666p9 Privacy Policy

This Privacy Policy describes how 666p9 Gaming Ltd. ("666p9", "we", "us", or "our") collects, uses, stores, shares, and protects personal data in connection with the operation of the 666p9 online gaming platform at https://666p9.bet (the "Platform"). It applies to all registered Players, visitors, and any individual who interacts with the 666p9 Platform in any capacity.

By creating a 666p9 account, making a deposit, placing a bet, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this policy, you must discontinue use of the Platform and may request account closure by contacting our support team.

This policy should be read alongside our Terms & Conditions and Responsible Gaming page, both of which are incorporated by reference into this document.

The data controller responsible for your personal data is 666p9 Gaming Ltd., the entity that operates the 666p9 Platform under an international online gaming licence. As data controller, 666p9 Gaming Ltd. determines the purposes for which your personal data is processed and the means by which that processing is carried out.

All data subject requests, privacy-related queries, and formal complaints regarding data handling should be directed to the 666p9 Data Protection team via the contact details in Section 15 of this policy.

666p9 collects the following categories of personal data from Players and Platform visitors. The specific data collected depends on how you interact with the Platform:

666p9 collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating account settings.
• Automated technical collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser type, session duration, pages visited, and referral source. This is collected via server logs, cookies, and similar tracking technologies.
• Payment processor callbacks: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20, the respective payment processor confirms the transaction to 666p9 along with a transaction reference and amount. 666p9 does not receive raw financial credentials such as mobile wallet PINs or full bank account numbers.
• Third-party identity verification services: During KYC processing, 666p9 may use a licensed identity verification provider to cross-check submitted documents. The verification provider operates under strict data processing agreements with 666p9.
• Game software providers: Licensed game suppliers (such as Pragmatic Play, Evolution Gaming, and NetEnt) may return session outcome data to 666p9 systems for settlement, dispute resolution, and responsible gaming monitoring purposes.

666p9 processes personal data for the following specific purposes. Where a purpose is required by law or by our gaming licence, it is marked accordingly:

• Account creation and management: To register your account, verify your identity, manage your profile, and provide access to all 666p9 Platform features.
• KYC and age verification (Regulatory): To verify that you are aged 21 or above and to confirm your identity in compliance with our international gaming licence. This is a mandatory regulatory requirement — accounts that do not pass KYC will have withdrawal privileges suspended.
• Payment processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 in accordance with your instructions.
• Anti-Money Laundering and fraud prevention (Regulatory): To detect, investigate, and prevent financial crime, bonus abuse, collusion, and account fraud. AML and CTF monitoring is a mandatory obligation under our gaming licence.
• Responsible gaming compliance (Regulatory): To enforce deposit limits, self-exclusion orders, cooling-off periods, and age restrictions. Gaming behaviour data is monitored to identify signs of problem gambling and trigger appropriate interventions.
• Customer support: To respond to your queries, resolve disputes, and provide 24/7 live chat and email support.
• Platform improvement: To analyse usage patterns, identify technical issues, optimise game performance, and improve the overall 666p9 user experience for Pakistani players.
• Marketing communications (Opt-in only): If you have explicitly opted in, to send you promotional offers, bonus notifications, and platform updates via email or SMS. You may opt out at any time from your account dashboard.
• Legal compliance: To comply with any applicable laws, regulatory orders, or lawful requests from competent authorities.

For each processing purpose described in Section 5, 666p9 relies on one or more of the following legal bases:

666p9 does not sell your personal data to any third party. We share personal data only with the following categories of recipients, and only to the extent strictly necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT network processors receive transaction-level data necessary to process your deposits and withdrawals. Each processor is bound by its own privacy and data security obligations.
• KYC and identity verification providers: Licensed third-party identity verification services receive copies of KYC documents (such as CNIC images) solely for the purpose of conducting identity and age verification checks on behalf of 666p9.
• Game software suppliers: Providers such as Pragmatic Play, Evolution Gaming, and NetEnt receive session data necessary for game operation, outcome settlement, and return-to-player calculations. These suppliers operate under data processing agreements with 666p9.
• Regulatory and law enforcement authorities: 666p9 may disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies where required by law, by our gaming licence, or pursuant to a valid legal order. 666p9 will not voluntarily disclose data to authorities beyond what is legally required.
• Fraud prevention services: Anonymised or pseudonymised transaction data may be shared with cross-operator fraud detection networks as permitted under our gaming licence to detect bonus abuse, multi-accounting, and financial crime.
• Professional advisers: Legal, audit, and compliance advisers engaged by 666p9 may access personal data under strict confidentiality obligations as necessary to provide their professional services.

As an internationally licensed gaming platform serving players in Pakistan and other jurisdictions, 666p9 may transfer personal data to, or process it in, countries outside Pakistan. These international transfers may occur in connection with cloud infrastructure, KYC service providers, game software suppliers, or regulatory reporting obligations.

When personal data is transferred internationally, 666p9 ensures that appropriate safeguards are in place, including:

• Data processing agreements incorporating standard contractual clauses or equivalent binding data transfer mechanisms recognised under applicable data protection frameworks.
• Transfers to service providers located in jurisdictions that maintain adequate data protection standards as assessed by 666p9's compliance team.
• Encryption of data in transit and at rest for all international transfers involving personal or financial data.

If you have questions about specific international transfer safeguards, please contact the 666p9 Data Protection team using the details in Section 15.

666p9 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Where anonymisation is not technically feasible, data is deleted via certified erasure methods.

The 666p9 Platform uses cookies and similar tracking technologies to ensure proper platform functionality, analyse usage patterns, and support responsible gaming monitoring. The following cookie categories are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They maintain your login session, remember your language preferences, and ensure security features operate as intended. These cookies cannot be disabled without impairing core Platform functionality.
• Analytics Cookies: Used to understand how Players interact with the Platform — including which games are most popular, average session duration, and navigation paths. Analytics data is aggregated and used to improve Platform performance. These cookies are non-personally-identifiable at the analytics processing level.
• Responsible Gaming Cookies: Used to enforce active session time reminders, deposit limit states, and cooling-off period restrictions set by you from your account dashboard. Disabling these cookies may impair responsible gaming tool functionality.
• Preference Cookies: Used to remember your display preferences, notification settings, and sportsbook market selections between sessions.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to or using the 666p9 Platform. For full details on the specific cookies deployed, please refer to the Cookie Management section within your 666p9 account settings.

As a 666p9 account holder, you have the following rights in relation to your personal data. These rights may be subject to limitations where overriding legal or regulatory obligations apply:

To exercise any of the above rights, submit a request via the 666p9 account dashboard or email the Data Protection team at the address listed in Section 15. All requests are acknowledged within 5 business days and fully responded to within 30 calendar days.

The 666p9 Platform is strictly intended for individuals aged 21 years and above. 666p9 does not knowingly collect or process personal data from any individual below the age of 21. Age verification is a mandatory step in the registration and KYC process, and 666p9 employs both automated and manual checks to enforce this requirement.

If 666p9 becomes aware that personal data has been collected from an individual under the age of 21, the following actions will be taken immediately:

• The account will be suspended and closed without delay.
• Any balance in the account will be returned via the original payment method after deduction of any bonuses received.
• All personal data associated with the underage account will be deleted from 666p9 systems as soon as regulatory obligations permit, and no later than 30 days from discovery.
• The incident will be logged and reviewed by the 666p9 compliance team to identify how the age verification process was circumvented, and measures will be implemented to prevent recurrence.

If you are a parent or guardian and believe your child has registered on the 666p9 Platform, please contact our support team immediately at [email protected] (plain text — not a clickable link). We will investigate and act on all such reports within 24 hours.

666p9 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• TLS 1.3 encryption on all data transmitted between your device and the 666p9 Platform.
• AES-256 encryption for all personal and financial data stored in 666p9 databases.
• Role-based access controls ensuring that employee access to personal data is restricted to staff with a documented, role-specific need to access that data.
• Multi-factor authentication on all internal 666p9 administrative systems that have access to Player data.
• Regular penetration testing conducted by independent security specialists to identify and remediate vulnerabilities before they can be exploited.
• 24/7 automated intrusion detection and anomaly monitoring on all Platform infrastructure.
• Secure data disposal — all data that reaches the end of its retention period is destroyed using certified erasure methods.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 666p9 will notify affected Players without undue delay and take all reasonably practicable steps to contain and remediate the breach.

666p9 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our gaming licence requirements, data processing practices, or Platform features. When material changes are made, we will provide advance notice via the registered email address on your account or through a prominent notice on the 666p9 Platform homepage.

The version number and effective date displayed at the top of this document will be updated with each revision. Continued use of the 666p9 Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this policy, you should stop using the Platform and may request account closure by contacting our support team.

We recommend that you review this Privacy Policy periodically to stay informed of how 666p9 collects, uses, and protects your personal data.

For any questions, concerns, data subject requests, or formal privacy complaints related to this Privacy Policy or 666p9's data handling practices, please contact our Data Protection team using the details below. All formal requests must be submitted in writing.

• Data Protection Team Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 from your 666p9 account dashboard for general privacy queries.
• Response Time: All written data requests are acknowledged within 5 business days and fully resolved within 30 calendar days.
• Postal Address: 666p9 Gaming Ltd., Data Protection Office, International Gaming House, Licence Jurisdiction.