666d2 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how 666d2 ("we", "us", "666d2", "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "the Player", "the User") who access or use the 666d2 website at https://666d2.org and any associated services, mobile interfaces, or subdomains (collectively, "the Platform").

666d2 is committed to handling personal data with transparency, integrity, and security. This Policy is written in plain, accessible English so that every player in Pakistan — whether you are in Karachi, Lahore, Faisalabad, Islamabad, or anywhere else — can fully understand how your information is handled before you choose to register or play.

By registering a 666d2 account, depositing funds, or continuing to use the Platform after being notified of changes to this Policy, you confirm that you have read and understood this Policy and consent to your personal data being processed as described herein. If you do not agree, you should discontinue use of the Platform.

2 Data Controller

For the purposes of this Privacy Policy, 666d2 acts as the data controller in respect of all personal data collected from players using the Platform. As data controller, 666d2 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection principles.

All data protection enquiries, access requests, correction requests, and deletion requests should be directed to the 666d2 Data Protection contact at [email protected]. Please include "Privacy Request" in the subject line of your email together with your registered username and the last four digits of your CNIC so that we can locate your account securely.

3 Data We Collect

666d2 collects personal data through several means: information you provide directly during registration and account use, information generated automatically through your interaction with the Platform, and information received from trusted third-party verification and payment services. The categories of personal data we collect are set out below.

3.1 Registration & Identity Data

• Full legal name as it appears on your Pakistani CNIC.
• CNIC number (used for identity verification and one-account enforcement only).
• Date of birth (used to verify that you meet the 21+ age requirement).
• Residential address in Pakistan.
• Registered Pakistani mobile number.
• Email address.
• Username and encrypted password (passwords are stored as salted hashes — 666d2 staff cannot view your plaintext password).

3.2 Financial & Transaction Data

• Deposit and withdrawal history, including amounts, timestamps, and payment methods used.
• JazzCash or EasyPaisa account reference numbers and HBL, UBL, Meezan Bank, or Raast account identifiers linked to your profile for payment processing purposes.
• Debit card details (card number stored in tokenised form only — 666d2 does not store your full card number in plaintext).
• Source of funds documentation submitted for enhanced KYC purposes.

3.3 Gaming & Behavioural Data

• Betting history, game session data, wager amounts, win/loss records, and bonus usage.
• Responsible gaming settings you have applied, including deposit limits, session limits, cooling-off periods, and self-exclusion status.
• Customer support interactions, including live chat transcripts and email correspondence.

3.4 Technical & Device Data

• IP address and approximate geolocation data (country and city level).
• Device type, operating system, and browser information.
• Login timestamps and session duration data.
• Cookie identifiers and similar tracking technologies as described in Section 6.

4 How We Use Your Data

666d2 uses the personal data we collect strictly for the purposes described in this Policy. We do not use your data for any purpose that would be incompatible with the reasons for which it was originally collected. The primary purposes for which we process your data are as follows:

• Account creation and management: To register your 666d2 account, authenticate your identity, and manage your ongoing relationship with the Platform.
• KYC and age verification: To verify that you are aged 21 or above and that your identity matches the details you provided at registration, in compliance with responsible gaming obligations.
• Payment processing: To facilitate PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and Debit Card, and to maintain accurate financial records.
• Fraud prevention and security: To detect and prevent unauthorised account access, multi-accounting, bonus abuse, money laundering, and other fraudulent or illegal activities.
• Responsible gaming: To administer and enforce responsible gaming settings you have applied to your account and to identify players who may be showing signs of problem gambling behaviour.
• Customer support: To respond to your enquiries, complaints, and disputes, and to maintain records of such interactions for quality assurance and compliance purposes.
• Platform improvement: To analyse aggregate usage patterns and improve the design, performance, and features of the 666d2 Platform. This analysis uses anonymised or pseudonymised data wherever possible.
• Marketing communications: To send you promotional offers, bonus notifications, and relevant updates about 666d2 — but only where you have opted in to receive such communications. You may unsubscribe at any time via your account settings or by contacting live chat.
• Legal and regulatory compliance: To comply with any legal obligation, court order, or regulatory requirement applicable to 666d2's operations.

5 Legal Basis for Processing

666d2 processes your personal data on one or more of the following legal bases depending on the specific processing activity involved:

• Contractual necessity: Processing is necessary to perform the contract between you and 666d2 — i.e., to provide the gaming and betting services you have registered to use. This covers account management, payment processing, and the delivery of the Platform itself.
• Legal obligation: Processing is required for 666d2 to comply with applicable laws and regulatory requirements, including KYC and anti-money laundering (AML) obligations, age verification requirements, and the retention of financial records.
• Legitimate interests: Processing is necessary for the purposes of 666d2's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided that these interests are not overridden by your fundamental rights and freedoms.
• Consent: For optional processing activities such as marketing communications, 666d2 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

6 Cookies & Tracking Technologies

666d2 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and analyse Platform usage. A cookie is a small text file stored on your device when you visit the 666d2 website.

6.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as login session management, security tokens, and language preferences. These cookies cannot be disabled without affecting Platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised data about how players interact with the 666d2 Platform — for example, which pages are visited most frequently and whether any error messages are encountered. This data is used solely to improve Platform performance.
• Functional Cookies: These cookies remember choices you make on the Platform, such as your preferred payment method or game lobby filters, to provide a more personalised experience.
• Marketing Cookies: With your consent, 666d2 may use cookies to identify you across sessions and deliver relevant promotional content. You may opt out of marketing cookies via the cookie preference centre accessible from the footer of the 666d2 website.

