666z Privacy Policy

This Privacy Policy is issued by the operator of the 666z platform ("666z", "we", "us", "our"), which operates the online gaming and sports betting platform accessible at 666z.today. This document explains how 666z processes the personal data of individuals who visit, register on, or otherwise interact with the 666z platform ("you", "the Player", "the User").

This policy applies to all personal data processed in connection with your use of 666z, regardless of the device or network through which you access the platform. It covers data collected through the website at 666z.today, any associated mobile-optimised interfaces, and all direct communications channels operated by 666z, including live chat and email support.

This Privacy Policy should be read together with the 666z Terms & Conditions, which govern the overall contractual relationship between you and 666z. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a privacy or data protection matter, this Privacy Policy prevails.

By registering an account on 666z, depositing funds, or using any feature of the 666z platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

666z collects the following categories of personal data from Players and, where applicable, from third-party sources:

666z does not knowingly collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information, except where directly relevant to a responsible gaming assessment or a formal dispute resolution process and only with appropriate safeguards in place.

666z collects personal data through the following channels:

• Direct submission: Data you provide when completing the 666z registration form, submitting KYC documents, making deposits or withdrawals, filling in support requests, or responding to surveys and promotional communications.
• Automated technical collection: Data collected automatically when you access 666z, including IP address, device identifiers, browser fingerprint, clickstream data, and session information, collected via server logs and first-party cookies.
• Payment processors: Confirmation data received from JazzCash, EasyPaisa, Raast / 1LINK, HBL, UBL, and Meezan Bank when you initiate a deposit or withdrawal transaction through the 666z cashier.
• Identity verification services: Where 666z uses a third-party identity verification provider to assist with KYC processing, that provider may share verified identity confirmation data with 666z. The provider is bound by confidentiality obligations.
• Fraud prevention services: Third-party fraud detection tools may provide 666z with risk scoring data based on anonymised or aggregated technical signals. This data does not constitute profiling for marketing purposes.

666z processes your personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing required to register your account, deliver gaming services, process transactions, and fulfil our obligations to you under the 666z Terms & Conditions.
• Legal obligation: Processing required to comply with anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, responsible gaming obligations, and reporting requirements imposed under our international gaming authority licensing framework.
• Legitimate interests: Processing conducted for fraud detection and prevention, platform security, abuse prevention, and platform analytics — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing of data for optional marketing communications (promotional emails, personalised offers) where you have explicitly opted in. You may withdraw this consent at any time by contacting 666z support or updating your communication preferences within your account settings.

666z uses the personal data described in Section 2 for the following purposes:

• Account registration and management: Creating and maintaining your 666z player account, authenticating your identity at login, and managing account settings and preferences.
• Service delivery: Processing deposits and withdrawals, crediting winnings, applying bonuses, and providing access to all betting, casino, and gaming products available on 666z.
• Identity and age verification: Confirming that you meet the 21+ age requirement and verifying the identity information you provided at registration, in compliance with our licensing obligations.
• Anti-money laundering compliance: Monitoring transactions and account behaviour for indicators of money laundering, fraud, or financial crime, and filing reports as required by our international gaming authority licensing conditions.
• Responsible gaming: Monitoring player activity to identify indicators of problem gambling and applying responsible gaming tools where requested or required. This includes managing self-exclusion, deposit limit, and cooling-off period requests.
• Customer support: Responding to enquiries, complaints, and support requests submitted through the 666z live chat or support email.
• Security and fraud prevention: Detecting and preventing unauthorised account access, bonus abuse, collusion, and other prohibited activities.
• Platform analytics: Analysing aggregated usage patterns to improve the performance, security, and user experience of the 666z platform. Analytics data used for this purpose is anonymised where possible.
• Marketing communications: Where you have provided consent, sending you information about 666z promotions, new games, and relevant offers. You can opt out of marketing communications at any time.

