666s Casino — Privacy Policy

1.1   This Privacy Policy ("Policy") is issued by 666s Casino ("666s," "we," "us," or "our") and applies to all personal data collected and processed in connection with the operation of the 666s online gaming platform accessible at 666s.lol (the "Platform"), and all related services, games, promotional programmes, and customer support functions.

1.2   This Policy applies to all individuals who interact with the 666s Platform, including registered Members, visitors who browse the Platform without registering, and individuals who contact the 666s support team. Where this Policy refers to "you" or "your," it encompasses all such categories of data subjects.

1.3   This Policy is intended to be read in conjunction with the 666s Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated herein by reference.

1.4   666s is fully committed to protecting the personal data of its Members — particularly those accessing the Platform from Pakistan, including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and all other locations across the country — in accordance with internationally recognised data protection standards.

2.1   For the purposes of applicable data protection law, 666s Casino is the data controller in respect of all personal data collected and processed through the Platform.

2.2   Contact for Privacy Matters: All data protection enquiries, subject access requests, and privacy complaints should be directed to:

3.1   666s collects the following categories of personal data in the course of operating the Platform and providing services to Members:

3.2   666s does not collect sensitive personal data — such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data — unless strictly required under applicable regulatory obligations and with the necessary legal basis in place.

4.1   Directly from you: The majority of personal data 666s holds is provided directly by you during the account registration process, KYC verification, deposit and withdrawal transactions, completion of responsible gaming forms, and communications with the support team.

4.2   Automatically: Certain technical and gaming data is collected automatically when you access and use the 666s Platform. This includes IP address, device identifiers, browser information, session activity, and cookie-based tracking data.

4.3   From third parties: 666s may receive data from third-party sources in limited circumstances, including:

• Payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) confirming transaction completion;
• Identity verification services used to validate CNIC documents during KYC;
• Fraud prevention and anti-money laundering screening databases;
• Regulatory and law enforcement authorities where legally required.

5.1   666s processes your personal data only where a recognised legal basis exists. The principal purposes for which 666s processes personal data, together with the corresponding legal basis, are set out below:

6.1   666s does not sell, rent, or exchange personal data for commercial consideration. Data is shared with third parties only in the following circumstances and to the extent strictly necessary:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum financial data required to process deposit and withdrawal transactions on behalf of 666s Members;
• Identity Verification Providers: Third-party KYC service providers receive identity documentation (such as CNIC images) for the purpose of performing identity verification checks required under 666s's licensing obligations;
• Fraud & AML Screening Services: Specialist compliance services may receive relevant Member data to conduct anti-fraud and anti-money laundering screening as required under 666s's regulatory framework;
• Gaming Software Providers: Game providers whose titles are hosted on the 666s Platform receive session and technical data necessary to operate their games;
• Legal & Regulatory Authorities: Where 666s is required by law, court order, regulatory instruction, or its licensing authority to disclose Member data, it will do so without prior Member notification where legally prohibited from providing such notification;
• Professional Advisors: Legal counsel, auditors, and compliance consultants bound by professional confidentiality obligations may receive access to Member data where necessary for their advisory functions.

6.2   All third parties with whom 666s shares personal data are contractually obligated to handle that data securely, to use it only for the specified purpose, and to comply with applicable data protection standards.

7.1   666s operates under an international gaming licence and may store and process Member data on servers located outside Pakistan. Where personal data is transferred internationally, 666s ensures that such transfers are conducted in accordance with applicable data protection standards, including through the use of appropriate contractual safeguards, data processing agreements, and — where relevant — adequacy decisions.

7.2   By registering an account with 666s, Pakistani Members consent to the processing and storage of their personal data in jurisdictions outside Pakistan where 666s's operational infrastructure is located, subject at all times to the protections described in this Policy.

7.3   666s shall not transfer personal data to a third country that does not provide an adequate level of data protection without implementing appropriate safeguards in accordance with applicable law.

8.1   The 666s Platform uses cookies and similar tracking technologies to provide a functional, personalised, and secure gaming experience. Cookies are small text files stored on your device by your browser when you visit the Platform.

8.2   666s uses the following categories of cookies:

• Essential Cookies: Strictly necessary for Platform functionality — including session management, account authentication, and security features. These cannot be disabled without impairing Platform functionality;
• Performance Cookies: Used to collect anonymised analytics data about how Members navigate the Platform, enabling 666s to identify and fix usability issues and improve the overall experience;
• Functional Cookies: Enable the Platform to remember your preferences — such as your preferred game category, session settings, and responsible gaming tool configurations;
• Marketing Cookies: Used only where you have provided explicit consent, to deliver relevant promotional content based on your 666s activity patterns.

8.3   You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing the 666s Platform, but may affect certain personalisation and preference-memory features.

9.1   666s retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any longer retention periods required by applicable law or our regulatory obligations.

