k33 Privacy Policy — How We Collect, Use, and Protect Your Personal Information

k33 ("k33", "we", "us", "the Platform") is the operator of the online gaming website accessible at k33.lol. For the purposes of data protection, k33 acts as the data controller in respect of all personal information collected through the k33 website, mobile interface, customer support channels, and any other digital touchpoints operated under the k33 brand.

This Privacy Policy applies to all users who visit, register on, or interact with k33 in any capacity, including Pakistani players accessing the platform through mobile browsers, desktop devices, or any third-party embedded access point. By using k33's Services, you acknowledge that your personal information will be processed in accordance with this Policy.

This Policy should be read in conjunction with k33's Terms & Conditions and Responsible Gaming Policy. All three documents together govern your relationship with k33 and the way your personal data is handled throughout that relationship.

k33 collects personal information only to the extent necessary to deliver its Services safely, legally, and to the standard that Pakistani players expect. The categories of information we collect are as follows:

k33 does not collect sensitive personal data beyond what is strictly required for age verification and anti-money laundering (AML) compliance. We do not collect religious affiliation, biometric data beyond CNIC photographs, or credit scoring information.

k33 processes your personal information for the following purposes:

• Account Registration and Management: Creating and maintaining your k33 account, verifying your identity in accordance with Know Your Customer (KYC) obligations, and managing your account settings and preferences.
• Service Delivery: Processing deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card networks; settling sports bets and casino game rounds; crediting and managing bonus balances.
• Compliance and Legal Obligations: Fulfilling anti-money laundering (AML) and counter-terrorism financing (CTF) obligations; responding to regulatory requests; maintaining audit trails as required under applicable international gaming regulations.
• Age and Identity Verification: Ensuring that all k33 users are 21 years of age or older, and that all accounts belong to their registered holders, by verifying identity documents submitted during the KYC process.
• Customer Support: Responding to enquiries submitted via live chat, email, or other support channels; investigating disputes; resolving account access issues.
• Responsible Gaming: Monitoring gameplay patterns for signs of problem gambling behaviour; applying responsible gaming restrictions where requested or where duty-of-care obligations arise; managing self-exclusion requests.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the k33 platform, optimise mobile performance, and develop new features in response to user behaviour patterns.
• Security: Detecting and preventing fraud, unauthorised account access, money laundering, bonus abuse, and other prohibited conduct as defined in the k33 Terms & Conditions.
• Marketing Communications: Where you have expressly opted in, sending promotional communications about k33 bonuses, cricket season specials, PSL offers, and other relevant promotions. You may withdraw consent at any time via account settings.

k33 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing your data is necessary to perform the contract between you and k33 — i.e., to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: k33 is required by applicable international gaming regulations and AML/CTF frameworks to collect and retain certain categories of personal data, including identity verification records and financial transaction histories.
• Legitimate Interests: k33 processes certain data (such as technical and gameplay data) on the basis of its legitimate interest in operating a secure, fair, and financially sustainable gaming platform, provided that such interests are not overridden by your privacy rights.
• Consent: Where k33 sends direct marketing communications or deploys non-essential cookies, processing is based on your freely given, specific, and informed consent, which you may withdraw at any time.

k33 does not sell, rent, or trade your personal information to third parties for their independent marketing purposes under any circumstances. Personal data is shared only in the following limited and controlled circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa/Mastercard networks, and other payment infrastructure providers receive the minimum information necessary to process your PKR transactions securely.
• Game Providers: Certified gaming software providers (including live casino and slot providers) may receive session identifiers and game-specific data necessary to deliver gameplay; they do not receive your full identity profile.
• Identity Verification Partners: Third-party KYC and AML screening services may process your CNIC and identity documents under strict data processing agreements with k33.
• Regulatory and Law Enforcement Authorities: k33 will disclose personal data to competent regulatory authorities or law enforcement bodies where required by law, court order, or legitimate regulatory request.
• Professional Advisors: Legal counsel, auditors, and compliance consultants may access relevant personal data under confidentiality obligations in connection with k33's regulatory and business operations.

k33 uses cookies and similar technologies (local storage, session tokens) to operate the platform and improve the user experience. Cookies are small data files stored on your device when you visit k33. They serve several functions:

• Essential Cookies: Required for core platform functions — account login sessions, bet slip persistence, wallet balance display, and security verification. These cannot be disabled without disrupting the platform.
• Performance Cookies: Collect anonymised data about how players navigate the k33 platform — which pages load slowest, which features generate the most interaction — enabling us to improve the mobile experience for Pakistani users on standard Android devices and variable 4G connections.
• Functionality Cookies: Remember your preferences, such as language settings, preferred sports markets, and favourite casino games, so you do not need to reconfigure these on each visit.
• Analytics Cookies: k33 uses internal analytics tools to understand aggregate platform usage patterns. This data is anonymised before analysis and is never linked back to individual user profiles for marketing purposes.

Non-essential cookies are deployed only with your consent, which may be managed through your browser settings. Disabling performance or analytics cookies does not affect your ability to use core k33 features.

k33 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law and regulatory obligation. The following general retention guidelines apply:

• Account and Identity Data: Retained for the duration of your active account relationship with k33, and for a period of five (5) years following account closure, in compliance with AML and gaming regulatory retention requirements.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of each transaction, or as required by applicable financial crime prevention regulations.
• Gameplay Logs: Retained for a minimum of three (3) years to support dispute resolution, responsible gaming monitoring, and regulatory audit requirements.
• Customer Support Correspondence: Retained for two (2) years from the close of each support case, unless the matter relates to an ongoing dispute or regulatory enquiry.
• Marketing Consent Records: Retained for as long as you maintain an active consent status, plus two (2) years following withdrawal of consent, to demonstrate compliance.

Following the applicable retention period, personal data is securely deleted or permanently anonymised. k33 conducts periodic data audits to ensure that no personal information is held beyond its retention window without documented justification.

k33 applies a multi-layered technical and organisational security framework to protect personal information against unauthorised access, accidental loss, disclosure, or destruction. Key measures in place include:

• Transport Layer Security: All data transmitted between your device and k33's servers is encrypted using 256-bit TLS encryption — the same standard employed by major international financial institutions.
• Access Controls: Personal data is accessible internally only to k33 staff with a documented operational need. Role-based access control limits data exposure across the organisation.
• Storage Encryption: Personal data and financial records stored in k33's systems are encrypted at rest using industry-standard encryption protocols.
• Fraud and Intrusion Detection: k33 deploys automated monitoring systems that detect unusual access patterns, suspicious login attempts, and potential data breach indicators in real time.
• Incident Response: k33 maintains a documented incident response plan for data security events, including procedures for notifying affected users and relevant authorities within required timeframes where a reportable breach occurs.

Subject to applicable law and regulatory restrictions, you have the following rights in relation to your personal data held by k33. Requests relating to any of these rights may be submitted via k33's live chat support channel, and k33 will respond within a reasonable timeframe.

k33 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or operational practices. Where material changes are made, a notice will be posted on the k33 platform with a revised effective date. Your continued use of k33's Services following publication of an amended Policy constitutes acceptance of the revised terms.

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by k33, please contact our support team directly via the 24/7 live chat function available from your account dashboard. Our support team responds to data-related enquiries in English, typically within one business day.

k33 takes privacy complaints seriously. Where you feel a data concern has not been satisfactorily addressed through the support channel, you may escalate the matter to the relevant supervisory authority under the regulations applicable to k33's operational jurisdiction.