666rs Privacy Policy —
Your Data, Your Rights

This Privacy Policy ("Policy") describes how 666rs ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of individuals ("you", "your", "the Player") who access or use the 666rs website located at https://666rs.im, including all associated services such as sports betting, live casino, slot games, customer support, and promotional communications.

666rs operates under an international gaming licence and is subject to the data protection obligations imposed by that licence's regulatory framework. In addition to those obligations, 666rs voluntarily applies internationally recognised data protection principles — including purpose limitation, data minimisation, storage limitation, integrity, and confidentiality — as the baseline standard for handling all player data.

This Policy should be read alongside the 666rs Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and those documents on matters of data privacy, this Privacy Policy shall take precedence.

666rs collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and from third-party verification and payment service providers. The categories of personal data we collect are set out below.

666rs does not collect any special categories of sensitive personal data (such as biometric data, health information, or political opinions) except where this is strictly required by our regulatory obligations and with your explicit prior consent. We do not collect data from social media profiles unless you explicitly choose to connect a social account to your 666rs profile where that feature is available.

666rs uses the personal data it collects for clearly defined operational and compliance purposes. We do not use your data in ways that are incompatible with the purposes described at the time of collection. The primary purposes for which 666rs processes your personal data are as follows:

• Account Management: To register, authenticate, and maintain your 666rs player account, including processing login requests, managing your account settings, and verifying your identity during support interactions.
• Transaction Processing: To process deposits, withdrawals, and bonus credits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT — and to maintain accurate financial records of all transactions associated with your account.
• KYC & Regulatory Compliance: To verify your age (21+), identity, and the source of funds deposited, in fulfilment of our international gaming licence obligations and applicable anti-money laundering requirements.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, optimise game performance, and develop new features and services that better serve Pakistani players.
• Responsible Gaming: To monitor gambling behaviour patterns that may indicate problem gambling, to enforce self-exclusion and deposit limit requests, and to fulfil our responsible gaming obligations under our gaming licence.
• Marketing & Promotions: To send you relevant promotional offers, bonus alerts, and platform news where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account compromises, money laundering, and other prohibited conduct on the 666rs platform.
• Legal Obligations: To respond to lawful requests from regulatory authorities, law enforcement agencies, or courts having jurisdiction over 666rs's operations.

666rs processes your personal data on the following legal bases, each of which applies to specific processing activities as described:

• Contractual Necessity: The majority of processing activities — including account creation, transaction processing, and customer support — are necessary for the performance of the contract between you and 666rs (i.e., the Terms & Conditions you accepted upon registration). Without this processing, 666rs cannot provide you with its services.
• Legal Obligation: KYC verification, AML monitoring, and the retention of transaction records are carried out because they are required by the regulatory framework under which 666rs holds its gaming licence. 666rs cannot waive these obligations regardless of player preference.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is carried out on the basis of 666rs's legitimate interests in operating a secure, compliant, and well-functioning platform. These interests have been assessed and do not override your fundamental privacy rights.
• Consent: Marketing communications and non-essential cookies are processed only on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

666rs does not sell or rent your personal data to any third party for their own commercial purposes. Your data is shared only in the limited circumstances described below, and only with third parties who are contractually bound to process it in a manner consistent with this Privacy Policy and applicable data protection standards.

• KYC & Identity Verification Providers: 666rs uses specialist third-party KYC providers to verify the authenticity of identity documents submitted by players. These providers receive the minimum necessary data to perform the verification and are prohibited from using it for any other purpose.
• Payment Processors: Transaction data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency payment gateways as necessary to process deposits and withdrawals. Each payment provider is subject to its own regulatory and privacy obligations.
• Game Software Providers: Game providers such as Pragmatic Play, PG Soft, and others may receive anonymised or pseudonymised technical data (such as session identifiers) to facilitate game loading and RNG certification. These providers do not receive your full personal profile.
• Regulatory & Law Enforcement Authorities: 666rs will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by law, by court order, or in response to a lawful regulatory request under our gaming licence obligations.
• Fraud Prevention Services: 666rs may share data with industry-standard fraud prevention networks to identify and block fraudulent accounts, compromised payment methods, or suspicious betting patterns that threaten the integrity of the platform.

666rs uses cookies, web beacons, pixel tags, and similar tracking technologies on the 666rs website and platform. These technologies help us deliver a functional, personalised, and secure experience to players. The categories of cookies used by 666rs are as follows:

• Strictly Necessary Cookies: These cookies are essential for the 666rs platform to function. They enable you to log in, maintain your session, and use core platform features such as the betting slip, game lobby, and account dashboard. These cookies cannot be disabled as they are intrinsic to the operation of the platform.
• Performance & Analytics Cookies: These cookies collect anonymised information about how players use the 666rs website — such as which pages are visited most frequently and how long players spend on each section. This data is used exclusively to improve the platform. These cookies require your consent.
• Functional Cookies: These cookies remember your preferences — such as your chosen language, display settings, and preferred game categories — to provide a more personalised experience on subsequent visits. These cookies require your consent.
• Marketing Cookies: Where you have consented to marketing communications, 666rs may use cookies to track the effectiveness of promotional campaigns and to serve relevant bonus offers within the platform. These cookies do not track you across external third-party websites.

