dk66 Privacy Policy —
How We Protect Your Personal Data

Data Controller & Contact Details

The data controller responsible for the personal data of dk66 players is the legal entity holding the dk66 gaming licence ("dk66", "the Company", "we", "our", "us"). As data controller, dk66 determines the purposes for which and the means by which your personal data is processed.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how dk66 processes your personal data, you may contact our Data Protection team as follows:

• Email: [email protected] — please mark the subject line "Data Privacy Request".
• Live Chat: Available 24/7 on the dk66 platform; our support team can escalate data-related queries to the Data Protection team within one business day.

dk66 aims to respond to all data subject requests within 30 days of receipt of a valid, verified request. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days, in which case we will notify you of the extension within the initial 30-day period.

Personal Data We Collect

dk66 collects the following categories of personal data in connection with the operation of the platform and the provision of services to Pakistani players:

dk66 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where a national identity document bearing a photograph is provided for KYC purposes, in which case the photograph is retained solely as part of the identity verification record.

How We Collect Your Data

3.1 Data You Provide Directly

The majority of personal data held by dk66 is provided directly by you during the account registration process, during KYC verification, when contacting customer support, when setting responsible gaming preferences, and when submitting payment details for deposits and withdrawals.

3.2 Data Generated Automatically

When you access and use the dk66 platform, certain data is generated automatically by our systems — including your IP address, the device and browser you are using, your session start and end times, the games you access, the bets you place, and the outcomes of those bets. This data is essential for the secure and fair operation of the platform and cannot be switched off without preventing access to the service.

3.3 Data from Third-Party Providers

dk66 may receive personal data about you from the following categories of third-party providers:

• KYC / Identity Verification Providers: Where we engage a third-party service to verify the accuracy of your identity documents against official databases;
• Payment Processors: JazzCash, EasyPaisa, and banking partners may share transaction reference data with dk66 to confirm the status of deposits and withdrawals;
• Fraud Detection Services: Third-party fraud and AML screening services may provide risk scores or adverse-information flags in connection with your account;
• Analytics Providers: Aggregated, pseudonymised platform usage data may be received from analytics services to help dk66 improve the performance and usability of the platform for Pakistani players.

Purposes & Legal Basis for Processing

dk66 processes your personal data for the following specific purposes, each of which has a corresponding lawful basis under applicable data protection law:

• Account Registration & Identity Verification: To create and manage your dk66 account and verify that you meet the eligibility requirements (21+ age, single account per player). Legal basis: performance of a contract; compliance with a legal obligation (KYC under gaming licence).
• Processing Deposits & Withdrawals in PKR: To process your JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20 transactions accurately. Legal basis: performance of a contract.
• Delivery of Gaming Services: To operate the dk66 casino, sportsbook, and live dealer platform — including recording your bets, calculating results, crediting winnings, and maintaining your game history. Legal basis: performance of a contract.
• Customer Support: To respond to your queries, investigate complaints, and resolve disputes. Legal basis: performance of a contract; legitimate interests (maintaining service quality).
• Fraud Prevention & Security: To detect, investigate, and prevent fraud, money laundering, account takeover, and other prohibited conduct on the dk66 platform. Legal basis: compliance with a legal obligation (AML); legitimate interests (platform security).
• Responsible Gaming: To administer the responsible gaming tools you activate (deposit limits, self-exclusion, session limits) and to monitor for indicators of problem gambling behaviour. Legal basis: compliance with a legal obligation (gaming licence); legitimate interests (player welfare).
• Marketing & Promotions: To send you information about promotions, bonuses, and platform updates — where you have provided consent. Legal basis: consent. You may withdraw consent at any time by contacting support or updating your communication preferences in Account Settings.
• Regulatory Compliance & Audit: To maintain records required by our gaming licence, comply with tax obligations, and respond to requests from regulatory and law enforcement authorities. Legal basis: compliance with a legal obligation.

Who We Share Your Data With

dk66 does not sell your personal data. We share your data only with the following categories of recipients, and only to the extent necessary for the specified purpose:

• Payment Processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, Raast): To process your PKR deposits and withdrawals. These processors are bound by their own data protection obligations and handle your financial data solely for payment processing purposes.
• Game Content Providers (e.g., Evolution Gaming, Pragmatic Play, PG Soft): Game providers may receive limited technical and gameplay data to deliver their certified gaming content. They do not receive your identity or payment data unless separately required for jackpot verification.
• KYC and Identity Verification Services: To verify your identity against official document databases as required by our gaming licence. These services are bound by strict data processing agreements.
• Fraud Detection and AML Screening Services: To screen your account against financial crime databases and risk models as required under our anti-money laundering obligations.
• Regulatory and Licensing Authorities: dk66 may be required to disclose your personal data to the authority that issued its gaming licence, to financial regulators, or to law enforcement agencies in response to lawful requests. dk66 will notify you of such disclosures where legally permitted to do so.
• Professional Advisers: Lawyers, accountants, and auditors engaged by dk66 may access your data on a strictly confidential basis as necessary for the provision of professional services.
• Business Successors: In the event of a merger, acquisition, or sale of all or part of dk66's business, your data may be transferred to the acquiring entity, subject to the same protections as described in this Privacy Policy.

International Data Transfers

dk66 operates internationally and some of the third-party providers with whom we share your data may process it in countries outside Pakistan. Where personal data is transferred to a jurisdiction that does not provide a comparable level of data protection to the country of origin, dk66 ensures that appropriate safeguards are in place — including, where applicable, standard contractual clauses, data processing agreements that incorporate internationally recognised protective measures, or transfers to recipients certified under recognised adequacy frameworks.

The primary server infrastructure used by dk66 to store player account data is located in data centres subject to international information security standards (ISO 27001 or equivalent). Where game providers or payment processors based outside Pakistan process your data, they do so solely to deliver the specific service for which they are engaged and are bound by contractual data protection obligations.

Retention Periods

dk66 retains personal data for the following periods, after which data is securely deleted or anonymised unless continued retention is required by law:

Upon expiry of the applicable retention period, personal data is either permanently deleted from dk66 systems or irreversibly anonymised such that it can no longer be linked to an identifiable individual.

Cookies & Tracking Technologies

8.1 What Cookies dk66 Uses

The dk66 platform uses cookies and similar tracking technologies (including local storage and session storage) to operate the platform, maintain your login session, remember your preferences, and measure platform performance. The categories of cookies used are:

• Strictly Necessary Cookies: Required for the platform to function — including your login session token, security tokens, and CSRF protection cookies. These cannot be disabled without preventing access to dk66.
• Functional Cookies: Remember your language preferences, game settings, and display preferences across sessions.
• Analytics Cookies: Collect aggregated, pseudonymised data about how players interact with the dk66 platform — such as which game categories are most popular or which deposit methods are most commonly used. This data helps dk66 improve the experience for Pakistani players.
• Security Cookies: Used to detect and prevent suspicious login activity, account takeover attempts, and fraud patterns.

8.2 Managing Cookie Preferences

You may manage non-essential cookies through your browser settings or, where dk66 provides a cookie consent tool, through that tool. Please note that disabling strictly necessary cookies will prevent you from accessing the dk66 platform. Disabling analytics or functional cookies will not prevent platform access but may affect certain personalisation features.

Security Measures

dk66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the dk66 platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 / 1.3). This applies to all pages on dk66, including the login page, deposit interface, and account settings.
• AES-256 Encryption at Rest: All personal data stored on dk66 servers is encrypted at rest using AES-256 encryption. This means that even in the unlikely event of unauthorised access to our servers, the data would not be readable without the decryption keys.
• Two-Factor Authentication (2FA): dk66 offers optional 2FA for all player accounts, using SMS OTP to your registered Pakistani mobile number. Players are strongly encouraged to enable 2FA.
• Access Controls: Access to live player personal data is restricted to a small number of authorised dk66 staff members who require that access to perform their specific roles. All access is logged, monitored, and subject to regular audit.
• Login Attempt Monitoring: dk66 monitors for brute-force login attempts and automatically locks accounts after repeated failed login attempts. Suspicious login patterns trigger automatic security alerts.
• Regular Security Testing: dk66 conducts regular security assessments, including penetration testing, vulnerability scanning, and code review, to identify and remediate security vulnerabilities before they can be exploited.
• Data Breach Response: dk66 maintains a documented data breach response procedure. In the event of a breach that is likely to result in high risk to the rights and freedoms of players, dk66 will notify affected players without undue delay and will report the breach to the relevant regulatory authority within the timeframe required by applicable law.

