Plain Language Summary: 666 d collects only the data it genuinely needs to run your account and keep the platform secure. We do not sell your data to third parties. You can request a copy of your data, ask us to correct it, or ask us to delete it at any time by contacting support@666d.me.
1Who We Are and What This Policy Covers
This Privacy Policy applies to all personal data collected and processed by 666 d through its website at 666d.me and through any related services, promotional activities, VIP programmes or customer support interactions. When this policy refers to "666 d", "we", "us" or "our", it means the entity operating the 666 d platform.
This policy explains what personal data 666 d collects from players and website visitors, why we collect it, how it is used, who it is shared with, how long we keep it, and what rights you have as an individual. It should be read alongside our Terms and Conditions and Responsible Gaming Policy, both of which form part of the overall agreement governing your use of 666 d.
By registering a 666 d account or using the platform in any way, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how 666 d handles personal data as described here, you should not register an account or continue using the platform.
2Personal Data We Collect
666 d collects personal data in two ways: directly from you when you register and interact with the platform, and automatically through standard technical systems when you browse or use the 666 d website. The following table sets out the categories of data we collect and the context in which each category is gathered.
| Data Category | Examples | How Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, nationality | Registration form; KYC document submission |
| Contact Data | Email address, mobile number, home address | Registration form; account settings updates |
| Financial Data | Easypaisa/JazzCash account number, bank account details, transaction history | Deposit and withdrawal processes; payment provider confirmation |
| Gaming Activity Data | Bets placed, games played, win/loss history, session durations, bonus usage | Automatic system recording during gameplay |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Automatic collection via cookies and server logs |
| Communications Data | Support chat transcripts, email correspondence, complaint records | Customer support interactions |
| Verification Documents | CNIC scan, passport copy, proof of address, payment method screenshot | KYC verification process prior to withdrawal |
Minimum Necessary Principle: 666 d collects only the personal data that is genuinely required for the specific purpose it serves. We do not collect additional information simply because it might be useful in the future. If we need data for a new purpose, we will update this policy and notify you.
3How 666 d Uses Your Personal Data
666 d uses your personal data for the following specific purposes. Each purpose is linked to a lawful basis, which is explained in Section 4:
- Account creation and management: Your identity and contact data are used to register your account, verify that you are who you say you are, and allow you to log in and manage your preferences at 666 d.
- Processing deposits and withdrawals: Financial data is required to process payments through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card channels. We verify that payment methods belong to you to prevent fraud and protect all players.
- Delivering games and sports betting: Gaming activity data is necessary to operate the games you play, calculate results, credit winnings, and maintain accurate betting records at 666 d.
- KYC and identity verification: Verification document data is used to confirm your age, identity and address as required by our operating obligations. This protects both you and the integrity of the platform.
- Fraud prevention and platform security: Technical data and gaming activity patterns are analysed to detect suspicious activity, prevent multi-accounting, identify potential collusion, and protect 666 d players from fraud.
- Responsible gaming monitoring: Gaming activity data is used to monitor playing patterns for signs of problem gambling. Where patterns suggest risk, 666 d may contact you with responsible gaming information or invoke cooling-off measures in line with our Responsible Gaming Policy.
- Customer support: Communications data is used to handle your queries, resolve complaints and improve the support experience at 666 d.
- VIP Club management: Gaming activity and contact data are used to calculate your VIP tier, apply cashback and bonuses, and communicate tier changes or exclusive VIP offers.
- Marketing communications: Where you have consented, contact data is used to send you promotional offers, new game announcements and platform news. You can withdraw this consent at any time — see Section 10.
- Legal and regulatory compliance: Certain data is retained and may be disclosed to comply with applicable legal obligations, including anti-money-laundering requirements and responses to lawful requests from competent authorities.
4Legal Basis for Processing
Every use of personal data at 666 d is grounded in one of the following legal bases. We rely on the most appropriate basis for each specific processing activity:
- Contractual necessity: Processing required to fulfil our contract with you — primarily operating your account, processing transactions and delivering the games you play at 666 d. Without this processing, we cannot provide the service.
- Legal obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, anti-money-laundering checks and retention of transaction records.
- Legitimate interests: Processing that serves 666 d's genuine business interests where these do not override your rights — including fraud prevention, platform security, responsible gaming monitoring and improving the overall player experience.
- Consent: Processing based on your freely given, specific and informed agreement — primarily for marketing communications. Where consent is the basis, you retain the right to withdraw it at any time without affecting any other aspect of your account.
