666ef Privacy Policy

1

Introduction

This Privacy Policy ("Policy") describes how 666ef ("666ef", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "Player") who access or use the 666ef website at https://666ef.org and all associated products and services, including the 666ef sportsbook, live casino, slot games, customer support channels, and promotional communications.

666ef takes the privacy of Pakistani players seriously. We understand that when you register an account on 666ef, you are trusting us with sensitive personal and financial information. That trust is something we do not take lightly, and this Policy is our commitment to you about precisely how that data is handled — from the moment it is collected to the moment it is deleted.

This Privacy Policy should be read together with the 666ef Terms & Conditions and Responsible Gaming Policy, both of which form part of your overall agreement with 666ef.

2

Data We Collect

666ef collects personal data from you in several different ways depending on how you interact with the platform. The categories of personal data we collect are described in detail below.

2.1 Registration Data

When you open a 666ef account, we collect the information you provide during the registration process, including:

• Full legal name (as it appears on your CNIC or passport)
• Date of birth (to verify you are 21 years of age or older)
• Pakistani mobile number (JazzCash or standard SIM registered in your name)
• Email address
• Chosen username and encrypted password
• City and province of residence (e.g., Karachi, Lahore, Islamabad, Faisalabad, Peshawar)

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer obligations, we may request and retain copies of:

• Your Computerised National Identity Card (CNIC) — front and back
• Your passport or other government-issued identification
• Proof of address documents (utility bill or bank statement issued within 90 days)
• Proof of payment method ownership (JazzCash or EasyPaisa account screenshot, bank statement)
• Selfie or live photo verification where required

2.3 Financial Transaction Data

When you deposit or withdraw funds via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20, we collect and retain transaction records including amounts, timestamps, payment method identifiers, and transaction reference numbers.

2.4 Gameplay and Betting Data

We record all betting and gaming activity conducted under your 666ef account, including sports bets placed (cricket, PSL markets, football, UFC, kabaddi), casino game sessions, wager amounts, outcomes, and bonus usage history.

2.5 Technical and Device Data

When you access 666ef, our systems automatically collect certain technical information, including:

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session timestamps and login history
• Pages visited on the 666ef platform and navigation patterns

2.6 Communications Data

We retain records of communications you send to 666ef, including live chat transcripts, support ticket exchanges, and email correspondence. This enables us to maintain a clear service history and resolve disputes effectively.

3

How We Use Your Data

666ef uses the personal data we collect for the following specific purposes:

4

Legal Basis for Processing

666ef processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and 666ef — i.e., operating your account, processing deposits and withdrawals, settling bets, and providing the gaming services you have signed up for.
• Legal Obligation: Processing required for 666ef to comply with applicable legal and regulatory requirements, including KYC identity verification, AML transaction monitoring, and record-keeping obligations under our international gaming licence.
• Legitimate Interests: Processing carried out in pursuit of 666ef's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and internal analytics — provided those interests are not overridden by your fundamental privacy rights.
• Consent: Processing based on the explicit consent you provide, specifically for marketing communications via email or SMS. You may withdraw your consent for marketing at any time by unsubscribing or contacting the support team.

5

Data Sharing and Third Parties

666ef does not sell, rent, or trade your personal data to third parties for commercial marketing purposes under any circumstances. However, in order to operate the 666ef platform effectively and meet our legal obligations, we do share specific categories of data with carefully selected third parties in the following circumstances:

• Payment Processors: We share transaction data with payment service providers (including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and SadaPay operator entities) solely to the extent necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently responsible for their data handling practices.
• Game Software Providers: Our casino and sportsbook software is provided by licensed third-party game developers. These providers may receive anonymised session data necessary for the technical delivery of games and the resolution of RNG or technical malfunction disputes.
• KYC and Identity Verification Partners: 666ef uses licensed third-party identity verification services to process CNIC checks and age verification. These partners are contractually required to process verification data only for the purposes of identity verification and to maintain the same security standards as 666ef.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, a valid court order, or a request from a regulatory authority operating under 666ef's gaming licence jurisdiction, we will disclose personal data to the relevant authority. 666ef cooperates fully with lawful investigations into money laundering, fraud, and match-fixing.
• Professional Advisors: In circumstances requiring legal, accounting, or auditing advice, 666ef may share relevant data with professional advisors who are bound by confidentiality obligations.

6

Cookies and Tracking Technologies

The 666ef platform uses cookies and similar tracking technologies to ensure the proper functioning of the site, maintain your logged-in session, and collect anonymised usage analytics. The following cookie categories are in use on the 666ef platform:

666ef does not use third-party advertising cookies or cross-site tracking pixels. You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from logging in to or using the 666ef platform.

