666f Privacy Policy — Your Data, Explained

1. Introduction

This Privacy Policy describes how 666f ("we", "us", "our") collects, uses, stores and protects personal information relating to players and visitors on the 666f platform at 666f.pw. It applies to all users of the website and the 666f mobile application.

By registering an account or using the 666f platform, you confirm that you have read and understood this Privacy Policy. This policy should be read alongside the Terms and Conditions and the Responsible Gaming policy, both of which form part of your overall agreement with 666f.

We have written this policy to be as clear and readable as possible. If something is not clear, or if you have questions about how your data is handled, please contact our support team through the in-platform live chat at any time.

2. Data We Collect

We collect two broad categories of information: data you provide to us directly, and data collected automatically when you use the platform.

Information you provide directly:

• Registration data: your name, date of birth, email address, mobile number and preferred currency (PKR).
• Identity verification (KYC) documents: copies of your CNIC, passport or driving licence, proof of address and payment method verification.
• Payment information: details provided when making deposits or requesting withdrawals via JazzCash, Easypaisa, Raast, bank transfer, debit card or other supported mobile wallets.
• Communications: messages and information you send to our support team through live chat or any other support channel.
• Responsible Gaming preferences: deposit limits, loss limits, session reminders and self-exclusion requests you set through your account settings.

Information collected automatically:

• Device information: device type, operating system, browser type and version.
• Usage data: pages visited, games played, bets placed, session duration and in-platform navigation behaviour.
• Connection data: IP address, approximate geographic location derived from IP, and connection timestamps.
• Cookie and tracking data: as described in Section 9 of this policy.

3. How We Collect Your Data

Personal data is collected through the following channels:

• Account registration: when you sign up and create your 666f account.
• Account use: when you deposit, play games, place bets, claim bonuses or contact support.
• KYC submission: when you upload identity and address verification documents.
• Payment processing: when you initiate a deposit or withdrawal through a supported payment method.
• Device and browser: automatically when you access the 666f website or mobile app.
• Cookies and similar technologies: as described in Section 9.

4. How We Use Your Data

The table below summarises the main purposes for which we use personal data collected from 666f players:

We do not use your personal data for unsolicited third-party marketing. Promotional communications from 666f relate solely to offers and updates on the 666f platform and can be managed through your account notification settings.

5. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract performance: processing your account registration, deposits, withdrawals and gameplay is necessary to fulfil our agreement with you under the Terms and Conditions.
• Legal obligation: KYC verification and anti-money laundering checks are carried out to comply with applicable legal requirements.
• Legitimate interests: fraud detection, platform security, responsible gaming monitoring and platform improvement are carried out in our legitimate interests and those of our players, provided they do not override your privacy rights.
• Consent: where we send you optional promotional communications, we do so on the basis of your consent. You can withdraw this consent at any time through your account settings.

6. Data Sharing with Third Parties

666f does not sell, rent or trade your personal data. We share data with third parties only in the following limited circumstances:

• Payment processors: JazzCash, Easypaisa, Raast, banking partners and card processors receive the payment data necessary to process your transactions. Each is a regulated financial services provider with their own data protection obligations.
• Identity verification providers: third-party KYC and identity verification services receive the documents you submit for verification purposes only.
• Platform security and fraud prevention: security service providers may receive IP address, device and behavioural data to identify and prevent fraudulent activity.
• Game content providers: game studios whose titles appear on 666f may receive anonymised or pseudonymised session data relevant to their game. They do not receive your name, contact details or payment information.
• Legal and regulatory requirements: we may disclose personal data to law enforcement or regulatory bodies where required by applicable law and where we are legally compelled to do so.

All third-party service providers engaged by 666f are required by contract to handle personal data in a manner consistent with this Privacy Policy and to implement appropriate security measures.

7. K YC Documents

Know Your Customer (KYC) documents — including copies of your CNIC, passport, driving licence, proof of address and payment method verification — are handled with the highest level of care. These documents are used solely for the purpose of verifying your identity before your first withdrawal is processed.

KYC documents are:

• Stored in encrypted form on secure servers with restricted access.
• Accessible only to authorised 666f staff and contracted verification service providers who require access to perform their duties.
• Never shared with any party beyond what is strictly necessary for identity verification.
• Retained for the period described in Section 10 of this policy.

If your KYC documents are rejected during verification — for example due to poor image quality or an expired document — you will be notified through your account and asked to resubmit. Rejected documents are deleted from our systems promptly.

8. Payment Data

All deposits and withdrawals on 666f are processed in PKR. When you initiate a transaction through JazzCash, Easypaisa, Raast, bank transfer, debit card or another supported mobile wallet, the payment details you enter are transmitted directly to the relevant payment processor over an encrypted connection.

