vk888 Privacy Policy —
How We Protect Your Personal Data

In this Privacy Policy, the following terms carry the meanings set out below:

• "vk888" / "we" / "us" / "our" — the vk888 online gaming platform operated at vk888.today.
• "User" / "you" / "Player" — any individual who visits vk888.today, registers an Account, or uses any vk888 Service.
• "Personal Data" — any information relating to an identified or identifiable natural person, including name, CNIC number, mobile number, email address, IP address, payment identifiers, and gaming activity records.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. vk888 is the Data Controller for all Personal Data collected through vk888.today.
• "Third-Party Processor" — a service provider engaged by vk888 to process Personal Data on vk888's behalf under a contractual data processing agreement.
• "Cookies" — small data files placed on your device by vk888.today for session management, analytics, and functionality purposes.
• "KYC" — Know Your Customer identity and age verification documentation, including Pakistani CNIC and supporting materials.

vk888 is the sole Data Controller responsible for all Personal Data collected through the vk888 platform at vk888.today. vk888 operates under applicable international gaming license standards, which impose data protection obligations that are embedded into our operational policies and procedures.

All data protection enquiries, rights requests, and formal privacy complaints should be directed to the vk888 Data Protection contact channel listed in Section 14 of this Policy. vk888 acknowledges all privacy-related communications within 5 business days and provides substantive responses within 30 calendar days of receipt.

vk888 collects Personal Data through multiple interactions with the Platform. The categories of data collected, and the context in which they are collected, are detailed below:

When you create a vk888 Account, we collect: full legal name, date of birth, Pakistani mobile number, email address, password (stored in hashed form — never in plain text), and preferred communication language.

To comply with our regulatory obligations and to verify that all users are 21 years of age or older, we collect: CNIC number, a scanned or photographed copy of your CNIC (front and back), and in some cases a selfie photograph taken at the time of verification. KYC documents are processed by vk888's compliance team and stored securely in encrypted form.

vk888 collects records of deposits and withdrawals including: transaction amounts in PKR, transaction timestamps, payment method used (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or USDT), and tokenised payment identifiers. vk888 does not store full mobile wallet PINs, bank account credentials, or full card numbers on its own infrastructure.

vk888 maintains records of your gaming activity including: games played, bet amounts, win/loss outcomes, session durations, sports betting markets accessed, and responsible gaming tool configurations. These records are maintained for regulatory compliance, dispute resolution, and responsible gaming monitoring purposes.

When you access vk888.today, we automatically collect certain technical data including: IP address, device type and model, operating system and version, browser type and version, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud detection, and platform performance analysis.

Records of your interactions with vk888's customer support team — including live chat transcripts, email correspondence, and any documents shared — are retained for quality assurance, training, dispute resolution, and regulatory record-keeping purposes.

Any additional information you voluntarily provide to vk888 — such as responses to surveys, feedback submissions, or information provided during responsible gaming consultations — is collected and processed in accordance with this Policy.

The following table summarises the primary data categories and their associated purposes:

vk888 processes your Personal Data for the following specific purposes, each of which is grounded in a defined legal basis (see Section 5):

• Account creation and management: Processing registration data to set up and maintain your vk888 Account, including authentication, password management, and account settings.
• Service delivery: Enabling access to casino games, sports betting markets, live dealer tables, and all other vk888 Platform features.
• Payment processing: Facilitating deposits and withdrawals via your chosen payment method and maintaining accurate financial records.
• Identity and age verification: Conducting KYC checks to verify your identity and confirm that you are 21 years of age or older, in compliance with our regulatory obligations.
• Anti-money laundering (AML) compliance: Monitoring transactions and account activity for patterns indicative of financial crime, in compliance with applicable AML regulations.
• Fraud prevention and account security: Analysing device data, IP addresses, and behavioural patterns to detect and prevent account takeover, bonus abuse, and fraudulent activity.
• Responsible gaming monitoring: Reviewing gaming activity data to identify patterns that may indicate problem gambling behaviour and to proactively engage affected users with support and tools.
• Customer support: Accessing account and activity records as necessary to investigate and resolve your support queries and formal complaints.
• Legal and regulatory compliance: Retaining records as required by our operating license conditions and applicable law, and providing data to regulatory authorities or law enforcement where legally required.
• Platform improvement: Using anonymised and aggregated data to understand usage patterns and improve the Platform's performance, game selection, and user experience.
• Marketing communications: Where you have provided explicit consent, sending promotional emails, SMS notifications, or platform messages about bonuses, new games, and special offers. You may withdraw consent at any time.

