666ad Privacy Policy
— Your Data, Your Rights

666ad is an online casino and sports betting platform accessible at 666ad.bio, operated under an international gaming licence. The platform provides casino games, live dealer tables, slot titles, sports betting markets — including Pakistan Super League (PSL) cricket betting — and related promotional services to registered users aged 21 and above.

For the purposes of this Privacy Policy, 666ad acts as the data controller in respect of all personal data collected from users who access the platform, register an Account, or interact with 666ad's services in any capacity.

This Privacy Policy applies to all personal data processed in connection with the 666ad platform, including data collected through the website at 666ad.bio, any associated mobile-optimised interfaces, and all direct communications between 666ad and its registered Players. It should be read alongside the 666ad Terms & Conditions and the Responsible Gaming Policy.

When you interact with the 666ad platform, we collect personal data across the following categories. The specific data collected depends on the nature of your interaction with the platform:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health data except where it is directly relevant to a responsible gaming assessment and you have explicitly provided it. We do not collect biometric data.

666ad uses the personal data we collect for the following specific purposes. Each purpose is tied to a legal basis, which is detailed in Section 4:

• Account Registration & Management: To create and maintain your 666ad Account, verify your identity and age (21+), and manage your profile settings and preferences.
• KYC & Age Verification: To fulfil our obligations under applicable gaming regulations by confirming that all registered Players are 21 years of age or older and are who they claim to be.
• Payment Processing: To process deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, USDT TRC20, and debit cards, and to process withdrawal requests to verified payment methods.
• Platform Operation: To deliver the core gaming and betting services you have registered to use, including casino games, live dealer tables, slots, and PSL cricket betting markets.
• Customer Support: To respond to your enquiries, resolve disputes, and process complaints submitted via live chat or email.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, multi-accounting, and other prohibited activities.
• Responsible Gaming: To monitor for indicators of problem gambling behaviour and, where appropriate, to reach out proactively or apply restrictions in accordance with our Responsible Gaming obligations.
• Legal & Regulatory Compliance: To comply with applicable laws, gaming licence conditions, anti-money laundering (AML) requirements, and any court orders or regulatory directions.
• Platform Improvement: To analyse usage data in aggregate to identify bugs, improve user experience, and develop new features — always using anonymised or pseudonymised data where possible.
• Marketing & Promotions: To send you promotional communications about 666ad bonuses, PSL cricket betting offers, and new game releases — but only where you have provided explicit consent to receive such communications. See Section 13.

666ad does not use your personal data for automated decision-making processes that produce legal or similarly significant effects on you, without providing you the opportunity to request human review of that decision.

Every instance of personal data processing by 666ad is grounded in one of the following recognised legal bases:

• Contractual Necessity: Processing that is required to fulfil our contract with you — i.e., to operate your 666ad Account and provide the gaming and betting services you have signed up for. This covers account management, payment processing, and core platform delivery.
• Legal Obligation: Processing that is required to comply with a legal obligation applicable to 666ad, including KYC identity verification, AML monitoring, and responding to regulatory or law enforcement requests.
• Legitimate Interests: Processing that serves a legitimate interest of 666ad or a third party, provided that interest is not overridden by your rights and interests. This covers fraud detection, security monitoring, platform analytics, and responsible gaming monitoring.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent. This applies to marketing communications and any optional data collection beyond what is strictly necessary to provide the service. You may withdraw consent at any time without affecting the lawfulness of prior processing.

666ad does not sell your personal data to third parties. We do not share your personal data with advertisers, data brokers, or any third party for their own commercial purposes. Data sharing by 666ad is strictly limited to the following categories of recipient, each of whom is bound by appropriate data protection obligations:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and debit card processing networks require transaction data to process your deposits and withdrawals. They receive only the minimum data necessary for the specific transaction.
• KYC Verification Providers: Third-party identity verification services may process your identity documents (CNIC, passport) to confirm your age and identity. These providers are contractually bound to use your data only for verification purposes.
• Game Software Providers: The third-party studios whose games are hosted on 666ad may receive technical and gameplay data necessary to deliver the game experience. They do not receive personally identifiable information beyond what is required for the game session.
• Fraud Detection Services: Specialised fraud and AML detection platforms may process transactional and technical data to identify suspicious patterns. These providers operate under strict data processing agreements.
• Legal & Regulatory Authorities: 666ad may be required to share personal data with gaming regulators, financial intelligence units, tax authorities, courts, or law enforcement agencies where required to do so by applicable law or a valid court order. We will notify affected users where we are legally permitted to do so.
• Professional Advisers: Our legal, financial, and compliance advisers may access personal data on a strictly need-to-know basis in the course of providing professional services to 666ad, subject to professional confidentiality obligations.

