Privacy Policy – 666q Pakistan Online Gaming Platform

This Privacy Policy explains how 666q collects, uses, stores, and protects personal data relating to individuals who use or interact with the 666q platform. It has been written with Pakistani players in mind and uses plain, accessible English rather than dense legal language. Where important points need emphasis, we include a summary box directly below the relevant section.

666q operates as a digital gaming platform. To deliver our services — account management, secure financial transactions in PKR, game access, bonus administration, and customer support — we necessarily process certain personal information. This policy describes exactly what that information is and how we handle it responsibly.

This policy should be read alongside the 666q Terms and Conditions and our Responsible Gaming policy, both of which form part of the broader agreement between you and 666q. If you have any questions about how your data is handled that aren't answered here, contact us at support@666q.ws.

666q collects personal data in two broad categories: information you provide directly when registering and using the platform, and information that is generated automatically as you use our services. Below is a complete breakdown of both.

Data you provide directly:

• Identity data: Your full legal name, date of birth, and CNIC (Computerised National Identity Card) number or other government-issued ID details where verification is required.
• Contact data: Your Pakistani mobile number and email address (if provided) used to create and secure your 666q account.
• Financial data: Your Easypaisa or JazzCash mobile wallet number, NayaPay or SadaPay account details, IBFT bank account information, or Visa/Mastercard details used for deposits and withdrawals. 666q does not store full card numbers or mobile wallet PINs — these are handled directly by our payment processors.
• Verification documents: Copies of CNIC, utility bills, or other documents submitted in response to identity or payment verification requests.
• Support communications: The content of messages you send to 666q's customer support team, whether via live chat or email, including any attachments.

Data generated automatically:

• Device and technical data: IP address, browser type, operating system, device model, and mobile network information collected when you access 666q.
• Usage and behavioural data: Game history, session durations, pages visited, bet amounts, cash-out patterns, bonus activity, and login timestamps.
• Transaction data: Full records of all deposits, withdrawals, and bonus transactions processed through your 666q account.
• Cookies and similar technologies: Data collected via cookies placed on your device as described in Section 6.

666q collects data through a number of clearly defined channels:

• Registration form: When you sign up for a 666q account, you provide your name, mobile number, and password directly through the registration page.
• Deposit and withdrawal flows: When you transact through the 666q cashier, your payment details are processed by our payment partners. Transaction records are retained by 666q for financial compliance purposes.
• Identity verification requests: When 666q requests verification documents — for large withdrawals, suspicious activity reviews, or routine compliance checks — you submit those documents directly through a secure upload process.
• Customer support interactions: When you contact our support team via live chat or email, your conversation and any attachments are recorded and retained.
• Automated platform monitoring: As you use 666q, our systems automatically log game activity, session data, IP addresses, and device information as part of normal platform operation and fraud prevention.
• Cookies: 666q places cookies on your device when you visit the platform. These collect usage data as described in Section 6. You can manage cookie preferences through your browser settings.
• Third-party payment processors: Our payment partners (such as Easypaisa, JazzCash, and banking partners) share transaction confirmation data with 666q when you deposit or withdraw. They do not share your wallet PINs or full payment credentials.

666q only processes your personal data where there is a legitimate purpose for doing so. Below is a complete list of purposes, matched to the specific data categories involved:

666q does not use your personal data to make automated decisions that have a significant legal or similarly significant effect on you without human oversight. Game outcomes on 666q are determined by RNG systems that operate on game rules — they do not use your personal profile data.

666q does not sell or rent your personal data to any third party for their own marketing purposes. Period. Data sharing at 666q is strictly limited to what is necessary to operate the platform and comply with legal obligations. The categories of recipients are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT partners, and Visa/Mastercard processing networks receive the minimum data required to complete your transactions — typically your wallet number or account details and the transaction amount. These parties operate under their own privacy policies and applicable Pakistani financial regulations.
• Identity verification services: Where 666q uses a third-party provider to assist with CNIC verification or document checks, the relevant identity data is shared only for that specific verification purpose.
• Game providers: Third-party game developers whose products are available on 666q may receive anonymised session and bet data for their own analytics and RTP reporting purposes. They do not receive your name, contact details, or financial information.
• IT and hosting infrastructure: 666q uses third-party server and cloud infrastructure providers to host the platform. These providers process data as data processors under 666q's instructions and are contractually obligated to maintain equivalent data protection standards.
• Legal and regulatory authorities: Where required by applicable law, court order, or a regulatory authority's instruction, 666q may be required to disclose account information and transaction records. 666q will notify you of such requests where legally permitted to do so.

666q uses cookies — small text files placed on your device — and similar technologies to make the platform work correctly and to understand how it's being used. Here's what each type does:

• Essential cookies: Required for the platform to function. These maintain your login session, remember your language preference, and enable secure payment flows. You cannot disable essential cookies without breaking the platform — they are not optional.
• Analytics cookies: Help 666q understand which pages and features are most used, how long sessions last, and where players encounter difficulties. This data is collected in aggregate and is not linked back to individual identities. We use this to improve the platform experience.
• Preference cookies: Remember choices you've made within 666q — such as your preferred game category or display settings — so you don't have to re-select them on each visit.
• Security cookies: Used by our fraud prevention systems to identify unusual access patterns that may indicate account compromise or bot activity.

You can manage non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies, though doing so may affect the functionality of certain 666q features. On mobile, cookie management is available through your browser's settings menu.

