kk3e Privacy Policy

kk3e (referred to in this Privacy Policy as "kk3e", "we", "us", or "our") is the operator of the online casino and sportsbook platform accessible at kk3e.net and its associated subdomains (the "Platform"). kk3e acts as the data controller in respect of the personal data it collects and processes in connection with the Platform and the Services it provides.

This Privacy Policy applies to all individuals who interact with the kk3e Platform, including registered account holders, visitors to the website who have not registered an account, and individuals who contact kk3e via email, live chat, or other support channels.

If you have any questions about how kk3e handles your personal data, or if you wish to exercise any of your data rights described in Section 10 of this Policy, please contact us at the details provided in Section 15.

kk3e collects the following categories of personal data, depending on your level of interaction with the Platform:

kk3e does not intentionally collect special categories of sensitive personal data (such as racial or ethnic origin, health data, religious beliefs, or political opinions) except where this is strictly required to fulfil a responsible gaming obligation — for example, where a user discloses a gambling problem when requesting self-exclusion. Such sensitive disclosures are treated with the highest level of confidentiality.

kk3e collects personal data through the following mechanisms:

• Direct submission: When you register an account, complete your KYC verification, make a deposit or withdrawal, update your account profile, or contact customer support, you directly provide personal data to kk3e.
• Automated collection: When you visit the kk3e website or use the Platform, technical data such as your IP address, device fingerprint, browser type, and session activity is collected automatically through server logs and cookies. Please refer to Section 7 for full details of our cookie practices.
• Third-party sources: kk3e may receive identity and address verification data from our contracted KYC verification partners when processing your account verification. We may also receive fraud and risk indicators from our payment processing partners in connection with transaction monitoring.
• Publicly available sources: In certain limited circumstances related to fraud prevention or regulatory compliance, kk3e may reference publicly available data sources such as sanctions screening databases or public records.

kk3e uses the personal data it collects for the following purposes:

• Account creation and management: To create and maintain your kk3e account, authenticate your identity at login, and ensure your account settings and preferences are applied correctly.
• Service delivery: To provide access to casino games, sportsbook markets, live betting, and all other features of the kk3e Platform you are entitled to use as a registered account holder.
• Payment processing: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other available payment methods, and to maintain accurate transaction records.
• KYC and identity verification: To verify your identity, age, and eligibility in compliance with kk3e's licensing obligations and applicable anti-money laundering regulations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, collusion, and other integrity breaches on the Platform.
• Responsible gaming: To monitor your gaming activity for indicators of problem gambling behaviour, apply any responsible gaming limits you have set, and fulfil obligations associated with self-exclusion requests.
• Customer support: To respond to your enquiries, resolve complaints, and provide assistance via live chat, email, and other support channels.
• Legal and regulatory compliance: To meet our obligations under applicable gaming regulations, anti-money laundering legislation, and tax reporting requirements where applicable.
• Marketing communications: To send you relevant promotional offers, bonus notifications, and product updates — but only where you have provided your explicit consent to receive such communications or where a legitimate interest basis applies. See Section 13 for full details.
• Platform improvement: To analyse aggregate, anonymised usage data to improve the kk3e Platform, optimise game performance, and enhance the user experience for all players.

kk3e relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing that is necessary to perform the contract between you and kk3e — that is, to provide you with access to the Platform and its services under the Terms & Conditions you accepted at registration.
• Legal obligation: Processing that is required for kk3e to comply with applicable law — including KYC / AML obligations, gaming licence conditions, and financial record-keeping requirements.
• Legitimate interests: Processing carried out in kk3e's legitimate business interests — such as fraud detection, platform security, responsible gaming monitoring, and aggregate analytics — where these interests are not overridden by your privacy rights.
• Consent: Where kk3e relies on your explicit consent as the legal basis for processing — particularly for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

kk3e does not sell your personal data to any third party. We share your data only where necessary, with the following categories of recipients, all of whom are contractually bound to handle your data securely and in accordance with applicable data protection law:

