kp33 Privacy
Policy

Introduction & Scope

This Privacy Policy ("Policy") is published by kp33 ("kp33", "we", "us", "our") and governs the collection, use, storage, disclosure, and protection of personal data relating to all individuals who access or use the kp33 online gaming platform at kp33.vu ("Platform"), including registered players, prospective players, and visitors.

By accessing the kp33 Platform, registering an account, making a deposit, placing a wager, or otherwise interacting with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This Policy applies to all data processing activities carried out by kp33 in connection with the Platform, including gaming, sports betting, the Loyalty Program, payment processing, KYC verification, customer support, and marketing communications. It does not apply to third-party websites or services that may be linked to from the Platform, which are governed by their own privacy policies.

Data Controller

kp33 acts as the data controller with respect to all personal data collected and processed through the kp33 Platform. As data controller, kp33 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

For all privacy-related enquiries, data subject rights requests, and complaints, you may contact kp33's designated privacy contact at: [email protected]. Please include "PRIVACY" in the subject line of your email to ensure your request is routed to the correct team. All privacy requests are acknowledged within 48 hours and resolved within 30 calendar days.

Data We Collect

kp33 collects personal data across several categories depending on your interaction with the Platform. The following table sets out the categories of personal data we collect and the context in which they are collected:

kp33 does not collect or process sensitive personal data such as biometric data, medical records, religious beliefs, or political opinions. Where ID verification requires document scanning, CNIC images are processed by our KYC partner and are not stored in raw form on kp33 servers beyond the verification process.

How We Use Your Data

kp33 uses your personal data only for the purposes for which it was collected or for compatible purposes that you would reasonably expect. The following sets out the primary purposes for which kp33 processes personal data:

1. Account Management: To create, manage, verify, and maintain your kp33 player account, including processing registrations, authenticating logins, and managing account settings.
2. Identity Verification (KYC): To verify your identity, age (21+), and location as required under our responsible gaming and anti-fraud obligations. KYC is mandatory for all accounts prior to first withdrawal.
3. Payment Processing: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, bank transfer, and cash deposit channels.
4. Gaming & Betting Services: To provide access to casino games, live dealer tables, sports betting markets (including PSL cricket and international cricket), Teen Patti 20-20, and other Platform features.
5. Responsible Gaming: To monitor gaming behaviour and identify patterns that may indicate problem gambling. This includes automated monitoring of deposit frequency, loss patterns, and session lengths, as well as processing self-exclusion and limit-setting requests.
6. Fraud Prevention & Security: To detect, investigate, and prevent fraud, money laundering, bonus abuse, collusion, multi-accounting, and other prohibited activities, including through automated fraud detection systems.
7. Legal Compliance: To comply with applicable anti-money laundering (AML) laws, gaming regulations, tax reporting obligations, and any lawful requests from regulatory or law enforcement authorities.
8. Customer Support: To provide assistance, resolve disputes, and respond to enquiries submitted via live chat, email, or other support channels.
9. Marketing & Promotions: To send promotional offers, bonus notifications, and platform updates to players who have opted in to receive marketing communications. You may opt out at any time.
10. Platform Improvement: To analyse anonymised usage data, identify technical issues, test new features, and improve the overall kp33 player experience.

Legal Basis for Processing

kp33 processes personal data on the following legal bases:

• Contractual Necessity: Processing your identity data, contact data, financial data, and gaming data is necessary to perform the contract between you and kp33 (i.e., to provide you with an account and gaming services).
• Legal Obligation: KYC verification, AML monitoring, age verification, and the retention of certain transaction records are necessary for kp33 to comply with its legal and regulatory obligations.
• Legitimate Interests: Fraud detection, platform security, responsible gaming monitoring, and platform analytics are carried out on the basis of kp33's legitimate interests, provided such interests are not overridden by your fundamental privacy rights.
• Consent: Direct marketing communications are sent only on the basis of your explicit opt-in consent. You may withdraw consent at any time by updating your communication preferences in account settings or by contacting support.

