666p999 Privacy
Policy

1. Who We Are

666p999 is an internationally licensed online gaming and sports betting platform accessible at 666p999.org. The platform is operated by 666p999 and its affiliated entities (collectively referred to herein as "666p999", "we", "us", or "our"). We operate under an international gaming license and serve English-speaking players across Pakistan, including major cities such as Karachi, Lahore, Islamabad, Faisalabad, and Rawalpindi.

For the purposes of data protection law, 666p999 acts as the data controller in respect of all personal data collected and processed through the platform. This means that we are responsible for determining the purposes and means by which your personal data is processed, and we are accountable for ensuring that such processing is carried out lawfully, fairly, and transparently.

If you have any questions about how 666p999 handles your personal data, you may contact our data protection team at any time. Contact details are provided in Section 15 of this Policy.

2. Personal Data We Collect

666p999 collects only the personal data that is necessary for the purposes described in this Privacy Policy. The categories of personal data we may collect include the following:

2.1 Identity & Registration Data

• Full legal name as it appears on your CNIC;
• CNIC number and a copy of your CNIC (both sides) for KYC verification purposes;
• Date of birth (to verify that you are at least 21 years of age);
• Gender;
• Username and account password (stored in encrypted form).

2.2 Contact Data

• Email address (used for account communication and support);
• Pakistani mobile phone number (used for verification SMS and account alerts);
• Residential address (required for KYC compliance and withdrawal processing).

2.3 Financial & Transaction Data

• Payment method details including JazzCash wallet number, EasyPaisa account, HBL / UBL / Meezan Bank account details, SadaPay handle, or USDT TRC20 wallet address;
• Deposit and withdrawal history, including amounts in PKR and timestamps;
• Bonus and promotional credit history;
• Betting and gaming transaction records.

2.4 Technical & Usage Data

• IP address at the time of registration and each login session;
• Device type, operating system, and browser version;
• Session duration, pages visited, and in-platform navigation behaviour;
• Geolocation data (city/region level, derived from IP address);
• Error logs and crash reports generated during platform use.

2.5 Communications Data

• Records of live chat conversations with 666p999 support agents;
• Email correspondence sent to or received from [email protected];
• Feedback and survey responses submitted voluntarily through the platform.

2.6 Responsible Gaming Data

• Deposit limits, loss limits, and session time limits you have configured;
• Cooling-off periods and self-exclusion requests;
• Problem gambling risk assessments conducted by our responsible gaming team.

3. How We Collect Your Data

666p999 collects personal data through the following channels:

• Directly from you: Information you provide when creating a 666p999 account, completing KYC verification, submitting a deposit or withdrawal request, contacting customer support, or participating in promotions.
• Automatically through platform use: Technical and usage data collected automatically via cookies, session tokens, server logs, and analytics tools as you navigate the 666p999 website or mobile platform.
• From third-party service providers: We may receive identity verification data from KYC providers, fraud signals from anti-fraud services, and payment confirmation data from payment processors such as JazzCash or EasyPaisa.
• From publicly available sources: In limited circumstances, 666p999 may cross-reference publicly available databases to verify identity information or detect fraudulent activity.

4. Why We Use Your Personal Data

666p999 uses the personal data it collects for the following purposes:

• Account creation and management: To register your 666p999 account, verify your identity, manage your preferences, and provide you with access to the platform's features.
• KYC and age verification: To confirm that you are at least 21 years of age and to fulfil our obligations under applicable gaming regulations. This is a legal requirement that cannot be waived.
• Processing deposits and withdrawals: To process PKR transactions via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20 securely and accurately.
• Fraud prevention and security: To detect, prevent, and investigate fraudulent activity, money laundering, multi-accounting, bonus abuse, and other security threats to the platform and its players.
• Responsible gaming compliance: To monitor gameplay patterns for signs of problem gambling behaviour, enforce self-exclusion and limit settings, and fulfil our responsible gaming obligations under our licensing framework.
• Customer support: To respond to your queries, complaints, and support requests in a timely and accurate manner.
• Platform improvement: To analyse usage patterns, troubleshoot technical issues, and improve the 666p999 platform experience for all users across Pakistan.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given explicit consent to receive such communications. You may withdraw consent at any time via the communication preferences section of your account settings.
• Legal and regulatory compliance: To comply with applicable laws, regulatory requirements, court orders, and requests from competent authorities.

5. Legal Basis for Processing

666p999 processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing:

• Performance of a contract: Processing necessary to provide you with the 666p999 Services under our Terms and Conditions — including account registration, payments, and game delivery.
• Compliance with a legal obligation: Processing required to fulfil our KYC, AML, age verification, and responsible gaming obligations under our international gaming license.
• Legitimate interests: Processing conducted for the legitimate interests of 666p999 or its players, such as fraud prevention, platform security, and technical improvement — provided that these interests do not override your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — primarily in relation to direct marketing communications. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Sharing Your Personal Data

666p999 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. However, we may share your personal data with the following categories of third parties in the course of providing the 666p999 Services:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and cryptocurrency payment processors require limited financial data to process your deposit and withdrawal transactions.
• KYC and identity verification providers: Third-party services used to verify your CNIC and confirm your identity in accordance with our AML and age verification obligations.
• Fraud prevention and security services: Specialist providers who help 666p999 detect and prevent fraudulent account activity, bonus abuse, and money laundering.
• Technology and infrastructure providers: Cloud hosting, content delivery, and platform technology partners who process data on our behalf under strict data processing agreements.
• Gaming software providers: Game studios whose titles are hosted on the 666p999 platform may receive anonymised session data for RNG auditing and game performance purposes.
• Regulatory and licensing authorities: Our licensing authority and relevant regulatory bodies may require access to player data as part of regulatory audits or investigations.
• Law enforcement and government agencies: Where required by applicable law, court order, or at the direction of a competent authority, 666p999 may disclose personal data to law enforcement or government bodies.

All third-party service providers engaged by 666p999 are contractually required to process personal data only on 666p999's documented instructions, to maintain appropriate technical and organisational security measures, and to not use player data for their own purposes.

7. Cookies & Tracking Technologies

666p999 uses cookies and similar tracking technologies on its platform to provide core functionality, improve user experience, and support our security and analytics operations. The types of cookies we use include the following:

7.1 Strictly Necessary Cookies

These cookies are essential for the 666p999 platform to function correctly. They enable you to log in to your account, navigate between pages, and use core features such as the cashier and game lobby. These cookies cannot be disabled without breaking core platform functionality.

7.2 Session & Security Cookies

Session cookies maintain your logged-in state across page loads and are deleted automatically when you close your browser. Security cookies help 666p999 detect and prevent fraudulent login attempts, session hijacking, and bot activity.

7.3 Analytics Cookies

666p999 uses analytics tools to understand how players interact with the platform — for example, which sections of the site are most visited, how long players spend on particular pages, and where technical errors occur. This data is used solely to improve the 666p999 platform. Analytics data is aggregated and anonymised where possible.

7.4 Preference Cookies

These cookies remember your platform preferences such as language settings, display options, and responsible gaming configurations so that you do not need to reset them each time you visit.

You may manage cookie preferences through your browser settings at any time. Please note that disabling certain categories of cookies may impair your ability to use some features of the 666p999 platform. A full cookie preference centre is accessible via the cookie banner displayed on your first visit to the site.

8. Data Retention

666p999 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. The general retention periods 666p999 applies are as follows:

• Active account data: Retained for the full duration of your account relationship with 666p999.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering regulatory requirements.
• Transaction and financial records: Retained for a minimum of five (5) years following the date of each transaction, or longer if required by applicable law.
• Support and communications records: Retained for three (3) years following the close of each support interaction, or longer where the matter relates to a formal dispute or regulatory inquiry.
• Marketing consent records: Retained for the duration of the consent and for three (3) years thereafter as evidence of consent having been obtained.
• Self-exclusion records: Retained for a minimum of five (5) years following the expiry of the self-exclusion period to prevent the re-registration of self-excluded players.
• Technical logs: Generally retained for up to 12 months for platform security and fraud analysis purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 666p999's data destruction protocols.

