666m Privacy Policy – How We Protect Your Personal Data

1. Who We Are

This Privacy Policy applies to 666m, an online betting and gaming platform operating at 666m.biz. When we say "666m", "we", "us", or "our" in this document, we mean the legal entity that operates the 666m platform under an international gaming licence.

666m is designed primarily for players in Pakistan. Our platform offers sports betting including cricket, PSL betting, esports betting on PUBG Mobile and CS2, live casino games, slots, fishing games, and the Aviator crash game. All of these services are provided to you through a single 666m account, and this Privacy Policy governs how data is handled across all of them.

If you have questions about this policy or about how 666m handles your personal data, you can contact our privacy team directly at support@666m.biz. We are available 24 hours a day, 7 days a week, in English and Urdu.

2. Data We Collect

666m collects personal data through different channels and at different points in your interaction with the platform. Below is a clear breakdown of the categories of data we collect and the circumstances under which we collect them.

2.1 Account Registration Data

When you register a 666m account, we collect the information you provide directly:

• Full legal name – as it appears on your official government-issued identification
• Date of birth – to verify that you are 18 years of age or older
• Mobile number – used for account verification, security alerts, and support contact
• Email address – where provided, used for account communications and promotional messages if opted in
• Preferred payment method details – such as your Easypaisa or JazzCash registered mobile number

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer process, 666m may request copies of official identity documents. This typically includes a scan or photograph of your CNIC (Computerised National Identity Card) or a valid passport. This data is collected only when required for account verification or before processing withdrawals above certain thresholds.

2.3 Financial Transaction Data

Every deposit and withdrawal you make on 666m generates a transaction record. This includes the amount, timestamp, payment method used, and transaction reference number. This data is retained for regulatory, anti-money laundering, and dispute resolution purposes.

2.4 Betting and Gaming Activity Data

666m maintains a record of your betting history, casino game sessions, Aviator rounds, slot play, and all other gaming activity on the platform. This data is used to settle bets, process winnings, detect unusual activity, and provide you with a personalised experience.

2.5 Technical and Device Data

When you access 666m, our systems automatically collect certain technical data including your IP address, device type, operating system, browser type and version, session duration, pages visited, and referring URL. This data is used for platform security, fraud detection, and performance optimisation.

2.6 Customer Support Data

If you contact 666m's support team via live chat or email, we retain records of those communications. This allows us to maintain continuity in support interactions and resolve disputes accurately if they arise later.

3. How 666m Uses Your Personal Data

666m uses your personal data only for purposes that are clearly justified and disclosed in this policy. We do not use your data for any purpose that would be unexpected or inconsistent with the reason it was collected. Here is a complete account of how your data is put to use on the 666m platform.

3.1 Providing and Managing Your Account

The most fundamental use of your data is simply to run your 666m account. Without your registration details, payment information, and identity verification data, we cannot create or maintain your account, process deposits or withdrawals, or settle your bets accurately. This is the core operational purpose that underpins everything else.

3.2 Verifying Identity and Preventing Fraud

Online betting platforms are targeted by fraud attempts including identity theft, money laundering, and multi-account abuse. 666m uses your personal and technical data to detect and prevent these threats. This includes automated monitoring of account activity for unusual patterns and manual review where suspicious behaviour is flagged.

3.3 Responsible Gaming Monitoring

Your gaming activity data on 666m is analysed to help identify potential problem gambling behaviour. If patterns in your betting or gaming history suggest that you may be at risk, our responsible gaming system may trigger outreach or temporarily apply protective limits. This use of your data exists to protect you, not to restrict legitimate play.

3.4 Personalising Your Experience

666m uses your betting history and preferences to tailor your platform experience – for example, surfacing your most-played games or preferred sports markets when you log in. This personalisation is based on your own activity and does not involve profiling based on external data sources.

3.5 Customer Support

When you contact 666m support, your account data and communication history allow our team to assist you accurately and efficiently without requiring you to repeat information you have already provided.

3.6 Legal and Regulatory Compliance

666m is required by its gaming licence and applicable anti-money laundering regulations to maintain records of player identity, transactions, and betting activity for defined periods. These records may be reviewed by regulatory authorities or law enforcement where legally required.

3.7 Marketing Communications

If you have opted in to marketing communications from 666m, we will use your contact details to send you information about promotions, bonuses, new games, and platform updates. You can opt out of marketing communications at any time through your account settings or by responding to any marketing message with an unsubscribe request.

4. Legal Basis for Processing

666m processes your personal data under the following legal bases:

• Contract Performance: Processing necessary to provide you with the services you have signed up for – including account management, bet settlement, and payment processing.
• Legal Obligation: Processing required to comply with anti-money laundering laws, gaming regulations, and tax reporting obligations applicable under 666m's operating licence.
• Legitimate Interests: Processing carried out for 666m's legitimate business interests where those interests do not override your fundamental rights – including fraud prevention, platform security, and service improvement.
• Consent: Processing based on your explicit consent – specifically for marketing communications and optional personalisation features. You can withdraw this consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Third Parties

666m does not sell your personal data to any third party, full stop. However, there are specific operational contexts in which your data is shared with trusted third parties. These are set out transparently below.

5.1 Payment Processors

To process your Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card transactions, 666m shares the minimum necessary financial data with the relevant payment processing partners. These partners are contractually bound to use your data only for transaction processing and are prohibited from using it for any other purpose.

5.2 Identity Verification Services

Where 666m uses third-party KYC verification services to confirm your identity documents, relevant identity data is shared with those providers. All KYC partners operate under strict data processing agreements and are subject to audit by 666m on a periodic basis.

