666y Privacy Policy – How We Handle Your Personal Data

666y is an online sports betting and gaming platform operating at 666y.click and serving users in Pakistan. When this Privacy Policy refers to "666y", "we", "us" or "our", it means the entity responsible for operating the 666y platform and processing your personal data.

As the data controller, 666y determines the purposes and means of processing your personal information. If you have any questions about how your data is handled or want to exercise any of your rights described in this Policy, the correct contact is our Privacy team at support@666y.click.

666y collects personal data across several categories. Here is a plain breakdown of what we hold and why:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data or health information unless specifically required to fulfil a legal obligation and only with your explicit consent in that case.

666y collects personal data through the following channels:

• Direct interactions: When you register an account, make a deposit or withdrawal, contact support, enter a tournament or respond to a promotion, you provide data directly to us.
• Automated technologies: When you use the 666y platform, we automatically collect technical and usage data through cookies, server logs and similar tracking technologies. See Section 7 for more on cookies.
• Third-party providers: When you verify your identity through a KYC provider, make a payment through Easypaisa, JazzCash or another payment service, or when fraud detection services flag activity for review, we may receive data about you from those providers. This data is handled in the same way as data you provide directly.

666y uses your personal data only for the following purposes:

• Account management: Creating, maintaining and securing your 666y account, including login, password recovery and session management.
• Payment processing: Handling deposits and withdrawals via your registered payment methods, verifying that funds are being sent to and from accounts in your name.
• KYC and compliance: Verifying your identity and age as required by financial regulations, and fulfilling anti-money laundering (AML) obligations.
• Customer support: Responding to your queries, resolving disputes, investigating complaints and maintaining records of support interactions.
• Responsible gaming: Monitoring usage patterns to identify behaviour associated with problem gambling, enforcing self-exclusion and deposit limits you have set, and proactively reaching out if concerning patterns are detected.
• Security and fraud prevention: Detecting and preventing unauthorised access, multi-accounting, bonus abuse, payment fraud and other forms of manipulation.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how the platform performs and where it can be improved. Individual-level data is not used for this purpose beyond what is necessary to maintain service quality.
• Marketing communications: Sending you promotional offers, tournament announcements and platform updates – only if you have given us permission to do so. You can withdraw this permission at any time from your account notification settings.

Every time 666y processes your personal data, we do so under one of the following legal bases:

• Performance of a contract: Processing is necessary to provide the services you have signed up for – running your account, settling bets, processing payments.
• Legal obligation: Processing is required to comply with financial regulations, AML laws and age verification requirements applicable to online gaming platforms.
• Legitimate interests: Processing is necessary for 666y's legitimate interests where these are not overridden by your rights – including fraud detection, security monitoring and platform optimisation.
• Consent: For optional processing such as marketing communications or non-essential cookies, we ask for your explicit consent and rely on it as the legal basis. You can withdraw consent at any time without affecting any other aspect of your account.

666y does not sell your personal data. We share it only in the following limited circumstances and only to the extent necessary for the specified purpose:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processing partners and card networks receive transaction data necessary to process deposits and withdrawals.
• KYC and identity verification providers: Third-party KYC services receive the documents you submit for identity verification. These providers are contractually prohibited from using your data for any purpose other than verification.
• Fraud detection and AML services: Transaction and behavioural data may be shared with fraud detection partners to identify and prevent financial crime. These services operate under strict data processing agreements.
• Legal and regulatory requirements: 666y will disclose personal data to law enforcement, regulators or courts when required to do so by applicable law, or where we believe disclosure is necessary to prevent serious harm.
• Business transfers: In the event that 666y undergoes a merger, acquisition or asset sale, user data may form part of the transferred assets. Any acquiring party would be bound by the terms of this Privacy Policy or required to give users notice of any change.

666y uses cookies and similar technologies to make the platform work correctly, keep you logged in securely, understand how the platform is used and, where you have consented, to personalise your experience.

The types of cookies we use are described below:

You can control non-essential cookies at any time from your account settings. Disabling analytics or personalisation cookies will not prevent you from using any part of 666y, but some features may work less smoothly. Disabling essential cookies is not possible as they are required for the platform to function securely.

666y retains your personal data for as long as necessary to fulfil the purposes described in this policy, subject to the following specific periods:

• Active account data: Held for the duration of your account and for 5 years after account closure, to comply with financial record-keeping requirements.
• Transaction records: Retained for a minimum of 7 years following the date of the transaction, as required for AML compliance and financial auditing purposes.
• KYC documents: Held for the duration of your account and for 5 years after closure.
• Support communications: Retained for 3 years after the last interaction, to allow dispute resolution and quality assurance review.
• Technical and usage logs: Typically anonymised or deleted after 12 months unless specific security or compliance needs require longer retention.
• Marketing consent records: Retained for as long as needed to demonstrate that we had valid consent for any marketing sent.

As a 666y user, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting us at support@666y.click. We will respond within 30 days and will not charge a fee for handling your request unless it is manifestly unfounded or excessive.

To exercise any of these rights, email support@666y.click with the subject line "Data Rights Request" and include your account username. We may need to verify your identity before acting on the request to ensure we do not disclose data to the wrong person.

666y takes security seriously. The technical and organisational measures we have in place to protect your personal data include:

• AES-256 encryption for stored personal and financial data
• TLS encryption for all data in transit between your device and our servers
• Multi-factor authentication required for all 666y staff with access to user data
• Role-based access controls ensuring staff see only the data they need for their specific function
• Automated intrusion detection and regular penetration testing by third-party security firms
• Documented incident response procedures with defined response time targets

Despite these measures, no online platform can guarantee absolute security against all possible threats. We encourage you to use a strong, unique password for your 666y account and to enable any two-factor authentication options available in your account security settings.

666y is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process requires users to confirm their age, and our KYC process verifies it with official documentation when triggered.

If we become aware that personal data has been collected from a minor, we will delete it immediately and close the associated account. If you believe a minor has registered on 666y, please contact us at support@666y.click so we can investigate promptly.

666y may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. When we make material changes, we will notify you by email or by a prominent notice on the platform before the change takes effect.

The "Effective Date" at the top of this page shows when the current version came into force. We keep archived versions of previous policies available on request. If you continue to use 666y after a change to this policy, you are accepting the updated version.

If you have any questions about this Privacy Policy, how 666y handles your personal data, or if you want to exercise any of the rights described in Section 9, the best ways to reach us are:

• Email: support@666y.click (subject line: "Privacy Query" for fastest routing)
• Live chat: Available 24/7 from your account dashboard – average response under 2 minutes

We aim to respond to all privacy-related queries within 48 hours and to complete substantive requests within 30 calendar days. If you are not satisfied with how we have handled your query, you have the right to escalate it as a formal complaint. Details of the formal complaints process are available in our Terms and Conditions.