kp33 Privacy Policy

This Privacy Policy ("Policy") is issued by kp33 ("kp33", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at https://kp33.cam ("Platform"). This Policy describes how kp33 collects, processes, stores, discloses and protects personal data relating to users of the Platform ("you", "your", "User"), including users located in Pakistan — across cities such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — and in other jurisdictions.

This Policy forms part of and should be read alongside kp33's Terms & Conditions. By accessing, registering on or using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

kp33 is committed to protecting your privacy and handling your personal data responsibly, transparently and in accordance with applicable data protection principles. If you have any questions about how we handle your data, please contact us at [email protected].

For the purposes of this Policy, the following definitions apply:

• "Controller" means the entity that determines the purposes and means of processing personal data — in this context, kp33.
• "Data Subject" means any identified or identifiable natural person whose personal data is processed by kp33 — in this context, you as a User.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, national identity number, financial information and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer and deletion.
• "Processor" means a third party that processes personal data on behalf of kp33 under a data processing agreement.
• "Sensitive Personal Data" means personal data relating to racial or ethnic origin, health, biometric data, financial standing or criminal records, which attracts heightened protection obligations.
• "Third Party" means any entity other than kp33 and you.

kp33 collects personal data in the following categories:

We do not intentionally collect sensitive personal data beyond what is strictly required for KYC compliance (e.g., identity document data). Where such data is collected, it is handled with heightened care and access controls.

kp33 collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or updating your account settings.
• Automated Collection: Technical and behavioural data collected automatically when you access and interact with the Platform, including through cookies, web beacons, session tracking and server logs.
• Third-Party Sources: Identity and fraud-screening data from KYC verification service providers; fraud and sanctions screening from compliance databases; and, where applicable, data from payment processors to confirm transaction details.
• Publicly Available Sources: In limited circumstances, publicly available information may be used for fraud prevention or to verify the accuracy of information you have provided.

kp33 relies on one or more of the following legal bases when processing your personal data:

• Contractual Necessity: Processing required to perform the contract between you and kp33 — including account management, transaction processing and customer support.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC, anti-money-laundering (AML) and counter-terrorism financing (CTF) requirements.
• Legitimate Interests: Processing carried out for kp33's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring and business analytics — where these interests are not overridden by your rights.
• Consent: For optional processing activities such as marketing communications. Where consent is the basis, you may withdraw it at any time without affecting the lawfulness of prior processing.

kp33 processes your personal data for the following purposes:

1. Account Registration & Management: Creating, maintaining and administering your user account, including verifying your identity and eligibility.
2. KYC & Compliance: Verifying your identity, age and source of funds to comply with AML, CTF and applicable regulatory obligations. This is mandatory and cannot be opted out of.
3. Transaction Processing: Processing deposits and withdrawal requests in PKR, maintaining transaction records and resolving payment disputes.
4. Customer Support: Responding to enquiries, resolving complaints and providing technical assistance. Support communications may be recorded and retained.
5. Responsible Gambling: Monitoring gameplay patterns to identify potential problem gambling behaviours, applying responsible gambling tools (limits, self-exclusion) and issuing mandatory reality-check notifications.
6. Fraud Prevention & Security: Detecting, investigating and preventing fraudulent transactions, unauthorised account access, bonus abuse and other prohibited conduct.
7. Platform Improvement: Analysing aggregated usage data to improve Platform features, user experience and content quality.
8. Marketing & Promotions: Where you have opted in, sending promotional offers, bonus notifications and relevant updates. You may opt out at any time by contacting [email protected] or using unsubscribe links in marketing communications.
9. Legal & Regulatory Compliance: Maintaining records required by applicable law, responding to lawful requests from regulatory authorities and exercising legal rights.

kp33 does not sell your personal data to third parties. We may share your data with the following categories of recipients for the purposes described in this Policy:

• Payment Service Providers: To process deposits and withdrawals. Payment providers referenced contextually for Pakistani users (such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah) are listed as familiar payment context only — actual payment processor relationships depend on the operator's live cashier configuration, and we do not represent that those named providers support gambling transactions.
• KYC & Identity Verification Providers: Third-party services contracted to verify user identity documents and screen against sanctions and fraud databases.
• Cloud & Infrastructure Providers: Hosting, database and IT service providers that process data on our behalf under binding data processing agreements.
• Fraud Prevention Networks: Industry fraud-screening services used to identify and prevent fraudulent or abusive activity.
• Legal & Regulatory Authorities: Where required by applicable law, court order or regulatory direction — including disclosure to financial intelligence units or law enforcement agencies in connection with AML/CTF obligations.
• Professional Advisers: Lawyers, auditors and other professional advisers bound by confidentiality obligations where necessary for legal or business purposes.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of all or part of kp33's business, personal data may be transferred to the successor entity subject to equivalent privacy protections.

