Privacy Policy — 666c
Pakistan Online Gaming Platform

1Who We Are

This Privacy Policy applies to the 666c online gaming platform, accessible at 666c.click ("666c", "we", "our", "us"). 666c is an online gaming platform built specifically for players in Pakistan. We are the data controller for all personal information collected through our website, games, payment systems, and customer support channels.

We are committed to handling your personal data with care, transparency, and respect. This document tells you precisely what we collect, why we need it, who may see it, how long we keep it, and what rights you have over it. If any part of this policy is unclear, our support team is available 24/7 at support@666c.click to explain further.

2What Personal Data We Collect

666c collects only the personal data that is genuinely necessary to provide our gaming services safely and legally. The categories of personal data we collect are as follows:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric identifiers beyond what is strictly required for age and identity verification in compliance with applicable law.

3How We Collect Your Data

666c collects your personal data through the following methods:

• Direct submission: When you register an account on 666c, you provide your name, date of birth, contact details, and payment information directly. When you contact our support team, you provide communication data.
• Automated collection: When you use 666c, our systems automatically collect technical and usage data — your IP address, the device and browser you are using, which pages you visit, which games you play, and how long your sessions last. This data is collected via server logs and first-party analytics tools.
• Payment providers: When you make a deposit or withdrawal through Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, or card payment, the payment processor shares transaction confirmation data with 666c. We do not receive your full account credentials from payment providers — only confirmation of the transaction.
• KYC/verification providers: When identity verification is required (for example, before processing a large withdrawal), 666c may use a third-party KYC service to verify documents you submit. The verification provider processes your document data on our behalf under a data processing agreement.
• Cookies and similar technologies: 666c uses cookies and similar tracking technologies on the website as described in Section 9 of this policy.

4Why We Use Your Personal Data

Every piece of personal data 666c holds has a defined purpose. We do not collect data speculatively. The primary purposes for which we use your data are:

• Account management: To create, maintain, and manage your 666c player account, including verifying your identity and age at registration and when required during account operation.
• Service delivery: To provide access to 666c games, process your bets, credit winnings, and generally operate the gaming platform you signed up for.
• Payment processing: To process your deposits from and withdrawals to your registered Pakistani payment methods (Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, Visa/Mastercard).
• Fraud and AML prevention: To detect, investigate, and prevent fraudulent activity, money laundering, and other financial crimes. Pakistani law requires financial service providers, including 666c, to maintain AML monitoring programmes.
• Responsible gaming: To monitor for patterns that may indicate problem gambling and to implement and enforce responsible gaming tools you set on your account (deposit limits, loss limits, self-exclusion).
• Customer support: To respond to your queries, resolve disputes, and investigate complaints through our live chat and email support channels.
• Legal compliance: To comply with applicable Pakistani law and any regulatory requirements to which 666c is subject.
• Platform improvement: To analyse aggregated usage data (de-identified where possible) to improve the 666c platform, fix technical issues, and develop new features.
• Marketing (with your consent): To send you promotional communications about 666c bonuses, new games, and special offers where you have opted in to receive such communications.

5Legal Basis for Processing

666c processes your personal data on one or more of the following legal bases:

• Contract performance: Processing your registration data, payment data, and usage data is necessary to deliver the gaming services you signed up for. Without this processing, 666c cannot operate your account.
• Legal obligation: Processing for identity verification, AML monitoring, and fraud prevention is required by applicable Pakistani law and regulations. 666c has no discretion on this processing — it is mandated.
• Legitimate interests: Processing for platform security, fraud detection beyond legal minimums, and aggregated platform analytics is carried out on the basis of 666c's legitimate interest in operating a secure and functional platform, balanced against your privacy interests.
• Consent: Processing for marketing communications is carried out only where you have given explicit, freely given consent. You can withdraw marketing consent at any time without affecting your ability to use 666c.

6Sharing Your Personal Data

666c does not sell your personal data to any third party, full stop. We may share limited personal data with the following categories of recipients, strictly on a need-to-know basis and only for the purposes described in this policy:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT networks, and Visa/Mastercard processors receive payment-related data necessary to process your transactions. Each operates under its own privacy policy for its service.
• Game software providers: Third-party game suppliers (such as Evolution, Ezugi, and Pragmatic Play) may receive a session token and game data necessary to deliver their games within the 666c platform. These providers operate under data processing agreements with 666c.
• KYC and identity verification services: When verification is required, your submitted identity documents are processed by a third-party KYC provider acting as a data processor on 666c's behalf.
• IT and hosting infrastructure: 666c's platform runs on third-party cloud infrastructure. Hosting providers access data only to the extent technically required to operate the servers and are bound by strict confidentiality obligations.
• Regulatory and law enforcement authorities: Where required by Pakistani law, court order, or legitimate regulatory request, 666c will disclose personal data to relevant authorities. We will notify you of such disclosure where legally permitted to do so.