• Payment processing partners: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other payment service providers through whom your deposits and withdrawals are processed. These parties receive only the data necessary to complete the relevant transaction.
• KYC and identity verification providers: Third-party identity verification services that assist kk3e in meeting its regulatory obligations to verify user identity and age before withdrawal processing. These providers are bound by strict data processing agreements.
• Game software providers: Licensed game developers and live casino studios whose games are accessible on the kk3e Platform may receive session identifiers and bet data necessary to operate the game. They do not receive your full identity or financial data.
• Fraud prevention and security services: Specialist fraud detection and cybersecurity partners that assist kk3e in identifying and preventing fraudulent activity, account takeover attempts, and other security threats.
• Regulatory and licensing authorities: kk3e's gaming licence regulator and any other competent authority that has a lawful right to request access to player data for regulatory inspection, audit, or investigation purposes.
• Law enforcement agencies: Where kk3e is required by law, court order, or other binding legal process to disclose personal data to law enforcement or government bodies.
• Professional advisors: kk3e's legal counsel, auditors, and other professional advisers who require access to certain data in the course of providing professional services to kk3e, subject to professional confidentiality obligations.

kk3e uses cookies and similar tracking technologies on the Platform. A cookie is a small text file that is stored on your device when you visit a website. Cookies help us provide a functional, personalised, and secure experience on the Platform.

kk3e uses the following categories of cookies:

• Strictly necessary cookies: These cookies are required for the Platform to function correctly. They enable core features such as your login session, account security tokens, and language settings. You cannot opt out of strictly necessary cookies as the Platform cannot function without them.
• Functional cookies: These cookies remember your preferences — such as your preferred game categories or notification settings — so that you do not need to re-enter them each time you visit.
• Analytics cookies: kk3e uses anonymised analytics to understand how players interact with the Platform — which pages are visited most, where users encounter difficulties, and how the overall experience can be improved. These analytics are aggregated and do not identify individual users.
• Security and fraud prevention cookies: These cookies help kk3e detect and prevent fraudulent login attempts, account takeovers, and other security threats by identifying unusual patterns in session behaviour.

You can manage your cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using the Platform but may affect the quality of your experience. Disabling strictly necessary cookies will prevent the Platform from functioning correctly.

kk3e retains personal data for as long as is necessary to fulfil the purpose for which it was collected, and for as long as is required by applicable law and regulatory obligations. The following general retention schedules apply:

• Active account data: Retained for the duration of your account's active life on the Platform, plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable financial regulations.
• KYC verification documents: Retained for a minimum of five (5) years following the completion of the verification process or the closure of the account, whichever is later.
• Customer support communications: Retained for a minimum of three (3) years from the date of the last communication in a support thread.
• Technical and session log data: Retained for up to twelve (12) months for security and fraud investigation purposes, after which they are deleted or anonymised.
• Marketing consent records: Retained for the duration of the marketing relationship, plus one (1) year following withdrawal of consent, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted from kk3e's systems or permanently anonymised such that it can no longer be linked to an identified or identifiable individual.

kk3e implements robust technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, accidental loss, or destruction. Our security framework includes, but is not limited to, the following measures:

• TLS 1.2 / 1.3 encryption for all data transmitted between your device and the kk3e Platform.
• AES-256 encryption for sensitive data stored in kk3e's databases, including financial data and identity documents.
• Role-based access controls ensuring that only authorised kk3e personnel with a demonstrable business need can access personal data, and only to the extent required by their role.
• Regular internal and third-party security audits and penetration testing of the kk3e Platform and infrastructure.
• Mandatory security awareness training for all kk3e staff who handle personal data.
• Incident response procedures that enable kk3e to identify, contain, and notify affected parties of any data security breach within the timeframes required by applicable law.

While kk3e takes every reasonable precaution to protect your data, no system is completely immune to security risks. You also play an important role in keeping your account secure — please use a strong, unique password for your kk3e account, enable two-factor authentication, and never share your login credentials with anyone.

