Privacy Policy – 666d1 Protects Your Data

666d1 is an online gaming and sports betting platform operated at https://666d1.app, serving players in Pakistan. For the purposes of this Privacy Policy, 666d1 is the data controller — meaning we determine the purpose and means of processing your personal data.

We are responsible for making sure that your data is handled lawfully, fairly and transparently. If you have any questions about how your information is being used, you have the right to contact us at any time. Our designated privacy contact is reachable at support@666d1.app with "Privacy" in the subject line.

666d1 collects only the data that is necessary to operate your account, process payments, comply with legal obligations and provide a safe platform. Here is a breakdown of the data we collect and when:

666d1 processes your personal data for the following purposes, each of which has a clear legal basis:

• Account Management: Creating and maintaining your 666d1 account, processing logins, and managing account settings. Legal basis: contractual necessity.
• Payment Processing: Verifying and processing deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card. Legal basis: contractual necessity.
• Identity Verification (KYC): Confirming your identity and age as required by our compliance obligations. Legal basis: legal obligation.
• Fraud & Security: Detecting and preventing fraud, money laundering, multi-accounting and other prohibited activity. Legal basis: legitimate interest and legal obligation.
• Responsible Gaming: Monitoring account activity to identify potential problem gambling patterns and apply self-exclusion or limit requests. Legal basis: legal obligation and legitimate interest.
• Customer Support: Responding to your queries, complaints and support requests. Legal basis: contractual necessity.
• Platform Improvement: Analysing usage patterns to improve the platform, fix bugs and optimise performance. Legal basis: legitimate interest.
• Marketing Communications: Sending you information about promotions, bonuses and platform news — only where you have opted in. Legal basis: consent. You can withdraw consent at any time.

Security is not an afterthought at 666d1 — it is built into every layer of the platform. Your personal data is stored on secure servers with multiple layers of protection:

• Encryption in Transit: All data transmitted between your browser or device and 666d1's servers is encrypted using 256-bit TLS (SSL). This applies to every page on the platform — not just login and payment pages.
• Encryption at Rest: Sensitive personal data fields stored in our databases are encrypted at rest using industry-standard encryption protocols. Passwords are stored as salted hashes and are never stored in plain text.
• Access Controls: Access to personal data within the 666d1 organisation is restricted on a strict need-to-know basis. Staff who handle personal data are trained in data protection procedures and bound by confidentiality obligations.
• Infrastructure Security: Our server infrastructure is hosted in secure, certified data centres with physical access controls, 24/7 monitoring, redundant systems and regular security audits.
• Breach Response: In the unlikely event of a data breach that could affect your rights, 666d1 will notify affected users within 72 hours of becoming aware, in line with standard data protection obligations.

We share your data only with the following categories of third parties, and only to the extent necessary for the stated purpose:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card processing partners receive the minimum data necessary to process your transactions. They are bound by their own strict security and data protection obligations.
• Identity Verification Providers: Third-party KYC service providers who assist in verifying your identity and age. These providers are contractually bound to use your data only for verification purposes.
• Game Providers: Casino and slot game developers may receive your anonymous session data (bet amounts, game results) for game performance purposes. They do not receive your name, contact details or payment information.
• Fraud Prevention Services: Third-party fraud detection tools may receive technical data (IP address, device fingerprint) to assist in identifying suspicious activity. No personally identifiable information is shared beyond what is technically required.
• Legal Authorities: 666d1 may be required to disclose personal data to law enforcement or regulatory authorities in response to a lawful request, court order or legal obligation. We will only do so where legally required and will notify you where we are legally permitted to do so.

All third parties who receive personal data from 666d1 are subject to contractual data processing agreements that restrict their use of your data to the specific purpose for which it was shared.

666d1 uses cookies and similar tracking technologies to make the platform work properly and improve your experience. Here is what each category of cookie does:

• Essential Cookies: Required for the platform to function. They keep you logged in, remember your session preferences and enable security features. These cannot be disabled without breaking the platform.
• Performance Cookies: Collect anonymous data about how pages are used — which sections are visited most, how long sessions last, error logs. This data helps us improve the platform. It does not identify you personally.
• Functional Cookies: Remember your preferences — display language, responsible gaming settings, last visited section. These make the experience smoother.
• Referral Tracking Cookies: Track the referral code embedded in your registration link so that the correct player is credited for a successful referral. This data is used only for the Refer a Friend programme.