666z does not sell or rent your personal data to third parties. We share personal data only in the following limited and controlled circumstances:

• Payment service providers: JazzCash, EasyPaisa, Raast / 1LINK, HBL, UBL, and Meezan Bank receive the transaction data necessary to process your deposits and withdrawals. Each provider processes your data under their own applicable terms and privacy policies.
• Identity verification providers: Where a third-party KYC provider is used to assist with identity verification, we share the documents and data required to complete the verification. The provider is contractually prohibited from using your data for any other purpose.
• Fraud prevention and security providers: Technical risk-scoring data may be shared with fraud detection service providers to protect the integrity of the 666z platform. These providers operate under strict data processing agreements.
• Regulatory and licensing authorities: 666z is required under its international gaming authority licensing conditions to provide certain player data and transaction reports to the relevant regulatory body upon request or as part of regular compliance reporting.
• Law enforcement and legal proceedings: 666z will disclose personal data to law enforcement agencies, courts, or government bodies where required to do so by applicable law, court order, or regulatory direction. Where legally permissible, 666z will notify the affected player of such disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the 666z business, player data may be transferred to the acquiring entity, subject to equivalent data protection obligations being in place.

All third parties with whom 666z shares personal data are subject to contractual data processing agreements that require them to protect the data in accordance with applicable international data protection standards and prohibit them from using the data for any purpose beyond the specific engagement for which it was shared.

666z uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain session security, and analyse platform usage. The following types of cookies are in use on 666z.today:

• Strictly Necessary Cookies: These are required for the 666z platform to function and cannot be disabled. They include session authentication tokens, security cookies that prevent cross-site request forgery, and cookies that maintain your login state during a session.
• Functional Cookies: These remember your preferences — such as language settings and display preferences — to improve your experience across sessions on 666z.
• Analytics Cookies: These collect anonymised data about how players navigate and use the 666z platform, helping us identify areas for improvement. Data collected by analytics cookies does not identify you personally.
• Session Management Cookies: These track your gaming session for responsible gaming purposes — including session duration tracking used by the reality check tool available in your account settings.

666z does not use third-party advertising or retargeting cookies. You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will affect the functionality of the 666z platform. For full details on the cookies 666z uses and their durations, please refer to the cookie information accessible within the 666z platform.

666z implements a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• Transport Layer Security (TLS): All data transmitted between your device and the 666z platform is encrypted using TLS 1.2 or higher, preventing interception during transit.
• AES-256 Encryption at Rest: Sensitive data stored by 666z — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to player personal data within 666z's internal systems is restricted on a strict need-to-know basis. Staff who handle player data are subject to confidentiality obligations and receive data protection training.
• Regular Security Audits: 666z conducts periodic security assessments of its data infrastructure, including vulnerability scans and penetration testing, to identify and remediate potential weaknesses.
• Incident Response: 666z maintains a data breach response procedure. In the event of a data breach that is likely to result in a risk to your rights, 666z will notify the relevant regulatory authority and, where required, affected players within the timeframe mandated by applicable law.

While 666z takes all reasonable and technically appropriate measures to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own 666z login credentials and for using secure networks when accessing the platform.

666z retains personal data for the periods necessary to fulfil the purposes for which it was collected, comply with our legal and regulatory obligations, and support legitimate business operations. The following retention periods apply as a guide:

Upon expiry of the applicable retention period, personal data is securely deleted from 666z's active systems or anonymised in a manner that makes re-identification impossible. Self-exclusion records are retained for the duration of any exclusion period and for a minimum of 5 years thereafter to prevent re-registration during the exclusion term.

As a 666z player, you have the following rights in relation to the personal data 666z holds about you. These rights are subject to certain limitations and exemptions — particularly where processing is required for legal compliance or the prevention of financial crime:

To exercise any of the above rights, please contact the 666z Data Protection contact at [email protected] with the subject line "Data Subject Request" and a description of your request. 666z will acknowledge receipt within 5 business days and provide a substantive response within 30 days. Where a request is complex or numerous, 666z may extend this period by a further 30 days with notification.

You will be required to verify your identity before 666z processes a data subject request, to ensure that personal data is not disclosed to or acted upon at the request of an unauthorised third party.

The 666z platform and its associated data infrastructure may be hosted on servers located outside of Pakistan. Where personal data is transferred to a jurisdiction outside of Pakistan, 666z takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Safeguards used by 666z for international data transfers may include: contractual data transfer agreements incorporating internationally recognised standard contractual clauses; transfers to service providers located in jurisdictions that have been assessed as providing an adequate level of data protection; and data processing agreements that impose binding data protection obligations on the receiving party.