5Sharing Your Personal Data
666 d does not sell your personal data to third parties under any circumstances. We share data only where it is genuinely necessary for one of the following purposes, and only with parties who are contractually bound to handle it securely:
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners and card processing services receive the financial data required to complete your deposit or withdrawal transactions. These providers operate under their own regulated privacy frameworks.
- Identity verification providers: Third-party KYC services may receive your identity document data to verify your age and identity. These providers are contractually bound to use your data only for verification purposes and to delete it after verification is complete.
- Game providers: Licensed game studios (such as NetEnt, Microgaming, Pragmatic Play and others) receive the minimum data required to operate their games — typically a pseudonymous player identifier and bet/win amounts. They do not receive your full identity data.
- Fraud prevention and security services: Automated fraud detection systems may process technical data and account activity to identify risk patterns. These systems operate under strict data minimisation and security standards.
- Regulatory and law enforcement authorities: 666 d may be required by law to disclose certain data to competent authorities — for example, in response to an anti-money-laundering investigation. Such disclosures are made only where legally required and only to the extent required by the specific request.
- Professional advisers: Lawyers, auditors and other professional service providers may access limited data where necessary for specific, time-bound engagements, under strict confidentiality obligations.
No Data Sales, Ever: 666 d has never sold player data and will never do so. Any third party that receives your data from 666 d receives it solely to perform a specific service on our behalf, under a written contract that prohibits any use of your data for their own purposes.
6Cookies and Tracking Technologies
The 666 d website uses cookies and similar technologies to operate the platform correctly, remember your preferences, maintain your login session, and understand how the site is being used. The following types of cookies are used at 666 d:
- Strictly necessary cookies: These are required for the platform to function. They maintain your login session, remember your language preference, and enable the core functionality of your account. The platform cannot function without these cookies and they cannot be disabled.
- Functional cookies: These remember your preferences — for example, your preferred bet size, table layout settings or game lobby filters — so that your 666 d experience is consistent across sessions.
- Analytical cookies: 666 d uses analytics to understand aggregate usage patterns — which games are most popular, where players experience difficulties, how navigation flows are used. This data is processed in aggregate form and does not identify individual players.
- Security cookies: These help 666 d identify suspicious login attempts, detect bot activity and prevent account takeover. They are a key part of our fraud prevention infrastructure.
You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use the 666 d platform. Disabling functional or analytical cookies may reduce the quality of your experience but will not prevent you from using the core platform features.
7How Long We Keep Your Data
666 d retains personal data only for as long as is necessary for the purpose for which it was collected, subject to any applicable legal minimum retention periods. The following retention periods apply to the main categories of data held at 666 d:
- Account and identity data: Retained for the lifetime of your account and for a minimum of five years following account closure, in line with anti-money-laundering requirements.
- Financial transaction records: Retained for a minimum of seven years following each transaction, in line with financial record-keeping obligations.
- Gaming activity records: Retained for five years from the date of each gaming session or bet. Active VIP Club history is retained for the lifetime of your account.
- KYC verification documents: Retained for five years from the date of verification or from the date of account closure, whichever is later.
- Customer support communications: Retained for three years from the date of the final communication in each support thread.
- Marketing consent records: Retained until consent is withdrawn, plus two years thereafter as evidence of the consent status at the time marketing was sent.
After the applicable retention period has expired, personal data is securely deleted or anonymised. Anonymised, aggregated data — which cannot be used to identify any individual player — may be retained indefinitely for statistical and business improvement purposes.
8How 666 d Secures Your Data
666 d takes data security seriously and has implemented a layered set of technical and organisational measures to protect personal data against unauthorised access, loss, theft or misuse:
- SSL/TLS encryption: All data transmitted between your device and 666 d servers is encrypted using current SSL/TLS standards. This protects your login credentials, financial data and personal information from interception in transit.
- Encrypted storage: Sensitive data fields — including CNIC numbers, financial account identifiers and passwords — are stored encrypted at rest using industry-standard algorithms. Passwords are never stored in readable form.
- Access controls: Internal access to personal data at 666 d is restricted on a strict need-to-know basis. Staff can only access the data categories required for their specific role. All internal data access is logged and auditable.
- Two-factor authentication: 666 d supports and recommends two-factor authentication for all player accounts. Enabling 2FA in your account settings significantly reduces the risk of unauthorised account access.
- Regular security assessments: 666 d conducts regular vulnerability assessments and security testing of platform infrastructure. Critical vulnerabilities are addressed with priority before they can be exploited.
