666p1 Privacy
Policy

Introduction

This Privacy Policy ("Policy") sets out the data practices of 666p1 ("the Platform", "we", "us", "our") in respect of all personal information collected from players, visitors and prospective users of 666p1.net. This Policy applies to all products and services offered through 666p1, including online casino games, live dealer tables, slot games, sports betting markets (including cricket and PSL), account management functions and any communications you have with our support team.

By registering an account with 666p1 or by continuing to use 666p1.net, you confirm that you have read this Policy and consent to the collection and use of your personal data in the manner described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and may request account closure by contacting our support team at any time.

This Policy should be read alongside the 666p1 Terms & Conditions, which govern the overall contractual relationship between you and 666p1. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-specific matter, this Policy takes precedence.

Data We Collect

666p1 collects personal data from you through several channels: information you provide directly during registration and account use, information generated automatically through your use of the Platform, and information received from trusted third-party verification providers. The categories of data we collect are as follows:

Registration & Identity Data

• Full legal name
• Date of birth
• Residential address (including city — e.g., Karachi, Lahore, Islamabad, Faisalabad)
• Email address
• Mobile phone number
• Username and encrypted password

Identity Verification (KYC) Data

• Copy of National Identity Card (CNIC) or passport
• Proof of residential address (utility bill, bank statement)
• Source-of-funds documentation where required by internal compliance thresholds
• Facial verification data processed by our licensed KYC technology partner (used solely for identity confirmation — not retained beyond the verification event)

Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps
• Payment method details (JazzCash account reference, EasyPaisa number, HBL/UBL/Meezan Bank account reference — full payment credentials are not stored by 666p1; they are handled directly by the respective payment processor)
• Transaction history and PKR wallet balance records

Technical & Usage Data

• IP address and approximate geolocation (country/city level)
• Device type, operating system and browser version
• Session duration, login timestamps and navigation paths within the Platform
• Game play history, bet records and bonus utilisation logs

Communications Data

• Live chat transcripts and email correspondence with the 666p1 support team
• Records of promotional communications sent and your preferences regarding marketing

How We Use Your Data

666p1 processes your personal data only where we have a lawful basis to do so. The primary lawful bases applicable to our processing activities are: performance of a contract (operating your account), legal obligation (KYC, AML and regulatory reporting), and legitimate interests (platform security, fraud prevention and responsible gaming compliance).

666p1 will not process your personal data for any purpose that is incompatible with the purposes listed above without first providing you with notice and, where required, obtaining your consent.

Sharing Your Data

666p1 does not sell or rent your personal data. We share your data only with the categories of recipients listed below, and only to the extent necessary for the stated purpose:

• Licensed KYC verification providers: To complete identity and age verification checks as required by our gaming licence. These providers operate under strict data processing agreements and are independently certified for data security.
• Payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank): To process deposits and withdrawals. Each payment provider operates under its own privacy policy and regulatory framework. 666p1 shares only the minimum data necessary to initiate and confirm each transaction.
• Game content providers: Certain game providers may receive anonymised session identifiers to authenticate your game session. They do not receive your full identity or financial data.
• Regulatory and law enforcement authorities: Where required by applicable law, licensing regulations or a valid legal order, 666p1 will disclose personal data to the relevant authority. 666p1 will notify you of such disclosure where legally permitted to do so.
• Internal group companies: Where 666p1 operates through affiliated entities for technical or operational purposes, data may be shared within the corporate group under binding inter-company data processing agreements consistent with this Policy.

Data Retention

666p1 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any overriding legal or regulatory retention obligations. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of your active account plus a minimum of 5 years following account closure, in line with international gaming licence AML record-keeping requirements.
• KYC documentation: Retained for a minimum of 5 years from the date of the most recent transaction or account closure, whichever is later.
• Transaction and financial records: Retained for a minimum of 5 years following each transaction to satisfy regulatory audit and AML obligations.
• Support communications: Retained for 2 years from the date of the final communication in any support thread, unless the content relates to a dispute or investigation requiring longer retention.
• Game play and session logs: Retained for 2 years from the date of the session for responsible gaming monitoring and dispute resolution purposes.
• Marketing preference records: Retained for the duration of your account plus 1 year from account closure as evidence of consent or opt-out.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for aggregate analytical purposes, as it can no longer be used to identify any individual.

Security Measures

666p1 implements a layered, defence-in-depth approach to data security. The following technical and organisational measures are in place to protect your personal data against unauthorised access, loss, alteration or disclosure:

• Transport security: All data in transit is encrypted using TLS 1.3 with 256-bit AES cipher suites. HTTP Strict Transport Security (HSTS) is enforced across all 666p1.net domains.
• Data-at-rest encryption: All personal and financial data stored in 666p1 databases is encrypted using AES-256 at the field and storage level.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff access is authenticated using multi-factor authentication (MFA), and all access events are logged and regularly audited.
• Payment security: Full payment credentials (card numbers, mobile wallet PINs) are never stored by 666p1. Payment transactions are routed directly through certified payment processors. 666p1 stores only tokenised transaction references.
• Penetration testing: 666p1 commissions independent penetration tests and vulnerability assessments on a regular scheduled basis. Critical vulnerabilities are remediated within defined SLA windows.
• Incident response: In the event of a data security incident affecting your personal data, 666p1 will notify affected players and, where required, the relevant regulatory authority, within the timeframes mandated by applicable law.