Subject to applicable data protection law and any limitations arising from kk3e's legal and regulatory obligations, you have the following rights in relation to the personal data kk3e holds about you:

• Right of access: You have the right to request a copy of the personal data kk3e holds about you, along with information about how it is used. kk3e will respond to access requests within 30 days of receipt.
• Right to rectification: If any personal data kk3e holds about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. You may update basic account information directly from your kk3e account settings.
• Right to erasure ("right to be forgotten"): In certain circumstances, you have the right to request that kk3e delete your personal data. This right is subject to limitations where kk3e is required to retain data to comply with a legal obligation — for example, AML record-keeping requirements.
• Right to restriction of processing: You may request that kk3e restricts the processing of your personal data in specific circumstances, such as where you contest the accuracy of the data or have objected to processing pending verification of legitimate grounds.
• Right to data portability: Where processing is based on your consent or on a contractual basis, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another controller where technically feasible.
• Right to object: You have the right to object to processing based on kk3e's legitimate interests, including profiling for fraud prevention purposes. kk3e will assess each objection on its merits and respond accordingly.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please submit your request in writing to [email protected] with the subject line "Data Rights Request", including your registered email address and a description of the right you wish to exercise. kk3e will acknowledge your request within 72 hours and respond fully within 30 days.

The kk3e Platform is strictly intended for adults aged 21 years and above. kk3e does not knowingly collect personal data from individuals under the age of 21. Age verification is an integral part of the kk3e registration and KYC process.

If kk3e discovers or receives credible notification that an account has been created by or on behalf of a person under the age of 21, that account will be immediately suspended, all data associated with the account will be deleted (subject to any mandatory legal retention obligations), and any funds held in the account will be returned to the payment method used for the original deposit after verification.

If you have reason to believe that a minor may have registered a kk3e account, please notify us immediately at [email protected]. We take the protection of minors with the utmost seriousness.

kk3e's servers and infrastructure may be located in jurisdictions outside of Pakistan. As a result, your personal data may be transferred to and processed in countries other than the country in which you are located. These countries may have data protection laws that differ from those applicable in Pakistan.

Where kk3e transfers personal data internationally, it takes appropriate safeguards to ensure that your data receives an equivalent level of protection to that afforded in its country of origin. These safeguards include contractual clauses incorporated into agreements with all data processors that impose data protection obligations equivalent to those applicable to kk3e itself.

By registering a kk3e account and using the Platform, you acknowledge and consent to the transfer of your personal data to kk3e's servers and processing infrastructure, wherever those may be located, subject to the safeguards described in this section.

kk3e may send you marketing communications — including bonus offers, promotional emails, new game announcements, and sportsbook updates — where you have provided your explicit consent to receive such communications at the time of registration or through your account settings.

You have the right to opt out of marketing communications at any time, at no cost, using any of the following methods:

• Clicking the "Unsubscribe" link included in the footer of any marketing email sent by kk3e.
• Updating your communication preferences in the Notifications section of your kk3e account settings.
• Contacting kk3e support at [email protected] with the subject line "Unsubscribe from Marketing".

Opting out of marketing communications will not affect transactional communications related to your kk3e account — such as deposit confirmations, withdrawal notifications, KYC verification requests, and responsible gaming alerts — as these are essential to the operation of your account and cannot be disabled.

kk3e reserves the right to update or amend this Privacy Policy at any time. Any material changes — that is, changes that affect how your personal data is collected, used, or shared in a way that is meaningfully different from the current policy — will be communicated to you via email to your registered kk3e email address, with a minimum of fourteen (14) days' notice before the change takes effect.

Non-material updates (such as minor clarifications, corrections of typographical errors, or formatting changes that do not affect the substantive content) may be made without prior notification, though the "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.

The current version of this Privacy Policy is always accessible at kk3e.net/privacy-policy. We encourage you to review this Policy periodically to stay informed about how kk3e handles your personal data.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how kk3e has handled your personal data, please contact us using the following details:

• Email: [email protected]
• Subject line for data rights requests: "Data Rights Request"
• Subject line for privacy complaints: "Privacy Complaint"
• Response time: Acknowledgement within 72 hours; full response within 30 days
• Support hours: 24 hours a day, 7 days a week

kk3e takes all privacy complaints seriously. Upon receipt of a complaint, we will acknowledge it, investigate the matter thoroughly, and respond with our findings and any remedial action taken within 30 days. If you are not satisfied with kk3e's response to your privacy complaint, you may have the right to refer the matter to the relevant data protection supervisory authority in your jurisdiction.