666com Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 666com ("we", "us", "our") collects, processes, stores and protects personal data obtained through the 666com website at 666com.cam (the "Platform") and all associated content, features and services. This Policy applies to all users ("you", "User") who access the Platform, regardless of their location.

666com operates as an online casino and sports betting information and entertainment platform. We do not directly operate a casino, accept wagers, or process financial transactions on behalf of players. Our data practices relate solely to the operation of this informational Platform.

By accessing or using the Platform, you confirm that you have read and understood this Policy and agree to the collection and use of your data as described herein. This Policy should be read together with our Terms & Conditions and Responsible Gambling Policy.

2. Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that directly or indirectly identifies a natural person, including but not limited to name, email address, IP address, device identifiers and usage data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure and deletion.
• "Data Controller" means 666com, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Cookies" means small text files placed on your device by the Platform to enable certain functionality, analytics and personalisation features.
• "Third Party" means any entity other than you and 666com, including analytics providers, hosting infrastructure providers and regulatory authorities.
• "Applicable Laws" includes Pakistan's Prevention of Electronic Crimes Act (PECA) 2016, the Personal Data Protection Bill (as enacted or applicable), and any other data protection laws applicable in the relevant jurisdiction.
• "User" / "You" means any individual who accesses the Platform in any capacity.

3. Data We Collect

We collect only the minimum data necessary to operate the Platform effectively, improve user experience and comply with our legal obligations. The categories of data we may collect include:

3.1 Data You Provide Directly

• Contact enquiries: If you contact us via email ([email protected]), we collect your email address and the content of your message.
• Feedback submissions: Any voluntary feedback or comments you submit through Platform features.

3.2 Data Collected Automatically

• Log data: IP address, browser type and version, operating system, referring URL, pages viewed and timestamps of access.
• Device data: Device type, screen resolution, language settings and connection type (e.g., mobile network, Wi-Fi). This is relevant for users accessing from Pakistani cities including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar on mobile connections.
• Usage data: Pages visited, content items viewed, time spent on the Platform and navigation path.
• Cookie data: Data stored and retrieved through cookies and similar tracking technologies as described in Section 6.

3.3 Data We Do Not Collect

As an information platform, 666com does not directly collect:

• Payment card details, bank account numbers or wallet credentials (e.g., Easypaisa, JazzCash or Raast account data).
• CNIC, passport or government-issued identity document scans — these should only be submitted directly to a licensed Operator's secure KYC system.
• Financial transaction records, wagering history or deposit/withdrawal data.
• Biometric data or liveness-check data of any kind.

4. Data Processing

We process the personal data we collect for the following purposes:

We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you without your explicit consent.

5. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: Where you have given explicit consent for a specific processing activity, such as accepting non-essential cookies. You may withdraw consent at any time without detriment.
• Legitimate Interests: Where processing is necessary for our legitimate interests in operating, securing and improving the Platform, provided those interests are not overridden by your rights and freedoms.
• Legal Obligation: Where processing is required to comply with applicable laws, including any data retention requirements, court orders or requests from competent authorities.
• Contractual Necessity: Where processing is necessary to respond to your direct enquiries or provide the services you have requested through the Platform.

6. Cookies & Tracking Technologies

666com uses cookies and similar technologies to ensure the Platform functions correctly, to analyse usage patterns and to improve content delivery. Cookies are small data files stored on your device when you visit the Platform.

6.1 Types of Cookies We Use

• Essential cookies: Required for core Platform functionality. These cannot be disabled without impairing Platform operation. No consent is required for essential cookies.
• Analytics cookies: Used to understand aggregate usage patterns — such as which game category guides or payment method pages are most read. Data is collected in anonymised or pseudonymised form.
• Preference cookies: Used to remember settings such as language preference or display options across sessions.

6.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Most major browsers (Chrome, Firefox, Safari, Edge and their mobile equivalents common on Pakistani devices) provide controls under Settings → Privacy & Security. Note that disabling certain cookies may affect your experience on the Platform.