Cookies & Tracking Technologies

kp33 uses cookies and similar tracking technologies on the Platform to provide core functionality, personalise your experience, and analyse Platform performance. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These are essential for the Platform to function. They enable session management, security, and authentication. These cookies cannot be disabled.
• Functional Cookies: These remember your preferences such as language settings, display preferences, and responsible gaming settings, to provide a more personalised experience.
• Analytics Cookies: These collect anonymised data about how players interact with the Platform, including pages visited, session duration, and error events. This data is used to improve Platform performance and usability.
• Security Cookies: These assist with fraud detection and account security by identifying unusual session patterns or access from new devices.

kp33 does not use third-party advertising cookies or permit third-party advertising networks to track players across the Platform. You can manage cookie preferences (excluding strictly necessary cookies) through your browser settings or via the kp33 cookie preference panel, accessible from the Platform footer.

Third-Party Data Sharing

kp33 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data with third parties only in the following controlled circumstances:

• Payment Processors: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and other payment service providers receive the minimum data necessary to process your deposits and withdrawals. All payment partners are required to maintain equivalent data security standards.
• KYC & Identity Verification Providers: Licensed third-party KYC verification services process identity documents to verify your age and identity. These providers operate under strict data processing agreements and are not permitted to use your data for any other purpose.
• Game Studio Providers: Game providers such as Evolution, Pragmatic Play, and Ezugi may receive anonymised session identifiers to facilitate game delivery. No personally identifiable information is shared with game studios.
• Fraud & Security Services: kp33 uses third-party fraud detection services that analyse technical data (IP addresses, device fingerprints, behaviour patterns) to identify suspicious activity. These services are contractually bound to use data solely for fraud prevention.
• Legal Authorities: kp33 may disclose personal data to regulatory bodies, law enforcement agencies, tax authorities, or courts where required to do so by applicable law, court order, or regulatory obligation.
• Business Transfers: In the event of a merger, acquisition, or sale of kp33's business or assets, player data may be transferred to the acquiring entity, subject to equivalent privacy protections and player notification.

Data Retention

kp33 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

Data Security

kp33 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• TLS 1.3 encryption for all data in transit between your device and kp33 servers.
• AES-256 encryption for sensitive data at rest, including CNIC data, payment credentials, and account passwords (stored as salted hashes, never in plaintext).
• Multi-factor authentication (MFA) available for all player accounts via SMS OTP.
• Role-based access controls (RBAC) ensuring that kp33 staff can access personal data only to the extent required for their job function.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• 24/7 intrusion detection and monitoring systems with automated alerting for anomalous activity.
• Data segmentation ensuring that payment data, KYC data, and gaming data are stored in separate, isolated environments.
• Staff data security training conducted on a mandatory annual basis for all employees with access to player data.

Despite these measures, no data transmission over the internet can be guaranteed to be 100% secure. While kp33 takes every reasonable step to protect your personal data, we cannot warrant absolute security against all possible threats. You are responsible for keeping your account credentials confidential and for notifying us promptly of any suspected unauthorised access.

International Data Transfers

kp33 operates under an international gaming license framework. Personal data collected from players in Pakistan may be transferred to, stored in, and processed in jurisdictions outside of Pakistan where kp33's servers, data centres, or third-party service providers are located.

Where personal data is transferred internationally, kp33 ensures that such transfers are carried out in accordance with applicable data protection requirements and that appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) between kp33 and its international data processors.
• Ensuring that data is transferred only to jurisdictions with adequate data protection frameworks recognised by international standards.
• Binding Corporate Rules (where applicable) for transfers within the kp33 corporate group.
• Explicit consent for transfers where no other safeguard mechanism is available.

You may contact kp33's privacy team at [email protected] to request further information about the safeguards applied to international transfers of your personal data.

