666ed Privacy Policy —
How We Collect, Use &
Protect Your Data

666ed ("the Company", "we", "us", "our") is deeply committed to protecting the privacy and personal data of every player who uses the 666ed platform. This Privacy Policy ("Policy") sets out the legal basis on which we collect personal data from users, how that data is processed and stored, the parties with whom data may be shared, and the rights that Pakistani players and all other users have in relation to their personal data.

666ed operates under an international gaming licence, which imposes specific data protection obligations that supplement the general privacy commitments described in this Policy. Compliance with those licence conditions forms an integral part of 666ed's data protection programme. Where this Policy references regulatory obligations, those obligations arise from the conditions of 666ed's international gaming licence and any applicable data protection legislation in the jurisdictions in which 666ed operates.

This Policy applies to all personal data collected about you as a result of your interaction with 666ed, including but not limited to: visiting the 666ed website, registering a player account, making deposits or withdrawal requests, placing bets, participating in promotions, contacting the 666ed support team, and using responsible gaming tools. It does not apply to the websites or services of third parties that may be linked to or integrated with the 666ed platform — such third parties operate their own privacy policies for which 666ed bears no responsibility.

For the purposes of this Privacy Policy, 666ed is the data controller in respect of the personal data collected from Pakistani players and all other users of the 666ed platform. As data controller, 666ed determines the purposes for which personal data is processed and the means by which that processing is carried out. 666ed is responsible for ensuring that all personal data it controls is processed in accordance with the applicable data protection standards set out in its international gaming licence conditions.

Any questions, requests, or complaints relating to 666ed's handling of your personal data should be directed to the 666ed Data Protection contact, reachable via the support channels described in Section 14 of this Policy. 666ed will acknowledge all data protection correspondence within 48 hours and will respond substantively within the timeframes specified by its applicable regulatory obligations, which in most cases does not exceed 30 calendar days.

666ed collects several categories of personal data about Pakistani players and other users. The specific data collected about any individual player will depend on how that player uses the platform and what information has been voluntarily provided. The table below sets out the primary categories of personal data collected by 666ed:

3.1 Special Category Data

666ed does not routinely seek to collect special category data (also referred to as sensitive personal data) from players. However, in connection with responsible gaming assessments, self-exclusion programmes, or dispute resolution processes, 666ed may collect information that incidentally constitutes special category data — for example, information about a player's mental health that is voluntarily shared in the context of a responsible gaming conversation. Such data, where collected, is handled with the highest level of protection and is processed solely for the purpose for which it was disclosed.

666ed collects personal data about Pakistani players and platform users through the following mechanisms:

• Direct Provision: Data you supply directly to 666ed during account registration, KYC verification submission, payment method linking, form completion, live chat interactions, or email correspondence with the 666ed support team.
• Automated Technical Collection: Data generated automatically by your device and browser when you access the 666ed platform, including IP address, device fingerprint, operating system details, session duration, and navigation data collected via cookies and similar tracking technologies.
• Third-Party Identity Verification: Data provided to 666ed by KYC and identity verification service providers during the document verification process that all 666ed players must complete before processing their first withdrawal.
• Payment Processors: Transactional confirmation data passed to 666ed by JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other approved payment service providers in connection with deposits and withdrawals processed on the 666ed platform.
• Fraud Prevention Partners: Risk scoring data and device reputation information provided to 666ed by third-party fraud prevention and anti-money laundering service providers as part of 666ed's compliance programme.
• Responsible Gaming Assessments: Information collected during player responsible gaming interactions, including self-assessments, exclusion requests, and counselling referrals, where such information is voluntarily provided by the player.

