Privacy Policy — 666c Platform

This Privacy Policy ("Policy") describes how 666c ("Platform", "we", "us", "our") — accessible at https://666c.cam — collects, processes, stores and protects the personal data of individuals ("User", "you", "your") who access or use our online betting and live casino information services.

666c is built around Pakistani users, covering sports betting, cricket markets including PSL and ICC tournaments, live casino games, slots and responsible gambling guidance — all presented in clear English with local context. We recognise that users across Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar have a legitimate interest in understanding how their personal data is handled.

This Policy applies to all personal data collected through the Site, mobile-optim ised platform, customer support channels and any other means by which you interact with 666c. By accessing or using the Platform, you confirm that you have read and understood this Policy. If you do not agree with how we process your data, you must cease using the Platform.

The following defined terms are used throughout this Policy. Where a term is not defined here, the definition in the 666c Terms & Conditions applies.

We collect personal data through several means: directly from you when you register or interact with the Platform, automatically through your use of the Site, and from third-party verification and fraud-prevention providers. The categories of data we collect are set out below.

We do not collect sensitive special-category data (such as biometric data, health information or political opinions) unless specifically required by applicable law or regulatory guidance. Where such collection becomes necessary, we will seek explicit consent and explain the specific purpose.

Every processing activity carried out by 666c is grounded in one or more recognised legal bases. We process your personal data only where we have a clear, documented justification to do so.

• Contractual necessity: Processing required to fulfil our obligations under the User Agreement — including account registration, bet settlement, deposit processing and withdrawal handling.
• Legal obligation: Processing required to comply with AML/CFT regulations, KYC requirements, tax reporting obligations and any other applicable regulatory mandate under the operator's licensing jurisdiction.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gambling monitoring and internal analytics, where these interests are not overridden by your rights and interests.
• Consent: Processing for optional purposes such as marketing communications, personalised promotions and non-essential cookies — where you have given clear, affirmative consent that can be withdrawn at any time.

Personal data collected by 666c is used for the specific, documented purposes listed below. We do not use your data in ways that are incompatible with the purpose for which it was originally collected.

• Account management: Creating, maintaining and verifying your account, including identity verification and KYC compliance checks.
• Service delivery: Processing bets, settling markets, crediting winnings, handling deposits and executing withdrawal requests in PKR where supported.
• Responsible gambling: Monitoring betting and gaming patterns to identify signs of problem gambling and administer responsible gambling tools such as deposit limits, loss limits, cool-off periods and self-exclusion.
• Fraud prevention and security: Detecting, investigating and preventing fraudulent transactions, account takeovers, money laundering, collusion and other prohibited conduct.
• Regulatory compliance: Fulfilling AML/CFT reporting obligations, responding to lawful requests from regulatory or law enforcement authorities and maintaining records required by the applicable licensing jurisdiction.
• Customer support: Responding to your queries, resolving disputes, processing complaints and maintaining support communication records.
• Platform improvement: Conducting internal analytics, A/B testing and performance monitoring to improve the Platform experience for Pakistani users.
• Marketing (consent-based only): Sending promotional emails, bonus notifications and personalised offers — only where you have opted in. You may opt out at any time.

666c does not sell, rent or trade your personal data to third parties for their own marketing purposes. We share personal data only where necessary for the purposes described in this Policy and only with parties who are contractually bound to protect your data to an equivalent standard.

Payment-provider names such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are referenced for local familiarity only. These providers do not endorse gambling on this Platform. Data sharing with payment processors is limited strictly to the transaction data needed to execute your financial request.

The 666c Platform uses cookies and similar tracking technologies to enable essential functionality, remember your preferences and collect anonymised usage analytics. The types of cookies we use are explained below.

You can manage your cookie preferences at any time through the Cookie Settings panel accessible in your account or via your browser settings. Disabling non-essential cookies will not impair core Platform functionality. Note that some third-party services embedded in the Platform (such as live chat) may set their own cookies governed by those providers' privacy policies.

We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulation. The following retention schedule provides general guidance:

After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Where anonymisation is not technically feasible, data is pseudonymised to minimise privacy risk.

666c implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and the Platform is encrypted using TLS (Transport Layer Security) 1.2 or higher.
• Encryption at rest: Sensitive personal data — including KYC documents and financial records — is encrypted in storage using industry-standard encryption algorithms.
• Access controls: Strict role-based access controls limit data access to authorised personnel only, on a need-to-know basis. All internal access is logged and audited.
• Vulnerability management: Regular security assessments, penetration testing and patch management processes are maintained to identify and remediate technical vulnerabilities.
• Incident response: A documented data breach response procedure is in place. In the event of a significant breach affecting your rights, we will notify affected users and relevant authorities within the timeframes required by applicable law.

666c operates a globally distributed infrastructure. Personal data collected from Pakistani users may be transferred to and processed in countries outside Pakistan, including the jurisdiction in which the Platform's operator holds its licence.

When transferring personal data internationally, we ensure appropriate safeguards are in place, which may include:

• Standard contractual clauses or equivalent data transfer mechanisms recognised by the applicable regulatory framework.
• Transfers only to countries or recipients that maintain data protection standards deemed adequate for the purposes of the transfer.
• Binding corporate rules or equivalent intra-group data transfer agreements where data is processed by affiliate entities.

If you require further information about the specific safeguards applied to any particular international transfer of your personal data, you may contact us using the details in Clause 15.

Subject to applicable law and certain regulatory limitations, you hold the following rights in relation to your personal data held by 666c. You may exercise any of these rights by contacting support as described in Clause 15.

We will respond to all valid rights requests within 30 days of receipt. In complex cases, this may be extended by a further 60 days, and we will notify you of any extension. Certain rights may be limited or restricted where compliance would interfere with regulatory obligations, including AML/CFT requirements or ongoing fraud investigations.

The 666c Platform is strictly for adults. We do not knowingly collect personal data from individuals under the age of 18, or the higher minimum age required by the applicable operator or license jurisdiction. Age verification is performed as part of the KYC process for all registering users.

If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered on the Platform using false information, please notify us immediately at the contact details in Clause 15.

The Platform may incorporate third-party tools and services — such as live chat support widgets, analytics libraries and identity verification APIs — that are operated by independent providers. These providers are contractually bound to process personal data only on our documented instructions and in accordance with their own privacy policies.

666c is not responsible for the privacy practices of any third-party website or service accessible through links on our Platform. We strongly recommend that you review the privacy policies of any external service you interact with, independent of 666c.

• We do not embed social media tracking pixels that collect your data for third-party advertising networks without your consent.
• We do not use your data to build advertising profiles for sale to third-party advertisers.
• All third-party processors used by 666c are subject to formal data processing agreements obligating them to maintain appropriate security and confidentiality standards.

666c reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When a material change is made, we will take reasonable steps to notify registered users — for example, by posting a prominent notice on the Platform or sending a notification to the email address associated with your account.

The revised Policy will take effect from the date indicated in the "Effective Date" and "Last Reviewed" header at the top of this page. Your continued use of the Platform after that date constitutes your acknowledgement of the updated Policy. We encourage you to review this page periodically.

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact the 666c Data Support team. We aim to acknowledge all privacy-related enquiries within 5 business days and to resolve them fully within 30 days.