k333 Privacy Policy – How We Protect Your Personal Data

This Privacy Policy is published by k333, the operator of the online gaming and sports betting platform at https://k333-khelo.com ("k333", "we", "us", "our"). k333 is Pakistan's leading locally-built online gaming platform, serving hundreds of thousands of registered players across Karachi, Lahore, Islamabad, Peshawar, Faisalabad, Quetta and every major city in the country.

For the purposes of this Privacy Policy, k333 acts as the data controller — meaning we are responsible for deciding how and why your personal data is processed. This policy applies to all personal data collected through your use of the k333 website, its mobile-optimised interface, customer support channels and any associated services.

This Privacy Policy should be read alongside k333's Terms and Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By using k333's services, you acknowledge that you have read and understood this Privacy Policy.

k333 collects only the personal data that is genuinely necessary to provide you with a safe, functioning and legally compliant gaming service. The categories of personal data we collect and hold are described in the table below.

k333 collects personal data through the following channels:

• Direct input at registration: When you create your k333 account, you provide your name, contact details, date of birth and preferred payment method. This information is entered directly by you.
• Automated collection during platform use: When you browse k333, place bets, play games or use any feature of the platform, our systems automatically log technical data including your IP address, device information, session duration and pages visited. This collection is standard practice for any online platform and is necessary for security monitoring and service delivery.
• Payment processor data: When you make a deposit or withdraw funds via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or bank card, your payment provider shares the transaction reference and masked account details with k333 for reconciliation and fraud prevention purposes. k333 does not receive your full payment credentials.
• Identity verification (KYC): If k333 requests identity documents as part of our Know Your Customer process, you provide these directly via our secure document upload system. Documents are processed and then securely archived or deleted per our retention schedule.
• Customer support interactions: Any information you share in live chat, by email or through our support ticketing system is recorded and stored as a communication record associated with your account.
• Cookies and similar tracking technologies: As described in Section 7 of this policy, k333 uses cookies and related technologies to collect certain technical and behavioural data automatically when you visit the platform.

k333 uses the personal data we hold about you for specific, legitimate purposes. We do not use your data for purposes beyond those described here without first obtaining your consent or having a clear legal basis for doing so.

• Account creation and management: Your registration data is used to create and maintain your k333 account, verify your identity, process your login and manage your account preferences.
• Processing deposits and withdrawals: Financial data is used to process PKR transactions through your chosen payment method (Easypaisa, JazzCash etc.), reconcile your account balance and produce transaction records.
• Identity and age verification: k333 is legally and ethically required to verify that all players are at least 18 years old and are who they say they are. KYC data is used exclusively for this purpose.
• Fraud prevention and security monitoring: Technical data including IP addresses and device fingerprints is analysed to detect suspicious activity, prevent multi-accounting, identify compromised accounts and protect the integrity of the platform.
• Responsible gaming monitoring: Gaming activity data is used to identify patterns that may indicate problem gambling behaviour, enabling k333's responsible gaming team to intervene proactively where appropriate.
• Customer support: Your contact and communications data is used to identify you when you contact k333 support and to resolve your queries efficiently and accurately.
• Legal and regulatory compliance: k333 is required to maintain certain records for anti-money laundering, tax reporting and other legal compliance purposes. These obligations override your data deletion requests in specific circumstances.
• Platform improvement: Anonymised and aggregated technical and gaming activity data is used to improve k333's platform performance, game selection and user experience for Pakistani players.
• Marketing communications: Where you have opted in, your contact data is used to send you promotional emails and SMS messages about k333 offers, new games and events relevant to Pakistani players. You can opt out at any time.

k333 processes your personal data under one or more of the following legal bases depending on the purpose:

