666q Casino Privacy Policy

1. Introduction

1.1 666q takes data privacy seriously. This Policy is written in plain English to ensure that Pakistani players and all other users understand exactly what personal data is collected, why it is collected, how it is used, and what rights they have over it.

1.2 This Policy applies to all personal data collected through the 666q website at 666q.org, including data collected during account registration, KYC verification, deposits, withdrawals, gameplay, responsible gaming tool usage, and customer support interactions.

1.3 This Policy should be read alongside the 666q Terms & Conditions, which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions on a data protection matter, this Policy shall prevail.

2. Data Controller

2.1 For the purposes of this Policy, 666q is the data controller — the entity that determines the purposes and means of processing your personal data.

2.2 All data protection enquiries, access requests, and correction or deletion requests should be directed to the 666q support team via the official contact address at [email protected]. See Section 14 for full contact details.

3. Data We Collect

3.1 666q collects the following categories of personal data from users:

3.2 666q does not knowingly collect special category data (such as health or biometric data) beyond what is strictly required for identity verification purposes. Where biometric-style data such as CNIC photographs is collected, it is handled under the strict security measures described in Section 9.

4. How We Use Your Data

4.1 666q uses the personal data it collects for the following purposes:

• To create and maintain your 666q account and provide access to all platform features;
• To verify your identity and age in accordance with the platform's 18+ policy and KYC requirements;
• To process deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, and other supported payment methods;
• To administer and settle gameplay and sports betting outcomes, including PSL and other cricket markets;
• To operate responsible gaming tools including deposit limits, session timers, and self-exclusion;
• To provide customer support and respond to queries, complaints, and formal correspondence;
• To detect and prevent fraud, bonus abuse, money laundering, and other prohibited conduct;
• To send promotional and account communications to players who have not opted out of marketing;
• To comply with legal obligations applicable to the platform's operation.

5. Legal Basis for Processing

5.1 666q processes personal data on the following legal bases, which vary depending on the purpose of processing:

• Contractual necessity — processing required to perform the contract between 666q and the registered player, including account management, payment processing, and gameplay administration;
• Legal obligation — processing required to comply with applicable legal obligations, including identity verification, KYC, and anti-money laundering requirements;
• Legitimate interests — processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by the individual's privacy rights;
• Consent — processing for marketing communications, where the player has provided explicit consent that can be withdrawn at any time.

6. Data Sharing & Third Parties

6.1 666q does not sell, rent, or trade personal data to third-party marketers or data brokers under any circumstances.

6.2 666q may share personal data with the following categories of third parties, strictly as necessary for platform operation:

• Payment processors — JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, card payment networks, and USDT processing services, for the purpose of executing financial transactions;
• Identity verification providers — third-party KYC service providers who assist with CNIC verification and identity confirmation, under strict data processing agreements;
• Game content providers — certified game software providers whose RNG-verified titles appear in the 666q lobby, where game session data is shared for dispute resolution purposes;
• Law enforcement and regulators — government authorities, law enforcement agencies, or courts, where disclosure is required by law or a valid court order.

6.3 All third parties with whom 666q shares personal data are required to maintain appropriate technical and organisational security measures and to use data only for the specified purpose.

7. Cookies & Technical Tracking

7.1 The 666q platform uses cookies and similar tracking technologies to maintain session state, remember login status, and gather analytical data about platform usage patterns. These technologies are essential to the platform's correct operation.

7.2 Essential session cookies are required for the platform to function correctly. These cannot be disabled without preventing access to the platform. No essential cookie contains personally identifiable information in an unencrypted form.

7.3 Analytical cookies may be used by 666q to understand aggregate usage patterns, improve platform performance, and identify technical issues. Analytical cookie data is processed in aggregate and is not used to profile individual users for marketing purposes.

7.4 Users may manage cookie preferences through their browser settings. Disabling non-essential cookies will not affect access to the core functions of the 666q platform.