vk888 does not use your Personal Data for automated individual decision-making that produces legal or similarly significant effects without human review.

vk888 processes Personal Data only where a valid legal basis exists. The legal bases applicable to vk888's processing activities are:

• Contract Performance: Processing is necessary to perform the contract between you and vk888 — i.e., to provide the gaming and betting Services you have registered for.
• Legal Obligation: Processing is required to comply with regulatory requirements under our operating license, including KYC verification, AML transaction monitoring, and record retention obligations.
• Legitimate Interests: Processing is necessary for vk888's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided these interests do not override your fundamental privacy rights.
• Consent: For marketing communications and any non-essential cookies, processing is based solely on your explicit, freely given, and revocable consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

vk888 does not sell or commercially transfer your Personal Data to third parties. We may share your Personal Data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual protections:

JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency gateway providers receive the minimum necessary data to process your transactions. Each processor operates under applicable financial services regulations and maintains their own data protection standards.

Third-party game studios (such as Pragmatic Play, PG Soft, Evolution Gaming, and others) receive a pseudonymous player identifier and real-money balance data sufficient to facilitate gameplay. Full personal identity information is not shared with game providers.

Identity document verification may be supported by a contracted third-party KYC technology provider. Such providers process your identity documents solely for the purpose of verification and are prohibited from using your data for any other purpose.

vk888 will disclose Personal Data to licensing authorities, financial intelligence units, or law enforcement agencies where legally required to do so. vk888 will inform you of such disclosure where permitted by law.

Cloud hosting and infrastructure service providers may process Personal Data as a technical necessity of platform operation. All such providers are contracted under Data Processing Agreements that restrict their use of your data to the provision of services to vk888.

vk888.today uses cookies and similar tracking technologies to enable core platform functionality, maintain your session security, and — with your consent — to analyse platform usage and personalise your experience.

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, last-played game category, and responsible gaming tool configurations. These improve your experience but are not strictly essential.
• Analytics Cookies: Used to understand how users navigate vk888.today — including page views, session duration, and feature usage — in aggregated, anonymised form. Used solely to improve Platform performance.
• Security Cookies: Help detect and prevent fraudulent sessions, account takeover attempts, and bot activity on the Platform.

You can manage non-essential cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair or entirely prevent access to vk888.today. vk888 does not use third-party advertising or cross-site tracking cookies.

vk888 retains Personal Data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any overriding legal retention obligations. The following retention periods apply as a general guide:

• Active Account Data: Retained for the duration of the Account's active status plus a minimum post-closure period as required by our operating license (typically 5 years from Account closure).
• KYC Documents: Retained for a minimum of 5 years following Account closure or the last transaction, in accordance with anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 5 years following the transaction date.
• Customer Support Communications: Retained for a minimum of 3 years following the relevant support interaction.
• Marketing Consent Records: Retained for as long as the consent remains active and for 3 years following withdrawal of consent, as evidence of the original consent.
• Technical and Security Logs: Typically retained for 90 days to 12 months, depending on the nature of the log data.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.

vk888 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and vk888 servers;
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records;
• Bcrypt password hashing — vk888 never stores passwords in plain text;
• Two-factor authentication (2FA) available for all User Accounts;
• Role-based access controls limiting staff access to Personal Data strictly on a need-to-know basis;
• Regular penetration testing and vulnerability assessments conducted by independent third-party security specialists;
• 24/7 automated security monitoring with real-time anomaly detection and alerting;
• Secure isolated server infrastructure with no direct public internet access to data stores.