If you would like further information about the specific mechanisms used by 666z to protect data transferred internationally, please contact 666z support at [email protected].

The 666z platform is strictly prohibited for individuals under the age of 21. 666z does not knowingly collect, process, or store personal data belonging to individuals under 21 years of age. If 666z becomes aware that personal data has been collected from an individual who is under 21, that data will be deleted immediately and the account in question will be closed.

Parents and guardians who believe that a minor has registered on or used the 666z platform should contact 666z support immediately via the live chat on 666z.today. 666 z takes its child protection obligations seriously and will investigate all reported cases promptly.

For further information about 666z's age verification process and our approach to underage gambling prevention, see the Responsible Gaming section of the Terms & Conditions and the dedicated Responsible Gaming page.

13.1 Opt-In Basis. 666z only sends marketing communications — including promotional emails, SMS messages (where supported), and in-platform notifications about bonuses, new games, and special offers — to Players who have provided explicit consent to receive such communications. Consent is requested during the registration process and may be provided or withdrawn at any time via your 666z account settings.

13.2 Content of Marketing. Marketing communications sent by 666z are designed to inform you about promotions, bonus offers, new game releases, and other 666z platform updates that may be of interest to Pakistani players. All marketing communications include a clear unsubscribe link or opt-out instruction.

13.3 Withdrawing Consent. You may withdraw your consent to receive marketing communications at any time by: (a) clicking the unsubscribe link in any marketing email; (b) updating your communication preferences in your 666z account settings; or (c) contacting 666z support at [email protected] and requesting opt-out. Withdrawal of marketing consent does not affect your ability to use the 666z platform or receive essential account-related communications.

13.4 Essential Communications. Regardless of your marketing preferences, 666z will continue to send you essential service communications — including account verification emails, transaction confirmations, responsible gaming notifications, security alerts, and updates to these Terms & Conditions or Privacy Policy — as these are necessary for the operation of your account and our contractual obligations to you.

The 666z platform may contain links to third-party websites, services, or resources — including payment processor pages, game provider studios, and support documentation hosted by third parties. 666z is not responsible for the privacy practices or content of any third-party website or service.

When you navigate to a third-party site or use a third-party service (such as JazzCash or EasyPaisa) to complete a deposit transaction, you are subject to that third party's own privacy policy and terms of service. 666z encourages you to review the privacy policies of any third-party service before providing personal information to them.

The inclusion of a link to a third-party service on the 666z platform does not constitute an endorsement of that service's privacy practices by 666z. Any data you provide directly to a third-party service is governed by that service's privacy policy, not this Privacy Policy.

666z reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform features. The "Last Updated" date at the top of this document indicates when the most recent substantive revision was made.

Where changes to this Privacy Policy are material — meaning they materially affect how 666z processes your personal data or materially alter your rights — 666z will provide advance notice via the platform and, where applicable, via email to the registered email address on your account. Notice will be provided at least 14 days prior to the updated policy taking effect.

Non-material changes — such as corrections of typographical errors, clarifications of existing wording, or updates to contact details — may be made without prior notice. 666z encourages all players to review this Privacy Policy periodically to stay informed about how your data is protected.

Continued use of the 666z platform following notification of any change to this Privacy Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or complaints about this Privacy Policy or how 666z processes your personal data, please contact the 666z support team or Data Protection contact through the following channels:

• General Privacy Enquiries: [email protected]
• Data Subject Requests: Email [email protected] with the subject line "Data Subject Request"
• Live Chat Support: Available 24/7 directly within the 666z platform after logging in — suitable for urgent privacy or account security concerns.

666z will acknowledge receipt of any privacy-related enquiry or data subject request within 5 business days and provide a substantive response within 30 days. Where a request is particularly complex, 666z may extend this period by a further 30 days with notification to you.

If you are not satisfied with how 666z has responded to a privacy concern or data subject request, you have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction where 666z operates its licensing or where you are based. 666z will provide details of the relevant authority upon request.