- Data breach response: 666 d maintains a formal data breach response procedure. In the event of a breach that poses a risk to players' rights, affected players and relevant authorities will be notified within the timeframes required by applicable law.
Your Role in Security: 666 d's security measures protect data on our side. You can help by using a strong, unique password for your 666 d account, enabling two-factor authentication, and never sharing your login credentials with anyone — including anyone claiming to be 666 d staff. We will never ask for your password.
9Your Data Rights
As an individual whose personal data is processed by 666 d, you have the following rights. These rights can be exercised at any time by contacting 666 d at support@666d.me with the subject line "Data Rights Request":
Right of Access
Request a copy of all personal data 666 d holds about you. We will provide this within 30 days, free of charge for reasonable requests.
Right to Rectification
Request correction of inaccurate personal data. For most fields, you can update your own information directly from your 666 d account settings.
Right to Erasure
Request deletion of your personal data where it is no longer needed for the purpose it was collected and no legal obligation requires its retention.
Right to Restriction
Request that 666 d restricts processing of your data — for example, while a rectification request is being investigated — without deleting it.
Right to Portability
Receive your personal data in a structured, commonly used, machine-readable format so you can transfer it to another provider if you choose.
Right to Object
Object to processing of your data based on legitimate interests, including profiling for marketing purposes. This right applies where 666 d relies on legitimate interests as the legal basis.
666 d will respond to all data rights requests within 30 calendar days of receipt. In complex cases this period may be extended by up to a further 60 days, in which case we will notify you of the extension and the reason for it. All responses are provided free of charge for reasonable requests.
10Marketing Communications
666 d sends marketing communications — including promotional offers, new game announcements, bonus availability notifications and VIP Club updates — only to players who have explicitly consented to receive them at the time of registration or subsequently through account settings.
You can withdraw your consent to marketing communications at any time through any of the following methods:
- Clicking the unsubscribe link in any marketing email received from 666 d
- Updating your communication preferences in your 666 d account settings under "Notifications"
- Contacting 666 d support at support@666d.me with the request to remove you from all marketing lists
Withdrawing marketing consent will take effect within 48 hours of your request. It will not affect transactional communications — you will still receive account notifications, deposit confirmations, withdrawal confirmations, and security alerts, as these are required for the operation of your account and are not subject to marketing consent.
VIP Club Communications: If you are a member of the 666 d VIP Club, your dedicated account manager will contact you regarding tier-specific offers and account updates. These communications are part of the VIP Club service contract and are separate from general marketing. You can adjust the frequency of these contacts by speaking directly with your account manager.
11Children and Minors
The 666 d platform is strictly for adults aged 18 and over. 666 d does not knowingly collect personal data from persons under 18 years of age. If you are under 18, you must not register an account, access the platform or provide any personal data to 666 d in any way.
If 666 d becomes aware that personal data has been collected from a person under 18 — through age verification failures, parental notification, or any other means — the relevant account will be immediately closed, all data associated with that account will be deleted, and any deposits received will be returned to the source payment method.
If you are a parent or guardian and believe that your child may have registered at 666 d, please contact us immediately at support@666d.me. We will investigate and act on such reports within one business day. For guidance on parental control software that can prevent access to online gaming sites, please visit our Responsible Gaming page.
12Changes to This Privacy Policy
666 d reviews this Privacy Policy regularly and may update it to reflect changes in our data practices, changes in applicable law, or improvements to how we explain our practices to players. The date of the most recent revision is always shown at the top of this page.
Where a change is material — meaning it significantly affects how your data is used or your rights in relation to it — 666 d will notify registered players by email at least 14 days before the change takes effect. For minor clarifications or corrections that do not change the substance of what is described, changes will take effect when the updated policy is published on this page without individual notification.
Your continued use of the 666 d platform after the effective date of any change constitutes acceptance of the updated Privacy Policy. If you do not agree with a material change, you should close your account before the change takes effect. We will provide instructions on how to do this in the notification email we send before any material change.
13Contact Us and Data Protection Queries
If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how 666 d has handled your personal data, please contact us through the following channels:
- Email: support@666d.me — use the subject line "Privacy Query" for data-related questions
- Live Chat: Available from your 666 d account dashboard after login, 24 hours a day, 7 days a week
- Data Rights Requests: Email support@666d.me with subject line "Data Rights Request" — include your account username, the specific right you wish to exercise, and any relevant details
666 d aims to respond to all privacy-related queries within 72 hours and to complete all data rights requests within 30 calendar days. If you are not satisfied with 666 d's response to a privacy concern, you may escalate your complaint to the relevant data protection authority in your jurisdiction.