CK66 Privacy Policy

This Privacy Policy ("Policy") describes how CK66 ("the Company", "we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("User", "Player", "you") who access or use the CK66 online gaming platform, including the website located at ck66.cam and all associated interfaces and services (collectively, the "Platform").

This Policy applies to all personal data collected through your registration and use of the CK66 Platform, including data provided directly by you, data collected automatically through your use of the Platform, and data obtained from third parties in connection with identity verification, payment processing, and fraud prevention.

This Policy should be read alongside the CK66 Terms & Conditions and Responsible Gaming Policy, all of which together govern the relationship between you and CK66. In the event of any conflict between this Policy and the Terms & Conditions on matters relating to personal data, this Policy shall prevail.

CK66 operates a platform targeted at eligible adult players in Pakistan. All personal data collected from Pakistani users is handled in accordance with applicable data protection principles, including the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, and integrity and confidentiality.

CK66 acts as the data controller in respect of all personal data collected and processed through the Platform. As data controller, CK66 is responsible for determining the purposes and means of processing your personal data and for ensuring that such processing is carried out in compliance with applicable data protection law and the terms of this Policy.

Where CK66 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, and analytics platforms — those providers act as data processors under written agreements that require them to process data solely on CK66's instructions and to maintain appropriate security measures.

CK66 collects the following categories of personal data in connection with your use of the Platform:

CK66 does not collect or store full payment card numbers. Where payment card data is referenced, it is tokenised by the relevant payment provider and CK66 retains only a masked reference for account reconciliation purposes.

CK66 collects personal data through the following channels and mechanisms:

• Direct interactions: Data you provide when registering an account, completing your player profile, uploading KYC documents, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically through cookies, pixel tags, web beacons, and server log files when you visit or interact with the Platform. This data is collected regardless of whether you are logged into your account.
• Third-party sources: Identity and fraud-screening data received from licensed KYC verification bureaus and AML screening providers. Payment transaction data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other authorised payment processors. Publicly available data where relevant to fraud prevention or regulatory compliance.
• Responsible gaming interactions: Data generated when you set deposit limits, request cooling-off periods, or activate self-exclusion. This data is processed as a special category of operational data essential to our responsible gaming obligations.

CK66 processes your personal data only where a valid legal basis exists. The following table sets out the primary purposes for which we process personal data and the corresponding legal basis:

Where CK66 relies on legitimate interests as a legal basis, we have assessed that our interests are not overridden by your fundamental rights and freedoms, taking into account the nature of the data, the context of processing, and the reasonable expectations of players using an online gaming platform.

CK66 does not sell your personal data to any third party. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate confidentiality obligations:

In the event of a business reorganisation, merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to that entity's agreement to process the data in accordance with this Policy.

CK66 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including compliance with applicable legal, regulatory, and reporting obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with AML regulatory requirements.
• Financial and transaction data: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years from the date of verification, or longer where required by applicable regulatory authority.
• Gaming activity data: Retained for a minimum of three (3) years from the date of each gaming session, and longer where required for dispute resolution or regulatory purposes.
• Marketing preference data: Retained until you withdraw consent for marketing communications, plus a reasonable administrative period to process opt-outs.
• Support communications: Retained for a minimum of two (2) years from the date of the most recent communication in a support thread.
• Self-exclusion records: Retained indefinitely to prevent re-registration by self-excluded individuals, in accordance with responsible gaming best practice.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

CK66 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the CK66 Platform is encrypted using 128-bit SSL/TLS protocols. This applies to account login, data submission, and all financial transactions.
• Access Controls: Access to personal data within CK66's systems is restricted on a strict need-to-know basis. CK66 employees are granted access only to the specific data categories required to perform their designated functions.
• Password Security: Player passwords are stored in hashed form using industry-standard cryptographic algorithms. CK66 staff members cannot view or retrieve your password in plain text.
• Two-Factor Authentication: CK66 supports two-factor authentication (2FA) for player accounts. We strongly encourage all players to enable 2FA to provide an additional layer of account protection.
• Penetration Testing & Audits: The Platform undergoes regular independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: CK66 maintains a documented data breach response procedure. In the event of a breach that is likely to result in risk to your rights and freedoms, we will notify you without undue delay and take all necessary remedial steps.

