zk266 Privacy Policy

1 Introduction & Scope

This Policy applies to all personal data processed by zk266 in connection with the registration and use of accounts on the zk266 platform. It covers data collected through the website at zk266.app, any zk266 mobile application or progressive web app interface, and all communications channels including live chat and email support.

zk266 is committed to protecting the privacy and security of personal data. This Policy is designed to meet internationally recognised standards for data protection and to give Pakistani players full transparency regarding how their information is handled.

2 Data Controller Information

zk266 acts as the data controller in respect of all personal data collected through the platform. For questions regarding data processing, rights requests, or complaints, the Data Controller may be contacted via:

• Email (plain text – not a link): [email protected]
• Live Chat: Available 24/7 via the on-site support widget

3 Information We Collect

zk266 collects the following categories of personal data from users:

3.1 Identity & Contact Data

• Full legal name as it appears on your Pakistani CNIC or passport;
• Date of birth (used for age verification – you must be 18 or older);
• Pakistani mobile number used for account registration and OTP verification;
• Email address where provided;
• Residential address as submitted during KYC verification.

3.2 Financial Data

• JazzCash or Easypaisa mobile wallet numbers associated with deposits and withdrawals;
• Bank account details (account title, bank name, IBAN) submitted for bank transfer withdrawals via HBL, UBL, Meezan Bank, or Bank Alfalah;
• USDT TRC20 wallet addresses used for cryptocurrency transactions;
• Transaction history including deposit amounts, withdrawal amounts, dates, and processing status.

3.3 Identity Verification Documents

• Scanned or photographed copy of Pakistani CNIC (both sides) or passport;
• Utility bills or bank statements submitted as proof of address;
• Selfie or liveness check images where required during enhanced KYC procedures.

3.4 Technical & Usage Data

• IP address and approximate geolocation at time of access;
• Device type, operating system, and browser version;
• Session duration, pages visited, and in-platform navigation patterns;
• Game play history including bets placed, games accessed, and outcomes;
• Login timestamps and authentication event logs.

4 How We Collect Your Data

zk266 collects personal data through the following means:

• Direct submission: Data you provide during registration, KYC verification, deposit/withdrawal requests, or support interactions;
• Automated technical collection: Data collected via server logs, cookies, and analytics tools as you navigate the platform;
• Third-party verification services: Identity and age verification data sourced from KYC service providers when enhanced verification is required;
• Payment processors: Transaction status and confirmation data received from JazzCash, Easypaisa, and banking partners.

5 Purposes & Legal Basis for Processing

zk266 processes personal data for the following purposes and on the following legal bases:

• Contract performance: Processing necessary to fulfil our obligations to you under the Terms & Conditions, including account management, game access, and payment processing;
• Legal obligation: KYC and AML (Anti-Money Laundering) verification, fraud prevention, and regulatory compliance reporting;
• Legitimate interests: Platform security, fraud detection, technical improvement, and responsible gaming monitoring;
• Consent: Marketing communications where you have opted in to receive promotional content from zk266.

6 Cookies & Tracking Technologies

zk266 uses cookies and similar tracking technologies to maintain session state, personalise the user experience, detect fraud, and analyse platform usage. The following cookie categories are used:

• Strictly necessary cookies: Session authentication tokens and security cookies required for the platform to function. These cannot be disabled without impairing platform functionality;
• Functional cookies: Preferences such as language settings and remembered login state on trusted devices;
• Analytics cookies: Anonymised usage data collected to help zk266 understand navigation patterns and improve the platform. No personally identifiable information is included in analytics payloads;
• Fraud prevention cookies: Device fingerprinting and session anomaly detection to identify unauthorised account access attempts.

You may manage cookie preferences through your browser settings. Disabling certain cookie categories may affect platform functionality.

7 Sharing & Disclosure of Personal Data

zk266 does not sell, rent, or trade personal data to third parties for marketing purposes. Personal data may be shared with the following categories of recipients strictly on a need-to-know basis:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and TRON network infrastructure providers, solely for the purpose of processing deposit and withdrawal transactions;
• KYC & compliance providers: Third-party identity verification services engaged to fulfil AML and age verification obligations;
• Game providers: Game studios and live dealer operators whose titles are integrated into the zk266 lobby may receive session identifiers for game integrity purposes. No full identity data is shared;
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory direction, zk266 will disclose personal data to competent authorities;
• Fraud prevention networks: Shared fraud signals with industry anti-fraud partners to protect all players on the platform.

All third-party processors engaged by zk266 are subject to data processing agreements that require them to maintain confidentiality and implement appropriate security measures.

8 International Data Transfers

Given the international nature of online gaming infrastructure, personal data processed by zk266 may be stored or processed on servers located outside Pakistan. Where such transfers occur, zk266 ensures that appropriate safeguards are in place, including contractual protections equivalent to internationally recognised data transfer mechanisms. Your use of the zk266 platform constitutes acknowledgement of this possibility.

9 Data Retention

zk266 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Account data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, to meet AML and regulatory record-keeping obligations;
• Transaction records: Retained for a minimum of seven (7) years in accordance with applicable financial record-keeping requirements;
• KYC documents: Retained for five (5) years from the date of last transaction or account closure, whichever is later;
• Support interaction logs: Retained for three (3) years following the interaction date;
• Technical logs: Retained for up to twelve (12) months for fraud investigation and security purposes.

10 Security Measures

zk266 implements a layered security architecture to protect personal data from unauthorised access, disclosure, alteration, or destruction:

• TLS encryption for all data in transit between your device and zk266 servers;
• Encryption at rest for stored personal data and financial records;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Two-factor authentication available for all user accounts;
• Automated anomaly detection for suspicious login or transaction patterns;
• Regular security assessments and penetration testing of platform infrastructure.

Despite these measures, no online platform can guarantee absolute security. Users are responsible for maintaining the confidentiality of their login credentials and for notifying zk266 immediately of any suspected unauthorised account access.

11 Your Rights as a Data Subject

As a user of zk266, you have the following rights in relation to your personal data, subject to applicable law and the legitimate interests of the platform:

• Right of access: You may request a copy of the personal data zk266 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer required for the purpose for which it was collected, subject to overriding legal retention obligations;
• Right to restriction: You may request that processing of your data be restricted in certain circumstances;
• Right to data portability: You may request a machine-readable copy of personal data you provided to zk266;
• Right to object: You may object to processing based on legitimate interests, including direct marketing.

To exercise any of these rights, contact the zk266 Data Controller via live chat or by emailing [email protected] (plain text – not a clickable link). zk266 will respond to rights requests within 30 days.

12 Children's Privacy

zk266 does not knowingly collect personal data from individuals under the age of 18. The platform is strictly for adults. If zk266 becomes aware that a user under 18 has registered an account or provided personal data, that account will be immediately suspended, all data will be deleted, and any deposits will be returned subject to fraud review. Parents or guardians who believe their minor child has accessed zk266 should contact support immediately.

13 Changes to This Privacy Policy

zk266 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered users via their registered mobile number or by a prominent notice on the platform prior to the change taking effect. The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of zk266 following notification of changes constitutes acceptance of the revised Policy.

14 Contact & Complaints

For questions, rights requests, or complaints regarding the handling of your personal data by zk266, please contact us via:

• Live Chat: 24/7 via the on-site support widget – response typically under 10 minutes
• Email (plain text – not a link): [email protected]

zk266 will acknowledge data-related complaints within 5 business days and aim to resolve them within 30 days. If you are unsatisfied with our response, you may have the right to escalate your complaint to a relevant supervisory authority in your jurisdiction.