kp33 Privacy Policy

kp33 is an internationally licensed online gaming platform operated at kp33.one. For the purposes of this Privacy Policy, kp33 acts as the data controller in respect of personal data collected from players and visitors to the kp33.one website and all associated gaming applications and services.

kp33 operates under an international gaming licence that imposes data protection standards as a condition of licensure. These standards inform and shape all data processing activities described in this Privacy Policy. If you have questions about kp33's data controller status or wish to exercise any of your data rights, please contact kp33 support using the details provided in Section 14.

kp33 collects personal data in the following categories. The specific data points collected depend on the nature of your interaction with the platform — for example, a registered player account holder will have a more complete data profile than an anonymous site visitor.

kp33 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where directly relevant to a responsible gaming assessment requested by the player themselves.

kp33 collects personal data through the following channels:

• Direct interactions: Data you provide when creating a kp33 account, completing KYC verification, making a deposit or withdrawal via JazzCash, EasyPaisa, or a Pakistani bank, placing a bet, contacting kp33 support, or opting in to a promotional offer.
• Automated technologies: When you visit kp33.one or use the kp33 platform, technical data is automatically collected via cookies, server logs, and similar tracking technologies. This includes your IP address, device identifiers, and session activity. See Section 9 for full cookie details.
• Third-party KYC providers: Where kp33 uses an automated identity verification service to assist with CNIC validation or age verification, that provider may return verification results and associated data to kp33 as part of the KYC process.
• Payment processors: Transaction confirmation data — including payment reference numbers and transaction status — is received from JazzCash, EasyPaisa, Raast, 1LINK, and partner banks to reconcile your kp33 account balance.
• Fraud and security providers: kp33 may receive risk signals or device fingerprint data from third-party fraud detection providers to protect the integrity of the platform and prevent account takeover attempts.

kp33 uses your personal data for the following defined purposes only:

• Account registration and management: To create, maintain, and administer your kp33 player account, including verification of your identity and age (21+ requirement), and management of account security credentials.
• Payment processing: To process PKR deposits and withdrawals via your chosen payment method, reconcile account balances, and maintain accurate transaction records.
• Gaming services delivery: To provide access to kp33's full suite of products including cricket betting, PSL markets, live casino, slots, snooker betting, and Teen Patti, and to record associated gaming activity.
• Regulatory and licensing compliance: To meet kp33's obligations under its international gaming licence, including KYC, anti-money laundering (AML) checks, responsible gaming monitoring, and regulatory reporting.
• Customer support: To respond to support queries, resolve complaints, and maintain records of communications for quality assurance purposes.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, collusion, and other prohibited conduct as defined in kp33's Terms and Conditions.
• Responsible gaming: To monitor gaming patterns that may indicate problem gambling behaviour, to apply self-imposed player limits and exclusions, and to fulfil kp33's duty of care obligations.
• Marketing communications: Where you have opted in, to send you promotional offers, bonus notifications, and product updates via email or SMS. You may withdraw marketing consent at any time through your account settings or by contacting kp33 support.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the kp33 platform, optimise the gaming experience for players across Karachi, Lahore, Islamabad, and Faisalabad, and inform product development decisions.

kp33 processes personal data on the following legal grounds, which align with internationally recognised data protection principles applied under our gaming licence framework:

• Contractual necessity: Processing required to perform the player agreement — including account registration, payment processing, and delivery of gaming services — is carried out on the basis that it is necessary to fulfil kp33's contractual obligations to you as a registered player.
• Legal obligation: Processing required to comply with kp33's licensing conditions, AML obligations, KYC requirements, and any applicable regulatory reporting duties is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics is carried out on the basis of kp33's legitimate interests, provided those interests are not overridden by your fundamental data protection rights.
• Consent: Processing for direct marketing communications is carried out solely on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

kp33 does not sell your personal data. kp33 may share personal data with the following categories of third parties, strictly on a need-to-know basis and subject to data processing agreements that require those parties to handle your data in accordance with applicable privacy standards:

• Payment processors: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, and Meezan Bank receive the minimum data necessary to process your PKR deposits and withdrawals and return transaction confirmation to kp33.
• KYC and identity verification providers: Third-party services contracted by kp33 to assist with CNIC verification, age verification, and document authentication as part of the player onboarding process.
• Fraud prevention and security services: Third-party providers that assist kp33 in detecting fraudulent account activity, bot usage, and other security threats. These providers receive technical and behavioural data only.
• Gaming software providers: The providers of kp33's casino, slot, live dealer, and sportsbook software may receive gaming session data necessary to deliver and support the games you play. These providers operate under strict data confidentiality obligations.
• Regulatory and law enforcement bodies: kp33 may disclose player data to its licensing authority, financial intelligence units, or law enforcement agencies where required by applicable law, a valid legal order, or kp33's licensing obligations. kp33 will notify affected players of such disclosures where legally permissible to do so.
• Professional advisers: Legal, accounting, and auditing professionals retained by kp33 may access player data on a confidential, need-to-know basis to the extent necessary for the performance of their professional services.

As kp33 operates under an international gaming licence and uses globally distributed technology infrastructure, your personal data may be transferred to and processed in jurisdictions outside Pakistan. Where such transfers occur, kp33 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under internationally recognised data protection frameworks.

Safeguards applied to international data transfers by kp33 include:

• Contractual data processing agreements with all third-party recipients of personal data that impose binding data protection obligations.
• Transfer only to jurisdictions or entities that maintain data protection standards recognised as adequate by reference to international privacy norms.
• Technical security measures — including encryption in transit and at rest — applied to all cross-border data flows.

