666win Privacy Policy – Pakistan Players

1Who We Are

666win is a digital gaming and sports betting platform operated specifically for Pakistani players. For the purposes of this Privacy Policy, 666win is the data controller responsible for your personal information collected through the 666win platform.

Our registered contact for privacy matters is our Data Protection Officer (DPO), reachable at privacy@666win.life. If you have any concern about how 666win handles your data, the DPO is your first point of contact and will respond to all data-related queries within 72 hours.

All data processing by 666win is conducted in connection with the legitimate operation of an online gaming service, including account management, payment processing, anti-fraud measures, and compliance with applicable regulations. 666win does not process Pakistani players' data for any purpose unrelated to the gaming services described in this policy.

2What Personal Data We Collect

666win collects the following categories of personal data from players and site visitors:

3How We Collect Your Data

666win collects your personal data through the following means:

• Direct submission: Information you provide when registering your account, completing identity verification, making a deposit or withdrawal, or contacting our support team.
• Automated collection: Technical data such as IP address, device fingerprint, session duration, and game play logs are collected automatically as you use the 666win platform. This happens via server logs, cookies, and analytics tools.
• Payment processors: When you deposit or withdraw via Easypaisa, JazzCash, NayaPay, SadaPay, or a linked bank/card, your payment provider shares a transaction reference and masked payment identifier with 666win to confirm and reconcile the transaction.
• Third-party verification services: For identity verification purposes, 666win may use third-party KYC (Know Your Customer) providers to validate CNIC documents or confirm your identity. These providers act under strict data processing agreements with 666win.
• Cookies and tracking technologies: 666win uses cookies and similar technologies as described in Section 8 of this Policy. You can manage cookie preferences through your browser settings.

4Why We Use Your Personal Data

666win uses your personal data for the following purposes:

• Account creation and management: To register your 666win account, authenticate your login, and maintain your player profile including PKR balance and transaction history.
• Processing bets and transactions: To accept PKR deposits, settle winning bets, process withdrawal requests to your Easypaisa or JazzCash wallet, and maintain accurate financial records.
• Identity and age verification: To confirm you are 18 years or older and to verify your identity in compliance with anti-money laundering (AML) obligations. This is a legal requirement, not optional.
• Fraud prevention and security: To detect and prevent fraudulent activity, account sharing, bonus abuse, and money laundering. 666win's fraud prevention systems analyse betting patterns and device data continuously to protect both the platform and its legitimate players.
• Responsible gaming: To monitor gaming activity for signs of problem gambling behaviour and to apply any responsible gaming tools you have activated (deposit limits, self-exclusion, etc.).
• Customer support: To respond to your queries, resolve disputes, and improve our support processes based on interaction logs.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the 666win user experience, game performance, and payment processing speed.
• Marketing communications: If you have opted in, to send you relevant promotions, bonuses, and news about 666win via SMS or email. You can opt out at any time through your account settings or by replying STOP to any SMS.
• Legal and regulatory compliance: To meet obligations under applicable anti-money laundering, counter-terrorism financing, and gaming regulations.

5Legal Basis for Processing

666win processes your personal data under the following legal bases:

• Contract performance: Most data processing on 666win is necessary to deliver the gaming and betting services you have signed up for — including account management, payment processing, and game settlement.
• Legal obligation: Certain data processing — particularly identity verification, AML screening, and transaction record retention — is required by applicable regulations and cannot be opted out of while maintaining an active 666win account.
• Legitimate interests: Fraud prevention, platform security, and aggregated usage analytics are conducted under 666win's legitimate interest in running a safe and commercially viable platform. These legitimate interests are balanced against your privacy rights.
• Consent: Marketing communications and optional analytics cookies are processed only on the basis of your explicit consent. You can withdraw consent for either at any time.

6Data Sharing & Third Parties

666win does not sell your personal data to any third party. Data is shared only in the following limited and controlled circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners, and card networks (Visa/Mastercard) receive transaction data strictly necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML screening services receive identity document data under strict data processing agreements. They verify and return a result to 666win — they do not store your documents independently for any commercial purpose.
• Game providers: Certified game providers (such as Pragmatic Play, Hacksaw Gaming, Nolimit City, etc.) receive session and stake data to operate their games on the 666win platform. They are contractually prohibited from using this data for any purpose other than game delivery.
• Technology infrastructure providers: Cloud hosting and CDN partners process technical data (server logs, IP addresses) to maintain platform availability. All such providers operate under data processing agreements with 666win.
• Law enforcement and regulators: 666win will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies when required by a valid legal obligation or court order. We will notify you of any such disclosure where legally permissible to do so.
• Business transfers: In the unlikely event that 666win's business is acquired, merged, or restructured, player data may be transferred to the acquiring entity. You will be notified in advance of any such transfer and your data will remain protected under equivalent terms.

7Payment Data & PKR Transactions

All financial transactions on 666win are conducted in Pakistani Rupees (PKR). 666win maintains a full transaction history for every deposit and withdrawal associated with your account. This data is retained for a minimum of five years in compliance with anti-money laundering regulations.

666win does not store full card numbers or mobile wallet PINs. When you deposit via Easypaisa, JazzCash, or a debit/credit card, the transaction is authenticated directly with your payment provider. 666win receives only a masked identifier (e.g., the last four digits of a card) and a transaction reference number — never the full credentials.

