Privacy Policy

Introduction

This Privacy Policy (hereinafter "Policy") is issued by 666d3 (hereinafter "666d3", "the Platform", "we", "us" or "our") and applies to all personal data processed in connection with the website at https://666d3.cam and all related services, applications and features offered thereunder (collectively, "the Services").

666d3 is an English-language online sports betting and casino entertainment platform designed for Pakistani users. We recognise that the privacy of our users — whether they are placing cricket bets from Karachi, playing live casino games in Lahore, or accessing the platform from Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar — is of fundamental importance.

By accessing the Platform or registering an account, you acknowledge that you have read and understood this Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not access or use the Platform.

Definitions

For the purposes of this Policy, the following terms shall have the meanings assigned to them below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, email address, date of birth, postal address, device identifiers and transactional records — as may be defined under the applicable law of the Platform's governing jurisdiction.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, storage, use, disclosure, transmission, erasure or destruction.
• "Data Controller" means 666d3, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party engaged by 666d3 to process Personal Data on its behalf, acting only on documented instructions.
• "User" means any natural person who accesses the Platform, whether as a registered account holder or as an unregistered visitor.
• "KYC" (Know Your Customer) means the identity verification process through which Users must confirm their identity and age before accessing full withdrawal functionality.
• "Cookies" means small text files placed on a User's device by the Platform to collect session and behavioural data for operational and analytical purposes.
• "Sensitive Data" means a sub-category of Personal Data that warrants heightened protection, including data revealing a person's financial status, health condition or criminal record, as applicable.

Data We Collect

666d3 collects Personal Data through different channels and at different stages of a User's interaction with the Platform. The categories of data we collect are described below.

3.1 Registration Data

When you create a 666d3 account, we collect the information you provide, which may include:

• Full legal name;
• Date of birth (to verify age eligibility);
• Email address;
• Residential address (including city, province and postcode);
• Username and password (stored in encrypted form);
• Mobile telephone number (optional, for security verification).

3.2 Identity Verification (KYC) Data

To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements, we may collect:

• Copies of government-issued identity documents (e.g., Pakistan CNIC or passport);
• Proof of address documents;
• Photographs or selfies for identity confirmation;
• Source of funds information where required by AML procedures.

3.3 Transactional Data

We automatically record data relating to your financial activity on the Platform, including deposit and withdrawal amounts (in PKR), payment method references used, transaction dates and times, and balance histories. We note that payment method names — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah — are referenced for transactional record purposes only and do not imply a formal partnership with any named institution.

3.4 Betting and Gaming Activity Data

Records of all bets placed, games played, wager amounts, outcomes and account interactions on the Platform are retained for operational, regulatory and responsible gambling purposes.

3.5 Technical and Device Data

When you access the Platform, we automatically collect technical data including IP address, device type, operating system, browser type and version, session duration, pages visited, referring URLs and geolocation data at city or region level.

3.6 Communications Data

If you contact our support team — by email, live chat or other channel — we retain records of those communications, including the content of your messages and our responses, for quality assurance and dispute resolution purposes.

Data Processing

666d3 processes your Personal Data for the following specific purposes:

4.1 Service Delivery

To create and administer your account, process deposits and withdrawals in PKR, settle bets and casino game outcomes, deliver promotional offers you have opted into, provide customer support, and maintain accurate betting and financial records.

4.2 Legal and Regulatory Compliance

To fulfil KYC and AML obligations, conduct age-verification checks, respond to lawful requests from competent authorities, and maintain records required under the Platform's operating jurisdiction. This may include verifying that you are at least 18 years of age, or the higher minimum required by the operator/license jurisdiction.

4.3 Fraud Prevention and Security

To detect, investigate and prevent fraudulent transactions, money laundering, bonus abuse, multiple-account creation, and other forms of abuse or prohibited activity on the Platform.

4.4 Responsible Gambling Monitoring

To monitor betting patterns and account activity for indicators of problem gambling behaviour, to apply responsible gambling tools (deposit limits, loss limits, session reminders and self-exclusion) as requested or where mandated by operator policy, and to communicate responsible gambling information where appropriate.

4.5 Platform Improvement

To analyse aggregated, anonymised usage data to improve platform performance, identify technical issues, and develop new features — including improvements to the mobile-first experience used by Pakistani users across various network conditions.

4.6 Marketing Communications

Where you have provided explicit consent to receive marketing communications, we may send you promotional information about offers, bonuses and new features by email or in-platform notification. You may withdraw marketing consent at any time by contacting support or using the unsubscribe mechanism provided in any marketing communication.

Legal Basis for Processing

666d3 processes your Personal Data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and 666d3 — specifically, to provide the betting and gaming services you have registered to use.
• Legal Obligation: Processing required to comply with KYC, AML and other applicable legal or regulatory obligations of the Platform's operating jurisdiction.
• Legitimate Interests: Processing carried out in the legitimate interests of 666d3 or its users, including fraud prevention, platform security, responsible gambling monitoring and service improvement — where those interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific, informed and unambiguous consent — in particular for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing conducted before withdrawal.

Data Sharing & Third Parties

666d3 does not sell, rent or trade your Personal Data to third parties for their independent marketing purposes. We may share your data with carefully selected third parties in the following circumstances only:

6.1 Service Providers (Data Processors)

We engage third-party data processors to deliver components of our service, including identity verification providers, payment processing technology providers, cloud hosting and infrastructure suppliers, customer support platform providers, and fraud detection service providers. All such processors are contractually bound to process your data only in accordance with our documented instructions and are prohibited from using your data for any independent purpose.

6.2 Legal and Regulatory Disclosure

We will disclose your Personal Data to law enforcement authorities, regulatory bodies, courts or other competent authorities where we are legally required to do so, where we believe disclosure is necessary to prevent crime or fraud, or where disclosure is required to enforce our Terms & Conditions.

6.3 Business Transfers

In the event that 666d3 undergoes a merger, acquisition, corporate restructuring or asset sale, your Personal Data may form part of the assets transferred. Where such a transfer occurs, the acquiring entity will be required to adhere to the same data protection standards as set out in this Policy or notify you of any material changes.

6.4 No Sale of Data

Under no circumstances does 666d3 sell, rent or commercially exploit your Personal Data for third-party marketing or advertising purposes. Your data is an operational necessity, not a commodity.

Cookies & Tracking Technologies

666d3 uses cookies and similar tracking technologies to operate and improve the Platform. By accessing the Platform, you consent to the use of cookies as described in this section. You may adjust your browser settings to decline non-essential cookies, although doing so may affect Platform functionality.

We do not use third-party advertising cookies or cross-site tracking cookies that profile you for the purposes of external advertising networks.

Data Retention

We retain your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The key retention principles we apply are:

• Active Accounts: Personal Data associated with an active account is retained for the duration of the account relationship.
• Closed Accounts: Following account closure, we retain core identity and transactional records for a minimum period as required by the applicable KYC/AML obligations of our operating jurisdiction — this is typically a minimum of five (5) years from the date of the last transaction or account closure, whichever is later.
• Support Communications: Records of customer support interactions are retained for up to three (3) years from the date of the last interaction.
• Technical Logs: Device and session logs are retained for a rolling period of up to thirteen (13) months for security and fraud-detection purposes.
• Self-Excluded Users: Where a User has requested self-exclusion, we retain sufficient data to enforce that exclusion and prevent re-registration during the exclusion period.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.

Data Security

666d3 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration or destruction. These measures include:

• Transport Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. The Platform is accessible exclusively via HTTPS.
• Password Security: User passwords are stored using one-way cryptographic hashing. We do not store passwords in plain text.
• Access Controls: Access to systems holding Personal Data is restricted on a need-to-know basis. Internal access logs are maintained and reviewed regularly.
• Infrastructure Security: Platform servers and databases are hosted in facilities with physical access controls, regular security patching and network perimeter monitoring.
• Fraud Detection Systems: Automated systems monitor account activity for patterns consistent with fraud, money laundering or account compromise.

While we implement appropriate safeguards, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your account credentials. If you suspect unauthorised access to your account, please contact us immediately using the details in Section 14.

User Rights

Subject to the applicable data protection law of the Platform's operating jurisdiction and any overriding legal obligations (such as AML record-keeping requirements), you have the following rights in respect of your Personal Data:

To exercise any of these rights, please submit a written request to our support team at the contact details provided in Section 14. We will respond within a reasonable timeframe and in any event within the period required by applicable law. We may need to verify your identity before processing your request. Please note that some rights may be limited where we have overriding legal obligations — for example, we cannot delete transactional records we are legally required to retain for AML compliance purposes.

Minors

The 666d3 Platform is strictly intended for adults only. We do not knowingly collect Personal Data from any person under the age of eighteen (18) years, or such higher minimum age as may be required by the operator's license jurisdiction. Age verification is conducted as part of the KYC process, and any account found to have been registered by a person below the minimum age will be immediately closed and all associated Personal Data will be handled in accordance with our data retention obligations.

If you are a parent or guardian and believe that a minor in your care has registered on the Platform or provided us with their Personal Data, please contact us immediately using the details in Section 14. We will promptly investigate and take appropriate action.

International Data Transfers

As a globally operated platform, 666d3 may transfer your Personal Data to third-party processors or infrastructure providers located outside Pakistan. Where such transfers occur, we take reasonable steps to ensure that appropriate protections are in place — such as contractual commitments requiring recipients to apply data protection standards consistent with this Policy.

By using the Platform, you acknowledge and consent to the transfer of your Personal Data to countries that may have different data protection standards than those in your country of residence. In all cases, we take steps to ensure that transfers are conducted securely and that your data continues to be processed in accordance with the principles set out in this Policy.

Please note that 666d3 does not claim that the Platform is regulated under Pakistani data protection law or by any Pakistani authority. Users should seek independent advice if they require specific assurances about cross-border data transfers under Pakistani law.

Amendments to This Policy

666d3 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will publish the updated Policy on this page with a revised review date prominently displayed. For significant changes affecting how we use your Personal Data, we may also notify you via in-platform notification or email where practicable.

Your continued use of the Platform following the publication of any revised Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to remain informed of our current data practices. If you do not agree to a revised Policy, you should close your account and cease using the Platform.

Contact Us

For any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the 666d3 Data team using the details below. We aim to respond to all privacy-related enquiries within a reasonable period.

When submitting a data rights request, please include your registered email address and a clear description of your request. We may require additional identity verification before processing access, deletion or portability requests to ensure the security of your account.