666sr Privacy Policy

This Privacy Policy sets out the basis on which 666sr collects, processes, stores, and discloses personal data obtained from individuals who access or use the 666sr platform at 666sr.org, including all casino games, sports betting markets, live dealer tables, and account management features available to Pakistani players.

By registering a 666sr account or continuing to use the platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside the 666sr Terms and Conditions, which govern your use of the platform more broadly.

References to "666sr", "we", "us", or "our" in this Policy refer to the operator of the 666sr platform. References to "you" or "your" refer to the individual account holder or visitor whose personal data is being processed.

666sr collects personal data through several channels, including directly from you during registration and account use, automatically through your use of the platform, and from third-party service providers involved in identity verification and payment processing. The categories of personal data we collect include:

We do not knowingly collect special category personal data (such as health, religious, or political data) from 666sr account holders unless it is voluntarily provided in the context of a responsible gaming assessment or support interaction.

666sr uses the personal data it collects for the following specific purposes:

• Account Registration and Management: To create and administer your 666sr account, verify your identity in accordance with Know Your Customer (KYC) requirements, and maintain accurate account records.
• Payment Processing: To facilitate PKR deposits and withdrawals via your registered payment methods including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain a complete transaction history on your account.
• Platform Provision: To deliver the casino games, sports betting markets, live dealer products, and all other features of the 666sr platform to you in a functional and personalised manner.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, and other prohibited conduct on the 666sr platform.
• Regulatory Compliance: To fulfil obligations under applicable gaming regulatory requirements, anti-money-laundering laws, and any reporting obligations owed to regulatory authorities.
• Responsible Gaming: To monitor gaming patterns and identify potential indicators of problem gambling activity, enabling the 666sr responsible gaming team to make proactive interventions where appropriate.
• Customer Support: To respond to your queries, process complaints, and resolve disputes relating to your 666sr account, payments, or game outcomes.
• Marketing Communications: Where you have provided explicit consent, to send you information about 666sr promotions, bonuses, new game launches, and PSL betting markets. You may withdraw this consent at any time.

666sr processes your personal data on the following legal bases, depending on the specific purpose for which the data is being used:

• Contractual Necessity: Processing required to perform our obligations under the 666sr Terms and Conditions, including account administration, payment processing, and platform delivery.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC identity verification, anti-money-laundering record-keeping, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out in pursuit of 666sr's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, provided those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — principally in the context of direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

666sr does not sell your personal data to any third party. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Service Providers: Personal and financial data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other payment processors required to facilitate your PKR transactions on the 666sr platform. These providers process data under their own privacy policies and under contractual obligations to 666sr.
• KYC and Identity Verification Services: Identity documents and personal data may be shared with third-party identity verification providers engaged by 666sr to perform CNIC verification and document authentication in fulfilment of regulatory KYC requirements.
• Technology and Infrastructure Providers: 666sr engages third-party providers for cloud hosting, platform infrastructure, and cybersecurity services. These providers access personal data solely for the purpose of delivering contracted services to 666sr and are bound by data processing agreements.
• Game Content Providers: Aggregated, anonymised gaming activity data may be shared with licensed game content providers for the purpose of game performance reporting. No individually identifiable data is shared with game providers.
• Regulatory and Law Enforcement Authorities: 666sr will disclose personal data to regulatory bodies, law enforcement agencies, or courts in Pakistan or internationally where we are legally required or compelled to do so by a valid lawful request.

All third parties with whom 666sr shares personal data are contractually required to maintain appropriate technical and organisational security measures and to process data solely for the purposes specified by 666sr.

666sr uses cookies and similar tracking technologies on the 666sr.org platform to provide essential functionality, improve user experience, and — where you have consented — to deliver relevant content. The categories of cookies used by 666sr are as follows:

• Strictly Necessary Cookies: Required for the platform to function correctly, including session authentication, account login persistence, and security token management. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your platform preferences such as language settings, game lobby filters, and responsible gaming tool configurations so that your experience is consistent across sessions.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Pakistani players navigate and interact with the 666sr platform, helping us identify usability improvements. Analytics data does not identify individual users.
• Marketing Cookies: Used, subject to your consent, to deliver personalised bonus and promotion content. Marketing cookies may be declined or withdrawn via your account settings or browser cookie controls.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to access and use the 666sr platform.

