Privacy Policy — How BK666 Protects Your Data in Pakistan

This Privacy Policy applies to all services provided by BK666 ("bk666", "we", "us", "the Platform") accessible via bk666-vip.com and any mobile-optimised versions of the same platform. It covers all Pakistani players who register, browse or interact with bk666 in any way, whether or not they have completed a deposit or placed a bet.

This policy should be read alongside bk666's Terms and Conditions, which together form the full agreement governing your use of the platform. Where the Terms and this Privacy Policy address the same subject, both documents apply together and should be read consistently.

bk666 acts as the data controller in relation to the personal information it collects from Pakistani players. This means bk666 makes decisions about how and why your data is processed. Third-party service providers who process data on bk666's behalf — such as payment processors and identity verification providers — act as data processors under bk666's instructions.

bk666 collects only the personal information that is necessary to operate your account, process your PKR transactions and comply with legal obligations. We do not collect data speculatively. The categories of data bk666 may hold about you as a Pakistani player are set out below:

bk666 does not intentionally collect sensitive personal data categories such as health information, biometric data, political opinions or religious beliefs. If any such information is shared voluntarily by a player — for example in a support message — it will not be stored beyond what is necessary to resolve the specific query.

bk666 collects data through several channels, all of which are disclosed here in full:

• Registration Form: When you create your bk666 account you provide your name, mobile number, date of birth and create a password. This is the primary point of identity data collection.
• Deposit and Withdrawal Transactions: When you conduct a PKR transaction via Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer or card, the payment provider shares transaction confirmation data with bk666 to credit or debit your account correctly.
• KYC Verification: When bk666 requests identity verification, you submit documents such as a CNIC copy. These are processed through bk666's secure verification workflow and stored under strict access controls.
• Platform Usage: bk666's systems automatically record technical and behavioural data as you use the platform — which games you play, how long sessions last, bet amounts and login patterns. This data is used for security monitoring and responsible gaming purposes.
• Cookies and Tracking Technologies: As described in Section 6, bk666 uses cookies and similar technologies to maintain your session, remember preferences and gather aggregated analytics. You can manage cookie preferences via your browser settings.
• Support Interactions: Conversations with bk666's customer support team are logged and stored for quality assurance and dispute resolution. Logs are retained for the period described in Section 8.

bk666 processes your personal data on the following lawful bases, depending on the specific processing activity:

• Contract Performance: Processing necessary to operate your bk666 account and deliver the services you signed up for — including processing deposits, paying out winnings and providing access to games.
• Legal Obligation: Processing required to comply with legal requirements — including anti-money laundering (AML) checks, age verification, tax reporting where applicable and cooperation with regulatory or law enforcement requests.
• Legitimate Interests: Processing that serves bk666's legitimate business interests in a way that does not override your rights — including fraud prevention, platform security, improving the platform experience and detecting bonus abuse.
• Consent: Processing for which bk666 requires your explicit opt-in — primarily marketing communications such as promotional SMS and email. You can withdraw consent at any time.

Specifically, bk666 uses your data to:

• Create and maintain your bk666 account and process your PKR transactions
• Verify your identity and age as required under responsible gaming obligations
• Detect and prevent fraud, money laundering and platform abuse
• Monitor your gaming behaviour for responsible gaming purposes and intervene where appropriate
• Personalise your bk666 experience — for example, showing relevant promotions
• Respond to your support queries and resolve any disputes
• Send you bk666 promotional offers where you have opted in to receive them
• Comply with any legal obligation bk666 is subject to

bk666 does not sell your personal data. We share it only with the categories of third parties described below, and only to the extent necessary for the stated purpose:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners, Visa and Mastercard payment networks. Shared data: transaction amounts, account identifiers required to process PKR payments. These providers have their own privacy policies and are independently regulated.
• Identity Verification Providers: Third-party KYC services used to verify CNIC documents and confirm player identity. These providers process data under strict confidentiality agreements with bk666 and cannot use the data for any other purpose.
• IT Infrastructure and Security Providers: Cloud hosting providers, cybersecurity monitoring services and fraud detection platforms. These providers process data as data processors under bk666's direct instructions and are contractually bound to bk666's data protection standards.
• Regulatory and Law Enforcement Authorities: bk666 will disclose personal data to competent authorities in Pakistan when legally required to do so — for example, in response to a valid court order or regulatory investigation. bk666 will not make voluntary disclosures beyond what is legally obligated.
• Professional Advisors: Lawyers, auditors and accountants who are subject to professional confidentiality obligations and may need access to certain account or transaction data as part of their professional work for bk666.