7. Data Sharing & Disclosure

666com does not sell, rent or trade your personal data. We may share data only in the following limited circumstances:

• Service providers: Trusted third-party providers that support Platform infrastructure (e.g., hosting, content delivery networks, analytics). These providers are contractually bound to process data only on our instructions and in compliance with applicable data protection standards.
• Legal obligations: Where disclosure is required by law, court order or a competent regulatory authority — including authorities in Pakistan such as the Federal Investigation Agency (FIA) acting under PECA 2016 — we will comply to the extent legally required.
• Business transfers: In the event of a merger, acquisition or sale of assets, personal data may be transferred to the successor entity, subject to equivalent privacy protections.
• Protection of rights: Where disclosure is necessary to enforce our Terms & Conditions, investigate suspected fraud or protect the safety of users or third parties.

We do not share personal data with third-party Operators (casino or sportsbook platforms) referenced in our content. Any data you provide to such Operators is governed by their own privacy policies, which are independent of this Policy.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention approach is as follows:

• Support correspondence: Email records are retained for up to 24 months from the date of the last exchange, after which they are securely deleted unless ongoing legal proceedings require longer retention.
• Log and access data: Server logs are retained for up to 12 months for security and fraud-prevention purposes, then deleted or anonymised.
• Analytics data: Aggregated, anonymised analytics data may be retained indefinitely as it no longer constitutes personal data.
• Cookie data: Session cookies are deleted when you close your browser. Persistent cookies expire according to the duration specified at the time of placement, typically between 30 days and 12 months.

When data is no longer required, it is securely deleted or anonymised using industry-standard methods to ensure it cannot be reconstructed or re-identified.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. Our security measures include:

• SSL/TLS encryption on all data transmissions between your browser and the Platform (HTTPS).
• Access controls restricting internal data access to authorised personnel only, on a need-to-know basis.
• Regular security assessments of our hosting infrastructure and third-party service providers.
• Secure data deletion procedures for personal data no longer required.

While we take all reasonable precautions, no internet-based system can be guaranteed to be 100% secure. You are responsible for ensuring that your own device security is maintained — including using strong, unique passwords if you create an account on any Operator platform you discover through 666com.

10. Your User Rights

Subject to applicable data protection laws, you have the following rights in respect of your personal data held by 666com. To exercise any of these rights, contact us at the details in Section 14.

We will respond to valid rights requests within a reasonable timeframe consistent with applicable law. We may need to verify your identity before processing a request. We will not charge a fee for routine requests unless they are manifestly unfounded or excessive.

11. Children's Privacy

The 666com Platform is strictly intended for adults aged 18 or older, or such higher minimum age as required by applicable law or the relevant Operator's license jurisdiction. We do not knowingly collect personal data from minors.

If we become aware that personal data has been collected from a person under the applicable minimum age, we will take immediate steps to delete that data and restrict that user's access to the Platform. If you are a parent or guardian and believe your child has provided personal data to us, please contact us immediately at the details in Section 14.

12. International Data Transfers

As an online platform, 666com may store or process data through infrastructure located outside Pakistan. Where personal data is transferred to jurisdictions that may not have equivalent data protection standards, we take steps to ensure adequate safeguards are in place, including:

• Contractual clauses with data processors that impose data protection obligations consistent with applicable standards.
• Use of reputable, internationally recognised hosting and infrastructure providers with published security and compliance certifications.

By using the Platform, you acknowledge that your data may be processed in jurisdictions outside Pakistan. We will not transfer your personal data internationally in ways that would materially reduce the protections afforded to you under this Policy.

13. Amendments to This Policy

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, technology, legal requirements or the structure of the Platform. The "Last Reviewed" date at the top of this page will be updated whenever material changes are made.

We encourage you to review this Policy periodically. Where changes are material — such as a new category of data collection or a significant change in how data is shared — we will provide a prominent notice on the Platform homepage where reasonably practicable.

Your continued use of the Platform following publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree to any amendment, you should stop using the Platform and may submit a data deletion request as described in Section 10.

14. Contact Us

For any questions, concerns or requests relating to this Privacy Policy or the personal data we hold about you — including data access, correction, deletion or portability requests — please contact our support team using the details below. We respond to data-related enquiries in English, with Urdu language assistance available upon request.

Please include "Privacy Request" in your subject line and, where applicable, provide sufficient information to allow us to identify your data record. We may need to verify your identity before fulfilling a request. We will never ask you to send sensitive identity documents (CNIC, passport) via email — do not send such documents through unencrypted channels under any circumstances.