You may request further information about the specific safeguards applied to international transfers of your personal data by contacting kp33 support.

kp33 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by kp33's licensing obligations, AML regulations, or applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active kp33 account, plus a minimum of five (5) years following account closure, as required by kp33's AML and KYC compliance obligations.
• Financial and transaction data: PKR transaction records, deposit and withdrawal histories, and payment method details are retained for a minimum of five (5) years following the date of each transaction.
• Gaming history: Bet and game session records are retained for a minimum of three (3) years from the date of each session, or longer where required for dispute resolution or regulatory audit purposes.
• Communications data: Support chat transcripts and email correspondence are retained for a minimum of two (2) years from the date of the interaction.
• Marketing consent records: Consent and opt-out records are retained for the duration of the player relationship and for a minimum of two (2) years following account closure as evidence of consent management.
• Technical and log data: Server logs and session data are retained for up to twelve (12) months, after which they are aggregated and anonymised or deleted.

Upon expiry of the applicable retention period, kp33 will securely delete or anonymise personal data in accordance with its data destruction procedures.

kp33 uses cookies and similar tracking technologies on kp33.one to enable core platform functionality, maintain your logged-in session, remember your preferences, and collect anonymised analytics data to improve the platform experience.

The following categories of cookies are used on kp33.one:

• Strictly necessary cookies: Essential for the kp33 platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing platform functionality.
• Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool selections. Disabling these cookies may affect your experience on the platform.
• Analytics cookies: Collect anonymised data about how players navigate and use kp33.one — including pages visited, time on page, and referral source — to help kp33 improve the platform. No personally identifiable information is collected via analytics cookies.
• Security and fraud detection cookies: Used by kp33's security infrastructure to detect unusual session behaviour, prevent account takeover attempts, and identify bot activity.

kp33 does not use third-party advertising or tracking cookies that would allow external companies to profile your browsing behaviour for advertising purposes. You can manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from accessing the kp33 platform.

As a kp33 player, you hold the following rights in relation to your personal data. kp33 will respond to all valid data rights requests within thirty (30) days of receipt, or within such shorter period as may be required by applicable law:

• Right of access: You may request a copy of all personal data kp33 holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held by kp33. Minor updates — such as a change of email address or mobile number — can be made directly through your kp33 account settings; changes to identity data require supporting documentation.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to kp33's legal retention obligations — data that must be retained for AML, KYC, or licensing purposes cannot be deleted on request until the applicable retention period has expired.
• Right to restriction: You may request that kp33 restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested or while an objection is being assessed.
• Right to data portability: You may request that kp33 provide your personal data in a structured, commonly used, machine-readable format, where the processing is based on consent or contractual necessity and is carried out by automated means.
• Right to object: You may object to the processing of your personal data where kp33 relies on legitimate interests as the legal basis, including profiling for responsible gaming monitoring purposes.
• Right to withdraw marketing consent: You may withdraw your consent to receive marketing communications from kp33 at any time, without affecting the lawfulness of any processing carried out prior to withdrawal. Opt-out can be completed through your account settings or by contacting kp33 support.

To exercise any of these rights, please contact kp33 support. kp33 may need to verify your identity before processing a data rights request to ensure the security of your personal information.

kp33 is strictly an adults-only platform. No person under the age of 21 is permitted to register an account, access gaming services, or place any wager on kp33. kp33 does not knowingly collect personal data from individuals under 21 years of age.

Where kp33 discovers or has reasonable grounds to suspect that a player is under 21 years of age, the player's account will be immediately suspended, access to the platform will be blocked, and the account will be referred for age verification review. Any funds deposited by a player subsequently confirmed to be under 21 will be handled in accordance with kp33's minor protection procedures and applicable regulatory guidance.

kp33 implements a layered approach to information security designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and kp33 servers, whether you are accessing the platform from Karachi, Lahore, Faisalabad, Islamabad, or anywhere else across Pakistan.
• Encryption of sensitive data at rest, including identity documents, financial data, and authentication credentials stored on kp33 infrastructure.
• Role-based access controls that restrict kp33 staff access to personal data strictly to personnel who require it to perform their defined job functions.
• Multi-factor authentication options available to all kp33 account holders to protect against unauthorised account access.
• Regular security assessments and penetration testing of kp33's platform infrastructure.
• Incident response procedures that ensure prompt identification, containment, and notification in the event of a security breach affecting personal data.

While kp33 takes all reasonable technical and organisational measures to protect your data, no online system can guarantee absolute security. Players are responsible for maintaining the confidentiality of their own kp33 login credentials and should report any suspected account compromise to kp33 support immediately.

kp33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, platform functionality, legal obligations, or regulatory requirements. The effective date at the top of this Policy will be updated whenever a material change is made.

Where changes to this Privacy Policy are material — meaning they significantly affect how your personal data is used or your rights in relation to that data — kp33 will notify registered players by email to their registered address, or via a prominent notice on the kp33 platform, prior to the changes taking effect. Continued use of the kp33 platform following notification of a policy update constitutes your acceptance of the revised Privacy Policy.

kp33 recommends that players review this Privacy Policy periodically to remain informed of how their data is being handled. The most current version of the Privacy Policy is always available at kp33.one/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how kp33 has handled your personal data, please contact the kp33 support team. Our support team is available 24 hours a day, seven days a week via live chat on the kp33 platform.

For written privacy queries or formal data rights requests, please contact kp33 by email at: [email protected]

kp33 will acknowledge all privacy-related requests within 48 hours and will provide a substantive response within thirty (30) days of receipt. If you are dissatisfied with kp33's response to a privacy complaint, you may escalate the matter to the data protection or gaming regulatory authority with jurisdiction over kp33's licensing arrangements.