zk666 Privacy Policy — How Your Personal Data Is Collected, Used, and Protected

1 Introduction & Scope

zk666 ("we", "us", "our") is committed to protecting the personal data of all individuals who interact with our online gaming platform at zk666.vu ("Platform"). This Privacy Policy ("Policy") describes in detail how zk666 collects, uses, discloses, stores, and protects personal data relating to registered players, prospective players who browse the Platform without registering, and any other individuals who interact with our services.

This Policy applies to all data processing activities carried out by zk666 in connection with the Platform and our services, including cricket betting, live casino gaming, online slots, racing markets, account management, payment processing, and customer support interactions. It covers personal data collected from players based in Pakistan and other jurisdictions where the Platform is accessible.

This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the zk666 Platform. In the event of any inconsistency between this Policy and the Terms & Conditions with respect to privacy matters, this Policy shall take precedence.

2 Data Controller

For the purposes of applicable data protection legislation, zk666 is the data controller in respect of personal data processed through the Platform. As data controller, zk666 determines the purposes for which and the means by which personal data is processed.

Questions, requests, and complaints relating to this Privacy Policy or the handling of your personal data should be addressed to the zk666 Data Privacy Team. Our designated contact for all privacy-related matters is reachable at [email protected]. We aim to respond to all data-related enquiries within fourteen (14) calendar days of receipt.

Where zk666 engages third-party service providers who process personal data on our behalf — such as payment processors and fraud prevention services — those providers act as data processors under our instruction and are bound by data processing agreements that impose equivalent data protection obligations.

3 Personal Data We Collect

zk666 collects only the personal data that is necessary to provide our gaming services, fulfil our legal obligations, and maintain the security and integrity of the Platform. The categories of personal data we collect are described below.

3.1 Identity and Registration Data

3.2 Financial and Transaction Data

In connection with deposits and withdrawals, zk666 collects information relating to your payment methods, including your registered JazzCash or EasyPaisa mobile wallet number, bank account details where applicable (HBL, UBL, Meezan Bank), USDT wallet address where applicable, and a record of all transactions conducted through your zk666 Account. We do not store full banking credentials or card numbers — payment method details are tokenised through our payment processors.

3.3 Gaming and Activity Data

We collect records of all gaming activity conducted through your zk666 Account, including bet placement data, game session records, win and loss history, bonus usage, and promotional participation. This data is necessary for the proper operation of the Platform, the settlement of bets, and the detection of irregular play patterns that may indicate fraud or problem gambling.

3.4 Technical and Device Data

When you access the zk666 Platform, we automatically collect certain technical data, including your IP address, browser type and version, operating system, device type and identifiers, referring URL, pages visited, time and duration of visits, and session logs. This data is used for security monitoring, fraud detection, and Platform performance optimisation.

3.5 Communications Data

We retain records of all communications between you and zk666, including customer support chat logs, email correspondence, and any complaints or feedback submitted. This data is retained to ensure quality of service, to resolve disputes, and to maintain a complete record of our dealings with you.

4 How We Collect Personal Data

zk666 collects personal data through the following channels and methods:

• Directly from you — when you complete the registration form on the zk666 Platform, provide verification documents, contact customer support, or update your account profile;
• Automatically — through cookies, session tracking, and server logs when you browse or interact with the Platform, as described in Section 10 of this Policy;
• From payment processors — when you initiate a deposit or withdrawal through JazzCash, EasyPaisa, or a bank transfer, your payment provider may share transaction confirmation data with us;
• From identity verification services — where we use third-party identity verification tools to validate the accuracy of documents you submit, those services may share the results of their verification checks with us;
• From fraud prevention and security services — we may receive risk signals from third-party fraud detection providers that we use to assess the legitimacy of account registrations and transactions;
• From publicly available sources — in limited circumstances, we may verify information against publicly available records for anti-money laundering (AML) compliance purposes.

5 Purposes of Processing and Legal Basis

The following table sets out the purposes for which zk666 processes your personal data and the corresponding legal basis for each processing activity.

6 Sharing Your Personal Data

zk666 does not sell your personal data to third parties. We do not share your personal data with external organisations for their own independent marketing purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the specific purpose in question.