Your PKR wallet balance on 666win is a ledger entry maintained in our secure database. It is not held in a personal bank account in your name, but 666win maintains segregated player fund accounts to ensure that your available balance is always withdrawable regardless of 666win's own operational finances.

8Cookies & Tracking Technologies

666win uses cookies and similar technologies on its website and mobile application to ensure the platform functions correctly and to improve your experience. The following types of cookies are used:

You can manage cookie preferences through your browser settings at any time. Disabling non-essential cookies will not prevent you from accessing or using 666win, though some preference features may not persist between sessions.

9Data Security

666win takes the security of your personal data seriously and has implemented technical and organisational measures appropriate to the risk level of the data we hold. Key security measures include:

• 256-bit SSL/TLS encryption on all connections between your device and the 666win platform, including the website, mobile app, and payment APIs.
• Password hashing: Your account password is never stored in plain text. 666win uses industry-standard one-way hashing algorithms so that even 666win staff cannot read your password.
• Access controls: Internal access to personal data is restricted to staff who need it for their specific role. All data access is logged and regularly audited.
• Intrusion detection and monitoring: 666win's infrastructure is monitored 24/7 for security threats. Anomalous login attempts trigger automatic account protection measures including temporary lockouts and SMS alerts.
• Data minimisation: 666win collects only the data genuinely needed for legitimate purposes and does not retain data beyond the periods described in Section 10.

Despite these measures, no internet-connected platform can guarantee absolute security. If 666win becomes aware of a data breach that is likely to affect your rights, we will notify you and relevant authorities within 72 hours as required by applicable regulations.

10Data Retention

666win retains personal data for the following periods:

• Active account data: Retained for the full duration of your 666win account and for a minimum of 5 years after account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction records: Financial transaction logs are retained for a minimum of 5 years from the date of each transaction, as required by applicable AML regulations.
• Identity verification documents: Copies of identity documents (CNIC, etc.) are retained for the account lifetime plus 5 years after closure.
• Communication records: Support chat transcripts and emails are retained for 3 years from the date of the interaction, to enable dispute resolution and quality assurance.
• Technical and device logs: IP address and device logs are retained for 12 months unless required for fraud investigation or legal proceedings.
• Marketing consent records: Records of your marketing consent or opt-out are retained for the duration of your account plus 3 years after closure.

After the relevant retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you. Requests for early deletion are handled under Section 11 — Your Rights.

11Your Data Rights

As a 666win player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at privacy@666win.life. We will respond within 30 days of receiving a verified request.

12Children's Privacy – Under 18 Not Permitted

666win's services are strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. As part of our registration process, players must confirm their age, and identity verification checks are conducted to validate this.

If 666win becomes aware that a person under 18 has registered an account or that personal data of a minor has been collected inadvertently, we will immediately suspend the account, void any bets or winnings, return deposited funds to the original payment method, and permanently delete all associated personal data.

If you are a parent or guardian and believe your child has accessed 666win, please contact us at privacy@666win.life immediately with as much detail as possible. We will act within 24 hours.

13Third-Party Links

The 666win platform does not contain links to external third-party websites as a matter of policy. All navigation links on 666win lead to pages within the 666win domain. In the event that any third-party content or advertising is introduced to the platform in the future, this Privacy Policy will be updated accordingly and players will be notified.

If you arrived at 666win via a third-party referral link or affiliate site, please note that 666win is not responsible for the privacy practices of that referring site. Once you are on the 666win platform, this Privacy Policy applies in full.

14Responsible Gaming & Your Data

666win uses gaming activity data — including session duration, bet frequency, deposit patterns, and win/loss history — to monitor for signs of problem gambling behaviour. This is done in your interest and forms part of our Responsible Gaming programme.

If 666win's responsible gaming systems flag your account for review, a member of our trained team may reach out to you by SMS or live chat to check in. This outreach is not a commercial communication — it is a welfare check, and you are always free to discuss your gaming habits with our team in confidence.

Data collected under the responsible gaming programme is used solely for player protection purposes and is never shared with third parties for commercial or marketing purposes. If you activate a self-exclusion on 666win, your data will be flagged to prevent re-registration during the exclusion period. For full details of available responsible gaming tools, visit our Responsible Gaming page.

15Changes to This Privacy Policy

666win may update this Privacy Policy from time to time to reflect changes in our data practices, applicable regulations, or platform features. When material changes are made, we will:

• Update the "Last updated" date at the top of this page.
• Send a notification to your registered mobile number or email address at least 7 days before the changes take effect.
• Display a prominent banner on the 666win platform for a minimum of 14 days after the update goes live.

Your continued use of 666win after the effective date of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with any update, you may close your account and request data deletion in accordance with Section 11.

This Privacy Policy was last reviewed and updated on 1 June 2025. We recommend bookmarking this page and checking it periodically, particularly ahead of major PSL or cricket betting seasons when platform features may be enhanced.

16Contact & Complaints

For any questions, concerns, or requests related to this Privacy Policy or how 666win handles your personal data, please contact:

• Data Protection Officer: privacy@666win.life
• General Support: support@666win.life or via Live Chat on the 666win website (average response under 4 minutes, 24/7 in English and Urdu)

We aim to respond to all privacy-related requests within 30 days. For urgent matters — such as a suspected account compromise or a request involving a minor — contact us via Live Chat for an immediate response.

If you are not satisfied with 666win's response to a privacy concern, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. 666win will cooperate fully with any such regulatory inquiry.