666s Privacy Policy

1 Who We Are (Data Controller)

666s ("the Company", "we", "us", "our") operates the online gaming platform accessible at 666s.onl. For the purposes of applicable data protection law, 666s is the data controller in respect of personal data collected from players and visitors to the platform.

This Privacy Policy applies to all data processing activities carried out by 666s in connection with the operation of its online casino, sports betting, payment processing, and customer support services. It covers data collected through the 666s website, any associated mobile-optimised interfaces, email communications, and live chat support interactions.

If you have questions regarding how 666s handles your personal data, or wish to exercise any of the rights described in Section 10 of this Policy, please contact us at the details provided in Section 14.

2 Personal Data We Collect

666s collects personal data that is necessary to provide its services, comply with legal and regulatory obligations, and maintain a secure and fair gaming environment. The categories of personal data we collect include:

Identity & Contact Data

Financial & Payment Data

Technical & Usage Data

Gaming Activity Data

Where 666s requests document scans (such as a copy of your CNIC, proof of address, or bank statement) for KYC verification purposes, those documents are processed solely for identity and age verification and AML compliance purposes and are not used for any marketing or commercial profiling purpose.

3 How We Collect Your Data

666s collects personal data through the following means:

• Direct provision by you: Data you submit during registration, KYC verification, payment processing, support enquiries, or when updating your account preferences;
• Automated technical collection: Data collected automatically when you access the 666s platform, including IP address, device identifiers, session data, and browser information, collected via server logs, cookies, and similar technologies (see Section 9);
• Third-party sources: Data received from payment processors (JazzCash, Easypaisa, banks, Skrill, Neteller), identity verification providers, fraud detection services, and game providers where necessary to complete a transaction or verify your identity;
• Live chat and support interactions: Records of your communications with 666s support staff, which may contain personal data you voluntarily disclose during the interaction.

4 How We Use Your Personal Data

666s uses the personal data we collect for the following purposes:

666s does not sell your personal data to third parties for their own commercial purposes. We do not use your personal data to build profiles for sale to advertisers or data brokers.

5 Legal Basis for Processing

All processing of personal data by 666s is carried out on one or more of the following legal bases under applicable data protection law:

• Performance of a contract: Processing necessary to provide the services you have requested, including account management, game play, and payment processing;
• Legal obligation: Processing required to comply with applicable laws, including KYC requirements, AML/CTF regulations, age verification requirements, and mandatory record-keeping obligations;
• Legitimate interests: Processing carried out for the purpose of preventing fraud, maintaining platform security, improving our services, and enforcing our Terms & Conditions, where those interests are not overridden by your rights and interests;
• Consent: Processing for optional purposes — specifically, sending you promotional and marketing communications — where you have provided explicit consent. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting 666s support.

6 Data Sharing & Third-Party Processors

666s shares personal data with third-party service providers only to the extent necessary to provide its services or meet legal obligations. All third-party processors engaged by 666s are contractually required to process personal data only in accordance with our instructions and in compliance with applicable data protection standards. Categories of third parties with whom we share data include:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Skrill, Neteller, and USDT TRC20 blockchain network — for processing deposits and withdrawals;
• Identity verification providers: Third-party KYC and AML screening services used to verify player identity, age, and compliance status;
• Game providers: Evolution, Pragmatic Play, PG Soft, JILI, Spribe, Microgaming, Playtech, and NetEnt — game providers may receive limited technical session data necessary to operate their games within the 666s platform;
• Fraud prevention and cybersecurity services: Providers of fraud detection, IP geolocation, device fingerprinting, and related security services;
• Regulatory and law enforcement authorities: Where required to disclose data in response to a lawful request, court order, or reporting obligation under applicable AML or other regulatory frameworks.

666s does not share personal data with third-party marketing organisations, data brokers, or any party for purposes unrelated to the operation of the 666s platform and its legal obligations.

