Privacy Policy — 666cb Pakistan

This Privacy Policy ("Policy") is issued by 666cb ("Company", "We", "Us", "Our"), the operator of the online casino and sports betting platform accessible at 666cb.ws ("Platform"). This Policy describes how 666cb collects, uses, stores, shares, and protects personal data relating to players, visitors, and any other individuals ("You", "Your") who interact with the Platform. By registering an account with 666cb or accessing the Platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. This Policy should be read alongside our Terms & Conditions.

1 Introduction

666cb is committed to protecting the privacy of every player who chooses to enjoy cricket betting, live casino games, slots, and PKR-based financial services on our Platform. We recognise that Pakistani players entrust us with sensitive personal and financial information, and we take that responsibility seriously.

This Policy applies to all personal data processed by 666cb in connection with your use of the Platform, including data collected during registration, identity verification, deposits, withdrawals, gameplay, customer support interactions, and any other engagement with 666cb's services. It applies whether you access the Platform via a desktop browser, mobile browser, or any mobile application operated by 666cb.

2 Personal Data We Collect

666cb collects the following categories of personal data, depending on your interaction with the Platform:

2.1 Identity & Registration Data

• Full legal name
• Date of birth (for age verification — players must be 21 or older)
• Gender (optional, for personalisation purposes)
• Nationality and country of residence
• Government-issued identification document number (CNIC or equivalent)
• Username and account credentials (password is stored in hashed form only — 666cb never stores plaintext passwords)

2.2 Contact Data

• Email address
• Mobile phone number
• Residential address (including city, e.g., Karachi, Lahore, Islamabad, Faisalabad)

2.3 Financial & Payment Data

• PKR deposit and withdrawal transaction records
• JazzCash or EasyPaisa wallet identifiers (account numbers, not PINs or passwords)
• HBL, UBL, or Meezan Bank account details provided for withdrawal processing
• Transaction history, deposit amounts, and withdrawal requests

2.4 Gameplay & Betting Data

• Game history, bet records, and wagering activity
• Session duration and frequency of play
• Bonus usage and wagering progress
• Sports betting selections including cricket markets and PSL events

2.5 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Pages visited on the Platform and navigation patterns
• Login timestamps and session activity logs

2.6 Communications Data

• Content of messages sent to 666cb via live chat, email, or support ticket
• Records of customer support interactions
• Responses to surveys or promotional communications (where you have opted in)

Data Category	Examples	Primary Purpose
Identity Data	Name, CNIC, date of birth	Account registration, KYC / age verification
Contact Data	Email, phone, address	Account management, support communications
Financial Data	PKR transactions, wallet IDs	Deposit & withdrawal processing
Gameplay Data	Bet history, session logs	Game operation, responsible gaming monitoring
Technical Data	IP address, device info	Security, fraud prevention, platform optimisation
Communications Data	Support chats, emails	Customer service, dispute resolution

3 How We Collect Your Data

666cb collects personal data through the following means:

• Direct provision: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal request, contacting support, or participating in promotional surveys.
• Automated collection: Technical data collected automatically when you access the Platform, including via cookies, server logs, and analytics tools. See Section 7 for details on cookies.
• Third-party sources: Identity verification and age verification service providers may share verification results with us. Payment processors such as JazzCash and EasyPaisa confirm transaction status. Fraud prevention services may share risk signals related to your account.

4 How We Use Your Personal Data

666cb uses collected personal data for the following purposes:

• Account management: To create, maintain, and administer your 666cb player account.
• Identity and age verification: To confirm that you are who you say you are and that you are at least 21 years of age, in compliance with our licensing obligations.
• Payment processing: To process PKR deposits and withdrawals via your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank).
• Game operation and sportsbook: To operate casino games, live tables, and cricket and sports betting markets, and to settle wagers accurately.
• Bonus management: To credit, track, and enforce the terms of bonuses and promotional offers applicable to your account.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance via live chat or email.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct in accordance with our Terms & Conditions.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling and to administer responsible gaming tools including deposit limits, session reminders, and self-exclusion.
• Legal compliance: To comply with applicable legal obligations including anti-money laundering (AML) requirements and regulatory reporting obligations under our international gaming licence.
• Platform improvement: To analyse usage data and improve the performance, design, and content of the 666cb Platform.
• Marketing communications: To send you promotional offers and updates about 666cb services — only where you have given your explicit consent, and subject to your right to unsubscribe at any time.

5 Legal Basis for Processing

666cb processes your personal data on the following legal bases:

• Contract performance: Processing necessary to create and manage your player account, process transactions, and deliver the services you have requested.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations, age verification requirements, and regulatory reporting.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, where you have provided explicit consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Personal Data

666cb does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited circumstances:

6.1 Service Providers

We share data with trusted third-party service providers who assist us in operating the Platform, including: identity and age verification providers; payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank); fraud detection and risk management services; cloud infrastructure and data hosting providers; and customer support platform providers. All service providers are contractually bound to process your data only on our instructions and to maintain appropriate security standards.

