666c Casino Privacy
Policy

This Privacy Policy describes how 666c ("we", "us", "our") collects, processes, stores and protects the personal data of individuals ("you", "your", "Player") who access or use the 666c online gaming platform at https://666c.ws, including its casino games, sportsbook, cashier and all associated services.

666c is committed to handling your personal information with transparency, integrity and in accordance with applicable data protection laws and the requirements of our international gaming licence. We recognise that Pakistani players trust us with sensitive information, and we take that responsibility seriously.

By registering an Account on 666c, making a deposit or placing a wager, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the 666c Platform.

666c collects personal data through several channels: directly from you during registration and account management, automatically through your use of the Platform, and from third-party identity verification and payment service providers. The categories of data we collect are as follows:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data or health information, except where a Player voluntarily discloses such information in a responsible gaming self-exclusion or problem gambling support context, in which case it is processed solely for player protection purposes.

666c processes your personal data for the following specific purposes. We do not use your data for any purpose incompatible with the reason it was collected without first obtaining your consent or as otherwise permitted by applicable law.

• Account creation and management: To register your 666c Account, verify your identity, manage your profile and maintain account security.
• Payment processing: To process USDT, Bitcoin, JazzCash, EasyPaisa and bank transfer deposits and withdrawals, and to maintain accurate transaction records.
• KYC and regulatory compliance: To verify that you meet the minimum age requirement of 21 years, confirm your identity against submitted documents and comply with anti-money laundering obligations.
• Fraud prevention and security: To detect, investigate and prevent fraudulent transactions, multi-accounting, bonus abuse and other prohibited conduct as defined in the 666c Terms and Conditions.
• Platform operation and improvement: To deliver casino games, sportsbook markets and cashier services; to monitor Platform performance; and to analyse usage patterns in order to improve the user experience for Pakistani players.
• Responsible gaming: To monitor betting patterns that may indicate problem gambling, to enforce deposit and loss limits you have set, and to process self-exclusion requests.
• Marketing communications: To send you bonus offers, PSL betting promotions and new game announcements — only if you have opted in to marketing communications. You can opt out at any time.
• Legal obligations: To comply with court orders, regulatory enquiries, financial intelligence authority requests and other legal obligations applicable to an internationally licensed gaming operator.

666c processes your personal data on the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Processing required to fulfil our obligations under the Terms and Conditions you agreed to at registration — including account management, payment processing and game delivery.
• Legal obligation: Processing required to comply with applicable laws — including KYC identity verification, anti-money laundering record-keeping and responsible gaming obligations imposed by our international gaming licence.
• Legitimate interests: Processing necessary for 666c's legitimate business interests — including fraud prevention, platform security, technical performance monitoring and abuse detection — provided these interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific and informed consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

666c does not sell, rent or trade your personal data to third parties for their own marketing or commercial purposes. We share your data only in the following limited and controlled circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL and Meezan Bank payment processors receive only the transaction data strictly necessary to process your deposit or withdrawal. Blockchain transactions involving USDT or Bitcoin are processed on-chain; 666c stores your wallet address but does not control the public blockchain ledger.
• KYC verification providers: Third-party identity verification services receive your submitted KYC documents to perform automated and manual identity checks against government databases. These providers are contractually bound to process your data only for verification purposes.
• Game software providers: Casino game providers integrated into the 666c platform may receive anonymised session data (game ID, bet amount, result) necessary to operate the game. They do not receive your personal identity information unless required for specific progressive jackpot or live dealer compliance purposes.
• Fraud prevention services: Automated fraud detection platforms may process your IP address, device fingerprint and transaction patterns to identify suspicious activity. These providers act as data processors under strict contractual controls.
• Legal and regulatory authorities: 666c will disclose personal data to law enforcement agencies, financial intelligence units, gaming regulators or courts when legally compelled to do so by a valid order, warrant or regulatory directive.
• Business transfers: In the event of a merger, acquisition or sale of 666c's business or assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer via your registered email address.

The 666c Platform uses cookies and similar tracking technologies to ensure correct platform functionality, maintain your login session and analyse aggregate usage patterns. We use three categories of cookies:

• Essential cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection cookies and load-balancing cookies. You cannot opt out of essential cookies without also being unable to use the Platform.
• Analytical cookies: Used to measure aggregate user behaviour — such as pages visited, session duration and game popularity — to help us improve the Platform. Data collected by analytical cookies is anonymised before processing and is not linked to your personal identity.
• Preference cookies: Used to remember your display preferences — such as language setting and notification configuration — so you do not need to re-enter them each session.

666c does not use advertising cookies, cross-site tracking pixels, social media retargeting scripts or any third-party behavioural advertising technology. Your browsing activity on 666c is not shared with advertising networks.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging into your 666c Account or using the cashier. Most modern browsers — including Chrome on Android (commonly used in Karachi and Lahore) and Safari on iOS — provide granular cookie controls in their privacy settings menus.

