k33 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how k33 ("k33," "we," "us," "our") collects, uses, stores, and protects personal data relating to individuals ("you," "User," "Player") who access or use the k33 platform at k33.club, including all associated gaming products such as cricket betting, live casino, slots, and any promotional services.

k33 is committed to protecting your privacy and handling your personal data responsibly. This Policy applies to all personal data processed in connection with your use of k33, regardless of the device or network from which you access the platform. By registering a k33 account or otherwise using our services, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy.

2. Data Controller

k33 operates as the data controller for personal data collected through k33.club. As data controller, k33 determines the purposes and means of processing your personal data. Where k33 engages third-party service providers to process data on our behalf, those providers act as data processors under contractual obligations that restrict their use of your data to the specific services they provide to k33.

For all data protection enquiries, please contact us at [email protected] (plain text – not a clickable link).

3. Personal Data We Collect

3.1 Registration and Identity Data

When you create a k33 account, we collect your full legal name, date of birth, email address, mobile number, and residential address. For Pakistani players, this includes your CNIC number as required for identity verification (KYC). This data is necessary to establish your account, verify your identity, and comply with applicable regulatory requirements.

3.2 Financial Data

k33 collects records of your deposits, withdrawals, and transaction history. Payment method identifiers (e.g., the mobile number associated with your JazzCash or Easypaisa account, or masked bank account details for HBL, UBL, Meezan Bank, or Bank Alfalah) are stored to facilitate withdrawals and comply with anti-money laundering obligations. k33 does not store full payment credentials such as complete bank account numbers.

3.3 Gaming Activity Data

k33 records your betting history, game session data, wagering patterns, win/loss records, and bonus activity. This data is used to maintain accurate account records, calculate payouts, administer promotions, and monitor for responsible gaming indicators.

3.4 Technical and Device Data

k33 automatically collects technical data when you access the platform, including your IP address, device type and model, operating system, browser type, session timestamps, and approximate geolocation derived from your IP address. This data is used for fraud prevention, security monitoring, and platform performance optimisation.

3.5 Communications Data

If you contact k33 support via live chat or email, we retain records of those communications, including the content of messages and any attachments you submit. This data is used to resolve your query, maintain service quality records, and train support staff.

3.6 KYC Documentation

As part of our identity verification process, k33 may collect copies of government-issued identification documents (CNIC), proof of address documents, and in some cases, source of funds documentation. These documents are stored securely and accessed only by authorised KYC personnel.

4. How We Use Your Data

k33 uses your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your k33 account, including login authentication, password resets, and account settings updates.
• Service Delivery: Processing bets, resolving casino and slots sessions, crediting winnings, and administering promotional offers.
• Payment Processing: Executing deposits and withdrawals via approved Pakistani payment methods in PKR.
• Identity Verification (KYC): Verifying your identity and age (18+) as required by regulatory obligations and our Terms & Conditions.
• Fraud Prevention and Security: Detecting and preventing unauthorised account access, money laundering, collusion, and other fraudulent or prohibited activity.
• Responsible Gaming: Monitoring gaming behaviour for signs of problem gambling, enforcing self-exclusions and deposit limits, and contacting players where intervention may be appropriate.
• Customer Support: Responding to enquiries, resolving disputes, and maintaining communication records.
• Platform Improvement: Analysing aggregate, anonymised usage data to improve platform performance, game selection, and user experience.
• Legal Compliance: Fulfilling obligations under applicable law, including responding to lawful requests from regulatory or law enforcement authorities.

5. Legal Basis for Processing

k33 processes your personal data on the following legal bases:

• Contractual Necessity: Processing necessary to perform the contract between you and k33, including account creation, gaming services, and payment processing.
• Legal Obligation: Processing required to comply with applicable law, including KYC and anti-money laundering obligations.
• Legitimate Interests: Processing necessary for k33's legitimate interests, including fraud prevention, security, responsible gaming monitoring, and platform improvement, where such interests are not overridden by your rights.
• Consent: Where k33 relies on your consent for specific processing (e.g., certain marketing communications), you may withdraw consent at any time by contacting support.

