Privacy Policy
for 666p3 Platform

1. Introduction

This Privacy Policy ("Policy") sets out how 666p3 ("we", "us", "our") collects, uses, stores, protects and shares personal information obtained from users ("you") of the 666p3 platform accessible at https://666p3.cam (the "Platform").

666p3 operates as an English-language online betting and casino information platform serving users across Pakistan — including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — and in other jurisdictions where access to the Platform is not restricted. This Policy applies to all users of the Platform regardless of geographic location.

We are committed to handling your personal data lawfully, fairly and transparently. This Policy is intended to be clear and readable — not a wall of impenetrable legal text. If you have any questions after reading it, please contact us using the details in Section 17.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy.

2. Definitions

The following definitions apply throughout this Policy:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or indirectly.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. For this Platform, 666p3 is the Data Controller.
• "Data Processor" means any third party that processes personal data on behalf of the Data Controller under a contractual arrangement.
• "Consent" means a freely given, specific, informed and unambiguous indication of the data subject's agreement to processing their personal data.
• "Cookies" means small text files placed on your device by the Platform to store session and preference data.
• "Third Party" means any individual or organisation other than you, 666p3 or our authorised Data Processors.
• "KYC Data" means identity verification documents and information collected as part of the Know Your Customer process, including CNIC, passport scans, selfies and proof of address.

3. Data Controller

666p3 is the Data Controller for personal data collected through the Platform. As Data Controller, we are responsible for ensuring that your data is processed in accordance with this Policy and applicable data protection law.

For all data protection enquiries, including requests to exercise your rights under Section 12, please contact us at [email protected]. We aim to acknowledge all formal data protection requests within 72 hours and respond fully within 30 calendar days.

4. Data We Collect

We collect personal data in the following categories, depending on how you interact with the Platform:

Category	Examples	Collection Method
Identity Data	Full name, date of birth, gender, CNIC or passport number	Registration form, KYC verification
Contact Data	Email address, phone number, city/region (e.g., Karachi, Lahore)	Account registration, contact forms
Financial Data	Payment method type (e.g., Easypaisa, JazzCash, bank transfer), transaction reference numbers	Deposit/withdrawal flow, operator integration
Technical Data	IP address, browser type and version, device type, operating system, time zone, screen resolution	Automatic collection via server logs and cookies
Usage Data	Pages visited, time on page, click paths, referral source, search queries entered on Platform	Analytics tools, server logs
KYC Documents	Scanned CNIC or passport, selfie/liveness image, proof of address document	Secure verification portal (HTTPS only)
Communications Data	Content of support messages, live chat transcripts, email correspondence	Support channels, live chat system

We do not collect full payment card numbers, CVV codes, bank PINs or mobile wallet PINs directly. Any financial transaction data passed through the Platform is handled by PCI-compliant payment processors under their own privacy frameworks.

5. Legal Basis for Processing

We rely on the following legal bases to process your personal data, depending on the activity:

• Contractual Necessity: Processing required to perform our contract with you — including account registration, transaction processing and delivering Platform services;
• Legitimate Interests: Processing carried out to pursue our legitimate business interests, such as fraud prevention, Platform security, analytics and service improvement, where those interests are not overridden by your rights;
• Legal Obligation: Processing necessary to comply with AML, KYC and other applicable legal obligations;
• Consent: Processing based on your freely given consent, such as marketing communications or optional analytics tracking. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. How We Use Your Data

We use the personal data we collect for the following purposes:

• To create, verify and manage your 666p3 account;
• To process deposits, withdrawals and transaction records in PKR and other applicable currencies;
• To conduct KYC identity and age (18+) verification in compliance with applicable requirements;
• To deliver customer support via email and live chat in English (Urdu available on request);
• To operate responsible gambling controls including deposit limits, cool-off periods and self-exclusion;
• To detect and prevent fraud, money laundering, account sharing and other prohibited conduct;
• To analyse Platform usage and improve content quality, navigation and user experience;
• To communicate service updates, policy changes and security notifications;
• To send marketing communications where you have provided explicit consent (you may opt out at any time);
• To comply with applicable legal requirements and respond to lawful requests from regulatory authorities.

We do not use your personal data to make fully automated decisions that produce legal or similarly significant effects on you without human oversight.

7. Data Sharing & Disclosure

666p3 does not sell, rent or trade your personal data. We share data only in the following limited circumstances:

• Service Providers (Data Processors): Third-party companies engaged to support Platform operations, including hosting providers, analytics platforms, KYC verification services and payment processors. All processors are bound by data processing agreements that restrict their use of your data to the purposes for which it was shared;
• Operator Partners: Where you interact with an Operator referenced on 666p3, relevant account and transaction data may be shared with that Operator under their own privacy policy. We recommend reviewing each Operator's privacy documentation;
• Legal and Regulatory Authorities: Where required by applicable law, court order or regulatory direction, we may disclose personal data to relevant authorities. We will notify you of such disclosures where legally permitted to do so;
• Business Transfers: In the event of a merger, acquisition or asset sale involving 666p3, personal data may form part of the transferred assets. Users will be notified in advance where feasible and permitted.

Payment method names referenced on the Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are provided as familiar local references only. Sharing payment data with these providers occurs only through their standard secure processing infrastructure and does not imply any partnership with or endorsement of gambling by these institutions.

8. International Data Transfers

The Platform and certain of our service providers operate infrastructure located outside Pakistan. Your personal data may therefore be transferred to, stored in, or processed in countries other than Pakistan. Where such transfers occur, we ensure that appropriate safeguards are in place — such as standard contractual clauses or equivalent data transfer mechanisms — to protect your data at a level consistent with applicable data protection standards.

