666d7 Privacy Policy

This Privacy Policy ("Policy") describes how 666d7 ("Platform", "we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "Player", "User") who access or use the 666d7 online gaming platform, including its website, mobile interface, and all associated features and services.

666d7 takes data privacy seriously. We operate to high standards of data protection and are committed to ensuring that your personal information is handled lawfully, fairly, and transparently. Our data practices reflect both our obligations under applicable law and our genuine commitment to the trust our players place in us.

By registering an account on 666d7, accessing our platform, or otherwise engaging with our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of your agreement with 666d7 and should be read together with our Terms & Conditions and Responsible Gaming Policy.

666d7 collects only the personal data that is necessary to provide, operate, and improve our services, comply with our legal obligations, and protect the integrity of the platform. The categories of personal data we collect include:

We do not intentionally collect sensitive personal data beyond what is required for identity verification and legal compliance. Where document data containing sensitive information (such as CNIC numbers) is collected, it is processed exclusively for KYC and AML compliance purposes and stored with enhanced security controls.

666d7 collects personal data through the following channels and mechanisms:

• Direct collection: Data you provide when you complete the 666d7 account registration form, submit KYC documents, make deposits or withdrawals, contact our support team, or update your account profile settings.
• Automated collection: Technical data collected automatically when you access the 666d7 platform, including your IP address, device identifiers, browser type and version, and session activity data — gathered via server logs, cookies, and similar tracking technologies. See Section 9 for full details of our cookie practices.
• Third-party verification services: Identity verification and KYC data confirmed via our approved third-party document verification partners, and payment confirmation data received from payment processors including JazzCash, EasyPaisa, and banking partners.
• Fraud and security monitoring: Data collected by our automated fraud detection systems during account activity, including transaction monitoring outputs and behavioural risk signals.

666d7 processes your personal data for the following specific and lawful purposes:

• Account creation and management: To register your 666d7 account, maintain your profile, authenticate your identity at login, and manage account settings and preferences.
• Identity verification (KYC): To verify your identity and age in compliance with applicable anti-money laundering (AML) and Know Your Customer (KYC) obligations. This is a legal requirement and cannot be waived.
• Payment processing: To process deposits in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20, and to facilitate withdrawals to your verified payment method.
• Platform operation: To provide access to 666d7 games including sports betting, live casino, slots, and fishing arcade games, and to correctly record all wagering activity, outcomes, and balances.
• Responsible gaming enforcement: To monitor gaming activity for signs of problem gambling behaviour, to enforce deposit limits and self-exclusion restrictions you have set, and to comply with our responsible gaming obligations.
• Fraud prevention and security: To detect and prevent unauthorised account access, fraudulent transactions, bonus abuse, money laundering, and other prohibited conduct as defined in the 666d7 Terms & Conditions.
• Customer support: To respond to your queries, resolve disputes, and maintain a record of communications with our support team.
• Legal compliance: To comply with applicable laws, regulations, and lawful requests from competent authorities, including data retention requirements and AML reporting obligations.
• Platform improvement: To analyse aggregated, anonymised usage data to improve platform performance, game offerings, and user experience.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates by email or in-platform messaging — but only where you have explicitly opted in to receive such communications. You may opt out at any time via your account settings.

666d7 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and 666d7 — including account registration, payment processing, game access, and support services. Without this data, we cannot provide the 666d7 service to you.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations, age verification requirements, data retention mandates, and responses to lawful authority requests.
• Legitimate interests: Processing carried out to pursue 666d7's legitimate interests in fraud prevention, platform security, responsible gaming enforcement, and improving the quality of our services — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent for processing — specifically for optional marketing communications and non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

666d7 does not sell, rent, or trade your personal data to any third party. We share personal data only where necessary for platform operation or required by law, and only with the following categories of recipients:

• KYC / Identity verification providers: Third-party document verification services used to confirm the authenticity of CNIC and passport documents submitted during the KYC process. These providers process data solely on our instructions and are contractually bound to maintain confidentiality.
• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 infrastructure providers receive only the transaction data necessary to process your deposits and withdrawals. They are independently regulated financial service providers.
• Fraud prevention and AML partners: Specialist third-party fraud detection and anti-money laundering screening services that process account and transaction data to identify risk signals. Data shared with these partners is limited to what is strictly necessary.
• Regulatory and law enforcement authorities: Where required by applicable law or pursuant to a valid legal order, 666d7 may be obligated to disclose personal data to regulatory bodies, law enforcement agencies, or courts. We will only comply with such requests that are lawfully issued and properly authorised.
• Technology and infrastructure providers: Cloud hosting, data storage, and platform technology providers that process data on 666d7's behalf under strict data processing agreements. These providers have no independent right to use your data for their own purposes.

666d7 operates as an international online gaming platform. As a result, your personal data may be transferred to and processed in countries outside Pakistan, including the jurisdiction in which 666d7's primary infrastructure and operational systems are hosted.

