666ad
Privacy Policy

1 Introduction

1.1   666ad ("we", "us", "our", or "the Platform") is committed to protecting the personal data of every user ("you", "your") who accesses or registers on the 666ad online gaming platform accessible at 666ad.org. This Privacy Policy explains, in clear terms, what personal data we collect, the purposes for which it is processed, how it is protected, and the rights you hold in relation to your data.

1.2   This Policy applies to all personal data processing activities carried out by 666ad in connection with the provision of its services, including cricket betting, casino games, live dealer tables, slots, and all associated account management and payment functions.

1.3   This Policy should be read alongside the 666ad Terms & Conditions and Responsible Gaming Policy, all of which together govern the User's relationship with the platform.

2 Data Controller Identity

2.1   For the purposes of applicable data protection law, the data controller in respect of personal data processed through the 666ad platform is the entity operating 666ad.org under its internationally recognised gaming licence.

2.2   For any enquiries relating to this Privacy Policy or your personal data, please contact the 666ad Data Protection team using the contact details provided in Section 16 of this Policy.

3 Categories of Personal Data We Collect

3.1   666ad collects the following categories of personal data from users, as applicable to the type of activity being carried out:

3.2   666ad does not collect special categories of personal data (as defined under applicable data protection law, such as health data or biometric data) unless specifically required by regulatory obligations and with explicit user consent.

4 How We Collect Your Data

4.1   666ad collects personal data through the following channels:

• Direct Submission: Data you provide when registering a 666ad account, completing identity verification, making deposits or withdrawals, contacting support, or setting responsible gaming preferences;
• Automated Technical Collection: Data collected automatically when you access the 666ad platform, including IP address, device identifiers, session data, and cookie-based information;
• Transaction Records: Data generated as a result of financial transactions processed through JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank in connection with your 666ad account;
• Third-Party Identity Verification: Data received from third-party KYC service providers where 666ad engages such providers to assist with identity verification and anti-money laundering (AML) obligations;
• Game Provider Systems: Game result data and session records received from 666ad's licensed game suppliers in connection with your use of casino games, live dealer tables, and sports betting markets.

5 Legal Basis for Processing

5.1   666ad processes your personal data on the following legal bases, as applicable:

• Contractual Necessity: Processing required to perform the contract between you and 666ad — including account management, game access, payment processing, and withdrawal services;
• Legal Obligation: Processing required to comply with applicable regulatory requirements, including anti-money laundering (AML) laws, Know Your Customer (KYC) obligations, and gaming licence conditions;
• Legitimate Interests: Processing carried out for 666ad's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests do not override your fundamental rights;
• Consent: Processing based on your explicit consent where required by applicable law, including in relation to certain marketing communications and optional data uses.

6 How We Use Your Personal Data

6.1   666ad uses the personal data it collects for the following purposes:

• Account Management: Creating, maintaining, and administering your 666ad account, including the processing of your 666ad Login credentials and account preferences;
• Identity and Age Verification: Confirming that you meet the 21+ age requirement and verifying your identity as required by our gaming licence and AML obligations;
• Payment Processing: Facilitating deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank and processing withdrawal requests to your designated PKR-denominated account;
• Regulatory Compliance: Meeting obligations imposed by 666ad's gaming licence, including transaction monitoring, suspicious activity reporting, and record-keeping;
• Responsible Gaming: Monitoring your gaming activity to identify patterns that may indicate problematic gambling behaviour and, where appropriate, proactively reaching out with responsible gaming support;
• Platform Security and Fraud Prevention: Detecting and preventing unauthorised account access, fraudulent transactions, collusion, and bonus abuse;
• Customer Support: Responding to enquiries, resolving disputes, and processing requests submitted via the 666ad live chat or email support channels;
• Service Improvement: Analysing aggregated usage data to improve the performance, design, and product offering of the 666ad platform.

7 Data Sharing and Disclosure

7.1   666ad does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data may be shared with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Gaming Licence Regulatory Authority: As required by the conditions of 666ad's operating licence;
• Payment Service Providers: Including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, for the processing of deposits and withdrawals;
• KYC and AML Service Providers: Third-party identity verification and fraud screening providers engaged to assist 666ad in meeting its legal obligations;
• Game Content Providers: Licensed game suppliers who operate game servers and may receive game session identifiers to deliver game outcomes and calculate results;
• IT and Infrastructure Providers: Cloud hosting and platform infrastructure providers operating under data processing agreements with appropriate contractual safeguards;
• Law Enforcement and Regulatory Bodies: Where disclosure is required by law, court order, or request from a competent regulatory authority.