bk666 uses cookies and similar technologies to deliver, maintain and improve the platform for Pakistani players. Cookies are small text files stored on your device that allow bk666's systems to recognise your browser across sessions. The types of cookies bk666 uses are:

• Strictly Necessary Cookies: Required for the platform to function. These include your session cookie (which keeps you logged in during your visit), security tokens and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functionality Cookies: Remember your preferences — such as display settings or language — so you don't have to reset them every visit. These improve your bk666 experience but are not essential.
• Analytics Cookies: Aggregated, anonymised data about how players navigate bk666 — which pages are most visited, how long sessions last, where players arrive from. Used to improve the platform. No individual player is identified from analytics data.
• Security and Fraud Prevention Cookies: Help bk666's systems identify unusual access patterns that may indicate account compromise or bot activity. These are an important part of keeping your bk666 account secure.

You can manage cookie settings in your browser at any time. Disabling all cookies except strictly necessary ones may affect some bk666 features but will not prevent you from using the platform. bk666 does not use advertising cookies or share cookie data with advertising networks.

bk666 takes data security seriously. The platform employs a combination of technical, organisational and physical measures to protect your personal information against unauthorised access, alteration, disclosure or destruction. The security measures in place include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and bk666's servers. This is the same standard used by major international banks.
• Encrypted storage of sensitive data including CNIC document scans, payment details and identity verification records. Encryption keys are managed separately from the encrypted data they protect.
• Access controls that ensure only bk666 staff with a specific legitimate need can access your personal data, and only to the extent necessary for their role. All staff access is logged and auditable.
• Two-factor authentication on all bk666 internal systems that process player data. No staff member can access bk666's player database without completing multi-factor authentication.
• Regular security audits and penetration testing by independent third-party security professionals. Findings are acted upon promptly.
• Incident response procedures that require bk666 to notify affected players without undue delay in the event of a data breach that poses a risk to their rights or interests.

Despite these measures, no internet-based system is completely invulnerable. bk666 cannot guarantee absolute security but commits to maintaining security standards that reflect current best practice and to responding rapidly to any security incident that does occur. If you believe your bk666 account has been compromised, contact support immediately via live chat.

bk666 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The retention periods for the main categories of data are as follows:

At the end of each retention period, data is either securely deleted or irreversibly anonymised so it can no longer be linked to any individual. Players can request early deletion of their data subject to the limitations described in Section 9.

Every Pakistani player on bk666 has the following rights in relation to their personal data. You can exercise any of these rights by contacting privacy@bk666-vip.com or through bk666's live chat. Requests are acknowledged within 5 business days and completed within 14 days unless complexity requires additional time, in which case you will be notified.

bk666 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If bk666 discovers that a person under 18 has registered an account, that account will be immediately suspended, the data reviewed and then permanently deleted, and any deposits refunded to the originating payment method pending verification.

Parents and guardians in Pakistan who are concerned that a minor may have accessed bk666 should contact support immediately. bk666 takes these situations seriously and will act quickly to close the account and advise on parental control options for the device in question.

bk666 reviews this Privacy Policy regularly and updates it when our data practices change or when required by legal or regulatory developments. The current version and effective date are always shown at the top of this page and in the version strip above.

When we make material changes to this policy — that is, changes that significantly affect how we process your personal data or the rights you have — we will notify registered Pakistani players via email to their registered address and/or via a prominent notice on the bk666 platform, at least 7 days before the changes take effect.

Your continued use of bk666 after the effective date of any updated Privacy Policy constitutes acceptance of the new version. If you disagree with any changes, please stop using the platform and contact support to arrange account closure. Any data collected under the previous version of this policy will continue to be handled in accordance with that version for the activity it relates to.

If you have any question about this Privacy Policy, want to exercise any of your data rights or have a concern about how bk666 has handled your personal data, please contact bk666's privacy team directly:

• Email: privacy@bk666-vip.com — include "Privacy Request" in the subject line along with your registered mobile number or username.
• Live Chat: Available 24/7 through the bk666 platform. Our support team can handle basic privacy queries and will escalate data access requests to the privacy team.

bk666 commits to acknowledging your privacy enquiry within 5 business days and completing any data request within 14 days. Complex requests may take longer — we will notify you if this is the case and explain the reason for any delay.

If you are not satisfied with bk666's response to your privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. bk666 cooperates fully with any regulatory investigation into its data practices.