666y Privacy Policy – How We Protect Your Data in Pakistan

1. Who We Are

This Privacy Policy applies to the 666y platform, operated at 666y.im. References to "666y", "we", "our" or "us" throughout this document refer to the operator of the 666y platform.

666y is an online gaming and sports betting platform designed specifically for Pakistani players. We provide casino games, sports betting including PSL cricket and football, live dealer games, slots and Ludo – all operating in Pakistani Rupees with local payment methods.

As the data controller, 666y is responsible for determining how and why your personal data is processed. We take this responsibility seriously and have put considerable effort into building systems and processes that protect your information.

If you have any questions about this policy or about how your data is processed at 666y, please contact us using the details in Section 13 of this document.

2. Data We Collect

666y collects different types of personal data depending on how you interact with the platform. Here is a clear breakdown of what we collect and when.

2.1 Data You Give Us Directly

2.2 Data We Collect Automatically

When you use the 666y website or mobile browser, certain information is collected automatically by our systems. This includes:

• Your IP address and approximate location at the time of login
• Device type, operating system and browser information
• Pages visited, time spent on pages and navigation paths within 666y
• Bet history, game history and transaction records
• Session duration and login timestamps
• Referral source (how you arrived at 666y.im)

2.3 Data From Third Parties

In limited circumstances, 666y may receive information about you from third parties. This includes identity verification data from KYC service providers, fraud risk scores from fraud prevention services and payment confirmation data from Easypaisa, JazzCash and other payment processors.

3. Why We Collect Your Data

Every piece of data that 666y collects serves a specific, legitimate purpose. We do not collect information speculatively or without a clear reason. Here are the main purposes for which we process your personal data:

3.1 Account Management

Your name, mobile number and date of birth are needed to create and manage your 666y account, authenticate your logins, recover your account if you lose access and communicate important account updates to you.

3.2 Payment Processing

Your financial details – Easypaisa wallet number, JazzCash number or bank account information – are necessary to process your deposits and withdrawals in PKR. Without this information, we cannot move money to or from your account.

3.3 Identity Verification and Fraud Prevention

666y is required to verify the identity of players in order to prevent fraud, money laundering and underage gambling. Your CNIC details and any supporting documents provided during KYC verification are used for these purposes. We also use automated fraud detection systems that analyse betting patterns and account activity to identify suspicious behaviour.

3.4 Customer Support

When you contact 666y support, we retain records of those interactions. These records allow us to resolve your issue effectively, maintain a history of any disputes and train our support team based on real interactions.

3.5 Legal and Regulatory Compliance

Certain data must be retained by 666y to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, record-keeping obligations and cooperation with law enforcement where legally required.

3.6 Platform Improvement

Aggregated, anonymised usage data helps 666y understand which features are most popular, where users experience problems and what improvements would benefit Pakistani players most. This data does not identify individuals.

3.7 Marketing Communications

With your consent, 666y may send you information about promotions, bonuses and new features. You can withdraw consent for marketing communications at any time by contacting support or using the unsubscribe function in any marketing message.

4. Legal Basis for Processing

666y processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations under the Terms and Conditions you accepted when registering – including running your account and processing payments.
• Legal obligation: Processing required to comply with applicable laws, including AML regulations and identity verification requirements.
• Legitimate interests: Processing necessary to protect 666y and its players from fraud, improve the platform and ensure the security of the service.
• Consent: Processing for marketing communications, where you have explicitly opted in. You may withdraw consent at any time.

5. Who We Share Your Data With

666y does not sell your personal data. We share it only in the limited circumstances described below, and only with parties that are bound by confidentiality and data protection obligations.

5.1 Payment Processors

Your payment details are shared with the relevant payment service providers – Easypaisa, JazzCash, NayaPay, SadaPay, banks or card networks – solely to process your deposit or withdrawal transactions. These providers process your data under their own privacy policies and under contractual obligations to 666y.

5.2 Identity Verification Services

When verifying your identity for KYC purposes, 666y may use third-party identity verification services. Your CNIC number and document images may be passed to these services to check authenticity. These providers are contractually bound to use your data only for verification purposes.

5.3 Fraud Prevention and Security

666y uses fraud prevention and security monitoring services that may process data about your account activity. This helps protect you and other players from account takeover, money laundering and other forms of fraud.

5.4 Legal and Regulatory Authorities

Where required by applicable law or a valid legal order, 666y may share personal data with law enforcement agencies, regulatory bodies or courts. We will only do so to the extent required by law and will inform you where legally permitted.

5.5 Corporate Transactions

In the event that 666y undergoes a merger, acquisition or sale of assets, your personal data may be transferred as part of that transaction. You will be notified of any such change and your rights under this policy will continue to apply.

6. How We Protect Your Data

Data security is not an afterthought at 666y – it is built into the platform from the ground up. We use a combination of technical and organisational measures to protect your personal information from unauthorised access, loss or disclosure.

6.1 Technical Security Measures

• All data transmitted between your device and 666y servers is encrypted using industry-standard TLS (Transport Layer Security).
• Sensitive data stored by 666y – including financial information and identity documents – is encrypted at rest.
• Passwords are stored using one-way hashing. Even 666y staff cannot see your password.
• Our systems are monitored continuously for unusual activity and potential breaches.
• Regular security assessments and penetration tests are conducted on 666y's infrastructure.

6.2 Organisational Security Measures

• Access to personal data within 666y is restricted to staff who need it for their specific job functions.
• All staff with access to personal data are trained on data protection responsibilities.
• Third-party partners who process data on behalf of 666y are vetted and bound by data processing agreements.

6.3 What You Can Do

Using a strong, unique password for your 666y account is the single most effective thing you can do to protect your own data. Do not share your login credentials with anyone, and contact support immediately if you suspect your account has been accessed without your permission.

7. How Long We Keep Your Data

666y does not keep your personal data longer than necessary. The retention periods below reflect both operational needs and legal obligations.

When data is no longer needed and the retention period has expired, it is securely deleted or anonymised so that it can no longer be linked to you personally.

8. Cookies and Tracking

666y uses cookies and similar tracking technologies to make the platform function correctly, remember your preferences and understand how players use the site so we can improve it.

8.1 Types of Cookies We Use

• Essential cookies: Required for core platform functions – login sessions, bet slip management and payment flows. These cannot be disabled without breaking the platform.
• Functional cookies: Remember your language preference, display settings and other personalisation choices.
• Analytics cookies: Help us understand which pages are visited most often, where players spend time and where technical issues occur. This data is aggregated and anonymous.
• Security cookies: Used to detect and prevent fraudulent activity and account takeovers.

8.2 Managing Cookies

You can manage cookie preferences in your 666y account settings. You can also adjust cookie settings in your browser, though disabling essential cookies will prevent 666y from functioning correctly. Most mobile browsers on Android allow you to clear cookies and site data from the browser settings menu.

9. Your Privacy Rights

You have meaningful rights over your personal data. These rights are not automatic in every circumstance – some depend on the legal basis for processing – but 666y will always consider requests fairly and respond within a reasonable time.

To exercise any of these rights, please contact the 666y support team at support@666y.im. We will acknowledge your request within three working days and provide a substantive response within thirty days.

10. Children and Minors

666y is an adult gaming platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is required during the registration process and may be required again during identity verification.

If 666y discovers that an account has been created by or on behalf of a minor, the account will be immediately closed, all deposits will be refunded to the source payment method and any winnings will be voided. All data associated with the minor's account will be deleted as soon as legally permissible.

If you believe a minor has created a 666y account, please notify us immediately at support@666y.im. Adults who knowingly allow minors to use their account may also have their own account closed.

11. Third-Party Links

The 666y platform does not contain links to external websites. This Privacy Policy applies solely to 666y.im and the services operated under that domain. If you ever encounter a link on the 666y platform that appears to direct to an external site, please report it to our support team as it may indicate a security issue.

Payment processors such as Easypaisa and JazzCash operate their own platforms and have their own privacy policies. When you use those payment services, their privacy policies govern how your data is handled within their systems. 666y is not responsible for the data practices of those third-party platforms.

12. Changes to This Policy

666y may update this Privacy Policy from time to time to reflect changes in our data practices, platform features or applicable laws. When material changes are made, registered players will be notified via SMS or email at least seven days before the changes take effect.

The current version of this policy is always available at 666y.im/privacy-policy. The "Last Updated" date at the top of this page indicates when the policy was most recently revised. We recommend reviewing this page periodically.

Continued use of the 666y platform after any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not accept any changes, you should close your account before the changes take effect.

13. Contact Us About Privacy

If you have any questions, concerns or requests relating to this Privacy Policy or to how 666y handles your personal data, please get in touch with us. Our privacy team will respond to substantive enquiries within 48 hours.