666d7 Privacy Policy — Your Data, Protected

1. Who We Are

666d7 is an internationally licensed online casino and sports betting platform operating at 666d7.org. Our platform serves English-speaking users in Pakistan and offers a range of gambling products including cricket betting, PSL markets, live dealer casino, slots, and e-sports wagering, all transacted in Pakistani Rupees (PKR).

For the purposes of this Privacy Policy, 666d7 acts as the data controller in respect of the personal information you provide during registration, account use, and any correspondence with our support team. As data controller, we determine the purposes and means by which your personal data is processed.

If you have any questions about how 666d7 handles your personal data, you may contact us at any time at [email protected]. Our support team is available 09:00 – 23:00 PKT, seven days a week.

2. Data We Collect

666d7 collects the following categories of personal data in connection with your use of the platform:

2.1 Identity and Registration Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (collected to verify that you meet the 21+ age requirement)
• National Identity Card (CNIC) number or passport number, where provided for KYC purposes
• Gender (optional, where provided during registration)
• Username selected at registration

2.2 Contact Data

• Email address registered to your 666d7 account
• Mobile phone number (used for account verification and two-factor authentication)
• Residential address in Pakistan (city and province, at minimum; full address where required for KYC)

2.3 Financial Data

• JazzCash or EasyPaisa mobile wallet number used for deposits and withdrawals
• Bank account details (account title, IBAN, bank name) where bank transfer methods are used
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method references
• Source-of-funds documentation submitted in response to KYC or enhanced due diligence requests

2.4 Account Activity Data

• Betting history including all wagers placed, markets selected, stakes, and outcomes
• Casino and slot game session data including games played, session duration, and stakes
• Bonus and promotion history
• Account balance history and transaction logs

2.5 Technical and Device Data

• IP address at the time of each login session
• Device type, operating system, and browser version
• Cookie identifiers and session tokens
• Geolocation data derived from your IP address (country and city level)
• Platform access timestamps and login/logout records

2.6 Communications Data

• Content of support tickets, live chat transcripts, and email correspondence submitted to the 666d7 support team
• Survey responses and feedback submitted voluntarily through the platform

3. How We Collect Your Data

666d7 collects your personal data through the following channels and mechanisms:

• Direct collection: Data you provide directly when completing the registration form, submitting KYC documents, making deposits or withdrawal requests, or contacting our support team.
• Automated collection: Technical data collected automatically when you access the 666d7 platform, including IP address, device identifiers, browser characteristics, and session activity, collected via server logs, cookies, and similar technologies.
• Third-party collection: Data received from payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) in connection with transaction verification; data from identity verification service providers used to confirm the authenticity of KYC documents; and geolocation data from IP intelligence providers used for fraud prevention and access control.
• Verification collection: Data obtained from publicly available records or identity verification databases used to confirm your identity or to screen for politically exposed persons (PEP) and sanctions list matches, as required under our licensing obligations.

4. Why We Use Your Data

666d7 uses the personal data we collect for the following specific purposes:

Purpose	Data Categories Used
Account registration and management — creating and maintaining your 666d7 account, verifying your identity and age, and managing your account settings.	Identity data, contact data, technical data
Platform operation — processing your bets, casino game sessions, deposits, and withdrawals; crediting bonuses; and calculating account balances.	Account activity data, financial data
KYC and regulatory compliance — verifying your age (21+), identity, and source of funds in accordance with our international gaming license obligations; screening against sanctions lists and PEP databases.	Identity data, financial data, communications data
Fraud prevention and security — detecting and preventing fraudulent activity, unauthorised account access, money laundering, and bonus abuse; maintaining the integrity of our platform.	Technical data, financial data, account activity data
Responsible gaming — monitoring account behaviour for indicators of problem gambling; applying deposit limits, loss limits, or self-exclusion arrangements; responding to responsible gaming requests.	Account activity data, financial data, communications data
Customer support — responding to your queries, complaints, and requests via email and live chat.	Contact data, communications data, account activity data
Marketing communications — sending promotional emails, bonus alerts, and personalised offers, where you have given consent or where we have a legitimate interest to do so (see Section 13).	Contact data, account activity data
Platform improvement and analytics — analysing aggregated usage patterns to improve platform performance, game selection, and user experience.	Technical data, account activity data (anonymised or pseudonymised where possible)

