666cb Privacy Policy

666cb ("we," "us," "our," or "the Platform") is an online casino and sports betting platform accessible at 666cb.bio, serving members primarily across Pakistan. For the purposes of this Privacy Policy, 666cb acts as the data controller responsible for the personal information you provide when accessing or using the platform.

This Privacy Policy applies to all personal data collected through the 666cb website, any associated mobile interfaces, customer support communications, and any other interactions you have with the 666cb brand. It applies regardless of whether you are a registered member, a visitor browsing the site, or someone who has contacted our support team without holding an account.

666cb collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of our services, and in limited circumstances from trusted third parties. The categories of data we collect include:

We do not intentionally collect any special categories of sensitive personal data (such as racial origin, religious beliefs, health data, or biometric data) unless you voluntarily provide such information in the course of a support interaction. Where such data is received inadvertently, it is not processed beyond what is strictly necessary to handle your query.

666cb processes your personal data for the following purposes:

• Account creation and management: Setting up and maintaining your 666cb member account, verifying your identity, and managing your account preferences.
• Transaction processing: Facilitating PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20, and maintaining accurate financial records of all transactions.
• KYC and AML compliance: Conducting identity verification checks, age verification (21+), and screening transactions in accordance with anti-money laundering obligations.
• Fraud prevention and platform security: Detecting, investigating, and preventing fraudulent activity, bonus abuse, multi-accounting, and other forms of platform misuse.
• Regulatory compliance: Meeting our obligations under applicable gaming licence conditions, including maintaining required records and responding to regulatory enquiries.
• Customer support: Processing and responding to enquiries, complaints, and requests submitted via live chat or email.
• Responsible gaming monitoring: Analysing betting patterns and usage behaviour to identify potential problem gambling indicators, and to apply responsible gaming tools such as deposit limits and self-exclusion where appropriate.
• Service improvement: Analysing aggregated usage data to improve platform performance, game selection, and the overall member experience.
• Marketing communications: Sending you promotional information about 666cb offers, PSL season bonuses, World Cup promotions, and new features — but only where you have opted in or where we have a legitimate interest basis and you have not opted out.
• Legal proceedings: Establishing, exercising, or defending legal claims where necessary.

666cb relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing that is required to fulfil our obligations under the Terms & Conditions you agreed to upon registering your account. This includes account management, transaction processing, and customer support.
• Legal obligation: Processing that is required to comply with applicable laws and regulatory requirements, including KYC verification, AML record-keeping, age verification, and responding to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing carried out in pursuit of 666cb's legitimate business interests, where those interests are not overridden by your data protection rights. This includes fraud prevention, platform security monitoring, responsible gambling monitoring, and service improvement analytics.
• Consent: Where you have given us explicit consent to process your data for a specific purpose — most commonly marketing communications. You may withdraw your consent at any time by updating your preferences in your account settings or by contacting our support team.

666cb does not sell your personal data. We may share your personal data with third parties only in the following circumstances:

• Payment processors and banking partners: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and cryptocurrency processing services require your payment-related data to facilitate deposits and withdrawals. These providers operate under their own privacy policies and are bound by data security obligations.
• KYC and identity verification providers: Third-party identity verification services may receive copies of your identity documents and biographical data for the purpose of conducting mandatory age and identity checks.
• Game studios and platform providers: Where you play games hosted by third-party studios (e.g., live dealer platforms), your session data, username, and wagering activity may be visible to those studios for the purpose of delivering the game service.
• Regulatory authorities and law enforcement: 666cb is required to disclose member data to relevant gaming regulators, financial intelligence units, or law enforcement agencies upon receiving a lawful request. We will notify you of such requests where we are legally permitted to do so.
• Professional advisors: Our legal counsel, auditors, and other professional advisors may have access to data on a confidential, need-to-know basis.
• Business transfers: In the event of a merger, acquisition, or sale of business assets, your personal data may be transferred as part of that transaction. We will notify you via email and/or a prominent platform notice if this occurs and if the nature of processing changes materially as a result.

All third parties with whom 666cb shares personal data are required to handle that data securely and in accordance with applicable data protection principles. We do not permit our third-party service providers to use your data for their own marketing or commercial purposes.

666cb uses cookies and similar tracking technologies to operate the platform effectively and to enhance your experience as a member. A cookie is a small text file placed on your device when you visit our website.

We use the following categories of cookies:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, remember your language preferences, and ensure the security of your account. These cookies cannot be disabled.
• Performance and analytics cookies: These collect anonymous information about how members use the platform — such as which pages are visited most frequently and how users navigate between sections — helping us improve site performance.
• Functional cookies: These remember your preferences, such as your chosen odds format, notification settings, and preferred deposit method, so you do not need to re-enter them on each visit.
• Marketing and targeting cookies: With your consent, these cookies help us deliver promotions and offers that are relevant to your interests and betting activity on the platform.

You can manage or disable non-essential cookies at any time through your browser settings. Please note that disabling cookies may affect certain features of the 666cb platform.