8. Data Retention

8.1 666q retains personal data for as long as is necessary for the purposes described in this Policy, subject to the following retention periods:

• Account and registration data: retained for the duration of the account and for a minimum of five (5) years following account closure, in accordance with standard financial record-keeping obligations;
• KYC identity documents: retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later;
• Transaction and payment records: retained for a minimum of seven (7) years in accordance with financial record-keeping requirements;
• Customer support communications: retained for a minimum of three (3) years following the closure of the relevant support case;
• Technical access logs: retained for a maximum of twelve (12) months unless required for an active investigation.

8.2 Where 666q is required by law or by a competent authority to retain data for a longer period, the statutory requirement will prevail over the periods stated above.

9. Data Security

9.1 666q implements the following technical and organisational security measures to protect personal data against unauthorised access, disclosure, loss, or destruction:

• 256-bit SSL/TLS encryption on all data transmitted between user devices and the 666q platform;
• Encryption at rest for all sensitive data stored in 666q databases, including KYC documents and payment details;
• Access controls limiting personal data access to authorised personnel only, on a strict need-to-know basis;
• Password hashing using industry-standard cryptographic algorithms — account passwords are never stored in recoverable plaintext;
• Regular security assessments and penetration testing of the platform infrastructure;
• Incident response procedures for detecting, reporting, and responding to data security events.

9.2 In the event of a data security incident that poses a material risk to the personal data of users, 666q will notify affected users via their registered contact details as promptly as the investigation allows.

10. Your Data Rights

10.1 Registered 666q players have the following rights in relation to their personal data:

• Right of access — you may request a copy of the personal data 666q holds about you;
• Right of rectification — you may request correction of inaccurate or incomplete personal data;
• Right of erasure — you may request deletion of your personal data, subject to legal retention obligations and the conditions under which deletion is permitted;
• Right to restrict processing — you may request that 666q limits processing of your data in certain circumstances;
• Right to withdraw consent — where processing is based on consent (e.g. marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing;
• Right to complain — you have the right to lodge a complaint with an appropriate supervisory authority regarding 666q's processing of your personal data.

10.2 To exercise any of the above rights, please contact 666q support in writing with proof of your identity. 666q will respond to verified requests within thirty (30) calendar days. Where a request is complex or involves a large volume of data, the response period may be extended by a further thirty (30) days with prior notification.

11. Children's Privacy

11.1 The 666q platform is strictly for adults aged 18 and over. 666q does not knowingly collect personal data from persons under the age of 18.

11.2 If 666q becomes aware that personal data has been collected from a person under the age of 18, the relevant account will be immediately closed, all associated data will be securely deleted to the extent legally permissible, and any funds deposited will be returned via the original payment method where possible.

12. Responsible Gaming & Data Processing

12.1 666q processes responsible gaming data — including deposit limit settings, session durations, and self-exclusion status — for the purpose of operating the platform's responsible gaming tool suite. This processing is in the legitimate interests of player protection and the long-term sustainability of the platform.

12.2 Self-exclusion data is handled with particular sensitivity. Players who self-exclude are flagged in the 666q system to prevent re-registration and to ensure they are removed from all marketing communications for the duration of the exclusion period. This data is retained for the purpose of enforcing the exclusion and for verification in the event of a re-registration attempt.

12.3 666q may use gameplay and transaction data in aggregate to identify patterns indicative of problem gambling behaviour and to proactively reach out to players who may benefit from responsible gaming support. This activity is conducted in the player's interest and does not constitute profiling for commercial purposes.

13. Amendments to This Policy

13.1 666q may update this Privacy Policy from time to time. Material changes will be communicated to registered users via their registered email address and/or a prominent notice on the platform prior to the changes taking effect.

13.2 The current effective version of this Privacy Policy is always available at 666q.org/privacy-policy. The effective date and last-updated date at the top of this document indicate the version in force.

13.3 Continued use of the 666q platform following the effective date of any amendment constitutes acknowledgement of the revised Policy. If you do not accept the revised Policy, you must stop using the platform and close your account.

14. Contact & Data Requests

14.1 All privacy-related enquiries, data subject access requests, correction requests, deletion requests, and formal complaints regarding 666q's data processing practices should be submitted to: