666d99 Privacy Policy

This Privacy Policy applies to all personal data collected, processed, and stored by 666d99 in connection with your use of the 666d99 platform, accessible at 666d99.net, including the website, any associated mobile interface, and all gaming, betting, and account management services offered therein.

For the purposes of this policy, 666d99 acts as the data controller — meaning we are the entity responsible for determining the purposes and means by which your personal data is processed. References to "we", "us", and "our" throughout this document refer to 666d99 in that capacity.

This policy covers all registered account holders on the 666d99 platform, including players based in Pakistan, and applies regardless of whether you access the platform via desktop browser or mobile device. It does not apply to third-party websites, payment processors, or game providers that may be linked from or integrated within the platform — those parties operate their own independent privacy practices.

666d99 collects personal data through several channels: directly from you when you register and use the platform, automatically through your device and browser as you interact with the platform, and from third-party service providers where necessary for verification and payment processing purposes.

The categories of personal data we collect are outlined in the table below:

We do not collect sensitive personal data such as biometric information, religious beliefs, political opinions, or health data, except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request, in which case that information is used solely to facilitate the requested account restriction.

666d99 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes described below:

• Account Registration & Management: To create and maintain your 666d99 player account, verify your identity, and enable you to access platform features including deposits, withdrawals, and game play.
• KYC & Age Verification: To verify that you meet the minimum age requirement of 21 years and to comply with our anti-money laundering (AML) obligations. This applies to all players prior to processing withdrawals above the applicable threshold.
• Payment Processing: To facilitate deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain an accurate record of your transaction history in PKR.
• Platform Personalisation: To remember your game preferences, display content relevant to your activity (such as PSL cricket betting markets or slot game recommendations), and deliver a more tailored platform experience.
• Responsible Gaming Monitoring: To monitor gaming activity patterns that may indicate problematic behaviour, and to apply responsible gaming tools including deposit limits, session alerts, cooling-off periods, and self-exclusion where triggered.
• Fraud Detection & Security: To identify and prevent fraudulent account activity, unauthorised access, multi-accounting, bonus abuse, and any other activity that violates our Terms and Conditions.
• Customer Support: To respond to your queries, process complaints, and maintain a record of our communications with you for quality assurance and dispute resolution purposes.
• Marketing Communications: Where you have given your explicit consent, to send you promotional offers, bonus updates, and platform news via email or SMS. You may withdraw this consent at any time through your account settings.
• Regulatory Compliance & Reporting: To fulfil our obligations under applicable gaming regulations, financial compliance frameworks, and any legal orders from competent authorities.

For each category of data processing activity, 666d99 relies on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions you agreed to upon registration — including account management, payment processing, and game provision.
• Legal Obligation: Processing required for compliance with applicable law, including KYC and AML obligations, age verification requirements, and responses to lawful regulatory or judicial requests.
• Legitimate Interests: Processing carried out in pursuit of 666d99's legitimate business interests, where those interests are not overridden by your privacy rights. This includes fraud prevention, platform security, responsible gaming monitoring, and improving platform functionality.
• Consent: Processing based on your explicit, freely given consent — specifically in relation to marketing communications and any optional data collection features. You may withdraw consent at any time without affecting the lawfulness of prior processing or your ability to continue using the platform.

Where 666d99 relies on legitimate interests as the legal basis for processing, we carry out a balancing assessment to ensure that our interests do not unduly override your fundamental rights and freedoms. Records of these assessments are maintained internally.

666d99 does not sell, rent, or otherwise commercialise your personal data. We share your data only in the following limited and controlled circumstances:

• Payment Processors: We share transaction-relevant data with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank solely to process your deposits and withdrawals. These providers act as independent data controllers for their own processing activities.
• KYC & Identity Verification Providers: We engage regulated third-party verification services to assist with identity checks and age verification. These providers are contractually bound to process your data only for the purposes of completing the verification task.
• Game Content Providers: Certain casino games and live dealer products on the 666d99 platform are powered by third-party game studios. Limited technical data (such as session tokens) may be shared with these providers to enable game functionality. They do not receive your identity or financial data.
• Regulatory Authorities: Where legally required, 666d99 will disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, or courts of competent jurisdiction. We will notify affected account holders where permitted by law.
• Professional Advisors: Our legal, accounting, and audit advisors may access personal data on a strictly confidential basis where necessary to provide their professional services.

