k222 Casino Privacy Policy —
How We Collect, Protect, and Respect Your Personal Data

This Privacy Policy ("Policy") sets out the principles and practices that govern the collection, use, storage, transfer, and deletion of personal data by k222 Casino ("k222", "we", "us", or "our") in connection with the operation of the k222 online gaming platform accessible at k222.vu (the "Platform").

This Policy applies to:

• All individuals who visit the k222 Platform, whether or not they are registered account holders.
• All registered k222 account holders, including players who deposit, wager, or withdraw funds in real-money mode.
• All individuals who communicate with k222 through any channel, including email, live chat, or any other support mechanism.

This Policy should be read alongside the k222 Terms & Conditions and the k222 Responsible Gaming Policy, both of which form part of the overall framework governing your relationship with k222.

For the purposes of applicable data protection law and regulation, k222 Casino, operating the Platform at k222.vu, acts as the data controller in respect of all personal data collected and processed through the Platform.

As data controller, k222 is responsible for determining the purposes for which and the manner in which your personal data is processed. k222 is also responsible for ensuring that all personal data processing activities are conducted in accordance with applicable data protection principles, including:

• Lawfulness, Fairness and Transparency: All processing of your personal data is carried out on a lawful basis, openly, and without deception.
• Purpose Limitation: Personal data collected for one specified purpose is not subsequently used for a materially different, incompatible purpose without your knowledge and consent.
• Data Minimisation: k222 collects and retains only the minimum personal data required to fulfil the stated processing purpose.
• Accuracy: k222 takes reasonable steps to ensure that personal data held is accurate and kept up to date.
• Storage Limitation: Personal data is retained only for as long as is necessary for the purposes for which it was collected, subject to applicable legal minimum retention requirements.
• Integrity & Confidentiality: Personal data is protected against unauthorised access, accidental loss, destruction, or damage using appropriate technical and organisational security measures.

For all data protection queries, requests, or complaints, please contact k222 at: [email protected] (plain text — not a clickable link).

k222 collects the following categories of personal data from players and Platform visitors, grouped by collection context:

k222 collects personal data through the following primary channels:

• Direct Submission by You: When you complete the k222 account registration form, submit KYC identity documents, contact k222 support, update your account profile, or opt in or out of marketing communications, you directly provide personal data to k222.
• Automated Technical Collection: When you access and navigate the k222 Platform, our servers automatically collect certain technical data — including your IP address, device specifications, browser type, session timing, and page navigation patterns — through standard web server logging, cookies, and similar tracking technologies. See Section 7 for full details of k222's cookie practices.
• Payment Processing: When you make a deposit or request a withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or card payment, certain financial transaction data is transmitted to k222 by the relevant payment provider as part of the transaction processing flow.
• Third-Party Identity Verification Services: In the context of KYC verification, k222 may engage accredited third-party identity verification providers to cross-reference the identity documents you submit. These providers confirm identity information against authoritative databases but do not receive your k222 gaming activity data.
• Game Server Records: All game rounds played on k222 generate detailed server-side session logs that constitute gaming activity data as described in Section 3.

k222 processes your personal data only where a lawful basis for processing exists. The following table sets out the primary processing purposes and the corresponding legal basis relied upon by k222:

Where k222 relies on consent as the legal basis for processing (e.g., marketing communications), you retain the right to withdraw that consent at any time by updating your communication preferences within your k222 account settings or by contacting support at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

k222 does not sell, rent, or trade your personal data to unaffiliated third parties for commercial marketing or advertising purposes. Your personal data may, however, be disclosed to the following categories of third parties for the specific purposes described:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card payment processors receive the minimum transaction data required to process your deposit or withdrawal. These providers are contractually bound to use your data only for the stated payment processing purpose.
• KYC & Identity Verification Providers: Accredited third-party KYC service providers receive identity document data submitted by you for the sole purpose of age and identity verification in compliance with k222's regulatory obligations.
• Game Technology Providers: Game software providers who supply titles hosted on the k222 Platform may receive anonymised or pseudonymised session data for game performance monitoring and technical support. No personally identifiable player data is shared with game providers beyond what is technically required for game delivery.
• Regulatory Authorities: k222 is obliged to share specific player data with its licensing and regulatory authority, and with law enforcement bodies or financial intelligence units, where required to do so under applicable law, court order, or regulatory direction.
• Fraud Prevention & AML Services: k222 may share account and transaction data with specialist fraud prevention and anti-money laundering compliance service providers for the purpose of protecting the Platform and its players from financial crime.
• Legal Advisers: In the context of a legal dispute, compliance investigation, or regulatory examination, k222's legal advisers may access relevant account and transaction data on a confidential, need-to-know basis.

The k222 Platform uses cookies and similar tracking technologies to provide essential Platform functionality, improve user experience, and (where you have consented) deliver personalised content and offers. The following categories of cookies are used on the k222 Platform:

• Strictly Necessary Cookies: These cookies are essential for the k222 Platform to operate. They enable core functions including k222 login session management, account security, and payment gateway authentication. These cookies cannot be disabled without preventing you from using the Platform.
• Performance & Analytics Cookies: These cookies collect anonymised data about how visitors interact with the k222 Platform — including which pages are most visited, how long sessions last, and where technical errors occur. This data is used solely to improve Platform performance and user experience.
• Functionality Cookies: These cookies remember your language preferences, game category preferences, and display settings so that the Platform behaves consistently across sessions without requiring you to reconfigure preferences each visit.
• Targeting & Marketing Cookies: With your explicit consent, k222 uses cookies to deliver promotional content relevant to your gaming preferences. You may withdraw consent for marketing cookies at any time through your account settings or your browser cookie management tools.

Most web browsers allow you to control cookie acceptance through their settings. Please note that disabling strictly necessary cookies will impair or prevent your ability to use the k222 Platform, including the k222 login function.

k222 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, subject to any legally mandated minimum retention periods. The following general retention periods apply:

• Active Account Data: All personal data associated with an active k222 account is retained for the duration of the account's active status plus a minimum period of five (5) years following account closure, in compliance with applicable anti-money laundering and gaming regulatory record-keeping requirements.
• Transaction Records: All deposit, withdrawal, and bet transaction records are retained for a minimum of seven (7) years following the date of the transaction to satisfy financial record-keeping obligations under applicable regulatory frameworks.
• KYC Documentation: Identity verification documents submitted during the KYC process are retained for a minimum of five (5) years following the closure of the associated k222 account.
• Support Communications: Customer support correspondence — including live chat transcripts and email exchanges — is retained for a minimum of two (2) years following the resolution of the relevant enquiry or complaint.
• Marketing Consent Records: Records of your marketing consent or opt-out status are retained for the duration of your k222 account plus three (3) years, to demonstrate regulatory compliance.
• Technical & Server Logs: Anonymised Platform access and server performance logs are retained for a maximum of twelve (12) months unless specific data is required in connection with a security investigation or regulatory inquiry.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual.

k222 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL Encryption: All data transmitted between your device and the k222 Platform is encrypted using industry-standard 256-bit SSL/TLS protocols, the same encryption standard deployed by international banking institutions.
• Encrypted Data Storage: Sensitive personal data — including identity documents and financial information — is stored using strong encryption at rest. Passwords are never stored in readable plaintext; they are hashed using bcrypt with a unique cryptographic salt per account.
• Access Controls: Access to personal data within k222's internal systems is restricted on a strict need-to-know basis. Staff members with data access privileges are subject to confidentiality obligations and regular security training.
• Two-Step Verification: All registered k222 players are strongly encouraged to enable two-step verification (2SV) on their accounts, which provides a significant additional layer of protection against unauthorised k222 login attempts from unrecognised devices.
• Intrusion Detection and Monitoring: k222's technical infrastructure is monitored continuously for anomalous access patterns, security threats, and potential breaches. Suspicious activity triggers automated alerts and rapid investigation by k222's security team.
• Third-Party Security Audits: k222 engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of the Platform and its underlying infrastructure.

As a registered k222 player and a data subject under applicable data protection frameworks, you hold the following rights with respect to your personal data held by k222. To exercise any of these rights, contact k222 at [email protected]. k222 will respond to all verified data rights requests within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data that k222 holds about you, together with information about how it is processed and the legal basis for processing.
• Right to Rectification: If any personal data held by k222 about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request that k222 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the original processing purpose and no overriding legal obligation requires its retention.
• Right to Restriction of Processing: You may request that k222 restrict the processing of your personal data in certain circumstances while a dispute or rights request is pending resolution.
• Right to Data Portability: Where processing is based on your consent or on contractual performance, you have the right to receive a structured, machine-readable copy of your personal data for transfer to another service provider.
• Right to Object: You have the right to object to the processing of your personal data where k222 relies on legitimate interests as the legal basis, unless k222 can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Please note that certain data rights may be subject to limitations where k222 is required to retain or continue processing your data to comply with a legal obligation, or where the data in question is necessary for the establishment, exercise, or defence of legal claims.

The k222 Platform is strictly intended for use by adults aged 21 years and above. k222 does not knowingly collect or process personal data from individuals under the age of 21. Age verification is a core component of the k222 account registration process and KYC programme.

k222 strongly encourages parents and guardians to utilise available parental control and content filtering tools to prevent minors from accessing online gambling platforms. If you believe that a minor may have registered or used a k222 account, please contact k222 immediately at [email protected].

k222 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, k222's operational practices, or the data processing activities described herein.

Where an amendment to this Policy is material — meaning it substantially changes how k222 collects, uses, or shares your personal data — k222 will provide advance notice to all registered players via email to the address on file or through a prominent notice displayed on the k222 Platform prior to the amendment taking effect.

The "Last Reviewed" date displayed in the hero section of this page reflects the date of the most recent review and publication. Your continued use of the k222 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the amended terms.

We encourage you to review this Policy periodically to remain informed about how k222 handles your personal data. The current version of this Privacy Policy is always accessible at k222.vu/privacy-policy.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by k222, please contact the k222 data protection team using the following details:

Email: [email protected] (plain text — not a clickable link; please copy and paste into your email client)

Please include "Privacy Request" in the subject line of your email along with your registered k222 username and a description of your request. k222 will acknowledge receipt within 48 hours and will provide a substantive response to all verified data subject requests within 30 calendar days.

If you are unsatisfied with k222's response to a privacy complaint or data rights request, you have the right to escalate your complaint to the relevant data protection supervisory authority or the licensing and regulatory authority overseeing k222's gaming operations.

k222 takes all privacy complaints seriously and is committed to resolving data protection concerns promptly and fairly. If your concern relates to responsible gaming rather than data privacy, please refer to the k222 Responsible Gaming page or contact support directly.