666cb retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as we are required to retain it under applicable law or our operating licence conditions.

Our general retention schedules are as follows:

• Account and identity data: Retained for the duration of your membership and for a minimum of five (5) years following account closure, in compliance with AML regulatory requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial regulations.
• Customer support communications: Retained for three (3) years from the date of the interaction, unless the communication relates to an ongoing dispute or legal matter, in which case it is retained until that matter is fully resolved.
• Marketing preference records: Retained for the duration of your membership. If you withdraw consent for marketing, your preference is recorded and retained for three (3) years to demonstrate compliance.
• Technical and usage logs: Retained for up to twelve (12) months, after which they are anonymised or deleted.

When data is no longer required and no legal basis exists to retain it, 666cb deletes or permanently anonymises it through secure data destruction processes.

666cb implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and our servers
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial information
• Multi-factor authentication (MFA) options for member accounts and mandatory MFA for all internal administrative access
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their role
• Regular third-party penetration testing and vulnerability assessments of our platform infrastructure
• Intrusion detection systems and continuous security monitoring of our server environments
• Secure deletion protocols for all hardware and storage media at end-of-life

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 666cb will notify you without undue delay and in accordance with applicable notification obligations.

As a 666cb member, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team directly:

• Right of access: You have the right to request a copy of all personal data we hold about you. We will provide this within a reasonable timeframe, typically within 30 days of a valid request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly within your account settings.
• Right to erasure ("right to be forgotten"): You may request that we delete your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where there is no overriding legal basis for continued processing. Note that we may be required to retain certain data under legal or regulatory obligations, in which case we will explain which data cannot be deleted and why.
• Right to restrict processing: You have the right to request that we temporarily pause the processing of your data while a dispute about its accuracy or our legal basis is being resolved.
• Right to data portability: Where processing is based on your consent or a contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling. You may opt out of direct marketing communications at any time through your account settings.
• Rights related to automated decision-making: If 666cb makes any solely automated decisions that produce a significant effect on you (for example, account suspension based on automated fraud detection), you have the right to request human review of that decision.

The 666cb platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from any person under the age of 21. Access to the platform by minors is prohibited under our Terms & Conditions and is contrary to responsible gambling principles.

If we become aware that personal data has been collected from an individual who is under 21 years of age, we will:

• Immediately suspend the associated account pending investigation
• Void all bets, winnings, and promotional credits associated with the account
• Permanently delete all personal data associated with that account as promptly as our legal obligations permit
• Refer the matter to relevant authorities where required by law or regulation

Parents and guardians who believe their child may have accessed the 666cb platform should contact our support team immediately at [email protected] so that we can take prompt action.

666cb's primary operations and data storage are conducted within environments that meet international data security standards. However, given the global nature of our technology stack — which includes payment processors, KYC verification providers, and game studio partners — your personal data may in some cases be processed or stored in jurisdictions outside Pakistan.

Where personal data is transferred internationally, 666cb takes the following safeguards to ensure your data remains adequately protected:

• We only transfer data to third-party service providers who have implemented appropriate technical and contractual safeguards meeting internationally recognised standards.
• All data processing agreements with international vendors include obligations equivalent to the protections set out in this Privacy Policy.
• For transfers to providers in jurisdictions without equivalent local data protection laws, we rely on contractual protections to establish equivalent safeguards.

If you would like further information about the specific safeguards in place for any particular international transfer, please contact our support team.

The 666cb platform may contain references to third-party services, game studio interfaces, or payment provider portals. When you navigate to a third-party interface — for example, when completing a JazzCash transaction through their own portal — you leave the 666cb environment and are subject to that third party's own privacy policy and data practices.

666cb is not responsible for the privacy practices of third-party services and cannot control how those services collect, use, or store your personal data. We encourage you to review the privacy policies of any third-party service you use in connection with your 666cb account, particularly your chosen payment provider.

This Privacy Policy applies solely to personal data processed directly by 666cb within its own platform environment.

666cb reviews and updates this Privacy Policy periodically to reflect changes in our data practices, changes in applicable laws, or improvements to how we communicate our privacy commitments to members.

When material changes are made to this Privacy Policy, we will notify active members by email and/or by displaying a prominent notice on the platform. The "Last Updated" date at the top of this page will be revised accordingly.

Your continued use of the 666cb platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the updated policy. If you do not agree with the changes, you have the right to close your account and request deletion of your personal data as described in Section 9 above.

Minor changes that do not materially affect your rights or our core data practices — such as formatting corrections or minor clarifications — may be made without prior notification.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how 666cb has handled your personal data, please contact our dedicated support team. We take all privacy-related communications seriously and will respond promptly.

You can reach us via:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly within the 666cb platform, in both Urdu and English
• Support Hours: Round-the-clock, every day of the year

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to the relevant data protection or gaming regulatory authority in your jurisdiction. 666cb cooperates fully with all legitimate regulatory enquiries.