666sr implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• Encryption: All data in transit is protected by TLS 1.3 encryption. All data at rest is protected by AES-256 encryption. Account passwords are stored exclusively as salted cryptographic hashes.
• Access Controls: Access to personal data within 666sr's systems is restricted on a strict need-to-know basis. All internal access is subject to role-based permissions and logged for audit purposes.
• Network Security: The 666sr platform infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability scanning and penetration testing by qualified security professionals.
• Payment Security: PKR payment method details are tokenised at the point of entry and are never stored in raw form. 666sr does not transmit full payment credentials through its own systems.
• Incident Response: 666sr maintains a documented data breach response procedure. In the event of a breach affecting your personal data, 666sr will notify affected account holders and relevant regulatory authorities in accordance with applicable obligations.

666sr retains personal data for the periods set out below, after which data is securely deleted or anonymised:

• Account and Identity Data: Retained for the duration of your active 666sr account and for five (5) years following permanent account closure, in compliance with applicable anti-money-laundering record-keeping requirements.
• Financial Transaction Records: Retained for five (5) years following each transaction, in accordance with applicable financial regulatory requirements.
• Gaming Activity Logs: Retained for three (3) years following the relevant gaming session, for the purposes of dispute resolution and responsible gaming monitoring.
• Support Communications: Retained for two (2) years following the resolution of the relevant support interaction.
• Marketing Consent Records: Retained for the duration of your marketing consent and for one (1) year following withdrawal of consent, as evidence of the consent history.
• Technical and Device Data: Retained for twelve (12) months for security and fraud prevention purposes.

Where retention beyond these periods is required by a specific legal obligation or ongoing regulatory investigation, 666sr will retain the relevant data for the duration of that requirement and delete it promptly upon its resolution.

As a 666sr account holder, you have the following rights with respect to the personal data we hold about you. These rights may be exercised by contacting the 666sr support team via live chat:

• Right of Access: You may request a copy of the personal data 666sr holds about you. We will provide this within 30 days of receiving a valid request.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held on your 666sr account. Minor corrections can often be made directly within your account settings.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. This right is subject to 666sr's legal obligation to retain certain data for regulatory compliance purposes — data we are legally required to keep cannot be erased on request.
• Right to Restriction: You may request that 666sr restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests at any time. You may also withdraw marketing consent at any time via your account preferences or by contacting support.

The 666sr platform is strictly for adults aged 21 years and above. 666sr does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory component of the 666sr account registration and KYC process.

If 666sr becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted promptly and the associated account will be closed immediately. Any balances associated with an underage account will be handled in accordance with 666sr's Terms and Conditions and applicable regulatory guidance.

If you are a parent or guardian and believe that a person under 21 in your household has registered a 666sr account or accessed the platform, please contact 666sr support immediately via live chat so that the matter can be addressed without delay.

666sr reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material — meaning they significantly affect how we collect or use your personal data — 666sr will provide reasonable prior notice to registered account holders via email or an in-platform notification.

Non-material clarifications or administrative updates may be made without prior notice and will take effect from the date of publication on the 666sr platform. The "Last Updated" date displayed in this document indicates when the current version was published. We encourage you to review this Policy periodically to remain informed of how 666sr handles your data.

Your continued use of the 666sr platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you may close your account by contacting the 666sr support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or to 666sr's handling of your personal data, please contact us through the following channels:

• Live Chat Support: Available 24 hours a day, 7 days a week via the 666sr platform after login. This is the fastest channel for privacy-related queries and data rights requests from Pakistani players across Karachi, Lahore, Islamabad, Faisalabad, and all other cities.
• Email: [email protected] — please include "Privacy Query" in your subject line to ensure your message is directed to the appropriate team. Allow up to 48 hours for email responses.

When submitting a data rights request, please provide your registered 666sr username and the email address associated with your account so that we can verify your identity before processing the request. 666sr will not process data rights requests from unverified individuals to protect account holder privacy.

For general platform queries not related to data protection, the 666sr live chat support team is available around the clock and is the recommended first point of contact for all account and payment queries.