Privacy Policy

This Privacy Policy ("Policy") is issued by 666d4 ("we", "us", "our"), the operator of the online casino and sports betting platform accessible at 666d4.net. It sets out how we collect, use, store, share, and protect the personal information of all individuals ("you", "the Player") who visit, register on, or interact with the 666d4 platform.

By creating a 666d4 account and using our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions, which govern the overall use of the 666d4 platform.

666d4 collects personal information through several touchpoints across the player lifecycle. The categories of data we collect are described below.

2.1 Registration Data

When you create a 666d4 account, we collect:

• Full legal name
• Date of birth (required to verify the 21+ age restriction)
• Email address
• Country of residence (Pakistan or other served market)
• Username and encrypted password
• Mobile phone number (if provided for two-factor authentication or SMS communications)

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and age verification requirements, we may collect:

• Copy of government-issued national identity card (CNIC) or passport
• Proof of address (utility bill, bank statement dated within three months)
• Selfie or liveness check image for facial match verification
• Source of funds documentation where applicable

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction history
• Payment method details (JazzCash account number, EasyPaisa number, bank account information, cryptocurrency wallet addresses for Bitcoin and USDT)
• Transaction timestamps and amounts in PKR or cryptocurrency equivalent

2.4 Activity and Behavioural Data

• Games played, bets placed, and wagering history
• Session durations, login timestamps, and logout events
• Device type, operating system, and browser version
• IP address and approximate geographic location

2.5 Support and Communications Data

• Live chat transcripts and email correspondence with 666d4 support
• Feedback submitted through any 666d4 survey or review channel

666d4 uses the personal data we collect for the following purposes:

666d4 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Processing that is necessary to fulfil our obligations under the Terms & Conditions you accepted at registration, including account management, payments, and gameplay.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification mandates, and tax reporting obligations.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services — provided such interests are not overridden by your fundamental rights.
• Consent: Where you have given explicit consent, such as opting in to receive marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

666d4 does not sell your personal data. We share data only where necessary and only with the categories of recipient described below.

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and international card networks (Visa, Mastercard) receive the minimum data necessary to process your transaction. Cryptocurrency transactions involve interaction with blockchain networks by their nature; wallet addresses are public on the blockchain but are not linked to your identity by us.
• Identity verification providers: Accredited KYC service providers receive identity documents solely for verification purposes and are bound by strict data processing agreements.
• Game providers: Third-party casino game studios may receive your Player ID and session data necessary to deliver game functionality. They do not receive your full profile or payment details.
• Regulatory and law enforcement authorities: Where required by law, court order, or regulatory direction, 666d4 will disclose relevant information to competent authorities. We will notify you of such disclosure where legally permissible.
• Responsible gaming organisations: In cases of confirmed self-exclusion, your exclusion status may be shared with relevant inter-operator responsible gaming schemes to prevent re-registration.

All third parties with whom we share personal data are required to handle it in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond the stated scope.

The 666d4 platform uses cookies and similar tracking technologies to operate effectively and deliver a consistent experience. The types of cookies we use are:

• Essential cookies: Necessary for the platform to function, including maintaining your login session, remembering your language preference, and enabling secure payment flows. These cannot be disabled without breaking core functionality.
• Analytics cookies: Used to understand how players navigate the platform, which games are most popular, and where technical issues occur. Data is aggregated and anonymised wherever possible.
• Preference cookies: Store your display settings, odds format preferences, and other customisations so they persist between sessions.
• Marketing cookies (consent-based only): Used to deliver relevant promotional messages on and off the 666d4 platform. These are only set if you have given explicit consent during account setup or through cookie preference settings.

You can manage or delete cookies through your browser's settings at any time. Note that disabling essential cookies will impair your ability to log in and use the platform normally.

666d4 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active account data: Retained for the duration of the account relationship plus a minimum of five years following account closure, in line with typical AML regulatory requirements.
• KYC documentation: Retained for a minimum of five years following the last transaction or account closure, whichever is later.
• Transaction records: Retained for a minimum of seven years to comply with financial record-keeping obligations.
• Support correspondence: Retained for up to three years from the date of the interaction, or longer if the correspondence relates to an unresolved dispute.
• Marketing consent records: Retained for as long as you remain subscribed, and for one year following opt-out.
• Self-exclusion records: Retained for the full duration of the exclusion period plus five years thereafter to prevent re-registration.

When retention periods expire, data is securely deleted or anonymised in accordance with our internal data destruction procedures.

As a registered 666d4 player, you hold the following rights in relation to your personal data. Requests may be submitted via the contact details in Section 13.

• Right of access: You may request a copy of the personal data 666d4 holds about you. We will provide this within 30 days of a verified request.
• Right to rectification: If any data we hold is inaccurate or incomplete, you have the right to request correction. You may update most profile information directly within your account dashboard.
• Right to erasure: You may request deletion of your personal data, subject to our legal retention obligations. We cannot delete data we are legally required to retain (e.g., KYC and transaction records).
• Right to restriction of processing: In certain circumstances, you may request that we limit how we use your data while a dispute or objection is being resolved.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a machine-readable copy of your personal data.
• Right to object: You may object to processing based on legitimate interests, including direct marketing. We will cease marketing processing immediately upon receiving an objection.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the legality of processing prior to withdrawal.

666d4 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• TLS 1.3 encryption for all data in transit between your device and 666d4 servers.
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records.
• Two-factor authentication (2FA) availability for all player accounts.
• Role-based access controls ensuring that 666d4 staff can only access data necessary for their specific function.
• Regular penetration testing and vulnerability assessments conducted by accredited third-party security specialists.
• Automated fraud detection systems monitoring for unusual account activity, login anomalies, and suspicious transaction patterns.
• Secure data centres with physical access controls and redundant infrastructure.

While we take every reasonable precaution to protect your data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for ensuring that your device is adequately protected with up-to-date security software.

Many Pakistani players use 666d4 specifically because of our crypto-first payment infrastructure — Bitcoin, USDT TRC20, and USDT ERC20 are accepted alongside local options such as JazzCash and EasyPaisa. 666d4 is committed to handling crypto-related data with care and proportionality.

While cryptocurrency transactions are recorded on public blockchains, 666d4 does not publicly link your wallet addresses to your identity. Wallet addresses provided for withdrawals are stored securely within your account profile and used solely to process your withdrawal requests.

For players who reach defined transaction thresholds, enhanced due diligence (EDD) may be required under applicable anti-money laundering frameworks. In such cases, we may request additional documentation including proof of the source of the cryptocurrency funds. This is a regulatory requirement and is not optional.

The 666d4 platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from individuals under this age. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are the parent or guardian of a minor and believe they have registered on 666d4 without authorisation, please contact us immediately at the email address in Section 13 so that we can investigate and act accordingly.

666d4 reserves the right to update this Privacy Policy at any time. Where changes are material — meaning they significantly affect how we use your data or your rights in relation to it — we will notify registered players by email or via a prominent notice on the platform prior to the changes taking effect.

The effective date at the top of this Policy indicates when it was last revised. We encourage you to review this Policy periodically. Your continued use of the 666d4 platform following an updated Policy constitutes your acceptance of the revised terms.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data 666d4 holds about you, please contact our data team using the following details:

Please include your registered 666d4 username, the email address associated with your account, and a clear description of your request or concern. We may ask you to verify your identity before processing sensitive data requests.