Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how KC666 ("we", "us", "our", or "the Operator"), the operator of the online gaming platform at kc666.cam ("the Platform"), collects, uses, stores, shares and protects personal data relating to individuals who access or use the Platform ("you", "the User" or "the Data Subject").

KC666 takes data privacy seriously. This Policy has been prepared in accordance with internationally accepted data protection principles, including those derived from the General Data Protection Regulation (GDPR) framework, which KC666 uses as a benchmark for responsible data handling regardless of whether GDPR directly applies to every user's jurisdiction.

By accessing or using the KC666 Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree to the practices described herein, you should not use the Platform and should contact support to close your account and request data deletion where applicable.

This Policy was last reviewed and updated on 1 January 2026 and supersedes all previous versions.

2. Definitions

In this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, device identifiers, location data and financial details.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, restriction and erasure.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, KC666.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller under a contractual data processing agreement.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement to processing, expressed by a clear affirmative act.
• "Cookie" means a small text file placed on a user's device by a website for the purpose of storing session, preference or analytical information.
• "KYC Data" means identity verification documents and information submitted during the Know Your Customer process, including but not limited to CNIC or passport copies.

3. Data Controller

KC666 acts as the Data Controller in respect of personal data collected through the Platform at kc666.cam. KC666 determines the purposes for which personal data is collected and the means by which it is processed.

KC666 does not hold a Pakistani data controller registration, as KC666 is not incorporated or regulated in Pakistan. KC666 does not represent that it complies with the Pakistan Electronic Crimes Act 2016 or any Pakistani data protection framework as a domestic regulated entity; however, KC666 applies GDPR-aligned standards as a voluntary baseline for all users, including those accessing the Platform from cities in Pakistan such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.

4. Personal Data We Collect

4.1 Registration Data

When you create a KC666 account, we collect:

• Full legal name;
• Date of birth (for age verification);
• Email address;
• Residential address;
• Username and password (hashed — we do not store plaintext passwords);
• Phone number (where provided).

4.2 KYC & Verification Data

During identity verification, we may collect:

• Government-issued photo ID (e.g., CNIC for Pakistani users, or passport);
• Proof of residential address documents;
• Selfie or liveness check images;
• Payment method verification documents where required.

4.3 Transaction & Financial Data

We collect records of:

• Deposit and withdrawal transactions including amounts (displayed in PKR where applicable), dates and payment method type;
• Bet history, game records and account balance movements;
• Bonus and promotion claim records.

Payment method names familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — may appear in transaction records where relevant. The mention of these payment providers in transaction logs does not constitute a partnership or data-sharing arrangement with those providers beyond what is operationally necessary for payment processing.

4.4 Technical & Usage Data

We automatically collect certain technical data when you access the Platform, including:

• IP address and approximate geolocation;
• Device type, operating system and browser;
• Session data including log-in and log-out times;
• Pages visited and features used within the Platform;
• Cookie and tracking data (see Clause 10).

4.5 Communications Data

When you contact KC666 support via live chat or email, we retain records of those communications for quality assurance, fraud prevention and dispute resolution purposes.

5. Lawful Basis for Processing

KC666 processes personal data on the following lawful bases:

6. How We Use Your Personal Data

KC666 uses collected personal data for the following purposes:

• Account management: Creating, maintaining and securing your KC666 account;
• Service delivery: Enabling access to sports betting (including cricket, PSL/T20, ICC, football and UFC markets), live casino, slots and other Platform features;
• Payment processing: Facilitating deposits and withdrawals through available payment channels;
• KYC and verification: Verifying identity, age and address as required prior to withdrawal or when triggered by account activity;
• Fraud and AML compliance: Detecting and preventing fraudulent account activity, money laundering and other financial crimes;
• Responsible gambling: Monitoring account activity for signs of problem gambling behaviour and applying self-exclusion or limit tools where relevant;
• Customer support: Responding to queries, complaints and disputes submitted via live chat or email;
• Platform improvement: Analysing aggregated usage data to improve Platform performance, content and usability;
• Marketing communications: Sending promotional offers and newsletters only where you have explicitly opted in to receive such communications. You may withdraw consent at any time.

7. Data Sharing & Third Parties

7.1 Categories of Third Parties

KC666 may share personal data with the following categories of third parties, strictly on a need-to-know basis and governed by contractual data processing agreements:

• KYC and identity verification providers — to process identity document checks and liveness verifications;
• Payment processors — to facilitate deposit and withdrawal transactions through the available payment methods in the cashier;
• Game technology providers — to enable sports data feeds, casino game operation and bet settlement;
• Fraud prevention and AML service providers — to conduct transaction monitoring and compliance checks;
• Customer support platform providers — to power the live chat support infrastructure;
• Regulatory and law enforcement authorities — where required by applicable law, court order or regulatory obligation.

7.2 No Sale of Personal Data

KC666 does not sell, rent, lease or otherwise commercially exploit personal data to third-party marketing organisations. Data transfers to third parties are always limited to what is strictly necessary for the operational or legal purpose at hand.

8. Data Retention

KC666 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active account data is retained for the duration of the account's active status plus a defined post-closure period;
• KYC and identity verification records are retained for the period required by applicable AML regulations in the operator's licensing jurisdiction — typically a minimum of five (5) years from the date of last account activity or account closure;
• Transaction records are retained for a minimum of five (5) years to satisfy financial record-keeping obligations;
• Customer support communications are retained for a minimum of two (2) years;
• Marketing opt-in records are retained until consent is withdrawn, at which point marketing communications cease promptly.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9. Security Measures

KC666 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, destruction or alteration. These measures include:

• SSL/TLS encryption for all data in transit between your device and the Platform;
• Encryption of sensitive stored data including password hashes and KYC document storage;
• Access controls limiting staff access to personal data on a need-to-know basis;
• Regular security assessments and vulnerability monitoring of the Platform;
• Data breach detection and response procedures.

10. Cookies & Tracking Technologies

10.1 What Cookies We Use

KC666 uses cookies and similar tracking technologies on the Platform for the following purposes:

10.2 Managing Cookies

You may manage non-essential cookie preferences through your browser settings. Disabling strictly necessary cookies may affect Platform functionality including session stability and account access. Disabling analytical or marketing cookies will not prevent you from using the Platform.

11. International Data Transfers

KC666 may transfer personal data to countries outside the user's jurisdiction, including to the operator's licensing jurisdiction and to countries where third-party service providers (such as KYC processors, cloud infrastructure providers and payment processors) are located.

Where personal data is transferred internationally, KC666 ensures that appropriate safeguards are in place — such as standard contractual clauses, adequacy decisions or equivalent mechanisms — to maintain a level of protection consistent with this Policy.

For users accessing from Pakistan, please note that Pakistan does not have a formal data transfer adequacy framework equivalent to GDPR. KC666 applies GDPR-aligned safeguards as a voluntary standard, but cannot guarantee that those standards will be recognised under Pakistani domestic law.

12. Exercising Your Data Rights

To exercise any of the data rights described in this Policy — including access, rectification, erasure, portability, objection or restriction — please contact KC666 through one of the following channels:

• Live Chat: Available 24/7 via the on-site chat widget — the fastest channel for data requests;
• Email: [email protected] with subject line "Data Subject Request".

KC666 aims to acknowledge data subject requests within five (5) working days and to fulfil verified requests within thirty (30) calendar days. Complex requests or those requiring identity re-verification may take longer, in which case you will be informed of the extended timeframe.

13. Minors & Age Restriction

The KC666 Platform is strictly for adults aged 18 years or older (or the higher minimum required by the operator's licensing jurisdiction). KC666 does not knowingly collect or process personal data relating to minors. Age verification is conducted as part of the KYC process.

If KC666 becomes aware that personal data has been collected from or in relation to a minor, that data will be deleted promptly and the associated account will be permanently closed. If you believe a minor has registered on the Platform, please contact support immediately.

14. Changes to This Privacy Policy

KC666 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where a new category of data is collected or a new third-party processor is engaged — KC666 will provide notice via the registered email address or through a prominent on-site notification before the changes take effect.

The updated Policy will display a revised effective date. Your continued use of the Platform following the effective date of any changes constitutes your acceptance of the updated Policy. We recommend reviewing this page periodically to remain informed of how your data is being handled.

15. Contact Us

For any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data, please contact the KC666 data team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, via the on-site chat widget — the fastest way to reach support.
• Email: [email protected] — please include "Privacy Policy" in the subject line.
• Support Hours: 24 hours a day, 7 days a week (Pakistan Standard Time, UTC+5).

For information about your account rights and bonus conditions, please also review our Terms & Conditions. For questions about safer gambling tools and self-exclusion, see our Responsible Gambling page.