Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how 66pk ("the Platform", "we", "us", "our") collects, uses, stores, discloses and protects the personal data of users ("you", "your") who access or use the website located at https://66pk.cam.

66pk is an English-language online gaming information and entertainment platform providing sports betting guides, live casino information and responsible gambling resources to adult users across Pakistan — from Karachi and Lahore to Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — and internationally. We are committed to handling your personal data with transparency, integrity and respect for your privacy rights.

This Policy applies to all personal data processed by 66pk in connection with your use of the Platform, regardless of where you are located when you access it. By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, device identifiers and financial details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure and erasure.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, 66pk.
• "Data Processor" means any third party that processes Personal Data on behalf of 66pk under a contractual arrangement.
• "Consent" means a freely given, specific, informed and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "Cookies" means small text files placed on your device by the Platform to facilitate session management, preference retention and analytics.
• "KYC" means Know Your Customer identity verification procedures required to comply with anti-money laundering and fraud prevention obligations.
• "Sensitive Data" means a subset of Personal Data warranting enhanced protection, including financial information, identity documents and data relating to gambling behaviour.

Data We Collect

66pk collects the following categories of personal data, depending on how you interact with the Platform:

How We Collect Data

We collect your personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, submit a support request or respond to a survey or promotion.
• Automatically — through cookies, web beacons, server logs and similar tracking technologies as you browse the Platform.
• From third parties — from identity verification service providers who assist with KYC checks, payment processors who confirm transaction status, and fraud prevention agencies who share data to protect against illegal activity.
• From publicly available sources — where permitted by law, we may supplement your data with information from publicly accessible records to assist with fraud prevention or compliance obligations.

Purposes & Legal Basis for Processing

We process your personal data only where we have a valid legal basis to do so. The purposes for which we process your data, and the corresponding legal bases, are set out in the table below:

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Disclosure

66pk does not sell your personal data to third parties. We may share your data only in the following limited circumstances:

• Service Providers (Data Processors): We engage trusted third-party providers to assist with payment processing, identity verification, fraud detection, IT infrastructure, customer support and analytics. These providers act strictly on our instructions and are bound by data processing agreements.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order or regulatory directive, we may disclose your data to relevant authorities, including financial intelligence units or law enforcement agencies investigating financial crime.
• Fraud Prevention Agencies: We may share data with fraud prevention and credit reference agencies to protect against financial crime, money laundering and identity fraud.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of assets, your personal data may be transferred to the successor entity, subject to equivalent data protection obligations.
• With Your Consent: We may share your data with third parties where you have given explicit consent for us to do so.

Cookies & Tracking Technologies

66pk uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These cookies enable session management, security features and access to authenticated areas of the Platform. They cannot be disabled without impairing core functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, display options and any responsible gambling limits you have set, so that these persist across sessions.
• Analytical Cookies: Used to collect anonymised data about how users navigate the Platform — pages visited, time spent, error rates — to help us identify improvements. Data is aggregated and does not personally identify individual users.
• Marketing Cookies: Used only where you have given consent, to deliver relevant promotional content based on your browsing activity and interests.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience of the Platform. Instructions for managing cookies are available through your browser's help documentation.

Data Retention

66pk retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, taking into account our legal, regulatory and operational obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction. Where data must be retained beyond standard periods due to active legal proceedings, regulatory investigations or legitimate dispute resolution, it will be held until such matters are resolved.

Data Security

66pk implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• Encryption of data in transit using TLS (Transport Layer Security) protocols.
• Encryption of sensitive data at rest using AES-256 or equivalent standards.
• Role-based access controls limiting data access to authorised personnel with a legitimate operational need.
• Regular security assessments, penetration testing and vulnerability scanning of Platform infrastructure.
• Multi-factor authentication for administrative access to data systems.
• Staff training on data protection obligations and information security best practices.
• Incident response procedures enabling rapid detection, containment and notification in the event of a data breach.

Despite these measures, no data transmission over the internet or electronic storage system is completely secure. While we take every reasonable step to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you as required by applicable data protection law.

You also play an important role in keeping your data secure. Please refer to the Account Security section of our Terms & Conditions for your responsibilities regarding password protection and credential management.

Your Data Rights

Subject to applicable law and certain limited exceptions, you have the following rights in relation to your personal data held by 66pk:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis applies. This right is subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances, for example while the accuracy of your data is contested.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to processing of your data where it is based on legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

International Data Transfers

66pk operates globally and your personal data may be transferred to, stored in or processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction.

Where such transfers occur, 66pk takes steps to ensure that your data remains protected to a standard consistent with this Policy and applicable data protection law. The safeguards we rely on include:

• Standard Contractual Clauses (SCCs) approved by relevant data protection authorities, incorporated into agreements with third-party processors operating outside adequacy-recognised jurisdictions.
• Transfers to countries recognised as providing an adequate level of data protection by the relevant supervisory authority.
• Binding Corporate Rules where applicable within group structures.

For further information about the international transfer mechanisms we rely on, or to request a copy of the relevant safeguards, please contact us using the details in Section 16.

Third-Party Links & Services

The Platform may contain references to third-party services or content for informational or contextual purposes. 66pk does not include outbound links to external websites within its core navigation or content structure, in line with our site policy.

Where any third-party service is accessed in connection with your use of the Platform — for example, a payment processor interface — please be aware that such third parties operate under their own privacy policies. 66pk is not responsible for the privacy practices of third-party services and encourages you to review their policies before submitting personal data to them.

Payment provider names referenced on this Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are cited as contextual references familiar to Pakistani users. Their mention does not constitute a data-sharing arrangement with those entities beyond what is strictly required for any transaction you initiate.

Children's Privacy

66pk is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18, or the higher minimum age required by the applicable operator/license jurisdiction. The Platform is not directed at minors and we take active steps to prevent underage access, including age verification at registration and during the KYC process.

If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data and close the associated account. Any deposits made by a minor will be handled in accordance with our Terms & Conditions and applicable regulatory requirements.

If you believe that a minor has accessed the Platform or that we hold data relating to a minor, please contact us immediately at the details provided in Section 16.

Marketing Communications

With your explicit consent, 66pk may contact you by email, SMS or push notification with information about promotions, new features, sports betting opportunities (such as upcoming Pakistan cricket matches, PSL T20 fixtures, ICC tournaments or other live sports events) and platform updates.

You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any marketing email.
• Adjusting your notification preferences within your Account settings.
• Contacting our support team directly at the details set out in Section 16.

Opting out of marketing communications will not affect transactional communications relating to your account — such as deposit confirmations, withdrawal notifications, security alerts or support responses — which we will continue to send as they are necessary for the performance of our contract with you.

Where you have set a self-exclusion period under our Responsible Gambling tools, we will suspend all marketing communications for the duration of that exclusion. Please see our Responsible Gambling page for full details.

Amendments to This Policy

66pk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law or operational requirements. The "Last updated" date at the top of this Policy will be revised whenever a material change is made.

Where changes are material — for example, where we introduce a new purpose for processing your data or share data with a new category of third party — we will provide advance notice via the Platform or by email to your registered address before the change takes effect. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy.

We recommend reviewing this Policy periodically to remain informed of how we protect and use your data. If you have any concerns about any amendment, please contact us before the change takes effect using the details in Section 16.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how we handle your personal data, please contact our Data Support team through the following channel:

When contacting us about a data rights request, please include your registered Account username, a clear description of your request and a copy of a valid identity document so that we can verify your identity before processing the request.

For responsible gambling enquiries, self-exclusion requests or limit settings, please visit our dedicated Responsible Gambling page.