666s Privacy Policy

1. Introduction & Data Controller

This Privacy Policy ("Policy") applies to all personal data collected by 666s ("666s", "we", "us", "our") through the 666s.bio platform and any associated services provided to registered users ("you", "User", "Player").

666s acts as the data controller in respect of personal data collected from players accessing the platform. This means 666s determines the purposes and means by which your personal data is processed. All data processing described in this Policy is carried out by 666s or authorised service providers acting on our instruction.

By registering an account, using the 666s platform, or otherwise submitting personal data to us, you acknowledge that you have read and understood this Privacy Policy and that your data will be processed as described herein. This Policy should be read together with the 666s Terms & Conditions.

2. Personal Data We Collect

666s collects personal data across several categories depending on how you interact with the platform:

2.1 Registration Data

• Full legal name as it appears on your CNIC
• Date of birth
• Pakistani mobile number (with country code)
• Email address
• Residential address
• Account username and encrypted password

2.2 KYC & Identity Verification Data

• Scanned or photographed copy of Pakistani CNIC (front and back)
• Selfie photograph taken for identity matching purposes
• Proof of payment method ownership where requested
• Proof of address documentation where requested

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts, timestamps, and payment method references
• JazzCash or Easypaisa account reference numbers (not full account credentials)
• Bank account details where bank transfer is used
• Cryptocurrency wallet addresses where USDT TRC20 is used

2.4 Gaming & Behavioural Data

• Bet history, game session logs, wagering amounts, and outcomes
• Platform navigation and feature interaction data
• Responsible gaming tool settings and usage (deposit limits, self-exclusion status)

2.5 Technical & Device Data

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Session timestamps and login history
• Cookie identifiers and related tracking data (see Section 7)

2.6 Communications Data

• Records of live chat, email, and support interactions with 666s
• Feedback and survey responses where voluntarily submitted

3. How We Use Your Personal Data

4. Legal Basis for Processing

666s processes personal data on the following legal bases:

• Contract performance: Processing necessary to deliver the services you have registered for, including account management, payment processing, and game access
• Legal obligation: Processing required to comply with applicable laws, including identity verification, anti-money laundering obligations, and responsible gaming requirements
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and service improvement where such interests are not overridden by your privacy rights
• Consent: Processing for optional purposes such as marketing communications, where you have given explicit consent which may be withdrawn at any time

5. KYC Data & Identity Verification

KYC data — including CNIC images and selfie photographs — is treated with heightened sensitivity at 666s. This data is collected solely to verify account holder identity, prevent underage gambling, comply with anti-money laundering requirements, and protect the integrity of the platform.

KYC documents are stored in an encrypted format on secure servers with access restricted to authorised compliance personnel. KYC data is never used for marketing, profiling, or purposes beyond identity and compliance verification. Where a third-party KYC verification service provider is used, they operate under a data processing agreement obligating them to handle data only as instructed by 666s.

KYC data is retained for as long as the account remains active and for a period thereafter as required by applicable compliance obligations. See Section 9 for full retention details.

6. Payment Data

666s does not store full payment credentials. For JazzCash and Easypaisa transactions, 666s retains the mobile wallet reference number and transaction amount for record-keeping. Full PIN or password details associated with your mobile wallet are never transmitted to or stored by 666s.

For card-based transactions via Visa or Mastercard, payment processing is handled by a PCI-DSS compliant payment gateway. 666s retains only the last four digits of the card number, card type, and transaction reference for record-keeping purposes. Full card numbers are not stored on 666s infrastructure.

USDT TRC20 deposit addresses are retained in transaction logs. Cryptocurrency transactions are irreversible — 666s is not liable for erroneous transfers to incorrect wallet addresses provided by the user.

7. Cookies & Tracking Technologies

666s uses cookies and similar tracking technologies on the platform. These fall into the following categories:

Essential Cookies

Required for the platform to function. These include session cookies that maintain your login state, security tokens, and preference cookies that remember your language and display settings. These cannot be disabled without impairing platform functionality.

Analytics Cookies

Used to understand how players navigate and use the 666s platform, allowing us to identify performance issues and improve the user experience. Data collected through analytics cookies is aggregated and does not identify individual users by name.

Security & Fraud Detection Cookies

Help 666s detect suspicious activity, multiple-account creation, and automated access attempts. These cookies assist in protecting the integrity of the platform and the security of all registered accounts.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to log in and use the 666s platform normally.

8. Data Sharing & Third Parties

666s does not sell, rent, or trade personal data to third parties for commercial or marketing purposes. Personal data may be shared in the following limited circumstances:

• Service Providers: Third-party vendors who process data on 666s's behalf under contractual data processing agreements — including KYC verification services, payment processors, cloud hosting providers, and customer support software providers
• Legal & Regulatory Obligations: Where disclosure is required by applicable law, court order, or regulatory authority, 666s will comply with such requirements to the extent legally mandated
• Fraud & Security: Where disclosure to law enforcement or security services is necessary to investigate fraud, money laundering, or other criminal activity involving 666s accounts
• Business Transfers: In the event of a merger, acquisition, or sale of 666s assets, personal data may be transferred to the relevant successor entity subject to equivalent privacy protections

9. Data Retention

666s retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of account activity plus a minimum of 5 years following account closure, in accordance with standard anti-money laundering record-keeping practices
• KYC documents: Retained for the life of the account and a minimum of 5 years after closure
• Transaction records: Retained for a minimum of 5 years from the date of each transaction
• Gaming and session logs: Retained for a minimum of 2 years
• Support communications: Retained for 2 years from the date of the last interaction, unless a longer period is required to resolve an ongoing dispute
• Marketing consent records: Retained until consent is withdrawn, plus 1 year thereafter for audit purposes

Following the expiry of applicable retention periods, data is securely deleted or anonymised so that it can no longer be associated with an individual account holder.

10. Data Security

666s implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption on all data transmissions between your device and 666s servers
• Encryption of sensitive data at rest, including KYC documents and payment references
• Access controls restricting data access to authorised personnel with a legitimate business need
• Regular security assessments and penetration testing of platform infrastructure
• Two-factor authentication available for all account holders
• Automated anomaly detection for suspicious login and transaction activity

No data transmission or storage system can be guaranteed to be 100% secure. In the event of a personal data breach that poses a risk to affected individuals, 666s will take prompt action in accordance with applicable notification obligations.

11. Your Rights

Subject to applicable law and certain conditions, you have the following rights in respect of your personal data held by 666s:

• Right of Access: You may request a copy of the personal data 666s holds about you
• Right to Rectification: You may request correction of inaccurate or incomplete personal data
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to retention obligations
• Right to Restriction: You may request that processing of your data be restricted in certain circumstances
• Right to Object: You may object to processing based on legitimate interests, including direct marketing
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing
• Right to Data Portability: Where technically feasible, you may request a portable copy of data you have provided to 666s

To exercise any of these rights, contact the 666s support team via live chat or at the email address in Section 12. 666s will respond to rights requests within a reasonable timeframe. Note that certain requests — particularly erasure requests — may be limited where retention is required by law or necessary to resolve outstanding disputes.

12. Changes to This Policy & Contact

666s may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or platform features. The date of the most recent update is displayed at the top of this page. Where changes materially affect the way we process your data, we will provide reasonable notice to registered users before the changes take effect.

Continued use of the 666s platform following publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms.