666p9 Privacy Policy

At 666p9, we take the privacy of our players seriously. This Privacy Policy (hereinafter "Policy") sets out how 666p9 (hereinafter "we", "us", "the Platform") collects, uses, discloses, and safeguards personal information relating to users (hereinafter "you", "User", "Player") of the 666p9 website at https://666p9.app and all related services.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together form the complete set of agreements governing your relationship with 666p9.

1. Who We Are

666p9 is an online casino and sports betting platform operated at https://666p9.app, offering gaming and wagering services to eligible adult users, including players based in Pakistan. For the purposes of data protection law, 666p9 acts as the data controller in respect of personal information collected through the Platform.

If you have any questions or concerns about how 666p9 handles your personal data, please contact our Data Protection team at the details set out in Section 13 of this Policy.

2. Information We Collect

666p9 collects personal information from you in the following ways:

2.1 Information You Provide Directly

• Registration data: Full name, date of birth, gender, nationality, Pakistani mobile number, email address, and chosen password when you create a 666p9 Account;
• KYC / identity verification documents: Copies of your CNIC (Computerised National Identity Card), passport, or other government-issued photo identification; proof of address documents;
• Payment information: JazzCash or Easypaisa mobile wallet numbers, bank account details (HBL, UBL, Meezan Bank, Bank Alfalah), card details (Visa/MasterCard), or cryptocurrency wallet addresses (USDT TRC20) used for deposits and withdrawals. Note: 666p9 does not store full card numbers — payment card data is handled by our PCI-DSS compliant payment processors;
• Communications: The content of any messages, complaints, or enquiries you send to 666p9 customer support via live chat or email.

2.2 Information Collected Automatically

• Device & technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers;
• Usage data: Pages visited, games played, bets placed, session duration, links clicked, and navigation patterns on the 666p9 Platform;
• Location data: Approximate geographic location derived from your IP address, used for regulatory compliance and fraud prevention purposes;
• Cookies and similar technologies: As described in Section 5 of this Policy.

3. How We Use Your Data

666p9 uses the personal information it collects for the following purposes:

• Account management: Creating, maintaining, and administering your 666p9 Account, including authentication and security;
• Service delivery: Processing deposits and withdrawals, settling bets, awarding bonuses, and providing all gaming and betting services available on the Platform;
• Identity & age verification (KYC): Confirming that you meet the minimum age requirement of 18 years and verifying your identity in compliance with applicable regulatory obligations;
• Anti-money laundering (AML) and fraud prevention: Monitoring transactions and Account activity to detect and prevent money laundering, fraud, and other financial crimes;
• Responsible gaming: Monitoring gaming behaviour to identify indicators of problem gambling and to enable the provision of Responsible Gaming Tools, as described in our Responsible Gaming page;
• Customer support: Responding to your queries, complaints, and requests;
• Marketing and promotions: Where you have consented, sending you information about 666p9 promotions, bonuses, and new features that may be of interest to you. You may withdraw your consent to marketing communications at any time;
• Legal compliance: Complying with applicable legal and regulatory obligations;
• Platform improvement: Analysing aggregated usage data to improve the performance, design, and content of the 666p9 Platform.

4. Legal Basis for Processing

666p9 processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between you and 666p9 (i.e., the Terms & Conditions), including delivering gaming services, processing payments, and managing your Account;
• Legal obligation: Processing is required for compliance with applicable legal and regulatory requirements, including KYC, AML, and responsible gaming obligations;
• Legitimate interests: Processing is carried out in pursuit of the legitimate interests of 666p9 in operating a secure, fair, and commercially viable platform, including fraud prevention, security monitoring, and platform analytics, provided that such interests are not overridden by your fundamental rights and freedoms;
• Consent: Where 666p9 relies on your consent as a legal basis (e.g., for direct marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

5. Cookies & Tracking Technologies

The 666p9 Platform uses cookies and similar tracking technologies to enhance your experience and to collect the technical and usage data described in Section 2.2. The types of cookies used by 666p9 include:

• Strictly necessary cookies: Essential for the Platform to function correctly — for example, session management and security cookies. These cannot be disabled;
• Functional cookies: Remember your preferences and settings (e.g., language, login state) to improve usability;
• Analytics cookies: Collect aggregated data about how users navigate and interact with the Platform, allowing 666p9 to measure and improve performance;
• Marketing cookies: Used to deliver relevant promotional content on the Platform where you have given consent.

