666m Casino – Privacy Policy & Data Protection

1. Introduction

666m ("we", "us", "our") is committed to protecting the privacy of all individuals who use the 666m Platform, including visitors to the website and registered account holders. This Privacy Policy describes how 666m collects, uses, stores and protects personal information, and explains the rights available to you in relation to your personal data.

This policy applies to all personal data processed by 666m in connection with the operation of the Platform, including data collected through account registration, KYC verification, payment processing, customer support interactions and the general use of Platform services.

By using 666m's Platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with any aspect of this policy, you should not use the Platform. Questions about this policy may be directed to 666m via [email protected].

2. Data We Collect

666m collects personal data through the following means and in the following categories:

2.1 Information You Provide Directly

• Registration details: legal name, date of birth, email address, Pakistani mobile number and password;
• KYC identity documents: copy of CNIC, NICOP or passport; proof of address where required;
• Payment information: payment method identifiers (e.g. JazzCash account reference, bank account details) as required to process deposits and withdrawals;
• Customer support communications: records of any contact you initiate with 666m support staff.

2.2 Information Collected Automatically

• Technical data: IP address, browser type and version, device type and operating system, screen resolution;
• Usage data: pages visited, features used, session duration, betting and gaming activity logs;
• Cookie data: session cookies, preference cookies and analytics cookies as described in Section 8 of this policy.

2.3 Information from Third Parties

• KYC and identity verification data from third-party verification service providers;
• Payment confirmation data from payment processors (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah and card scheme processors);
• Fraud prevention and anti-money laundering screening results from compliance service providers.

3. How We Use Your Data

666m uses your personal data for the following purposes:

666m does not use your personal data for automated decision-making that produces significant legal or similarly significant effects without human oversight, except where this forms part of legally required fraud and AML screening processes.

4. Legal Basis for Processing

666m processes your personal data on the following legal grounds:

• Contractual necessity — Processing required to provide the services you have requested, including account management, payment processing and delivery of betting and gaming services.
• Legal obligation — Processing required to comply with applicable law, including anti-money laundering legislation, identity verification requirements and regulatory obligations.
• Legitimate interests — Processing for fraud prevention, Platform security, responsible gaming monitoring and improvement of Platform services, where these interests are not overridden by your privacy rights.
• Consent — Where 666m relies on your consent for processing (for example, for certain marketing communications), you have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Third-Party Disclosure

666m does not sell, rent or trade your personal data. Data may be disclosed to the following categories of recipients in the circumstances described:

• Payment processors — JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah and card scheme processors receive the data necessary to process your payment transactions. These processors operate under their own privacy and security frameworks.
• KYC and compliance service providers — Third-party identity verification and AML screening providers receive the data required to fulfil verification checks. These providers are contractually bound to process data only for the purposes specified by 666m.
• Regulatory and law enforcement authorities — 666m will disclose personal data to competent authorities where required by applicable law, court order or regulatory instruction, or where 666m is legally obligated to report suspicious activity.
• IT and infrastructure service providers — Providers of hosting, cloud infrastructure, customer support platforms and analytics tools may process personal data as data processors on 666m's behalf, subject to appropriate data processing agreements.

All third-party data processors engaged by 666m are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with 666m's documented instructions.

6. Data Retention

666m retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and in any case for no shorter period than required by applicable legal, regulatory and compliance obligations.

Account data and transaction records are retained for a minimum of five years following account closure in accordance with standard anti-money laundering and financial record-keeping requirements. KYC identity documents are retained for the periods specified by applicable verification and compliance regulations.

Technical and usage data retained for analytics purposes is aggregated and anonymised where possible. Anonymised data may be retained indefinitely as it can no longer be attributed to an identifiable individual.

When retention periods expire, personal data is securely deleted or anonymised in accordance with 666m's data disposal procedures.

7. Security Measures

666m implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and 666m's servers;
• Encryption of sensitive data at rest on 666m's servers;
• Role-based access controls limiting access to personal data to authorised personnel with a legitimate operational need;
• Two-factor authentication available for all 666m account holders;
• Regular security assessments and monitoring of Platform infrastructure;
• Incident response procedures for identifying, containing and reporting data security incidents.

Notwithstanding the above, no security measures are completely impenetrable. 666m cannot guarantee absolute security of data transmitted over the internet. You are responsible for keeping your 666m login credentials confidential and for notifying 666m promptly if you suspect that your account has been accessed without your authorisation.

8. Cookies & Tracking Technologies

666m uses cookies and similar tracking technologies (including local storage and session storage) on the Platform for the following purposes:

• Strictly necessary cookies — Required for the Platform to function. These include session management cookies that keep you logged into your 666m account and security cookies that help protect against fraud. These cannot be disabled.
• Functional cookies — Remember your preferences, such as language settings and previously viewed game titles. These cookies improve your experience but are not essential.
• Analytics cookies — Collect anonymised information about how users interact with the Platform to help 666m identify usage patterns and improve the service. Analytics data is aggregated and not used to identify individual users.

You can manage cookie settings through your browser's privacy controls. Blocking strictly necessary cookies will impair the functionality of the Platform, including your ability to remain logged in to your 666m account.

9. Your Privacy Rights

Subject to applicable law, you have the following rights in relation to the personal data 666m holds about you:

• Right of access — You may request a copy of the personal data 666m holds about you.
• Right to rectification — You may request correction of inaccurate or incomplete personal data.
• Right to erasure — You may request deletion of personal data 666m holds about you, subject to legal retention obligations and ongoing compliance requirements.
• Right to restrict processing — You may request that 666m restrict the processing of your personal data in certain circumstances.
• Right to data portability — Where processing is based on consent or contractual necessity, you may request a copy of your data in a machine-readable format.
• Right to object — You may object to processing of your personal data carried out on the basis of legitimate interests.
• Right to withdraw consent — Where processing is based on consent, you may withdraw consent at any time without affecting prior processing.

To exercise any of the above rights, please contact 666m at [email protected]. 666m will respond to valid requests within a reasonable timeframe. 666m may need to verify your identity before processing a data subject request.

10. Children's Privacy

666m does not knowingly collect or process personal data relating to persons under the age of 18. The Platform is strictly intended for adults. If 666m becomes aware that it has inadvertently collected personal data from a person under 18, that data will be deleted promptly and the associated account will be closed.

If you believe that a minor has registered an account on the 666m Platform, please contact 666m immediately at [email protected].

11. International Data Transfers

666m's servers and certain third-party service providers may be located outside Pakistan. Where personal data is transferred internationally, 666m takes steps to ensure that the transfer is carried out in compliance with applicable data protection requirements and that the receiving party provides an adequate level of data protection through contractual safeguards or other appropriate mechanisms.

12. Changes to This Privacy Policy

666m may update this Privacy Policy from time to time to reflect changes in applicable law, operational practices or data processing activities. Material changes will be notified to registered account holders via email or a prominent Platform notification. The date at the top of this page reflects when the policy was last updated.

Your continued use of the Platform after notification of changes constitutes your acceptance of the revised Privacy Policy. If you do not accept the changes, you should discontinue use of the Platform and may request account closure.

13. Contact Information

For any questions, concerns or requests relating to this Privacy Policy or the personal data 666m holds about you, please contact the 666m data protection team at:

• Email: [email protected]

666m aims to acknowledge all privacy-related enquiries promptly and to resolve them within a reasonable timeframe. For urgent matters — such as suspected unauthorised access to your account — please mark your communication accordingly.