7.2   All third parties with whom 666ad shares personal data are required to handle that data in accordance with applicable data protection laws and under contractual obligations of confidentiality and security.

8 Payment Data

8.1   When you make a deposit or request a withdrawal through your 666ad account using JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, your payment details are processed directly by the relevant payment service provider. 666ad does not store full payment credentials (such as complete bank account numbers or mobile wallet PINs) on its own servers.

8.2   666ad retains transaction reference records, including the payment method type, transaction amount in PKR, timestamp, and a truncated account identifier, for the purposes of transaction reconciliation, fraud prevention, and AML compliance.

9 Cookies and Tracking Technologies

9.1   The 666ad platform uses cookies and similar tracking technologies to support essential platform functions and improve user experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function — including session management, 666ad Login authentication, and security token delivery. These cannot be disabled without impairing access to the platform;
• Functional Cookies: Enable the platform to remember your preferences, such as language settings, responsible gaming limit configurations, and last-used payment method;
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the 666ad platform, helping us improve navigation, loading performance, and game discovery;
• Security Cookies: Used to detect fraudulent activity, identify suspicious session behaviour, and protect account integrity.

9.2   You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to log into and use the 666ad platform.

10 Data Security

10.1   666ad implements and maintains technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between user devices and 666ad servers;
• Encryption of sensitive personal data fields at rest;
• Role-based access controls limiting internal staff access to personal data on a need-to-know basis;
• Regular independent security audits and penetration testing of platform infrastructure;
• Automated monitoring systems to detect and alert on suspicious login attempts and unusual account activity;
• Two-factor authentication available to all registered 666ad users.

10.2   In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 666ad will notify affected users and the relevant supervisory authority within the timeframes required by applicable law.

11 Data Retention

11.1   666ad retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations.

11.2   General retention periods applied by 666ad are as follows:

• Account Data: Retained for the duration of account activity and for a period of five (5) years following account closure, in accordance with AML regulatory requirements;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required under applicable financial regulation;
• KYC Verification Documents: Retained for five (5) years following the conclusion of the business relationship;
• Support Communications: Retained for two (2) years from the date of the last interaction;
• Technical Logs: Retained for twelve (12) months from creation, unless required for longer by an active investigation.

11.3   Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with 666ad's internal data deletion procedures.

12 Your Data Rights

12.1   Subject to applicable data protection law and any overriding legal obligations, you have the following rights in relation to your personal data held by 666ad:

• Right of Access: The right to request a copy of the personal data 666ad holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure: The right to request deletion of your personal data, subject to 666ad's legal retention obligations;
• Right to Restriction: The right to request that processing of your personal data be restricted in certain circumstances;
• Right to Data Portability: The right to receive your personal data in a structured, machine-readable format where technically feasible;
• Right to Object: The right to object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes;
• Right to Withdraw Consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting prior processing.

12.2   To exercise any of the above rights, please contact the 666ad support team via live chat or by email at the address provided in Section 16. 666ad will respond to verified data rights requests within 30 days of receipt.

13 Protection of Minors

13.1   The 666ad platform is strictly restricted to individuals aged 21 years and above. 666ad does not knowingly collect or process personal data from persons under the age of 21.

13.2   Where 666ad becomes aware that personal data has been collected from a person under the age of 21, such data will be deleted immediately and the associated account permanently closed. 666ad applies age verification checks during the registration and KYC processes precisely to prevent underage access.

13.3   If you are a parent or guardian and believe that a person under the age of 21 in your care has created a 666ad account, please contact our support team immediately so that appropriate action can be taken.

14 International Data Transfers

14.1   As a platform operating under an international gaming licence, certain personal data processed by 666ad may be transferred to and stored in countries outside Pakistan. Where such transfers occur, 666ad ensures that appropriate safeguards are in place to protect your personal data, including contractual obligations consistent with applicable data protection standards.

14.2   All game providers, KYC partners, and infrastructure providers engaged by 666ad and operating outside Pakistan are subject to data processing agreements that impose equivalent data protection obligations.

15 Updates to This Privacy Policy

15.1   666ad reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or the nature of the platform's services. Material changes will be notified to registered users via the mobile number or email address associated with their 666ad account, or through a prominent notice on the platform.

15.2   The effective date at the top of this Policy will be updated whenever a new version is published. We encourage you to review this page periodically to stay informed of how 666ad manages your personal data.

15.3   Continued use of the 666ad platform following notification of an updated Privacy Policy constitutes your acceptance of the revised terms.

16 Contact & Data Requests

For all privacy-related enquiries, data access requests, consent withdrawal requests, or data erasure requests, please contact the 666ad Data Protection team through the following channel: