666d Casino Privacy Policy —
Your Data, Protected & Transparent

For the purposes of this Privacy Policy, the data controller responsible for the personal data collected through the 666d platform at 666d.bio is 666d, the operator of the 666d online gaming and sports betting platform. 666d operates under an international gaming licence issued by a recognised gaming regulatory authority.

By registering an account and using the 666d platform, you acknowledge that 666d is the data controller for the personal information you provide and that such information will be processed in accordance with this Privacy Policy.

This Privacy Policy applies to all personal data collected, processed, or held by 666d in connection with:

• Your use of the 666d website at 666d.bio and all sub-pages including cricket betting, live casino, slots, Andar Bahar, Dragon Fishing 2, and all other game and information sections;
• Your registration and management of a 666d player account;
• Any financial transactions you conduct on the 666d platform including deposits via JazzCash, EasyPaisa, HBL, UBL, SadaPay, Meezan Bank, and USDT TRC20, and any withdrawal requests;
• Your interactions with 666d customer support through live chat or email;
• Your participation in 666d promotional campaigns, loyalty programmes, and bonus offers;
• Cookies and similar tracking technologies used on the 666d website to enhance your experience and maintain platform security.

This Policy does not apply to third-party websites or platforms that may be linked from or to the 666d platform. 666d is not responsible for the privacy practices of those third parties and encourages you to review their respective privacy policies independently.

666d collects the following categories of personal data from players and platform visitors:

666d collects personal data through the following channels and mechanisms:

• Direct Collection: Data you provide when registering your 666d account (name, mobile number, date of birth), when completing KYC verification (CNIC, selfie, proof of address), when making deposits or requesting withdrawals, or when contacting 666d customer support;
• Automated Collection: Technical data collected automatically when you visit 666d.bio — including IP address, browser type, device information, and session data — through server logs, cookies, and similar technologies;
• Transaction Systems: Financial data generated by your deposit and withdrawal activity on the 666d platform, including transaction timestamps, amounts, and payment method identifiers;
• Gaming Activity Logs: Records of bets placed, games accessed, session durations, and outcomes — generated automatically as part of the 666d platform's normal operation and required for regulatory audit and dispute resolution purposes;
• Third-Party Verification Services: Where 666d uses accredited identity verification providers to cross-check identity documents, those providers may share verification results and associated data with 666d in accordance with their own service agreements.

666d processes your personal data on the following legal bases:

• Contractual Necessity: Processing your registration data, financial information, and gaming activity data is necessary to fulfil our contractual obligations to you under the 666d Terms and Conditions — specifically to provide you with account access, process deposits and withdrawals, and allow you to participate in gaming;
• Legal Obligation: Processing identity documents, transaction records, and player activity logs is required to comply with 666d's obligations under its international gaming licence — including Know Your Customer (KYC) requirements, Anti-Money Laundering (AML) regulations, and responsible gaming obligations;
• Legitimate Interests: Processing technical and usage data for fraud detection, platform security, and general service improvement is based on 666d's legitimate interest in maintaining a secure, fair, and functional gaming platform;
• Consent: Where 666d processes your data for optional marketing communications or non-essential cookie tracking, such processing is based on your explicit consent, which you may withdraw at any time.

666d uses collected personal data for the following documented purposes:

• Account Creation & Management: Creating and maintaining your 666d player account, processing your 666d Login credentials, and managing your account settings and preferences;
• Identity & Age Verification: Verifying that you meet the 21+ age requirement and confirming your identity through the KYC process as required by 666d's gaming licence obligations;
• Payment Processing: Processing deposits received from JazzCash, EasyPaisa, HBL, UBL, SadaPay, Meezan Bank, and USDT TRC20, and routing withdrawal requests back to your verified payment methods;
• Fraud Prevention & AML Compliance: Monitoring transaction patterns and gaming activity to detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct;
• Responsible Gaming: Monitoring gaming activity to identify indicators of problem gambling behaviour and to apply player-requested responsible gaming tools including deposit limits, session limits, and self-exclusion;
• Customer Support: Responding to your enquiries, resolving account disputes, and maintaining records of your support interactions for quality assurance;
• Platform Improvement: Analysing anonymised and aggregated usage data to improve the 666d platform's performance, game selection, and user experience;
• Legal Compliance: Meeting 666d's reporting and record-keeping obligations under its international gaming licence and applicable anti-financial crime regulations;
• Marketing Communications (with consent): Where you have opted in, sending you information about 666d promotions, bonus offers, and PSL betting campaigns via SMS or other channels. You may opt out at any time.

666d does not sell, rent, or trade your personal data to any third party. 666d may share your personal data with the following categories of recipients in the following circumstances:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, SadaPay, Meezan Bank, and cryptocurrency exchange providers — to the extent necessary to process your deposits and withdrawals. These providers act as independent data controllers for their own payment processing activities;
• Identity Verification Providers: Accredited third-party KYC service providers engaged by 666d to conduct identity and document verification. These providers are contractually bound to use your data only for the verification purpose specified by 666d;
• Gaming Software Providers: Game content providers (including live casino studios) receive session connection data necessary to initiate and maintain your gaming session. They do not receive your financial or identity documents;
• Regulatory Authorities: 666d is obligated to share player data with its gaming regulatory authority and relevant financial crime authorities where required by law, regulation, or a valid legal order. This includes reporting of suspicious transactions under AML obligations;
• Fraud Prevention Networks: 666d may share data with industry fraud prevention networks to identify and block accounts involved in coordinated fraud or bonus abuse across multiple platforms;
• Professional Advisors: Legal advisors, auditors, and compliance consultants engaged by 666d may access relevant player data in the course of providing professional services to 666d, subject to confidentiality obligations.

The 666d website uses cookies and similar tracking technologies to maintain platform functionality, support security measures, and improve the user experience. The following categories of cookies operate on 666d.bio:

• Strictly Necessary Cookies: Essential cookies required for the basic operation of the 666d platform — including maintaining your login session, preserving your account preferences, and enabling core platform security features. These cookies cannot be disabled without affecting platform functionality;
• Performance Cookies: Cookies that collect anonymised data about how visitors interact with 666d.bio — which pages are visited most, where errors occur, and how the platform performs across different devices and network conditions. This data is used solely to improve the platform;
• Functional Cookies: Cookies that remember your preferences on the 666d platform — such as your preferred language, display settings, and recently accessed game categories — to personalise your experience;
• Analytics Cookies (with consent): Where you have provided consent, 666d may use analytics tools to better understand aggregated user behaviour on the platform. You may withdraw consent for these cookies at any time through your browser settings.

666d retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention parameters:

• Active Account Data: Personal data associated with an active 666d account is retained for the full duration of the account relationship plus a minimum period of five (5) years following account closure — this period reflects typical regulatory and gaming licence audit requirements;
• KYC Documents: Identity documents submitted for KYC verification (CNIC scans, selfies, proof of address) are retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, in accordance with AML record-keeping obligations;
• Transaction Records: All deposit, withdrawal, and bet transaction records are retained for a minimum of five (5) years for regulatory audit and dispute resolution purposes;
• Customer Support Records: Live chat transcripts and email correspondence are retained for two (2) years to support quality assurance and dispute resolution;
• Technical Logs: Server access logs and security logs are retained for twelve (12) months for fraud detection and system security purposes;
• Marketing Consent Records: Records of your marketing consent preferences are retained for the duration of the consent plus evidence of withdrawal, for compliance documentation purposes.

Upon expiry of the applicable retention period, 666d will securely delete or anonymise your personal data in accordance with its internal data disposal procedures.

666d implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and 666d servers — including the 666d Login page, payment pages, and KYC document uploads — is protected by TLS 1.2+ / SSL 256-bit encryption;
• Encryption at Rest: Sensitive personal data stored on 666d servers — including payment information and identity documents — is encrypted at rest using AES-256 encryption;
• Access Controls: Access to personal data within 666d's operational systems is restricted using role-based access controls. Only authorised personnel with a documented business need can access personally identifiable data;
• Two-Factor Authentication: All internal 666d staff systems that handle personal data are protected by mandatory two-factor authentication;
• Regular Security Reviews: 666d conducts periodic security assessments including penetration testing and vulnerability scanning of the 666d platform infrastructure;
• Incident Response: 666d maintains a documented data breach incident response procedure. In the event of a breach affecting player data, affected players will be notified in accordance with applicable regulatory requirements.

Subject to applicable law and 666d's regulatory obligations, you have the following rights with respect to your personal data held by 666d:

To exercise any of these rights, contact 666d via live chat from your account dashboard or email [email protected] with your registered mobile number and a description of your request. 666d will verify your identity before processing any data rights request to protect against unauthorised access to your information.

The 666d platform is strictly intended for adults aged 21 years and above. 666d does not knowingly collect, process, or retain personal data from individuals under the age of 21. The 666d registration process includes mandatory age verification, and accounts found to be held by individuals under 21 will be immediately closed.

The deliberate provision of false date-of-birth information to circumvent the 21+ age requirement is a material breach of the 666d Terms and Conditions and may be reported to relevant authorities in appropriate circumstances.

As an internationally operated platform serving Pakistani players, some of your personal data may be processed or stored in jurisdictions outside Pakistan. Specifically:

• 666d's primary server infrastructure may be hosted in data centre facilities located in jurisdictions with recognised data protection frameworks;
• Third-party game providers and KYC verification partners engaged by 666d may be based internationally, meaning your gaming session data and identity verification data may be processed outside Pakistan;
• All international transfers of personal data from 666d's control are conducted under appropriate safeguards — including contractual obligations on recipients to maintain security standards equivalent to those described in this Policy.

By registering an account and using the 666d platform, you consent to the transfer of your personal data to international locations as described in this section, subject to the protections stated herein.

666d reserves the right to update or revise this Privacy Policy at any time to reflect changes in data practices, regulatory requirements, or platform developments. When material changes are made to this Policy:

• The "Effective Date" at the top of this page will be updated to reflect the date of the revision;
• Registered 666d players will be notified of material changes via an in-account notification or SMS to their registered mobile number where technically feasible;
• Continued use of the 666d platform following the effective date of revised Terms constitutes your acceptance of the updated Privacy Policy.

666d recommends that players review this Privacy Policy periodically. If any update to this Policy is unacceptable to you, you should cease using the 666d platform and request account closure through customer support.

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which 666d handles your personal data, please contact us through the following channels:

• Live Chat Support (24/7): Access live chat directly from your 666d account dashboard — the fastest route for privacy-related queries and data rights requests;
• Email: [email protected] — for written privacy requests, formal complaints, and data subject access requests. Please include your registered mobile number and a description of your request for efficient processing.

666d aims to acknowledge all privacy-related contacts within 48 hours and to resolve data rights requests within 30 calendar days. Complex requests may require additional time, in which case you will be notified of the expected resolution timeline.

If you are not satisfied with 666d's handling of your privacy concern after following the internal complaint process, you may be entitled to lodge a complaint with the data protection authority relevant to your jurisdiction or the jurisdiction under which 666d is licensed.