be served over HTTPS.
• Password Hashing: User passwords are stored using a one-way cryptographic hashing algorithm with salting. Plain-text passwords are never stored or transmitted.
• Access Controls: Personal data is accessible only to authorised k66609 personnel and contracted service providers with a documented need-to-know. Role-based access controls are enforced.
• Regular Security Reviews: k66609 conducts periodic internal security reviews and, where appropriate, engages independent security assessors to evaluate Platform security posture.
• Breach Response: In the event of a personal data breach that poses a risk to user rights and freedoms, k66609 will notify affected users without undue delay and report to the relevant supervisory authority where required by law.

10 International Data Transfers

The k66609 Platform may be hosted on infrastructure located outside Pakistan. As a result, your personal data may be transferred to, stored in or processed in countries other than Pakistan. Where such transfers occur, k66609 takes all reasonable steps to ensure that your personal data receives an equivalent level of protection to that afforded under applicable data protection principles.

Safeguards for international transfers may include standard contractual clauses, binding corporate rules or reliance on adequacy decisions by relevant data protection authorities. If you require further information about the specific safeguards applied to your personal data in the context of international transfers, please contact us using the details in Section 15.

11 Your Rights as a Data Subject

Subject to applicable law and certain limited exceptions, you have the following rights with respect to your personal data held by k66609. To exercise any of these rights, please contact us using the details provided in Section 15. We will respond within thirty (30) days of receipt of a verifiable request.

To exercise any of the above rights, please submit a written request to the contact details provided in Section 15 of this Policy. We may request identity verification before processing your request to ensure we do not disclose or delete data belonging to another individual.

12 Children's Privacy

The k66609 Platform is strictly intended for adults aged 18 years or older, or the higher minimum age required by the applicable operator or license jurisdiction. We do not knowingly collect, process or retain personal data belonging to minors under the age of 18.

If we become aware that personal data has been collected from a person under the minimum eligible age, we will take immediate steps to delete that data from our records. If you are a parent or guardian and believe that your child has provided personal data to k66609 without your consent, please contact us immediately using the details in Section 15.

k66609 encourages parents and guardians to use parental control software and internet filtering tools to prevent underage access to online gambling content, including informational platforms of this nature.

13 Third-Party Links & Content

The Platform may contain references to third-party operators, payment services and other external resources. These references are provided for informational and contextual purposes only. k66609 does not control the privacy practices of any third-party website or service and is not responsible for the personal data handling practices of any external entity.

Any interaction you have with a third-party platform — including creating an account, depositing funds or verifying your identity — is governed exclusively by that platform's own privacy policy and terms of service. k66609 strongly encourages you to review the privacy documentation of any third-party platform you interact with before sharing personal data with them.

References to Pakistani payment services such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are made for contextual familiarity only. k66609 has no data-sharing relationship with these entities in connection with the Platform, and their mention does not imply endorsement of or affiliation with k66609.

14 Policy Amendments

k66609 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or the structure of the Platform. The effective date at the top of this document will be updated to reflect the date of the most recent revision.

Where amendments are material — that is, where they significantly alter your rights or the way we handle your personal data — we will take reasonable steps to notify you, which may include displaying a prominent notice on the Platform homepage. For non-material updates, the revised Policy will take effect upon publication without separate notification.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you object to any amendment, you must discontinue use of the Platform and may request deletion of your personal data in accordance with Section 11 of this Policy.

15 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data, please contact the k66609 Data Protection team using the details below. All privacy-related correspondence should clearly state the nature of your request and include sufficient identifying information to allow us to verify your identity before processing your request.

For questions about our general platform terms, please review the Terms & Conditions. For responsible gambling guidance, visit our Responsible Gambling page.