666pd Privacy Policy

1. Who We Are

This Privacy Policy is issued by 666pd ("we", "us", "our", "666pd"), the operator of the online gaming platform available at 666pd.net and all associated subdomains, mobile applications and related digital services (collectively, the "Platform").

666pd acts as the data controller in respect of the personal data it collects from users ("you", "Player", "User") who register for or interact with the Platform. As data controller, 666pd is responsible for determining the purposes and means of processing your personal data, and for ensuring that processing is conducted lawfully, fairly and transparently.

This Policy applies to all personal data collected from players based in Pakistan, including those accessing 666pd from Karachi, Lahore, Faisalabad, Islamabad, Rawalpindi and all other cities across the country.

Questions regarding this Policy or our data practices may be directed to our support team at any time. Contact details are provided in Section 15.

2. Data We Collect

666pd collects the following categories of personal data from registered players and Platform visitors:

2.1 Identity Data

• Full legal name as it appears on your CNIC;
• Date of birth (used to verify the mandatory 21+ age requirement);
• CNIC number or other government-issued identity document reference;
• Copies of identity documents submitted during KYC verification.

2.2 Contact Data

• Email address registered to your 666pd account;
• Mobile phone number;
• Residential address, city and postal code.

2.3 Financial Data

• Payment method identifiers (e.g. JazzCash mobile number, EasyPaisa wallet ID, HBL or UBL account reference, Meezan Bank or Bank Alfalah account details);
• Transaction history, including deposit amounts, withdrawal requests, bonus credits and wager records — all denominated in PKR;
• Source of funds documentation where requested for AML compliance purposes.

2.4 Account and Gaming Data

• Username and encrypted password hash;
• Betting history, game session records, sports wagering activity (including cricket and PSL markets), slot play history and bingo participation;
• Bonus claims, promotional participation history and loyalty programme activity;
• Responsible gaming settings, including deposit limits, session limits, self-exclusion requests and cooling-off periods.

2.5 Technical and Device Data

• IP address and geolocation data (country and city level);
• Device type, operating system, browser type and version;
• Login timestamps, session durations and Platform navigation patterns;
• Cookie identifiers and similar tracking technologies (see Section 7).

2.6 Communications Data

• Content and metadata of communications between you and the 666pd support team via live chat or email;
• Responses to surveys, feedback forms or promotional communications where you have opted in to receive them.

3. How We Collect Your Data

666pd collects personal data through the following channels and methods:

• Direct submission: Data you provide when registering your 666pd account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions;
• Automated collection: Technical and device data collected automatically as you browse and interact with the Platform, including via cookies, server logs and analytics tools;
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Bank Alfalah and other payment partners when you make a deposit or withdrawal;
• Identity verification partners: Confirmation data returned by third-party KYC and AML screening services used to verify the accuracy of your identity documents;
• Publicly available sources: Where necessary for AML or fraud prevention purposes, 666pd may cross-reference your submitted data against publicly available government records or sanctions lists.

4. How We Use Your Data

666pd uses the personal data it collects for the following purposes:

666pd will not use your personal data for any purpose not listed above without first obtaining your explicit consent or establishing a new lawful basis for the processing.

5. Legal Basis for Processing

Every data processing activity carried out by 666pd rests on one of the following lawful bases:

• Contractual necessity: Processing required to fulfil the agreement between you and 666pd, including account management, payment processing and the provision of gaming services;
• Legal obligation: Processing necessary to comply with applicable laws, including AML regulations, KYC requirements, record-keeping obligations and regulatory reporting duties imposed under 666pd's international gaming licence;
• Legitimate interests: Processing carried out for 666pd's legitimate business interests, including fraud prevention, platform security, responsible gaming enforcement and service analytics — provided those interests are not overridden by your fundamental rights;
• Consent: Processing of your data for marketing communications and personalised promotional offers, where you have given clear and informed consent. You may withdraw consent at any time by updating your communication preferences within your account settings.