Cookies & Tracking

666p1.net uses cookies and similar tracking technologies to operate essential platform functions, understand how the site is used, and improve the player experience. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They maintain your logged-in session, remember your language preference and prevent cross-site request forgery (CSRF). These cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: We use first-party analytics cookies to understand aggregate traffic patterns, popular game categories and navigation behaviour. This data is collected in anonymised or pseudonymised form and is used solely to improve the Platform. No individual profiles are built from analytics data.
• Functional cookies: These remember your preferences such as your preferred payment method display and responsible gaming reminder settings, to personalise your experience on return visits.

666p1 does not use third-party advertising cookies, cross-site tracking pixels or retargeting technologies. You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair your ability to use the Platform. Blocking analytics or functional cookies will not prevent access but may affect the quality of your experience.

Your Rights

As a 666p1 player, you hold the following rights in respect of your personal data. You may exercise any of these rights by contacting the 666p1 support team via live chat or by emailing support@666p1.net with the subject line "Data Privacy Request":

• Right of Access: You may request a copy of all personal data that 666p1 holds about you. We will provide this in a structured, commonly used and machine-readable format within 30 calendar days of receiving your verified request.
• Right to Rectification: If any personal data held by 666p1 is inaccurate or incomplete, you may request correction. Certain account data (such as name and date of birth) can only be corrected following submission of supporting KYC documentation.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and there is no other lawful basis for processing), or where the data has been unlawfully processed. Note that regulatory retention obligations (see Section 5) may prevent immediate deletion of certain records.
• Right to Restrict Processing: You may request that 666p1 restrict the processing of your data while a rectification or erasure request is assessed, or where you contest the accuracy of data held.
• Right to Data Portability: You may request that your account and transaction data be provided in a portable format for transfer to another service provider where technically feasible.
• Right to Object: You may object to processing of your personal data for direct marketing purposes at any time. You may also opt out of marketing communications via the unsubscribe link in any promotional email sent by 666p1.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Minors & Age Verification

666p1 strictly prohibits the use of its Platform by anyone under the age of 21 years. We take the protection of minors' personal data with the utmost seriousness. 666p1 does not knowingly collect, store or process personal data from individuals under 21 years of age.

As part of the account registration and KYC process, all players are required to confirm their date of birth and to submit government-issued identity documentation (CNIC, passport) to verify that they meet the minimum age requirement. Accounts that cannot be age-verified will be suspended pending satisfactory documentation.

If 666p1 becomes aware that personal data has been collected from an individual who is under 21 years of age, the following steps will be taken immediately:

• The account will be permanently closed without notice.
• All account balances, including any deposits and winnings, will be withheld and returned to the original funding source after verification.
• All personal data associated with the underage account will be securely deleted, subject only to any retention obligations imposed by applicable law or regulatory authority.

If you are a parent or guardian and believe a minor may have accessed or registered a 666p1 account using your or their personal details, please contact our support team via live chat immediately. We will treat all such reports with priority and complete confidentiality.

International Data Transfers

666p1 operates under an international gaming licence and uses technology infrastructure and service providers located in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Pakistan. These transfers are conducted only where appropriate safeguards are in place, including:

• Binding contractual clauses (standard contractual clauses / data processing agreements) with all third-party service providers who receive personal data.
• Transfer only to jurisdictions that maintain data protection standards consistent with internationally recognised frameworks.
• Ensuring that any third-party recipient is subject to equivalent obligations of confidentiality and security as those described in this Policy.

By using the 666p1 Platform, you acknowledge that your personal data may be transferred internationally as described above. If you have questions about the specific safeguards applicable to any cross-border transfer of your data, please contact our support team.

Policy Changes

666p1 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements or platform operations. When material changes are made, 666p1 will:

• Update the "Effective Date" at the top of this page.
• Display a prominent notification on the 666p1.net homepage and within the logged-in account dashboard for a period of at least 14 days following the change.
• Where the change materially affects how we process personal data in a way that requires fresh consent, we will request that consent from affected players before the change takes effect.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the changes, you should cease using the Platform and request account closure before the amended Policy takes effect.

We encourage you to review this Privacy Policy periodically to stay informed about how 666p1 protects your personal data. Previous versions of this Policy are available on request from our support team.

Contact Us

If you have any questions, concerns, complaints or requests relating to this Privacy Policy or how 666p1 handles your personal data, please reach out to us using the details below. Our support team is trained to handle all privacy-related matters with professionalism and confidentiality.

• Live Chat: Available 24/7 on 666p1.net — the fastest way to reach us for urgent queries.
• Email: support@666p1.net — please use the subject line "Data Privacy Request" for all formal data subject requests.
• Response Time: All privacy queries are acknowledged within 48 hours. Full responses are provided within 30 calendar days.

If you are not satisfied with our response to a privacy complaint, you may escalate the matter to the relevant data protection authority or the dispute resolution body designated by 666p1's licensing authority, as applicable in your jurisdiction.