666rs implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes, but is not limited to, the following measures:

• All data in transit between your device and 666rs servers is encrypted using SSL/TLS 1.3, the current industry standard for web encryption.
• Personal data stored on 666rs servers is encrypted at rest using AES-256 encryption. Access to stored data is restricted on a strict need-to-know basis and requires multi-factor authentication for all administrative access.
• KYC documents and financial data are stored in isolated, access-controlled environments that are logically separated from general platform infrastructure.
• 666rs conducts regular internal security audits and vulnerability assessments. Critical infrastructure is subject to periodic third-party penetration testing.
• All 666rs personnel with access to player data are subject to confidentiality obligations and receive regular training on data protection best practices.
• In the event of a data breach that poses a risk to player rights, 666rs will notify affected players and the relevant regulatory authority within the timeframes required by our licence obligations.

666rs retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, subject to any longer retention periods required by our international gaming licence obligations and applicable legal requirements. The following retention periods apply as a general guide:

• Active Account Data: Retained for the duration of your active account relationship with 666rs, plus a minimum period of five (5) years following account closure to satisfy AML and gaming regulatory requirements.
• Transaction Records: Financial transaction records are retained for a minimum of seven (7) years from the date of the transaction in compliance with standard financial record-keeping obligations applicable to licensed gaming operators.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years from the date of submission, or longer if required by applicable regulatory guidance.
• Customer Support Communications: Live chat transcripts and support ticket records are retained for a period of three (3) years from the date of the interaction, unless the content of the communication is relevant to an ongoing dispute or investigation, in which case it may be retained for longer.
• Marketing Consent Records: Records of marketing consent and opt-out requests are retained for the duration of the account relationship and for a period sufficient to demonstrate compliance with applicable consent requirements.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes it impossible to re-identify the individual to whom it related. Anonymised data may be retained indefinitely for statistical and analytical purposes.

As a player whose personal data is processed by 666rs, you hold the following rights in relation to your data. 666rs is committed to facilitating the exercise of these rights in a timely and transparent manner. To exercise any of the rights listed below, please contact us at [email protected] with the subject line "Data Rights Request".

• Right of Access: You have the right to request a copy of all personal data that 666rs holds about you. We will provide this in a structured, commonly used, and machine-readable format within 30 days of your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain account details directly through your 666rs account settings panel.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Please note that this right is subject to our legal retention obligations — we cannot delete data we are required by law or regulation to retain.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a portable format and to request that it be transferred directly to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.

666rs is strictly an adult platform. The minimum age to register and use the 666rs platform is 21 years. 666rs does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. Age verification is a mandatory step in the KYC process for all players, and any account identified as belonging to a person under the minimum age will be immediately suspended and all associated data handled in accordance with applicable regulatory guidance.

666rs strongly encourages parents and guardians in Pakistan to use reputable parental control software to prevent minors from accessing online gambling sites. Resources and guidance on available parental control tools are available on our Responsible Gaming page.

666rs operates under an international gaming licence and, as a result, some of the personal data we collect may be transferred to, stored in, or processed in countries outside of Pakistan. This includes transfers to our KYC verification providers, payment processing partners, and game software suppliers, who may operate servers in various jurisdictions around the world.

Where such international transfers take place, 666rs ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. These safeguards include:

• Binding contractual clauses in all data processing agreements with third-party service providers that impose data protection obligations consistent with internationally recognised standards.
• Transfers to service providers located in jurisdictions that maintain recognised data protection frameworks and are subject to regulatory oversight.
• Encryption of data in transit for all cross-border transfers, ensuring that data cannot be intercepted or accessed by unauthorised parties during transmission.

666rs reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, updates to our platform services, changes in applicable law or regulatory guidance, or amendments required by our international gaming licence obligations.

When material changes are made to this Policy, 666rs will notify registered players by one or more of the following methods: an email notification sent to your registered email address, a prominent notice displayed on the 666rs website, or a notification upon your next login to the platform. The revised Policy will clearly state the effective date from which it applies.

The version number and effective date displayed at the top of this page will always reflect the most current version of the 666rs Privacy Policy. Prior versions of the Policy may be requested by contacting us at [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 666rs processes your personal data, please do not hesitate to get in touch. Our dedicated support team handles all data privacy enquiries and is committed to responding promptly and transparently.

• Email: [email protected] — For all data rights requests, please use the subject line "Data Rights Request". For privacy concerns or complaints, use the subject line "Privacy Concern".
• Live Chat: Our 24/7 live chat support is available directly on the 666rs platform for general queries. For formal data rights requests, written communication via email is preferred to ensure a proper record is maintained.
• Response Time: 666rs aims to acknowledge all privacy-related enquiries within 5 business days and to provide a full response within 30 calendar days.

666rs is committed to resolving all privacy concerns fairly and efficiently. We treat every data rights request and privacy complaint with the seriousness it deserves — because your trust is the foundation on which the 666rs platform is built.