6. Data Sharing & Disclosure

666pd does not sell or rent your personal data to third parties. We may share your data with the following categories of recipient only where strictly necessary and subject to appropriate data protection safeguards:

6.1 Payment Processors

Transaction data is shared with payment service providers — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank and Bank Alfalah — to the extent necessary to process your PKR deposits and withdrawals. These providers operate under their own privacy policies and are contractually bound to protect your data.

6.2 Identity Verification and AML Partners

Identity and financial data may be shared with licensed third-party KYC and AML screening providers to verify your identity, confirm your age and screen against applicable sanctions and watchlists. This is a mandatory legal obligation under the international gaming licence standards under which 666pd operates.

6.3 Technology and Infrastructure Providers

666pd uses third-party cloud hosting, cybersecurity, analytics and customer support technology providers. These providers act as data processors under binding data processing agreements and may only process your data on 666pd's documented instructions.

6.4 Gaming Software Providers

Where games on the 666pd Platform are provided by third-party software suppliers, limited technical data (such as session tokens and game outcome records) may be shared with those suppliers solely for the purpose of delivering the game experience and resolving technical disputes.

6.5 Regulatory and Law Enforcement Authorities

666pd may disclose personal data to competent regulatory authorities, law enforcement agencies or courts where required to do so by applicable law, court order, or regulatory direction. 666pd will, where legally permissible, notify affected users of such disclosure.

7. Cookies & Tracking Technologies

The 666pd Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to secure your session, and to help us understand how players interact with our services. The following categories of cookie are used:

• Strictly necessary cookies: Essential to the operation of the Platform. These include session authentication cookies, security tokens and load-balancing cookies. These cannot be disabled without affecting Platform functionality.
• Functional cookies: Remember your preferences, such as language settings, responsible gaming tool configurations and display options, to personalise your Platform experience.
• Analytics cookies: Collect anonymised or pseudonymised data about how players navigate the Platform, which pages are visited most frequently, and where technical errors are encountered. This data is used solely to improve Platform performance.
• Marketing cookies: Used only where you have provided explicit consent, to tailor promotional communications to your gaming interests and activity on the Platform.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to log in and use the Platform. Disabling analytics or marketing cookies will not affect your access to gaming services.

8. Data Retention

666pd retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention guidelines apply:

• Active account data: Retained for the full duration of your account being open and active on the 666pd Platform;
• Post-closure retention: Following account closure, 666pd retains identity, financial and gaming records for a minimum of five (5) years in compliance with AML regulatory requirements. This period may be extended if an active regulatory investigation, legal proceeding or dispute is ongoing;
• Marketing data: Retained only while you maintain an active account and have not withdrawn consent for marketing communications. Removed within thirty (30) days of a valid opt-out request;
• Technical and log data: Server and security logs are typically retained for ninety (90) days before automatic deletion, except where retained for active fraud investigations;
• Self-exclusion records: Retained indefinitely to prevent re-registration by individuals who have requested permanent self-exclusion.

On expiry of the applicable retention period, personal data is either securely and permanently deleted or irreversibly anonymised so that it can no longer be linked to any individual.

9. Data Security

666pd implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• TLS 1.3 encryption for all data in transit between your device and 666pd servers;
• AES-256 encryption for all personal and financial data stored at rest;
• Multi-factor authentication for administrative access to systems containing personal data;
• Regular penetration testing and vulnerability scanning by independent cybersecurity specialists;
• Role-based access controls ensuring that only authorised 666pd personnel with a genuine operational need can access personal data;
• Comprehensive staff training on data protection obligations and information security best practices;
• An incident response plan covering the detection, containment and notification procedures for any personal data breach.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 666pd will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

10. International Data Transfers

666pd's Platform is operated under international gaming licence standards, and some of the technology infrastructure, third-party service providers and gaming software suppliers used by 666pd may be located outside Pakistan. As a result, your personal data may be transferred to, stored in, or processed in countries other than your country of residence.

