966pk Privacy Policy

1 Who We Are

966pk is an online casino and sports betting platform operated at 966pk.bio, providing services to players across Pakistan and internationally under applicable international gaming standards. For the purposes of this Privacy Policy, 966pk acts as the data controller in respect of all personal data collected through the platform, its associated mobile interfaces, and any sub-domains or affiliated services.

This Privacy Policy applies to all individuals who access or use the 966pk platform, whether as registered account holders, guest visitors, or individuals who interact with 966pk through any communication channel including live support, email correspondence, or promotional campaigns.

References to "966pk," "we," "us," or "our" throughout this Privacy Policy are references to the 966pk platform and its operating entity. References to "you," "your," or "the player" are references to any individual whose personal data is processed in accordance with this Privacy Policy.

2 Data We Collect

966pk collects personal data through several channels: directly from players during account registration and KYC verification; automatically through platform usage and technical systems; and, where applicable, from trusted third-party service providers involved in payment processing or identity verification. The categories of personal data collected are as follows:

966pk does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required by law or explicitly consented to by the player for a defined purpose.

3 How We Use Your Data

966pk processes personal data for specific, defined purposes only. Data is never processed in a manner incompatible with the purposes stated at collection. The primary purposes for which 966pk uses player data are:

• Account Management: Creating, maintaining, and administering your 966pk account, including processing deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported payment methods.
• KYC & Age Verification: Verifying that all players meet the mandatory 21+ age requirement and confirming player identity in accordance with our anti-money laundering (AML) obligations. No player may withdraw funds without completing the KYC process.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, money laundering, and other prohibited conduct as defined in 966pk's Terms & Conditions.
• Regulatory Compliance: Meeting all applicable legal, regulatory, and reporting obligations under the international gaming framework under which 966pk operates, including mandatory record-keeping requirements.
• Platform Improvement: Analysing anonymised usage data to improve game performance, user interface design, and the overall 966pk player experience for users across Pakistan.
• Customer Support: Responding to player enquiries, resolving complaints, and providing 24/7 live support services in connection with your 966pk account and gaming activity.
• Responsible Gaming: Monitoring account activity for indicators of problem gambling and enabling the delivery of responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion where requested or required.
• Promotions & Communications: Where you have provided marketing consent, sending you information about 966pk bonuses, PSL cricket betting promotions, new game launches, and other relevant offers. Marketing communications can be opted out of at any time.

4 Legal Basis for Processing

966pk processes personal data only where a valid legal basis exists for doing so. The applicable legal bases under internationally recognised data protection principles are as follows:

• Contractual Necessity: Processing required to fulfil the contract between you and 966pk — specifically, operating your account, processing transactions, settling wagers, and delivering customer support. Without this processing, 966pk cannot provide its services to you.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML legislation, KYC requirements, regulatory reporting obligations, and the retention of financial records.
• Legitimate Interests: Processing carried out for 966pk's legitimate business interests, where those interests are not overridden by your privacy rights. This includes fraud detection, platform security monitoring, internal analytics, and responsible gaming risk assessment.
• Consent: Processing based on your explicit consent, specifically in relation to optional marketing communications and the use of non-essential analytics cookies. Consent can be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Where processing is based on legitimate interests, 966pk has conducted a balancing assessment to ensure that the relevant processing does not unfairly prejudice your rights and freedoms. Details of these assessments are available upon request.

5 Data Sharing & Third Parties

966pk does not sell, rent, or otherwise commercially transfer your personal data to any third party. Data is shared with external parties only in the following defined circumstances, and only to the minimum extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment service providers receive only the transaction and account data necessary to process deposits and withdrawals. All payment partners are bound by their own data protection obligations and applicable Pakistani financial regulations.
• KYC & Identity Verification Providers: 966pk uses trusted third-party identity verification services to conduct CNIC and document checks as part of the KYC process. These providers process identity documents solely for verification purposes and are prohibited from using the data for any other purpose.
• Game Software Providers: Third-party game studios and live casino operators whose games are hosted on the 966pk platform may receive anonymised session and gameplay data for the purposes of game performance monitoring. No personally identifiable information is shared with game providers.
• Regulatory & Law Enforcement Authorities: 966pk will disclose personal data to relevant authorities where required to do so by law, court order, or binding regulatory direction — including for the purposes of AML investigation or fraud prevention cooperation.
• Platform Analytics Providers: Anonymised or pseudonymised usage data may be shared with analytics service providers to assist in platform performance analysis. These providers operate under strict data processing agreements and may not use the data for independent purposes.

6 Cookies & Tracking Technologies

966pk uses cookies and similar tracking technologies to operate the platform, maintain session continuity, and, where consent has been provided, to analyse user behaviour for the purposes of platform improvement. The categories of cookies used on 966pk are:

You can manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the 966pk platform. Withdrawing consent for analytics or marketing cookies will not affect your account status or access to any games.

7 Data Retention

966pk retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, and in any event for no longer than required under applicable legal and regulatory obligations. The following standard retention periods apply:

• Account and transaction data: Retained for a minimum of five (5) years from the date of account closure, in line with standard AML and gaming regulatory record-keeping requirements.
• KYC and identity verification documents: Retained for five (5) years from account closure, or longer if required by a specific regulatory directive or legal hold.
• Communications and support records: Live chat transcripts and email correspondence retained for three (3) years from the date of the interaction, unless subject to an ongoing dispute or investigation.
• Technical and usage data: Anonymised analytics data may be retained indefinitely for statistical platform improvement purposes. Personally identifiable technical data (e.g. IP logs) is retained for no more than twelve (12) months.
• Marketing consent records: Consent and opt-out records are retained for the duration of the account relationship plus three (3) years to enable demonstration of lawful processing history.