While CK66 takes all reasonable steps to protect your personal data, no transmission over the internet or electronic storage system is completely immune to security risk. You are responsible for maintaining the security of your own account credentials and for notifying CK66 immediately at [email protected] if you suspect any unauthorised access to your account.

CK66 uses cookies and similar tracking technologies to enhance your experience on the Platform, to analyse usage patterns, and to deliver relevant content. The following categories of cookies are used:

You may manage your cookie preferences through your browser settings at any time. Please note that disabling certain categories of cookies may affect the functionality of the Platform. CK66 does not use cookies to serve third-party advertising on external websites.

With your explicit consent, CK66 may send you marketing communications about promotions, bonuses, new games, and platform features. These communications may be delivered by email or in-platform notification, depending on your contact preferences.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences within your CK66 account settings.
• Clicking the unsubscribe link included in any marketing email.
• Contacting support at [email protected] with the subject line "Marketing Opt-Out – [Your Username]".

Withdrawal of marketing consent will be processed within 5 business days. Please note that opting out of marketing does not affect service notifications, which are sent as part of your account agreement and cannot be disabled while your account is active.

CK66 will never send marketing communications to any player who has activated a self-exclusion or cooling-off restriction, regardless of that player's historical consent status.

CK66 operates a strict 21+ age policy. The Platform is not intended for and does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the CK66 registration and KYC process, and all players are required to confirm their age at the point of registration.

In the event that CK66 identifies or is notified that a user under the age of 21 has registered on the Platform:

• The account will be suspended immediately and permanently.
• All associated funds will be frozen pending review.
• Any winnings accrued through the account will be voided.
• All personal data associated with the account will be reviewed, and data collected in violation of our age policy will be securely deleted as soon as practicable following the closure of any necessary investigation.

If you are a parent or guardian and believe that your child may have registered on the CK66 Platform, please contact us immediately at [email protected] so that the matter can be investigated and resolved without delay.

Subject to applicable law and certain legal exceptions, you have the following rights in respect of your personal data held by CK66:

To exercise any of the above rights, please contact CK66 at [email protected] with the subject line "Data Rights Request – [Your Username]". We may need to verify your identity before processing your request. We will respond within 30 days; where a request is complex or we receive multiple requests from you simultaneously, the response period may be extended by a further 60 days, with notice provided to you of the extension and its reason.

As an internationally operated gaming platform, CK66 may transfer your personal data to service providers and partners located outside of Pakistan. Such transfers may occur in connection with cloud infrastructure hosting, game software provision, and fraud screening services.

Where personal data is transferred outside of Pakistan, CK66 implements appropriate safeguards to ensure that the data continues to receive a level of protection consistent with this Policy and applicable data protection standards. These safeguards include:

• Transfers to jurisdictions that maintain adequate data protection frameworks recognised under applicable international standards.
• Standard contractual clauses or equivalent data transfer mechanisms incorporated into agreements with third-party recipients.
• Data processing agreements requiring third-party processors to implement and maintain appropriate technical and organisational security measures.

You may request information about the specific safeguards in place for international data transfers by contacting us at [email protected].

CK66 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made to this Policy, we will notify registered players by email to the address on record and by posting a prominent notice on the Platform prior to the effective date of the revised Policy.

Non-material or administrative amendments — such as corrections to formatting, grammar, or cross-references — may be made without individual notice. The effective date displayed at the top of this Policy will be updated to reflect the date of any revision.

Your continued use of the CK66 Platform following the effective date of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree to the revised Policy, please cease using the Platform and contact support to arrange account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by CK66, please contact us through the following channel:

If you are not satisfied with CK66's response to your privacy concern, you have the right to escalate your complaint to the data protection supervisory authority or gaming regulatory body applicable to your jurisdiction. CK66 will cooperate fully with any regulatory investigation into the handling of player personal data.

For urgent matters — including suspected unauthorised access to your account or a potential data breach affecting your personal data — please contact [email protected] immediately so that we can take prompt action to investigate and mitigate any harm.