666d1 does not use third-party advertising or behavioural targeting cookies. We do not place retargeting pixels, social media tracking scripts or advertising network tags on our pages.

You can manage cookie preferences in your browser settings. Disabling essential cookies will prevent the platform from working correctly. Disabling other categories will not affect core functionality.

Your financial information is handled with an additional layer of care at 666d1. When you deposit or withdraw using any of our supported Pakistani payment methods — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card — the following protections apply:

• Full payment credentials (card numbers, bank account details, mobile wallet PINs) are never stored on 666d1's own servers. All payment processing flows through certified, PCI-DSS compliant payment partners.
• We store only a masked reference for each payment method you use — for example, the last four digits of a card number or the mobile number registered to your Easypaisa account — sufficient to identify the method but not to process a transaction without your active authorisation.
• Withdrawal requests can only be processed to payment methods that have been verified as belonging to you. This protects you against unauthorised withdrawal attempts.
• All deposit and withdrawal transactions are logged in your 666d1 account history, which you can review at any time from your dashboard.

Know Your Customer (KYC) verification is a legal requirement for online gaming platforms and is in place to protect all players — including you — by preventing fraud, money laundering and underage gambling. At 666d1, KYC works as follows:

• We may request a copy of your CNIC (Computerised National Identity Card), a proof of residential address (such as a utility bill or bank statement), and a payment method verification document.
• Documents submitted for KYC are reviewed by trained compliance staff and used solely to verify your identity, age and payment method ownership. They are not shared with any party other than our certified identity verification partners.
• KYC documents are stored encrypted and separately from your primary account data, with access restricted to compliance personnel only.
• Once verification is complete, your documents are retained only for as long as required by our legal and compliance obligations — typically five years from account closure.
• If you believe your KYC documents have been mishandled, you have the right to raise a complaint at support@666d1.app. All complaints are logged and reviewed within 5 business days.

666d1 does not retain personal data for longer than is necessary for the purpose for which it was collected. Our general retention schedule is as follows:

• Active Account Data: Retained for the lifetime of your account plus a minimum of five years after closure, to comply with anti-money laundering and financial compliance obligations.
• Transaction Data: Retained for a minimum of seven years for financial record-keeping and compliance purposes.
• KYC Documents: Retained for five years from account closure.
• Support Communications: Retained for two years unless relevant to an ongoing dispute.
• Marketing Preferences: Retained until you withdraw consent or request deletion.
• Technical/Session Data: Retained for 90 days for security and fraud prevention purposes, then anonymised or deleted.

Where retention is mandated by legal obligation, we cannot delete data even if requested. In such cases, we will clearly explain which data must be retained and why.

If you believe a minor has registered at 666d1 using your details or is using your account, please contact support@666d1.app immediately. We treat all reports of underage gambling with the highest priority.

Parents and guardians who are concerned about underage access to online gambling more broadly can use device-level parental control tools to restrict access to gambling websites. 666d1 supports and encourages the use of such tools.

666d1 may update this Privacy Policy from time to time. When material changes are made, we will notify registered players via email or a prominent notice on the platform at least 7 days before the changes take effect.

The current version of this Policy is always accessible at 666d1.app/privacy-policy and carries the date it was last updated at the top of the page. Minor changes — such as clarifications or corrections that do not alter the substance of the Policy — may be made without notice, though the updated date will always be revised.

Your continued use of the 666d1 platform after a Policy update takes effect constitutes your acceptance of the revised version.

For any privacy-related question, data rights request or complaint, contact 666d1 via:

• Email: support@666d1.app — include "Privacy" or "Data Rights" in the subject line.
• Live Chat: Available from within your account dashboard, 24/7.
• FAQ: Common privacy questions are addressed in our FAQ section.

We aim to respond to all privacy-related email enquiries within 2 business hours during normal operating hours. Formal data rights requests are processed within 10 business days. Formal complaints are escalated within 1 business day and resolved within 5 business days where possible.