6.1 Service Providers and Data Processors

We engage carefully selected third-party service providers to assist us in delivering our services. These providers act as data processors on our behalf and are contractually obligated to process your personal data only on our documented instructions and in accordance with equivalent data protection standards. These providers include payment processing services (including the technical infrastructure supporting JazzCash and EasyPaisa integrations), identity verification and KYC providers, fraud detection and AML screening services, hosting and cloud infrastructure providers, and customer support platform providers.

6.2 Legal and Regulatory Disclosures

zk666 may be required to disclose personal data to law enforcement agencies, regulatory authorities, tax authorities, or courts where we are under a legal obligation to do so, or where such disclosure is necessary to establish, exercise, or defend legal claims. We will notify you of any such request unless legally prohibited from doing so.

6.3 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of the assets of zk666, your personal data may be transferred to the relevant successor entity as part of that transaction. We will notify you by prominently posting a notice on the Platform or through your registered contact details if your data is transferred and becomes subject to a materially different privacy policy as a result.

7 International Data Transfers

As an internationally operated gaming platform, zk666 may transfer personal data to, and process it in, countries outside Pakistan. Certain service providers engaged by zk666 — including cloud infrastructure and identity verification providers — may be located in jurisdictions that have different data protection standards from those applicable in Pakistan.

Where personal data is transferred internationally, zk666 takes appropriate steps to ensure that such transfers are carried out lawfully and that the data remains subject to protections substantially equivalent to those described in this Policy. These safeguards include entering into data processing agreements with service providers that incorporate appropriate contractual protections, selecting providers that maintain internationally recognised security certifications, and applying technical security measures (including encryption in transit and at rest) regardless of where data is processed.

8 Data Retention

zk666 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any applicable legal or regulatory retention requirements that may mandate longer retention periods.

The following general retention periods apply:

• Account and identity data: Retained for the duration of your active Account relationship with zk666, plus a minimum of five (5) years following account closure, in compliance with anti-money laundering regulations and gaming regulatory requirements that mandate retention of player records for this period.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, consistent with financial record-keeping obligations and AML compliance requirements.
• Gaming activity data: Retained for five (5) years from the date of the relevant gaming session or bet, for use in dispute resolution, responsible gaming monitoring, and regulatory compliance.
• Customer support communications: Retained for three (3) years from the date of the last communication in a given support case, for quality assurance and dispute resolution purposes.
• Technical and device logs: Typically retained for twelve (12) months, after which they are deleted or anonymised unless required for an active security investigation.
• Marketing preferences and consent records: Retained for as long as your Account is active or until you withdraw your marketing consent, and for a further period sufficient to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

9 Security Measures

zk666 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• Transport Layer Security (TLS): All data transmitted between your device and the zk666 Platform is encrypted using 256-bit TLS encryption, ensuring that data in transit cannot be intercepted or read by third parties;
• At-rest encryption: Personal data stored in zk666 systems is encrypted at rest using industry-standard encryption algorithms;
• Password hashing: Account passwords are never stored in plain text; they are processed through a one-way cryptographic hashing function before storage, meaning that even an internal system breach cannot expose actual player passwords;
• Access controls: Access to personal data within zk666 is restricted to personnel who have a legitimate operational need to access it, based on role-based access control principles. All access is logged and audited;
• Two-factor authentication (2FA): SMS-based 2FA is available for all zk666 Accounts and is actively recommended, particularly for accounts with regular financial transactions via JazzCash or EasyPaisa;
• Anomaly detection: Automated systems monitor for unusual access patterns, login attempts from unrecognised locations, and suspicious transaction behaviour, with alerts escalated to our security team in real time;
• Regular security assessments: zk666 conducts periodic security reviews and vulnerability assessments of its systems and third-party integrations.

10 Cookies and Tracking Technologies

zk666 uses cookies and similar tracking technologies to operate the Platform effectively, to enhance your experience, and to gather analytical data that helps us improve our services. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies do not directly identify you as an individual but may be linked to your account or browsing session.

10.1 Types of Cookies Used

10.2 Managing Cookies

You can manage cookie preferences through your browser settings — most modern browsers allow you to block, delete, or receive notifications about cookies. However, please be aware that disabling Essential or Security cookies will impair or prevent your use of the zk666 Platform, as they are necessary for the Platform's core functionality including account login and payment processing.