666ed processes personal data only where it has a lawful basis to do so. The following table sets out the primary purposes for which 666ed processes personal data about Pakistani players and the corresponding legal basis for each processing activity:

666ed does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. Your personal data may, however, be shared with certain third-party service providers and regulatory bodies in the following circumstances:

6.1 Service Providers

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the financial data necessary to process your deposits and withdrawals. These providers operate under their own regulated data protection frameworks.
• KYC & Identity Verification Providers: Third-party identity verification partners receive the documentation you submit for KYC processing. These providers are contractually bound to use your data solely for verification purposes on behalf of 666ed.
• Fraud Prevention & AML Screening: Anti-fraud and anti-money laundering service providers receive transactional and device data for risk scoring and suspicious activity screening in accordance with 666ed's compliance obligations.
• Technology & Infrastructure Providers: Cloud hosting, platform software, analytics, and customer support technology providers may process certain categories of player data in the course of providing their services to 666ed. All such providers are required to implement appropriate data protection measures under contractual obligations with 666ed.
• Game Software Providers: Third-party game studios whose titles are available in the 666ed library may receive anonymised gameplay session data for game certification and audit purposes.

6.2 Regulatory & Legal Disclosures

666ed may disclose your personal data to regulatory authorities, law enforcement agencies, gaming regulators, financial intelligence units, and courts where disclosure is required by applicable law, by the conditions of 666ed's international gaming licence, or by a valid legal order. 666ed will, where permitted by law, notify you of any such disclosure request prior to complying with it. 666ed will not disclose more data than is strictly necessary to satisfy the relevant legal or regulatory obligation.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the 666ed business, personal data held about players may be transferred to the acquiring entity as part of that transaction. 666ed will provide notice of any such transfer and will ensure that the acquiring entity is bound by data protection obligations no less protective than those set out in this Policy.

666ed retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to applicable regulatory minimum retention periods imposed by 666ed's international gaming licence and any other applicable legal obligation. In practice, this means:

• Active Account Data: Retained for the duration of your 666ed account and for a minimum of five (5) years following account closure, to satisfy gaming licence record-keeping requirements and to defend against any potential legal claims.
• Financial Transaction Records: Retained for a minimum of five (5) years in accordance with anti-money laundering regulatory requirements applicable to 666ed's international gaming licence.
• KYC Documentation: Retained for a minimum of five (5) years following the completion of the verification process or the closure of the player's account, whichever is later.
• Responsible Gaming Records: Self-exclusion records and responsible gaming interaction data are retained indefinitely to prevent circumvention of exclusion periods through re-registration.
• Communications Records: Support chat transcripts and email records are retained for a minimum of three (3) years for complaint handling and quality assurance purposes.
• Marketing Preferences: Consent records and preference settings are retained for as long as your 666ed account remains active and for a reasonable period thereafter to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, 666ed will securely delete or irreversibly anonymise personal data in accordance with its data destruction policy. Anonymised data from which all identifying information has been permanently removed may be retained by 666ed beyond the standard retention periods for statistical and analytical purposes.

666ed employs a comprehensive, multi-layered security architecture to protect the personal data of all players, including Pakistani players whose data is processed in connection with their use of the platform. The security measures in place at 666ed include the following:

• 256-Bit SSL Encryption: All data transmitted between your device and the 666ed platform is protected by 256-bit Secure Socket Layer (SSL) encryption — the same standard used by Pakistan's leading banks including HBL, UBL, and Meezan Bank for their online banking portals.
• Encrypted Data Storage: Personal data stored in 666ed's databases is encrypted at rest using industry-standard encryption algorithms. Encryption keys are managed separately from the encrypted data under strict access controls.
• Access Controls: Access to systems containing personal data is restricted on a strict need-to-know basis. All access is authenticated, logged, and subject to regular audit.
• Two-Factor Authentication (2FA): 666ed offers 2FA on all player accounts, providing an additional layer of protection against unauthorised login attempts. Players are strongly encouraged to enable 2FA from their account security settings.
• Penetration Testing & Security Audits: 666ed's platform infrastructure undergoes regular penetration testing and independent security audits to identify and address vulnerabilities proactively.
• Data Breach Response: 666ed maintains a documented data breach response procedure. In the event of a data breach that poses a risk to player rights, affected players will be notified in a timely manner and the breach will be reported to the relevant regulatory authorities as required by 666ed's licensing obligations.
• Employee Data Protection Training: All 666ed employees and contractors who handle personal data undergo mandatory data protection training and are bound by confidentiality obligations.

