d666 Privacy Policy — How We Collect, Use & Protect Your Personal Data

1.1 d666 is an online gaming platform operating at https://d666.my, offering cricket betting, sports odds, live casino games, and slot titles to Pakistani players. References to "d666", "we", "us", and "our" in this Privacy Policy refer to the operator of the d666 platform.

1.2 d666 operates under an international gaming license and is subject to the data protection obligations specified within that licensing framework. d666 acts as the data controller for all personal data collected from registered players and visitors to the d666 platform.

1.3 This Privacy Policy applies to all personal data collected through the d666 website, mobile interface, live chat support, and any other interaction you have with d666 as a registered or prospective player. By using d666, you acknowledge that you have read and understood this policy.

2.1 Registration Data. When you create a d666 account, we collect the following information:

• Full legal name as shown on your CNIC or passport
• Date of birth (for age verification — all players must be 21 or older)
• Pakistani National Identity Card (CNIC) number
• Registered mobile number (Pakistani network)
• Email address
• Residential address
• Username and hashed account password

2.2 KYC Verification Data. Before processing any withdrawal, d666 requires identity verification. During KYC you may submit:

• Scanned copy or clear photograph of your CNIC (front and back)
• Valid Pakistani passport, where CNIC is unavailable
• Proof of address documentation where required
• Source of funds documentation in certain cases

2.3 Transaction Data. All financial transactions processed through your d666 account are logged, including:

• Deposit amounts, timestamps, and payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank)
• Withdrawal requests, amounts, and settlement records
• Bet placements, stakes, odds accepted, and settlement outcomes
• Bonus credits claimed and wagering progress records

2.4 Technical & Device Data. When you access d666, we automatically collect certain technical data including:

• IP address and approximate geographic location derived therefrom
• Browser type, version, and device operating system
• Session duration, pages visited, and click-path data
• Device identifiers where applicable

2.5 Communications Data. Where you contact d666 support via live chat or email, we retain records of those communications including the content, timestamps, and any attachments submitted for the purposes of support resolution and dispute management.

d666 uses the personal data we collect for the following purposes:

4.1 Contractual Necessity. The majority of personal data processed by d666 is necessary to perform the contract between you and d666 — that is, to operate your account, process PKR transactions, settle bets, and provide customer support. Without this processing, d666 cannot provide its services.

4.2 Legal Obligation. Certain processing activities are required by law or by the conditions of d666's international gaming license, including KYC verification, anti-money laundering checks, age verification, and the maintenance of transaction records. d666 cannot waive these obligations at the request of individual players.

4.3 Legitimate Interests. d666 processes certain data — including device and usage data — on the basis of its legitimate interests in preventing fraud, maintaining platform security, and improving the service, where those interests are not outweighed by your rights and expectations as a player.

4.4 Consent. Where d666 processes your data for marketing communications or optional analytics, we do so only where you have actively provided your consent. You may withdraw marketing consent at any time by contacting d666 support. Withdrawal of marketing consent does not affect the lawfulness of prior processing.

5.1 We Do Not Sell Your Data. d666 does not sell, rent, or trade your personal data to any third party for any commercial purpose. This is an absolute commitment with no exceptions.

5.2 Payment Processing Partners. To process PKR deposits and withdrawals, d666 shares necessary transaction data with our payment processing partners, including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. These partners receive only the data required to complete the relevant transaction and are contractually bound to handle it securely.

5.3 Identity Verification Services. d666 uses third-party KYC and identity verification service providers to verify your age and identity in compliance with our gaming license obligations. These providers are provided only the data necessary to complete verification and are prohibited from retaining or using your data for their own purposes.

5.4 Regulatory & Legal Authorities. d666 may be required to disclose personal data to regulatory bodies, law enforcement agencies, or licensing authorities where we are compelled to do so by law or court order. In such cases, d666 will disclose only the minimum data necessary to fulfil the legal obligation.

5.5 Responsible Gaming Referrals. Where a player is referred to a third-party responsible gaming organisation or support service at their own request or through a safeguarding intervention, d666 may share limited contact data with the relevant organisation to facilitate that referral.

5.6 Business Transfers. In the event of a merger, acquisition, or sale of all or part of d666's business, personal data held by d666 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such change before their data is transferred and before it becomes subject to any different privacy policy.

6.1 What We Use. d666 uses cookies and similar tracking technologies to maintain session continuity, support security features, analyse platform usage, and remember user preferences. The categories of cookies used by d666 are as follows:

• Strictly Necessary Cookies: Required for platform operation, including session authentication and security tokens. These cannot be disabled without preventing access to d666.
• Functional Cookies: Store your preferences such as language settings and remembered login details (where opted in). These improve your experience but do not track activity across external websites.
• Analytics Cookies: Used to understand how players navigate d666, which pages are most visited, and where technical issues occur. Data collected is aggregated and does not identify individual players.
• Marketing Cookies: Used only where you have provided explicit consent. These support the delivery of relevant promotional content within the d666 platform.

6.2 Cookie Control. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to d666. Disabling analytics or marketing cookies does not affect your ability to use d666's core gaming features.

