This Privacy Policy explains how zk266 ("we", "us", "the Platform") collects, processes, stores and protects the personal data of players registered at zk266.biz. By creating an account or using the platform, you confirm that you have read and understood this policy. If you do not agree, please do not use the platform.
1. About This Privacy Policy
zk266 is an online gaming platform serving Pakistani players at zk266.biz. We take the privacy of our players seriously – not because we have to, but because trust is genuinely difficult to rebuild once it is lost, and we have no interest in losing it.
This policy covers all data processing activities connected with your use of zk266, from the moment you land on the website through registration, gameplay, deposits, withdrawals, customer support interactions and any communication you receive from us. It applies regardless of which device you use to access zk266.
This policy is intended to be straightforward and jargon-free. Where a legal term is necessary, we explain it in plain language immediately after. If anything here is unclear, you can reach the zk266 support team at support@zk266.biz at any time.
zk266 is committed to protecting the personal data of every Pakistani player on the platform.
2. Data We Collect
zk266 collects data in three main ways: data you give us directly, data generated automatically when you use the platform, and data received from payment processors and identity verification services as part of KYC compliance.
2.1 Data You Provide Directly
- Full legal name and date of birth (collected during registration and verified during KYC)
- Mobile phone number and email address
- Payment account details including Easypaisa or JazzCash mobile wallet number, bank account number for IBFT transfers, or card details for Visa/Mastercard payments
- Identity documents submitted for KYC verification, such as CNIC or passport copy
- Communication records including live chat transcripts and support emails
- Responsible gaming preferences such as deposit limits and self-exclusion requests
2.2 Data Generated Automatically
- Device information: device type, operating system, browser version and screen resolution
- Network information: IP address and approximate geographic location
- Session data: pages visited, time spent, game sessions opened and closed, and features used
- Transaction logs: deposit amounts, withdrawal requests, bonus claims and wager history
- Cookie and tracking data as described in Section 9
2.3 Data from Third Parties
- Payment confirmation data from Easypaisa, JazzCash, NayaPay, SadaPay and banking partners
- Identity verification results from KYC service providers
- Fraud and risk signals from payment processors
| Data Category | Examples | Required? |
|---|---|---|
| Identity Data | Name, DOB, CNIC / Passport | Mandatory (KYC) |
| Contact Data | Mobile number, email | Mandatory |
| Payment Data | Easypaisa / JazzCash number, card details | Mandatory |
| Transaction Data | Deposits, withdrawals, wager history | Auto-generated |
| Technical Data | IP address, device type, browser | Auto-generated |
| Usage Data | Game sessions, page visits | Auto-generated |
| Responsible Gaming | Limits set, self-exclusion status | Optional (player-set) |
Minimal Data Collection
zk266 only collects data that is necessary for account management, payment processing and regulatory compliance. We do not collect data we do not need.
Encrypted in Transit and at Rest
All data transmitted between your device and zk266 servers is protected by 256-bit SSL encryption. Stored data is encrypted at rest on access-controlled infrastructure.
Never Sold to Third Parties
zk266 does not sell, rent or trade your personal data to advertisers, data brokers or any other commercial third party. Your information is used only for the purposes described in this policy.
3. How We Use Your Data
zk266 uses your personal data for the following specific purposes:
- Account creation and management: Setting up your player profile, linking your payment methods and maintaining your account settings and preferences on zk266.
- Identity verification (KYC): Confirming that you are who you say you are, that you meet the minimum age requirement of 18 years and that your payment methods belong to you. This is a regulatory requirement we cannot bypass.
- Payment processing: Executing deposits and withdrawals in PKR through your chosen payment method. Transaction data is retained for financial record-keeping purposes.
- Customer support: Resolving account queries, payment issues, game disputes and any other support requests you raise with the zk266 team.
- Responsible gaming compliance: Applying and monitoring deposit limits, session time tools, loss limits and self-exclusion status. This also includes identifying accounts that may require proactive responsible gaming intervention.
- Fraud and security: Detecting and preventing fraudulent activity, unauthorised access, bonus abuse and money laundering. This includes automated risk-scoring processes.
- Platform improvement: Analysing aggregated, anonymised usage data to improve the zk266 game lobby, payment flows, mobile performance and customer support processes.
- Marketing communications: Sending promotional emails and SMS about bonuses, new games or platform updates – but only to players who have opted in. You can opt out at any time through your account settings or by replying STOP to any SMS.
zk266 does not use your personal data to make fully automated decisions that produce legal or significant effects on you without human review. Any automated risk or fraud flag triggers a manual review by the compliance team before action is taken against an account.
Data collected on zk266 is used only to serve and protect our Pakistani players – never for commercial exploitation.
4. Legal Basis for Processing
Every data processing activity on zk266 is carried out on one of the following legal bases:
- Contractual necessity: Processing your identity, contact and payment data is necessary to provide the zk266 service under the Terms and Conditions you agreed to on registration. Without this processing, we cannot operate your account.
- Legal obligation: KYC identity verification, transaction record-keeping and AML (anti-money laundering) monitoring are required by applicable regulations. zk266 has no discretion to waive these obligations.
- Legitimate interests: Fraud detection, security monitoring, platform improvement and responsible gaming analysis are conducted on the basis of zk266's legitimate interests in operating a safe and fair platform, balanced against your privacy interests.
- Consent: Marketing communications are sent only on the basis of your explicit opt-in consent, which you can withdraw at any time through your account settings or by contacting support.
5. Data Sharing
zk266 shares personal data only in the following limited and controlled circumstances:
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners and Visa/Mastercard processing partners receive the minimum data necessary to execute your transactions.