5. Legal Basis for Processing

For each processing activity described in Section 4, 666d7 relies on one or more of the following legal bases:

• Contractual necessity: Processing that is necessary to perform the contract between you and 666d7 — including operating your account, processing your bets and transactions, and providing customer support.
• Legal obligation: Processing that is required for 666d7 to comply with its international gaming license obligations, including KYC verification, age verification, anti-money laundering screening, and responsible gaming requirements.
• Legitimate interests: Processing that is necessary for 666d7's legitimate interests in fraud prevention, platform security, and product improvement, provided those interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications where you have explicitly opted in to receive such communications. You may withdraw your consent at any time by contacting [email protected] or by using the unsubscribe mechanism in any marketing email we send you.

6. Data Sharing and Third Parties

666d7 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your personal data only in the following circumstances and only to the extent strictly necessary:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT processing partners receive the financial data necessary to process your deposits and withdrawals. These providers are bound by their own data protection obligations and are not authorised to use your data for any purpose other than processing your transaction.
• Identity verification providers: Third-party KYC service providers process your identity documents and biographic data for the purpose of verifying your identity and age. These providers operate under strict data processing agreements with 666d7.
• Game and platform technology providers: Software providers whose games are hosted on the 666d7 platform may receive pseudonymised session and transaction data necessary for the operation of their games and for audit purposes required under gaming regulations.
• Fraud and security providers: Providers of IP intelligence, device fingerprinting, and sanctions screening services receive technical and identity data strictly for fraud prevention and access control purposes.
• Legal and regulatory disclosure: 666d7 may disclose your personal data to law enforcement agencies, gaming regulatory authorities, financial intelligence units, or courts where required to do so by applicable law, a valid legal process, or our licensing authority. We will notify you of any such disclosure where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of 666d7's assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you in advance of any such transfer and of any changes to the applicable privacy policy.

7. Cookies and Tracking Technologies

666d7 uses cookies and similar technologies on the 666d7.org platform. A cookie is a small text file placed on your device when you visit a website. 666d7 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the operation of the 666d7 platform. They enable core functions such as maintaining your login session, securing your account, and processing your transactions. These cookies cannot be disabled without severely impairing your ability to use the platform.
• Performance and analytics cookies: These cookies collect anonymised or pseudonymised data about how users navigate the 666d7 platform — which pages are visited most frequently, where errors occur, and how the platform performs across different devices. This data is used solely to improve platform quality and user experience.
• Functional cookies: These cookies remember your preferences (such as language settings and display options) to provide a more personalised experience on return visits.
• Fraud prevention cookies: These cookies and device fingerprinting technologies help 666d7 identify and prevent fraudulent activity, including the detection of multiple accounts, bot activity, and unauthorised access attempts.

666d7 does not deploy third-party advertising cookies or tracking pixels that share your browsing behaviour with external advertising networks. You may manage your cookie preferences through your browser settings; however, disabling strictly necessary cookies may prevent you from logging in or using core platform features.

8. Data Retention

666d7 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods driven by our regulatory and licensing obligations:

• Account and KYC records: Retained for a minimum of five (5) years following account closure, as required by anti-money laundering regulations applicable under our international gaming license.
• Transaction and betting records: Retained for a minimum of five (5) years following the date of each transaction, for regulatory audit and dispute resolution purposes.
• Support and correspondence records: Retained for three (3) years from the date of last correspondence, unless retention for a longer period is required in connection with an ongoing dispute or regulatory inquiry.
• Marketing preference records: Opt-out records are retained indefinitely to ensure that we do not inadvertently send marketing communications to users who have withdrawn their consent.
• Technical and device logs: Retained for twelve (12) months from the date of collection, unless a longer retention period is required for fraud investigation purposes.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in a manner that prevents re-identification.

9. Data Security

666d7 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 666d7's servers
• Encryption of sensitive data fields (including financial data and identity documents) at rest on 666d7's servers
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access personal data
• Multi-factor authentication requirements for all 666d7 staff accessing systems that hold personal data
• Regular penetration testing and vulnerability assessments of the 666d7 platform and supporting infrastructure
• Incident response procedures for detecting, investigating, and responding to suspected data security incidents

In the event of a data security incident that is likely to result in a risk to your rights and interests, 666d7 will notify affected users promptly and take all reasonable steps to contain and remediate the incident. Notification will be sent to your registered email address.