• Contract performance: Processing your registration data, deposits, withdrawals and account management is necessary to perform the service contract between you and k333. Without this processing, k333 cannot provide you with its services.
• Legitimate interests: Fraud detection, security monitoring, responsible gaming analysis and platform improvement are carried out under k333's legitimate interest in operating a safe and fair platform. These legitimate interests are balanced against your privacy rights.
• Legal obligation: Identity verification, transaction record-keeping and anti-money laundering monitoring are required by applicable law. k333 must carry out this processing regardless of your preferences.
• Consent: Marketing communications are sent only where you have given explicit consent at registration or subsequently via your account settings. This consent is freely given and can be withdrawn at any time.

k333 does not sell, rent or trade your personal data to any third party for their own marketing purposes. We share your data only with the following categories of third party and only to the extent necessary for the stated purpose:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT operators and card payment processors receive the minimum data necessary to process your transactions. These providers operate under their own privacy policies and are bound by contractual obligations to protect your data.
• Identity verification providers: Third-party KYC providers may process identity documents on k333's behalf for verification purposes. These providers are data processors acting under k333's instructions and are contractually prohibited from using your data for any other purpose.
• Game software providers: Where k333 offers games from third-party developers (live casino providers, crash game providers etc.), these providers may receive technical session data to deliver the game to your device. This data does not include your financial or identity information.
• Fraud and security services: Anti-fraud technology providers may process IP addresses, device fingerprints and behaviour patterns under a data processing agreement with k333 for the sole purpose of fraud prevention.
• Legal and regulatory authorities: k333 will disclose personal data to law enforcement, financial intelligence units or regulatory bodies when legally required to do so. k333 does not voluntarily disclose player data to any government authority without a legal order.
• Professional advisors: k333's legal advisors, auditors and accountants may access limited data where this is necessary for professional services. All such parties are bound by professional confidentiality obligations.

k333 uses cookies and similar technologies on its website and mobile-optimised interface. A cookie is a small text file placed on your device when you visit a website. Cookies help k333 remember your preferences, keep you logged in during a session and understand how you use the platform.

The following categories of cookie are used on k333:

• Strictly necessary cookies: These cookies are essential for the k333 platform to function. They manage your login session, maintain your account security token, remember your language preferences and facilitate the payment process. These cookies cannot be switched off as they are technically required. No personal data collected by strictly necessary cookies is used for profiling.
• Performance and analytics cookies: These cookies collect anonymised data about how Pakistani players use k333 — which pages are most visited, how long sessions last, which games are most popular. This data is used in aggregate to improve platform performance and does not identify individual users.
• Functionality cookies: These cookies remember your preferences — display settings, saved bet selections, preferred payment method — to give you a more personalised experience on return visits.
• Marketing cookies: Where you have given consent, marketing cookies track your activity across sessions to enable k333 to show you relevant promotional messages. You can withdraw this consent via your account settings or by adjusting your browser cookie preferences at any time.

Most browsers allow you to view, manage and delete cookies through their settings panel. Note that disabling strictly necessary cookies will prevent k333 from functioning correctly — you will not be able to log in or place bets if essential session cookies are blocked.

Data security is one of k333's highest operational priorities. Pakistani players trust k333 with sensitive personal and financial information, and we take that responsibility very seriously. The following technical and organisational measures are in place to protect your data:

• 256-bit SSL encryption: All data transmitted between your device and k333's servers is encrypted using industry-standard 256-bit TLS/SSL. This means that your login credentials, payment details and personal information are unreadable to any third party who intercepts the data in transit.
• Access control: k333's internal systems operate on a strict need-to-know access model. Only staff members whose specific job function requires access to personal data are granted permission to view it. All internal data access is logged and regularly audited.
• Secure server infrastructure: Player data is stored on servers with physical and logical security controls. Servers are protected by firewalls, intrusion detection systems and regular vulnerability assessments.
• Password hashing: k333 does not store your password in plain text. Your password is stored as a one-way cryptographic hash, meaning that even k333 staff cannot view your password. If you forget your password, a reset is issued — not a retrieval.
• Two-factor authentication (2FA): k333 offers optional two-factor authentication on all accounts. Players are strongly encouraged to enable 2FA via their account security settings.
• Regular security audits: k333 conducts regular internal and external security audits to identify and remediate vulnerabilities. Any identified issues are prioritised and addressed according to their severity.
• Staff data protection training: All k333 staff who handle personal data receive regular training on data protection obligations, safe data handling practices and incident response procedures.

k333 does not keep your personal data for longer than is necessary for the purpose for which it was collected, subject to any legal obligation to retain records for a longer period.