If you are located in Pakistan and your data is transferred internationally, you acknowledge that data protection standards in the destination country may differ from those in Pakistan. We take reasonable steps to ensure your data remains protected regardless of where it is processed.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory or contractual obligations. The following general retention guidelines apply:

• Account Data: Retained for the duration of the account's active status and for a minimum of 5 years following account closure, in compliance with AML record-keeping obligations;
• KYC Documents: Retained for a minimum of 5 years from the date of submission or the date of last transaction, whichever is later;
• Transaction Records: Retained for a minimum of 5 years in accordance with standard financial record-keeping requirements;
• Support Communications: Retained for up to 2 years from the date of last interaction;
• Technical & Usage Data (Logs): Retained for up to 12 months for security monitoring and analytics purposes;
• Marketing Consent Records: Retained until consent is withdrawn and for 1 year thereafter as evidence of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents identification.

10. Security Measures

666p3 takes the security of your personal data seriously. We implement and maintain the following technical and organisational security measures:

• SSL/TLS encryption for all data transmissions between your device and our servers;
• Encryption at rest for sensitive data categories, including KYC documents and financial data;
• Role-based access controls limiting internal access to personal data to authorised personnel only;
• Regular security assessments and vulnerability testing of Platform infrastructure;
• Incident response procedures for the detection, reporting and remediation of data breaches;
• Staff training on data protection and information security obligations.

While we apply rigorous security measures, no system is entirely immune to risk. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay using the contact details held on your account.

User responsibility: You are responsible for maintaining the confidentiality of your account credentials. Never share your password or account access with any third party. If you suspect unauthorised access, contact us immediately at [email protected].

11. Cookies & Tracking Technologies

The Platform uses cookies and similar tracking technologies to enhance your user experience, analyse Platform usage and support security functions. The following cookie categories are used:

• Strictly Necessary Cookies: Required for the Platform to function. These cannot be disabled. They include session management, authentication and security tokens;
• Analytics Cookies: Used to understand how visitors interact with the Platform — pages visited, time spent, navigation paths. Data is aggregated and anonymised where possible;
• Functional Cookies: Store your preferences such as language selection, display settings and session data to improve your experience on return visits;
• Performance Cookies: Monitor Platform loading performance and error rates to support technical improvements.

We do not use advertising or third-party tracking cookies. You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect Platform functionality.

12. Your Rights

Subject to applicable law, you hold the following rights in relation to your personal data held by 666p3. To exercise any of these rights, contact us at [email protected]:

• Right of Access: Request a copy of the personal data we hold about you, along with information about how it is processed;
• Right to Rectification: Request correction of any inaccurate or incomplete personal data;
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations;
• Right to Restriction: Request that we temporarily restrict processing of your data while a query or complaint is resolved;
• Right to Data Portability: Request a machine-readable copy of personal data you have provided to us, for transfer to another service provider where technically feasible;
• Right to Object: Object to processing based on legitimate interests, including for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds;
• Right to Withdraw Consent: Where processing is based on your consent, withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

We will respond to all valid rights requests within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 60 days, in which case we will notify you within the initial 30-day window.

13. Children's Privacy

The Platform is strictly for adults aged 18 or above — or the higher minimum age required by the relevant Operator or the laws of the user's jurisdiction. 666p3 does not knowingly collect personal data from individuals under 18 years of age.

If we become aware that personal data has been collected from a person under the minimum age threshold, we will take immediate steps to delete that data and close the associated account. If you believe a minor has submitted data through the Platform, please contact us without delay at [email protected].

14. Pakistan-Specific Privacy Notice

Pakistani users should be aware of the following specific points:

• Pakistan's Personal Data Protection Bill (PDPB), if enacted, may create specific rights and obligations relating to how your data is processed by entities serving Pakistani users. 666p3 monitors legislative developments in Pakistan and will update this Policy if new requirements become applicable;
• CNIC numbers, passport numbers and biometric data collected during KYC are treated as sensitive personal data and are subject to heightened security controls and strict access restrictions;
• References to payment methods including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah do not imply that those providers share user data with 666p3. Any data processed through those payment channels is governed by their respective privacy policies;
• 666p3 does not share personal data of Pakistani users with the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan (SBP) or any Pakistani law enforcement agency except where compelled to do so by a lawful order;
• All support communications — including those with users in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — are conducted in English, with Urdu available on request. Support staff do not use informal channels such as WhatsApp or SMS to request sensitive personal data.

15. Third-Party Links

The Platform may contain references or contextual links to third-party services, including gambling operators. These third-party services operate independently and are governed by their own privacy policies. 666p3 is not responsible for the privacy practices of any third-party website or service and encourages you to review their privacy documentation before submitting personal data.

The inclusion of any third-party reference on 666p3 does not constitute an endorsement of their data practices or an affiliation with their privacy frameworks.

16. Amendments to This Policy

666p3 reserves the right to update or modify this Privacy Policy at any time. When material changes are made, the "Last updated" date at the top of this page will be revised. For significant changes affecting your rights, we will endeavour to provide advance notice via the Platform or by email to registered users.

Continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We recommend reviewing this Policy periodically to remain informed of how your data is being handled.

17. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact 666p3 as follows:

When submitting a data rights request, please include your registered email address and a brief description of your request. We may ask for identity verification before processing your request. Please do not send sensitive documents via email — if document submission is required, we will provide a secure HTTPS upload link.