7

Data Retention

666ef retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory and legal obligations. The following retention periods apply:

• Active Account Data: All personal data associated with your 666ef account is retained for the full duration that your account remains active on the platform.
• KYC and Identity Documents: Copies of identity documents submitted during KYC verification are retained for a minimum of five (5) years from the date of submission, in compliance with standard AML record-keeping requirements under our international gaming licence.
• Financial Transaction Records: Deposit and withdrawal records, including payment method details and amounts, are retained for a minimum of five (5) years from the date of the transaction.
• Betting and Gaming Records: Records of bets placed, game session data, and bonus usage are retained for a minimum of three (3) years from the date of the relevant activity.
• Customer Support Communications: Live chat transcripts, email exchanges, and support ticket records are retained for two (2) years from the date of the final communication in the exchange.
• Closed Account Data: Following voluntary or involuntary account closure, 666ef retains your personal data for the periods specified above, after which it is securely deleted or irreversibly anonymised.

8

Data Security

666ef implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• TLS Encryption: All data in transit between your device and 666ef servers is encrypted using Transport Layer Security (TLS 1.2 or higher). The 666ef platform enforces HTTPS across all pages.
• Password Hashing: Your account password is never stored in plain text. It is processed using industry-standard one-way cryptographic hashing before storage.
• Access Controls: Access to production systems and player data is restricted on a strict need-to-know basis. All internal access is logged and subject to periodic review.
• Firewall and Intrusion Detection: 666ef infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems monitored around the clock.
• Regular Security Audits: 666ef undergoes periodic security assessments and penetration testing conducted by independent security professionals.
• Two-Factor Authentication: 666ef offers optional two-factor authentication (2FA) for player accounts. Pakistani players are strongly encouraged to enable 2FA through their account security settings.

While 666ef takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials and for notifying 666ef immediately if you suspect any unauthorised access to your account.

9

Your Privacy Rights

As a 666ef player, you hold specific rights in relation to your personal data. 666ef is committed to honouring these rights in a timely and transparent manner. Your rights include:

• Right of Access: You may request a copy of all personal data that 666ef holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of receiving your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor updates — such as your email address or contact number — can be made directly in your account settings.
• Right to Erasure: You may request that 666ef delete your personal data. We will comply with erasure requests where there is no overriding legal obligation that requires us to retain the data (such as AML record-keeping requirements). Where full deletion is not legally possible, we will explain the specific reason.
• Right to Restriction of Processing: You may request that 666ef temporarily suspend the processing of your data in certain circumstances — for example, while a dispute regarding data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, you may request that we provide your personal data in a portable format so that it can be transferred to another service provider.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of an objection to marketing, 666ef will immediately cease sending you promotional communications.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights described above, please contact the 666ef Data Privacy team through the support channel. All privacy rights requests are processed free of charge. We may need to verify your identity before fulfilling a request in order to protect against unauthorised data disclosure.

10

Children's Privacy

The 666ef platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. The collection of personal data from minors is expressly prohibited under 666ef's registration and KYC policies.

Age verification is carried out as part of the registration and KYC process. Where 666ef discovers that an account has been opened by a person under the age of 21 — whether through verification checks, player self-disclosure, or third-party report — the following actions will be taken immediately:

• The account will be permanently closed without notice.
• All funds deposited by the underage user will be returned to the original payment method after deducting any winnings, which are non-payable.
• All personal data collected in relation to the underage account will be deleted from active systems as soon as legally permissible, subject to any regulatory reporting obligations.
• The incident may be reported to relevant child protection or regulatory authorities where required.

11

International Data Transfers

666ef is operated by an internationally licensed gaming entity. As a result, your personal data may be transferred to and processed in countries outside of Pakistan, including the jurisdiction in which 666ef holds its gaming licence and the locations of our approved third-party service providers.

Where personal data is transferred internationally, 666ef ensures that appropriate safeguards are in place to protect your data to a standard equivalent to, or exceeding, the standard applied within Pakistan. These safeguards may include:

• Contractual data protection clauses that are binding on the receiving party
• Transfers to jurisdictions that maintain recognised data protection frameworks or adequacy decisions
• Technical and organisational security measures appropriate to the risk profile of the transfer

By using the 666ef platform, you acknowledge and consent to the transfer of your personal data to international locations as described in this section, subject to the safeguards outlined above.

12

Updates to This Privacy Policy

666ef reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our operating model. When we make material changes to this Policy, we will:

• Update the "Last Updated" date shown at the top of this page and in the header of the policy document.
• Display a prominent notification on the 666ef platform for a period of at least 14 days following publication of the updated Policy.
• Send a notification email to your registered 666ef email address where the changes are significant and directly affect your rights or how your data is processed.

Continued use of the 666ef platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must close your 666ef account and cease using the platform before the effective date of the changes.

Previous versions of this Privacy Policy are available upon request by contacting the 666ef support team.

13

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by 666ef, you are welcome to contact us. Our support team handles all privacy-related enquiries with the highest level of confidentiality.

You may reach the 666ef privacy and data team through the live chat function available within your logged-in account, or via our support email address shown below. For formal data rights requests — such as access, erasure, or portability — we ask that you clearly identify the nature of your request in your message so that it can be directed to the appropriate team member promptly.

When submitting a data rights request or privacy complaint, please include your registered 666ef username and a clear description of your request to help us respond as efficiently as possible.