666b Privacy Policy — How We Protect Your Personal Data

This Privacy Policy describes how 666b (referred to throughout as "666b", "we", "us", or "our"), operating the online gaming platform at 666b.vu, collects, uses, stores, discloses, and protects the personal data of individuals who register for or use the 666b platform (referred to as "you", "the User", or "the Player").

666b is committed to protecting the privacy of all players, including those accessing the platform from Pakistan and other jurisdictions in which the platform is available. We operate in compliance with applicable data protection standards under our international online gaming licence and adhere to the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

By registering for a 666b account and using any service offered on the platform — including cricket betting, casino games, slots, live dealer tables, and payment services — you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

For the purposes of applicable data protection law, 666b acts as the data controller in respect of all personal data collected through the 666b platform. As data controller, 666b determines the purposes and means of processing personal data relating to registered users and visitors to 666b.vu.

666b operates under an international online gaming licence. The specific licensing entity and jurisdiction details are available to verified players upon written request to our support team. We are subject to the data protection and player privacy obligations imposed by that licensing framework, which are consistent with internationally recognised data protection standards.

666b collects the following categories of personal data from players and platform visitors:

666b does not collect or store full debit card or credit card numbers. Payment card data, where used, is handled directly by PCI-DSS compliant payment processors and is never stored on 666b systems.

666b collects personal data through the following channels:

• Direct submission: Data you provide when completing the 666b registration form, submitting KYC documents, making deposits or withdrawals, contacting our support team, or updating your account settings
• Automated technical collection: Data collected automatically during your platform sessions, including IP addresses, device identifiers, browser characteristics, and navigation data via cookies and similar technologies
• Payment processors: Transaction confirmation data from JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and other integrated payment partners following your authorisation of a payment
• Identity verification services: Data returned from third-party KYC verification providers used to validate your identity documents and confirm your eligibility to use 666b
• Fraud prevention and security systems: Data from anti-fraud tools and security monitoring systems designed to detect and prevent unauthorised access, money laundering, and underage gambling

666b processes your personal data for the following defined purposes:

• Account creation and management: To register your 666b account, verify your identity, manage your account settings, and provide you with access to the platform
• Payment processing: To facilitate deposits and withdrawals through your chosen Pakistani payment method, including JazzCash and EasyPaisa, and to maintain an accurate transaction record
• Platform service delivery: To operate the 666b sportsbook, casino, slots, and live dealer sections, personalise your experience, and ensure correct bonus and promotional credit allocation
• Regulatory compliance and KYC: To fulfil our obligations under our international gaming licence, including age verification, identity verification, and anti-money laundering (AML) requirements
• Responsible gaming: To monitor player behaviour for signs of problem gambling, enforce self-exclusion requests, and administer deposit limit and session time controls
• Security and fraud prevention: To detect and investigate suspicious activity, prevent unauthorised account access, and protect the integrity of the 666b platform
• Customer support: To respond to your queries, resolve disputes, and improve the quality of support provided to all 666b players
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications, and subject to your right to opt out at any time
• Platform analytics and improvement: To analyse aggregated usage patterns, improve game performance, optimise the 666b mobile experience, and inform product development decisions

666b processes your personal data on one or more of the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to fulfil our obligations under the 666b Terms & Conditions — such as creating your account, processing payments, and delivering gaming services
• Legal obligation: Processing required to comply with applicable regulations under our gaming licence, including KYC, AML, and responsible gaming obligations
• Legitimate interests: Processing for security monitoring, fraud prevention, and platform analytics where our legitimate business interests are balanced appropriately against your privacy rights
• Consent: Processing for optional marketing communications and non-essential cookies, where you have provided explicit consent that can be withdrawn at any time

666b does not sell or rent your personal data to third parties. We may share your personal data with the following categories of third parties only where necessary and subject to appropriate data protection agreements:

• Payment processors: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and other payment partners — to process your deposits and withdrawals. These partners process only the minimum data necessary to execute your authorised transactions
• KYC and identity verification providers: Third-party services used to verify the authenticity of identity documents and confirm player eligibility
• AML and fraud screening services: Third-party tools used to monitor transactions for suspicious activity consistent with our licensing obligations
• Gaming software providers: Game studios and live dealer platform providers who supply the games accessible through 666b. These providers may receive anonymised session data for RTP audit purposes
• Regulatory and licensing authorities: Our gaming licence authority and, where required by law, law enforcement agencies or financial regulators — in response to lawful requests and court orders only
• IT infrastructure and cloud service providers: Third-party hosting and data storage providers operating under binding data processing agreements with 666b

All third parties with whom 666b shares personal data are contractually bound to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond the specific service they provide to 666b.