7How Long We Keep Your Data

666c retains personal data only for as long as it is needed for the purposes for which it was collected, or as required by law. Our retention periods are:

• Active account data: Retained for the duration of your active 666c account plus a minimum of 5 years after account closure. This retention period covers our AML and fraud prevention obligations under Pakistani financial regulations.
• Transaction records: Financial transaction data is retained for a minimum of 7 years from the date of the transaction, in line with standard financial recordkeeping requirements.
• Identity verification documents: Retained for 5 years after account closure or the last date of identity re-verification, whichever is later.
• Support communications: Chat transcripts and email correspondence are retained for 2 years from the date of the interaction, unless the communication relates to an open dispute or investigation in which case it is retained until the matter is fully resolved.
• Marketing data: If you opt out of marketing, your opt-out preference is retained indefinitely to ensure we do not accidentally re-contact you. Other marketing interaction data is deleted within 12 months of opt-out.
• Technical/server logs: Retained for 90 days for security monitoring purposes, then deleted unless required for an ongoing investigation.

When retention periods expire, data is securely deleted or irreversibly anonymised. We do not retain data beyond what is legally required or strictly necessary for legitimate operational purposes.

8How We Keep Your Data Secure

666c implements technical and organisational security measures appropriate to the risk of processing your personal data. These measures include:

• Encryption in transit: All data transmitted between your device and 666c's servers is protected by 256-bit SSL/TLS encryption. This applies to the website, game connections, and API calls to payment providers.
• Encryption at rest: Sensitive data fields (including identity document data and financial data) are encrypted at rest in 666c's databases using AES-256 encryption.
• Access controls: Personal data is accessible only to 666c staff with a legitimate operational need. Role-based access controls restrict which team members can access which data categories. All access is logged and auditable.
• Two-factor authentication: Internal 666c systems require two-factor authentication for all staff access. Player accounts support two-factor authentication which we strongly encourage all players to enable.
• Security monitoring: 666c operates continuous security monitoring on its infrastructure to detect intrusion attempts, unusual access patterns, and potential data breaches.
• Third-party security audits: 666c's systems undergo periodic security assessments by independent third-party specialists.

9Cookies & Tracking Technologies

666c uses cookies and similar technologies to operate and improve the platform. A cookie is a small text file stored on your device by your browser when you visit a website. 666c uses the following types of cookies:

Essential and functional cookies are necessary to operate the 666c platform and cannot be disabled without breaking core functionality. Analytics and marketing cookies can be declined or withdrawn at any time via your browser settings or by contacting our support team. Most browsers allow you to view, manage, and delete cookies from their settings menu.

10Marketing Communications

666c may send you promotional communications about bonuses, new games, tournaments, and special offers if you have opted in to receive such messages. Marketing communications from 666c may be sent by email or SMS to the contact details registered on your account.

You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email you receive from 666c.
• Replying "STOP" to any marketing SMS from 666c.
• Updating your communication preferences in your 666c account settings.
• Contacting our support team at support@666c.click to request removal from all marketing lists.

Opting out of marketing has no effect on your ability to use 666c or on your access to your account balance, games, or withdrawals. You will still receive essential transactional communications (deposit confirmations, withdrawal notifications, security alerts, and important account notices) regardless of your marketing opt-out status, as these are necessary for operating your account.

11Your Data Rights

As a 666c player, you have the following rights over your personal data. These rights are available to all players and exercising them will not affect your account status or your access to platform services:

To exercise any of these rights, contact 666c at support@666c.click with the subject line "Data Rights Request" and describe your request. We will acknowledge within 48 hours and respond fully within 30 days. We may need to verify your identity before processing your request to protect your data from unauthorised access.

12Children and Minors

666c is strictly for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you are under 18, you must not use the 666c platform or submit any personal data to us.

If 666c discovers or has reason to believe that an account was registered by a person under 18, the account will be immediately suspended, all pending withdrawals will be held, and the registration data will be reviewed before any balance is returned. Winnings generated by an underage account may be forfeited in accordance with our Terms and Conditions.

If you believe a minor has registered a 666c account, please contact us immediately at support@666c.click so we can take prompt action.

13Changes to This Privacy Policy

666c may update this Privacy Policy from time to time as our services evolve or as legal requirements change. When we make changes, we will:

• Update the "Effective Date" at the top of this policy.
• Send an email notification to your registered email address if the changes are material — meaning they significantly affect how we use your data or your rights.
• Display an in-platform notification when you next log in to your 666c account after a material change.

For non-material changes (corrections, clarifications, or administrative updates), we will update the policy without individual notification. We encourage you to review this Privacy Policy periodically. Continued use of 666c after the effective date of any change constitutes your acceptance of the updated policy.

14Contact Us & Privacy Complaints

For any question, concern, or request related to your personal data and 666c's privacy practices, contact us through one of the following channels:

• Email: support@666c.click — use the subject "Privacy Policy Query" for fastest routing to the relevant team.
• Live Chat: Available 24/7 directly on the 666c website. Our support team can handle general privacy queries in real time.

If you believe 666c has processed your personal data in breach of this Privacy Policy or applicable law, you have the right to lodge a formal complaint. We ask that you contact us first so we can try to resolve the matter directly. We will acknowledge formal privacy complaints within 48 hours and aim to provide a substantive response within 15 working days.