666y Privacy
Policy

📜 1. Introduction & Scope

This Privacy Policy ("Policy") is published by 666y ("Company", "we", "us", "our") and governs the collection, use, storage, sharing, and protection of personal data relating to all individuals ("Player", "User", "you") who access or use the 666y platform, available at https://666y.ws.

666y is committed to handling your personal data with transparency, integrity, and respect. We operate primarily for Pakistani players and understand the particular sensitivity that financial and identity data carries in the Pakistani context. This Policy is written in plain language so that every 666y player — whether they are in Karachi, Lahore, Islamabad, or Faisalabad — can understand exactly how their information is used.

By registering a 666y account, making a deposit, placing a wager, or otherwise using the 666y platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside the 666y Terms & Conditions and Responsible Gaming Policy, both of which are incorporated into the overall user agreement governing your use of the platform.

📂 2. Data We Collect

2.1 Registration Data

When you create a 666y account, we collect the following information:

• Full legal name (as it appears on your government-issued identity document);
• Date of birth (to verify you meet the 21+ age requirement);
• Email address;
• Mobile phone number;
• Residential address (city, province, country);
• Username and encrypted password.

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may request and collect:

• Copy of national identity card (CNIC) or passport;
• Proof of current residential address (utility bill, bank statement, or similar document dated within 90 days);
• Proof of payment method ownership (e.g., screenshot of JazzCash or EasyPaisa account, or bank statement showing your name and account number);
• Source of funds documentation where transaction volumes require it.

2.3 Transaction Data

We record all financial transactions conducted through your 666y account, including:

• Deposit amounts, timestamps, and payment method identifiers;
• Withdrawal requests, amounts, and processing records;
• Cryptocurrency wallet addresses used for deposits and withdrawals (public addresses only — private keys are never held by 666y);
• Bonus credits, wagering activity, and account balance history.

2.4 Gameplay & Betting Data

We collect records of your gaming and betting activity on 666y, including game session logs, wager amounts, outcomes, bet histories on cricket and other sports markets, and time-on-platform data. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

2.5 Technical & Device Data

When you access 666y, our servers automatically record certain technical information:

• IP address and approximate geolocation (city/country level);
• Device type, operating system, and browser version;
• Session timestamps and page navigation data;
• Device fingerprint identifiers (used for fraud prevention and duplicate account detection).

2.6 Communications Data

If you contact 666y support via live chat or email, we retain records of those communications, including the content of messages, timestamps, and the resolution outcome. These records are kept to maintain service quality and for dispute resolution purposes.

⚙️ 3. How We Use Your Data

666y uses the personal data we collect for the following purposes:

• Account operation: Creating, managing, and securing your 666y player account, including processing deposits and withdrawals, updating account details, and responding to account queries;
• Identity verification: Conducting KYC checks to confirm your identity, age (21+), and eligibility to use the platform in compliance with our licensing obligations;
• Payment processing: Facilitating deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, Bitcoin, and USDT TRC-20;
• Regulatory compliance: Fulfilling our anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gaming regulatory obligations, including filing reports with relevant authorities where legally required;
• Fraud prevention and security: Detecting and preventing fraud, duplicate account creation, bonus abuse, account takeover attempts, and other prohibited conduct using device fingerprinting, IP analysis, and transaction monitoring;
• Responsible gaming: Monitoring player activity to identify signs of problem gambling and triggering responsible gaming interventions where appropriate, including account cooling-off and self-exclusion enforcement;
• Customer support: Responding to your queries, resolving disputes, and maintaining records of support interactions;
• Platform improvement: Analysing aggregated, anonymised usage data to improve the 666y platform, user experience, and product offering;
• Marketing communications: Sending you promotional offers and bonus notifications by email or SMS, but only where you have opted in to receive such communications. You may opt out at any time.

⚖️ 4. Legal Basis for Processing

666y processes your personal data only where a valid legal basis exists for doing so. The applicable legal bases are as follows:

4.1 Contractual Necessity

The majority of data processing at 666y is necessary for the performance of the contract between you and the Company — namely, operating your player account, processing your transactions, and delivering the gaming and betting services you have subscribed to.

4.2 Legal Obligation

Certain processing activities are required by law, including KYC identity verification, AML transaction monitoring, retention of financial records, and reporting of suspicious transactions to regulatory authorities. This processing is mandatory and cannot be opted out of.

4.3 Legitimate Interests

We process certain data — such as device fingerprints and IP addresses — on the basis of our legitimate interest in preventing fraud, protecting the security of the platform, and detecting prohibited conduct such as duplicate account creation and bonus abuse.

4.4 Consent

Where processing is not required by contract or law, we rely on your explicit consent. This applies primarily to marketing communications. You may withdraw your consent to marketing communications at any time by contacting the support team or clicking the unsubscribe link in any marketing email.

🤝 5. Data Sharing & Disclosure

666y does not sell your personal data to any third party. We share data only in the limited circumstances described below:

5.1 KYC & Identity Verification Providers

We engage regulated third-party identity verification service providers to assist with KYC document checks. These providers process your identity documents solely for verification purposes under strict data processing agreements and are prohibited from using your data for any other purpose.

5.2 Payment Processing Partners

When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or Raast, the relevant payment institution will receive the transaction data necessary to process the payment. Cryptocurrency transactions are broadcast to the relevant public blockchain network; 666y does not share additional personal data with blockchain networks beyond the wallet address.

5.3 Game Software Providers

666y's casino games are provided by third-party software studios. These providers may receive anonymised session data (such as bet amounts and game outcomes) necessary to operate the game and calculate results. They do not receive your name, CNIC, or payment details.

5.4 Regulatory Authorities

666y is legally required to disclose player data to its gaming regulator, financial intelligence units, and law enforcement authorities upon receipt of a lawful request. We will notify you of any such disclosure to the extent permitted by law.

