666e Privacy Policy

1 Who We Are

This Privacy Policy is issued by 666e (referred to in this document as "666e", "we", "us", or "our"), the operator of the online gaming platform accessible at https://666e.club. 666e operates under an international gaming licence and provides sports betting, live casino, slot games, and instant-win products to players in Pakistan and other permitted jurisdictions.

666e is the data controller in respect of the personal data collected through the 666e platform. As data controller, 666e determines the purposes and means by which your personal data is processed and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

If you have any questions about this Privacy Policy or about how 666e handles your personal data, you may contact our support team at any time. Contact details are provided in Section 14 of this Policy.

2 Personal Data We Collect

666e collects personal data in two ways: directly from you when you provide it, and automatically when you use the platform. The categories of personal data we collect are set out below.

666e does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than identity document photographs required for age and identity verification), or health information beyond what is voluntarily disclosed in the context of responsible gaming support.

3 How We Use Your Personal Data

666e uses the personal data it collects for the following purposes:

• Account creation and management: To register your 666e account, verify your identity and age (21+), and maintain your account throughout its lifecycle.
• Service delivery: To process your deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank; to make games and betting markets available to you; and to credit winnings and bonuses to your account.
• Fraud prevention and AML compliance: To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, and other prohibited activities. This includes automated transaction monitoring and pattern analysis.
• Regulatory compliance: To meet our obligations under the terms of 666e's international gaming licence, including Know Your Customer (KYC) obligations, Anti-Money Laundering (AML) reporting requirements, and responsible gaming mandates.
• Responsible gaming: To monitor gaming patterns that may indicate problem gambling behaviour and, where appropriate, to proactively reach out to players or apply account restrictions in accordance with our responsible gaming obligations.
• Customer support: To respond to your queries, resolve complaints, and provide account assistance via live chat and email.
• Platform improvement: To analyse aggregated usage data and improve the performance, security, and content of the 666e platform.
• Marketing communications: To send you promotional offers, bonus notifications, and game recommendations where you have consented to receive such communications.
• Legal claims: To establish, exercise, or defend legal claims involving 666e.

4 Lawful Basis for Processing

Each processing activity carried out by 666e rests on one or more of the following lawful bases:

• Contractual necessity: Processing required to fulfil our obligations to you under the 666e Terms & Conditions — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws and the conditions of 666e's gaming licence — including KYC verification, AML reporting, and age verification.
• Legitimate interests: Processing carried out for 666e's legitimate business interests — including fraud prevention, platform security, and product improvement — where those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Sharing Your Personal Data

666e does not sell your personal data. We may share your data with the following categories of third parties, strictly to the extent necessary for the stated purpose:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the financial data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable financial regulations.
• Identity verification providers: Third-party KYC and age-verification services receive copies of your identity documents to verify your eligibility. These providers are contractually obligated to handle your data securely and to use it solely for verification purposes.
• Fraud prevention and AML services: Specialist third-party services may receive transactional and behavioural data to assist in detecting and preventing fraud and money laundering.
• Game content providers: Licensed third-party game studios whose content is hosted on the 666e platform may receive anonymised session data necessary for the technical delivery of their games.
• IT and hosting providers: Cloud hosting and technical infrastructure providers who process data on behalf of 666e under strict data processing agreements.
• Regulatory and law enforcement authorities: Where required by law, by court order, or by the conditions of our gaming licence, 666e may disclose personal data to regulators, tax authorities, law enforcement agencies, or other governmental bodies.

6 Cookies & Tracking Technologies

666e uses cookies and similar tracking technologies to operate the platform, personalise your experience, and analyse usage patterns. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the platform to function — including session management, login authentication, and security tokens. These cookies cannot be disabled without impairing your ability to use 666e.
• Functional cookies: Remember your preferences — such as language settings, responsible gaming limits you have set, and your last-visited game category — to provide a more personalised experience.
• Analytical cookies: Collect anonymised data about how players use the platform — including pages visited, session duration, and navigation paths — to help 666e identify areas for improvement. This data is aggregated and does not identify individual users.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and session hijacking prevention mechanisms.

666e does not use third-party advertising or behavioural tracking cookies. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to log in and use the platform.