666ad uses cookies and similar tracking technologies on the platform to deliver a functional, personalised, and secure user experience. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

666ad uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and cookies that remember your login state. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred currency display (PKR), and responsible gaming limit settings. These improve your experience but are not essential.
• Analytics Cookies: Collect anonymised data about how users interact with the platform — which pages are visited most, where users encounter errors, and how navigation flows are used. This data is used exclusively to improve the platform.
• Security Cookies: Used by our fraud detection systems to identify unusual access patterns, detect bot activity, and protect the integrity of the platform and your Account.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the 666ad platform, including logging into your Account.

666ad retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account Data (active accounts): Retained for the duration of your registered Account and for a period of 5 years following Account closure, in accordance with anti-money laundering record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of 5 years from the date of Account closure or the date the document was submitted, whichever is later, as required under applicable AML regulations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction, consistent with standard financial record-keeping requirements.
• Customer Support Communications: Retained for 3 years from the date of the last communication, to allow for dispute resolution and audit purposes.
• Marketing Consent Records: Retained for as long as your consent remains active, plus 3 years thereafter as evidence of the consent given.
• Technical / Log Data: Retained for up to 12 months for security monitoring purposes, then deleted or anonymised.
• Responsible Gaming Records: Retained for the duration of the Account and for 5 years following closure, to support any future self-exclusion or re-registration checks.

Upon expiry of the applicable retention period, personal data is either securely and permanently deleted from 666ad's systems or irreversibly anonymised such that it can no longer be associated with an identifiable individual.

As a registered user of the 666ad platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or at the email address listed in Section 15:

• Right of Access: You have the right to request a copy of all personal data that 666ad holds about you. We will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data. This right is subject to limitations where we are legally required to retain data — for example, AML record-keeping obligations. Where erasure is not possible in full, we will advise you of what data must be retained and why.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in specific circumstances — for example, while the accuracy of your data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for responsible gaming purposes, where you believe your interests override ours. We will consider your objection and respond within 30 days.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

666ad implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Transport Layer Security (TLS): All data transmitted between your device and the 666ad platform is encrypted using TLS 1.2 or higher, protecting data in transit from interception.
• At-Rest Encryption: Personal data stored in 666ad's databases is encrypted at rest using AES-256 encryption, ensuring that data remains protected even in the event of unauthorised physical access to storage media.
• Access Controls: Access to systems containing personal data is restricted to authorised personnel only, enforced through role-based access controls, multi-factor authentication, and activity logging.
• Penetration Testing: 666ad commissions periodic security assessments and penetration tests conducted by independent security professionals to identify and remediate vulnerabilities.
• Incident Response: 666ad maintains a documented data breach incident response plan. In the event of a confirmed breach, affected users will be notified promptly in accordance with applicable regulatory requirements.
• Staff Training: All personnel with access to personal data receive regular training on data protection obligations, security best practices, and phishing awareness.

While 666ad takes all reasonable steps to protect your personal data, no system is completely immune to security risks. You also play a role in keeping your data safe — protect your Account credentials, use a strong unique password, and never share your login details with anyone.

666ad employs active age verification procedures during the registration process and reserves the right to request government-issued documentation — such as a Pakistani CNIC or passport — at any point to confirm a user's age. Where 666ad discovers that personal data belonging to a minor has been collected — whether due to misrepresentation of age during registration or any other reason — the following steps will be taken immediately:

• The Account will be permanently closed without notice.
• All funds held in the Account will be confiscated in their entirety.
• All personal data associated with the Account will be deleted as soon as legally permissible, subject to any mandatory reporting obligations.
• Where legally required, the matter may be referred to relevant child protection or regulatory authorities.