Upon expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised in accordance with 966pk's data destruction protocols. Players may request early deletion of data where the legal basis for retention no longer applies, subject to the exceptions described in Section 9.

8 Data Security

966pk implements a comprehensive set of technical and organisational security measures to protect player personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• Encryption in Transit: All data transmitted between your device and 966pk servers is protected by TLS 1.2 or higher encryption. The 966pk platform enforces HTTPS exclusively and does not permit unencrypted connections.
• Encryption at Rest: Sensitive personal data stored on 966pk servers, including financial account details and KYC documents, is encrypted at rest using AES-256 or equivalent encryption standards.
• Password Security: Player account passwords are never stored in plain text. 966pk uses bcrypt or equivalent one-way hashing with appropriate salting to protect authentication credentials.
• Access Controls: Access to personal data within 966pk's operations is restricted on a strict need-to-know basis. All internal access events are logged and subject to regular audit.
• Fraud Monitoring: 966pk operates continuous automated monitoring for suspicious account activity, including unusual login patterns, rapid-fire transaction sequences, and multi-account indicators.
• Incident Response: In the event of a data breach that poses a risk to player privacy, 966pk will notify affected players and relevant authorities within the timeframes required under applicable data protection regulations.

9 Your Data Rights

As a player whose personal data is processed by 966pk, you hold the following rights in respect of that data. These rights may be exercised free of charge at any time by contacting 966pk through the live support channel or by emailing [email protected].

• Right of Access (Data Subject Access Request): You may request a copy of all personal data held by 966pk about you. 966pk will respond to verified access requests within 14 business days, providing a structured, machine-readable copy of your data where technically feasible.
• Right to Rectification: Where personal data held by 966pk about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay. Minor corrections (e.g. spelling of name or contact number) can typically be processed through the account settings panel directly.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Note that erasure requests cannot be fulfilled where retention is required by law (e.g. AML and gaming regulatory obligations).
• Right to Restriction of Processing: You may request that 966pk restrict processing of your data in certain circumstances — for example, while a rectification request is being assessed or where you have contested the lawfulness of processing.
• Right to Data Portability: You may request that personal data you have provided to 966pk be provided to you in a structured, commonly used, and machine-readable format, where technically feasible and where processing is based on consent or contract.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on legitimate interests or for direct marketing purposes. Objections to direct marketing are always honoured immediately and unconditionally.
• Right to Withdraw Consent: Where processing is based on your consent (e.g. marketing communications, non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

966pk will respond to all data rights requests within 14 business days. In complex cases, this period may be extended by a further 14 business days, with notification to you of the extension reason. 966pk will not charge a fee for standard data rights requests unless they are manifestly unfounded, excessive, or repetitive.

10 Children & Minors

The 966pk platform is strictly for adults aged 21 years and above. 966pk does not knowingly collect personal data from individuals under the age of 21. The 21+ age requirement is enforced through mandatory KYC age verification for all registered accounts.

If 966pk becomes aware that personal data has been collected from a person under the age of 21 — whether through a circumvented registration process or false documentation — the following actions will be taken immediately:

• The account will be suspended and permanently closed.
• All account funds will be frozen pending investigation.
• All personal data associated with the underage account will be deleted from 966pk systems, except where retention is required for the purposes of regulatory reporting of the underage access incident.
• The incident will be reported to relevant regulatory authorities where required under applicable gaming regulations.

Parents and guardians who believe that a minor may have accessed the 966pk platform are strongly encouraged to contact 966pk support immediately via live chat or at [email protected]. 966pk takes underage gaming extremely seriously and cooperates fully with any investigation in this regard.

11 International Data Transfers

966pk operates under international gaming standards and, as part of platform operations, may transfer personal data to servers or service providers located outside of Pakistan. Where such transfers occur, 966pk ensures that appropriate safeguards are in place to protect the data to the same standard as it would be protected in Pakistan, including:

• Contractual data transfer agreements with all third-party data processors, incorporating internationally recognised standard contractual clauses for data protection.
• Transfer only to service providers operating in jurisdictions that maintain adequate data protection frameworks or that are subject to binding corporate rules equivalent to internationally recognised standards.
• Restrictions on any onward transfer of data by receiving parties without 966pk's prior written authorisation.

Players may request details of the specific safeguards in place for international transfers of their personal data by contacting 966pk support. 966pk will provide this information within 14 business days of receiving a verified request.

12 Changes to This Privacy Policy

966pk reserves the right to update or amend this Privacy Policy at any time to reflect changes in platform operations, legal requirements, or data processing practices. Where changes are material — that is, where they significantly affect player rights or how personal data is used — 966pk will notify registered players by email to their registered account address and via a prominent notice on the platform, not less than 14 days in advance of the changes taking effect.

Non-material amendments, such as clarifications, formatting corrections, or typographical fixes, may be published without advance notice. The "Effective Date" shown at the top of this Privacy Policy and in the hero section of this page reflects the date on which the most recent version came into force.

Continued use of the 966pk platform following the effective date of any revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree with the updated Privacy Policy, you should cease using the platform and may request account closure by contacting 966pk live support.

966pk recommends that all players review this Privacy Policy periodically to stay informed about how personal data is being handled. Previous versions of this Privacy Policy are available upon request.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 966pk processes your personal data, please get in touch using any of the following channels:

• Live Support: Available 24/7 directly through the 966pk platform — average response time under 90 seconds.
• Email: [email protected] (plain text — not a clickable link). Responses to written enquiries within 2 business days.

When submitting a data rights request, please include your registered account username or email address and a brief description of your request so that 966pk can verify your identity and process your request efficiently. 966pk may ask for additional verification information where necessary to prevent unauthorised access to another player's data.