9. Data Security

666p999 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include the following:

• SSL/TLS encryption: All data transmitted between your browser or device and the 666p999 platform is encrypted using industry-standard TLS 1.2 or higher.
• Password hashing: Account passwords are stored using strong, salted cryptographic hashing algorithms. 666p999 staff cannot view your password in plain text.
• Two-factor authentication (2FA): 666p999 offers optional 2FA for all player accounts and strongly recommends its use. All staff accounts with access to player data are required to use 2FA.
• Access controls: Access to personal data is restricted to 666p999 staff and service providers who require it for the performance of their specific functions. Strict role-based access controls are enforced.
• Regular security audits: The 666p999 platform undergoes regular penetration testing and security audits conducted by independent third-party security professionals.
• Data breach response: 666p999 maintains an incident response plan for data security breaches. In the event of a breach that poses a significant risk to player rights, affected players and relevant authorities will be notified without undue delay.

While 666p999 takes all reasonable precautions to safeguard your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your 666p999 Login credentials and should notify us immediately if you suspect unauthorised access to your account.

10. Your Data Rights

As a player and data subject, you hold the following rights in relation to the personal data that 666p999 holds about you. To exercise any of these rights, please contact our data protection team using the details provided in Section 15.

• Right of access: You have the right to request a copy of the personal data 666p999 holds about you, together with information about how it is used and who it is shared with.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by 666p999 be corrected or completed without undue delay.
• Right to erasure: In certain circumstances, you have the right to request that 666p999 delete your personal data. Note that this right is subject to limitations where retention is required by law — for example, KYC and transaction records must be retained for regulatory purposes.
• Right to restriction of processing: You have the right to request that 666p999 restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing.
• Right to data portability: Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests or is carried out for direct marketing purposes. Marketing objections will be acted upon immediately.
• Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

666p999 will respond to all data rights requests within 30 days of receipt. In complex or high-volume cases, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it.

11. Children's Privacy

The 666p999 platform is strictly intended for adults aged 21 and above. 666p999 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is performed as a mandatory step during the account registration and KYC process, and accounts where the holder is found to be under 21 years of age will be immediately and permanently closed.

If you are a parent or guardian and believe that a minor has registered an account on 666p999, please contact our support team immediately at [email protected]. 666p999 will promptly investigate the matter, close the account, and securely delete any personal data associated with it, subject to any legal retention obligations that may apply.

12. International Data Transfers

As an internationally licensed gaming operator, 666p999 may transfer personal data to countries outside Pakistan in the course of providing the Services — for example, where our hosting infrastructure, KYC providers, or technology partners are based in other jurisdictions. Where such transfers occur, 666p999 ensures that appropriate safeguards are in place to protect the transferred data, including contractual data transfer mechanisms and adherence to internationally recognised data security standards.

By registering a 666p999 account and using our Services from Pakistan, you acknowledge that your personal data may be transferred to and processed in countries outside Pakistan. Where such processing takes place, 666p999 remains accountable for the protection of your data as described in this Policy.

13. Third-Party Links

The 666p999 platform may contain links to third-party services — such as payment provider portals — that operate under their own privacy policies. 666p999 is not responsible for the privacy practices or content of any third-party website or service. We encourage you to review the privacy policy of any third-party service you access in connection with the 666p999 platform.

14. Policy Updates

666p999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or our platform's features. Where updates are material — meaning they significantly affect how we collect or use your personal data — we will notify you by email to your registered address and/or by posting a prominent notice on the 666p999 platform at least 14 days before the change takes effect.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. The current version of this Privacy Policy is always accessible at 666p999.org/privacy-policy. Your continued use of the 666p999 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

15. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which 666p999 handles your personal data, please contact our data protection team through the following channels:

• Email: [email protected] — please use the subject line "Privacy Enquiry" for data protection matters.
• Live Chat: Available 24/7 via the in-platform chat widget for urgent privacy or account security concerns.
• Formal written complaints: Submitted via email will receive a written response within 30 days of receipt.

If you are not satisfied with 666p999's response to your privacy concern, you have the right to escalate the matter to the relevant data protection supervisory authority or to the dispute resolution mechanism provided under our gaming license framework. 666p999 cooperates fully with all regulatory investigations relating to data protection compliance.