Privacy Policy – How 666s Keeps Your Data Safe

1What Data 666s Collects About You

When you register an account or use the 666s platform, we collect certain personal information. We only collect data that is genuinely necessary to deliver the service, comply with our legal obligations and keep the platform safe for all Pakistani players. Below is a plain-language breakdown of exactly what we collect and when.

Registration Data

When you create a 666s account you provide your full name as it appears on your CNIC, a valid Pakistani mobile number, an email address and a password. This information is needed to create and authenticate your account. Without it, we cannot operate your account securely.

Identity Verification Data

To comply with our obligation to prevent underage gambling and to verify your identity before processing withdrawals, 666s may request a copy of your CNIC, passport or other government-issued identity document. This data is handled with a higher level of protection than general account data and is accessible only to authorised 666s compliance staff.

Transaction & Financial Data

Every deposit and withdrawal you make on 666s is logged. We record the transaction amount in PKR, the payment method used (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card), the transaction timestamp and a reference number. We do not store full card numbers, mobile wallet PINs or internet banking passwords. Payment instruments are tokenised by the payment processor.

Gaming Activity Data

666s records your betting and gaming history — which games you played, what amounts you staked, the outcomes and session durations. This data is used to operate your account, settle bets, provide customer support, detect prohibited conduct and power the responsible gaming tools available to you.

Device & Technical Data

When you access 666s from any device, our servers automatically log your IP address, device type, operating system, browser type and version, and session timestamps. This data is used for platform security, fraud prevention and improving compatibility across Pakistani mobile networks and devices.

2How 666s Uses Your Personal Data

Your data is used only for the purposes described here. We do not use your data for profiling, automated life-altering decisions, or any purpose unrelated to operating the 666s platform and keeping it safe.

3Legal Basis for Processing Your Data

Every data processing activity at 666s has a specific legal justification. We rely on the following legal bases for the processing of personal data:

• Contractual Necessity: Processing your registration data, transaction data and gaming activity is necessary to fulfil our contractual obligations to you as a 666s player.
• Legal Obligation: Identity verification, age checks, transaction records and anti-money-laundering screening are required by applicable laws and regulations. 666s cannot operate lawfully without conducting these activities.
• Legitimate Interests: Fraud detection, platform security, responsible gaming monitoring and anonymised analytics are carried out on the basis of 666s's legitimate interest in operating a safe and fair gaming environment.
• Consent: Where 666s sends promotional communications (bonus offers, new game announcements, special events), we rely on your explicit opt-in consent. You may withdraw this consent at any time from your account settings or by emailing support@666s.online.

4Data Sharing & Third Parties

666s does not sell, rent or trade your personal data to any third party for commercial or marketing purposes. Full stop. However, to operate the platform we do share specific, limited data with certain categories of service provider:

Payment Processors

To process your PKR deposits and withdrawals, 666s shares your registered mobile number or card tokenisation reference with the relevant payment processor (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or your card network). These processors handle your payment data under their own privacy policies and are independently responsible for the security of that data within their systems.

Identity Verification Services

When a formal KYC (Know Your Customer) check is required, 666s may use a third-party identity verification service to cross-reference your submitted documents against official databases. The data shared is limited to what is necessary for that specific check and is not retained by the verification provider beyond the scope of the request.

Game Providers

Some games available on 666s are provided by third-party game studios. When you play a third-party hosted game, technical data (such as session ID and stake amount) may be transmitted to that provider for the purpose of operating the game and returning results. These providers do not receive your name, CNIC number or contact details.

Legal & Regulatory Authorities

Where required by applicable law, court order or regulatory instruction, 666s will disclose your data to the relevant authorities. We will notify you of such disclosure where we are legally permitted to do so.

5Cookies & Tracking Technologies

666s uses cookies and similar local storage technologies to operate the platform and improve your experience. Here is what each category of cookie does on the 666s website:

Strictly Necessary Cookies

These cookies are essential for the 666s platform to function. They maintain your login session, remember your language preference and ensure your bet slip is preserved between pages. These cookies cannot be disabled without breaking the platform's core functionality.

Performance Cookies

These cookies collect anonymised data about how pages are used on 666s — which game categories are most visited, where users encounter errors, and how long pages take to load on Pakistani mobile connections. The data is aggregated and cannot identify you individually. We use this data to make the platform faster and more reliable.

Functional Cookies

These cookies remember your preferences on 666s — your preferred odds format, display settings and notification preferences. Without them, you would need to set these preferences every visit.

Managing Cookies

You can control cookies through your browser settings at any time. Disabling strictly necessary cookies will prevent 666s from functioning correctly. Disabling other cookie categories will not affect your ability to place bets or make transactions on 666s.

6How 666s Secures Your Data

Protecting your personal data is a technical priority at 666s, not just a policy commitment. The following measures are implemented across the 666s platform at all times:

• All data transmitted between your device and the 666s servers is encrypted using industry-standard TLS (Transport Layer Security). This applies to account login, deposits, withdrawals and all bet placement activity.
• Passwords are stored using one-way hashing algorithms. 666s staff cannot see your password — only a cryptographic representation of it that cannot be reversed.
• Personal data is stored in access-controlled environments. Only authorised 666s personnel with a legitimate operational need can access identifiable player data.
• Identity documents submitted for KYC verification are stored in an isolated, separately encrypted document store with its own access controls distinct from general player data systems.
• Payment instrument details (full card numbers, mobile wallet PINs) are never stored on 666s systems. Card payments are tokenised at the point of entry by a certified payment processor.
• 666s conducts regular security assessments of its platform infrastructure and responds to identified vulnerabilities on a prioritised basis.