666c retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods imposed by our legal and regulatory obligations:

• Account and identity records: Retained for a minimum of five years from the date of account closure, as required by anti-money laundering regulations applicable to our international gaming licence.
• Financial and transaction records: Retained for a minimum of five years from the date of each transaction, consistent with financial record-keeping obligations.
• KYC documents: Retained for five years from account closure or from the date of the last transaction, whichever is later.
• Support communications: Retained for two years from the date of the communication, unless the communication relates to an ongoing dispute or regulatory matter, in which case it is retained until that matter is fully resolved.
• Marketing consent records: Retained for the duration of your Account and for two years after account closure, to demonstrate that marketing was sent with your consent.
• Technical and usage logs: Retained for 13 months on a rolling basis for security and fraud analysis purposes, then automatically purged.

After the applicable retention period expires, your data is either securely deleted from 666c's systems or anonymised so that it can no longer be associated with you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and business intelligence purposes.

666c employs a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. Our security measures include:

• Transport encryption: All data transmitted between your device and 666c servers is encrypted using TLS 1.3 with 256-bit cipher suites. Our SSL certificate is maintained current and visible via the padlock indicator in your browser.
• At-rest encryption: Personal data and KYC documents stored on 666c servers are encrypted using AES-256 encryption. Encryption keys are managed through a dedicated key management system with strict access controls.
• Access controls: Access to personal data by 666c staff is governed by a role-based access control policy. Only personnel with a legitimate operational need may access identifiable player data, and all access is logged and audited.
• Two-factor authentication: 666c's internal administrative systems require mandatory two-factor authentication. Players are also strongly encouraged to enable 2FA on their own accounts.
• Penetration testing: The 666c Platform undergoes periodic security penetration testing by independent third-party security firms. Critical findings are remediated within defined response windows.
• Incident response: 666c maintains a formal data breach incident response plan. In the event of a breach affecting your personal data, you will be notified within the timeframe required by applicable law, along with details of the breach and recommended protective action.

As a 666c player, you have the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and your registered Account email address for verification purposes:

• Right of access: You may request a copy of all personal data 666c holds about you. We will provide this in a structured, machine-readable format within 30 days of verifying your identity.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. Minor corrections (such as email address updates) can be made directly in your Account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that deletion requests are subject to our legal retention obligations — we cannot delete records we are legally required to retain, such as AML transaction records.
• Right to restriction: You may request that we temporarily restrict processing of your data — for example, while a dispute is being investigated — without deleting it.
• Right to data portability: You may request a copy of the personal data you provided to us in a portable format (JSON or CSV) for transfer to another service.
• Right to object: You may object to processing of your data based on legitimate interests, including profiling for fraud detection, by submitting a written objection. We will review your objection and either comply or explain why compelling legitimate grounds override your objection.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting prior lawful processing.

666c will respond to all verified data rights requests within 30 days. For complex requests, we may extend this period by an additional 30 days, in which case we will notify you of the extension and the reason for it.

666c operates under an international gaming licence and, as a result, your personal data may be processed on servers and by service providers located outside Pakistan. When your data is transferred internationally, 666c ensures that appropriate safeguards are in place to protect it, including:

• Contractual data processing agreements with all third-party processors that impose data protection standards equivalent to those applied by 666c.
• Transfer of data only to jurisdictions that maintain adequate data protection frameworks recognised by the applicable regulatory authority under our gaming licence.
• Regular review of our processor contracts and subprocessor lists to ensure continued adequacy of protections.

If you would like details of the specific safeguards in place for international transfers of your personal data, you may submit a written request to [email protected] and we will provide this information within 30 days.

The 666c Platform is strictly for individuals aged 21 years and over. 666c does not knowingly collect personal data from any person under the age of 21. Age verification is performed at registration and during KYC processing.

If 666c discovers or is notified that personal data has been collected from an individual under the age of 21, all data associated with that individual will be immediately and permanently deleted, the Account will be closed, any balance will be forfeited, and the matter will be escalated to our compliance team in accordance with our responsible gaming obligations.

The 666c Platform does not include links to external third-party websites, social media platforms or partner sites that would result in your data being shared outside the 666c ecosystem without your knowledge. All navigation on the 666c Platform remains within https://666c.ws.

In the event that 666c ever adds third-party links in the future, this Privacy Policy will be updated to reflect how your data may be affected by clicking those links. This Policy applies solely to data collected and processed by 666c and does not govern the privacy practices of any third-party website, even if accessed indirectly in connection with 666c services.

666c reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing activities, or the services we offer. When material changes are made, we will notify registered players via email to the address on file at least seven days before the changes take effect, where practicable.

The "Last Updated" date at the top of this Policy indicates the date of the most recent revision. The version of this Policy in effect at the time of any data processing activity shall govern that activity. We encourage you to review this Policy periodically to stay informed about how 666c protects your personal information.

Continued use of the 666c Platform following notification of material changes to this Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree with any changes, you may close your Account by contacting the 666c support team.

If you have any questions, concerns or requests relating to this Privacy Policy or the way 666c handles your personal data, please contact our support team through the following channels:

• Live Chat: Available 24/7 directly on the 666c Platform. This is the fastest channel for urgent privacy or data security concerns.
• Email: [email protected] — use subject line "Privacy Policy Query" or "Data Rights Request" as appropriate. Please note this address is shown as plain text and is not a clickable link.
• Location: 666c support operations are based in Karachi, Pakistan. Response to written enquiries is typically within two business days.