666p Privacy Policy – How We Handle Your Personal Data

01Introduction

When you sign up for 666p and start playing — whether it is Aviator, PSL betting, Teen Patti, or anything else on the platform — you share certain information with us. This Privacy Policy is our commitment to being straightforward about what we do with that information. Nothing is hidden, nothing is tucked into footnotes.

666p operates as an online betting and gaming platform serving Pakistani players. Everything we collect is directed toward one purpose: giving you a secure, functioning, and reliable 666p experience. We do not run data businesses on the side. We do not sell mailing lists. We collect what is needed, use it for what we said, and protect it from people who should not have it.

This policy applies to all users who access 666p through any device — mobile browser, desktop browser, or any app associated with the 666p platform. It also applies to people who contact 666p support, submit verification documents, or interact with any 666p communication channel.

02Data We Collect

666p collects data in several ways — directly from you when you register or use the platform, automatically through your use of the platform, and occasionally from third-party verification services. Here is a breakdown of each category:

We do not collect full payment card numbers on 666p's own servers. Card payments are processed by our payment processing partners who hold PCI-DSS certification. 666p only receives a tokenised reference and summary data from the transaction.

03How We Use Your Data

Every piece of data collected by 666p has a specific purpose. We do not collect data speculatively or store information we have no clear use for. The main purposes for which your data is used are as follows:

• Account Management: Your registration data is used to create and maintain your 666p account — verifying your identity, sending account notifications, resetting passwords, and enabling login.
• Payment Processing: Payment data is used solely to process your deposits and withdrawals. 666p verifies that payment accounts are in your own name before processing withdrawals. This is both a security measure and a legal compliance requirement.
• Identity Verification (KYC): For withdrawals above threshold amounts or when unusual activity is detected, your identity documents are used to confirm that the account belongs to the person who registered it. KYC data is not used for marketing or shared with third parties outside of regulated verification services.
• Platform Security and Fraud Prevention: Device data, IP addresses, and behavioural patterns are analysed to detect and prevent fraud, account takeover, bonus abuse, and money laundering. This analysis is ongoing and automatic.
• Legal and Regulatory Compliance: Transaction and identity records are maintained as required by applicable regulations to demonstrate compliance with anti-money-laundering requirements.
• Customer Support: Support communication records are used to investigate and resolve your queries, disputes, and complaints. Historical records help us understand recurring issues and improve our processes.
• Responsible Gaming: Your gameplay and transaction history is used to identify patterns that may indicate problem gambling behaviour, enabling 666p to offer timely interventions and support where needed.
• Platform Improvement: Aggregated, anonymised behavioural data is used to improve the 666p user experience — identifying which games are popular, where players encounter friction, and what improvements would make the platform more useful.

666p does not use your personal data to send unsolicited marketing emails or SMS messages without your consent. Transactional communications — deposit confirmations, withdrawal notifications, account alerts — are not marketing and will always be sent regardless of your marketing preferences.

04Legal Basis for Processing

666p processes your personal data under the following legal bases depending on the purpose:

• Contractual Necessity: Processing your registration data, payment data, and transaction records is necessary to fulfil the contract between you and 666p — that is, to operate your account and provide the services you signed up for.
• Legal Obligation: Identity verification, anti-money-laundering checks, and transaction record retention are performed because 666p is legally required to do so.
• Legitimate Interest: Fraud prevention, platform security monitoring, and responsible gaming analytics are conducted under 666p's legitimate interest in operating a safe and compliant platform.
• Consent: Any marketing communications sent to you by 666p are only sent where you have explicitly opted in. You can withdraw this consent at any time through your account settings or by contacting support.

05Payment Data and Financial Information

Given that 666p handles real PKR transactions through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and bank card networks, we want to be especially clear about how payment-related data is handled.

When you deposit or withdraw via Easypaisa or JazzCash, the transaction is initiated through their respective APIs. Your mobile wallet credentials (PIN, OTP) are never entered on the 666p platform — they are entered directly in your Easypaisa or JazzCash app. 666p receives a transaction confirmation reference, the amount, and your registered mobile number. Nothing else.

For IBFT bank transfers, you provide your own bank account number and bank name. This information is used solely to initiate the transfer to your account. 666p does not retain full bank account numbers in our operational systems beyond what is needed to process and audit the transaction.

For Visa and Mastercard card deposits, card details are entered on the payment processor's secure hosted page, not on 666p's own page. 666p receives a payment token and basic card summary (card type, last four digits) for your transaction records. Full card numbers are never accessible to 666p staff or systems.

06Cookies and Tracking Technologies

666p uses cookies and similar technologies to keep the platform functioning properly and to understand how players use it. Here is a plain breakdown of what we use and why:

• Session Cookies: These keep you logged in to your 666p account during a browsing session. Without them, you would need to re-enter your credentials on every page. They expire when you close your browser.
• Persistent Authentication Cookies: If you select "remember me" at login, a longer-duration cookie stores a secure token that lets you return without logging in again for a set period. This can be cleared at any time through your browser settings.
• Analytics Cookies: 666p uses basic analytics to understand how players navigate the platform — which sections are visited most, how long sessions last, and where players encounter errors. This data is aggregated and anonymised before analysis.
• Security Cookies: Some cookies are used as part of 666p's fraud detection system, helping to identify unusual login patterns or account access from new devices.

666p does not place advertising cookies or participate in cross-site tracking networks. You will not see 666p-related retargeting advertisements on other websites based on your activity on our platform. Your browser settings give you full control over cookie acceptance — note that disabling session cookies will prevent you from logging in to 666p.

07Data Sharing and Third Parties

666p does not sell your personal data to any third party. The only circumstances under which your data is shared outside 666p are as follows, and each is strictly controlled:

• Payment Processors: When you transact on 666p, the relevant payment provider (Easypaisa, JazzCash, NayaPay, SadaPay, the IBFT network, or Visa/Mastercard) receives the minimum data needed to process your transaction. These providers have their own privacy policies and security standards.
• Identity Verification Services: If you are required to submit KYC documents, a regulated third-party identity verification service may assist in processing your documents. These services are contractually bound to use your data only for the verification purpose and to maintain appropriate security standards.
• Legal and Regulatory Authorities: 666p may be required to disclose transaction records, account information, or identity data to law enforcement or regulatory bodies where required by law or court order. 666p will not voluntarily share player data with authorities beyond what is legally compelled.
• Technology Service Providers: 666p uses third-party services for cloud hosting, platform analytics, and communications infrastructure. These providers process data on 666p's behalf and are not permitted to use your data for their own purposes. All third-party data processors are bound by data processing agreements.

666p will never share your personal information with other betting or gaming platforms, marketing data brokers, or any commercial entity outside the operational categories above.

08Data Retention

666p retains your personal data for as long as your account is active and for a defined period after account closure. The retention periods reflect regulatory requirements and legitimate operational needs:

• Account and Registration Data: Retained for the duration of your 666p account plus a minimum of 5 years after closure, as required by anti-money-laundering regulations.
• Transaction Records: All deposit and withdrawal records are retained for a minimum of 5 years following the transaction date, regardless of account status.
• KYC Documents: Identity documents submitted for verification are retained for as long as required by applicable regulations — typically 5 years from the date of submission or account closure, whichever is later.
• Support Communications: Chat transcripts and email records are retained for 2 years from the date of the conversation. Records related to unresolved disputes are retained until final resolution plus 1 year.
• Analytics Data: Anonymised aggregated analytics data may be retained indefinitely as it cannot be linked back to individual players.

When data reaches the end of its retention period, it is securely deleted or anonymised. 666p does not retain personal data beyond the periods above unless there is a specific legal requirement to do so in a particular case.

09Data Security

Protecting the personal and financial data of our Pakistani players is one of 666p's most important operational responsibilities. The security measures we maintain include:

• TLS Encryption in Transit: All data transmitted between your device and the 666p platform is protected by TLS encryption. This prevents interception of your login credentials, payment information, or personal details during transmission.
• Encrypted Storage: Sensitive data fields including passwords, identity document data, and payment references are stored in encrypted form. Passwords are hashed using industry-standard algorithms — they are not stored in readable form, and 666p staff cannot see your password.
• Access Controls: Internal access to player records is restricted to personnel with a legitimate operational need. Access is logged and monitored. Broad access to raw player data is not granted to general staff.
• Fraud Detection Systems: Automated systems monitor account activity for patterns consistent with account takeover, fraudulent transactions, or coordinated abuse. Suspicious activity triggers reviews and, where necessary, account holds pending investigation.
• Security Testing: 666p conducts regular security assessments of its platform infrastructure to identify and address vulnerabilities before they can be exploited.

No digital system is completely immune from security incidents. In the event of a data breach that poses a material risk to players, 666p will notify affected players promptly and take immediate steps to contain the breach, investigate the cause, and prevent recurrence.

You also have a role in your own account security. Use a unique, strong password for your 666p account. Never share your login credentials. Contact support immediately if you suspect unauthorised access to your account.

10Your Data Rights

As a 666p player, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at support@666p.link. We respond to all data rights requests within 30 days.

11Children's Privacy

666p is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes age verification steps, and KYC verification provides a secondary check to confirm that account holders are of legal age.

If 666p becomes aware that a minor has created an account or provided personal data, the account will be immediately closed, all transactions reversed where possible, and the data deleted in accordance with our retention policies. If you believe that a minor has registered on 666p, please contact us at support@666p.link so we can investigate and act promptly.

Parents and guardians are encouraged to use appropriate parental control software to prevent minors from accessing online betting and gaming platforms. 666p supports all efforts to keep the platform out of the hands of anyone under 18.

12Changes to This Privacy Policy

666p may update this Privacy Policy from time to time to reflect changes in how we operate, changes in the services we offer, or changes in applicable regulations. When material changes are made, we will notify registered players through an in-platform notification or an email to the address on file, and the updated policy will be published at 666p.link/privacy-policy with a revised "Last Updated" date.

We encourage you to review this policy periodically so you are always aware of how your data is being used. Continued use of 666p after the effective date of any changes constitutes acceptance of the revised Privacy Policy.

If a planned change to this policy would represent a significant reduction in the privacy protections we offer, we will provide advance notice and, where the change affects consent-based processing, request your renewed consent before implementing the change.

13Contact Us About Privacy

If you have any questions, concerns, or requests related to how 666p handles your personal data, please reach out. Our team handles privacy queries with the same priority as payment and account issues — you will not be passed around or ignored.

Email: support@666p.link

You can also use the live chat function on the 666p platform to raise a privacy query in real time. Our support agents are available around the clock and can either resolve your query directly or escalate it to the appropriate team member.

For responsible gaming related queries — including self-exclusion, deposit limits, or concerns about your own or someone else's gaming behaviour — please see our dedicated Responsible Gaming page which includes specific guidance for Pakistani players and relevant support contacts.

This Privacy Policy should be read alongside 666p's Terms and Conditions, which govern the overall agreement between you and 666p, and our Responsible Gaming policy.