666y Privacy Policy – How We Collect, Use & Protect Your Data

1. Who We Are

666y is an online gaming and sports betting platform accessible at 666y.one. References to "666y", "we", "us", or "our" in this Policy refer to the entity operating the 666y Platform. For data protection enquiries, the 666y data controller can be contacted via the details set out in Section 16 of this Policy.

2. Data We Collect

When you interact with the 666y Platform, we may collect the following categories of personal data:

2.1 Identity & Contact Data

• Full legal name, date of birth, and gender (where provided)
• Residential address, city (e.g. Karachi, Lahore, Islamabad, Rawalpindi), and country
• Email address and mobile telephone number
• Copies of government-issued identity documents submitted during KYC verification

2.2 Financial Data

• Payment method details including Easypaisa account number, JazzCash wallet ID, bank account number, or crypto wallet address used for transactions
• Transaction history including deposits, withdrawals, and bet settlements
• Account balance information

2.3 Technical & Usage Data

• IP address, device type, operating system, and browser type
• Pages visited, features used, and time spent on the Platform
• Login timestamps, session durations, and geographic access data
• Cookies and similar tracking technology data (see Section 9)

2.4 Communications Data

• Records of communications with 666y customer support including live chat transcripts and emails
• Responses to surveys or feedback requests

3. How We Collect Data

666y collects personal data through the following means:

• Direct provision: Data you enter when registering an account, completing KYC, making a payment, or contacting support.
• Automated collection: Technical data collected automatically via cookies, server logs, and analytics tools as you navigate the Platform.
• Third-party sources: Identity verification agencies, fraud prevention services, and payment processors may provide us with data necessary to verify your identity or process transactions.

4. How We Use Your Data

666y uses your personal data for the following purposes:

• To create and manage your 666y account and verify your identity and age.
• To process deposits, withdrawals, and settle bets and casino game outcomes.
• To comply with anti-money laundering (AML), Know Your Customer (KYC), and other regulatory obligations.
• To detect and prevent fraud, cheating, multi-accounting, and other policy violations.
• To personalise your experience and display relevant promotions and game recommendations.
• To send transactional communications including account notifications, deposit confirmations, and withdrawal updates.
• To send marketing communications where you have given consent (see Section 13).
• To improve the 666y Platform through analysis of usage data and performance metrics.
• To support responsible gaming monitoring and to enforce self-exclusion requests.

5. Legal Bases for Processing

666y processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide you with the 666y services you have registered for, including account management, payment processing, and bet settlement.
• Legal obligation: Processing required to comply with AML, KYC, tax reporting, and other applicable legal and regulatory requirements.
• Legitimate interests: Processing conducted for fraud prevention, platform security, abuse detection, and improving our services, where these interests are not overridden by your rights.
• Consent: Processing for direct marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time.

6. Data Sharing

666y does not sell or rent your personal data. We may share your data with the following categories of third parties strictly on a need-to-know basis:

• Payment processors: Easypaisa, JazzCash, HBL, UBL, Meezan Bank, Bank Alfalah, Skrill, and cryptocurrency processing partners, as necessary to process transactions.
• Identity verification providers: Third-party KYC services used to verify your identity and age at registration or upon request.
• Fraud prevention & AML services: Agencies that assist in detecting fraudulent activity and ensuring compliance with financial crime regulations.
• Game software providers: Licensed game developers whose products are hosted on the 666y Platform may receive limited gameplay data for technical purposes.
• Legal and regulatory authorities: Law enforcement agencies, courts, or regulators where we are required by law to disclose information.
• IT service providers: Hosting, cloud storage, and technical infrastructure providers under strict data processing agreements.

All third parties with whom 666y shares personal data are contractually required to handle that data in accordance with applicable data protection standards.

7. International Data Transfers

Some of the third parties with whom 666y shares data may be located in countries outside Pakistan. Where personal data is transferred internationally, 666y ensures that appropriate safeguards are in place — including standard contractual clauses or other approved transfer mechanisms — to protect your data to a standard equivalent to that required under applicable data protection law.

8. Data Retention

666y retains your personal data for as long as your account is active and for a period thereafter as required by legal, regulatory, and operational obligations. Specifically:

• Account and transaction records are retained for a minimum of five (5) years following account closure to meet AML regulatory requirements.
• KYC documentation is retained for the same five-year minimum period.
• Support communications are retained for up to two (2) years following resolution.
• Technical and usage data may be retained in aggregated, anonymised form for longer periods for analytical purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

9. Cookies & Tracking Technologies

666y uses cookies and similar technologies to operate and improve the Platform. The types of cookies we use include:

• Strictly necessary cookies: Required for the Platform to function, including maintaining your login session and processing transactions. These cannot be disabled.
• Analytics cookies: Used to collect aggregated data about how users navigate the Platform, helping us identify areas for improvement.
• Preference cookies: Store your Platform settings and preferences across sessions.
• Marketing cookies: Used, with your consent, to track engagement with promotional content.

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the 666y Platform.

10. Security Measures

666y implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• TLS encryption for all data transmitted between your device and the 666y Platform.
• Encryption of sensitive stored data including payment information and identity documents.
• Role-based access controls restricting staff access to personal data on a need-to-know basis.
• Regular security audits and penetration testing.
• Two-factor authentication options for user accounts.
• Monitoring systems for detection of unusual access patterns or potential breaches.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach affecting your rights, 666y will notify you in accordance with applicable legal requirements.

11. Your Rights

Subject to applicable law and certain exceptions, you have the following rights regarding your personal data held by 666y:

• Right of access: Request a copy of the personal data 666y holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: Request that we limit how we use your personal data in certain circumstances.
• Right to data portability: Receive a copy of your personal data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Withdraw any consent you have previously given for data processing, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact 666y via live chat or email (see Section 16). We will respond to valid requests within 30 days.

12. Children's Privacy

The 666y Platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from minors. If we become aware that personal data has been collected from a person under 18, that account will be closed immediately, all data deleted, and any Funds and winnings forfeited. If you believe a minor has registered on 666y, please contact us immediately.

13. Marketing Communications

With your consent, 666y may send you promotional emails, SMS messages, or in-Platform notifications about bonuses, promotions, new games, and other offerings. You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email.
• Updating your notification preferences in your 666y account settings.
• Contacting 666y support via live chat or email.

Opting out of marketing communications will not affect transactional notifications related to your account activity.

14. Third-Party Links

The 666y Platform may contain links to third-party websites or services. This Policy applies solely to data processed by 666y. We are not responsible for the privacy practices of any third-party sites and encourage you to review the privacy policies of any external services you access.

15. Changes to This Policy

666y reserves the right to update this Privacy Policy at any time. Material changes will be communicated via the Platform's notification system or by email to your registered address at least seven (7) days before the change takes effect. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy.

16. Contact Us

For any questions, requests, or concerns regarding this Privacy Policy or the personal data 666y holds about you, please contact our data protection team:

Email: [email protected]

Live Chat: Available 24/7 via the 666y Platform

We will acknowledge your enquiry promptly and provide a substantive response within 30 days.