5.3 Game Providers

Some games on 666m – particularly live casino tables and certain slot titles – are provided by licensed third-party game developers. These providers receive session and transaction data necessary to run the game and settle results, but do not receive your personal identity data except where required for regulatory compliance by the game provider's own licence.

5.4 Legal Authorities

666m will disclose personal data to law enforcement, regulatory bodies, or other governmental authorities when legally required to do so by valid legal process, court order, or regulatory instruction. We will notify affected players of such disclosures where legally permitted to do so.

6. Payment Data and Financial Security

Financial data on 666m receives the highest level of protection we apply to any category of personal information. When you deposit via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or Visa/Mastercard, the following protections apply:

• No card numbers stored: 666m does not store full credit or debit card numbers on its servers. Card transactions are processed through PCI DSS compliant payment gateways, and only a tokenised reference is retained.
• Mobile wallet data: Your Easypaisa or JazzCash mobile number is stored in encrypted form and is used only to initiate and verify transactions associated with your account.
• Transaction records: All deposit and withdrawal records are retained for the period required by 666m's regulatory obligations and are accessible to you in your account transaction history at all times.
• Withdrawal verification: Before processing large withdrawals, 666m may verify that the destination payment account belongs to the registered account holder. This is a security measure to protect against unauthorised withdrawals.

7. Cookies and Tracking Technologies

666m uses cookies and similar tracking technologies to make the platform function correctly, to analyse how it is used, and to remember your preferences between sessions. Here is a breakdown of the types of cookies in use.

You can manage cookie preferences through your browser settings. Disabling cookies beyond the essential category may affect platform functionality. Note that 666m does not use third-party advertising cookies.

8. Data Retention

666m does not keep your personal data longer than is necessary for the purposes described in this policy. Retention periods are set based on operational needs and regulatory requirements.

• Account data: Retained for the lifetime of your active account plus a minimum of five years following account closure, as required by anti-money laundering regulations.
• Transaction records: Financial transaction data is retained for a minimum of seven years from the date of the transaction, consistent with standard financial record-keeping requirements.
• KYC documents: Identity verification documents are retained for as long as required by the gaming licence under which 666m operates, typically five years from the date of verification.
• Support communications: Customer support chat and email records are retained for three years from the date of the interaction, unless the communication relates to an unresolved dispute in which case it is retained until the dispute is fully resolved.
• Marketing consent records: Records of your marketing opt-in and opt-out decisions are retained indefinitely to demonstrate compliance with consent requirements.
• Technical/log data: Server logs and device data are typically retained for 90 days unless retained for longer in connection with a specific security investigation.

9. How 666m Secures Your Data

666m employs a layered approach to data security that covers both technical controls and operational procedures. We take the security of your personal and financial data seriously and invest continuously in maintaining and improving our security posture.

9.1 Technical Security Measures

• TLS 1.3 encryption for all data in transit between your device and 666m's servers
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records
• Multi-factor authentication options for player accounts
• Automated intrusion detection and real-time threat monitoring
• Regular penetration testing by independent security specialists
• Strict access controls ensuring only authorised personnel can access player data, on a need-to-know basis

9.2 Operational Security

All 666m staff with access to player data are subject to background screening and regular data privacy training. Access to production systems containing personal data is logged and audited. Any access that cannot be explained by a legitimate operational purpose is escalated for review.

10. Your Privacy Rights

As a 666m player, you have the following rights in relation to your personal data. These rights can be exercised by contacting our support team or, where available, through your account settings directly.

To exercise any of these rights, contact 666m's support team at support@666m.biz. We will verify your identity before processing any data subject request and will respond within 30 calendar days.

11. Children and Minors

666m is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered a 666m account or provided personal data to us, please contact our support team immediately at support@666m.biz.

Upon receiving a verified report of underage access, 666m will immediately close the account, void all associated bets, and delete or anonymise the personal data collected, subject to any legal obligations that require temporary retention for the purpose of investigating and reporting the breach.

12. Marketing Communications

666m sends marketing communications only to players who have explicitly opted in to receive them at the time of registration or through their account settings. Marketing messages from 666m include information about bonuses, promotions, new game launches, tournament opportunities, and platform updates.

You can opt out of marketing communications at any time by:

• Updating your communication preferences in your 666m account settings
• Clicking the unsubscribe link in any marketing email you receive from 666m
• Contacting 666m support and requesting removal from marketing lists

Opting out of marketing does not affect transactional communications that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, bet settlement alerts, and security notifications.

13. Changes to This Privacy Policy

666m reviews and updates this Privacy Policy periodically to reflect changes in our data practices, regulatory requirements, or platform services. When we make material changes to this policy, we will notify you via:

• A notification displayed on the 666m platform when you next log in
• An email to your registered address, where you have provided one
• A prominent notice on the 666m website home page

For non-material changes – such as corrections of typographical errors or clarifications that do not alter the substance of how we process data – we will update the "Last Updated" date at the top of this policy without a formal notification. We encourage you to review this policy periodically so you are always aware of how 666m handles your personal information.

Your continued use of 666m after the effective date of any material change to this policy constitutes your acceptance of the updated terms. If you do not agree with any change, you have the right to close your account and request deletion of your data as described in Section 10.

14. Contact and Complaints

If you have questions about this Privacy Policy, want to exercise any of your data rights, or wish to raise a concern about how 666m has handled your personal data, please contact us through the following channels:

If you are not satisfied with how 666m has addressed your privacy concern, you have the right to escalate your complaint to the relevant regulatory authority under 666m's gaming licence jurisdiction. Details of the applicable regulatory body are available on request from our support team.