6.3 No Third-Party Ad Networks. d666 does not use third-party advertising networks or share your browsing data with external advertisers. Any marketing cookies used are strictly first-party and operate within the d666 platform only.

7.1 Active Accounts. Personal data associated with an active d666 account is retained for as long as your account remains open and for a reasonable period thereafter to enable the resolution of any outstanding queries, disputes, or regulatory obligations.

7.2 Closed Accounts. Following the permanent closure of your d666 account, personal data is retained for a period of five (5) years to fulfil anti-money laundering obligations, gaming license audit requirements, and to enable the resolution of any retrospective disputes or legal claims. After this period, your data is securely deleted or anonymised.

7.3 KYC Documents. CNIC copies, passport scans, and other KYC documents are retained for the duration required by our gaming license and applicable anti-money laundering regulations, which typically require a minimum of five years from the date of the last transaction associated with the account.

7.4 Marketing Data. If you withdraw consent to marketing communications, d666 will suppress your contact details from marketing systems within 14 days of receiving your withdrawal request. Suppression records are maintained indefinitely to ensure the withdrawal is respected.

7.5 Transaction Records. Financial transaction records, including all deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and all withdrawal records, are retained for seven (7) years in accordance with financial record-keeping obligations.

8.1 Technical Measures. d666 implements the following technical security measures to protect your personal data:

• SSL/TLS encryption for all data in transit between your device and d666 servers
• Encrypted storage of all sensitive data at rest, including CNIC numbers and financial records
• Multi-factor authentication options for account login, including OTP verification via Pakistani mobile networks
• Automated intrusion detection and real-time alerting on unusual account access patterns
• Regular third-party security audits and penetration testing of the d666 platform

8.2 Organisational Measures. Access to personal data within d666 is restricted on a need-to-know basis. Staff with access to player data are subject to confidentiality obligations and receive data protection training. Data access logs are maintained and reviewed regularly.

8.3 Data Breach Response. In the unlikely event of a data security breach affecting your personal data, d666 will assess the nature and scope of the breach, take immediate steps to contain it, notify the relevant regulatory authority where required, and communicate the breach to affected players in accordance with applicable obligations.

8.4 Player Responsibilities. While d666 takes comprehensive steps to protect your data on our end, you share responsibility for account security. You should use a strong, unique password for your d666 account, enable OTP verification, and log out of shared devices after each session. Never share your d666 password with anyone.

9.1 d666 is an internationally operated platform. Your personal data may be processed on servers located outside Pakistan, including in the jurisdiction where d666's international gaming license is registered. Where data is transferred internationally, d666 ensures that appropriate safeguards are in place to protect your data to an equivalent standard as is required under the terms of our gaming license.

9.2 Third-party service providers used by d666 — including KYC verification providers and analytics partners — may process your data in their own jurisdictions. d666 requires all such providers to maintain data protection standards at least equivalent to those applied by d666 internally, and this requirement is embedded in our data processing agreements with each partner.

9.3 d666 does not transfer your personal data to countries or territories that do not maintain an adequate standard of data protection without implementing appropriate contractual safeguards to compensate for any such deficiency.

As a d666 player, you have the following rights in respect of your personal data. These rights are subject to certain limitations where legal obligations, regulatory requirements, or the legitimate interests of d666 require that data be retained or processed despite a request.

11.1 d666 takes the protection of minors extremely seriously. We implement technical and procedural age verification measures at registration and at the point of first withdrawal. Where there is reason to believe a player may be under 21, the account will be suspended pending age verification and no funds will be processed until verification is satisfactorily completed.

11.2 If d666 discovers that a player under the age of 21 has registered an account — whether through fraudulent use of another person's CNIC or otherwise — we will immediately close the account, refund any net deposits, and will not retain the minor's personal data beyond the period necessary to document the incident for regulatory reporting purposes.

11.3 If you are aware of a minor who may be attempting to access d666, please notify us immediately via live chat or at the email address provided in Section 13. d666 will treat all such reports with urgency and confidentiality.

12.1 d666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, regulatory requirements, or the services we offer. The effective date at the top of this document will be updated whenever a change is made.

12.2 Where changes to this policy are material — meaning they significantly affect how we process your personal data or your rights in relation to it — d666 will notify you by email to your registered address and through a notification within the d666 platform at least 14 days before the changes take effect.

12.3 Your continued use of d666 following the effective date of any updated Privacy Policy constitutes your acceptance of the changes. If you do not accept the revised policy, you should close your account before the new version takes effect.

13.1 If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how d666 handles your personal information, please contact us through one of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the d666 platform
• Email: [email protected] (plain text — this address is provided for reference; do not send sensitive documents via unsecured email)

13.2 All data rights requests received by d666 will be acknowledged within 48 hours and will be responded to fully within 30 calendar days. Where a request is complex or where d666 receives a large volume of requests simultaneously, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

13.3 Where you are not satisfied with d666's response to a privacy concern or data rights request, you have the right to raise a complaint with the relevant supervisory authority or regulatory body specified by d666's international gaming license jurisdiction.

For matters related to the use of your data in the context of our gaming license obligations, you may also visit our Responsible Gaming page or review the full Terms & Conditions for further context on how your account and associated data are managed.