666ed uses cookies and similar tracking technologies on its website and platform to provide core functionality, improve user experience, and support fraud prevention and analytics activities. A cookie is a small text file placed on your device by the 666ed website when you visit. Cookies allow 666ed to recognise your device across sessions and to store certain preferences and session-related data.

9.1 Types of Cookies Used by 666ed

You may manage optional cookie preferences through your browser settings. Please note that disabling functional or analytics cookies will not prevent you from using the 666ed platform, but may affect certain non-essential features and the quality of your experience. Disabling essential or security-related cookies may impair core platform functionality including login and cashier access.

Subject to applicable data protection legislation and the conditions of 666ed's international gaming licence, Pakistani players and all other users of the 666ed platform have the following rights in relation to their personal data:

• Right of Access: You have the right to request a copy of the personal data that 666ed holds about you. 666ed will provide a Subject Access Response within 30 days of a valid request.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you by 666ed. You can update most account details directly from your 666ed account settings.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data. Please note that this right is subject to 666ed's legal obligations to retain data for regulatory compliance purposes — where retention is required by law or licence, erasure requests cannot be fully satisfied.
• Right to Restrict Processing: You have the right to request that 666ed restricts the processing of your personal data in certain circumstances, for example while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of 666ed's legitimate interests. 666ed will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact the 666ed support team via Live Chat or by email to [email protected], clearly identifying the right you wish to exercise and the specific data you are concerned about. 666ed will verify your identity before processing any data subject rights request to protect against unauthorised requests.

666ed implements age verification controls at the registration stage, including date of birth collection and mandatory KYC identity document verification before any withdrawal is processed. These controls are designed to prevent underage access to the 666ed platform and to ensure compliance with the age restriction conditions of 666ed's international gaming licence.

If you believe that a minor has registered a 666ed account or is using the 666ed platform, please contact the 666ed support team immediately via Live Chat or by email at [email protected]. 666ed will investigate all such reports promptly and take immediate action where underage access is confirmed.

As an internationally licensed online gaming platform serving Pakistani players, 666ed may need to transfer personal data to countries other than Pakistan in connection with the operation of its platform, including transfers to data centres, technology providers, KYC verification partners, and gaming software suppliers located in various jurisdictions.

Where personal data is transferred internationally, 666ed ensures that appropriate safeguards are in place to protect the data in accordance with the data protection standards set by its international gaming licence. These safeguards may include contractual data protection obligations imposed on the receiving entity, the use of standard contractual clauses, or reliance on an adequacy decision covering the destination country.

Pakistani players who wish to obtain more information about the specific safeguards applied to international transfers of their personal data may contact the 666ed support team as described in Section 14 of this Policy.

666ed reserves the right to update, modify, or replace this Privacy Policy at any time. Changes will take effect from the date on which the revised Policy is published on this page, identified by an updated "Effective Date" at the top of the document. Where a change is material — meaning it significantly alters how 666ed processes your personal data or affects your rights — 666ed will provide advance notice of the change via email to registered players and via an in-platform notification, where practicable, before the change takes effect.

666ed recommends that all Pakistani players review this Privacy Policy periodically to remain informed of how their personal data is being handled. Your continued use of the 666ed platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated Policy. If you object to any change, you should stop using the 666ed platform and contact the support team to close your account.

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or have a complaint about the way 666ed has handled your personal data, please contact the 666ed Data Protection and Support team through the following channels:

• Live Chat (Fastest): Available 24/7 directly within the 666ed platform. Select "Privacy / Data Protection" from the chat topic options for routing to the appropriate team.
• Email: [email protected] — please include "Privacy Policy Query" or "Data Subject Request" in the subject line for priority handling. Responses within 4 hours during normal operating conditions.
• Urdu Language Support: Urdu-speaking agents are available during Pakistan standard business hours for players who prefer to raise their data protection queries in Urdu.