Your privacy matters at bak66. This Privacy Policy explains in plain language exactly what personal data bak66 collects, why we collect it, how we protect it, who we may share it with, and what rights you have over your own information as a bak66 player.
A plain-English summary — these highlights do not replace the full Privacy Policy below
bak66 collects personal data to operate your account, process payments, and comply with anti-money-laundering regulations. We do not collect data we have no purpose for.
bak66 does not sell, rent, or trade your personal information to third-party marketers or data brokers — under any circumstances. Your data is used to serve you, not to profit from you indirectly.
All data transmitted to and from bak66 is protected by 256-bit SSL/TLS encryption. Stored data is protected by access controls, encryption at rest, and regular security audits.
You can request access to your data, ask for corrections, request deletion, and object to certain processing — all via bak66 support. Requests are responded to within 30 days.
bak66 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by regulatory obligations — not indefinitely.
Any privacy query, data access request, or complaint can be directed to bak66 support. We handle privacy requests seriously and without delay. Contact details are at the end of this Policy.
This Privacy Policy ("Policy") describes how bak66 ("bak66", "we", "us", "our") collects, processes, stores, and discloses personal data relating to individuals who access or use the bak66 gaming platform at bak66.net and any associated mobile-optimised interfaces (collectively, the "Platform").
By registering an account on bak66 or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the data processing activities described herein. If you do not agree with any part of this Policy, you must not use the bak66 Platform.
This Policy should be read alongside the bak66 Terms and Conditions and our Responsible Gaming Policy, all of which form part of the agreement between you and bak66.
For the purposes of applicable data protection law, bak66 is the data controller in respect of personal data collected through the Platform. bak66 operates under an international gaming licence and is responsible for determining the purposes and means of processing the personal data it collects from Platform users.
Where bak66 shares personal data with third-party service providers for the purpose of delivering Platform services (such as payment processors or identity verification providers), those third parties act as data processors under instruction from bak66 and are bound by contractual data processing obligations consistent with applicable data protection standards.
bak66 collects the following categories of personal data, depending on the nature of your interaction with the Platform:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, government ID copies | Registration & verification |
| Contact Data | Mobile number (Pakistan +92), email address, city/region | Registration |
| Financial Data | JazzCash/EasyPaisa wallet number, bank account details, transaction history, PKR balance | Deposit & withdrawal |
| Technical Data | IP address, device fingerprint, browser type, operating system, session tokens | Every Platform visit |
| Usage Data | Games played, bets placed, betting markets accessed, session duration, bonus activity | Ongoing Platform use |
| Communications Data | Live chat transcripts, support emails, feedback submitted | Support interactions |
| Responsible Gaming Data | Deposit limits set, self-exclusion status, cooling-off periods, problem gambling markers | When tools are used |
bak66 collects personal data through the following means:
bak66 processes personal data only where a valid legal basis exists. The primary legal bases applicable to our processing activities are:
bak66 uses personal data collected from Platform users for the following purposes:
bak66 does not sell, rent, or trade your personal data. We may share your personal data with third parties only in the following circumstances:
All third parties with whom bak66 shares personal data are required to handle that data securely, in accordance with applicable data protection law, and only for the specific purposes authorised by bak66.
bak66 uses cookies and similar technical tracking technologies on the Platform. Cookies are small text files placed on your device by your browser when you visit the Platform. They serve the following purposes:
bak66 does not deploy third-party advertising cookies or cross-site tracking technologies that share your browsing behaviour with external advertisers. You can manage cookie preferences through your browser settings, though disabling strictly necessary cookies will affect Platform functionality.
bak66 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
No data transmission over the internet can be guaranteed 100% secure. While bak66 takes all reasonable steps to protect your data, we cannot guarantee absolute security. If you suspect that your bak66 account has been compromised, contact support immediately via live chat.
bak66 retains personal data for the period necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Identity & verification documents | 5 years from account closure | AML regulatory requirement |
| Transaction records | 5 years from transaction date | AML & financial regulation |
| Account activity logs | 3 years from account closure | Dispute resolution & fraud investigation |
| Support communications | 3 years from interaction date | Quality assurance & dispute evidence |
| Self-exclusion records | Duration of exclusion + 5 years | Responsible gaming compliance |
| Marketing preference data | Until opt-out + 1 year | Consent management |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with bak66's data disposal procedures.
