Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by the operator of the 666d6 online betting and casino platform ("666d6", "we", "us", "our"), accessible at https://666d6.cam. It describes how we collect, use, store, disclose, and protect personal data submitted by users ("User", "you", "your") when accessing or using any feature, product, or service offered on the Platform.

By registering an account, depositing funds, placing bets, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, you must not use the Platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling guidance, all of which form part of the agreement governing your use of 666d6.

2. Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other data.
• "Processing" — any operation performed on personal data, including collection, storage, retrieval, use, disclosure, deletion, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For this Platform, 666d6's operator is the Data Controller.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller under contractual instruction.
• "KYC" — Know Your Customer; the identity verification process required for account compliance and fraud prevention.
• "Cookies" — small text files placed on your device by the Platform to facilitate functionality, session management, and analytics.
• "Special Category Data" — personal data of a sensitive nature, such as identification documents submitted for KYC purposes.
• "Third Party" — any entity other than 666d6 and the User.

3. Data We Collect

3.1 Registration Data

When you create an account on 666d6, we collect the information you provide during registration, including:

• Full legal name
• Date of birth (used for age verification — 18+ requirement)
• Email address
• Mobile phone number
• Residential address
• Username and password (stored in hashed form)
• Preferred currency (PKR for Pakistani users)

3.2 Identity Verification (KYC) Data

To comply with anti-money-laundering (AML) obligations and to verify your identity before processing withdrawals, we may request:

• National Identity Card (CNIC) — front and back copy
• Passport (where applicable)
• Proof of address (utility bill, bank statement not older than 3 months)
• Proof of payment method ownership (screenshot or statement)
• Selfie or liveness check where required by our compliance team

3.3 Transaction Data

Each deposit, withdrawal, bonus credit, and bet placed on the Platform generates a transaction record. We retain this data for audit, dispute resolution, and regulatory compliance purposes. Transaction records include amounts (in PKR), timestamps, payment method type (e.g., bank transfer, mobile wallet — no payment account numbers are stored directly on our servers beyond what the payment gateway provider manages), and transaction status.

3.4 Usage and Behavioural Data

When you interact with the Platform, we automatically collect:

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Pages visited, session duration, and navigation paths
• Games played, bet amounts, and wagering patterns
• Login timestamps and session activity logs
• Responsible gambling tool usage (limit settings, self-exclusion activity)

3.5 Communications Data

If you contact our customer support team via live chat, email, or any other channel, we retain records of the correspondence, including the content of your messages, timestamps, and the resolution outcome. This data is used to maintain support quality, resolve disputes, and fulfil regulatory obligations.

3.6 Cookie and Tracking Data

See Section 7 (Cookies and Tracking Technologies) for a full breakdown of cookie types used on the Platform.

4. How We Use Your Data

The table below summarises the primary processing activities performed on personal data collected through 666d6, together with the lawful basis for each:

5. Data Sharing and Disclosure

5.1 Third-Party Service Providers (Data Processors)

666d6 engages third-party companies to perform specific functions on our behalf. These providers act as Data Processors and may access personal data only to the extent required to perform their contracted function. They are bound by data processing agreements and are prohibited from using your data for their own purposes. Categories of processors include:

• Payment gateway providers — facilitate deposit and withdrawal transactions. Payment method references (Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah) are familiar Pakistani payment context only and do not imply endorsement of gambling by those providers.
• Identity verification (KYC) providers — specialist third parties that process identity documents.
• Cloud infrastructure providers — host the Platform's servers and databases securely.
• Analytics providers — aggregate, anonymised Platform usage analytics.
• Customer support platform providers — facilitate live chat and ticketing systems.
• Email and communication service providers — deliver transactional and marketing messages.

5.2 Legal Disclosure

We may disclose personal data to regulatory authorities, law enforcement bodies, courts, or other government agencies where required to do so by applicable law, court order, or lawful governmental request. We will notify affected Users of such disclosures where permitted by law.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of 666d6's assets, personal data held on the Platform may form part of the transferred assets. Users will be notified of any such transfer and the applicable privacy terms will be updated accordingly.

5.4 No Sale of Personal Data

666d6 does not sell, rent, license, or otherwise commercialise personal data to any third party for marketing or advertising purposes. This is an unconditional commitment that applies regardless of commercial circumstances.

6. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, and contractual obligations. Indicative retention periods are as follows:

• Account registration data: Duration of active account plus a minimum of five (5) years after account closure, to satisfy AML regulatory retention requirements.
• KYC documents: Duration of active account plus five (5) years after closure, or longer where required by the operator's licensing jurisdiction.
• Transaction records: Minimum five (5) years from the date of the transaction.
• Customer support records: Three (3) years from the date of last interaction.
• Usage and behavioural data: Up to two (2) years, after which data is aggregated and anonymised.
• Marketing consent records: Until consent is withdrawn, plus three (3) years thereafter.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

7. Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small data files placed on your device by the Platform when you visit. They allow the Platform to recognise your browser, maintain your session, remember preferences, and analyse usage patterns. Cookies do not contain executable code and cannot access other files on your device.