5.5 Fraud Prevention Networks

We may share device fingerprint data and anonymised risk signals with industry fraud prevention networks to protect the platform and the broader gaming community from fraudulent actors. No personally identifiable information is shared in this context.

🍪 6. Cookies & Tracking Technologies

6.1 What We Use

666y uses cookies and similar tracking technologies (local storage, session tokens) on the platform for the following purposes:

• Essential cookies: Required for basic platform functionality, including maintaining your login session, storing your language and currency preferences, and securing your account against CSRF attacks. These cannot be disabled.
• Analytics cookies: Used to collect anonymised, aggregated data on how players navigate the 666y platform, which pages are most visited, and where technical errors occur. This helps us improve platform performance.
• Fraud prevention cookies: Used to generate device fingerprints that assist in detecting duplicate accounts, bonus abuse, and account takeover attempts.

6.2 Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the 666y platform, particularly session management and security features. Essential cookies cannot be disabled as they are necessary for the platform to function.

6.3 No Third-Party Advertising Cookies

666y does not place third-party advertising or retargeting cookies on your device. We do not participate in cross-site tracking networks or share browsing data with advertising platforms.

🗓️ 7. Data Retention

666y retains your personal data for the periods set out below, after which it is securely deleted or anonymised:

Following the expiry of the applicable retention period, personal data is securely deleted from all 666y systems, including backup systems, within 90 days.

🛡️ 8. Data Security

666y implements technical and organisational security measures appropriate to the risk profile of the data we hold. Our security programme includes:

• Encryption at rest: All personal data stored on 666y servers is encrypted using AES-256 encryption. Database credentials and encryption keys are managed through a dedicated secrets management system with strict access controls.
• Encryption in transit: All communications between your browser or device and the 666y platform are secured using TLS 1.3. Connections using older, insecure protocol versions are rejected.
• Access controls: Access to personal data within 666y is restricted on a strict need-to-know basis. Staff members with access to player data undergo background screening and receive mandatory data protection training.
• Intrusion detection: 666y operates continuous network monitoring and intrusion detection systems to identify and respond to security incidents in real time.
• Penetration testing: The 666y platform undergoes regular third-party penetration testing. Critical vulnerabilities are remediated within 24 hours of discovery.
• Incident response: In the event of a data breach affecting your personal data, 666y will notify affected players and the relevant regulatory authority within the timeframe required by applicable law.

👤 9. Your Rights

As a 666y player, you have the following rights with respect to your personal data:

• Right of access: You may request a copy of all personal data that 666y holds about you. We will provide this within 30 days of receiving a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Many details can be updated directly in your account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. We will action this request subject to our legal obligation to retain certain data for regulatory purposes (see Section 7).
• Right to restriction of processing: You may request that we restrict the processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: You may request your personal data in a structured, machine-readable format (such as JSON or CSV) for transfer to another service provider.
• Right to object: You may object to processing based on legitimate interests or carried out for direct marketing purposes. We will cease marketing communications immediately upon receiving an objection.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact the 666y support team via live chat. We may request verification of your identity before actioning a data rights request to protect against fraudulent requests.

🌐 10. International Data Transfers

666y operates servers and engages service providers in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, 666y ensures that appropriate safeguards are in place to protect your data, including:

• Data processing agreements with all third-party processors that impose equivalent data protection standards to those applied by 666y;
• Use of service providers located in jurisdictions recognised as providing an adequate level of data protection;
• Standard contractual clauses or equivalent legal mechanisms for transfers to jurisdictions without an adequacy determination.

You may request details of the specific safeguards applicable to any international transfer of your data by contacting the 666y support team.

🔞 11. Children & Minors

The 666y platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a minor, we will immediately:

• Suspend and permanently close the associated account;
• Delete all personal data collected in connection with that account from our active systems as quickly as possible, subject to any mandatory legal retention obligations;
• Refund any real-money balance remaining in the account to the verified payment source.

If you are a parent or guardian and believe that a minor in your care has registered a 666y account, please contact our support team immediately via live chat so we can take prompt action.

🛡️ 12. Responsible Gaming & Data

666y's responsible gaming programme relies on the responsible use of player data to identify and support players who may be experiencing gambling-related harm. Specifically:

• Gameplay and transaction data is analysed to detect patterns associated with problem gambling, such as rapidly increasing bet sizes, extended uninterrupted play sessions, and repeated failed withdrawal requests;
• Where such patterns are detected, 666y's responsible gaming team may reach out proactively to offer support tools including deposit limits, cooling-off periods, and self-exclusion;
• Self-exclusion data is retained for the full duration of the exclusion period and for five years thereafter to prevent circumvention through new account registration;
• Players who have self-excluded will not receive any marketing communications from 666y for the duration of their exclusion.

For more information about the responsible gaming tools available to you, please visit our Responsible Gaming page.

📝 13. Policy Amendments

666y reserves the right to update or amend this Privacy Policy at any time. When material changes are made to this Policy, we will notify registered players by displaying a prominent notice on the 666y platform and, where appropriate, by sending an email notification to the address registered to your account.

The "Last updated" date at the top of this Policy will reflect the date of the most recent revision. Your continued use of the 666y platform following publication of a revised Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should cease using the platform and may request account closure via the support team.

✉️ 14. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 666y, please contact our Data Protection team in the first instance:

✉ Email: [email protected]

💬 Live Chat: Available 24/7 directly on the 666y platform

We aim to acknowledge all privacy-related enquiries within two (2) business days and to resolve them within thirty (30) days. If you are not satisfied with our response to your complaint, you have the right to escalate the matter to the data protection supervisory authority or relevant regulatory body in your jurisdiction.