ak666 Privacy Policy

ak666 operates the online casino, sportsbook, and instant games platform accessible at ak666.lat ("the Platform"). For the purposes of this Privacy Policy, ak666 acts as the data controller in respect of all personal data collected from registered Players and visitors to the Platform. ak666 holds an international gaming license which imposes mandatory obligations regarding the collection, processing, and protection of player data — obligations that form part of the framework for this Privacy Policy.

This Privacy Policy applies to all personal data collected from Pakistani players and visitors through the ak666 Platform — including information submitted during registration, collected through Platform usage, provided during KYC verification, shared during customer support interactions, and gathered automatically through cookies and device analytics.

ak666 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

2.1 Registration Data

• Mobile phone number (Pakistani) or email address used to register;
• Full name, as provided at the time of account registration or KYC verification;
• Date of birth, for the purpose of confirming eligibility (21+);
• Password (stored in hashed form — never in plain text and never accessible to ak666 staff);
• Country of residence (Pakistan).

2.2 Identity Verification Data (KYC)

• Copy of valid Pakistani CNIC (Computerised National Identity Card) — both sides;
• Selfie or live photograph for identity matching purposes, where required;
• Proof of address documentation, where requested under enhanced due diligence procedures;
• Source of funds documentation, where requested under anti-money laundering obligations.

2.3 Financial Transaction Data

• Deposit and withdrawal transaction records (amounts, dates, method references);
• Payment method identifiers — JazzCash or EasyPaisa account reference numbers — used solely for transaction routing and reconciliation;
• Bank account information where bank transfer is selected (HBL, UBL, Meezan Bank);
• Account balance history for regulatory compliance and dispute resolution purposes.

2.4 Platform Usage Data

• Game sessions played — titles, stakes, outcomes, and session duration;
• Sports bets placed — market, stake, odds, and outcomes;
• Bonus activations and wagering progress;
• Login history — timestamps, IP addresses, and device identifiers;
• Customer support interactions — chat transcripts and email correspondence;
• Responsible gaming tool settings — deposit limits, session controls, exclusion requests.

2.5 Technical & Device Data

• IP address and approximate geographic location (city/region level);
• Device type, operating system, and browser version;
• Referring URL and pages visited on the Platform;
• Session timestamps and duration;
• Cookie identifiers (see Section 8).

ak666 uses the personal data it collects for the following specific purposes. Where we rely on a particular legal basis for processing, this is identified in Section 4.

ak666 processes personal data only where a valid legal basis exists. The four legal bases on which ak666 relies are:

Contract Performance

Processing is necessary to perform the contract between ak666 and the Player — including account creation, game delivery, payment processing, customer support, and bonus management. Without this processing, ak666 cannot provide the Platform services.

Legal Obligation

ak666 is subject to mandatory legal and regulatory obligations under its international gaming license, including age verification, KYC identity checks, anti-money laundering (AML) compliance, and responsible gaming programme obligations. Processing personal data to meet these obligations is not optional — it is legally required.

Legitimate Interests

Where ak666 or a third party has a legitimate interest in processing personal data that is not overridden by the Player's privacy rights and interests, ak666 may rely on this basis. Examples include fraud prevention, platform security, and anonymised analytics to improve Platform performance. ak666 has conducted legitimate interests assessments for all processing under this basis.

Consent

Where processing is based on consent — primarily for direct marketing communications — ak666 will clearly request your consent and provide an equally easy means to withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

ak666 does not sell, rent, or commercially trade your personal data with third parties. We share personal data only in the following circumstances and only to the extent necessary for the specified purpose:

Data Processors (Service Providers)

ak666 engages third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These providers include:

• Payment processors: JazzCash, EasyPaisa, and banking partners (HBL, UBL, Meezan Bank) — to process deposits and withdrawals. Payment providers receive only the transaction data necessary for processing;
• KYC verification providers: Identity verification technology providers who process CNIC and photographic data for age and identity confirmation;
• Game studio partners: Internationally certified casino game providers who receive session data necessary for game delivery and RNG certification compliance;
• Platform infrastructure providers: Hosting, CDN, and security service providers who may process technical and usage data in the course of delivering Platform services;
• Customer support platforms: Live chat and email support software providers who process support interaction data.