Children & Minors

kp33 is strictly an adults-only platform. No person under the age of 21 is permitted to register an account, deposit funds, or participate in gaming or betting on the Platform. kp33 does not knowingly collect or process personal data from individuals under the age of 21.

Age verification is mandatory as part of the KYC process, which requires submission of a valid Pakistani CNIC confirming that the account holder is 21 years of age or older. If kp33 becomes aware that an account has been registered by an individual under 21, the account will be immediately suspended, all funds forfeited, and the account permanently closed.

Parents and guardians are encouraged to monitor internet usage by minors in their household and to use parental control software to block access to gambling websites. If you believe a minor has accessed kp33 or provided personal data to the Platform, please contact us immediately at [email protected].

Marketing Communications

kp33 may send promotional and marketing communications to players who have opted in to receive such communications. Marketing messages may include information about new games, bonus offers, Loyalty Program updates, PSL cricket promotions, and other Platform features.

Marketing communications are sent via email and SMS only. kp33 does not send unsolicited marketing communications to players who have not opted in. You may opt in to receive marketing communications during account registration, or at any time via the communication preferences panel in your account settings.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any marketing email.
• Replying "STOP" to any marketing SMS message.
• Updating your communication preferences in account settings.
• Contacting kp33 support at [email protected] with the subject line "UNSUBSCRIBE".

Please note that opting out of marketing communications does not opt you out of essential service communications, such as transaction confirmations, account security alerts, responsible gaming notifications, or changes to these Terms.

Your Data Rights

As a kp33 player, you have the following rights with respect to your personal data. You may exercise any of these rights by contacting [email protected] with "DATA RIGHTS" in the subject line, or by using the self-service data management panel in your account dashboard:

1. Right of Access: You have the right to request a copy of all personal data kp33 holds about you. We will provide this data in a structured, commonly used format within 30 days of your request.
2. Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data. Most account information can be updated directly via account settings.
3. Right to Erasure: You have the right to request deletion of your personal data, subject to legal retention obligations (e.g., AML requirements). Data that must be retained by law will be restricted from further processing but cannot be deleted until the legal retention period expires.
4. Right to Restrict Processing: You have the right to request that kp33 limit how we process your data in certain circumstances, such as while a dispute is being resolved or where you contest the accuracy of data.
5. Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format (e.g., CSV or JSON), and to transmit that data to another service provider where technically feasible.
6. Right to Object: You have the right to object to processing of your personal data on grounds relating to your particular situation, including profiling and automated decision-making. kp33 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
7. Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
8. Right to Lodge a Complaint: If you believe kp33 has breached your data protection rights, you have the right to lodge a complaint with kp33's privacy team or with the relevant data protection supervisory authority in your jurisdiction.

All data rights requests are acknowledged within 48 hours and fulfilled within 30 calendar days. Complex requests may require an extension of up to an additional 30 days, in which case we will notify you and explain the reason for the delay.

Changes to This Privacy Policy

kp33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform features. When material changes are made, kp33 will notify registered players via email to the registered email address or by displaying a prominent notification upon next login to the Platform.

The "Last Updated" date at the top of this document reflects the date of the most recent version. Continued use of the kp33 Platform following notification of changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the updated Policy, you must cease using the Platform and may request account closure via support.

We encourage all players to review this Privacy Policy periodically to stay informed about how kp33 collects, uses, and protects personal data.

Contact Us — Privacy Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about how kp33 processes your personal data, please contact our privacy team using the following methods:

• Email: [email protected] — Use subject line "PRIVACY" for priority routing to the privacy team.
• Live Chat: Available 24/7 from your kp33 account dashboard. Select "Privacy & Data Rights" from the topic menu.
• Self-Service Data Panel: Access your personal data, update preferences, request data export, or initiate account closure directly from the "Privacy & Data" section of your account settings.

kp33 is committed to transparent and accountable data processing. We take all privacy enquiries seriously and will respond to your request within the timelines specified in this Policy.