7 Data Retention

666e retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods imposed by our gaming licence and applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML and KYC regulatory requirements.
• Financial and transaction data: Retained for a minimum of five (5) years from the date of each transaction, as required by financial regulations applicable to licensed gaming operators.
• Gaming activity data: Retained for the duration of your account and for three (3) years following account closure, unless a longer period is required for regulatory or dispute resolution purposes.
• Communications data: Support communications are retained for two (2) years from the date of the communication, or longer if connected to an unresolved complaint or legal matter.
• Technical and session data: Retained for thirteen (13) months from collection for analytical and security purposes, after which it is anonymised or deleted.
• Marketing preference data: Retained until you withdraw your consent or request deletion, subject to applicable minimum retention requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

8 Data Security

666e implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and 666e's servers.
• Encryption of sensitive data at rest, including payment credentials and identity document copies.
• Role-based access controls ensuring that only authorised 666e personnel can access personal data, and only to the extent necessary for their role.
• Regular security audits and penetration testing of the 666e platform and underlying infrastructure.
• Multi-factor authentication requirements for access to production systems containing personal data.
• Contractual data security obligations imposed on all third-party processors who handle personal data on 666e's behalf.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 666e will notify affected players promptly and take all reasonable steps to contain the breach and mitigate its impact.

9 Your Data Rights

As a 666e player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". 666e will respond within 30 days of receiving a valid request.

• Right of access: You may request a copy of the personal data 666e holds about you, together with information about how it is used and with whom it is shared.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to 666e's overriding legal and regulatory retention obligations.
• Right to restrict processing: You may request that 666e restricts the processing of your data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to 666e, to be transferred to you or to another controller.
• Right to object: You may object to processing carried out on the basis of legitimate interests, or to the use of your data for direct marketing purposes. Objections to marketing will be actioned immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
• Right to human review: Where an automated decision has produced a significant effect on your account, you may request that the decision be reviewed by a human member of the 666e team.

10 Children & Minors

666e is strictly an adults-only platform. Access is limited to individuals aged 21 years and above. 666e does not knowingly collect personal data from any person under the age of 21.

If 666e becomes aware that personal data has been collected from a person under 21, the relevant account will be immediately suspended, all associated data will be deleted or anonymised as quickly as is practicable consistent with our regulatory obligations, and any funds deposited will be returned to the original payment source.

Parents and guardians are encouraged to use internet filtering software to prevent underage access to online gaming platforms. If you believe a minor may have registered on 666e, please contact our support team immediately at [email protected] so that we can take prompt action.

11 Marketing Communications

With your consent, 666e may send you promotional communications about new games, bonus offers, PSL cricket betting specials, seasonal promotions, and other 666e news via email or SMS to your registered contact details.

You may opt in to marketing communications during registration or at any time via your account settings. You may withdraw your consent and opt out of marketing at any time by:

• Updating your communication preferences in your 666e account settings.
• Clicking the unsubscribe link included in any marketing email sent by 666e.
• Contacting our support team at [email protected] and requesting removal from all marketing lists.

Opting out of marketing communications will not affect your receipt of transactional or service communications — such as deposit confirmations, withdrawal notifications, security alerts, or responses to support queries — which are sent on the basis of contractual necessity rather than consent.

12 International Data Transfers

666e's primary servers and data processing infrastructure are operated in jurisdictions consistent with the requirements of our international gaming licence. As a licensed operator serving Pakistani players, some processing of your personal data may occur outside of Pakistan — for example, where we use cloud hosting providers or specialist KYC verification services operating in other jurisdictions.

Where personal data is transferred internationally, 666e ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy. These safeguards include contractual data processing agreements with all third-party processors, incorporating standard data protection clauses.

For further information about the specific safeguards applicable to any international transfer of your personal data, please contact us at [email protected].

13 Changes to This Privacy Policy

666e may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the requirements of our gaming licence. The date of the most recent update is always displayed at the top of this page.

Where a change to this Policy is material — meaning it significantly affects the way in which 666e processes your personal data or the rights available to you — 666e will provide advance notice via email to your registered address or via a prominent notice on the platform, prior to the change taking effect.

Your continued use of the 666e platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree with any changes, you may request account closure by contacting [email protected] before the revised Policy takes effect.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a complaint about how 666e has handled your personal data, please contact our team using the following details:

• Live Chat: Available 24/7 directly on the 666e platform — the fastest way to reach us for general privacy queries.
• Email: [email protected] — for formal data rights requests, complaints, or matters requiring written correspondence. Please use the subject line "Privacy" or "Data Rights Request" so your message reaches the right team quickly.

666e will acknowledge all privacy-related contacts within 3 business days and will provide a substantive response within 30 calendar days. For complex data rights requests, we may extend this period by a further 30 days where necessary, in which case we will notify you of the extension and the reason for it.

If you are not satisfied with 666e's response to a privacy complaint, you may have the right to escalate your complaint to the relevant data protection authority or regulatory body in your jurisdiction, or to the supervisory authority applicable to 666e's operating licence.