If you are a parent or guardian and believe that a minor in your care has registered on the 666ad platform, please contact our support team immediately via live chat or at the contact details listed in Section 15. We will treat such reports with the utmost urgency and confidentiality.

As an internationally operated platform, 666ad may transfer your personal data to servers, service providers, or processing facilities located outside Pakistan. These transfers are necessary to operate the platform and deliver our services — for example, where our KYC verification provider, game servers, or fraud detection systems are hosted in other jurisdictions.

Whenever personal data is transferred internationally, 666ad takes appropriate steps to ensure that the transfer is conducted lawfully and that your data receives a level of protection consistent with the standards applied within Pakistan. Safeguards applied to international transfers include:

• Entering into standard contractual clauses with data processors in third countries that impose equivalent data protection obligations.
• Transferring data only to countries that maintain adequate data protection frameworks, as assessed by applicable regulatory guidance.
• Ensuring that all third-party processors are contractually bound to process personal data solely on 666ad's documented instructions and for no other purpose.

If you would like further information about the specific safeguards applied to international transfers of your personal data, you may request this by contacting the 666ad support team.

The 666ad platform integrates with a range of third-party services to deliver a complete gaming and betting experience. While 666ad takes care to select reputable partners, this Privacy Policy applies only to data processing conducted by 666ad itself. The following types of third-party integration are present on the platform:

• Game Providers: Software studios whose casino games, slot titles, and live dealer products are hosted on 666ad may collect limited gameplay telemetry data for technical purposes. Their data handling practices are governed by their own privacy policies.
• Payment Gateways: JazzCash, EasyPaisa, and other payment method providers operate their own platforms and privacy frameworks when you initiate a transaction. 666ad has no control over data processed directly by your payment provider outside of our platform.
• Analytics Providers: Any analytics tools used by 666ad operate on anonymised or pseudonymised data only. We do not permit analytics providers to cross-reference 666ad usage data with personally identifiable information from other sources.

666ad is not responsible for the privacy practices of third-party services. We encourage all Players to review the privacy policies of any third-party service they interact with in connection with the 666ad platform.

666ad may send you promotional communications about bonuses, new game releases, PSL cricket betting specials, and other 666ad offers — but only where you have provided your explicit consent to receive such communications at the point of registration or subsequently through your Account settings.

Marketing communications from 666ad may be delivered via:

• Email: Promotional emails to your registered email address, subject to your consent preferences.
• SMS: Promotional text messages to your registered mobile number, subject to your consent preferences.
• On-Platform Notifications: In-platform messages and banners displayed when you are logged into your 666ad Account. These do not require separate consent as they form part of the platform experience.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email sent by 666ad.
• Updating your communication preferences directly within your Account settings.
• Contacting the 666ad support team via live chat and requesting removal from marketing lists.

666ad reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the structure of the platform. All amendments will be published on this page with an updated effective date displayed prominently at the top of the document.

Where a proposed change to this Privacy Policy is material — meaning it significantly affects how we collect, use, or share your personal data — 666ad will notify registered Players in advance via:

• A prominent notice displayed on the 666ad platform upon login, for a period of at least 14 days prior to the change taking effect.
• An email notification sent to the registered email address on your Account, where you have opted in to receive platform communications.

Your continued use of the 666ad platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree with material changes to this Privacy Policy, you should cease using the platform and contact our support team to discuss your Account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 666ad processes your personal data, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly on the 666ad platform. This is the fastest way to reach our support team for routine data enquiries.
• Email: Send your data-related enquiry to [email protected] (plain text — this is not a clickable link). Include your registered username and a clear description of your request. Our team will acknowledge your email within 5 business days.

If you submit a formal complaint regarding our data processing practices and are not satisfied with our response, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction, or to the regulatory body that oversees 666ad's gaming licence.

666ad is committed to resolving all data-related complaints in a fair, transparent, and timely manner. We take every complaint seriously and will always provide a written response detailing our findings and the steps we have taken or intend to take in response.