Privacy Policy

1Introduction

hk666 ("we", "us", "our", "the Platform") operates an online gaming and sports betting information service accessible at hk666.cam. As part of delivering that service, we collect, process and store personal data relating to our registered users ("Players") and visitors to the Platform.

This Privacy Policy sets out, in clear and structured terms, what personal data we collect, the lawful bases on which we process it, how long we retain it, with whom we share it, and what rights you hold as a data subject. This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which form part of the overall agreement governing your use of the Platform.

hk666 does not claim to be subject to Pakistani data-protection law specifically, nor does it represent that its data-processing activities have been approved by any Pakistani regulatory authority including the PTA, the State Bank of Pakistan or any provincial body. Players in Pakistan are encouraged to familiarise themselves with applicable local laws. This document does not constitute legal advice.

2Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, alteration or deletion.
• "Data Controller" means hk666, the entity that determines the purposes and means of processing personal data.
• "Data Processor" means a third party that processes personal data on behalf of hk666 under a data-processing agreement.
• "Player" / "User" means any individual who registers for, or accesses, the hk666 Platform.
• "KYC" means Know Your Customer — the identity and age verification process required by our operating licence and anti-money-laundering obligations.
• "Cookies" means small data files placed on your device by the Platform to enable functionality and analytics.
• "Sensitive Data" means personal data that warrants heightened protection, including financial details, government-issued identity documents and, where relevant, health information related to responsible gambling.

3Data We Collect

The categories of personal data we collect depend on your level of engagement with the Platform. The table below summarises the main data categories and the context in which they are collected:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs or biometric data beyond what is strictly required for KYC photo-matching purposes. Where KYC image data is collected, it is processed solely for identity verification and retained in accordance with Section 8 of this Policy.

4How We Collect Data

We collect personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC, making deposits or withdrawals, using responsible gambling tools or contacting support.
• Automated technologies: Technical and usage data collected automatically via cookies, server logs, analytics tools and device fingerprinting as you navigate the Platform.
• Third-party KYC providers: Identity verification results and document checks returned by our contracted KYC service providers.
• Payment processors: Transaction confirmation data and fraud-screening results from payment processing partners. References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah in this context are for familiarity only and do not imply those providers endorse gambling activities.
• Fraud and AML screening tools: Risk scores and flags generated by our contracted anti-money-laundering and fraud-detection systems.

5Data Processing & Lawful Basis

hk666 processes personal data only where a lawful basis exists for doing so. The primary lawful bases we rely upon are:

• Contractual necessity: Processing required to deliver the services you have contracted for — account management, game access, payments and support.
• Legal obligation: Processing required to comply with our licensing conditions, AML obligations, KYC requirements and any lawful order from a competent authority.
• Legitimate interests: Processing carried out for our legitimate business interests — including fraud detection, platform security, service improvement and responsible gambling monitoring — provided those interests are not overridden by your rights and freedoms.
• Consent: Where we rely on consent — for example, for optional marketing communications — we will obtain that consent clearly and separately, and you may withdraw it at any time without affecting the lawfulness of prior processing.

6How We Use Your Data

Personal data collected by hk666 is used for the following specific purposes:

• Account creation and management: Setting up, maintaining and securing your hk666 account and verifying your identity and age eligibility.
• Service delivery: Enabling access to games, betting markets, promotions and all other Platform features that form part of the contracted service.
• Payment processing: Facilitating deposits and withdrawals, reconciling transactions and maintaining accurate financial records denominated in PKR or the currency applicable to your account.
• Fraud prevention and AML compliance: Screening transactions and account activity for signs of fraud, money laundering or other financial crime as required by our licensing obligations.
• Responsible gambling monitoring: Identifying patterns of play that may indicate problem gambling and taking appropriate action, including contacting you proactively or applying protective measures to your account.
• Customer support: Responding to queries, resolving complaints and maintaining records of support interactions.
• Platform analytics and improvement: Understanding how Players navigate and use the Platform so we can improve design, performance and user experience.
• Marketing communications (consent-based only): Sending you information about promotions, bonus offers and Platform updates where you have provided explicit consent to receive such communications.
• Legal and regulatory compliance: Meeting obligations imposed by our operating licence, responding to lawful requests from regulatory or law-enforcement authorities and defending legal claims.

7Data Sharing

hk666 does not sell personal data to third parties. We share data only in the following circumstances and only to the extent necessary for the specified purpose:

• Payment processors: Transaction data shared with payment service providers solely to process deposits and withdrawals. These providers operate under data-processing agreements and may not use your data for their own purposes.
• KYC and identity verification providers: Identity documents and biometric images shared with contracted verification services to complete the KYC process required by our operating licence.
• AML and fraud screening services: Transaction and account data shared with fraud-detection and anti-money-laundering platforms to screen for financial crime risk.
• Game software providers: Limited technical and session data shared with licensed game studios to deliver game functionality and confirm bet settlement.
• Regulatory and law-enforcement authorities: Personal data disclosed in response to a lawful request, court order, regulatory requirement or investigation by a competent authority — to the extent required and no further.
• Group companies: Data may be shared within the hk666 operating group for internal administrative purposes, subject to the same privacy standards as this Policy.
• Professional advisers: Lawyers, auditors and insurers who require access to data in the course of providing professional services, bound by professional confidentiality obligations.

All third-party data processors are required to implement appropriate technical and organisational security measures and to process personal data only on our documented instructions.

8Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law or regulatory obligation. The general retention periods we apply are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by our AML and licensing obligations.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction to satisfy anti-money-laundering record-keeping requirements.
• KYC documents: Retained for the minimum period required by our licence jurisdiction's AML legislation, typically five (5) years from the end of the business relationship.
• Communications and support records: Retained for three (3) years from the date of the interaction, unless retention for a longer period is required for a legal claim or complaint.
• Responsible gambling records: Self-exclusion and limit-setting records are retained for the duration required to give effect to those tools and to comply with our responsible gambling obligations.
• Technical and usage data: Anonymised or aggregated analytics data may be retained indefinitely for platform improvement purposes. Non-anonymised technical logs are typically retained for thirteen (13) months.

When personal data is no longer required and no legal obligation requires its retention, we securely delete or anonymise it in accordance with our internal data-destruction procedures.

9Cookies & Tracking Technologies

hk666 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit the Platform. They serve the following functions:

• Strictly necessary cookies: Required for the Platform to function — for example, maintaining your login session, remembering your language preference and enabling secure transactions. These cannot be disabled without affecting core Platform functionality.
• Functional cookies: Used to remember your preferences and personalise your experience — for example, your preferred currency display or previously visited game categories.
• Analytics cookies: Used to collect aggregated, anonymised data about how Players use the Platform, helping us identify areas for improvement. Analytics data does not identify you personally.
• Fraud-prevention cookies: Used as part of our device fingerprinting and fraud-detection processes to identify unusual or suspicious account activity.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair your ability to use core Platform features including account login and payment processing.

10Your Rights

Subject to applicable law and to legitimate restrictions (for example, restrictions imposed by AML obligations or the need to protect third-party rights), you hold the following rights over your personal data:

• Right of access: You may request a copy of the personal data we hold about you, together with information about how it is processed.
• Right to rectification: You may request that we correct inaccurate or incomplete personal data held about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction: You may request that we restrict processing of your personal data in certain circumstances — for example, while a dispute about accuracy is resolved.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a structured, machine-readable copy of your data.
• Right to object: You may object to processing based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact our support team via the Live Chat in your account dashboard or by email at [email protected]. We aim to respond to all valid requests within thirty (30) calendar days. Complex or high-volume requests may take up to ninety (90) days; we will notify you if an extension is required.

11Data Security

hk666 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration or destruction. These measures include:

• TLS/SSL encryption for all data in transit between your device and our servers.
• Encryption of sensitive data fields at rest within our database infrastructure.
• Role-based access controls that limit internal access to personal data to employees and contractors with a documented need to access it.
• Multi-factor authentication requirements for staff accessing production systems that contain personal data.
• Regular penetration testing and vulnerability assessments of Platform infrastructure.
• Security incident detection, logging and response procedures with defined escalation paths.
• Data breach notification procedures that comply with the reporting obligations of our operating licence jurisdiction.

While we take data security seriously and apply substantial technical controls, no internet-based service can guarantee absolute security. You are responsible for keeping your own login credentials confidential and for notifying us immediately if you suspect unauthorised access to your account.

12International Data Transfers

As an internationally operating platform, hk666 may transfer personal data to, and process it in, countries outside the jurisdiction in which it was collected. This includes transfers to our operating licence jurisdiction, data centre locations and the countries in which our third-party processors operate.

Where personal data is transferred internationally, we ensure that appropriate safeguards are in place. These safeguards may include contractual clauses that require the recipient to provide a level of protection equivalent to that required in the originating jurisdiction, or reliance on adequacy decisions where applicable.

Pakistani players should be aware that their personal data is processed and stored on servers located outside Pakistan. By using the Platform, you acknowledge and consent to this international processing as part of the service delivery.

13Minors & Age Verification

hk666 is strictly intended for adults aged 18 years and above — or the higher minimum age required by the operator's licence jurisdiction. We do not knowingly collect personal data from individuals below the minimum age threshold.

Age verification is a mandatory component of the KYC process. All players are required to verify their age before making a first deposit or accessing real-money games. Where age verification cannot be completed satisfactorily, the account will be restricted or closed and any deposited funds will be returned through the original payment method.

If we discover that personal data has been collected from a minor in error, we will delete that data promptly and close the associated account. If you believe a minor has registered an account on the Platform, please contact our support team immediately at [email protected].

14Policy Amendments

hk666 reserves the right to amend this Privacy Policy at any time to reflect changes in law, our data-processing activities or best-practice standards. The review date displayed at the top of this page will be updated whenever a revision is made.

Where amendments are material — meaning they meaningfully affect your rights or the way we process your personal data — we will provide advance notice via a prominent notification on the Platform prior to the changes coming into effect. For minor or clarificatory changes, we may update the page without separate notice.

Your continued use of the Platform after any amendment takes effect constitutes acceptance of the revised Privacy Policy. If you do not accept the amended Policy, you should cease using the Platform and contact support to close your account.

15Contact & Data Protection Queries

If you have any questions, concerns or complaints about how hk666 processes your personal data, or if you wish to exercise any of the rights described in Section 10, please contact us through the following channels:

• Live Chat: Available 24/7 through your Account dashboard. Recommended for time-sensitive queries and the fastest route to a response.
• Email: [email protected] — for formal data-rights requests, privacy complaints and document submissions. Please mark the subject line clearly (e.g., "Data Access Request" or "Privacy Complaint"). Do not send copies of identity documents or financial data to this email address unless specifically requested by our team; use the secure in-account messaging system for sensitive document submission.

We aim to acknowledge all privacy-related communications within three (3) business days and to resolve requests within thirty (30) calendar days. Where a request is complex or where we are handling an unusually high volume of requests, we may extend this period to ninety (90) calendar days and will notify you accordingly.

Support is available in English and Urdu. For responsible gambling queries specifically, please visit our dedicated Responsible Gambling page or use the tools available directly within your account settings.