666d99 uses cookies and similar tracking technologies on the platform to provide essential functionality, improve performance, and understand how players interact with the site. The following categories of cookies are used:

• Strictly Necessary Cookies: These are essential for the platform to function. They manage your login session, maintain your account security state, and remember your language preferences. These cookies cannot be disabled without impairing core platform functionality.
• Performance Cookies: These collect anonymised data about how players navigate the platform — which pages are visited most, where errors occur, and how long sessions last. This data is used solely to improve platform performance and user experience.
• Functional Cookies: These remember your preferences such as your chosen currency display (PKR), game filter settings, and notification preferences, so you do not need to re-enter them on each visit.
• Analytics Cookies: Where you have consented, we use analytics tools to understand aggregate platform usage patterns. Individual player data is anonymised before being included in any analytics reports.

You can manage your cookie preferences through the cookie consent banner displayed on your first visit to the platform, or through your browser settings. Note that disabling certain cookies may impact your ability to use some platform features. 666d99 does not use third-party advertising cookies or behavioural tracking cookies for cross-site advertising purposes.

666d99 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, plus any additional retention period mandated by applicable law or regulation. Our standard retention schedules are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical analysis.

666d99 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key measures include:

• TLS Encryption: All data transmitted between your browser or mobile device and the 666d99 platform is encrypted using Transport Layer Security (TLS 1.2 or higher), preventing interception of data in transit.
• Encryption at Rest: Sensitive data fields — including KYC document references and payment method identifiers — are encrypted within our databases using AES-256 encryption.
• Access Controls: Access to personal data within 666d99's internal systems is restricted on a strict need-to-know basis. Staff members are granted the minimum level of access required to perform their role, and access is reviewed regularly.
• Two-Factor Authentication: Two-factor authentication (2FA) is available to all 666d99 account holders and is enforced for all internal staff accessing systems that process personal data.
• Penetration Testing: 666d99's platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: We maintain a documented data breach response plan. In the event of a confirmed data security incident affecting your personal data, affected account holders will be notified promptly with details of the nature of the breach, data affected, and steps taken.

While 666d99 takes all reasonable steps to protect your data, no internet-based service can guarantee absolute security. We encourage all players to use strong, unique passwords and to enable 2FA on their 666d99 accounts as an additional layer of personal protection.

As a 666d99 account holder, you have the following rights in respect of your personal data. These rights are available at no cost and can be exercised by contacting our support team at [email protected]:

• Right of Access: You may request a copy of all personal data that 666d99 holds about you, along with information about how it is being processed. We will respond to access requests within 30 days.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections (such as date of birth) may require supporting documentation.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. Note that we may be legally required to retain certain data for compliance purposes even following an erasure request.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while we verify the accuracy of data you have disputed, or pending the outcome of an objection.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and carried out by automated means, you may request that we provide your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to processing based on legitimate interests at any time. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

666d99 is strictly an adult platform. Access to the platform is permitted only to individuals who are aged 21 years or older. We do not knowingly collect personal data from any individual below the age of 21.

During the registration process, all players are required to declare their date of birth and confirm that they meet the minimum age requirement. 666d99 reserves the right to request identity documentation to verify this declaration at any point, and accounts found to have been registered by underage individuals will be immediately closed, with all balances forfeited.

If you are a parent or guardian and you believe that your child has registered an account on the 666d99 platform without your knowledge, please contact us immediately at [email protected]. We will investigate and, if confirmed, close the account and delete any personal data collected from the minor without delay.

666d99 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform functionality. When we make material changes to this policy, we will notify registered account holders via email to the address registered on their account, and display a prominent notification within the platform for a minimum of 30 days following the update.

The "Last Reviewed" date at the top of this policy will always reflect the date of the most recent update. We encourage you to review this policy periodically to stay informed about how we handle your personal data.

Your continued use of the 666d99 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the changes, you have the right to close your account in accordance with the Account Closure provisions in our Terms and Conditions.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy-related complaint, please get in touch with the 666d99 data team using the contact details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please use "Privacy Query", "Data Rights Request", or "Privacy Complaint" as applicable
• Support Hours: Monday to Sunday, 9:00 AM – 1:00 AM Pakistan Standard Time (PST)
• Response Time: General privacy queries within 48 hours; formal data rights requests within 30 calendar days

We take privacy complaints seriously and will investigate all concerns promptly and in good faith. If you are not satisfied with our response to your complaint, you have the right to escalate the matter to the relevant data protection or gaming regulatory authority in your jurisdiction.

For responsible gaming concerns, self-exclusion requests, or account security matters, our support team is available throughout the stated hours and will prioritise such requests accordingly. You can also visit our Responsible Gaming page for more information on the tools and resources available to you.