666f does not store full card numbers, full bank account numbers or complete mobile wallet credentials on its own servers. We retain only the transaction reference, amount, timestamp, payment method type and the last few digits of the account or card number where relevant — enough to identify a transaction in case of a dispute but not enough to initiate a new transaction.

Your PKR wallet balance within the 666f platform is stored securely and is accessible only through your authenticated account session.

9. Cookies and Tracking Technologies

666f uses cookies and similar browser-based technologies to make the platform work properly and to improve your experience. Here is a breakdown of the types of cookies we use:

• Strictly necessary cookies: these are essential for the platform to function. They manage your login session, keep your account secure and remember your preferences during a session. You cannot opt out of these.
• Performance cookies: these collect anonymised data about how you use the platform — which pages you visit, how long sessions last and where errors occur. This helps us identify and fix problems.
• Functionality cookies: these remember your preferences, such as your selected language or preferred deposit method, so you do not need to re-enter them each time you log in.
• Analytics cookies: we use platform analytics tools to understand overall usage patterns. Data collected through analytics cookies is aggregated and does not identify you personally.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the 666f platform. Strictly necessary cookies cannot be disabled without preventing the platform from working.

10. Data Retention

We retain your personal data for as long as your account is active and for a period after account closure as required for legal, fraud prevention and audit purposes. The general retention periods we apply are:

• Account registration data: retained for the duration of your account and for a minimum of five years after account closure.
• KYC documents: retained for a minimum of five years from the date of submission, in line with standard identity verification record-keeping requirements.
• Transaction records: retained for a minimum of five years from the date of the transaction.
• Support communications: retained for up to three years from the date of the last communication.
• Usage and session data: retained for up to two years from the date of collection.

After the applicable retention period has expired, personal data is securely deleted or anonymised. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

11. Security Measures

666f implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration or disclosure:

• TLS encryption: all data transmitted between your device and the 666f platform is protected by Transport Layer Security (TLS) encryption.
• Encrypted data storage: sensitive data stored on our servers is encrypted using AES-256 or equivalent encryption standards.
• Access controls: access to personal data is restricted to authorised personnel on a need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Session security: account sessions time out automatically after a period of inactivity. We recommend you always log out when using a shared or public device.
• Fraud monitoring: automated systems monitor account activity for patterns that may indicate fraud, account compromise or policy violations.
• Incident response: in the event of a data security incident that affects your personal data, we will notify affected users and take immediate remediation steps.

While we apply strong security measures, no online platform can guarantee absolute security. You also have a role to play — keep your 666f password unique, do not share your login credentials and contact support immediately if you suspect any unauthorised access to your account.

12. Your Privacy Rights

As a 666f account holder, you have the following rights regarding your personal data:

• Right of access: you can request a copy of the personal data we hold about you at any time.
• Right to correction: if any personal data we hold is inaccurate or out of date, you can ask us to correct it. Basic account details such as your email address or mobile number can be updated directly in your account settings.
• Right to deletion: you can request that we delete your personal data. We will action deletion requests subject to any legal obligations that require us to retain certain data for a defined period (see Section 10).
• Right to restrict processing: in certain circumstances you can ask us to limit how we use your personal data while a query or correction request is being resolved.
• Right to data portability: you can request a copy of the personal data you have provided to us in a structured, commonly used format.
• Right to withdraw consent: where we process your data on the basis of consent — for example, for optional promotional communications — you can withdraw that consent at any time through your account notification settings.

To exercise any of these rights, contact 666f support through the in-platform live chat. We aim to respond to all data-related requests within 30 days. For complex requests we may require up to an additional 60 days, in which case we will let you know within the first 30 days.

To protect your privacy, we will verify your identity before actioning any data access, correction or deletion request.

13. Minors

The 666f platform is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. Age is verified as part of the KYC process and account registration requires a confirmed date of birth.

If we become aware that personal data has been collected from a minor, we will delete that data immediately and close the associated account. If you believe a minor has registered on the platform, please contact support immediately via live chat.

For guidance on keeping minors away from online gaming platforms, please visit our Responsible Gaming page.

14. Changes to This Privacy Policy

666f may update this Privacy Policy from time to time to reflect changes in our practices, platform features or applicable legal requirements. When material changes are made, the "Last Updated" date at the top of this page will be revised and a notice will be displayed within the platform.

Continued use of the 666f platform after a revised Privacy Policy has been published constitutes your acceptance of the updated policy. We recommend reviewing this page whenever you notice the "Last Updated" date has changed. If you disagree with any changes, you should stop using the platform and contact support to close your account and request deletion of your data.

15. Contact Us

If you have any questions, concerns or requests related to this Privacy Policy or the way 666f handles your personal data, please contact our support team through the in-platform live chat. Support is available 24 hours a day, seven days a week.

You can also visit the FAQ page for answers to common questions about accounts, payments and platform use on 666f.