Your Data Subject Rights

Subject to applicable data protection law, you have the following rights in respect of the personal data dk66 holds about you:

• Right of Access: You have the right to request a copy of the personal data dk66 holds about you (a "Subject Access Request"). dk66 will provide this information in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Rectification: If any personal data dk66 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain data (such as your mobile number or email address) directly through Account Settings.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request that dk66 delete the personal data it holds about you. This right is not absolute — dk66 may be required to retain certain data to comply with its gaming licence obligations, AML requirements, or other legal duties, in which case we will explain the basis for retention.
• Right to Restriction of Processing: You may request that dk66 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on performance of a contract, you have the right to receive the personal data you provided to dk66 in a structured, commonly used, machine-readable format and to have it transmitted to another data controller where technically feasible.
• Right to Object: You may object to the processing of your personal data where dk66 relies on legitimate interests as the lawful basis. dk66 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

Children & Minors

The dk66 platform is strictly intended for adult users aged 21 years and above. dk66 does not knowingly collect, process, or store personal data relating to any individual under the age of 21. The registration process includes an age verification step that requires confirmation of date of birth, and dk66 may request documentary evidence of age at any point.

If dk66 discovers or is notified that personal data relating to a person under the age of 21 has been collected — for example, because a minor has provided a false date of birth during registration — dk66 will immediately suspend the relevant account, delete the personal data concerned, and, where applicable, report the matter in accordance with its gaming licence obligations.

If you are a parent or guardian and you believe a person under 21 in your care has registered on or used the dk66 platform, please contact our support team immediately at [email protected] so that the account can be closed and the relevant data removed without delay.

Third-Party Links

The dk66 platform may contain references to third-party services — for example, payment processors such as JazzCash and EasyPaisa, or game providers such as Evolution Gaming. These third parties operate their own platforms under their own privacy policies, over which dk66 has no control. dk66 is not responsible for the privacy practices of third-party services and encourages players to review the relevant privacy policies before providing personal data to any third party.

This Privacy Policy applies solely to personal data processed by dk66 in connection with the dk66 platform. It does not apply to any data processed by third-party payment processors, game providers, or any other external service, even where those services are accessed through or referenced on the dk66 platform.

Updates to This Privacy Policy

dk66 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. The date of the most recent update is shown at the top of this document.

Where an update to this Privacy Policy is material — that is, where it affects the nature of the data we collect, the purposes for which we use it, or the rights available to you — dk66 will notify registered players by SMS to their registered Pakistani mobile number, by email where provided, or by a prominent notice on the dk66 platform upon login. We will give at least 7 days' notice before any material change takes effect.

Your continued use of the dk66 platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the updated policy. If you do not accept the updated Privacy Policy, you must cease using the platform and may request account closure in accordance with the dk66 Terms & Conditions.

Contact & Complaints

For all privacy-related queries, data subject access requests, or concerns about how dk66 handles your personal data, please contact us through the following channels:

• Email: [email protected] — Subject: "Data Privacy Request"
• Live Chat: Available 24/7 on the dk66 platform — average response time under 3 minutes.

If you are not satisfied with dk66's response to a privacy complaint, you have the right to lodge a complaint with the supervisory authority designated under the dk66 gaming licence or with a data protection authority in your jurisdiction. dk66 will cooperate fully with any regulatory investigation into our data processing practices.

A full copy of this Privacy Policy in its current version is always accessible at dk66.bid/privacy-policy. The dk66 Terms & Conditions, which should be read alongside this Privacy Policy, are accessible at dk66.bid/terms-conditions.