• Active account data: While your k333 account is open and active, all account data is retained in full to enable you to use the platform, access your history and receive support.
• Closed account data: Following account closure (whether at your request or by k333), your identity, contact and financial records are retained for a period of five years to meet anti-money laundering, fraud prevention and legal compliance obligations.
• Gaming activity records: Your bet history, game sessions and transaction records are retained for a minimum of three years from the date of the activity. These records are accessible to you via account history requests to support.
• Customer support communications: Live chat transcripts and support emails are retained for two years from the date of the interaction for quality assurance and dispute resolution purposes.
• Identity documents (KYC): Identity documents submitted for verification are retained for the duration of your account plus five years following closure.
• Marketing data: Where you have opted out of marketing, a minimal record of your opt-out is retained indefinitely to ensure you are not accidentally re-enrolled. No other marketing data is retained after opt-out.

At the end of each retention period, k333 securely deletes or anonymises the relevant personal data. Anonymised and aggregated data from which you cannot be identified may be retained indefinitely for statistical analysis.

As a k333 player and the subject of the personal data we hold about you, you have the following rights regarding your data. To exercise any of these rights, contact k333 support at support@k333-khelo.com with "Privacy Request" in the subject line and your registered account username.

k333's services are strictly for adults aged 18 years and above. k333 does not knowingly collect personal data from anyone under the age of 18. If you believe that a minor has created a k333 account or provided personal data to k333 without parental consent, please contact us immediately at support@k333-khelo.com and we will investigate and delete the data without delay.

Adults who share a device with minors are responsible for ensuring that their k333 account is protected with a strong password and that minors do not have unsupervised access to the device when the k333 platform is open or accessible. k333 accepts no liability for data collected as a result of a minor accessing an adult's account where reasonable security precautions were not in place.

k333 may send you promotional emails, SMS messages and on-platform notifications about bonuses, new games, events and offers relevant to Pakistani players — but only where you have given your explicit consent to receive them. You can set your marketing preferences during registration and change them at any time via your k333 account settings.

• Withdrawing marketing consent does not affect your ability to use k333's services in any way.
• Even if you opt out of marketing, k333 may still send you service-related communications — for example, notifications about changes to these policies, account security alerts, withdrawal confirmations or important account updates. These communications are not marketing and cannot be opted out of while your account is active.
• k333 does not share your contact data with third-party marketing organisations for their own promotional use under any circumstances.
• To opt out of all marketing from k333, click the unsubscribe link in any promotional email, reply STOP to any SMS, or visit your account notification settings and disable all marketing preferences.

k333 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or platform services. When we make material changes — changes that meaningfully affect how we use your personal data or your rights regarding it — we will notify you via email to your registered address and display a prominent notice on the k333 website for at least seven days before the new policy takes effect.

Minor changes — for example, clarifications of existing practices, corrected typos or updated contact details — will be made without individual notification. The effective date at the top of this page is updated with every revision. We encourage you to review this policy periodically so you are always informed about how k333 handles your personal data.

Continued use of k333's platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you should close your account before the effective date.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a complaint about how k333 has handled your personal data, please get in touch. k333's support team includes staff trained specifically on data protection queries for Pakistani players.

• Email: support@k333-khelo.com — use subject line "Privacy Request" or "Data Complaint"
• Live Chat: Available 24/7 via the k333 website — ask to be transferred to the data protection team for formal requests
• Response time: All privacy queries acknowledged within 48 hours; full response within 30 days

If you are not satisfied with k333's response to your privacy complaint, you have the right to escalate your complaint to the relevant data protection authority. k333 will provide you with the appropriate escalation contact details upon request.