6. Sharing Your Data

k33 does not sell or rent your personal data to third parties. We may share your data with the following categories of recipient under appropriate safeguards:

• Game Content Providers: To the extent necessary to deliver live casino or slot sessions, certain session data (e.g., player token, session ID) is shared with certified game studios including Evolution Gaming, Pragmatic Play, and Ezugi. These providers process data under their own data protection frameworks and k33's contractual requirements.
• Payment Service Providers: Transaction data is shared with JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah to execute deposits and withdrawals. Payment processors handle data under their own regulatory and security obligations.
• KYC and Fraud Service Providers: k33 may use third-party identity verification and fraud screening services. These providers process only the minimum data necessary for the specific verification or screening task.
• Regulatory and Law Enforcement Authorities: k33 may disclose personal data to competent authorities where required by applicable law, court order, or regulatory demand. In some cases, k33 may be legally prohibited from notifying you of such disclosures.
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all of k33's assets, personal data may be transferred to a successor entity, subject to equivalent privacy protections.

7. International Data Transfers

k33 may transfer your personal data to servers or service providers located outside Pakistan in connection with the provision of gaming services, KYC processing, or fraud prevention. Where such transfers occur, k33 implements appropriate safeguards, including contractual protections, to ensure your data receives an adequate level of protection consistent with applicable data protection principles.

8. Data Retention

k33 retains personal data for as long as your account is active and for a further period as required by applicable legal and regulatory obligations. Specifically:

• Account and identity data is retained for a minimum of five (5) years following account closure, as required by anti-money laundering regulations.
• Transaction records are retained for a minimum of five (5) years.
• Gaming activity records are retained for three (3) years following the last relevant activity.
• KYC documentation is retained for the period required by applicable law and then securely deleted.
• Customer support communications are retained for two (2) years.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

9. Cookies and Tracking Technologies

k33 uses cookies and similar local storage technologies for the following purposes:

• Session Cookies: Essential cookies that maintain your authenticated session while you are logged into k33. These are deleted when you close your browser.
• Security Cookies: Cookies used for CSRF protection and fraud prevention. These are essential to platform security and cannot be disabled without affecting functionality.
• Analytics Cookies: k33 uses anonymised analytics to understand aggregate platform usage patterns and improve user experience. These cookies do not identify you personally.
• Preference Cookies: Cookies that remember your language and display preferences across sessions.

k33 does not use third-party advertising cookies or cross-site tracking. You can manage or delete cookies via your browser settings, though disabling essential session cookies will affect your ability to remain logged into k33.

10. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by k33:

• Right of Access: You may request a copy of the personal data k33 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to retention obligations.
• Right to Restriction: You may request that k33 restrict processing of your data in certain circumstances.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format where processing is based on consent or contractual necessity.
• Right to Object: You may object to processing based on legitimate interests at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact k33 at [email protected]. k33 will respond to verified requests within thirty (30) days. k33 may require verification of your identity before processing a data request.

11. Security Measures

k33 implements a range of technical and organisational security measures to protect your personal data, including:

• 256-bit SSL/TLS encryption for all data in transit between your device and k33 servers.
• AES-256 encryption for personal data stored at rest.
• Role-based access controls restricting staff access to personal data on a need-to-know basis.
• Multi-factor authentication for administrative system access.
• Regular security audits and penetration testing of platform infrastructure.
• Incident response procedures for suspected data breaches, including notification to affected players and relevant authorities where required by law.

Despite these measures, no internet-based system is completely immune to security risks. k33 urges players to use strong, unique passwords for their k33 account and to enable two-factor authentication.

12. Children and Minors

k33 strictly prohibits individuals under the age of 18 from registering or using the platform. k33 does not knowingly collect personal data from minors. If k33 becomes aware that a minor has registered an account, that account will be immediately suspended, any funds will be returned following identity verification, and all associated personal data will be deleted in accordance with our data retention obligations.

If you believe a minor has registered a k33 account, please notify us immediately at [email protected].

13. Changes to This Policy

k33 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable law. Material changes will be communicated to registered players via email or in-platform notification at least seven (7) days before taking effect. The current version of this Policy is always available at k33.club/privacy-policy. Your continued use of k33 following the effective date of any update constitutes acceptance of the revised Policy.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or k33's data practices, please contact us:

Email: [email protected]

Please include "Privacy Request" in the subject line of your message so it is routed to the appropriate team. k33 support is available 24/7 and aims to acknowledge all privacy-related enquiries within 48 hours.