6.2 Managing Cookies

You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent you from logging in or using certain features of the 666d2 Platform. Disabling other cookie categories will not affect your ability to play but may reduce the personalisation of your experience.

7 Data Sharing & Third Parties

666d2 does not sell, rent, or trade your personal data to any third party for marketing purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose.

• Payment service providers: We share financial and identity data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and card processing networks solely to facilitate deposits and withdrawals. These providers are contractually bound to process your data only for payment purposes and to maintain appropriate security standards.
• Identity verification providers: We may share your CNIC details and other identity data with KYC/AML verification service providers to fulfil our age verification and anti-fraud obligations.
• Game software providers: Third-party game studios and live dealer platform providers may receive pseudonymised session data to enable game functionality and resolve disputes. These providers do not receive your full identity data.
• Legal and regulatory authorities: 666d2 may disclose your data to Pakistani or international law enforcement agencies, regulatory authorities, or courts where we are legally required or permitted to do so — for example, in response to an AML investigation, a court order, or a regulatory audit.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 666d2's business, your personal data may be transferred to the successor entity. You will be notified of any such transfer and given the opportunity to request deletion of your data where permitted by applicable law.

8 Data Security

666d2 implements a multi-layered security architecture to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 666d2 Platform.
• Salted hash storage for all account passwords — plaintext passwords are never stored or accessible to 666d2 staff.
• Tokenisation of payment card data — full card numbers are never stored in 666d2 databases.
• Role-based access controls that restrict internal access to personal data to authorised personnel on a need-to-know basis only.
• Regular independent security audits and penetration testing of the 666d2 platform infrastructure.
• Two-factor SMS authentication available and encouraged for all player accounts.
• Automated fraud detection systems that monitor account activity for unusual patterns in real time.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 666d2 will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach.

9 Data Retention Periods

666d2 retains your personal data only for as long as is necessary for the purposes set out in this Policy, or as required by applicable law or regulatory obligation. The general retention periods applied by 666d2 are as follows:

• Account and identity data: Retained for the duration of your account plus a minimum of 5 years following account closure, in compliance with AML and KYC record-keeping obligations.
• Transaction and financial data: Retained for a minimum of 5 years from the date of the transaction, as required for financial record-keeping and regulatory compliance purposes.
• Gaming and betting history: Retained for 3 years from the date of each gaming session or wager. Anonymised aggregate data may be retained indefinitely for statistical analysis.
• Customer support records: Retained for 3 years from the date of the final interaction in a support thread.
• Marketing consent records: Retained for the duration of your consent plus 2 years after withdrawal or account closure, to maintain evidence of consent and opt-out status.
• Self-exclusion and responsible gaming records: Retained for a minimum of 7 years from the date of the self-exclusion request, to prevent circumvention of exclusion orders across any future re-registration attempts.

When data reaches the end of its retention period, it is securely deleted from 666d2's active systems. Where immediate deletion is not technically feasible, the data is rendered inaccessible and scheduled for deletion at the earliest practicable opportunity.

10 Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by 666d2. To exercise any of these rights, please contact us at [email protected] with "Privacy Request" in the subject line.

• Right of Access: You have the right to request a copy of the personal data 666d2 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. You may update many of your account details directly through your 666d2 account settings.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected and no overriding legal obligation requires retention.
• Right to Restriction: You have the right to request that 666d2 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object at any time to processing of your personal data for direct marketing purposes. You also have the right to object to processing based on legitimate interests, though such objections will be assessed against 666d2's legitimate interests on a case-by-case basis.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

666d2 will respond to all valid privacy requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.

11 Minors & Age Policy

666d2 is strictly an adult platform. Persons under the age of 21 are not permitted to register, access, or use any part of the 666d2 Platform. 666d2 does not knowingly collect personal data from anyone under the age of 21.

As part of the registration process, 666d2 verifies the age of all applicants using CNIC-based identity checks. Any account found to belong to a person under 21 years of age will be immediately closed, the balance forfeited, and the personal data of the underage individual retained only to the extent necessary to prevent future registration attempts. All other data will be deleted.

If you believe that a minor has created a 666d2 account, please contact our support team immediately at [email protected]. We treat all such reports with the highest priority.

12 Changes to This Privacy Policy

666d2 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, 666d2 will notify registered players via SMS to their registered Pakistani mobile number and/or a notification displayed upon next login, at least 7 days before the revised Policy takes effect — except where immediate changes are required to address a legal or security obligation.

The most current version of this Privacy Policy is always available at https://666d2.org/privacy-policy. The effective date shown in the header of this document reflects when the current version came into force. Your continued use of the 666d2 Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

Where changes are significant and affect how your data is used in a materially different way, 666d2 will seek fresh consent where the relevant processing is consent-based.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by 666d2, please do not hesitate to get in touch. Our data protection contact and general support team can be reached as follows:

• Live Chat: Available 24 hours a day, 7 days a week via the 666d2 website.
• Email: [email protected] — please include "Privacy Request" in your subject line along with your registered username and the last four digits of your CNIC only. Do not send your full CNIC number by email.

666d2 aims to acknowledge all privacy-related correspondence within 48 hours and to provide a full response within 30 calendar days. If your concern is not resolved to your satisfaction, you may escalate it to the 666d2 compliance team or to the relevant data protection authority in your jurisdiction.