Privacy Policy — 666w99

This Privacy Policy ("Policy") sets out the basis on which 666w99 ("the Platform", "the Operator", "we", "us" or "our") collects, processes, stores, shares and protects personal data relating to users ("Player", "User", "you") who access or use the 666w99 website at https://666w99.cam and its associated services, mobile-optimised interfaces and features.

666w99 is committed to handling personal data responsibly, transparently and in accordance with applicable data protection legislation. We recognise that the privacy of our players — including those accessing the platform from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and elsewhere across Pakistan — is fundamental to the trust placed in us.

By registering an account, depositing funds, placing a wager or otherwise using the 666w99 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the platform.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, email address, date of birth, CNIC number, IP address, device identifiers and financial account details — that 666w99 processes in connection with your use of the platform.
• "Processing" means any operation performed on Personal Data, whether by automated means or otherwise, including collection, recording, storage, retrieval, use, disclosure, erasure and destruction.
• "Data Controller" means the Operator entity that determines the purposes and means of processing Personal Data collected through the 666w99 platform.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of the Data Controller in accordance with written instructions.
• "Cookies" means small text files placed on your device by the platform for the purposes described in Section 6 of this Policy.
• "KYC" means Know Your Customer — the identity verification process requiring Players to submit identity and address documentation before certain account functions, including withdrawals, are enabled.
• "AML" means Anti-Money Laundering — the regulatory and procedural framework applied to detect, prevent and report financial crime.
• "Sensitive Data" means a category of Personal Data warranting enhanced protection, including data relating to health, financial situation beyond transactional records, and government-issued identity numbers.

666w99 collects personal data through multiple channels in connection with your use of the platform. The categories of data collected are set out below.

When you create an account, we collect: full legal name, date of birth, residential address, email address, mobile telephone number, username and password (stored in hashed form). This data is necessary to establish and maintain your account.

To comply with KYC and AML obligations, we may collect: copies of government-issued photographic identification (e.g., CNIC, passport), proof of residential address (e.g., utility bill, bank statement), selfie or biometric verification data where required, and source-of-funds documentation where applicable.

We record all financial transactions associated with your account, including deposit amounts, payment method reference details, withdrawal requests, transaction timestamps, bet and wager records, and game session history. This data is retained for compliance, dispute resolution and audit purposes.

When you access the platform, we automatically collect: IP address, browser type and version, device type and operating system, screen resolution, referral URL, pages visited and interaction timestamps, and session duration. This data is used for security, fraud prevention and platform optimisation.

Records of communications between you and 666w99 support staff — including live chat transcripts, email correspondence and any documents you submit — are retained for quality assurance, compliance and dispute resolution.

666w99 processes Personal Data only where a valid legal basis exists. The applicable legal bases for our processing activities are:

• Contractual Necessity: Processing required to fulfil the contract with you as a registered player — including account management, transaction processing, game delivery and withdrawal handling.
• Legal Obligation: Processing required to comply with applicable legal obligations, including KYC identity verification, AML transaction monitoring, record-keeping requirements and responses to lawful requests from competent authorities.
• Legitimate Interests: Processing carried out for the legitimate interests of the Operator, where those interests are not overridden by your rights and interests — including fraud prevention, platform security, responsible gambling enforcement, and improvement of platform services.
• Consent: Where we rely on your consent as the legal basis for processing (for example, for non-essential marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

666w99 uses Personal Data collected from Players for the following purposes:

To create, maintain and administer your player account, including login authentication, account settings management, password reset processes, and communication of account-related notices.

To process deposits and withdrawals, verify payment method ownership, apply transactional limits, and maintain financial records. Payment method references displayed on the platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are cited as familiar local references for Pakistani users. Actual payment processing is subject to the terms of the relevant payment providers, which operate independently of 666w99.

To verify your identity, confirm your age eligibility (18+), prevent fraudulent account activity, detect and report suspicious financial transactions in accordance with applicable anti-money laundering obligations, and comply with requests from competent regulatory or law enforcement authorities.

To administer responsible gambling tools including deposit limits, loss limits, session reminders, cooling-off periods and self-exclusion. Player data may be reviewed to identify patterns of potentially problematic play and trigger support interventions in accordance with our Responsible Gambling policy.

To detect and prevent unauthorised account access, identify multi-accounting, prevent bonus abuse, investigate suspicious activity and protect the integrity of the platform for all players.

To respond to support enquiries, investigate complaints, resolve disputes and maintain quality records of communications with players.

To analyse platform usage patterns, diagnose technical issues, optimise the user experience for mobile devices used across Pakistan, and develop new features. Analytics data is processed in aggregated or pseudonymised form where practicable.

666w99 uses cookies and similar tracking technologies (including local storage tokens and device fingerprinting where technically necessary) on its platform. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the platform to function, including session authentication tokens, security cookies and load-balancing cookies. These cannot be disabled without preventing core platform functionality.
• Functional Cookies: Used to remember your preferences and personalise your experience, such as language settings and previously viewed game categories.
• Analytics Cookies: Used to collect aggregate data about how players navigate and use the platform. This data helps us improve performance and usability. Analytics cookies may be set by third-party analytics services operating under data processing agreements with 666w99.
• Security Cookies: Used for fraud detection, bot identification and session integrity verification. These are part of our platform security infrastructure.

Most browsers allow you to control cookie settings through the browser preferences menu. Disabling certain cookies may affect platform functionality. Strictly necessary cookies cannot be disabled through browser settings without impairing your ability to use the platform.