7How Long 666s Keeps Your Data

We do not retain your personal data longer than is necessary for the purpose for which it was collected, or longer than we are required to by law. The following retention periods apply to different categories of data on 666s:

• Account Registration Data: Retained for the lifetime of your account and for up to 5 years following account closure, to meet legal record-keeping obligations.
• Identity Verification Documents: Retained for 5 years from the date of submission in accordance with standard financial services compliance requirements.
• Transaction Records: All PKR deposits, withdrawals and bet records are retained for 5 years from the transaction date.
• Gaming Activity Logs: Retained for 2 years for operational and responsible gaming purposes.
• Customer Support Records: Correspondence with the 666s support team is retained for 2 years from the date of the last interaction.
• Marketing Preferences: Retained until you withdraw consent or for 1 year from the date of last interaction with a marketing communication, whichever comes first.

After the applicable retention period expires, your data is securely deleted or anonymised so that it can no longer be linked to you as an individual.

8Your Rights Over Your Personal Data

As a 666s player you have specific rights in relation to your personal data. These are not hypothetical rights that exist on paper only — you can exercise all of them by contacting 666s and we will respond within the timeframes described below.

• Right of Access: You can request a full copy of all personal data that 666s holds about you. We will provide this within 30 days of receiving a valid request.
• Right to Correction: If any of your personal data held by 666s is inaccurate or out of date, you have the right to request that it be corrected. Most account details can be updated directly from your account settings panel.
• Right to Deletion: You can request the deletion of your personal data from 666s systems, subject to our legal retention obligations. Certain data (such as transaction records) cannot be deleted before the applicable retention period has elapsed.
• Right to Object: You can object to the processing of your data for purposes based on legitimate interest, including marketing. We will stop such processing unless we have compelling legitimate grounds that override your interests.
• Right to Restrict Processing: In certain circumstances you can request that 666s restrict the processing of your data, for example while a dispute about its accuracy is being resolved.
• Right to Data Portability: You can request that 666s provide your data in a structured, commonly used machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: Where 666s processes your data on the basis of consent (principally for marketing), you can withdraw that consent at any time without it affecting the lawfulness of processing that occurred before withdrawal.

To exercise any of these rights, contact the 666s data team at support@666s.online with the subject line "Data Rights Request". We will acknowledge your request within 48 hours and complete it within 30 days.

9Minors & Age Verification

666s does not knowingly collect personal data from any person under the age of 18. The platform is strictly for adult use. All registered players must be at least 18 years of age at the time of registration and must remain so for the lifetime of their account.

If 666s discovers or is notified that an account has been registered by or is being used by a person under 18 years of age, the account will be closed immediately, all gaming activity from that account will be voided, any deposited funds will be returned to their source (not to the minor) and all personal data associated with the account will be deleted without the standard retention periods applying.

If you believe a minor may be using the 666s platform, please notify us immediately at support@666s.online so we can investigate and act without delay.

10Payment Data & PKR Wallet Security

The security of your PKR is as important to 666s as the security of your personal information. Here is specifically how payment data is handled on the 666s platform:

When you add a payment method to your 666s account, the account number or card reference is tokenised — replaced with a non-sensitive reference code that has no value outside of the 666s system. The actual mobile wallet number or card number is only transmitted directly to the payment processor (Easypaisa, JazzCash, NayaPay, SadaPay, your bank or Visa/Mastercard) over an encrypted connection. 666s servers never hold the raw payment credential.

Withdrawals on 666s are always processed to a payment method registered under the same legal name as your 666s account. This rule protects you — it means no one else can redirect your winnings to their account, even if they somehow gain access to your 666s account password. Any withdrawal request to a differently named account is automatically flagged and held for manual review.

If you notice any transaction on your 666s account that you do not recognise, contact support immediately. 666s will investigate within one business day and can temporarily lock your account during the investigation to prevent further unauthorised transactions.

11Changes to This Privacy Policy

Privacy law and data handling best practices evolve over time. When we make material changes to this Privacy Policy — changes that affect how your data is collected, used or shared in a meaningful way — 666s will notify all registered players via the email address on their account at least 14 days before the updated policy takes effect.

Minor, non-substantive changes (such as correcting a typo or improving the clarity of an existing clause without changing its meaning) may be made without prior notice. The "Effective Date" shown at the top of this page will always reflect the date of the most recent update.

Your continued use of 666s after a policy update has taken effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with the updated policy, you should request account closure and withdrawal of your remaining balance before the new policy takes effect.

12Contact & Data Rights Requests

For any question about this Privacy Policy, to exercise your data rights, to report a suspected privacy breach, or to request deletion of your account and associated data, contact the 666s data team using the details below:

We will acknowledge all formal data rights requests within 48 hours and fulfil them within 30 calendar days. If a request requires additional time, we will notify you before the 30-day deadline and provide a revised expected completion date.