666b takes the protection of financial data particularly seriously given the integration with Pakistani payment platforms including JazzCash and EasyPaisa. The following specific protections apply to financial data processed through 666b:

• 666b stores only a tokenised reference to your JazzCash or EasyPaisa account — never your MPIN, full account number, or authentication credentials
• All deposit and withdrawal transaction data is encrypted at rest and accessible only to authorised 666b operations staff for the purpose of resolving payment queries
• Financial transaction records are retained for the period required under our gaming licence and applicable anti-money laundering regulations, after which they are securely deleted
• 666b does not process payments on behalf of third parties and will reject any attempt to deposit funds from a payment account not registered to the 666b account holder
• Transaction history in your 666b account dashboard is accessible to you at all times for your personal records

666b uses cookies and similar browser-based tracking technologies on the 666b.vu platform. Cookies are small text files placed on your device that help the platform function correctly and enable us to understand how you interact with 666b.

Types of cookies used by 666b:

• Strictly necessary cookies: Required for core platform functionality including login session management, security token maintenance, and regional preference storage. These cannot be disabled without affecting your ability to use 666b
• Performance and analytics cookies: Used to collect anonymised data on how players navigate the 666b platform, which games are most popular, and where technical issues occur — helping us improve the platform
• Functional cookies: Store your preferences such as language settings, game lobby filters, and responsible gaming tool configurations between sessions
• Marketing cookies: Used only where you have consented, to measure the effectiveness of promotional campaigns and ensure you see relevant 666b offers

You can manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the 666b platform, including your ability to remain logged in between visits.

666b retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our gaming licence and applicable regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your active 666b account relationship plus a minimum period following account closure as required by our licensing authority
• KYC and identity documents: Retained for a minimum of five (5) years following account closure, as required under standard AML and gaming regulatory frameworks
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction
• Support communications: Retained for three (3) years from the date of the communication, unless related to an open dispute or regulatory matter
• Marketing consent records: Retained until you withdraw your consent, plus a reasonable period to evidence compliance

Upon expiry of the applicable retention period, 666b will securely delete or anonymise your personal data. Where anonymisation is used, the resulting data cannot be re-identified and is no longer subject to this Privacy Policy.

666b implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit TLS/SSL encryption on all data transmissions between player devices and 666b servers
• AES-256 encryption for personal data stored at rest in 666b databases
• Multi-factor authentication requirements for 666b staff accessing player data systems
• Role-based access controls ensuring that only staff with a specific operational need can access any given category of personal data
• Regular penetration testing and vulnerability assessments of the 666b platform infrastructure
• Comprehensive audit logging of all access to and modifications of personal data records
• Segregation of player funds from operational accounts, protecting your wallet balance in the event of platform insolvency
• Documented data breach response procedures with defined timelines for player and regulatory notification

Subject to applicable law and the terms of our gaming licence, 666b recognises the following rights with respect to your personal data:

• Right of access: You may request a copy of all personal data that 666b holds about you. We will provide this within thirty (30) days of a verified request
• Right to rectification: If any personal data held by 666b is inaccurate or incomplete, you have the right to request that we correct it. You can update many account details directly in your 666b account dashboard
• Right to erasure: You may request deletion of your personal data subject to our regulatory retention obligations. Where a legal retention requirement applies, we will retain only the minimum data necessary to fulfil that obligation
• Right to restrict processing: You may request that 666b limit the way in which your personal data is used in specified circumstances, such as while a data accuracy dispute is pending
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format for transfer to another service provider where technically feasible
• Right to withdraw consent: Where processing is based on your consent — such as marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing
• Right to object: You may object to processing based on legitimate interests, including direct marketing, subject to our assessment of overriding legal grounds for processing

To exercise any of these rights, please contact 666b at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any data rights request to protect against unauthorised disclosures.

The 666b platform is strictly intended for players aged 21 years and above. 666b does not knowingly collect personal data from individuals under the age of 21. If 666b becomes aware that a registered account belongs to or has been accessed by a person under 21 years of age, that account will be immediately closed, any balances handled in accordance with our Terms, and all associated personal data will be processed only to the extent necessary to complete the account closure and comply with regulatory reporting obligations.

If you are a parent or guardian and believe that a person under 21 has registered a 666b account, please contact us immediately at [email protected] so that we can investigate and take appropriate action. We take the protection of minors from online gambling extremely seriously.

666b reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, licensing requirements, or applicable regulations. Where a change is material — meaning it significantly affects how we collect or use your personal data — we will provide at least fourteen (14) days' advance notice by email to your registered address and via an in-platform notification.

Where changes are non-material (such as clarifications of existing language or corrections of typographical errors), we may update this policy without prior notice, with the effective date updated at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how 666b protects your data.

For all questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 666b, please contact our support team using the details below. All privacy-related enquiries are handled by staff specifically trained in data protection responsibilities.

We will acknowledge all privacy enquiries within 48 hours. For formal data rights requests, we may require identity verification before processing your request to ensure we disclose or delete data only to or at the direction of the verified account holder.