Subject to applicable law and the legitimate interests of bak66 (including its regulatory obligations), you have the following rights in respect of your personal data:
You have the right to request a copy of the personal data bak66 holds about you. bak66 will respond to access requests within 30 days of receipt. A reasonable fee may apply for manifestly excessive or repetitive requests.
If any personal data bak66 holds about you is inaccurate or incomplete, you have the right to request correction. You can update basic contact information directly within your bak66 account settings. Identity data corrections require verification.
In certain circumstances, you have the right to request that bak66 delete personal data we hold about you. This right is subject to bak66's legal obligations — specifically, data that bak66 is required to retain for AML compliance cannot be erased prior to the expiry of the mandatory retention period.
You may request that bak66 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller.
You have the right to object to bak66 processing your personal data on the basis of legitimate interests, including profiling for responsible gaming purposes. bak66 will assess your objection and cease processing unless compelling legitimate grounds override your interests.
To exercise any of the above rights, contact bak66 support via live chat or at the email address provided in Section 16. bak66 will respond within 30 days and will not charge a fee for reasonable requests.
The bak66 Platform is strictly intended for adults aged 21 years and above. bak66 does not knowingly collect or process personal data relating to persons under the age of 21. Age verification is conducted as part of the account registration and identity verification process.
If bak66 becomes aware that personal data belonging to a person under 21 has been collected — whether through registration with falsified date of birth information or any other means — that account will be immediately suspended, the data will be securely deleted after any required regulatory reporting, and any deposited funds will be returned to the originating payment method.
If you are the parent or guardian of a person under 21 who you believe may have accessed the bak66 Platform, contact bak66 support immediately via live chat. bak66 will treat such reports as a priority and will act without delay.
bak66 may send you promotional communications about bonuses, cricket season offers, PSL promotions, new game launches, and other Platform news — but only if you have opted in to receive such communications during registration or subsequently through your account notification preferences.
You may opt out of marketing communications at any time by updating your notification preferences in your bak66 account settings, or by contacting bak66 support and requesting removal from marketing lists. Opt-out requests are processed within 48 hours. Opting out of marketing communications does not affect transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts) which bak66 sends as part of its contractual obligations.
bak66 does not share your contact details with third-party marketers. Marketing communications are sent by bak66 directly and relate exclusively to bak66 products and services.
bak66 is an internationally operating platform and some of the service providers it uses — including game providers, hosting infrastructure, and fraud detection tools — may process data in jurisdictions outside Pakistan. Where personal data is transferred internationally, bak66 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard at least equivalent to that applicable under bak66's gaming licence jurisdiction requirements.
Specifically, bak66 ensures that any international data transfer is made:
bak66 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered Players via email to the address associated with their bak66 account, or via a prominent notice on the Platform, not less than seven (7) days before the changes take effect — except where immediate changes are required by law or a regulatory directive, in which case they take effect upon publication.
The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Continued use of the bak66 Platform after the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not accept the changes, you must cease using the Platform and may request account closure in accordance with the bak66 Terms and Conditions.
If you have any questions, concerns, or requests in relation to this Privacy Policy or bak66's handling of your personal data, please contact us through the following channels:
bak66 will acknowledge privacy requests within 48 hours of receipt and will provide a substantive response within 30 days, as required by applicable data protection standards.
Data access requests, opt-out from marketing, or a question about how bak66 handles your information — live chat is open around the clock. We take privacy questions seriously.
21+ only. Gambling involves risk. Please play responsibly.