kr666 Privacy Policy —
How We Protect Your Data

kr666 is an online gaming platform operating at kr666.ws, providing casino games, sports betting, live dealer tables, and related entertainment services to registered players. kr666 operates under an international gaming license and is the data controller in respect of personal data collected through the platform.

As data controller, kr666 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out in accordance with this Policy and applicable data protection principles.

For all data-related enquiries, the kr666 Data Protection contact is reachable via live chat or at [email protected] using the subject line "DATA PRIVACY REQUEST".

kr666 collects the following categories of personal data:

kr666 does not collect special categories of sensitive personal data (such as health data, biometric data for identification purposes, or political opinions) except where a Player voluntarily discloses such information in the context of a responsible gaming self-assessment.

kr666 collects personal data through the following channels:

• Direct provision: Data you submit when registering, completing KYC, making deposits, requesting withdrawals, or contacting support.
• Automated collection: Technical data collected automatically when you visit kr666.ws, including IP address, device identifiers, and session activity, via server logs and first-party cookies.
• Payment processors: Transaction references and payment status information received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT processing services when you conduct a deposit or withdrawal.
• Identity verification providers: Verification results and risk scores returned by KYC service providers when we process your identity documents.
• Game providers: Session data and game round records returned by B2B game providers to settle bets and generate account history.

kr666 uses your personal data for the following specific purposes:

• Account management: Creating, maintaining, and managing your kr666 account, including processing logins, account settings changes, and password resets.
• Payment processing: Processing deposits and withdrawal requests, verifying payment details, and maintaining transaction records as required by financial regulations.
• Identity verification and KYC: Verifying your identity and age (21+) as required by kr666's licensing obligations and AML compliance framework.
• Game delivery: Providing casino games, sports betting markets, and live dealer services, including settling bets and maintaining accurate game history records.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, account takeover attempts, bonus abuse, and money laundering.
• Responsible gaming: Monitoring account activity for signs of problematic gambling behaviour and administering responsible gaming tools including deposit limits, loss limits, and self-exclusion requests.
• Legal and regulatory compliance: Meeting obligations under kr666's gaming license, applicable AML legislation, and any lawful requests from regulatory or law enforcement authorities.
• Customer support: Responding to support queries, resolving disputes, and improving service quality based on support interactions.
• Marketing: Sending promotional communications where you have consented to receive them (see Section 13 for opt-out details).
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, features, and content of kr666.

kr666 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the agreement between kr666 and the Player — including account creation, game delivery, payment processing, and KYC verification. Without this processing, kr666 cannot provide its services.
• Legal obligation: Processing required to comply with kr666's gaming license conditions, AML obligations, regulatory reporting requirements, and responses to lawful authority requests.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and aggregated analytics — where kr666's interest in maintaining a safe and functional platform does not override individual privacy rights.
• Consent: Marketing communications and optional personalisation features are processed only where you have given explicit consent. Consent may be withdrawn at any time without affecting prior processing.

kr666 does not sell personal data to unaffiliated third parties. kr666 may share personal data with the following categories of recipients where necessary:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT processing services — to facilitate deposit and withdrawal transactions. These processors receive only the data required to complete the specific transaction.
• KYC and identity verification providers: Third-party service providers who process identity documents and return verification results to kr666. These providers act as data processors under contract with kr666 and may not use your data for their own purposes.
• Game providers: B2B game studios whose titles are hosted on kr666 receive session and bet data necessary to deliver the game and settle results. Game providers are contractually prohibited from using Player data for independent marketing.
• Regulatory and law enforcement authorities: kr666 may be required to disclose personal data to gaming regulators, financial intelligence authorities, or law enforcement bodies where required by applicable law, court order, or gaming license conditions.
• Fraud prevention networks: Aggregated fraud signals may be shared with industry fraud prevention services to protect the platform and its players from known bad actors.
• Professional advisors: Legal counsel, auditors, and compliance consultants engaged by kr666 may access personal data where necessary to perform their professional services, subject to professional confidentiality obligations.

As an internationally licensed gaming platform, kr666's infrastructure, service providers, and game studio partners may be located in jurisdictions outside Pakistan. Where personal data is transferred to recipients in other countries, kr666 ensures appropriate safeguards are in place, which may include:

• Standard contractual clauses binding the recipient to data protection standards equivalent to those applied by kr666.
• Processing agreements with processors located in jurisdictions that have been assessed to provide adequate data protection.
• Contractual restrictions limiting the recipient's use of transferred data to the specific purposes for which it was shared.

