Privacy Policy

This Privacy Policy ("Policy") describes how 666d2 ("we", "us", "our"), the operator of the website https://666d2.cam ("Platform", "Site"), collects, processes, stores and shares personal data relating to users ("you", "User") of the Platform.

666d2 is an English-language online betting and gaming information platform serving Pakistani users and others in jurisdictions where access to such informational content is lawful. We are committed to protecting the privacy and security of all personal data we process, in accordance with applicable data protection principles.

This Policy is incorporated by reference into our Terms & Conditions. By using the Platform, you confirm that you have read and understood this Policy. If you do not agree to the practices described herein, you must cease using the Platform immediately.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including name, email address, IP address, device identifiers, account credentials and financial information.
• "Processing" — Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Data Controller" — 666d2, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — A third party that processes Personal Data on behalf of 666d2 under a contractual arrangement.
• "Consent" — A freely given, specific, informed and unambiguous indication of agreement by a User to the processing of their Personal Data for a stated purpose.
• "KYC" — Know Your Customer — identity verification procedures carried out to comply with anti-money-laundering and fraud-prevention obligations.
• "Cookies" — Small text files placed on a User's device by the Platform for the purposes described in Section 8 of this Policy.

3.1 Data You Provide Directly

When you register an Account or interact with the Platform, we may collect:

• Full legal name
• Date of birth
• Residential address (including city — e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar)
• Email address
• Mobile phone number
• Username and password (stored in hashed form)
• Payment account information (e.g., bank account details, mobile wallet identifiers — for transaction matching purposes only)
• Identity documents submitted for KYC verification (e.g., CNIC, passport)
• Communications sent to our support team

3.2 Data Collected Automatically

When you use the Platform, we automatically collect certain technical data, including:

• IP address and approximate geolocation
• Browser type and version
• Device type, operating system and screen resolution
• Pages visited, time spent and navigation paths on the Platform
• Referring website or search query
• Session duration and clickstream data
• Cookie identifiers and similar tracking data

3.3 Data from Third Parties

We may receive Personal Data about you from third-party sources, including fraud prevention agencies, identity verification service providers and payment processing partners, where such data sharing is lawful and necessary for the purposes described in this Policy.

We process Personal Data only where a lawful basis exists to do so. The following table sets out the primary bases on which we rely:

We use the Personal Data collected through the Platform for the following purposes:

• Account administration: Creating and managing your user account, authenticating login sessions and maintaining account security settings.
• KYC & compliance: Verifying your identity and age, complying with anti-money-laundering obligations and maintaining required compliance records.
• Transaction processing: Processing deposits and withdrawal requests, matching payment details and resolving transaction disputes.
• Customer support: Responding to your queries, complaints and technical support requests in English (and Urdu where available).
• Platform improvement: Analysing usage data to improve site performance, content relevance and user experience for Pakistani users and other visitors.
• Responsible gambling: Monitoring account activity to identify potential gambling harm, enforcing self-exclusion requests and complying with responsible gambling obligations.
• Fraud & security: Detecting, investigating and preventing fraudulent transactions, account abuse, bonus misuse and other prohibited activity.
• Marketing (with consent): Sending you promotional communications about 666d2 offers and updates, where you have provided explicit consent. You may withdraw consent at any time.
• Legal obligations: Retaining records as required by applicable law and responding to lawful requests from courts or regulatory authorities.

666d2 does not sell your Personal Data to third parties for their own marketing purposes. We may share your data only in the following circumstances:

6.1 Service Providers

We engage trusted third-party Data Processors who assist in operating the Platform — including hosting providers, analytics platforms, KYC and identity verification services, payment processing partners and customer support infrastructure. These processors are contractually bound to process your data only on our instructions and to maintain appropriate security standards.

6.2 Legal & Regulatory Disclosure

We may disclose Personal Data where required by law, court order or regulatory authority — including disclosure to anti-money-laundering agencies, law enforcement bodies or licensing regulators. We are not required to notify you in advance of such disclosures where doing so would be unlawful or compromise an investigation.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or substantially all of 666d2's assets, Personal Data held by us may be transferred to the relevant successor entity, subject to equivalent privacy protections.