9.2   The following retention periods apply as a general framework:

• Account and Identity Data: Retained for the duration of active membership, plus a minimum of five (5) years following account closure, in accordance with standard gaming regulatory requirements;
• Financial Transaction Data: Retained for a minimum of five (5) years from the date of the relevant transaction, or longer where required by anti-money laundering obligations;
• Gaming & Betting History: Retained for the duration of active membership, plus three (3) years following account closure;
• Support Communications: Retained for three (3) years following resolution of the relevant support interaction or complaint;
• Marketing Preference Data: Retained until you withdraw your consent to marketing, plus a reasonable period to confirm withdrawal has been processed.

9.3   Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification.

10.1   666s implements appropriate technical and organisational security measures to protect personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. Key security measures employed include:

• 256-bit SSL Encryption: All data transmitted between your device and the 666s Platform is encrypted to bank-grade SSL standard, preventing interception by third parties;
• Secure Data Storage: Personal data is stored on access-controlled, encrypted servers with restricted internal access on a need-to-know basis;
• Access Controls: Platform access for 666s operational staff is governed by role-based access control policies and multi-factor authentication requirements;
• Penetration Testing: The 666s Platform is subject to regular third-party penetration testing and security audits to identify and remediate vulnerabilities;
• Incident Response: 666s maintains a documented data breach response procedure and will notify affected Members of any material breach affecting their personal data in accordance with applicable regulatory requirements.

11.1   Subject to applicable law and certain operational limitations, you have the following rights in relation to the personal data 666s holds about you. To exercise any of these rights, please contact [email protected] with the subject line "Privacy Request."

11.2   666s will respond to all valid rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further two months, in which case 666s will notify you of the extension within the initial 30-day period.

11.3   Note that certain rights may be limited or temporarily unavailable where 666s is required to retain or continue processing your data for legal, regulatory, or fraud-prevention purposes — for example, your data cannot be deleted whilst your account is under a compliance investigation or whilst outstanding responsible gaming restrictions are in place.

12.1   The 666s Platform is strictly for adult use by individuals aged 21 years or older. 666s does not knowingly collect personal data from individuals under the age of 21.

12.2   If 666s identifies or is notified that an account has been registered by an individual under 21, that account will be immediately suspended, all data associated with the account will be reviewed, and any funds held will be managed in accordance with applicable regulatory guidance.

12.3   Parents or guardians who believe that a minor may have accessed or registered on the 666s Platform are encouraged to contact the support team immediately at [email protected].

13.1   666s will send you marketing communications — including promotional emails, bonus notifications, and platform updates — only where you have provided explicit consent to receive such communications at the time of registration or through your account settings.

13.2   You may withdraw your consent to marketing communications at any time by:

• Updating your communication preferences in your 666s account settings;
• Clicking the "unsubscribe" link in any 666s marketing email;
• Contacting the 666s support team at [email protected].

13.3   Withdrawal of consent to marketing will not affect your ability to receive service-related communications — such as transaction confirmations, security alerts, account notices, and responsible gaming notifications — which are sent on the basis of contractual necessity and legitimate interests rather than consent.

13.4   666s does not engage in unsolicited cold-call telephone marketing or SMS marketing campaigns. All SMS communications from 666s are transactional or operational in nature (e.g., two-factor authentication codes, withdrawal confirmations).

14.1   The 666s Platform may contain references to or integrations with third-party services — including payment processors, game software providers, and identity verification services. These third parties operate under their own privacy policies, and 666s is not responsible for the data practices of any third-party service providers beyond the contractual protections described in Section 6 of this Policy.

14.2   Where 666s shares data with third-party game providers for the purpose of delivering game content, such data is limited to technical session data and does not include financial data, CNIC information, or identity documents unless specifically required for regulatory purposes.

15.1   666s reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable data protection law, regulatory requirements, or 666s's operational practices. The effective date displayed at the top of this Policy will be updated whenever a material change is made.

15.2   Where changes to this Policy are material in nature — for example, introducing new categories of data collection or new data sharing arrangements — 666s will notify affected Members via email or an in-platform notification prior to the changes taking effect, providing a reasonable period for Members to review the amendments.

15.3   Continued use of the 666s Platform following the publication of an amended Privacy Policy constitutes your acceptance of the amended Policy. If you do not accept the terms of an amended Policy, you should contact the support team to arrange account closure in accordance with the Terms & Conditions.

16.1   If you have any questions about this Privacy Policy, wish to exercise a data subject right, or wish to raise a privacy-related complaint, please contact the 666s data protection team:

16.2   If you are not satisfied with 666s's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. 666s will cooperate fully with any regulatory investigation arising from a Member privacy complaint.

16.3   666s welcomes feedback from Members regarding this Policy and our data practices. We are committed to continuous improvement in our privacy standards and take all Member privacy concerns seriously.