666d99 Privacy Policy

Section 01Introduction

This Privacy Policy ("Policy") describes how 666d99 ("we", "us", "our"), operating the website located at https://666d99.cam (the "Platform"), collects, uses, stores, shares and protects personal data about users ("you", "your") who access or interact with the Platform.

666d99 is an English-language online gaming information platform serving users across Pakistan. We are committed to handling your personal data responsibly, transparently and in accordance with applicable data protection principles. This Policy applies to all data processing activities conducted by 666d99 in connection with the Platform, including account registration, customer support interactions and use of the Platform's features and tools.

Section 02Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, IP address, device identifiers and account-related data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, alteration, erasure or destruction.
• "Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, 666d99.
• "Processor" means a third party that processes Personal Data on behalf of the Controller.
• "Data Subject" means an identified or identifiable individual whose Personal Data is processed — in this context, you as a user of the Platform.
• "KYC Data" means identity verification documents submitted for Know Your Customer purposes, including CNIC, passport, proof of address and selfie/liveness check data.
• "Cookies" means small text files or similar tracking technologies stored on your device when you visit the Platform.
• "Sensitive Data" means categories of Personal Data that warrant heightened protection, including financial information, identity documents and data relating to health or behaviour patterns.

Section 03Personal Data We Collect

666d99 collects the following categories of Personal Data in connection with your use of the Platform:

3.1 Account Registration Data

• Full legal name
• Date of birth
• Email address
• Mobile phone number
• Residential address (city, country — for example, Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar)
• Username and password (password stored in hashed format only)

3.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents (CNIC or passport)
• Proof of address documents (where required)
• Selfie or liveness check images
• Payment method verification documentation (e.g., screenshots of Easypaisa or JazzCash wallet, or bank statements from HBL, UBL, Meezan Bank or Bank Alfalah — referenced as contextual payment method evidence only; no affiliation implied)

3.3 Transaction Data

• Deposit and withdrawal amounts in PKR or other applicable currencies
• Payment method type (as disclosed by you in the cashier)
• Transaction timestamps and reference numbers
• Bonus claims and wagering activity records

3.4 Technical & Usage Data

• IP address and approximate geographic location
• Device type, operating system and browser type
• Session timestamps, page views and click-stream data
• Referring URLs and search terms used to find the Platform
• Error logs and crash reports

3.5 Communications Data

• Content of live chat, email or support ticket interactions with our team
• Language preference (English or Urdu support)
• Feedback or survey responses you voluntarily provide

Section 04How We Collect Your Data

We collect Personal Data through the following channels:

• Directly from you — when you register an account, complete KYC verification, contact our support team or respond to a survey.
• Automatically — through cookies, server logs and analytics tools when you browse the Platform.
• Third-party sources — from identity verification service providers (KYC processors), payment processors and fraud prevention systems where necessary for compliance purposes.
• From your device — device identifiers, operating system version and browser settings collected passively when you access the Platform.

Section 05Purposes of Data Processing

We process your Personal Data for the following specific purposes:

Section 06Legal Bases for Processing

Where applicable data protection legislation requires a lawful basis for processing, 666d99 relies on one or more of the following:

• Contractual necessity: Processing required to fulfil the contract between you and 666d99 — for example, account creation, transaction processing and support provision.
• Legal obligation: Processing required to comply with applicable legal or regulatory requirements — for example, AML checks, KYC verification and fraud prevention obligations.
• Legitimate interests: Processing necessary for purposes of 666d99's legitimate interests — for example, platform security, fraud detection, responsible gambling monitoring and improving Platform functionality — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed and unambiguous consent — for example, marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Section 07Data Sharing & Third-Party Disclosure

666d99 does not sell or rent your Personal Data to third parties for commercial purposes. We may share your data with the following categories of recipients, only to the extent necessary and subject to appropriate data protection safeguards:

• KYC & Identity Verification Providers: Third-party processors who assist with identity document verification, liveness checks and age verification.
• Payment Processors: Service providers facilitating deposit and withdrawal transactions, including processors connected to the payment methods referenced on the Platform.
• Fraud Prevention & AML Services: Specialist providers supporting our obligations to detect and prevent financial crime, account fraud and money laundering.
• IT Infrastructure & Hosting Providers: Cloud hosting, content delivery and database providers who store and process data on 666d99's behalf under contractual obligations.
• Analytics Providers: Aggregated, anonymised usage data may be processed by analytics tools to help us understand Platform performance. No identifiable data is shared for this purpose.
• Legal & Regulatory Authorities: We may disclose Personal Data to law enforcement agencies, regulatory bodies or courts where required to do so by applicable law, court order or regulatory direction.

Section 08International Data Transfers

The Platform's infrastructure may involve the transfer of Personal Data to countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction. Where such transfers occur, 666d99 ensures that appropriate safeguards are in place — such as standard contractual clauses, processor agreements or reliance on adequacy decisions — to protect your data during and after the transfer.

By using the Platform, you acknowledge that your data may be processed in jurisdictions outside Pakistan. If you have specific concerns about international data transfers, please contact us at the details provided in Section 16.