666w99 does not sell, rent or trade your personal data. We share personal data only in the limited circumstances set out below:

We engage third-party service providers who process data on our behalf under documented data processing agreements, including: KYC identity verification providers, payment processing intermediaries, fraud detection and AML screening services, IT infrastructure and cloud hosting providers, and customer support platform providers. These processors are contractually bound to process data only on our instructions and in accordance with applicable data protection law.

We may disclose personal data to competent law enforcement agencies, regulatory authorities or courts where required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent crime, protect the safety of persons or uphold our legal obligations.

In the event of a merger, acquisition, restructuring or sale of all or part of the Operator's business, personal data held by 666w99 may be transferred to the acquiring entity, subject to that entity assuming equivalent data protection obligations.

As a platform operating internationally, 666w99 and its third-party service providers may process personal data in jurisdictions outside of your country of residence. Where personal data is transferred to a jurisdiction that does not provide the same level of data protection as your home jurisdiction, we take steps to ensure that appropriate safeguards are in place.

Such safeguards may include: data processing agreements incorporating standard contractual clauses, transfers to jurisdictions with a recognised adequate level of data protection, or other legally recognised transfer mechanisms applicable under the data protection law governing the Operator's licensing jurisdiction.

By using the 666w99 platform and submitting personal data, you acknowledge that your data may be processed in jurisdictions outside Pakistan. This processing is carried out on the legal bases described in Section 4 of this Policy.

666w99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or for such longer period as is required or permitted by applicable law. The following retention principles apply:

• Active Account Data: Personal data associated with an active account is retained for the duration of the account relationship.
• Closed Account Data: Following account closure, personal data is retained for a minimum period required by applicable AML, financial record-keeping and licensing obligations — typically a minimum of five (5) years from the date of account closure, though specific legal requirements may extend this period.
• KYC Documentation: Identity verification documents are retained for the period required by AML legislation in the Operator's licensing jurisdiction, which typically extends beyond account closure.
• Transaction Records: Financial transaction records are retained in accordance with applicable accounting, tax and AML legal requirements.
• Communications: Support communications are retained for the shorter of five years from the date of the communication or the period required by applicable law.
• Marketing Data: Where consent has been withdrawn for marketing communications, your data will be removed from active marketing lists promptly. A suppression record may be retained to prevent inadvertent future contact.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original personal data.

Subject to applicable law and the legal bases on which we process your personal data, you have the following rights in relation to your personal data held by 666w99:

To exercise any of the above rights, please contact us using the details in Section 15. We will require you to verify your identity before processing any data subject request. We aim to acknowledge requests within 5 business days and to provide a substantive response within 30 days.

The 666w99 platform is strictly for adults. Use of the platform is prohibited for individuals under the age of 18, or the higher minimum age required by the operator or applicable licence jurisdiction. We do not knowingly collect personal data from individuals below the applicable minimum age.

Our registration process includes age verification steps, and full KYC identity verification is required before withdrawals are enabled. If 666w99 becomes aware that personal data has been collected from a minor, that account will be closed immediately, all funds will be handled in accordance with our Terms & Conditions, and the personal data will be deleted from our systems subject to any legal retention requirements.

If you believe that a minor may have accessed or used the platform, please contact our support team immediately using the contact details in Section 15.

666w99 implements technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:

• TLS/SSL Encryption: All data transmitted between your device and the platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Password Hashing: Account passwords are stored using strong one-way cryptographic hashing algorithms. We do not store your password in recoverable plaintext form.
• Access Controls: Access to personal data within our organisation is restricted on a need-to-know basis, with role-based access controls and audit logging.
• Fraud Detection Systems: Automated systems monitor account activity for indicators of unauthorised access, fraudulent transactions and suspicious patterns.
• Regular Security Review: Our security measures are reviewed and updated on a regular basis to address emerging threats.

While we implement robust security measures, no system can guarantee absolute security. You also have an important role in protecting your account — you must keep your login credentials confidential, use a strong and unique password, and notify us immediately if you suspect unauthorised access to your account.

The 666w99 platform may reference third-party services, payment providers or organisations in its content. References to payment brands such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are made solely as familiar local payment references for Pakistani users and do not constitute an endorsement of, affiliation with, or data sharing arrangement with those providers beyond what is operationally required for payment processing.

Any third-party website or service accessed through a link on the 666w99 platform — including responsible gambling support resources — operates under its own privacy policy, which is entirely independent of this Policy. 666w99 is not responsible for the privacy practices or content of any third-party website or service.

666w99 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — meaning they affect the nature or purpose of data processing in a way that may affect your rights — we will provide reasonable advance notice to registered players through the platform, email or both, prior to the changes taking effect.

Non-material changes, such as updates to clarify existing practices, correct typographical errors or reflect minor operational adjustments, may take effect immediately upon publication. The "Last Updated" date at the top of this page will be revised to reflect each update.

Continued use of the 666w99 platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree to the revised terms, you may request closure of your account by contacting our support team.

If you have any questions, concerns or requests relating to this Privacy Policy, your personal data or the exercise of your data subject rights, please contact the 666w99 privacy and data team using the following channels:

• Live Chat: Available daily from 08:00 to 02:00 PKT via the platform interface. For informal queries about your data or account privacy settings.
• Email: [email protected] — responses within 24 hours on business days. Please include "Privacy Request" or "Data Subject Request" in the subject line for formal data rights enquiries.

For formal data subject access requests, please provide: your full registered name, your account email address, a description of the right you wish to exercise, and any supporting information that helps us verify your identity. We will acknowledge your request within 5 business days and aim to respond substantively within 30 days.