Privacy Policy — 666j Data Protection

§01 Who We Are

666j (referred to in this Privacy Policy as "666j", "we", "us", or "our") operates the online casino, sports betting, and gaming platform accessible at 666j.vin (the "Platform"). 666j is the data controller responsible for the personal information of all registered players and site visitors.

This Privacy Policy applies to all personal data collected through the 666j Platform — including data collected during account registration, KYC verification, deposits and withdrawals, gameplay activity, customer support interactions, and general browsing of the site. It applies equally to players across all cities in Pakistan, including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and beyond.

By registering an account on 666j or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

§02 Data We Collect

666j collects personal data from you in several ways — directly when you provide it to us, automatically as you use the Platform, and in some cases from third parties as part of our compliance obligations. The categories of data we collect are set out below.

Identity & Account Data

• Full legal name (as it appears on your CNIC or passport)
• Date of birth (required to verify the 21+ age restriction)
• Pakistani National Identity Card (CNIC) number or passport number
• Scanned copies of identity documents submitted during KYC verification
• Profile photograph (where submitted for enhanced KYC)
• Username and encrypted account password

Contact Data

• Email address (primary communication channel)
• Pakistani mobile phone number (used for OTP verification and JazzCash/EasyPaisa linking)
• City or province of residence (optional, for localisation purposes)

Financial & Payment Data

• JazzCash mobile account number linked to your 666j wallet
• EasyPaisa account number (where applicable)
• Bank account name, account number, and IBAN (for bank transfer withdrawals via HBL, UBL, Meezan Bank, etc.)
• Transaction history — including deposit amounts, withdrawal requests, dates, and references
• Raast or 1LINK payment identifiers (where used)

Gameplay & Behavioural Data

• Game sessions played — including game titles, bet amounts, outcomes, and session duration
• Sports betting history — including markets wagered on (cricket, PSL, etc.), stakes placed, and settlement outcomes
• Bonus redemption history and wagering requirement progress
• Responsible gaming settings — deposit limits, session limits, self-exclusion status

Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser/app version
• Cookie identifiers and session tokens (see Section 5)
• Login timestamps and session activity logs

§03 How We Use Your Data

666j uses your personal data only for the specific, documented purposes listed below. We do not use your data in ways that are incompatible with these purposes without first obtaining your explicit consent.

§04 Legal Basis for Processing

666j processes your personal data on one or more of the following legal grounds, depending on the specific processing activity involved:

• Contract Performance: Processing necessary to deliver the services you signed up for — including account management, payment processing, and gameplay — is carried out on the basis that it is necessary to perform the contract between you and 666j.
• Legal Obligation: Certain processing activities — including KYC identity verification, anti-money laundering (AML) checks, age verification, and responsible gaming monitoring — are legally mandated under the conditions of 666j's international gaming licence and applicable financial crime regulations. We cannot waive these obligations.
• Legitimate Interest: Some processing activities are carried out on the basis of 666j's legitimate interests — for example, fraud prevention, platform security, and ensuring bonus systems are not abused — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is not otherwise justified by one of the above grounds, 666j will request your explicit consent before proceeding. The most common consent-based processing is promotional communications. You may withdraw consent at any time.

§05 Cookies & Tracking Technologies

666j uses cookies and similar tracking technologies on the Platform to ensure it functions correctly, to improve performance, and — with your consent — to personalise your experience. A cookie is a small text file placed on your device when you visit a website.

Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your 666j account and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Performance & Analytics Cookies: Used to understand how players navigate the Platform — which game categories are most visited, how players find 666j, and where sessions end. This helps us improve the platform experience for Pakistani users.
• Functional Cookies: Remember your preferences — such as your preferred language, currency display (PKR), and responsible gaming reminder settings — so you do not have to re-enter them each visit.
• Marketing Cookies (with consent only): Used to track interactions with promotional content and to serve relevant offers. These are only placed with your prior consent and can be withdrawn at any time via your browser settings.

Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set preferences for specific websites. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform.

§06 Data Sharing & Disclosure

666j does not sell your personal data. We share limited, necessary personal data with third parties only in the specific circumstances described below. All third-party recipients are required to handle your data in a manner consistent with this Privacy Policy and applicable data protection standards.

Payment Processors

To process your JazzCash deposits, EasyPaisa withdrawals, HBL/UBL bank transfers, Raast payments, and other PKR transactions, 666j shares the minimum necessary payment data with the relevant financial service providers. These processors are bound by PCI-DSS standards and their own regulatory obligations.

KYC & Identity Verification Providers

666j uses regulated third-party KYC providers to verify CNIC authenticity, cross-check against sanctions lists, and conduct age verification. These providers process your identity data strictly for verification purposes and are contractually prohibited from using it for any other purpose.

Game Content Providers

Third-party game studios whose titles appear on 666j (live casino providers, slot developers, etc.) may receive anonymised session data for the purpose of game performance monitoring and RTP auditing. No personally identifiable information is shared with game content providers.

Regulatory & Law Enforcement Authorities

666j is required by its international gaming licence conditions and applicable anti-money laundering regulations to report certain transactions and suspicious activity to relevant regulatory authorities. Where legally compelled by a valid court order or regulatory directive, 666j will disclose personal data to law enforcement authorities. We will notify you of any such disclosure where legally permitted to do so.

Professional Advisers

666j's legal counsel, auditors, and insurers may access limited personal data on a strictly need-to-know basis, subject to professional confidentiality obligations.

§07 International Data Transfers

As an internationally licensed gaming platform, 666j's infrastructure may involve data being stored or processed in countries outside of Pakistan. Where personal data is transferred internationally, 666j ensures that appropriate safeguards are in place to protect your data to the same standard as required under this Privacy Policy.

Safeguards used for international transfers include:

• Standard contractual clauses approved by data protection authorities, incorporated into all data processing agreements with third-party service providers
• Transfer only to jurisdictions recognised as providing an adequate level of data protection, or to processors operating under binding corporate rules
• Technical safeguards including end-to-end encryption for all data in transit

If you would like further information about the specific safeguards applied to international transfers of your personal data, contact our support team and we will provide details applicable to your account.

§08 Data Retention

666j retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with our legal obligations and operational requirements. The table below summarises our standard retention periods by data category.

At the end of each applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with 666j's data disposal procedures.

§09 Your Data Rights

666j respects and upholds your rights over your personal data. The following rights are available to all registered players, regardless of your location within Pakistan or internationally. To exercise any of these rights, contact our support team at [email protected] with your registered account email and a clear description of your request.

666j will respond to all data rights requests within 30 calendar days. In complex cases, we may extend this by a further 60 days, in which case we will notify you of the extension and the reason for it. Data rights requests are free of charge unless they are manifestly unfounded or excessive.

§10 Children & Minors

666j's Platform is strictly limited to persons who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. Our age verification procedures — including CNIC verification through NADRA-aligned checks — are specifically designed to prevent underage access.

If 666j becomes aware that personal data has been collected from a person under 21 years of age — whether through self-disclosure, third-party notification, or internal detection — we will:

• Immediately suspend the account in question
• Void all gameplay and transactions associated with the account
• Securely delete the personal data of the underage individual as quickly as legally permissible
• Where required by our licensing conditions, report the incident to the relevant regulatory authority

Parents and guardians in Pakistan are encouraged to use internet filtering and parental control software to prevent minors from accessing online gambling platforms, including 666j.vin.

§11 Security Measures

666j implements a multi-layered security architecture to protect your personal data against unauthorised access, loss, misuse, disclosure, or destruction. Key security measures include:

• Encryption: All personal data is encrypted at rest using AES-256. All data in transit is protected using TLS 1.3 encryption protocols. Payment data transmitted via JazzCash and EasyPaisa channels benefits from additional layer encryption applied by those providers.
• Access Controls: Access to personal data within 666j's operations is restricted on a strict need-to-know basis using role-based access controls (RBAC). All internal data access is logged and audited.
• Two-Factor Authentication (2FA): 666j supports and encourages the use of 2FA on all player accounts. Players can enable 2FA via their account security settings.
• Penetration Testing: 666j's platform undergoes regular independent security audits and penetration tests to identify and remediate vulnerabilities.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to players, 666j will notify affected players and relevant authorities within 72 hours of becoming aware of the breach, in accordance with our licensing obligations.
• Staff Training: All 666j staff with access to personal data receive mandatory data protection training. Access credentials are reviewed quarterly and revoked immediately upon staff departure.

While 666j takes all reasonable and technically feasible steps to protect your data, no system is completely immune to risk. We encourage all Pakistani players to use strong, unique passwords for their 666j accounts, enable 2FA, and never share their account credentials with anyone.

§12 Third-Party Services

The 666j Platform integrates certain third-party services to deliver a complete gaming experience. These integrations involve limited data sharing as described below. 666j is not responsible for the privacy practices of third-party service providers beyond the contractual obligations we impose on them.

Payment Service Providers

JazzCash (Jazz/Mobilink), EasyPaisa (Telenor Microfinance Bank), HBL, UBL, Meezan Bank, Raast, and 1LINK are independent entities with their own privacy policies. When you initiate a deposit or withdrawal on 666j, the relevant payment processor will handle your transaction data under its own terms. We recommend reviewing the privacy policies of your chosen payment provider.

Game Studios & Content Providers

Third-party game studios whose content is hosted on 666j operate under licensing agreements that include data protection provisions. Anonymised, aggregated gameplay data may be shared with studios for RTP (Return to Player) auditing and technical support. No personally identifiable information is passed to game studios.

Analytics Services

666j may use privacy-respecting analytics services to understand platform usage patterns. Any analytics tools used are configured to anonymise IP addresses, disable cross-site tracking, and respect cookie consent preferences. No raw personal data is shared with analytics providers.

Customer Support Tools

Our support team uses professional helpdesk software to manage player queries. Support tickets may contain personal data you provide during your interaction. This data is retained for quality assurance purposes in accordance with the retention periods in Section 8.

§13 Changes to This Privacy Policy

666j reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, updates to our gaming licence conditions, or improvements to the Platform. The current version of this Privacy Policy — including its effective date — is always accessible at 666j.vin/privacy-policy.

Where changes to this Privacy Policy are material — meaning they significantly affect the way we collect, use, or share your personal data — 666j will notify all registered players by email to their registered address at least 14 days before the changes take effect. Continued use of the Platform after the effective date of an updated Privacy Policy constitutes acceptance of the revised terms.

For minor or clarificatory amendments, we may update the Policy without advance notice, but the effective date in the document header will always reflect the most recent revision.

§14 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 666j handles your personal data, please contact our Data Protection team directly. Our support team is available 24/7 in both English and Urdu.

How to Make a Complaint

If you are not satisfied with how 666j has handled your personal data or responded to a data rights request, you have the right to lodge a formal complaint. To initiate a formal complaint:

1. Email [email protected] with the subject line "Formal Privacy Complaint" and a detailed description of your concern.
2. 666j will acknowledge your complaint within 5 business days and assign a reference number.
3. A full written response will be provided within 30 calendar days of receipt.
4. If you remain unsatisfied after our internal process, you may escalate to the relevant data protection or gaming regulatory authority in the jurisdiction under which 666j is licensed.