7.2 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication, security tokens, and load-balancing cookies. They cannot be disabled without severely degrading Platform functionality.
• Functional Cookies: Remember your preferences such as language settings (English is the only supported interface language), currency display (PKR), and time zone (PST, UTC+5).
• Analytics Cookies: Collect aggregated, anonymised data about how users navigate the Platform. This data helps us identify pages with poor performance and improve the user experience. No personally identifiable information is included in analytics reports.
• Responsible Gambling Cookies: Store session timing data used to present session-duration reminders. These cookies support our responsible gambling obligations.

7.3 Managing Cookies

You can manage and disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging in or using core Platform features. Instructions for managing cookies in common browsers are available in each browser's official help documentation.

8. Data Security

666d6 implements a layered security architecture to protect personal data from unauthorised access, disclosure, alteration, or destruction. Measures include:

• TLS 1.2 / 1.3 encryption for all data transmitted between your device and our servers.
• Encryption at rest for sensitive personal data stored on Platform servers.
• Password hashing using strong cryptographic algorithms — plain-text passwords are never stored.
• Two-factor authentication (2FA) available for User accounts.
• Role-based internal access controls limiting staff access to personal data on a need-to-know basis.
• Regular security assessments and vulnerability testing.
• Incident response procedures to detect, contain and notify affected parties in the event of a data breach.

9. Your Data Protection Rights

Depending on the data protection laws applicable in your jurisdiction, you may hold some or all of the following rights regarding the personal data 666d6 processes about you:

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is processed.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request correction.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the original purpose, consent has been withdrawn, or processing is unlawful — subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict processing of your data while accuracy is contested or while an objection is assessed.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request that your data be provided to you in a structured, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interest, including direct marketing. Objection to marketing will be actioned immediately.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact our support team at: [email protected]. We will respond within a reasonable timeframe. We may request identity verification before processing data access or deletion requests to protect against fraudulent submissions.

10. Marketing Communications

666d6 may send promotional emails, SMS messages, or in-platform notifications about new features, offers, and events to Users who have explicitly opted in to marketing communications during registration or through account settings. Marketing messages will always be in English.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email.
• Updating your communication preferences in Account Settings.
• Contacting our support team and requesting removal from marketing lists.

Opting out of marketing does not affect the delivery of transactional communications (e.g., deposit confirmations, withdrawal notifications, account security alerts, KYC verification updates), which are sent regardless of marketing preferences.

11. Underage User Protection

666d6 is strictly an adults-only platform. We do not knowingly collect or process personal data from individuals under 18 years of age, or below the higher minimum age required by the operator's license jurisdiction. Age verification is performed during the KYC process. If we become aware that an Account was created by an underage user, the Account will be immediately closed and any personal data will be deleted, except where retention is required by law.

If you believe a minor has accessed or registered on the Platform, please contact us immediately at [email protected].

12. International Data Transfers

The operator of 666d6 and its third-party service providers may store and process personal data in countries outside Pakistan. Where personal data is transferred internationally, 666d6 ensures that appropriate safeguards are in place to protect the data to the standards described in this Policy, including contractual protections with receiving parties.

13. Pakistan-Specific Privacy Context

Users accessing 666d6 from Pakistan should be aware of the following local context:

• Pakistan's Prevention of Electronic Crimes Act (PECA) 2016 and the Personal Data Protection Bill (where enacted) may be relevant to how personal data is handled for Pakistani residents. Users are encouraged to review applicable local data protection regulations.
• References to Pakistani payment methods (Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah) on this Platform are for user context only. These payment providers are not data processors for 666d6 unless an active payment integration exists, in which case their own privacy terms apply independently.
• 666d6 does not share user data with the State Bank of Pakistan, PTA, FIA, or any Pakistani government agency unless legally compelled to do so by a valid court order or regulatory directive.

14. Third-Party Links and Services

The Platform does not contain links to external third-party websites. However, payment processing flows may redirect Users to the interface of a payment provider to complete a transaction. Once a User leaves the 666d6 Platform, 666d6's Privacy Policy no longer applies. Users should review the privacy policies of any third-party services they interact with.

15. Changes to This Privacy Policy

666d6 reserves the right to amend this Privacy Policy at any time to reflect changes in regulatory requirements, Platform functionality, or data processing practices. The revised Policy will be published at https://666d6.cam/privacy-policy with an updated "Last Updated" date. Continued use of the Platform after publication of a revised Policy constitutes your acceptance of the changes. Where changes are material, we may notify registered Users by email prior to the effective date.

16. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the 666d6 Data Protection team:

Email: [email protected]
Website: https://666d6.cam

For additional policies and guidance, please visit our Terms & Conditions and Responsible Gambling pages.