You also have a role to play in keeping your 666d7 account secure. Please refer to Section 5 of the Terms & Conditions for your account security obligations, including the requirement to keep your password confidential and to notify us immediately if you suspect unauthorised access to your account.

10. Your Data Rights

Subject to applicable law and the limitations inherent in our regulatory obligations, you hold the following rights in respect of the personal data 666d7 holds about you:

• Right of access: You may request a copy of the personal data 666d7 holds about you. We will provide this within 30 days of a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may update certain account details directly through your 666d7 account settings; for other changes, please contact support.
• Right to erasure: You may request that 666d7 delete your personal data. This right is subject to our obligation to retain certain data for the minimum periods specified in Section 8. Where deletion is not possible due to a retention obligation, we will restrict processing of your data to the minimum necessary.
• Right to restriction of processing: You may request that 666d7 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being verified following a rectification request.
• Right to object: You may object to processing based on legitimate interests, including any profiling carried out for responsible gaming monitoring purposes. We will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (principally marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered username and a description of the right you wish to exercise. We may request identity verification before processing your request.

11. Children and Minors

The 666d7 platform is strictly for users aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. Registration by persons under 21 is prohibited, and we apply age verification controls during the registration and KYC process to enforce this restriction.

If 666d7 becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the associated account, delete all personal data collected in connection with it (subject to any legal obligations to retain records of underage access), and, where required, report the matter to our licensing authority.

If you believe that a person under the age of 21 has registered on the 666d7 platform, please notify us immediately at [email protected].

12. International Data Transfers

666d7 operates under an international gaming license, and some of the third-party service providers we use — including identity verification providers, fraud detection services, and platform technology partners — may process your personal data in jurisdictions outside Pakistan. Where such international transfers occur, 666d7 takes the following steps to ensure that your data remains protected:

• We transfer data only to providers who are contractually bound by data processing agreements that impose data protection standards equivalent to those described in this Privacy Policy.
• We conduct due diligence on all third-party providers to assess their data security practices before entering into a data processing relationship.
• Where transfers involve providers in jurisdictions without an internationally recognised adequacy standard, we apply contractual safeguards including standard data protection clauses.

13. Marketing Communications

666d7 may send you marketing communications about promotions, bonuses, new games, and platform updates. The following rules govern our marketing practices:

• We will send marketing emails only where you have provided consent during registration or have subsequently opted in to receive marketing communications through your account settings.
• Every marketing email we send includes a clearly visible unsubscribe link. Clicking this link will remove you from our marketing mailing list promptly. Alternatively, you may opt out by contacting [email protected].
• Users who have applied a self-exclusion or cooling-off period to their 666d7 account will have all marketing communications suspended for the duration of that period, regardless of their marketing consent status.
• 666d7 does not use your personal data to create detailed psychological profiles for the purpose of targeting you with manipulative gambling advertisements.
• Opting out of marketing communications has no effect on your ability to use the 666d7 platform or on any bonuses you have already qualified for — it simply means you will no longer receive promotional emails from us.

14. Changes to This Privacy Policy

666d7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or operational changes to the 666d7 platform. When we make material changes to this Privacy Policy, we will:

• Update the "Last Revised" date at the top of this page
• Send a notification to your registered email address summarising the key changes
• Where required by our licensing obligations, seek fresh consent for any new processing activities that go beyond the scope of your original consent

We encourage you to review this Privacy Policy periodically. Your continued use of the 666d7 platform following publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any changes to this Privacy Policy, you should close your 666d7 account and cease using the platform.

15. Contact Us

For all privacy-related queries, data rights requests, or concerns about how 666d7 handles your personal data, please contact our support team using the details below. All privacy correspondence should be submitted in English and should clearly state your registered 666d7 username and the nature of your query.

• Email: [email protected]
• Subject line for data rights requests: "Data Rights Request – [Your Username]"
• Support Hours: 09:00 – 23:00 PKT, seven days a week
• Response Time: All privacy queries acknowledged within 24 hours; substantive responses to data rights requests within 30 calendar days

Please note that 666d7 does not communicate via telephone. All formal privacy correspondence must be submitted in writing to the email address above. If you are not satisfied with our response to a privacy concern, you may escalate your complaint through the dispute resolution procedures established by our licensing authority.