Where such international transfers occur, 666pd ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Privacy Policy. These safeguards may include:

• Binding contractual clauses that impose data protection obligations on the recipient;
• Transfers only to recipients located in jurisdictions with internationally recognised data protection frameworks;
• Data processing agreements requiring recipients to implement equivalent technical and organisational security measures.

If you require further information about the specific safeguards applied to any international data transfer involving your personal data, please contact the 666pd support team.

11. Your Privacy Rights

As a 666pd player and data subject, you hold the following rights in relation to the personal data we hold about you:

• Right of access: You may request a copy of all personal data 666pd holds about you, along with information about how it is used and who it has been shared with;
• Right to rectification: You may request correction of any inaccurate or incomplete personal data. For basic account details, you can update information directly within your account settings;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to 666pd's legal obligations to retain certain data (see Section 8);
• Right to restriction: You may request that 666pd restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or object to its processing;
• Right to data portability: You may request a copy of the personal data you have provided to 666pd in a structured, commonly used and machine-readable format;
• Right to object: You may object to the processing of your personal data where 666pd relies on legitimate interests as the legal basis, and where your particular situation justifies such an objection;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the 666pd support team via live chat or by emailing [email protected]. We will respond to all rights requests within thirty (30) calendar days. In complex cases, this period may be extended by a further sixty (60) days, in which case we will notify you of the extension and the reasons for it.

12. Children's Privacy

The 666pd Platform is strictly intended for individuals who are 21 years of age or older. 666pd does not knowingly collect personal data from individuals under the age of 21. CNIC-based age verification is a mandatory step in the 666pd registration process and is designed to prevent underage access to the Platform.

If 666pd becomes aware that personal data has been collected from an individual under the age of 21, that account will be closed immediately, all associated data will be securely deleted (subject to any legal retention obligations), and any deposits made will be returned to the originating payment method following appropriate verification.

If you believe that a minor has registered on or is using the 666pd Platform, please notify us immediately via the contact details in Section 15 so that we can take prompt action.

13. Responsible Gaming & Your Data

666pd's responsible gaming tools rely on the processing of your personal and gaming data to function effectively. Specifically:

• Deposit and loss limit settings are stored against your account and enforced in real time during your gaming sessions;
• Self-exclusion requests result in your account being flagged across all 666pd systems. Your identity data is retained on the self-exclusion register to prevent circumvention through re-registration under a different username;
• Gaming behaviour analytics are used to identify patterns that may indicate problem gambling, enabling 666pd's responsible gaming team to reach out with appropriate support resources;
• Where a player is identified as potentially vulnerable, 666pd may apply enhanced data monitoring and restrict certain Platform features as a protective measure.

The processing of data for responsible gaming purposes is carried out in accordance with 666pd's legitimate interests in promoting safe gambling and its legal obligations under applicable gaming licence conditions. For full details of the responsible gaming tools available to you, please visit our Responsible Gaming page.

14. Updates to This Privacy Policy

666pd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. Where changes are material — meaning they significantly affect how we collect, use or share your personal data — we will provide advance notice via email to your registered address or via a prominent in-platform notification.

The "Last updated" date shown at the top of this page will always reflect when the most recent changes were made. We encourage you to review this Privacy Policy periodically to stay informed about how 666pd protects your data.

Your continued use of the 666pd Platform following notification of any material update constitutes your acknowledgement of the revised Privacy Policy. If you do not accept the updated terms, you must cease using the Platform and may request account closure by contacting our support team.

15. Contact Us

If you have questions, concerns or requests relating to this Privacy Policy or the way 666pd handles your personal data, please reach out through any of the following channels:

• Live Chat: Available 24/7 directly from within your 666pd account dashboard — the fastest way to speak with our data protection team;
• Email: [email protected] — please use the subject line "Privacy Request" and include your registered username along with a clear description of your query or request.

666pd aims to acknowledge all privacy-related enquiries within twenty-four (24) hours and to provide a substantive response within thirty (30) calendar days of receipt. For complex requests, particularly those involving subject access or erasure, the response period may be extended as described in Section 11.