Players who wish to obtain details about the specific safeguards applied to international transfers of their data may submit a request to [email protected].

kr666 retains personal data for the following periods:

Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for aggregate analytics purposes.

kr666 uses first-party cookies and similar technologies to operate the platform effectively. kr666 does not use third-party advertising cookies or tracking pixels from unaffiliated advertising networks.

• Session cookies: Temporary cookies that maintain your login state during an active session. These are essential for platform functionality and are deleted automatically when you close your browser.
• Authentication cookies: Store encrypted authentication tokens to keep you securely logged into your kr666 account. Expire after a defined inactivity period.
• Preference cookies: Remember your platform preferences such as language settings, game lobby filters, and display options. These persist between sessions.
• Analytics cookies: First-party analytics to measure page performance, identify technical errors, and understand aggregate user behaviour patterns. No personal identifiers are included in analytics data.

Subject to applicable law and the limitations described below, you have the following rights in respect of your personal data held by kr666:

kr666 implements technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and kr666 servers.
• Encrypted storage for sensitive personal data including KYC documents and financial data at rest.
• Role-based access controls ensuring that only authorised staff with a legitimate need can access player records.
• Regular security assessments and penetration testing of the kr666 platform infrastructure.
• Two-factor authentication available for Player accounts and mandatory for all internal staff accounts.
• Audit logging of all access to sensitive personal data by internal staff.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in risk to your rights and freedoms, kr666 will notify affected Players without undue delay and report the breach to the relevant regulatory authority as required by applicable law.

kr666 is strictly prohibited to individuals under the age of 21. kr666 does not knowingly collect or process personal data from anyone under 21 years of age. Age verification is a mandatory step in the registration process and may be enforced again through KYC verification at any point during a Player's account tenure.

Parents and guardians who believe a minor may have registered on kr666 should contact [email protected] immediately. kr666 recommends using parental control software to restrict minor access to online gambling services.

kr666 may send you promotional communications about bonuses, new games, sports betting promotions, and platform updates via SMS and email — but only where you have provided explicit consent to receive such communications during registration or through your account notification settings.

You may withdraw consent for marketing communications at any time by:

• Updating your notification preferences in your kr666 account settings.
• Clicking the unsubscribe link included in any marketing email from kr666.
• Contacting kr666 live chat and requesting removal from all marketing lists.

Withdrawal of marketing consent does not affect the sending of transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — which are sent on the basis of contractual necessity and cannot be opted out of while your Account remains active.

kr666 does not share Player data with unaffiliated third parties for the purpose of those parties sending their own marketing communications.

The kr666 platform integrates services from the following categories of third-party providers, each of which has their own privacy practices:

• Payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, USDT providers) — govern the data associated with payment transactions through their own privacy policies and applicable financial regulation.
• Game providers (Pragmatic Play, Evolution Gaming, PG Soft, and others) — receive session and bet data necessary to deliver game services. Their data handling is governed by their own privacy policies and gaming license obligations.
• KYC providers — process identity document images on behalf of kr666 as data processors under contractual data processing agreements.

kr666 is not responsible for the privacy practices of third-party providers. Players are encouraged to review the privacy policies of payment processors and other third parties with whom they interact directly.

kr666 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. The "Last Updated" date at the top of this Policy will be revised whenever changes are made.

Where changes are material — affecting how kr666 uses your personal data in a significant way — kr666 will notify registered Players via account notification or email in advance of the changes taking effect, and will provide an opportunity to review the updated Policy.

Continued use of kr666 following the effective date of a revised Policy constitutes acceptance of the changes. If you do not accept the revised Policy, you should cease using kr666 and may request Account closure in accordance with the Terms and Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by kr666, please use one of the following contact methods:

• Live Chat: Available 24/7 from within your kr666 Account dashboard — the fastest response channel for all privacy queries.
• Email: [email protected] — use the subject line "DATA PRIVACY REQUEST" for access requests, "DATA ERASURE REQUEST" for deletion requests, and "DATA BREACH REPORT" for suspected security incidents.

kr666 will acknowledge all privacy-related requests within 3 business days and will provide a substantive response within 30 days. Complex requests may take up to 90 days; kr666 will notify you in writing if an extension is required.

If you are not satisfied with kr666's response to your privacy request, you may escalate the matter to the relevant data protection authority in the jurisdiction under which kr666's gaming license is issued.