6.2 Game Providers

Game providers (such as Ezugi and slot software providers) may receive limited technical data necessary to operate their games on the 666cb Platform. This is restricted to session tokens and game-related data required for game integrity and fair play certification.

6.3 Legal and Regulatory Disclosure

We may disclose your personal data to regulatory authorities, law enforcement agencies, or courts where we are legally required to do so — for example, in connection with anti-money laundering investigations, fraud enquiries, or pursuant to a court order.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of 666cb's assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and of any changes to this Privacy Policy that arise from it.

7 Cookies & Tracking Technologies

666cb uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. We use the following categories of cookies:

• Essential cookies: Required for the Platform to function correctly, including maintaining your login session and storing your language and currency preferences. These cannot be disabled without impairing Platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and use the Platform, helping us identify areas for improvement. No personally identifiable information is shared with analytics providers.
• Security cookies: Used to detect and prevent fraudulent activity, including bot traffic and suspicious login attempts.
• Preference cookies: Used to remember your settings and preferences across sessions, such as your preferred game category or interface language.

You can manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to log in and use the Platform normally. 666cb does not use third-party advertising or behavioural tracking cookies.

8 Data Security

666cb implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• Encryption in transit: All data transmitted between your device and the 666cb Platform is protected using TLS 1.2 or higher (HTTPS). You will always see a padlock in your browser address bar when using the Platform.
• Encryption at rest: Sensitive stored data, including identity documents and financial records, is encrypted using AES-256 at rest.
• Password hashing: User passwords are never stored in plaintext. They are hashed using a strong one-way hashing algorithm with per-user salts.
• Access controls: Access to systems holding personal data is restricted to authorised 666cb personnel on a need-to-know basis. All access is logged and audited.
• Security monitoring: 666cb's infrastructure is monitored continuously for unusual activity, attempted intrusions, and data anomalies.

While 666cb takes all reasonable steps to protect your data, no system is entirely immune to risk. In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, 666cb will notify affected players and relevant authorities without undue delay in accordance with applicable legal requirements.

9 Data Retention

666cb retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting, and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your registered account with 666cb.
• Identity verification documents: Retained for a minimum of five (5) years from account closure, in compliance with AML regulatory requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with financial record-keeping obligations.
• Customer support communications: Retained for three (3) years from the date of the interaction, unless a longer period is required for dispute resolution.
• Marketing consent records: Retained for as long as your consent remains valid or for three (3) years from your last interaction with our marketing communications, whichever is sooner.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identified individual.

10 Your Data Rights

Subject to applicable law, you have the following rights in relation to personal data that 666cb holds about you:

• Right of access: You may request a copy of the personal data 666cb holds about you, along with information about how it is processed.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected. For account details, you can update many fields directly through your account dashboard.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to 666cb's legal retention obligations (e.g., AML record-keeping requirements).
• Right to restrict processing: You may request that 666cb restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that your data be provided to you in a structured, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing communications. You may unsubscribe from marketing emails at any time using the unsubscribe link in any such email.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact 666cb at [email protected] or via live chat. We will respond to all verified requests within a reasonable period. We may need to verify your identity before processing a data rights request to protect against unauthorised requests.

11 Children & Minors

The 666cb Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor in your care has registered an account or provided personal data to 666cb, please contact us immediately at [email protected] so that we can investigate and take appropriate action. 666cb enforces a zero-tolerance policy toward underage gambling.

12 Third-Party Services

The 666cb Platform may reference or integrate with third-party service providers (such as game software providers and payment processors). These third parties operate their own privacy policies, and 666cb is not responsible for the data practices of third-party services. We encourage you to review the privacy policies of any third-party services you interact with in connection with your 666cb account.

666cb does not permit third-party advertising networks to place tracking technologies on the Platform. The only third-party integrations present on the Platform are those operationally necessary to deliver our services (game providers, payment processors, identity verification providers, and analytics services operating under data processing agreements with 666cb).

13 International Data Transfers

666cb operates under an international gaming licence, and some of the data processing activities described in this Policy may involve the transfer of personal data to jurisdictions outside Pakistan. Where such transfers occur, 666cb ensures that appropriate safeguards are in place to protect your data, including contractual data transfer mechanisms and data processing agreements with all third-party processors that require them to maintain standards of data protection equivalent to those applied by 666cb.

By using the 666cb Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Pakistan where necessary for the operation of the Platform and the delivery of our services.

14 Updates to This Privacy Policy

666cb reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform functionality. When we make material changes to this Policy, we will notify registered players by email or via an in-platform notification and update the "Last Updated" date at the top of this page.

Your continued use of the 666cb Platform following the posting of any revised Privacy Policy constitutes your acceptance of the updated Policy. We encourage you to review this page periodically. If you do not agree to any changes to this Policy, you should cease using the Platform and contact our support team to discuss your account.

15 Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or 666cb's data practices, please contact our Data Protection team through the following channels:

• Email: [email protected] — please include "Privacy" in your subject line for fastest routing
• Live Chat: Available 24/7 directly through the 666cb Platform

We are committed to resolving all privacy-related enquiries fairly and promptly. If you are not satisfied with our response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.