This Privacy Policy explains exactly what personal data 666p collects from its users, how that data is used, with whom it may be shared, how it is secured, and what rights you hold as a 666p account holder. Your privacy is treated as a compliance obligation and an operational standard — not an afterthought.
This Privacy Policy ("Policy") is issued by 666p ("666p", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at 666p.today and all associated subdomains, mobile interfaces, and application interfaces. It governs the collection, processing, storage, disclosure, and deletion of personal data belonging to all individuals ("User", "you", "your") who register, browse, deposit, wager, or otherwise interact with any part of the 666p platform.
666p is committed to handling personal data with transparency, integrity, and proportionality. We collect only the information we genuinely require to operate the platform, meet our legal and regulatory obligations, and provide you with the best possible gaming experience. We do not sell, rent, or trade your personal data to third parties for marketing purposes — under any circumstances.
This Policy should be read in conjunction with the Terms & Conditions and Responsible Gaming policy, both of which form part of the overall agreement between you and 666p. By registering a 666p account, you confirm that you have read and understood this Policy.
The data controller responsible for your personal data is the licensed entity operating the 666p platform under its applicable international gaming licence. For data-related enquiries, including requests to exercise the rights described in Section 12 of this Policy, please contact the 666p data protection team via the live chat facility available at 666p.today or via the support email address displayed in the footer of this page. All data-related requests will be acknowledged within 48 hours and resolved within 30 calendar days.
666p collects personal data across several categories depending on the nature of your interaction with the platform. The following table sets out the categories of data collected, the specific data points within each category, and the primary purpose for which each category is collected.
| Data Category | Specific Data Points | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, nationality | KYC compliance, age verification, fraud prevention |
| Contact Data | Pakistani mobile number, email address, city/province | Account communications, OTP delivery, support |
| Financial Data | JazzCash/EasyPaisa wallet numbers, bank account details, transaction history | Payment processing, AML compliance, withdrawal verification |
| Technical Data | IP address, device ID, browser type, operating system, session tokens | Security, fraud detection, platform performance |
| Usage Data | Pages visited, games played, bet history, session duration, feature interactions | Service improvement, responsible gaming monitoring |
| Communications Data | Live chat transcripts, support ticket content, email correspondence | Dispute resolution, service quality, compliance records |
| Verification Documents | CNIC images, utility bill scans, payment method proof | Identity verification, KYC, AML screening |
Data Minimisation Principle: 666p collects only the personal data that is strictly necessary for the stated purposes above. We do not collect sensitive categories of data (such as health, political, or religious data) and we do not profile users based on protected characteristics.
666p collects personal data through the following mechanisms:
The majority of the personal data 666p holds about you is provided directly by you during the registration process, during identity verification (KYC), when you make deposits or withdrawal requests, when you contact customer support, or when you participate in promotions. You are responsible for ensuring that all information you provide to 666p is accurate, current, and complete.
When you access 666p.today or the 666p mobile interface, technical data is automatically collected by our systems. This includes your IP address, device identifiers, session identifiers, browser characteristics, pages visited, time on page, and interactions with platform features. This data is collected via server logs, session tracking, and first-party cookies. It is used exclusively for platform security, fraud detection, and performance optimisation.
In certain circumstances, 666p may receive or verify your data through regulated third-party sources, including: payment service providers (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) for transaction verification; identity verification services for KYC compliance; and fraud screening databases for anti-money laundering checks. Data obtained from third-party sources is handled with the same security standards as data collected directly from you.
666p processes your personal data only where a valid legal basis exists. The following table outlines our processing purposes and the corresponding legal basis for each:
| Processing Purpose | Legal Basis |
|---|---|
| Account creation and platform access | Performance of contract |
| Processing deposits and withdrawals in PKR | Performance of contract |
| KYC identity verification and age verification (21+) | Legal obligation |
| Anti-money laundering (AML) screening | Legal obligation |
| Fraud prevention and platform security | Legitimate interests |
| Responsible gaming monitoring and intervention | Legal obligation / Legitimate interests |
| Customer support and dispute resolution | Performance of contract |
| Platform performance analysis and improvement | Legitimate interests |
| Sending transactional account notifications | Performance of contract |
| Sending promotional communications (where opted in) | Consent |
Marketing Communications: 666p will only send promotional messages to your registered mobile number or email address where you have provided explicit consent at registration or via your account notification preferences. You may withdraw consent for marketing communications at any time through your account settings or by contacting 666p support.
666p does not sell, rent, or share your personal data with third parties for their own commercial or marketing purposes. Your personal data may be disclosed to third parties only in the following circumstances, and only to the minimum extent necessary:
To process your deposits and withdrawals, 666p shares the necessary financial data with the payment service providers you have selected — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa/Mastercard. These providers are bound by their own data protection obligations and are only permitted to use your data for the purposes of processing the specific transaction.
To fulfil KYC and anti-money laundering obligations, 666p works with regulated third-party identity verification services. These providers may access the identity documents and personal details you submit during the verification process. All such providers are contractually bound to process your data solely for verification purposes and in accordance with applicable data protection standards.
666p may be required by its gaming regulator, a court order, or applicable law to disclose certain account or transaction data to relevant authorities. 666p will comply with all such legally mandated disclosures and, where legally permissible, will notify you of any such request.
666p engages a small number of trusted technology service providers for platform infrastructure, data hosting, and analytics. These providers operate as data processors acting on 666p's instructions only, and are bound by strict data processing agreements that prohibit any use of your data for their own purposes.
Given that 666p operates under an international gaming licence, your personal data may be processed and stored on servers located outside of Pakistan. Where your data is transferred internationally, 666p ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection frameworks. These safeguards may include contractual data transfer agreements, adequacy decisions, or equivalent mechanisms.
All 666p data infrastructure is subject to the security standards described in Section 9 of this Policy, regardless of the geographic location of the servers on which data is stored. Physical server location does not affect the protections applied to your data.
666p retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data (active accounts) | Duration of account + 5 years post-closure | AML / Regulatory requirement |
| Transaction and financial records | 5 years from transaction date | AML / Legal obligation |
| KYC verification documents | 5 years from submission date | Regulatory requirement |
| Support and communications data | 3 years from last interaction | Dispute resolution / Legitimate interest |
| Technical / session logs | 12 months rolling | Security / Fraud prevention |
| Marketing consent records | Until consent withdrawn + 1 year | Compliance with consent obligations |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 666p's internal data disposal procedures. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and service improvement purposes.
666p implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include, but are not limited to:
Despite 666p's extensive security measures, no online platform can guarantee absolute immunity from all possible security threats. In the event of a data breach that is likely to result in a risk to your rights, 666p will notify you and the relevant regulatory authority without undue delay and in accordance with applicable notification obligations.
666p uses first-party cookies and similar technologies (such as session tokens and local storage) to operate the platform correctly, maintain your login session, remember your preferences, and monitor platform performance. 666p does not use third-party advertising cookies or cross-site tracking technologies.
Certain cookies are strictly necessary for the 666p platform to function. These include session authentication cookies, CSRF protection tokens, and load balancing cookies. These cookies cannot be disabled without preventing you from using the platform.
666p uses first-party analytics cookies to understand how users navigate the platform, which pages are most visited, and where technical issues may occur. The data collected through analytics cookies is aggregated and anonymised. No individual user's browsing behaviour is shared with third parties via analytics cookies.
You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 666p platform, including login persistence and session security.
The 666p platform is strictly intended for adults aged 21 years and over. 666p does not knowingly collect personal data from individuals under the age of 21. Age verification checks are applied at registration and during the KYC process. Where 666p becomes aware that personal data has been collected from an individual who is under 21 years of age, that data will be deleted promptly, the associated account will be permanently closed, and any balance or winnings will be forfeited.
If you are a parent or guardian and believe that a minor has registered on 666p using false age information, please contact 666p support immediately via the live chat facility on 666p.today so that the matter can be investigated and the account closed without delay.
As a 666p account holder, you hold the following rights with respect to the personal data 666p holds about you. To exercise any of these rights, contact the 666p data protection team via live chat or the support email displayed in the footer of this page. All requests will be acknowledged within 48 hours and resolved within 30 calendar days.
666p reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or platform operations. Material changes to this Policy will be communicated to registered users via their registered mobile number or email address, and/or via a notice on the 666p.today homepage, at least seven (7) calendar days before the changes take effect — except where immediate amendment is required for urgent legal or security reasons.
Your continued use of the 666p platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not accept the changes, you must close your account before the effective date of the amendment. The most current version of this Policy is always accessible at 666p.today/privacy-policy.
For all privacy-related enquiries, data access requests, data deletion requests, marketing opt-out requests, or complaints regarding 666p's handling of your personal data, please contact the 666p data protection team through one of the following channels:
666p aims to resolve all data-related requests within 30 calendar days of receipt of a verified request. Where a request is particularly complex or where a high volume of requests has been received simultaneously, the resolution period may be extended by a further 30 days, with notification provided to the requesting user.
If you are not satisfied with 666p's response to a data-related complaint, you have the right to escalate the matter to the relevant data protection supervisory authority under the jurisdiction of 666p's operating licence. Contact 666p support for details of the applicable authority.
These rights are guaranteed to all 666p account holders and can be exercised free of charge at any time through 666p support.
Request a copy of all personal data 666p holds about you, including the categories of data, purposes of processing, and third parties with whom it has been shared.
Request correction of any inaccurate or incomplete personal data 666p holds about you. Account profile data can also be updated directly within your account settings.
Request deletion of your personal data where 666p no longer has a legal basis for retaining it. Note that AML and KYC retention obligations may restrict full erasure for a period after account closure.
Request that 666p restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
Request that personal data you have provided to 666p be delivered to you in a structured, machine-readable format. This right applies to data processed on the basis of your consent or a contract.
Object to 666p's processing of your personal data where that processing is based on legitimate interests or where it is used for direct marketing communications. Marketing objections are honoured immediately.
Beyond the legal text — here is what our privacy commitment looks like in your day-to-day experience on the 666p platform.
Every interaction between your device and 666p — including login, deposits, game play, and withdrawals — is protected by 256-bit SSL encryption. Your JazzCash and EasyPaisa wallet numbers are never stored in plain text on 666p systems.
666p does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing agencies. Your data is used exclusively to operate the 666p platform and meet our legal obligations. That is a firm policy, not a marketing claim.
666p collects only the data we genuinely need to verify your identity, process your payments, and meet regulatory obligations. We do not track your browsing behaviour outside of 666p.today, and we do not use third-party advertising trackers.
Your 666p account dashboard gives you direct control over notification preferences, marketing opt-ins, and session settings. Full data access, rectification, and deletion requests are handled by our support team within 30 days at no charge.
Once your 666p account has been closed for five years, all personal data associated with that account is securely and permanently deleted from 666p systems. We do not hold your data indefinitely — we delete it as soon as legally permissible.
Data-related questions and requests are handled through the same 24/7 live chat facility as all other 666p support queries. Whether you speak Urdu or English, privacy support is available around the clock with no wait times.
Play with confidence knowing your personal data is encrypted, your financial details are secure, and your rights are guaranteed under this Privacy Policy.
Log In to 666p Read Terms & ConditionsMust be 21+ to register and play. All data protected under 256-bit SSL encryption.