Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 666i ("Company", "Platform", "we", "us", "our") collects, processes, stores, and discloses personal data relating to individuals who access or use the 666i website at 666i.bio, its associated subdomains, mobile-optimised interfaces, and all services made available through those channels (collectively, the "Platform").

This Policy is incorporated by reference into the 666i Terms & Conditions. By registering a 666i account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with this Policy, you must discontinue your use of the Platform.

2. Data Controller

For the purposes of applicable data protection law, the data controller responsible for your personal data is the legal entity that holds the international gaming licence under which 666i operates. The Company is responsible for ensuring that your personal data is processed lawfully, fairly, and transparently in accordance with this Policy and the data protection obligations imposed by our regulatory framework.

If you have questions about who controls your data or wish to exercise any of your data rights, please contact the 666i Data Protection team via the live chat facility available on the Platform, or by email at the address listed in Section 15 of this Policy.

3. Data We Collect

666i collects personal data in the following categories. The specific data points collected from any individual player will depend on the nature of their interaction with the Platform.

3.1 Identity & Registration Data

Data Category	Examples	Purpose
Identity Information	Full name, date of birth, gender	Account creation, KYC, age verification
Contact Details	Email address, mobile number	Account communications, support, 2FA
Address Information	Residential address, city, postal code	KYC verification, fraud prevention
Identity Documents	CNIC, passport, driving licence scan	KYC compliance, regulatory obligation
Profile Credentials	Username, hashed password	Account access and security

3.2 Financial & Transaction Data

Data Category	Examples	Purpose
Payment Method Details	JazzCash / EasyPaisa account reference, bank account details	Processing deposits and withdrawals
Transaction History	Deposit amounts, withdrawal requests, dates	Account management, AML compliance
Balance Information	Real-money balance, bonus balance	Account operation, financial reporting

3.3 Gaming & Behavioural Data

Data Category	Examples	Purpose
Gameplay Activity	Games played, bets placed, wins/losses, session duration	Service delivery, responsible gaming monitoring
Betting History	Cricket markets, PSL bets, slot wagers, bet stakes	Account records, dispute resolution
Responsible Gaming Data	Deposit limits set, self-exclusion requests, cooling-off periods	Player protection compliance

3.4 Technical & Device Data

When you access the 666i Platform, our systems automatically collect certain technical data, including: IP address, browser type and version, operating system, device type, screen resolution, referring URL, and timestamps of Platform interactions. This data is used for fraud detection, security monitoring, and improving Platform performance.

4. How We Collect Your Data

666i collects personal data through the following channels:

• Direct Submission: Data you provide when registering an account, completing KYC, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical and device data collected automatically as you use the Platform, including through cookies and similar tracking technologies (see Section 10).
• Third-Party Sources: Identity verification and fraud screening data obtained from licensed KYC and AML service providers; payment confirmation data from payment processors such as JazzCash, EasyPaisa, HBL, and UBL.
• Regulatory Bodies: In some circumstances, we may receive data from regulatory or law enforcement authorities in connection with our compliance obligations.

5. How We Use Your Data

666i uses the personal data it collects for the following purposes:

1. Account Registration & Management: Creating, verifying, and maintaining your 666i player account.
2. Identity Verification (KYC): Fulfilling our regulatory obligation to verify the identity and age of all registered players.
3. Payment Processing: Facilitating deposits, processing withdrawal requests, and maintaining accurate transaction records.
4. Game & Service Delivery: Operating casino games, sports betting markets, live dealer services, and all other Platform features.
5. Customer Support: Responding to enquiries, resolving disputes, and maintaining a record of support interactions.
6. Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, account takeover attempts, and other security threats.
7. Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and applying responsible gaming tools where necessary.
8. Legal & Regulatory Compliance: Meeting our obligations under our international gaming licence, applicable anti-money laundering (AML) laws, and other regulatory requirements.
9. Marketing Communications: Sending promotional offers, bonus notifications, and platform updates — but only where you have provided your explicit consent to receive such communications.
10. Platform Improvement: Analysing aggregated, anonymised usage data to identify technical issues, improve user experience, and develop new features.

6. Legal Basis for Processing

Where data protection law requires a legal basis for processing personal data, 666i relies on the following grounds:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your account, process payments, and deliver gaming services.
• Legal Obligation: Processing required to comply with our regulatory and licensing obligations, including KYC, AML, and responsible gaming requirements.
• Legitimate Interests: Processing for fraud prevention, Platform security, and improving our services, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided clear, freely given consent. You may withdraw consent at any time.

7. Data Sharing & Disclosure

7.1 Service Providers

666i shares personal data with carefully selected third-party service providers who assist in operating the Platform. These include identity verification providers, payment processors, game software suppliers, cloud hosting providers, and customer support platform operators. All third-party processors are bound by data processing agreements that restrict the use of your data to the specific purpose for which it was shared.

7.2 Regulatory & Law Enforcement Authorities

666i may disclose personal data to licensing authorities, financial intelligence units, law enforcement agencies, or other regulatory bodies where required to do so by law, court order, or regulatory direction. Such disclosures are made only to the extent necessary to comply with the applicable legal obligation.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the Company's business, player personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it.

7.4 No Sale of Personal Data

666i does not and will never sell, rent, or lease your personal data to third-party marketers or data brokers. Your information is not a commodity — it exists solely to enable your use of the 666i Platform and to satisfy our legal and regulatory obligations.

8. Data Retention

666i retains personal data for as long as is necessary to fulfil the purposes set out in this Policy, and for as long as required by our legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's active status on the Platform.
• Post-Closure Account Data: Following account closure, identity and transaction records are retained for a minimum of five (5) years to comply with AML and gaming licence requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Marketing Consent Records: Retained for the duration of consent plus three (3) years to demonstrate compliance.
• Technical Logs: Typically retained for a rolling period of twelve (12) months for security and fraud investigation purposes.

When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

9. Data Security

666i implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS encryption for all data transmitted between your device and the 666i Platform;
• AES-256 encryption for sensitive data stored at rest on Platform servers;
• Role-based access controls ensuring that staff can only access data relevant to their specific job function;
• Multi-factor authentication requirements for all internal system access;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Documented incident response procedures enabling rapid detection, containment, and notification of any data breach.

Notwithstanding these measures, no internet-based system can be guaranteed to be 100% secure. You play an important role in keeping your account safe: use a strong, unique password for your 666i account, enable two-factor authentication, and never share your credentials with anyone.

10. Cookies & Tracking Technologies

10.1 What Cookies We Use

The 666i Platform uses cookies and similar tracking technologies (such as pixels and local storage) to deliver its services. The categories of cookies used are:

• Strictly Necessary Cookies: Essential for the Platform to function — for example, maintaining your logged-in session. These cannot be disabled.
• Performance & Analytics Cookies: Help us understand how players use the Platform so we can improve it. Data collected is aggregated and anonymised.
• Functional Cookies: Remember your preferences, such as language settings and responsible gaming limits you have set.
• Marketing Cookies: Used to deliver relevant promotional content where you have consented. These are not set without your explicit agreement.

10.2 Managing Cookies

You can control non-essential cookies through the cookie preference centre accessible from the Platform footer. You may also configure your browser settings to block or delete cookies at any time; however, disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from accessing certain features including your account.

11. Your Data Rights

Subject to applicable law and our regulatory obligations, you hold the following rights in respect of the personal data that 666i processes about you. To exercise any of these rights, contact 666i support via live chat and we will respond within the legally prescribed timeframe — typically within 30 days.

12. Minors & Age Policy

The 666i Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account or use any part of the Platform.

Where 666i becomes aware that personal data has been collected from an individual who is under the age of 21, we will take immediate steps to delete that data and close the associated account. Any deposits or winnings associated with an underage account will be handled in accordance with our regulatory obligations and the Terms & Conditions.

If you are a parent or guardian and believe that a person under your care has registered with 666i, please contact our support team immediately via live chat so that we can investigate and act swiftly.

13. International Data Transfers

As 666i operates under an international gaming licence and uses globally distributed infrastructure, your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction.

Where such transfers occur, 666i ensures that appropriate safeguards are in place to protect your personal data. These safeguards may include standard contractual clauses approved by relevant data protection authorities, binding corporate rules, or reliance on adequacy decisions where applicable.

For players accessing 666i from Pakistan, please be aware that by using the Platform you consent to the transfer of your personal data to our servers and service providers located in jurisdictions outside Pakistan, subject to the protections described in this section.

14. Changes to This Privacy Policy

666i reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform operations. When we make material changes to this Policy, we will notify registered players by email and/or via a prominent notice on the Platform prior to the changes taking effect. The "Effective Date" at the top of this page will always reflect when the current version came into force.

We encourage you to review this Privacy Policy periodically. Your continued use of the 666i Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you object to any changes, you must stop using the Platform and may request account closure by contacting support.

15. Contact & Data Requests

For any questions about this Privacy Policy, to exercise your data rights, or to raise a privacy-related concern, please reach out to the 666i team through the following channels:

• Live Chat: Available 24/7 directly on the 666i Platform — the fastest route for all data requests and privacy queries.
• Email: [email protected] (plain text — not a clickable link). Please use the subject line "Privacy Request" to ensure prompt routing to our Data Protection team.
• Response Timeframe: 666i will acknowledge all data rights requests within 72 hours and will provide a substantive response within 30 calendar days.

If you are not satisfied with our response to a privacy concern, you may have the right to lodge a complaint with the relevant data protection authority or the regulatory body overseeing our gaming licence. We take all privacy complaints seriously and will cooperate fully with any regulatory enquiry.