666y Privacy Policy

1. Data Controller

666y ("we," "us," or "our") operates as the data controller for personal information collected through the 666y platform at 666y.biz. As data controller, 666y determines the purposes for which, and the means by which, personal data is processed. All data processing activities carried out by 666y are conducted in accordance with this Privacy Policy and applicable data protection principles.

Questions or requests regarding personal data held by 666y should be directed to our data protection contact at [email protected] (please note: this is plain text only — not a clickable link).

2. Personal Data We Collect

2.1 Registration Data

When you register a 666y account, we collect: full name, email address, date of birth, residential address (including city — which may include Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad or any other location in Pakistan), phone number, and chosen username and password. This data is mandatory for account creation and identity verification.

2.2 Identity Verification Data

To comply with anti-money laundering (AML) and know-your-customer (KYC) obligations, 666y may collect copies of: national identity documents (CNIC or passport), proof of address, and payment method ownership documentation. This data is processed to verify your identity and to comply with applicable regulatory requirements.

2.3 Financial Data

We collect transactional data relating to your 666y account including: deposit amounts and methods (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah), withdrawal requests, PKR account balance history, and betting and gaming activity records. Full payment card numbers or mobile banking credentials are never stored by 666y — these are handled directly by our payment processing partners.

2.4 Usage and Behavioural Data

We collect data about how you use the 666y platform, including: pages visited, games played, bets placed, time spent on the platform, device type and operating system, browser type, IP address, and approximate geographic location derived from IP address.

2.5 Communications Data

If you contact 666y customer support via live chat or email, we retain records of those communications for quality assurance, complaint resolution, and regulatory compliance purposes.

3. How We Collect Your Data

666y collects personal data through the following channels:

• Directly from you — during registration, account verification, deposit/withdrawal processes, and communications with support.
• Automatically — through cookies, web beacons, and server logs when you access and interact with 666y.biz.
• From third parties — including identity verification service providers, payment processors, fraud detection partners, and analytics providers, where such data is shared with 666y for the purposes described in this Policy.

4. Purpose and Legal Basis for Processing

666y processes personal data for the following purposes and on the following legal bases:

• Account Management (Contract Performance): To create and manage your 666y account, process deposits and withdrawals, and provide access to games and betting markets.
• Identity Verification (Legal Obligation): To comply with KYC and AML requirements applicable to licensed gaming operators.
• Fraud Prevention & Security (Legitimate Interest): To detect, investigate, and prevent fraudulent transactions, money laundering, and other illegal activities on the 666y platform.
• Responsible Gaming (Legitimate Interest / Legal Obligation): To monitor gaming behaviour, enforce deposit and loss limits, apply self-exclusion requests, and promote responsible gambling practices.
• Marketing (Consent): To send promotional communications about 666y bonuses, new games, PSL cricket betting promotions, and special offers — only where you have provided explicit consent. You may withdraw consent at any time via your account settings or by contacting support.
• Platform Improvement (Legitimate Interest): To analyse usage patterns and improve the functionality, performance, and user experience of the 666y platform.
• Legal Compliance (Legal Obligation): To comply with applicable laws, respond to lawful requests from regulators or law enforcement authorities, and maintain required records.

5. Data Sharing and Disclosure

666y does not sell your personal data to third parties. We may share personal data with the following categories of recipients, solely for the purposes described in this Policy:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment service providers, for the purpose of processing deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML service providers that assist 666y in verifying user identities and preventing financial crime.
• Game and Technology Providers: Licensed casino game studios, RNG certification bodies, and technology platform providers that power 666y's game library and betting infrastructure.
• Analytics and Security Providers: Service providers that assist with fraud detection, platform security, performance monitoring, and usage analytics.
• Regulatory Authorities: Where required by law or by the licensing authority under which 666y operates, we may be required to disclose user data to regulators, law enforcement agencies, or courts of competent jurisdiction.

All third-party service providers engaged by 666y are contractually required to handle personal data in accordance with applicable data protection standards and solely for the purposes for which it was shared.

6. International Data Transfers

666y may transfer personal data to servers or processors located outside Pakistan where necessary to deliver platform services. Where such transfers occur, 666y takes appropriate measures to ensure that the transferred data remains subject to an adequate level of protection consistent with this Privacy Policy and applicable data protection principles. This may include reliance on standard contractual clauses or other appropriate transfer mechanisms recognised by relevant data protection frameworks.

7. Data Retention

666y retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. Specifically:

• Account and transactional data is retained for a minimum of five years following account closure, as required by AML regulations.
• KYC documentation is retained for a minimum of five years following the end of the customer relationship.
• Communications records (live chat and email) are retained for a minimum of two years.
• Marketing consent records are retained for the duration of the consent and for a reasonable period thereafter as evidence of the consent granted.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 666y's data management procedures.

8. Your Data Rights

Subject to applicable law, you have the following rights with respect to personal data held by 666y:

• Right of Access: To request a copy of the personal data 666y holds about you.
• Right to Rectification: To request correction of inaccurate or incomplete personal data.
• Right to Erasure: To request deletion of personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Restriction: To request that 666y restricts processing of your personal data in certain circumstances.
• Right to Data Portability: To receive personal data you have provided to 666y in a structured, machine-readable format.
• Right to Object: To object to processing of your personal data based on legitimate interests, including for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact 666y at [email protected]. We will respond to all verified requests within 30 days. We may need to verify your identity before processing a data rights request.

9. Cookies and Tracking Technologies

9.1 What We Use

666y uses cookies and similar tracking technologies (web beacons, pixels, local storage) to operate and improve the platform. Cookies are small text files stored on your device by your browser.

9.2 Types of Cookies

• Strictly Necessary: Required for the platform to function, including session management and login authentication.
• Performance & Analytics: Collect anonymised data about how users interact with 666y to improve platform performance.
• Functional: Remember your preferences, such as language settings and preferred games.
• Marketing: Used to deliver relevant promotional content about 666y where you have consented to marketing communications.

9.3 Managing Cookies

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality. Strictly necessary cookies cannot be disabled as they are essential for the 666y login system and account operations to work.

10. Children's Privacy

The 666y platform is strictly prohibited for individuals under the age of 18. 666y does not knowingly collect personal data from anyone under 18. If we become aware that personal data has been collected from a person under 18, that account will be immediately suspended, the data will be deleted, and any deposits may be returned at 666y's discretion. Parents or guardians who believe their child may have registered on 666y should contact [email protected] immediately.

11. Security Measures

666y implements technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and 666y servers.
• Encrypted storage of passwords using industry-standard hashing algorithms.
• Access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits and vulnerability assessments of the 666y platform.
• Two-factor authentication options available to all registered 666y users.

While 666y employs industry-standard security practices, no platform can guarantee absolute security. In the event of a data breach that poses a high risk to users, 666y will notify affected users and relevant authorities as required by applicable law.

12. Third-Party Links

The 666y platform may contain links to third-party websites or services in connection with payment processing or game providers. 666y is not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you access through 666y.

13. Updates to This Privacy Policy

666y may update this Privacy Policy from time to time to reflect changes in our data practices, platform functionality, or applicable law. The "Last Updated" date at the top of this page will be revised accordingly. Where changes are material, 666y will notify registered users by email or through a prominent notice on the platform. Your continued use of the 666y platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or 666y's data processing activities, please contact us:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 on the 666y platform
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and provide a substantive response within 30 days.

For data subject rights requests, please include your registered 666y email address, a clear description of your request, and any relevant supporting information to help us verify your identity and process your request efficiently.