kp33 operates internationally, and your personal data may be processed in countries outside of Pakistan. Where personal data is transferred to service providers or infrastructure located in other countries, kp33 takes steps to ensure that such transfers are conducted under appropriate safeguards, including contractual data protection obligations consistent with applicable data protection principles.

You acknowledge that data protection laws in recipient countries may differ from those in Pakistan. By using the Platform, you consent to the transfer of your data to other jurisdictions as described in this Policy.

kp33 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, as set out in this Policy, and to comply with our legal and regulatory obligations.

• Active Accounts: Data is retained for the duration of your active account relationship with kp33.
• Closed Accounts: Following account closure, kp33 is required by AML/CTF regulations to retain KYC records, transaction records and related account data for a minimum of five (5) years from the date of closure (or longer where required by applicable law).
• Support Communications: Customer support correspondence is retained for a reasonable period to manage ongoing disputes and improve support quality.
• Marketing Data: Where you have opted in to marketing communications, your preferences are retained until you opt out. Opt-out records are retained indefinitely to ensure compliance with your preference.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised aggregate data may be retained indefinitely for analytical purposes.

kp33 uses cookies and similar tracking technologies to operate, maintain and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. The following categories of cookies are used:

You can manage or delete cookies through your browser settings at any time. Disabling strictly necessary cookies may impair Platform functionality. For further information about managing cookies, refer to your browser's help documentation.

kp33 implements technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:

• Encryption in Transit: SSL/TLS encryption for all data transmitted between your device and our servers.
• Access Controls: Role-based access controls limiting access to personal data to authorised personnel only, on a need-to-know basis.
• Two-Factor Authentication: Available to users for account login; mandatory for privileged internal system access.
• Secure Storage: Personal data is stored in secure environments with industry-standard protections against unauthorised access.
• Regular Reviews: Periodic internal security assessments and vulnerability monitoring.
• Staff Training: Data handling and privacy training for all personnel with access to personal data.

No security system is completely impenetrable. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, kp33 will notify affected users as required by applicable law and take immediate remedial action.

Subject to applicable law, you have the following rights in relation to your personal data held by kp33. To exercise any of these rights, contact us at [email protected] with a clear description of your request. We will respond within a reasonable period, typically within thirty (30) days.

The Platform is strictly restricted to adults aged 18 years or older, or the higher minimum age required by the applicable license jurisdiction. kp33 does not knowingly collect or process personal data from individuals under the age of 18.

If you believe that a minor has accessed the Platform or that we have inadvertently collected personal data from a minor, please contact us immediately at [email protected]. Upon confirmation, we will take immediate steps to close the relevant account and permanently delete the associated data.

Being 18 years of age does not automatically make participation in online gambling lawful in Pakistan. Users in Pakistan must independently verify that their participation complies with applicable local law. kp33 does not provide legal advice on this matter.

The Platform may contain references to or integrations with third-party services, including payment processors and identity verification providers. These third parties operate under their own privacy policies and data handling practices, for which kp33 bears no responsibility.

kp33 does not endorse, control or assume responsibility for the privacy practices of any third-party service referenced on the Platform. We strongly recommend reviewing the privacy policies of any third-party service you interact with when using the Platform — particularly payment service providers.

kp33 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated via Platform notifications or by email to your registered address with reasonable advance notice. Non-material clarifications or corrections may take effect without specific advance notification.

The effective date at the top of this Policy reflects the date of the most recent revision. Continued use of the Platform following any amendment constitutes your acceptance of the updated Policy. If you do not accept any amendment, you must discontinue use of the Platform and may request account closure in accordance with our Terms & Conditions.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about how we have handled your personal data, please contact kp33 using the details below. Email addresses are displayed as plain text only — they are not clickable links.

kp33 aims to acknowledge all privacy-related enquiries within five (5) business days and to resolve requests within thirty (30) days. If your concern relates to a potential data breach or an urgent security matter, please indicate this clearly in your communication.