7 International Data Transfers

The operation of the 666s platform involves the transfer of personal data across international borders, particularly to service providers and game content partners located outside Pakistan. Where personal data is transferred internationally, 666s ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses with recipient parties.

Specifically, USDT TRC20 transactions are processed on a public blockchain network, which by its nature involves the public recording of transaction data. Players using USDT TRC20 should be aware that transaction data (wallet addresses and amounts) is publicly visible on the TRC20 blockchain. 666s does not control this aspect of blockchain technology.

8 Data Retention

666s retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. Key retention periods applicable to 666s player data are as follows:

• Active account data: Retained for the duration of the account relationship plus a minimum of five (5) years following account closure, to meet AML record-keeping requirements;
• Transaction and financial records: Retained for a minimum of five (5) years following the transaction date, in line with standard AML compliance obligations;
• KYC and identity documents: Retained for the duration of the account relationship plus five (5) years, and subject to extension where required by a regulatory investigation or legal proceeding;
• Technical and session logs: Typically retained for 12 months, unless retention for a longer period is required for fraud investigation or legal proceedings;
• Support and communication records: Retained for three (3) years from the date of the last interaction.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9 Cookies & Similar Technologies

The 666s platform uses cookies and similar tracking technologies to operate essential platform functions, analyse usage patterns, and (where you have consented) deliver relevant promotional content. The categories of cookies used by 666s are:

• Strictly necessary cookies: Required for the platform to function — including session management, login authentication, and security features. These cannot be disabled without impairing core platform functionality;
• Analytical/performance cookies: Used to understand how players navigate and use the 666s platform in aggregate, helping us improve performance and usability. Data collected is aggregated and not linked to individual player identities;
• Functional cookies: Used to remember your preferences (e.g., language, game lobby layout) to personalise your experience;
• Marketing cookies: Used only where you have given explicit consent to receive promotional communications. These may track your activity across sessions to measure the effectiveness of our marketing.

You can manage your cookie preferences through your browser settings or via the cookie consent controls on the 666s platform. Note that disabling strictly necessary cookies may prevent you from logging into or using the platform.

10 Your Data Protection Rights

Subject to applicable data protection law, you have the following rights in relation to your personal data held by 666s:

To exercise any of these rights, please contact 666s via the details in Section 14. We will acknowledge your request within 30 days and provide a substantive response within the timeframe required by applicable law. Note that certain rights may be limited or overridden where 666s is subject to a legal obligation to retain the relevant data (e.g., AML retention requirements).

11 Data Security

666s implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your browser and the 666s platform;
• Encryption of sensitive data fields at rest in our databases;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Two-factor authentication (2FA) for platform accounts and for internal staff access to systems containing player data;
• Regular security assessments and penetration testing;
• Audit logging of access to systems containing sensitive personal data.

While 666s takes all reasonable steps to protect your data, no method of electronic transmission or storage is entirely secure. In the event of a data security incident that may affect your personal data, we will notify affected players and relevant authorities in accordance with our legal obligations.

12 Children's Privacy (Under 18)

666s does not knowingly collect, use, or retain personal data from any person under 18 years of age. Age verification is a mandatory step in the registration and KYC process. If we become aware that personal data has been collected from a person under 18, we will take immediate steps to delete that data and close the associated account.

If you believe that a person under 18 has registered an account on the 666s platform, please contact us immediately via the details in Section 14 so that we may investigate and take appropriate action.

13 Changes to This Privacy Policy

666s reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we provide. Where changes are material, we will provide reasonable notice to registered players via the email address associated with their account prior to the changes taking effect.

Continued use of the 666s platform following the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy. We recommend that you review this page periodically to remain informed of how 666s handles your personal data.

14 Contact & Data Protection Enquiries

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or need to report a data security concern, please contact the 666s team via the following:

We aim to acknowledge all data protection enquiries within 48 hours and to provide a substantive response within 30 days. For enquiries related to account closure, self-exclusion, or responsible gaming limits, please also see our Responsible Gaming page.