In the event of a Personal Data breach that is reasonably likely to result in a risk to your rights and freedoms, vk888 will notify affected Users without undue delay and will take all reasonable steps to contain and remediate the breach.

As a User of vk888, you hold the following rights in respect of your Personal Data. Requests to exercise any of these rights should be submitted to the contact details in Section 14 and will be processed within 30 calendar days:

Please note that certain rights — particularly erasure — may be limited where retention of your data is required to fulfil a legal obligation (such as AML record-keeping) or where data is required to defend against a pending legal claim. vk888 will explain any such limitation clearly when responding to your request.

vk888 strictly prohibits access to its Platform by individuals under the age of 21. The Platform is not intended for, directed at, or designed to be used by minors, and vk888 does not knowingly collect Personal Data from any person under 21 years of age.

Age verification is a mandatory step in the vk888 KYC process. Any Account discovered to belong to a User under the age of 21 will be permanently and immediately closed. All Personal Data associated with the underage account — beyond the minimum necessary for regulatory record-keeping — will be deleted. No winnings generated during the underage period will be paid out.

If you are a parent or guardian who believes that a minor in your care has registered a vk888 Account, please contact our support team immediately via live chat. vk888 will investigate and close the Account as a priority.

vk888's platform infrastructure and some of its Third-Party Processors operate in jurisdictions outside Pakistan. As a result, your Personal Data may be transferred to and processed in countries other than Pakistan. Where such transfers occur, vk888 takes steps to ensure that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that described in this Policy.

Safeguards employed for international data transfers include: contractual data protection obligations imposed on all Third-Party Processors via Data Processing Agreements; transfer to jurisdictions that maintain adequate data protection standards under applicable international gaming license frameworks ; and technical security measures applied uniformly regardless of processing location.

vk888 does not transfer Personal Data to jurisdictions that lack adequate data protection frameworks without implementing additional contractual or technical safeguards. If you would like further information about the specific safeguards applicable to any international transfer of your data, please contact us using the details in Section 14.

vk888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable regulations. When material changes are made — meaning changes that meaningfully affect how your Personal Data is collected, used, or shared — vk888 will notify you via Platform notification and, where an email address is held for your Account, by email, before the changes take effect.

Non-material changes, such as typographical corrections, structural clarifications, or updates that do not affect your substantive privacy rights, may be made without individual advance notice. The effective date and version number displayed at the top of this Policy will reflect the most current version.

The most current version of this Privacy Policy is always accessible at vk888.today/privacy-policy. We encourage all vk888 Users to review this Policy periodically, particularly following any notification of an update. Your continued use of the Platform following the effective date of any revision constitutes your acknowledgment of the updated Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how vk888 has handled your Personal Data, please contact us through the following channels. vk888 is committed to handling all privacy-related communications promptly, transparently, and in good faith.

• Live Chat: Available 24 hours a day, 7 days a week at vk888.today — the fastest way to raise an urgent privacy concern or request guidance on exercising your data rights.
• Email: [email protected] — for formal data rights requests, please include "Privacy Request" in the subject line along with your registered Account mobile number and a clear description of your request.
• Response Times: Acknowledgement within 5 business days; substantive response within 30 calendar days. Complex requests that require extended investigation will be notified to you within the initial 30-day period with an estimated completion date.
• Support Hours: 00:00–24:00 Pakistan Standard Time (PKT / UTC+5)

When submitting a formal data rights request, please provide sufficient information to allow vk888 to verify your identity before disclosing or modifying your Personal Data. This is a necessary security step to prevent unauthorised access to your information by third parties.

If you are not satisfied with vk888's response to a privacy complaint, you may have the right to escalate the matter to the relevant regulatory authority under the framework applicable to your jurisdiction. vk888's support team can provide further guidance on escalation options upon request.