11 Your Privacy Rights

Depending on your jurisdiction of residence, you may hold certain rights in relation to your personal data held by zk666. We are committed to honouring these rights promptly and without unnecessary barriers. Your rights include:

To exercise any of your rights listed above, please contact the zk666 Privacy Team at [email protected]. We will respond to all valid rights requests within thirty (30) calendar days. In complex cases, we may extend this period by a further sixty (60) days, in which case we will notify you of the extension and the reasons for it within the initial thirty-day period.

12 Children's Privacy and Age Restriction

Age verification is a mandatory step in the zk666 registration process. Where we have reason to believe, or discover, that an account has been created by a person below the age of 21, we will immediately suspend the account, delete all personal data associated with it to the extent permitted by law, and refund any net deposits to the funding payment method used at registration. zk666 may retain a minimum record of the circumstances for regulatory compliance purposes.

If you are a parent or guardian and believe that a person under your care has registered for a zk666 Account without your knowledge or consent, please contact us immediately at [email protected] with details of the concern. We will investigate promptly and take all appropriate action.

13 Marketing Communications and Opt-Out

With your explicit consent at the time of registration or at a later point through your account settings, zk666 may send you promotional communications relating to new game launches, bonus offers, PSL cricket betting promotions, seasonal casino events, and platform updates via SMS to your registered Pakistani mobile number or, if provided, by email.

zk666 does not send unsolicited marketing communications to individuals who have not opted in to receive them. Each marketing communication sent by zk666 will include a clear and straightforward mechanism to opt out of future communications of that type.

To withdraw your marketing consent or update your communication preferences at any time, you can: (a) use the opt-out link or instruction included in any marketing message you receive from zk666; (b) update your notification preferences in the settings section of your zk666 Account; or (c) contact us at [email protected] with a clear request to unsubscribe from marketing communications. Opting out of marketing communications will not affect the delivery of transactional communications related to your Account — such as deposit confirmations, withdrawal notifications, and security alerts — which are necessary to operate your Account and will continue to be sent regardless of your marketing preferences.

14 Third-Party Links and Services

The zk666 Platform may, from time to time, contain references or links to content or services operated by third parties, including game providers and responsible gaming resources. This Privacy Policy applies solely to personal data processed by zk666 in connection with the Platform. It does not govern the privacy practices of any third-party website or service that may be accessible from or referenced within the Platform.

zk666 exercises no control over third-party websites or services and accepts no responsibility for their privacy practices, content, or data handling. We strongly encourage you to read the privacy policies of any third-party services you access, as their practices may differ materially from those described in this Policy.

Where we embed third-party game content provided by licensed game studios — such as casino games from certified providers — those providers may collect limited technical data about gameplay sessions under their own privacy frameworks, as disclosed in the applicable game-specific documentation. zk666 requires all game providers to comply with applicable data protection standards as a condition of their integration with the Platform.

15 Changes to This Privacy Policy

zk666 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, the introduction of new services, changes in applicable law, or improvements to our privacy practices. The "Last Revised" date at the top of this Policy will be updated each time a revision is made.

Where changes are non-material — such as editorial clarifications or corrections that do not affect your rights or our data processing activities in any meaningful way — the revised Policy will take effect upon posting at zk666.vu/privacy-policy without separate individual notification. Where changes are material — affecting your rights in a meaningful way or altering the purposes for which we process your personal data — we will provide advance notice to registered players via their registered mobile number or a prominent in-platform notification, no less than fourteen (14) days before the changes take effect.

Your continued use of the zk666 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you should cease using the Platform and request Account closure prior to the effective date of the changes.

16 Contact Us and Privacy Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which zk666 processes your personal data, please contact our Privacy Team:

If you have submitted a privacy complaint to zk666 and are not satisfied with our response, or if you consider that we have processed your personal data in a manner inconsistent with this Policy or applicable data protection law, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction of residence.

This Privacy Policy was last reviewed and updated on 1 January 2026. zk666 reserves all rights not expressly granted herein. The most current version of this Policy is always available at zk666.vu/privacy-policy.