Privacy Policy — Your Data, Our Responsibility

01 Introduction

This Privacy Policy ("Policy") is issued by 6666d ("we," "us," "our," "the Platform") and applies to all personal data collected through your use of the 6666d website, mobile interface, games, sportsbook, live dealer services, and all associated products and features (collectively, the "Services").

At 6666d, we understand that privacy is not just a legal obligation — it is a fundamental aspect of the trust our players place in us. Pakistani players who choose 6666d as their gaming platform share sensitive personal and financial information with us, and we are committed to treating that data with the highest standards of care, transparency, and security.

By registering an account, depositing funds, or otherwise using any part of the 6666d Services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the platform and contact us to close your account.

02 Data Controller

6666d acts as the data controller in respect of all personal data collected and processed through the platform. As data controller, 6666d determines the purposes for which personal data is processed and the means by which that processing is carried out.

For any data protection enquiries, requests to exercise your rights, or concerns about how your personal data is being handled, you may contact us directly:

• Contact: [email protected]
• Subject Line: Please use "Data Privacy Request" as the subject line to ensure your query is routed to the correct team.
• Response Time: We aim to respond to all data privacy enquiries within 72 hours and to complete substantive requests within 30 calendar days.

03 Personal Data We Collect

6666d collects personal data across several categories, depending on how you interact with our platform. The following table summarises the categories of data we collect and specific examples within each category:

04 How We Collect Your Data

6666d collects personal data through the following channels and mechanisms:

• Direct Registration: Information you provide when creating your 6666d account, completing KYC verification, or updating your profile.
• Platform Transactions: Data generated automatically each time you make a deposit, place a bet, spin a slot, participate in a live dealer game, or request a withdrawal.
• Payment Processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and other payment partners when you initiate financial transactions.
• Cookies and Tracking Technologies: Automatically collected technical and usage data via cookies, web beacons, and similar technologies as described in Section 10.
• Customer Support: Information you share with our support team via live chat, email, or other communication channels.
• Third-Party Verification Services: Identity and fraud-check data from third-party KYC/AML service providers used to verify your identity and comply with regulatory requirements.
• Responsible Gaming Tools: Information related to deposit limit settings, self-exclusion requests, cooling-off periods, and session time limits that you configure within your account.

05 Why We Use Your Personal Data

6666d processes your personal data for the following specific purposes. Each purpose is tied to a lawful basis for processing as described in Section 6:

• Account Creation & Management: To register your account, authenticate your identity, manage your preferences, and maintain the integrity of your 6666d player profile.
• Identity Verification (KYC/AML): To verify your identity and age (21+ requirement), confirm your source of funds, and comply with applicable anti-money laundering obligations. This is a legal obligation we cannot waive.
• Payment Processing: To facilitate deposits and withdrawals via JazzCash, EasyPaisa, and other supported Pakistani payment methods, and to maintain accurate financial records.
• Provision of Gaming Services: To allow you to access and play all casino games, sports betting markets (including PSL cricket, badminton, and other sports), and live dealer tables offered on 6666d.
• Fraud Prevention & Platform Security: To detect and prevent fraudulent activity, multi-accounting, collusion, bot usage, money laundering, and other prohibited conduct.
• Responsible Gaming Compliance: To administer deposit limits, self-exclusion, cooling-off periods, and reality checks, and to identify players who may be exhibiting signs of problem gambling.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of our communications with you.
• Marketing Communications: Where you have consented, to send you information about promotions, bonuses, new games, and platform updates. You may opt out at any time via account settings or by contacting support.
• Platform Improvement: To analyse usage patterns, test new features, conduct A/B testing, and improve the overall quality and performance of the 6666d platform.
• Legal & Regulatory Compliance: To meet our obligations under applicable laws and to respond to lawful requests from regulatory or law enforcement authorities.

06 Legal Basis for Processing

Every instance of personal data processing at 6666d is grounded in one of the following legal bases:

• Contractual Necessity: Processing required to fulfil our contract with you — i.e., to operate your account, process payments, and provide gaming services. Without this processing, we cannot provide the Services.
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML regulations, age verification requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing for fraud prevention, platform security, and improving our services, where these interests are not overridden by your rights and interests. We conduct a legitimate interests assessment before relying on this basis.
• Consent: Processing for marketing communications and optional personalisation features, where you have given explicit, informed, and freely given consent. You retain the right to withdraw consent at any time without affecting the lawfulness of prior processing.

07 Sharing & Disclosure of Personal Data

6666d does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, 1LINK, and other payment partners receive the transaction data necessary to process your deposits and withdrawals.
• KYC/AML Verification Providers: Third-party identity verification and anti-fraud service providers who assist us in verifying your identity, age, and source of funds as required by law.
• Gaming Software Providers: Licensed game developers and RNG certification bodies who supply the casino and sports betting software powering the 6666d platform. These providers may receive anonymised or pseudonymised gameplay data for auditing and RTP verification.
• IT Infrastructure & Hosting Providers: Cloud hosting and data centre providers who store and process platform data on our behalf under strict data processing agreements.
• Analytics Providers: Platform analytics tools that help us understand how users interact with 6666d. Data shared with analytics providers is aggregated or pseudonymised wherever possible.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or regulatory directive, 6666d will disclose personal data to the relevant authorities. We will notify you of such disclosures where legally permitted to do so.
• Professional Advisers: Lawyers, auditors, and compliance consultants who require access to data in the course of providing professional services to 6666d, subject to professional confidentiality obligations.

All third parties who receive personal data from 6666d are required to process that data solely in accordance with our instructions and applicable data protection law. We conduct due diligence on all data processors before engagement.

08 Data Retention

6666d retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction protocols. Anonymised data (which can no longer identify you) may be retained indefinitely for statistical and analytical purposes.

09 Security Measures

6666d implements a layered approach to data security, employing a combination of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure.

• Encryption in Transit: All data transmitted between your device and the 6666d platform is protected using TLS 1.2 or higher (HTTPS). We enforce HTTPS across all platform endpoints without exception.
• Encryption at Rest: Sensitive data stored on our servers — including financial details, identity documents, and password hashes — is encrypted at rest using AES-256 or equivalent.
• Password Security: Passwords are never stored in plain text. We use industry-standard one-way hashing algorithms with salt to protect your login credentials.
• Access Controls: Access to personal data within the 6666d organisation is restricted on a strict need-to-know basis. Privileged access is subject to multi-factor authentication and is audited regularly.
• Intrusion Detection: We operate continuous network monitoring and intrusion detection systems to identify and respond to security incidents in real time.
• Penetration Testing: The 6666d platform undergoes regular third-party penetration testing and security audits to identify and remediate vulnerabilities before they can be exploited.

10 Cookies & Tracking Technologies

6666d uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cannot be disabled without affecting platform functionality.
• Functional Cookies: Remember your preferences such as language, currency display (PKR), and responsible gaming settings so you don't have to re-enter them on each visit.
• Analytics Cookies: Collect anonymised data about how visitors use the 6666d platform — pages visited, features used, session duration — to help us improve performance and user experience.
• Marketing Cookies: Used (with your consent) to deliver relevant promotional content about 6666d and to measure the effectiveness of our marketing campaigns.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect your experience on the 6666d platform. A full Cookie Policy is available on request.

11 Your Data Rights

As a user of the 6666d platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Privacy Request":

• Right of Access: You have the right to request a copy of all personal data we hold about you, along with information about how it is being used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated promptly.
• Right to Erasure ("Right to Be Forgotten"): In certain circumstances, you may request that we delete your personal data. This right is subject to our legal and regulatory retention obligations — for example, we cannot erase transaction records that we are legally required to retain.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain situations, such as where you contest the accuracy of the data or where processing is unlawful but you prefer restriction over deletion.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, machine-readable format so that it can be transferred to another service.
• Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

12 Children & Minors

6666d maintains a strict minimum age requirement of 21 years for all registered users. Our platform is not intended for, and does not knowingly collect personal data from, individuals under the age of 21.

As part of our KYC process, all users are required to provide proof of age documentation (such as a valid CNIC or passport) before their account is fully verified and before any deposits or wagers are accepted. Accounts where the holder is found to be under the age of 21 will be immediately suspended and all associated funds will be frozen pending review.

If you have reason to believe that a minor has created an account on 6666d, please contact us immediately at [email protected]. We will investigate and take appropriate action, including the deletion of any personal data collected from the minor in question.

13 International Data Transfers

The 6666d platform may engage service providers whose infrastructure or personnel are located outside of Pakistan. In such cases, your personal data may be transferred to and processed in countries other than Pakistan.

Where such international transfers occur, 6666d takes appropriate steps to ensure that your personal data receives a level of protection equivalent to that provided under applicable data protection principles, including:

• Entering into data processing agreements with all third-party processors that impose obligations equivalent to those described in this Policy.
• Transferring data only to jurisdictions that provide an adequate level of data protection, or implementing appropriate safeguards (such as standard contractual clauses) where transfers are made to other jurisdictions.
• Conducting due diligence on all international data processors before engagement and reviewing those arrangements periodically.

14 Changes to This Privacy Policy

6666d reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will notify you by:

• Displaying a prominent notice on the 6666d platform for a minimum of 14 days before the changes take effect.
• Sending an email notification to the address registered on your account.
• Updating the "Effective Date" at the top of this Policy.

Your continued use of the 6666d platform following the effective date of any revised Policy constitutes acceptance of those changes. We strongly recommend reviewing this Policy periodically to stay informed about how we protect your data.

15 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 6666d, please contact our Data Privacy team through the following channel:

• Email: [email protected]
• Subject Line: Data Privacy Request
• Response Time: Within 72 hours for general enquiries; within 30 days for formal data rights requests.
• Live Chat: Available 24/7 on the 6666d platform after login — our support team can triage your query to the privacy team as appropriate.

We are committed to resolving all privacy-related concerns promptly and fairly. If you are not satisfied with our response to a privacy complaint, you may escalate the matter through the appropriate regulatory channels available in your jurisdiction.