Protecting the personal data of 666q's Pakistani players is not something we treat lightly. We have implemented a layered set of technical and organisational security measures, including:

• Encryption in transit: All data transmitted between your device and 666q's servers is encrypted using TLS (Transport Layer Security). The padlock icon in your browser's address bar confirms this protection is active during every session.
• Encryption at rest: Sensitive personal data stored in 666q's databases — including identity data and financial records — is encrypted at rest using industry-standard encryption protocols.
• Access controls: Internal access to player personal data at 666q is restricted on a strict need-to-know basis. Support agents can access only the account data necessary to resolve a specific query. Access is logged and audited.
• Payment data handling: 666q does not store full card numbers, CVV codes, or mobile wallet PINs. Payment credential processing is handled directly by PCI DSS-compliant payment partners.
• Security monitoring: 666q's systems are monitored for intrusion attempts, unusual access patterns, and data exfiltration indicators on a continuous basis.
• Staff training: All 666q team members with access to player data receive data protection training and are bound by confidentiality obligations in their contracts.

Despite these measures, no internet platform can guarantee 100% security. If you become aware of any security vulnerability or suspicious activity on your account, please contact us immediately at support@666q.ws.

666q does not keep personal data for longer than necessary. Retention periods are set according to the purpose of the data and applicable legal requirements:

• Account and identity data: Retained for the lifetime of your account plus a minimum of five years after account closure. This is required for financial regulatory compliance and anti-money laundering obligations.
• Transaction records: All deposit, withdrawal, and betting transaction records are retained for a minimum of five years from the date of the transaction, as required for financial audit purposes.
• Support communications: Chat and email records with 666q's support team are retained for three years from the date of the interaction, unless they relate to a formal complaint that requires longer retention.
• Device and session data: IP logs and device fingerprints used for fraud prevention are retained for 12 months from the date of collection, after which they are deleted or anonymised.
• Analytics data: Aggregated, anonymised usage analytics are retained indefinitely as they cannot be linked back to individual players.
• Marketing preferences: Records of your marketing consent or opt-out choices are retained for as long as they are relevant, and for three years after account closure as evidence of compliance.

When personal data reaches the end of its retention period, 666q deletes it securely or anonymises it in a way that prevents re-identification. Anonymised data may be retained indefinitely for statistical and platform improvement purposes.

As a 666q player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact us at support@666q.ws with the subject line "Data Rights Request" and we will respond within 30 days.

666q's platform is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. Registration requires confirmation of age, and 666q may request proof of age — including CNIC or other official identification — at any point during account verification.

If we discover or are informed that an account belongs to a person under 18 years of age, that account will be immediately suspended. Any deposits made to the account will be refunded to the original payment method after verification of the minor's identity, and any bonuses or winnings accrued will be voided. 666q will not retain any personal data collected from a minor beyond what is strictly necessary for the account closure and refund process.

If you are a parent or guardian and believe a minor has created a 666q account using your information or their own, please contact us immediately at support@666q.ws so we can investigate and take appropriate action.

666q sends communications to players in three categories — transactional, account-related, and promotional. Here's what each means:

• Transactional messages: These include deposit confirmations, withdrawal status updates, account security alerts (such as login from a new device), and password reset messages. These are essential account communications and cannot be opted out of while your account is active.
• Account-related messages: Notifications about changes to these Terms, updates to the Privacy Policy, responsible gaming reminders triggered by your account settings, and verification requests. These are also essential communications.
• Promotional messages: Notifications about new promotions, bonus offers, seasonal events (PSL, Eid), and the 666q refer-a-friend programme. These are sent only to players who have opted in during registration or subsequently through their account settings. You can opt out at any time by updating your communication preferences in your account dashboard or by replying "STOP" to any SMS from 666q.

666q does not share your mobile number or email address with third parties for their own marketing communications. Any 666q promotional message you receive comes from 666q directly — not from a data broker or advertising partner.

666q may update this Privacy Policy from time to time as our services evolve, as legal requirements change, or as we improve our data handling practices. The "Last Updated" date at the top of this page will always reflect when the most recent changes were made.

When changes are material — meaning they significantly affect your rights or how your data is used — 666q will notify active players through their registered mobile number or via an in-platform notification displayed upon next login. We will provide at least 14 days' notice of material changes before they take effect.

Non-material changes — such as corrections to spelling, formatting updates, or clarifications that don't change the substance of any section — may be made without prior notice. Continued use of 666q following any update to this policy constitutes your acceptance of the revised terms. If you do not agree with a change, you should stop using the platform and contact us to discuss your account closure.

If you have any question about this Privacy Policy, want to exercise any of your data rights described in Section 9, or want to raise a concern about how your personal data has been handled at 666q, please contact us:

• Email (preferred for privacy requests): support@666q.ws — use the subject line "Privacy Request" for fastest routing. We will acknowledge data rights requests within 48 hours and provide a full response within 30 days.
• Live Chat: Available within your 666q account at 666q.ws, 24 hours a day, seven days a week, in both Urdu and English.

If you raise a privacy concern with 666q and are not satisfied with our response, you have the right to escalate through the dispute resolution mechanism described in our Terms and Conditions. 666q takes all data privacy complaints seriously and investigates each one fully before providing a written response.

For questions about responsible gaming tools and how your gaming activity data is used to support your wellbeing, please also visit our Responsible Gaming page.