666q Privacy Policy – How We Handle Your Personal Data

1 Who We Are

666q is an online gaming and sports betting platform serving players in Pakistan, accessible at 666q.onl and through the 666q mobile app. All services on the platform are operated by 666q and are available in Pakistani Rupees (PKR) using payment methods that are widely used across Pakistan, including JazzCash, Easypaisa and Raast.

This Privacy Policy applies to all users who visit 666q.onl, register an account, download the 666q app, or interact with the platform in any way. References to "666q", "we", "our" or "us" in this document refer to the platform operator. References to "you" or "your" refer to the person using the platform.

If you have questions about how we handle your personal information, or if you wish to exercise any of your data rights, you can contact us directly at [email protected]. We aim to respond to all data-related enquiries within five working days.

2 Personal Data We Collect

We only collect information that is genuinely needed to operate your account, process your transactions and keep the platform running safely and fairly. Here is a breakdown of the categories of data we collect and when each type is gathered:

We do not collect full payment card numbers. Card data is handled directly by our payment processing partners using PCI-DSS compliant infrastructure. 666q only retains a tokenised reference and masked card details (last four digits) for display purposes in your account.

3 Why We Collect Your Information

Every piece of data we collect serves a specific purpose. We do not collect information speculatively or build profiles beyond what is needed to run the platform properly. The main reasons we process your data are:

Account Management

To create and maintain your 666q account, verify your identity, process login requests and keep your preferences and history accessible across devices. Without this data your account simply cannot function.

Payment Processing

To process deposits and withdrawals in PKR through JazzCash, Easypaisa, Raast, bank transfer, debit and credit cards and other supported wallets. Financial transaction records are also retained to comply with anti-money laundering obligations.

Platform Safety and Fraud Prevention

To detect and prevent fraud, multiple accounts, bonus abuse, money laundering and other activities that are prohibited under our Terms and Conditions. Technical data like IP addresses and device fingerprints are used specifically for this purpose.

Responsible Gaming

To monitor gaming patterns in the context of responsible gaming tools. If you have set deposit limits or requested a self-exclusion, we use your account activity data to enforce those settings accurately. We may also proactively reach out if usage patterns suggest a player may benefit from responsible gaming support.

Legal Obligations

To meet record-keeping, anti-money laundering, identity verification and other legal requirements that apply to operating an online gaming platform.

Customer Support

To investigate and resolve support requests, disputes and complaints efficiently. Support agents access account data only where necessary to address your specific query.

Platform Improvement

To analyse aggregated, anonymised usage data to improve the platform's performance, identify popular games and features, and optimise the experience for players in Pakistan.

4 Payment Data and PKR Transactions

All financial transactions on 666q are denominated in Pakistani Rupees (PKR). The platform supports JazzCash, Easypaisa, Raast, standard bank transfer (IBFT), debit cards, credit cards and other mobile wallets. Each of these payment channels involves a different set of data flows.

When you make a deposit or withdrawal via JazzCash or Easypaisa, your mobile number is shared with the respective payment provider to initiate the transaction. 666q receives a confirmation response but does not have access to your JazzCash or Easypaisa account credentials or PIN.

When you use a debit or credit card, the full card number is entered directly into a secure payment form hosted by our PCI-DSS certified payment gateway. 666q never sees or stores your full card number. We retain only a tokenised reference and the last four digits for your records.

For Raast and bank transfer payments, your bank account number and transfer reference may be logged as part of the transaction record. This information is used solely for matching incoming payments to your 666q account and for resolving any payment disputes that may arise.

Transaction records — including amounts, dates, payment method types and status — are retained for a minimum of five years as part of our financial record-keeping obligations. This retention period is standard practice for platforms handling financial transactions and is not negotiable on an individual basis.

5 Cookies and Tracking Technologies

666q uses cookies and similar tracking technologies on its website and app to make the platform work properly and to understand how players use it. Here is what each category of cookie does:

Strictly Necessary Cookies

These cookies are required for the platform to function. They manage your login session, keep your account secure during a visit, remember your language preference and ensure that responsible gaming settings you have applied remain active. You cannot opt out of these cookies while using the platform.

Performance and Analytics Cookies

We use analytics tools to collect anonymised, aggregated data about how pages are used — which sections players visit most, how long sessions last and where technical errors occur. This data does not identify you personally and is used only to improve the platform.

Functional Cookies

These remember your preferences — for example, your preferred game category, notification settings or display options — so you do not have to reset them on every visit.

Managing Cookies

You can control non-essential cookies through your browser settings or through the cookie preference panel available on the 666q website. Disabling strictly necessary cookies will affect your ability to log in and use the platform normally. We recommend keeping them enabled for the best experience.

6 Sharing Your Data With Third Parties

666q does not sell your personal data to third parties under any circumstances. We do share certain data with trusted partners where it is necessary to operate the platform. Every partner we work with is required to handle your data securely and only for the specific purpose for which it was shared.

The categories of third parties we may share data with are:

• Payment Processors — JazzCash, Easypaisa, Raast, card payment gateways and other payment service providers. Shared data is limited to what is necessary to process your specific transaction.
• Identity Verification Services — third-party KYC providers who verify the authenticity of identity documents you submit. Your documents are processed in accordance with the verification provider's own privacy policy.
• Game Providers — game studios and content providers whose titles appear on the platform. Limited technical session data may be shared to operate the game and record results accurately.
• Fraud Prevention Services — providers of anti-fraud, anti-money laundering and risk management tools. Data shared is used exclusively for detecting and preventing prohibited activity.
• Customer Support Tools — platforms used to manage support tickets and live chat. Support agents access your account data only to the extent needed to resolve your specific query.
• Legal and Regulatory Authorities — where we are required by law to disclose information, for example in response to a valid legal request or in connection with an investigation into financial crime.

We do not share your data with advertisers, data brokers or marketing companies. If this ever changes, we will update this Privacy Policy and notify registered users before any such sharing begins.

7 How Long We Keep Your Data

We keep your personal data for as long as your account is active and for a period after closure as required for legal, compliance and dispute resolution purposes. The specific retention periods we apply are:

• Account and registration data — retained for the life of your account plus a minimum of five years after closure
• Financial transaction records — retained for a minimum of five years from the date of each transaction
• Identity verification documents — retained for five years after the verification was completed or after account closure, whichever is later
• Gaming activity logs — retained for three years from the date of the activity
• Support communications — retained for two years from the date the query was resolved
• Technical and device data — retained for up to 12 months from the date of collection unless retained longer for fraud investigation purposes

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to you as an individual. Anonymised, aggregated data — such as platform-wide statistics — may be retained indefinitely as it no longer constitutes personal data.

8 How We Keep Your Data Secure

Keeping your personal data safe is something we take seriously. 666q uses a combination of technical and organisational measures to protect your information against unauthorised access, loss, alteration or disclosure.

The security measures we have in place include:

• TLS encryption for all data transmitted between your device and the 666q platform
• Encryption of sensitive data at rest, including identity documents and financial records
• Hashed and salted password storage — your actual password is never stored in readable form
• Two-factor authentication available for account login
• Access controls that restrict which staff members can view which categories of data
• Regular security reviews and vulnerability assessments of platform infrastructure
• Monitoring systems that detect and alert on unusual access patterns or potential breaches

While we work hard to protect your data, no internet platform can guarantee absolute security. You also have a role to play — use a strong, unique password for your 666q account, do not share your login details with anyone and contact support immediately if you suspect unauthorised access to your account.

9 Your Data Rights

You have a number of rights over the personal data that 666q holds about you. These rights are available to every registered user and can be exercised by contacting us at [email protected]. We will respond to all data rights requests within a reasonable period, typically within 30 days.

To exercise any of these rights, send your request to [email protected] from the email address registered to your account. We may ask you to verify your identity before processing the request. There is no fee for submitting a data rights request.

10 Children's Privacy

666q is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Registration requires you to confirm that you are 18 or older, and we may request proof of age to verify this declaration.

If we become aware that personal data has been collected from a person under 18, we will delete that data and close the associated account immediately. If you are a parent or guardian and believe a minor has created a 666q account, please contact us at [email protected] straight away with the relevant details so we can investigate and take action promptly.

We encourage parents and guardians to make use of parental control tools available on shared devices to prevent access to adult gaming platforms. For more guidance on safe and responsible use, please visit our Responsible Gaming page.

11 Marketing Communications

If you have opted in to receive marketing messages from 666q, we may contact you by SMS, email or push notification to let you know about new promotions, bonus offers, new game launches, PSL cricket betting markets, sports betting events and other platform updates.

We will only send marketing communications where you have given explicit consent at registration or subsequently through your account settings. We do not send unsolicited marketing messages to people who have not opted in.

You can withdraw your consent and stop receiving marketing communications at any time by:

• Updating your notification preferences in your 666q account settings
• Clicking the unsubscribe link in any marketing email you receive from us
• Contacting the support team at [email protected] and requesting removal from marketing lists

Withdrawing consent for marketing does not affect your ability to receive transactional communications that are necessary for your account, such as deposit confirmations, withdrawal notifications and security alerts. Those messages will continue regardless of your marketing preference setting.

12 Updates to This Privacy Policy

We review and update this Privacy Policy from time to time to reflect changes in how we operate the platform, changes in applicable law, or improvements in our data practices. When we make a material change — one that meaningfully affects how we collect or use your data — we will notify registered users by email or through an on-screen notice the next time you log in.

Minor changes such as formatting corrections, clarifications or updates to contact details may be made without prior notification. The "last updated" date at the top of this page will always reflect when the most recent revision was made.

We encourage you to revisit this page periodically so you remain aware of how 666q handles your information. Continued use of the platform after a policy update takes effect constitutes your acceptance of the revised terms.

13 Contact Us About Privacy

If you have any questions, concerns or requests related to your personal data and how 666q handles it, our support team is here to help. Please reach out using the contact details below:

For terms governing your use of the platform, please refer to our Terms and Conditions. For responsible gaming tools and self-exclusion, visit the Responsible Gaming page.