6.4 Fraud Prevention

We may share data with fraud prevention agencies and industry databases to detect and prevent fraudulent activity. This includes sharing information on accounts suspected of bonus abuse, identity fraud or financial crime.

We retain Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, accounting or reporting obligations. The following general retention periods apply:

Following the applicable retention period, Personal Data will be securely deleted or anonymised so that it can no longer be attributed to any individual.

666d2 uses cookies and similar tracking technologies (such as web beacons, pixel tags and local storage) to operate and improve the Platform. Cookies are small data files stored on your device when you visit the Site.

8.1 Types of Cookies We Use

8.2 Managing Cookies

You can control cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies and set preferences for specific sites. Disabling certain cookies may affect the functionality of the Platform. Instructions for managing cookies differ by browser — consult your browser's help documentation for guidance.

666d2 implements appropriate technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• Transport Layer Security (TLS/HTTPS) encryption for all data transmitted between your browser and the Platform;
• Password hashing using industry-standard algorithms — plain-text passwords are never stored;
• Access controls restricting Personal Data to authorised personnel on a need-to-know basis;
• Regular security assessments and monitoring of system vulnerabilities;
• Secure data storage practices with backup and disaster-recovery procedures.

While we take reasonable steps to protect your data, no system can be guaranteed completely secure. In the event of a material data breach affecting your rights and freedoms, we will notify affected users in accordance with applicable legal obligations. You can assist in protecting your account by using a strong, unique password and never sharing your login credentials with any third party.

666d2 is an internationally operating platform. Your Personal Data may be transferred to and processed in countries other than Pakistan, including countries where the data protection laws may differ from those in your country of residence.

Where such international transfers occur, we take steps to ensure that appropriate safeguards are in place to protect your Personal Data — including contractual protections with receiving parties and, where applicable, reliance on recognised transfer mechanisms under applicable data protection frameworks.

By using the Platform, you acknowledge that your Personal Data may be transferred to and processed in international jurisdictions as described in this Policy.

Subject to applicable law, you have the following rights in relation to your Personal Data held by 666d2:

• Right of Access: You may request a copy of the Personal Data we hold about you and information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data we hold about you. You may update basic account details directly within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected. Note that legal and regulatory retention obligations may override deletion requests in certain circumstances.
• Right to Restriction: You may request that we restrict processing of your data where its accuracy is contested, the processing is unlawful, or you have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request that we provide your Personal Data in a structured, commonly used and machine-readable format.
• Right to Object: You may object to processing of your Personal Data based on legitimate interests, including profiling and direct marketing. Where you object to direct marketing, we will cease that processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

The 666d2 Platform is strictly intended for adults aged 18 or over — or the higher minimum age required by the applicable operator or license jurisdiction. We do not knowingly collect Personal Data from individuals under the age of 18.

If we become aware that Personal Data has been collected from a person under the applicable minimum age without appropriate consent, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe a minor may have submitted Personal Data to the Platform are encouraged to contact us immediately at [email protected].

Users are responsible for ensuring that minors in their household do not access the Platform. We recommend the use of parental control software to prevent minors from accessing gambling-related content online.

The Platform may contain references to third-party services, payment providers or sports organisations (e.g., PSL, ICC) for contextual and informational purposes. These references do not constitute hyperlinks to external sites and are not endorsements of any third party by 666d2.

Where the Platform does integrate third-party services (such as analytics tools or identity verification providers), those third parties operate under their own privacy policies. 666d2 is not responsible for the privacy practices of third-party service providers beyond the contractual obligations described in Section 6.1 of this Policy.

666d2 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users by email or by displaying a prominent notice on the Platform.

Continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Policy. We recommend reviewing this Policy periodically to stay informed of how we protect your Personal Data. Archived versions of prior policies are available upon written request.

If you have any questions, concerns or complaints regarding this Privacy Policy or the way in which 666d2 processes your Personal Data, please contact our support team. We are committed to resolving privacy-related queries promptly and transparently.