Where personal data is transferred internationally, 666d7 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Pakistani data protection principles. These safeguards may include:

• Contractual data processing agreements that impose binding privacy and security obligations on all data recipients.
• Transfer only to jurisdictions that maintain adequate data protection standards as assessed by 666d7's compliance team.
• Strict limitations on the purposes for which transferred data may be used by international recipients.

If you have questions about the specific safeguards applicable to any particular international transfer of your data, please contact 666d7 at [email protected].

666d7 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymisation is not technically feasible within standard platform operations, the data is rendered inaccessible and queued for secure deletion at the next scheduled data lifecycle review.

666d7 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit the 666d7 website. Cookies do not contain personally identifiable information by themselves, but in combination with other data they may be used to identify you as a 666d7 account holder.

We use the following categories of cookies:

• Strictly necessary cookies: Essential for the operation of the 666d7 platform. These include session authentication cookies that keep you logged in during your visit, and security cookies that protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without impairing core platform functionality.
• Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations. These enhance your experience but are not strictly required for basic platform operation.
• Analytics cookies: Collect anonymised, aggregated data about how players navigate the 666d7 platform — which pages are visited most frequently, where sessions begin and end, and which features are used. This data is used solely to improve platform performance. No personally identifiable information is included in analytics reporting.
• Security and fraud prevention cookies: Used by our fraud detection systems to identify suspicious patterns, unusual device fingerprints, or behavioural signals consistent with bot activity, account sharing, or bonus abuse.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from accessing your 666d7 account. Disabling analytics or functional cookies will not affect account access but may impair certain platform features.

666d7 respects your rights over your personal data. Depending on applicable law and the specific circumstances of your request, you may be entitled to exercise the following rights:

To exercise any of these rights, submit a written request to 666d7 via live chat support or by email to [email protected]. We will respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.

Please note that certain data rights are subject to limitations. In particular, the right to erasure and the right to restrict processing may be limited where 666d7 has a legal obligation to retain data (for example, KYC records and transaction data required for AML compliance). We will always explain the basis for any limitation clearly in our response to your request.

666d7 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• Encryption in transit: All data transmitted between your device and the 666d7 platform is encrypted using TLS 1.3 protocol. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Encryption at rest: Sensitive personal data — including KYC documents, financial identifiers, and authentication credentials — is encrypted at rest using industry-standard AES-256 encryption.
• Access controls: Internal access to personal data is strictly limited on a need-to-know basis. 666d7 staff are granted access only to the data required to perform their specific role. All access is logged and audited.
• Two-factor authentication: 666d7 supports and strongly encourages 2FA for all player accounts. Internal system access by 666d7 staff requires mandatory 2FA.
• Penetration testing and vulnerability management: The 666d7 platform undergoes regular security assessments and penetration testing by qualified third-party security professionals. Identified vulnerabilities are remediated according to a risk-based prioritisation framework.
• Incident response: 666d7 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to affected players, 666d7 will notify affected users promptly and take all reasonable steps to contain and remediate the breach.

The 666d7 platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect, store, or process personal data belonging to individuals under the age of 21. Age verification is a mandatory component of the KYC process, and accounts that cannot confirm the required minimum age will be permanently declined or closed.

If 666d7 becomes aware that personal data of a minor has been inadvertently collected — for example, through a false age declaration during registration — we will promptly delete all such data and permanently close the associated account. Any funds deposited to such an account will be handled in accordance with applicable law.

If you have reason to believe that a minor has accessed or registered on the 666d7 platform, please notify us immediately at [email protected] so that we can take immediate action.

The 666d7 platform may contain links to third-party websites, payment portals, or service interfaces (for example, a JazzCash or EasyPaisa payment gateway page). This Privacy Policy applies solely to data collected and processed by 666d7 directly. We are not responsible for the privacy practices of any third-party websites or services, and we encourage you to review the privacy policies of any third-party sites you access.

The inclusion of a link to a third-party site on the 666d7 platform does not constitute an endorsement of that site's privacy practices or data handling policies.

666d7 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce new categories of data collection, new processing purposes, or new data sharing arrangements — we will notify active account holders via email or an in-platform notification prior to the changes taking effect.

The revised Policy will be published on this page with an updated effective date. Your continued use of the 666d7 platform following publication of an amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should stop using the platform and contact support to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 666d7 handles your personal data, please contact our support team through any of the following channels:

• Live Chat: Available 24/7 directly on the 666d7 platform — the fastest way to reach our data support team.
• Email: [email protected]

Our team handles privacy queries for players across Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and all other regions of Pakistan. We aim to respond to all privacy-related correspondence within 5 business days.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction. 666d7 is committed to cooperating with competent supervisory authorities to resolve any data privacy disputes in good faith.