Privacy Policy — 666ed Platform

666ed ("we", "us", "our" or the "Platform") is committed to protecting the privacy and personal data of every individual who accesses, registers with or uses the 666ed online gaming platform available at 666ed.cam (the "Website").

This Privacy Policy ("Policy") describes what personal data we collect from you, the purposes for which we process that data, how we protect it, how long we retain it, and the rights available to you in relation to your personal data. This Policy applies to all Users of the Website and should be read alongside our Terms & Conditions.

By creating an account, using any feature of the Platform, or continuing to browse the Website after this Policy is made available to you, you acknowledge that you have read and understood this Policy. If you do not agree with any aspect of this Policy, please discontinue use of the Platform and contact us to request account closure.

The following terms are used throughout this Policy:

We collect the minimum Personal Data necessary to deliver the 666ed gaming service, maintain account security, comply with legal obligations and improve the platform experience. The categories of data we collect are described below.

3.1 Registration & Identity Data

• Full legal name
• Date of birth
• Residential address (including city — e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar)
• Email address
• Username and encrypted password
• Nationality and country of residence

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (CNIC, passport, driving licence)
• Proof of address documents (utility bills, bank statements)
• Selfie photographs for biometric verification (where required by the KYC provider)
• Source of funds documentation (bank statements, payslips, tax filings)

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates and methods
• Payment account references (e.g., last four digits of card, mobile wallet account number) — we do not store full card numbers or full wallet credentials
• Transaction history and account balance records
• Bonus, promotion and wagering activity records

3.4 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system and browser version
• Session identifiers and login timestamps
• In-platform navigation and click behaviour logs

3.5 Communications Data

• Records of live chat, email and support ticket communications
• Feedback and survey responses submitted to the Platform

We collect your Personal Data through the following channels:

• Directly from you: When you register, complete KYC verification, make deposits or withdrawals, contact support, participate in promotions or submit feedback.
• Automatically through the Platform: Device and usage data are collected automatically via server logs, cookies, session trackers and analytics tools when you browse or interact with the Website.
• From third-party service providers: Identity verification providers, fraud prevention databases and payment processors may share data about you with us as part of their service delivery.
• From publicly available sources: In limited circumstances and where permitted by law, we may supplement your data with information from publicly available registers or databases as part of AML compliance checks.

We process your Personal Data for the following purposes:

Each instance of Personal Data processing at 666ed rests on one or more of the following legal bases:

6.1 Contract Performance

Processing is necessary to fulfil the obligations we owe to you under the Terms & Conditions — including managing your account, processing transactions and delivering gaming services.

6.2 Legal Obligation

We are required to process certain data to comply with applicable legal obligations — including KYC and AML requirements under the operator's license jurisdiction. This includes verifying your identity before processing withdrawals and maintaining transaction records for regulatory reporting.

6.3 Legitimate Interests

We process certain data where we have a legitimate interest in doing so, and where that interest is not overridden by your privacy rights. This includes platform security monitoring, fraud detection, abuse prevention and statistical analysis to improve the Platform. We conduct a balancing assessment before relying on this basis.

6.4 Consent

Where we wish to send you direct marketing communications or process data for purposes beyond those described above, we will first obtain your specific, informed consent. You have the right to withdraw consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

We do not sell, rent or trade your Personal Data to any third party for their own marketing or commercial purposes. We share your Personal Data only in the following circumstances:

7.1 Service Providers and Data Processors

We engage carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These include:

• KYC and identity verification providers
• Payment processors and financial service providers (which may include references to familiar Pakistani payment methods such as Easypaisa, JazzCash, Raast and major banks — solely as context for the user; these providers process transactions governed by their own privacy policies)
• Fraud prevention and AML screening services
• Customer support software providers
• Hosting, cloud infrastructure and CDN providers
• Analytics service providers

7.2 Legal and Regulatory Authorities

We will disclose Personal Data to law enforcement agencies, regulatory bodies or other governmental authorities where required to do so by law, court order or regulatory directive, or where we believe in good faith that disclosure is necessary to prevent fraud, money laundering or other criminal activity.

7.3 Business Transfers

In the event of a merger, acquisition, asset sale or restructuring of the Platform's business, Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify affected Users and provide notice of any change to this Policy where such a transfer materially affects their privacy rights.

7.4 With Your Consent

We may share your Personal Data with third parties in circumstances beyond those listed above where you have given us specific, prior consent to do so.

The 666ed Platform is operated from outside Pakistan. When you use our services, your Personal Data may be transferred to and processed in countries other than Pakistan. These countries may not have data protection laws equivalent to those of your jurisdiction.

