Privacy Policy — KK222 Platform

This Privacy Policy ("Policy") describes how KK222 ("we", "us", "our" or "the Platform") collects, uses, stores, shares and protects personal data submitted by or collected about users ("you", "your" or "User") who access and use the KK222 online gaming platform at https://kk222.cam and any associated interfaces or applications.

KK222 is an English-language online gaming information and entertainment platform serving users primarily in Pakistan. We are committed to handling your personal data responsibly, transparently and in accordance with the data protection standards applicable under the Operator's licensing framework.

This Policy should be read together with our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein, to the extent that consent forms the applicable legal basis.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including name, identification number, location data, online identifier or factors specific to that person's identity.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, the Operator of the KK222 Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of the Data Controller under a contractual arrangement.
• "KYC Data" means identity and age verification documents and associated biometric or photographic data collected for the purpose of Know Your Customer verification.
• "Cookies" means small text files placed on your device by the Platform to support functionality, analytics and session management.
• "User" means any individual who accesses the Platform, whether or not they have registered an account.
• "PKR" means Pakistani Rupee, the currency displayed within Platform interfaces for users in Pakistan.

The Data Controller responsible for your Personal Data is the Operator of the KK222 Platform, incorporated and licensed in its jurisdiction of operation. The Operator is responsible for ensuring that Personal Data is collected and processed in accordance with this Policy and with applicable data protection laws under its licensing framework.

Where third-party service providers (Data Processors) process Personal Data on our behalf — for example, payment gateway operators, identity verification service providers, cloud hosting providers or customer support software vendors — those providers act solely on our documented instructions and are bound by contractual data processing agreements that impose obligations equivalent to or greater than those set out in this Policy.

KK222 collects Personal Data through the following channels and in the following categories:

4.1 Data You Provide Directly

4.2 Data Collected Automatically

• Device & Technical Data: IP address, browser type and version, operating system, device identifiers and screen resolution.
• Usage Data: Pages visited, features used, session duration, click paths, game history and betting activity.
• Geolocation Data: Approximate geographic location derived from IP address, used for jurisdictional access controls and fraud prevention.
• Cookie Data: Session identifiers, preference data and analytics information collected via cookies and similar tracking technologies (see Section 10).

KK222 processes your Personal Data only where a lawful basis for doing so exists. The primary legal bases we rely upon are:

• Contractual Necessity: Processing required to perform the contract between you and KK222 — including account creation, transaction processing, identity verification and platform operation — is carried out on the basis that it is necessary for the performance of that contract.
• Legal Obligation: Certain processing activities are required by law, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, fraud prevention duties and record-keeping obligations imposed by the Operator's licensing authority.
• Legitimate Interests: We may process data where it is in our legitimate interests to do so and those interests are not overridden by your rights — for example, for fraud detection, platform security, responsible gambling monitoring and improving our services.
• Consent: Where we rely on your consent as a legal basis (for example, for certain marketing communications or non-essential cookies), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

KK222 uses Personal Data collected from Users for the following purposes:

• Account Management: Creating, maintaining and administering your account, verifying your identity, processing login authentication and managing account preferences.
• Transaction Processing: Facilitating deposits and withdrawal requests, processing PKR-denominated transactions and maintaining accurate financial records.
• Identity & Age Verification: Conducting KYC checks to confirm that users meet the minimum age requirement of 18 years (or the higher minimum required by the licensing jurisdiction) and to prevent fraudulent account use.
• Fraud Prevention & Security: Detecting, investigating and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse and other prohibited conduct as defined in the Terms & Conditions.
• Responsible Gambling: Monitoring gameplay patterns, administering player protection tools (deposit limits, loss limits, self-exclusion) and identifying users who may be at risk of gambling-related harm.
• Customer Support: Responding to enquiries, resolving disputes and managing support tickets submitted via live chat or email.
• Legal & Regulatory Compliance: Meeting obligations under the Operator's licensing terms, responding to regulatory enquiries and cooperating with law enforcement where legally required.
• Platform Improvement: Analysing aggregated usage data to improve the Platform's functionality, content, performance and user experience.
• Direct Marketing: Where you have not opted out and where we have a lawful basis to do so, sending promotional communications about KK222 offers, bonuses and platform updates.

KK222 does not sell your Personal Data to third parties. We may share your data with the following categories of recipients only where necessary, lawful and proportionate:

• Payment Service Providers: To process deposits and withdrawals. Payment providers receive only the transaction data required to process your payment. References to payment services familiar in Pakistan — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are made as local context only and do not imply those providers endorse or support gambling services.
• Identity Verification Providers: Third-party KYC and AML screening services that process identity documents and biometric data to verify your identity and age on our behalf.
• Technology & Hosting Providers: Cloud infrastructure, platform software, database and security service providers that host and operate the Platform under data processing agreements.
• Customer Support Software: Live chat and helpdesk platform providers that process support interaction data on our behalf.
• Regulatory & Licensing Authorities: The Operator's licensing authority may require access to certain data for audit, compliance or investigation purposes. We cooperate fully with lawful regulatory requests.
• Law Enforcement & Legal Process: We may disclose Personal Data to law enforcement, courts or government bodies where required by a valid legal obligation, court order or to protect the rights, property or safety of KK222, its users or the public.
• Business Transfers: In the event of a merger, acquisition or sale of all or substantially all of the Operator's assets, Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections.

The KK222 Platform operates under an international licensing framework. Your Personal Data may be transferred to, stored and processed in countries outside Pakistan where the Operator's infrastructure, service providers or licensing authorities are located.

Where Personal Data is transferred to jurisdictions that may not offer the same level of data protection as the laws in your home country, KK222 will implement appropriate safeguards — such as contractual clauses, data processing agreements or equivalent legal mechanisms — to ensure that your data receives a standard of protection consistent with this Policy.

KK222 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal, regulatory and licensing obligations. The following general retention principles apply:

• Account Data: Retained for the duration of the account relationship and for a minimum period following account closure, as required by the Operator's licensing obligations and AML/KYC regulatory requirements.
• KYC Documents: Identity verification documents are typically retained for a period of five (5) years following the closure of the account or the last transaction, in accordance with standard AML regulatory requirements. This period may be extended where required by applicable law or ongoing legal proceedings.
• Transaction Records: Financial transaction data is retained for a minimum of five (5) years to comply with anti-money laundering record-keeping obligations.
• Support Records: Customer support interaction records are retained for a reasonable period following the resolution of the relevant enquiry, typically up to three (3) years.
• Marketing Data: Where you have consented to marketing communications, related preference data is retained until you withdraw consent or request deletion.
• Cookie Data: Session cookies are deleted when you close your browser. Persistent cookies are retained for defined periods as set out in our cookie management interface.

Upon expiry of the applicable retention period, Personal Data is securely deleted, anonymised or rendered irreversibly non-identifiable in accordance with established data destruction procedures.

The KK222 Platform uses cookies and similar tracking technologies to support Platform functionality, maintain session state, prevent fraud and analyse usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens and load-balancing cookies. They cannot be disabled without disrupting core Platform functionality.
• Functional Cookies: Enable the Platform to remember your preferences, such as language settings, display preferences and responsible gambling tool configurations.
• Analytics Cookies: Collect aggregated and anonymised data about how users interact with the Platform — pages visited, time on site, navigation paths and error events. This data is used solely to improve Platform performance and user experience.
• Security & Fraud Prevention Cookies: Used to identify and mitigate fraudulent activity, detect bots, flag unusual login patterns and support AML monitoring obligations.

KK222 implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:

• End-to-end TLS/HTTPS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive stored data, including identity documents and financial records, using industry-standard encryption protocols.
• Role-based access controls ensuring that internal staff can only access Personal Data where strictly necessary for their specific job function.
• Regular security assessments, vulnerability scanning and penetration testing of Platform infrastructure.
• Incident response procedures enabling prompt detection, containment and notification in the event of a data security breach.
• Multi-factor authentication requirements for administrative access to Platform systems.

Depending on the data protection laws applicable under the Operator's licensing framework, you may hold some or all of the following rights in relation to your Personal Data. KK222 is committed to facilitating the exercise of these rights in a timely and transparent manner.

Please note that some rights are subject to limitations. For example, we may be unable to delete Personal Data that we are legally obliged to retain under AML, KYC or licensing requirements. Where a right cannot be exercised in full, we will explain the reason.

The KK222 Platform is strictly for adults. Access to and use of the Platform is prohibited for individuals under 18 years of age (or the higher minimum age required by the licensing jurisdiction). KK222 does not knowingly collect Personal Data from individuals under the applicable minimum age.

Age verification is a mandatory component of the KYC process. Where KK222 becomes aware that a minor has submitted personal data or registered an account, the account will be immediately closed, all data associated with that account will be deleted (subject to any legally mandated retention obligations), and any deposited funds will be returned to the payment source used.

KK222 serves a significant proportion of its user base in Pakistan, including users in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. The following information is relevant to users accessing the Platform from Pakistan.

• Applicable Local Law: Pakistan's data protection landscape is evolving. The Personal Data Protection Bill and the Prevention of Electronic Crimes Act 2016 (PECA) are relevant legislative instruments. KK222 does not represent that its data processing practices are compliant with or regulated by Pakistani law, the PTA or any other Pakistani authority. This Policy reflects the standards applicable under the Operator's international licensing framework.
• Payment Data Context: Where you make deposits or withdrawals referencing Pakistan-familiar payment methods, transaction-related data is processed in accordance with this Policy. References to services such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are made as familiar local payment context only. Those providers are not affiliated with KK222 and do not endorse gambling services.
• Jurisdictional Access: KK222 uses IP-based geolocation data to apply jurisdictional access controls. This data processing is necessary to comply with the Operator's licensing restrictions and to uphold responsible gambling obligations.
• No Government Endorsement: KK222 does not represent that its operations are licensed, endorsed or regulated by the Government of Pakistan, any provincial government, the State Bank of Pakistan or any other Pakistani institution. Users in Pakistan are solely responsible for assessing the legality of their participation under applicable local laws.

KK222 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements or Platform functionality. The date of the most recent revision is displayed prominently at the top of this page.

Where a material change is made to this Policy — for example, a change in the categories of data collected, the purposes for which data is used or the third parties with whom data is shared — KK222 will endeavour to provide advance notice to registered users via on-platform notification or by email to the registered address on file.

Your continued use of the Platform following the effective date of any revised Policy constitutes your acknowledgement of the updated practices. If you do not accept the revised Policy, you should cease using the Platform and contact Player Support to request account closure.

For any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the KK222 team through the following channels:

For information about our gambling-related terms, please review our Terms & Conditions. For guidance on safe and responsible play, visit our Responsible Gambling page.