Privacy Policy – How 666w Protects Your Data in Pakistan

1Introduction

At 666w, we take the privacy of our players seriously. This is not just a legal requirement – it is a genuine commitment that reflects the trust our Pakistani players place in our platform every time they register, deposit, or place a bet. We understand that handing over your personal information to any online platform requires trust, and we are committed to handling your data with care, transparency, and purpose.

This Privacy Policy applies to all personal data collected through the 666w website at 666w.im, through any associated mobile applications, through customer support communications, and through any other means by which you interact with 666w as a platform. The Policy covers data collected from registered players and from visitors who have not yet registered.

666w is committed to the principle that personal data should be collected only for specific, legitimate purposes; stored only for as long as necessary; protected against unauthorised access; and never sold to third parties. This policy explains each of these commitments in concrete terms so you know exactly what to expect when you use 666w.

2Data We Collect

666w collects different categories of personal data depending on how you interact with the platform. The table below summarises the main data categories, why we collect them, and whether providing them is mandatory.

666w does not collect sensitive categories of personal data (such as biometric data, medical information, or religious beliefs) unless strictly required by law enforcement or regulatory authorities and only with appropriate justification.

We do not collect full card numbers. When a Visa or Mastercard is used for a deposit, card processing is handled by a PCI-DSS compliant payment processor. 666w stores only a tokenised reference and the last four digits of the card for identification purposes.

3How We Use Your Data

Every piece of data that 666w collects has a specific purpose. We do not collect data speculatively or "just in case." The following explains the specific purposes for which your personal data is used on the 666w platform:

• Account registration and management: Your identity and contact data are used to create and maintain your 666w account, verify your identity, and communicate account-specific information including deposit confirmations, withdrawal notifications, and security alerts.
• Payment processing: Your financial data is used to process deposits from Easypaisa, JazzCash, NayaPay, SadaPay, IBFT transfers, and Visa/Mastercard, and to process withdrawal requests to your registered payment method. All transactions are in PKR.
• Identity verification (KYC): 666w is required to verify the identity and age of players before processing withdrawals above certain thresholds and in certain circumstances. This verification uses your identity data and may involve document checks.
• Fraud prevention and security: Technical data (IP addresses, device information, session logs) is analysed to detect and prevent fraudulent account activity, multiple account creation, and attempts to circumvent platform security measures.
• Responsible gaming compliance: Your betting activity data is used to monitor for indicators of problem gambling behaviour. If patterns are identified that suggest a player may be experiencing gambling-related harm, 666w may proactively contact the player or apply responsible gaming interventions. See our Responsible Gaming page for full details.
• Platform improvement: Aggregated, anonymised usage data helps 666w understand how players interact with different features, which improvements to prioritise, and how to optimise the platform for Pakistani players.
• Communications and promotions: With your consent (or on the basis of legitimate interest for existing customers), 666w may send you information about promotions, bonus offers, and platform updates via email or SMS. You can opt out at any time from your account settings or by emailing support@666w.im.
• VIP Club programme management: Betting activity data is used to calculate VIP tier status, apply tier benefits, and assign personal account managers to Gold and Diamond VIP members.
• Legal and regulatory compliance: 666w retains certain data categories for periods required by anti-money laundering regulations and other applicable legal obligations.

4Legal Basis for Processing

666w processes your personal data under the following legal bases:

• Contract performance: Processing is necessary to provide you with the 666w service you have registered for. This covers account creation, payment processing, bet settlement, and customer support.
• Legal obligation: 666w is required by law to collect and retain certain data for anti-money laundering (AML) compliance, know-your-customer (KYC) verification, and financial record-keeping.
• Legitimate interests: 666w processes certain data (such as technical and security data) on the basis of legitimate interests in protecting the platform, preventing fraud, and improving the player experience – provided these interests are not overridden by your privacy rights.
• Consent: Where 666w sends you marketing communications beyond the scope of your existing account relationship, this is done on the basis of your consent. You can withdraw this consent at any time without affecting the lawfulness of any prior processing.

5Data Sharing

666w does not sell, rent, or trade your personal data. We share data only in the following limited and specific circumstances:

• Payment processors: Your financial data is shared with payment processing partners (Easypaisa, JazzCash, NayaPay, SadaPay, bank networks, and card processors) as strictly necessary to process your PKR transactions. These partners are contractually bound to handle your data securely and only for payment processing purposes.
• Identity verification providers: When KYC checks are required, identity documents may be processed by a third-party verification service operating under strict data protection obligations.
• Fraud and security services: Technical data may be shared with specialist fraud detection and cybersecurity services as part of our efforts to keep your 666w account safe.
• Live casino content providers: If you play live casino games on 666w, some technical session data is shared with the content provider that operates those live dealer tables. Game results and financial settlements remain controlled by 666w.
• Legal authorities: 666w will disclose personal data to law enforcement, regulatory, or government authorities when required by applicable law, court order, or formal regulatory request. We will always seek legal advice before complying with any such request and will inform you where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of assets involving 666w, player data may be transferred to the successor entity as part of that transaction, subject to equivalent privacy protections remaining in place.