Regulatory and Legal Disclosures

ak666 will disclose personal data to regulatory authorities, law enforcement agencies, or courts where legally required to do so — including under anti-money laundering legislation, gaming regulatory requirements, or court order. ak666 does not make voluntary disclosures beyond legal obligations.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of ak666's business, personal data held on Players may be transferred to the successor entity as part of the transaction, subject to the same privacy protections applicable under this Policy. Players would be notified of any such transfer that materially affects how their data is processed.

ak666 takes a deliberately conservative approach to financial data storage. Pakistani players transacting via JazzCash, EasyPaisa, bank transfer, or debit card should be aware of the following:

• Payment account credentials — JazzCash PINs, EasyPaisa PINs, online banking passwords, or debit card PINs — are never transmitted to or stored by ak666 at any point. These remain entirely within your payment provider's systems;
• Payment reference identifiers (e.g. JazzCash transaction IDs, EasyPaisa wallet numbers) are retained solely for the purpose of transaction reconciliation, dispute resolution, and regulatory compliance — not for any commercial purpose;
• Full debit card numbers, if applicable, are processed by PCI-DSS compliant payment gateways and are never stored on ak666's servers;
• Transaction records (amounts, timestamps, payment method types) are retained as required by ak666's gaming license anti-money laundering obligations, for a minimum period as required by applicable regulation.

ak666 is required under its international gaming license to verify the identity and age of all Players before processing withdrawal requests, and may perform verification at any earlier point at its discretion. The KYC process requires Pakistani players to submit a valid CNIC and, in certain cases, a selfie photograph for matching purposes.

Why KYC Data Is Collected

• To confirm that the Player is aged 21 years or older, as required by ak666's licensing obligations;
• To confirm the Player's identity matches the registration details provided at account creation;
• To satisfy anti-money laundering due diligence obligations imposed by ak666's gaming license;
• To prevent identity fraud, account takeover, and multiple account registrations.

How KYC Data Is Handled

• CNIC images and selfie photographs are processed using certified identity verification technology and reviewed by trained compliance staff under strict confidentiality obligations;
• KYC documents are stored with enhanced encryption controls and access is restricted to compliance personnel with a documented business need;
• KYC documents are retained for the period required by ak666's gaming license regulatory obligations — typically a minimum of five years from Account closure;
• KYC data is never shared with third parties for commercial purposes and is disclosed to regulatory or law enforcement bodies only where legally required.

ak666 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your login session, and to collect anonymised analytics data that helps us improve the Platform experience for Pakistani players. We do not use third-party advertising cookies or sell cookie data to advertisers.

Types of Cookies Used

Managing Cookies

You may control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling essential cookies will impair Platform functionality — you may be unable to maintain a login session or access account features.

ak666 does not respond to browser "Do Not Track" signals as there is currently no industry-standard protocol for how such signals should be interpreted. However, our analytics cookies collect only anonymised, aggregated data that does not identify individual users.

ak666 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following measures:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ak666 servers — the same standard used by international banking institutions;
• Encryption at rest for sensitive personal data categories, including KYC documentation and financial records;
• Access controls — internal access to personal data is restricted on a strict need-to-know basis with role-based access management and audit logging;
• Regular penetration testing by independent security professionals to identify and remediate vulnerabilities;
• Incident response procedures — in the event of a data breach that poses risk to Players, ak666 will notify affected individuals and relevant regulatory authorities within the timeframes required by applicable law;
• Staff training — all ak666 personnel with access to personal data undergo mandatory data protection and security training.

ak666 retains personal data only for as long as necessary for the purpose for which it was collected, or for the minimum period required by applicable legal or regulatory obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Players may request early deletion subject to the limitations described in Section 11.

As a Player on the ak666 Platform, you have the following rights in respect of your personal data. ak666 will respond to all valid data rights requests within 30 days of receipt, and will notify you if an extension of up to a further 60 days is required for complex requests.

To exercise any of the above rights, submit your request to ak666 at [email protected] with the subject line "Data Rights Request". We may require identity verification before processing your request to protect against unauthorised data disclosure.

ak666 may send marketing communications — including promotional offers, bonus notifications, and platform updates — to Players who have opted in to receive such communications at registration or subsequently through Account Settings.

Opt-In and Opt-Out

• Marketing communications are sent by email or SMS to your registered contact details only where you have given explicit consent;
• You may withdraw consent at any time by using the unsubscribe link in any marketing email, by updating your communication preferences in Account Settings, or by contacting ak666 support;
• Withdrawal of marketing consent does not affect your ability to use the Platform, and does not affect receipt of transactional communications (e.g. deposit confirmations, withdrawal notifications, security alerts) which are sent regardless of marketing preference;
• Players who have requested self-exclusion under the Responsible Gaming programme will be removed from all marketing communications immediately and will not receive any promotional materials during or after the exclusion period.

ak666 does not send marketing communications via third-party channels — any promotional communication purporting to be from ak666 that arrives through unofficial channels should be treated as suspicious and reported to ak666 support.

ak666's responsible gaming programme requires the monitoring and analysis of certain player behaviour data to identify patterns that may indicate problem gambling. This processing is carried out under ak666's legal obligations as a licensed gaming operator and constitutes a legitimate and mandatory use of player data.

• ak666 monitors deposit frequency, session duration, wagering patterns, and balance fluctuation to identify players who may be experiencing gambling-related harm;
• Where monitoring indicates potential problem gambling behaviour, ak666's responsible gaming team may make proactive contact with the Player to offer support tools and information;
• Responsible gaming tool settings — including deposit limits, session controls, and self-exclusion elections — are recorded and enforced across all Platform access points;
• Self-exclusion data is retained and enforced for the full duration of the exclusion period and is not subject to early deletion requests.

For more information on ak666's responsible gaming tools and support resources, including self-exclusion and deposit limit controls, visit our Responsible Gaming page.

If you are a parent or guardian and believe that a person under the age of 21 in your household has registered an Account with ak666, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and close the Account within 24 hours of a verified report.

ak666 recommends that parents and guardians with concerns about underage access to online gambling platforms install parental control software on shared devices and maintain awareness of the websites accessed by minors in their care.

ak666 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or applicable law. When material changes are made — meaning changes that substantially affect how your personal data is processed or your rights in relation to it — ak666 will provide advance notice via the email address registered to your Account and by publishing the updated Policy on the Platform.

Minor amendments, including typographical corrections, clarifications, and updates required to reflect changes in service providers, may take effect immediately upon publication. The "Last Updated" date at the top of this document reflects the most recent revision.

Continued use of the ak666 Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy. We encourage Pakistani players to review this Policy periodically to stay informed about how we protect your personal data.

If you have any questions, concerns, or complaints about how ak666 processes your personal data, or if you wish to exercise any of your data rights, please contact us through the following channels:

• Email: [email protected] — use subject line "Privacy / Data Request" for data rights requests, or "Privacy Complaint" for complaints;
• Live Chat: Available 24/7 in English and Urdu — for general privacy queries and initial complaint notification;
• Response time: ak666 aims to acknowledge all privacy-related contacts within 2 business days and to provide a substantive response within 30 days.

Document reference: ak666 Privacy Policy — Version effective 1 January 2026. This document supersedes all previous versions of ak666's Privacy Policy. © 2026 ak666. All rights reserved.