Section 09Data Retention

666d99 retains Personal Data for no longer than is necessary to fulfil the purposes outlined in this Policy or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:

• Account and Registration Data: Retained for the duration of your active account relationship with 666d99, plus a period of up to five years following account closure to satisfy regulatory and legal retention obligations.
• KYC Documentation: Retained for a minimum of five years following the end of the business relationship, in compliance with standard AML retention requirements applicable in the operator's jurisdiction.
• Transaction Records: Retained for a minimum of five years from the date of each transaction, or longer where required by applicable law.
• Customer Support Communications: Retained for up to three years from the date of the interaction, unless a longer period is required to resolve an ongoing dispute or complaint.
• Technical and Usage Data: Retained in aggregated or anonymised form for analytics purposes; identifiable technical data is deleted after 13 months.

Once the applicable retention period expires, Personal Data is securely deleted or irreversibly anonymised. Anonymised data (which can no longer identify you) may be retained for statistical analysis and platform improvement.

Section 10Cookies & Tracking Technologies

666d99 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to improve your user experience and to analyse Platform performance. Cookies are small text files stored on your device when you visit the Platform.

10.1 Types of Cookies We Use

Essential Functional Analytics (Optional) Marketing (Optional)

• Essential Cookies: Required for core Platform functionality — session management, authentication tokens and security identifiers. These cannot be disabled without breaking Platform functionality.
• Functional Cookies: Remember your preferences such as language selection, display settings and session timeout preferences.
• Analytics Cookies: Collect anonymised data about how users interact with the Platform — page views, session duration and navigation paths. Used to improve Platform content and usability.
• Marketing Cookies: Used to present relevant promotional content based on your browsing history and interaction patterns on the Platform. Only activated where you have provided consent.

10.2 Cookie Management

You can manage, disable or delete cookies through your browser settings at any time. Please note that disabling essential cookies may impair or prevent access to certain features of the Platform. Most browsers provide clear instructions for cookie management in their "Settings" or "Preferences" menu.

Section 11Security Measures

666d99 implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform.
• Password hashing using industry-standard algorithms (passwords are never stored in plain text).
• Role-based access controls limiting internal access to Personal Data to personnel with a legitimate operational need.
• Regular security assessments and vulnerability testing.
• Multi-factor authentication options available for user accounts.
• Incident response procedures to detect, investigate and notify affected individuals in the event of a personal data breach, where required by applicable law.

Section 12Children's Privacy

The 666d99 Platform is strictly intended for adults aged 18 or over — or the higher minimum age required by the operator's licence jurisdiction. We do not knowingly collect, process or retain Personal Data from individuals below the applicable minimum age.

If we discover or are notified that Personal Data has been collected from a person below the minimum age threshold, we will take immediate steps to delete that data from our systems. If you believe a minor has registered on or is using the Platform, please contact us promptly at the details provided in Section 16.

Section 13Your Data Subject Rights

Subject to applicable law and certain exemptions, you may hold the following rights in respect of your Personal Data held by 666d99:

To exercise any of the above rights, please submit a written request to [email protected]. We will respond to all verified requests within 30 calendar days of receipt, or within the period required by applicable law. We may request proof of identity before processing your request to prevent unauthorised access to your data.

Section 14Specific Considerations for Pakistani Users

666d99 serves users across Pakistan, including those based in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. We are mindful of the distinct regulatory environment that Pakistani users operate within and we address several points specifically for this audience:

• Payment Data: Where you provide financial account details — such as your Easypaisa or JazzCash mobile wallet number, or bank account information from HBL, UBL, Meezan Bank or Bank Alfalah — this data is processed solely for the purpose of verifying your payment method identity during KYC, in accordance with Section 3.2 above. It is not used for any marketing profiling or shared with these institutions for any purpose. References to these payment methods on the Platform are contextual only.
• CNIC Data: Your CNIC number and document image are collected solely for KYC identity verification. CNIC data is treated as Sensitive Data under our internal data classification policy and is subject to heightened access controls and storage protections.
• Legal Context: Pakistan does not currently have a comprehensive general data protection law. 666d99 voluntarily applies data protection principles consistent with internationally recognised standards in the absence of specific Pakistani legislation. This should not be construed as a representation that our data practices are compliant with any specific anticipated future Pakistani data protection regulation.
• Local Law Compliance: Users are responsible for ensuring their use of the Platform complies with all applicable laws in Pakistan, including those governing online gambling and data privacy. Nothing in this Policy should be construed as legal advice or as a representation that use of the Platform is lawful in Pakistan.

Section 15Updates to This Privacy Policy

666d99 reserves the right to amend this Privacy Policy at any time. Material changes — such as new categories of data collected, new third-party sharing arrangements or changes to your rights — will be communicated via a prominent notice on the Platform prior to the changes taking effect, and/or by email to your registered address where appropriate.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We recommend reviewing this Policy periodically to remain informed of how we handle your data. Continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the revised Policy.

Section 16Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or your Personal Data, please contact the 666d99 data team using the following details:

We aim to respond to all privacy-related enquiries within 10 business days. For data subject rights requests (access, erasure, portability etc.), we will acknowledge receipt within five business days and provide a substantive response within 30 calendar days, subject to verification of your identity.