Privacy Policy — KB66

Introduction

This Privacy Policy ("Policy") describes how KB66 ("the Platform", "we", "us", "our") collects, processes, stores and protects personal data in connection with the operation of the KB66 online sports betting and casino platform available at kb66.cam.

KB66 is committed to protecting the privacy of all users ("you", "your", "User") who interact with the Platform — including users in Pakistan and other eligible jurisdictions. We process personal data only for specified, explicit and legitimate purposes and in accordance with applicable data protection law.

By registering an account on KB66 or otherwise using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with how your data is processed as described in this Policy, you should not use the Platform.

Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — Any information that relates to an identified or identifiable natural person, including but not limited to name, email address, date of birth, national identity number, IP address and financial details.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, disclosure and deletion.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, KB66 is the data controller.
• "Data Processor" — A third party that processes personal data on behalf of the data controller under a contractual arrangement.
• "KYC Data" — Identity verification documents and information submitted by users as part of the Know Your Customer process, including CNIC copies, selfies and proof of payment method.
• "Cookie" — A small text file placed on your device by a website to store information about your session, preferences or browsing behaviour.
• "Consent" — A freely given, specific, informed and unambiguous indication of the data subject's wishes by which they signify agreement to the processing of their personal data.
• "Data Subject" — The natural person whose personal data is being processed — in this context, the KB66 user.

Data Controller

KB66 operates as the data controller in respect of personal data collected and processed through the Platform at kb66.cam. The Platform's data processing activities are conducted in accordance with the licensing jurisdiction under which KB66 operates.

KB66 is not affiliated with, endorsed by, or subject to the data protection oversight of the Government of Pakistan, the PTA, the State Bank of Pakistan or any Pakistani provincial authority. References to Pakistani cities, payment channels (including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah) and sporting events throughout the Platform are contextual and do not imply regulatory relationship or local institutional partnership.

If you have questions about how your data is controlled or processed, please contact us using the details in Section 16.

Data We Collect

KB66 collects the following categories of personal data in connection with the operation of the Platform:

How We Collect Data

KB66 collects personal data through the following means:

• Directly from you: When you register an account, complete the KYC process, make a deposit or withdrawal, contact our support team, participate in a promotion or submit any form on the Platform.
• Automatically: Through cookies, server logs, device fingerprinting and similar technologies when you access and use the Platform. This includes IP address, device identifiers, session data and browsing behaviour on the Platform.
• From third-party payment processors: Transaction confirmation data and payment status information received from payment processing partners used by the Platform.
• From identity verification partners: Where KB66 uses third-party KYC service providers to authenticate your identity documents, those partners may share verification results and associated data with KB66.
• From fraud prevention and security services: Data shared by fraud detection services used to protect the Platform against fraudulent activity, chargebacks or multi-accounting.

Data Processing & Legal Basis

KB66 processes personal data only where a valid legal basis exists for doing so. The primary legal bases relied upon are as follows:

• Contractual Necessity: Processing required to perform our contractual obligations to you — including creating and managing your account, processing deposits and withdrawals, settling bets, and providing customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements and regulatory reporting duties under the operator's license.
• Legitimate Interests: Processing necessary for the purposes of our legitimate interests, where those interests are not overridden by your rights — including fraud prevention, platform security, responsible gambling monitoring, business analytics and dispute resolution.
• Consent: Processing based on your freely given, informed consent — primarily in the context of marketing communications, certain cookies and optional personalisation features. You may withdraw consent at any time without affecting prior processing.

How We Use Your Data

KB66 uses personal data for the following purposes:

1. Account Management: Creating, maintaining, and administering your KB66 account, including authentication, password resets and account settings management.
2. Service Delivery: Processing bets and wagers, settling game outcomes, crediting winnings and processing deposit and withdrawal requests.
3. Identity Verification (KYC): Verifying your identity to comply with regulatory requirements, to confirm account ownership before withdrawal processing and to prevent fraudulent use of the Platform.
4. Fraud Prevention & Security: Detecting and preventing suspicious activity, unauthorised account access, multi-accounting, money laundering and other forms of fraudulent or abusive behaviour.
5. Responsible Gambling: Monitoring betting patterns, enforcing self-imposed limits, administering self-exclusion requests and identifying users who may require responsible gambling interventions.
6. Customer Support: Handling support enquiries, resolving disputes, responding to formal complaints and maintaining records of communications for quality assurance purposes.
7. Legal Compliance: Meeting obligations under applicable law, including responding to lawful requests from regulatory authorities, law enforcement or courts with jurisdiction over the operator.
8. Marketing (Consent-Based): Sending promotional offers, bonus notifications and platform updates where you have provided consent. You may opt out at any time.
9. Platform Improvement: Analysing usage patterns, session data and feedback to improve Platform performance, user experience and feature development.

Data Sharing

KB66 does not sell, rent or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of third parties, only as strictly necessary:

• Payment Processing Partners: Third-party payment processors used to facilitate deposit and withdrawal transactions. These partners receive only the data required to execute the relevant transaction. Payment processors are bound by their own privacy and security obligations. No payment processor named contextually on this Platform (including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah) is affiliated with or endorses KB66.
• Identity Verification Providers: KYC and fraud prevention service providers who process identity documents and verification data on our behalf under data processing agreements.
• Technology and Infrastructure Providers: Hosting, cloud storage, analytics and security service providers who process data on KB66's behalf under contractual data processing arrangements.
• Game Content Providers: Where technically necessary, limited session and transaction data may be shared with game content studios to facilitate game delivery, RNG auditing and dispute resolution.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order or the operator's regulatory obligations, KB66 may disclose personal data to relevant authorities without prior notice to the user.
• Professional Advisors: Legal counsel, auditors and compliance consultants who are bound by professional confidentiality obligations.

Data Retention

KB66 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:

• Active Account Data: Personal data associated with an active account is retained for the duration of the account's existence and for the period required after closure to meet regulatory, legal and dispute-resolution obligations.
• KYC Documents: Identity verification documents are retained for the period mandated by the operator's license jurisdiction and applicable anti-money laundering regulations, which may extend significantly beyond account closure.
• Financial Transaction Records: Deposit, withdrawal and wagering records are retained for the period required by the operator's regulatory obligations, typically a minimum of five years after the transaction date.
• Support Communications: Chat transcripts and email correspondence are retained for a reasonable period to support dispute resolution and quality review, typically a minimum of two years.
• Marketing Data: Where you have consented to marketing communications, your preferences and contact details are retained until you withdraw consent or request deletion, subject to any overriding legal obligation.
• Technical / Log Data: Server logs and device data are typically retained for shorter periods (weeks to months) in line with security and fraud monitoring needs.

When data is no longer required, it is securely deleted or anonymised in accordance with applicable data protection standards.

Cookies & Tracking Technologies

KB66 uses cookies and similar technologies (including local storage and session tokens) to operate the Platform, maintain session states, remember preferences and analyse usage patterns. The following cookie categories are used:

• Strictly Necessary Cookies: Essential to Platform functionality. These enable login sessions, security tokens and cashier operations. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences and session configuration. Disabling these may affect your experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform — including pages visited, session duration and navigation paths — to help KB66 improve performance and content.
• Security Cookies: Used for fraud detection, bot prevention and account security monitoring.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the availability and functionality of parts of the Platform. KB66 does not use cookies to track your activity on third-party websites.

Data Security

KB66 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction or alteration. These measures include:

• SSL/TLS encryption across all Platform pages and data transmission channels.
• Hashed storage of passwords — KB66 does not store passwords in plain text.
• Two-factor authentication (2FA) option available for account login.
• Access controls limiting internal staff access to personal data on a need-to-know basis.
• Regular security reviews and vulnerability assessments of Platform infrastructure.
• Secure deletion procedures for data that has reached its retention end-point.

No online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights, KB66 will take appropriate steps in accordance with applicable breach notification obligations.

You are responsible for maintaining the security of your account credentials. KB66 strongly recommends using a unique, strong password and enabling 2FA. If you suspect unauthorised access to your account, contact support immediately.

User Rights

Subject to applicable law and where technically feasible, you hold the following rights in relation to the personal data KB66 processes about you. To exercise any of these rights, please contact our support team using the details in Section 16.

KB66 will respond to data rights requests within a reasonable period in accordance with applicable law. We may require identity verification before fulfilling a request to protect against fraudulent access.

Minors & Age Restrictions

KB66 is strictly for users aged 18 or older — or the higher minimum age required by the operator's license jurisdiction. KB66 does not knowingly collect or process personal data from minors.

If KB66 becomes aware that personal data has been collected from a person who is below the minimum eligible age, that data will be deleted as soon as reasonably practicable and the associated account will be closed. Any winnings generated on such an account will be forfeited.

The 18+ requirement is a minimum access condition. It does not constitute a representation that gambling is legally permissible in Pakistan for any person of any age. Users are responsible for understanding and complying with applicable local law.

Cross-Border Data Transfers

KB66 operates internationally and your personal data may be transferred to and processed in countries other than Pakistan — including the jurisdiction in which KB66 holds its operating license, and the locations of its technology infrastructure and service providers.

Where personal data is transferred outside of your home jurisdiction, KB66 will take reasonable steps to ensure that appropriate safeguards are in place — such as contractual data protection clauses between KB66 and its data processors — to protect the data in a manner consistent with this Policy.

By using the Platform, you acknowledge that your personal data may be processed in jurisdictions that may not provide the same level of data protection as the laws of your home country. If you have concerns about cross-border data transfers, please contact our support team.

Changes to This Privacy Policy

KB66 reserves the right to amend, update or replace this Privacy Policy at any time. When material changes are made, KB66 will endeavour to notify registered users by email or via a prominent notice on the Platform. The "Last Reviewed" date at the top of this document will be updated to reflect the date of the most recent revision.

Your continued use of the Platform after the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the changes, you should cease using the Platform and may close your account by contacting support.

We encourage you to review this Policy periodically to stay informed about how KB66 handles your personal data.

Contact Us

If you have questions, concerns or requests relating to this Privacy Policy, or wish to exercise any of the data rights described in Section 12, please contact KB66 using the details below:

• Support Email — [email protected] (plain text only — not a clickable link)
• Subject Line Recommended — "Privacy Request" or "Data Subject Request" for faster routing
• Live Chat — Available 24/7 via the on-site support widget (operator-stated availability; may vary)
• Support Language — English; Urdu available on request
• Response Time — Data rights requests will be acknowledged promptly and addressed within a reasonable period in accordance with applicable law (typically within 30 days where law requires)

For questions specifically relating to account terms, bonus conditions or platform rules, please refer to our Terms & Conditions. For responsible gambling tools and support resources, please visit our Responsible Gambling page.