- KYC and identity verification providers: Third-party services that verify identity documents. These providers are contractually bound to use your data only for the purpose of verifying your identity for zk266.
- Game providers: Licensed third-party game developers whose titles are hosted in the zk266 lobby receive anonymised session and wager data for jackpot pool calculations and RNG auditing. They do not receive your personally identifiable information.
- Regulatory and legal authorities: Where required by applicable law or a valid legal order, zk266 may disclose data to regulatory bodies, financial intelligence units or law enforcement. We will notify you of such disclosure where legally permitted to do so.
- Group companies: Where zk266 operates within a group of related entities, data may be shared within the group for consolidated compliance, risk and operational management purposes. All group entities are bound by equivalent data protection standards.
zk266 does not share your personal data with advertisers, analytics resellers, social media platforms or any commercial third party for marketing purposes. If this ever changes, you will be notified and given the opportunity to opt out before any such sharing begins.
6. Data Storage and Security
All personal data collected by zk266 is stored on secure servers with restricted access controls. Data is encrypted both in transit (using TLS 1.3 / SSL) and at rest. Access to player data within the zk266 organisation is role-based – team members can only access the data they need to perform their specific job function.
zk266 conducts regular internal security reviews and engages third-party security assessments on a periodic basis. Critical infrastructure is monitored 24/7 for intrusion attempts, unusual access patterns and potential breaches.
In the event of a data security breach that is likely to affect your rights or interests, zk266 will notify affected players without undue delay and take immediate steps to contain and remediate the breach. The nature of the incident, the data involved and the steps taken will be communicated clearly.
Your account security also depends on you. Use a strong, unique password for zk266 and enable two-factor authentication in your account settings. The zk266 support team will never ask for your password in any communication.
Role-Based Access Control
Only zk266 team members who need your data to perform their role can access it. All data access is logged and audited on a regular basis.
Payment Data Masking
Full payment account numbers are never stored in plain text on zk266 servers. Card details are tokenised and Easypaisa / JazzCash numbers are masked after initial verification.
Breach Notification
If a data breach ever affects your personal information, zk266 will notify you directly and explain what happened, what data was involved and what steps we have taken.
zk266 players across Pakistan can trust that their personal information is handled with care.
7. How Long We Keep Your Data
zk266 retains personal data only for as long as necessary for the purpose it was collected, or as required by applicable law. The following general retention periods apply:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | 5 years after account closure | AML and regulatory obligation |
| Transaction Records | 5 years | Financial record-keeping regulations |
| KYC Documents | 5 years after account closure | Regulatory compliance |
| Support Communications | 2 years | Dispute resolution |
| Technical / Session Logs | 13 months | Security monitoring |
| Marketing Consent Records | 3 years | Proof of consent |
When data reaches the end of its retention period, it is either securely deleted or anonymised so it can no longer be linked to you as an individual. We do not hold data for longer than necessary.
8. Your Rights Over Your Data
As a player on zk266, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting support@zk266.biz. zk266 will respond within 72 hours and complete the requested action within 30 days in most cases.
Right of Access
Request a copy of all personal data zk266 holds about you. We will provide this in a clear, readable format within 30 days of your request.
Right to Rectification
Ask us to correct any inaccurate personal data we hold about you. For identity data, corrections may require fresh documentation.
Right to Erasure
Request deletion of your personal data where there is no legal obligation requiring us to retain it. Regulatory retention periods may limit this right in some cases.
Right to Restrict Processing
Ask us to limit how we process your data in certain circumstances, for example while a dispute is under investigation.
Right to Data Portability
Receive your personal data in a structured, machine-readable format so you can transfer it to another service if you choose.
Right to Withdraw Consent
Withdraw your marketing consent at any time through account settings or by contacting support. Withdrawal does not affect data processing already completed.
9. Cookies and Tracking
zk266 uses cookies and similar technologies to make the platform work correctly, remember your preferences and understand how players use the site. Here is what each category of cookie does:
- Session and authentication cookies – These keep you logged in as you navigate between pages and are strictly necessary for the platform to function. You cannot opt out of these cookies while using zk266.
- Analytics cookies – These help us understand which parts of the platform are used most and where players encounter problems. Data is aggregated and anonymised. You can opt out through your browser settings.
- Preference cookies – These remember your language, game lobby filters and display preferences so you do not have to reset them every visit. Opting out means these preferences will not be saved between sessions.
You can manage your cookie preferences through your browser settings. Removing or blocking cookies may affect some functionality of the zk266 platform, particularly session management and saved preferences. Essential cookies cannot be disabled without logging out.
zk266 does not use advertising or targeting cookies. We do not track your activity on other websites or apps, and we do not participate in cross-site advertising networks.
10. Children and Underage Players
zk266 is strictly for players aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Age is verified during the KYC process and any account found to belong to an underage player is closed immediately with all balances forfeited in accordance with the Terms and Conditions.
If you are a parent or guardian and believe that a minor has created an account on zk266 using your details or their own, please contact us immediately at support@zk266.biz. We will investigate and close the account without delay.
11. Changes to This Policy
zk266 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable regulations or improvements in our data practices. Material changes will be communicated to players via email or SMS at least seven days before they take effect.
The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the zk266 platform after a policy update takes effect constitutes acceptance of the updated policy. If you disagree with any change, you may request account closure before the update takes effect.
Previous versions of this policy are available on request by contacting support@zk266.biz with the subject line "Privacy Policy Archive Request".
12. Contact and Data Requests
For any privacy-related questions, data access requests or concerns about how zk266 handles your personal data, please get in touch through any of the following channels:
This Privacy Policy was last reviewed and updated on 1 June 2025. See also: Terms and Conditions | Responsible Gaming