Where Personal Data is transferred internationally, we take reasonable steps to ensure appropriate safeguards are in place — such as contractual protections with data processors, standard data protection clauses, or transfers to jurisdictions with recognised adequate protections. By using the Platform, you acknowledge and accept this international processing arrangement.

We retain Personal Data for the period necessary to fulfil the purposes for which it was collected, subject to the following principles:

• Active Account Data: Retained for the duration of your account's existence on the Platform.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AML record-keeping obligations under the operator's license jurisdiction.
• KYC Documents: Retained for a minimum of five (5) years from account closure or the date of the most recent transaction, whichever is later.
• Customer Support Communications: Retained for a minimum of three (3) years from the date of the communication.
• Marketing Consent Records: Retained for as long as the consent remains active, plus a reasonable period thereafter for compliance record-keeping.
• Technical and Log Data: Retained for up to twelve (12) months from collection, unless retained longer for security or legal purposes.

After the applicable retention period, Personal Data is securely deleted or anonymised unless we are required by law to retain it for a longer period.

We implement a range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration or destruction:

• Encryption in Transit: All data transmitted between your device and our servers is protected by 256-bit TLS/SSL encryption. Look for the padlock icon in your browser's address bar.
• Encryption at Rest: Sensitive data — including KYC documents and financial records — is stored using encryption at rest.
• Access Controls: Access to Personal Data is restricted to authorised personnel on a need-to-know basis. Role-based access controls are applied throughout the Platform's infrastructure.
• Password Security: Passwords are never stored in plain text. We use industry-standard hashing algorithms to store credentials securely.
• Security Monitoring: We conduct ongoing monitoring of our systems for anomalous activity, intrusion attempts and potential data breaches.
• Breach Response: In the event of a confirmed Personal Data breach that poses a risk to your rights, we will take prompt remediation steps and notify affected Users in accordance with applicable legal requirements.

The 666ed Platform uses cookies and similar tracking technologies to operate the website, maintain session security, remember your preferences and analyse usage patterns. The following categories of cookies are used:

11.1 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to block third-party cookies and clear cookies on browser close. Please note that disabling essential cookies will impair or entirely prevent your ability to use the Platform. For guidance on managing cookies in your specific browser, consult the browser's help documentation.

11.2 Do Not Track

Some browsers transmit a "Do Not Track" (DNT) signal to websites. Our Platform does not currently alter its data collection practices in response to a DNT signal. Where applicable law requires us to honour DNT, we will update this section accordingly.

Subject to applicable data protection law and the legal basis on which we process your data, you have the following rights in relation to your Personal Data held by 666ed:

12.1 How to Exercise Your Rights

To exercise any of the rights listed above, please contact our support team via live chat (available 24/7 through the Platform) or by email at [email protected]. We will acknowledge your request promptly and respond within a reasonable timeframe. We may ask you to verify your identity before processing rights requests to protect against fraudulent or unauthorised requests.

We will not charge a fee for processing rights requests unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or decline to respond.

The 666ed Platform is strictly for adults aged 18 years and over — or the higher minimum required by the operator's license jurisdiction. We do not knowingly collect, process or retain Personal Data from individuals under the age of 18.

Where we have reasonable grounds to believe that a User may be under the minimum age, we will suspend their account pending KYC age verification. Where a User is confirmed to be underage, their account will be permanently closed, all deposits refunded in accordance with applicable law, and all data associated with the account deleted or anonymised to the extent permitted by legal retention obligations.

The 666ed Platform may, from time to time, reference third-party services, products or payment methods by name — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah. These references are provided for context and user familiarity only. We do not control the privacy practices of any third-party service providers, and their handling of your data is governed entirely by their own separate privacy policies.

We are not responsible for the privacy practices, content or security of any third-party website or service. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the Platform.

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or the Platform's features. We will indicate the date of the most recent revision at the top of this page.

Where changes are material — for example, where we intend to process your Personal Data for a new purpose or share it with a new category of recipient — we will take reasonable steps to notify you in advance, such as by displaying a notice on the Platform or sending an email to your registered address.

Your continued use of the Platform following notification of changes constitutes your acknowledgement of the revised Policy. If you disagree with any change, you should stop using the Platform and contact us to exercise your data rights or request account closure.

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data by 666ed, please contact us through the following channels. All privacy-related enquiries are treated with priority.

This Privacy Policy was last reviewed in January 2026 and is effective from 1 January 2026. We recommend reviewing this page periodically.