You can control non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of parts of the 666p9 Platform.

6. Data Sharing & Disclosure

666p9 does not sell your personal information to third parties. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment service providers: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa/MasterCard processors, and cryptocurrency payment gateways, solely for the purpose of processing your deposits and withdrawals;
• KYC and identity verification providers: Third-party services that assist 666p9 in verifying the identity and age of Account holders in compliance with applicable regulations;
• IT and platform service providers: Cloud hosting providers, cybersecurity services, and software vendors that support the operation of the 666p9 Platform, subject to appropriate data processing agreements;
• Regulatory and law enforcement authorities: Where required by law, court order, or regulatory directive, 666p9 may disclose personal data to the relevant authorities;
• Fraud prevention agencies: Sharing data with industry fraud prevention organisations where 666p9 reasonably suspects fraudulent activity;
• Business successors: In the event of a merger, acquisition, or sale of all or part of 666p9's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

All third-party service providers engaged by 666p9 are required to handle personal data securely and solely for the purposes for which it was shared. 666p9 does not permit third parties to use your personal data for their own marketing purposes.

7. Data Retention

666p9 retains your personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable law. In practice, this means:

• Account data and transaction records are retained for a minimum of five (5) years following Account closure, in compliance with applicable anti-money laundering regulations;
• KYC documents are retained for a minimum of five (5) years following the conclusion of the customer relationship;
• Customer support communications are retained for a minimum of three (3) years;
• Marketing consent records are retained for as long as the consent remains valid and for a period thereafter as required for evidentiary purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be associated with you.

8. Data Security

666p9 employs technical and organisational security measures designed to protect your personal information from unauthorised access, disclosure, alteration, or destruction. These measures include, without limitation:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 666p9 Platform;
• Encryption of sensitive data at rest, including payment and identity information;
• Restricted access controls — only authorised 666p9 personnel with a specific operational need may access personal data;
• Regular security audits and penetration testing of the Platform infrastructure;
• Two-factor authentication (2FA) available to all Account holders as an additional layer of personal account security.

9. Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by 666p9:

• Right of access: You may request a copy of the personal data 666p9 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 666p9's legal retention obligations;
• Right to restriction: You may request that 666p9 restricts the processing of your personal data in certain circumstances;
• Right to data portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request your personal data in a structured, machine-readable format;
• Right to object: You may object to processing carried out on the basis of 666p9's legitimate interests;
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting prior processing.

To exercise any of the above rights, please contact 666p9 using the details in Section 13. We will respond to all verifiable requests within 30 days. We may require proof of identity before processing your request. Note that certain rights are subject to limitations where legal obligations require 666p9 to retain or process data regardless of your request.

10. Children's Privacy

The 666p9 Platform is strictly intended for users aged 18 years and above. 666p9 does not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor has registered an Account with 666p9, please contact us immediately using the details provided in Section 13.

11. International Data Transfers

Your personal data may be transferred to and processed in countries outside of Pakistan in connection with the provision of 666p9 services — for example, by cloud hosting providers or KYC verification partners whose infrastructure is located in other jurisdictions. Where such transfers occur, 666p9 ensures that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses with the relevant service providers.

By using the 666p9 Platform, you acknowledge and consent to the transfer of your personal data to other jurisdictions for the purposes described in this Policy, subject to the safeguards outlined herein.

12. Changes to This Privacy Policy

666p9 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made, 666p9 will endeavour to notify active Account holders via email or in-platform notification. The updated Policy will be published on this page with a revised "Last Updated" date. Your continued use of the 666p9 Platform following publication of a revised Privacy Policy constitutes your acceptance of the changes.

We encourage you to review this Policy periodically to stay informed about how 666p9 protects your personal data.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 666p9 handles your personal data, please contact our support team: