666ep Privacy Policy
How We Collect, Use & Protect Your Personal Data

666ep ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who visits, registers on, or interacts with our online casino and sports betting platform at 666ep.ws. This Privacy Policy is written in plain English to make it as clear as possible for our players across Karachi, Lahore, Islamabad, Faisalabad, and every other part of Pakistan.

This Privacy Policy explains: what personal data 666ep collects, why we collect it, how we process and store it, who we may share it with, how long we keep it, and what rights you have in relation to your own data. It applies to all personal data collected through the 666ep website, mobile platform, and any other digital touchpoints operated by 666ep.

By registering a 666ep account, making a deposit, placing a wager, or simply browsing the platform, you acknowledge that you have read and understood this Privacy Policy. This policy forms part of and should be read in conjunction with our Terms & Conditions and our Responsible Gaming Policy.

For the purposes of this Privacy Policy, 666ep acts as the data controller in respect of the personal data of its registered players and website visitors. As data controller, 666ep determines the purposes for which and the means by which personal data is processed.

666ep operates under applicable international gaming regulations and data protection standards. Where personal data is processed by third-party service providers on behalf of 666ep (for example, payment processors, identity verification providers, or platform analytics services), those parties act as data processors and are contractually required to process data only on our explicit instruction and in accordance with applicable data protection law.

You may contact the 666ep data team at any time to raise questions or concerns regarding the processing of your personal data. See Section 15 for contact details.

666ep collects the following categories of personal data from players and visitors. We collect only the data that is necessary for the stated purposes and do not seek to collect excessive or unnecessary personal information.

666ep collects personal data through several distinct channels. Understanding how your data reaches us is an important part of transparency in privacy practice:

• Direct Submission: Data you provide when you create a 666ep account, complete your KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion.
• Automated Technical Collection: Data collected automatically when you visit or use the platform, including IP addresses, device identifiers, browser cookies, and session data gathered through our platform's server logs and analytics systems.
• Payment Processors: Transaction confirmation data received from our payment partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) when you initiate a deposit or request a withdrawal.
• Identity Verification Providers: KYC data confirmed or supplemented by our third-party identity verification service providers, who cross-reference submitted documents against trusted data sources.
• Fraud Prevention and AML Partners: Risk signals and fraud indicators shared by specialist third-party fraud prevention services as part of our Anti-Money Laundering (AML) compliance obligations.
• Responsible Gaming Tools: Self-exclusion, cool-off, and deposit limit requests are recorded and processed as part of our responsible gaming framework, in accordance with our Responsible Gaming Policy.

666ep does not purchase personal data lists from data brokers or third-party marketing companies for the purpose of targeting new players.

666ep processes your personal data for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with these stated uses without first obtaining your explicit consent or notifying you of the new purpose:

• Account Registration and Management: Creating and maintaining your 666ep player account, verifying your identity, and administering your account settings and preferences.
• Processing Financial Transactions: Facilitating deposits and withdrawals in PKR via your chosen payment method, maintaining accurate transaction records, and reconciling account balances.
• Regulatory Compliance and AML: Meeting our legal obligations under applicable gaming regulations and Anti-Money Laundering requirements, including conducting enhanced due diligence where required.
• Responsible Gaming: Monitoring gaming activity patterns to identify potential problem gambling indicators, enforcing player-set limits and exclusions, and administering self-exclusion requests.
• Customer Support: Responding to your queries, resolving disputes, investigating complaints, and maintaining records of all customer service interactions.
• Bonus and Promotion Administration: Verifying eligibility for promotional offers, tracking wagering requirements, and crediting or debiting bonus funds in accordance with the relevant promotion terms.
• Platform Security and Fraud Prevention: Detecting and preventing unauthorised access to accounts, identifying fraudulent or suspicious activity, and protecting the integrity of the 666ep platform.
• Platform Analytics and Improvement: Analysing aggregated usage data to understand how players interact with the platform and to guide product development decisions.
• Marketing Communications: Sending you promotional offers, personalised game recommendations, and 666ep news — but only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time.

666ep relies on the following legal bases to process your personal data, in accordance with applicable data protection principles:

• Contractual Necessity: Processing is necessary to perform our obligations under the contract we have with you as a registered 666ep player, including account management, payment processing, and game delivery.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including AML obligations, gaming licence conditions, and mandatory record-keeping requirements.
• Legitimate Interests: Processing is necessary for the legitimate interests of 666ep and its players, including platform security, fraud prevention, responsible gaming monitoring, and business analytics — provided those interests are not overridden by your privacy rights.
• Consent: For non-essential processing such as marketing communications and certain analytics activities, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

666ep does not sell, rent, or commercially exploit your personal data to any third party. We share your data only in the following circumstances and only with parties who are contractually and legally obligated to handle it responsibly:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, solely for the purpose of processing your financial transactions.
• Identity Verification and KYC Providers: Specialist third-party KYC services that assist with verifying the identity and age of account holders as required under applicable regulations.
• Fraud Prevention and AML Services: Third-party risk management and anti-fraud providers who assist with detecting and preventing financial crime on the platform.
• Game Technology Providers: The technology providers whose games are hosted on the 666ep platform may receive limited technical data (such as session identifiers) necessary to deliver their games. They are prohibited from using this data for their own marketing or profiling purposes.
• Regulatory and Law Enforcement Authorities: Where 666ep is legally required to disclose player information to a regulatory body, court, law enforcement agency, or other public authority, we will comply with that requirement after satisfying ourselves of its legal validity.
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all assets of 666ep, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this policy.

The security of your financial data is a top priority for 666ep. All payment transactions on the platform — whether via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank — are handled through encrypted, industry-standard payment processing infrastructure. 666ep does not store full payment account numbers or complete banking credentials on its own servers.

• Payment details are transmitted directly to our certified payment processor via encrypted channels and are tokenised for subsequent transaction references.
• All 666ep withdrawals are processed exclusively to a payment method registered to the same verified account holder. Third-party payment instructions will not be executed under any circumstances.
• Transaction records (amounts, dates, method references) are retained as part of your account history for regulatory, audit, and dispute resolution purposes in accordance with our data retention schedule.
• If you suspect any unauthorised financial activity on your 666ep account, you must contact our support team immediately so that appropriate protective action can be taken.

666ep retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. The following general retention principles apply:

• Active Accounts: All personal and gaming data associated with an active 666ep account is retained for the duration of the account's active status.
• Closed Accounts: Following account closure, 666ep retains core identity, KYC, and transaction records for a minimum period of five (5) years to satisfy AML, anti-fraud, and gaming regulatory requirements.
• Self-Excluded Accounts: Where a player has self-excluded, their exclusion record is maintained for the full duration of the self-exclusion period plus a minimum additional retention period to prevent the reinstatement of an excluded player.
• Marketing Data: Marketing preference and consent records are retained for as long as you remain a registered player and for a reasonable period following account closure to demonstrate compliance with consent requirements.
• Technical and Log Data: Server logs and technical access data are typically retained for a shorter period (generally 6 to 12 months) unless required for a specific ongoing investigation or legal proceeding.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

666ep uses cookies and similar tracking technologies to operate and improve the platform, maintain your login session, and gather analytics data that helps us understand how players use 666ep. By continuing to use the platform, you consent to the use of cookies in accordance with this section.

• Strictly Necessary Cookies: These are essential for the platform to function. They maintain your login session, remember your account preferences, and enable core gameplay functionality. These cookies cannot be disabled without breaking the platform experience.
• Performance and Analytics Cookies: These cookies collect anonymised information about how players navigate the platform, which pages are visited most frequently, and where errors occur. This data helps 666ep improve its platform for all users.
• Functional Cookies: These cookies remember your personalisation choices, such as preferred language, display settings, and game lobby filters, so you do not need to reconfigure them on every visit.
• Marketing and Targeting Cookies: Where you have consented, these cookies are used to deliver personalised promotional content and offers relevant to your gaming preferences and activity on 666ep.

As a 666ep player, you have the following rights in relation to the personal data we hold about you. These rights are not absolute in all circumstances — some are subject to legal or regulatory override — but 666ep is committed to honouring them to the fullest extent possible:

• Right of Access: You have the right to request a copy of the personal data 666ep holds about you. We will provide this within 30 days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many details directly in your account settings, or contact support for data that requires manual correction.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected. This right may be limited where retention is required for legal or regulatory compliance.
• Right to Restriction: You have the right to request that processing of your data be restricted in certain circumstances, for example where you contest its accuracy while we investigate.
• Right to Object: You have the right to object to processing of your personal data where 666ep relies on legitimate interests as the legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format where processing is based on consent or contractual necessity.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our support team with your request. We will acknowledge your request promptly and respond in full within 30 calendar days. See Section 15 for contact details.

666ep implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. While no system can guarantee absolute security, our measures represent current industry best practice for online gaming platforms:

• TLS/HTTPS encryption for all data transmitted between your device and the 666ep platform.
• AES-256 encryption for sensitive data stored at rest within our database infrastructure.
• Multi-factor authentication options for player accounts and mandatory two-factor authentication for all 666ep staff with administrative access.
• Regular penetration testing and vulnerability assessments conducted by independent third-party security specialists.
• Strict role-based access controls limiting employee access to personal data on a need-to-know basis.
• Comprehensive audit logging of all access to personal data by internal systems and staff.
• Incident response procedures designed to detect, contain, and respond to data security incidents in a timely manner.

You also play an important role in keeping your 666ep account secure. We strongly recommend using a unique, strong password for your account, enabling two-factor authentication where available, and never sharing your login credentials with any third party. If you suspect your account has been compromised, contact our support team immediately.

666ep operates exclusively for adults aged 21 and above. The platform is strictly prohibited for use by individuals under the age of 21. We collect date of birth information at registration and require identity verification documents that confirm age as part of our standard KYC process.

666ep does not knowingly collect, store, or process any personal data belonging to individuals under the age of 21. If we become aware that personal data of an underage individual has been collected, we will promptly delete that data and close the associated account without notice.

We encourage parents and guardians across Pakistan to make use of parental control tools and internet filtering software to help prevent minors from accessing online gambling platforms. For further guidance on responsible gaming and age protection measures, please visit our Responsible Gaming page.

666ep reserves the right to update, amend, or replace this Privacy Policy at any time. Changes may be made in response to evolving legal requirements, regulatory guidance, changes in our data processing activities, or improvements to our privacy practices.

When material changes are made to this Privacy Policy, 666ep will notify registered players through one or more of the following channels:

• A prominent notice displayed on the 666ep platform upon your next login following the change.
• A direct email notification to your registered email address.
• An update to the "Last Updated" date displayed at the top of this Privacy Policy page.

The updated Privacy Policy will become effective on the date stated in the notice. Your continued use of the 666ep platform after the effective date of any revision constitutes your acceptance of the updated policy. If you do not agree with the revised policy, you should discontinue use of the platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 666ep processes your personal data, please do not hesitate to get in touch. Our support team is available around the clock to assist players across Karachi, Lahore, Islamabad, Faisalabad, and all of Pakistan.

You can reach the 666ep privacy and data team at the following email address. Please note this address is provided for correspondence purposes only and is not a clickable link:

When contacting us regarding a data rights request or a privacy concern, please include your registered username and a clear description of your request so that our team can locate your account records and respond as efficiently as possible. All data rights requests will receive a written acknowledgement within five (5) business days and a full response within thirty (30) calendar days.

For urgent matters such as suspected unauthorised account access, potential data breaches affecting your account, or immediate self-exclusion requests under our Responsible Gaming framework, please indicate the urgency clearly in your communication so it can be prioritised and escalated without delay.