6Data Security

666w implements a layered security architecture to protect your personal and financial data from unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 666w servers. All connections to 666w.im are encrypted and any unencrypted connection attempts are redirected automatically.
• At-rest encryption for stored personal data, financial records, and identity documents.
• Role-based access controls limiting internal access to personal data to only those 666w staff members who require it for specific operational or support functions. All staff access is logged and auditable.
• Two-factor authentication (2FA) available for all player accounts and enforced for all internal staff accounts that access player data systems.
• Regular security audits and penetration testing to identify and address vulnerabilities in the 666w platform infrastructure.
• Secure data centre hosting with physical access controls, redundant systems, and off-site backup procedures.

Despite these measures, no online system can guarantee 100% security. If you believe your 666w account has been compromised, contact support@666w.im immediately. We will investigate and act promptly.

7Data Retention

666w retains your personal data for only as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following are our standard retention periods by data category:

• Account and identity data: Retained for the duration of your account plus 5 years following account closure. This is required for AML compliance and financial record-keeping obligations.
• Transaction and betting activity data: Retained for 5 years from the date of each transaction or betting event. This covers all deposit, withdrawal, and wager records.
• KYC verification documents: Retained for the duration of your account plus 5 years. Copies of identity documents submitted during verification are stored in encrypted form.
• Customer support communications: Retained for 2 years from the date of the communication. This includes live chat logs, email threads, and WhatsApp messages with VIP account managers.
• Technical and security logs: Retained for 12 months from the date of generation. These logs are used for fraud detection and security auditing.
• Marketing preferences and consent records: Retained for the duration of your account and for 2 years following account closure.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised. Anonymised data (which cannot be traced back to an individual) may be retained indefinitely for aggregated analytics purposes.

8Your Rights

As a player on 666w, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@666w.im with the subject line "Data Rights Request."

We will respond to all data rights requests within 30 days. If a request is complex or involves a large volume of data, we may extend this to 60 days with notification. We will never charge a fee for processing a data rights request unless it is manifestly unfounded or excessive.

9Cookies & Tracking Technologies

666w uses cookies and similar tracking technologies to make the platform work correctly, to remember your preferences, to analyse how the site is used, and to help with security. Here is a breakdown of the cookies 666w uses:

• Essential cookies: These are necessary for the 666w platform to function. They maintain your login session, remember your currency and language preferences, and enable security features. These cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: 666w uses first-party analytics to understand how players navigate the platform – which pages are visited most, where players encounter difficulties, and how the registration and deposit funnels perform. This data is aggregated and anonymised.
• Security cookies: Used to detect suspicious login activity, bot traffic, and other security threats. These include CSRF protection tokens and device fingerprinting elements used to identify anomalous access patterns.
• Preference cookies: Store your selected preferences such as notification settings, display preferences, and responsible gaming thresholds you have configured.

666w does not use third-party advertising cookies or cross-site tracking technologies. When you visit 666w.im, your browsing data is not shared with advertising networks.

You can manage cookies through your browser settings. Note that disabling essential cookies will prevent you from logging in or using the 666w platform. Non-essential cookies can be disabled without affecting core functionality.

10Children's Privacy

666w is strictly an 18+ platform. We do not knowingly collect, process, or store personal data from anyone under the age of 18. Registration on 666w requires confirmation of age during the sign-up process, and age verification checks are applied to all accounts before withdrawal processing.

If 666w becomes aware that personal data has been collected from a person under the age of 18, we will immediately suspend the account, delete all associated personal data, and return any deposited funds to the payment method used. If you are a parent or guardian and believe that a minor has registered on 666w using your payment details or contact information, please contact support@666w.im immediately and we will prioritise resolving the situation.

11Updates to This Privacy Policy

666w may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or to improve clarity. When updates are made:

• The "Last Updated" date at the top of this page will be revised to reflect the date the new version takes effect.
• Where changes are material – meaning they affect how your data is used, shared, or protected in significant ways – 666w will notify all registered players by email at least 14 days before the changes take effect.
• An in-platform notification will be displayed for 30 days following any material update.

Your continued use of 666w following a policy update constitutes acceptance of the revised Privacy Policy. If you do not agree with the updated policy, you should close your account before the effective date of the changes.

For any questions about this Privacy Policy or about how your data is handled on 666w, please contact our Data Protection team at support@666w.im with the subject line "Privacy Query." We aim to respond to all privacy-related enquiries within 48 hours.