Privacy Policy — 666win Pakistan

This Privacy Policy is issued by 666win ("we", "us", "our") — the operator of the online gaming and sports betting platform accessible at 666win.wine. 666win is the data controller responsible for personal information collected through this website and all associated services, mobile access, and communications.

This policy explains what personal data 666win collects from players and visitors, why we collect it, how it is used, how long we keep it, who we share it with, and what rights you have regarding your own information. It applies to all registered players of 666win as well as anyone who visits 666win.wine without registering.

If you have any questions about this policy or about how 666win handles your data, please contact us at support@666win.wine. Our support team is available 24 hours a day, seven days a week, and can respond in English or Urdu.

666win collects personal data through several channels: the registration form, the KYC (Know Your Customer) verification process, your activity on the platform, and your communications with our support team. Here is a breakdown of each category:

666win does not collect sensitive personal data such as religious beliefs, political opinions, or health information. The only exception is where a player voluntarily discloses a health or vulnerability consideration in the context of a responsible gaming request — in which case that information is treated with strict confidentiality and used only to action the relevant responsible gaming measure.

666win uses the personal data we collect for the following specific purposes. We only use your data for purposes that we have identified a lawful basis for — we don't use your data in ways that are incompatible with why you provided it.

• Account creation and management: We use your identity and contact data to set up, maintain, and administer your 666win account, including enabling you to log in, update your profile, and access your gaming history.
• Identity verification and KYC: We use identity data and documents to verify that you are who you say you are, that you meet the minimum age requirement of 18, and to comply with anti-money-laundering obligations.
• Payment processing: Financial data is used to process deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payments — and to send PKR withdrawals to your verified payment accounts.
• Fraud prevention and platform security: Technical data, gaming activity data, and financial data are analysed to detect suspicious patterns, prevent bonus abuse, and protect 666win and our players from fraud and money laundering.
• Responsible gaming monitoring: Gaming activity data — including session length, bet frequency, deposit patterns, and loss amounts — is monitored to identify players who may be showing signs of problem gambling, enabling 666win to intervene early.
• Customer support: Contact data and communications data are used to respond to your queries, process complaints, and resolve account issues.
• Marketing communications (opt-in only): If you have given consent, we use your contact data to send you relevant promotions, bonus offers, game announcements, and PSL season updates. You can withdraw this consent at any time.
• Platform improvement and analytics: Aggregated, anonymised technical and activity data is used to understand how players use 666win and to improve the platform's performance, navigation, and game selection.

Every time 666win processes your personal data, we do so on one of the following legal bases. This is not just legal terminology — it's a genuine constraint on what we can and cannot do with your information.

• Contract performance: Processing that is necessary to deliver the 666win service you signed up for — account management, payments, and game access.
• Legal obligation: Processing we are required to carry out by law — including KYC identity checks, age verification, and anti-money-laundering record keeping.
• Legitimate interests: Processing that serves 666win's genuine operational interests — fraud detection, platform security, and responsible gaming monitoring — where those interests do not override your privacy rights.
• Consent: Processing that requires your explicit agreement — primarily marketing communications. You can withdraw this consent at any time without affecting your access to the 666win platform.

666win does not sell, rent, or otherwise commercially exploit your personal data. Data is shared with third parties only where strictly necessary to operate the platform, and all such parties are contractually bound to the same data protection standards 666win maintains.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT systems, and card networks receive the minimum financial data necessary to process your transactions. They are not permitted to use this data for any other purpose.
• Identity verification services: Third-party KYC providers receive your identity documents and personal details solely for the purpose of verifying your identity and age. Verification providers are selected on the basis of their data security credentials.
• Game software providers: Providers such as Spribe, Pragmatic Play, BGaming, and others receive your player ID and session data to deliver the game. Full identity data is not shared with game providers.
• IT and hosting infrastructure: Cloud hosting and server infrastructure partners process data to keep the 666win platform running. All infrastructure partners operate under strict data processing agreements.
• Law enforcement and regulators: 666win will disclose personal data to government authorities, law enforcement agencies, or regulators where legally required to do so — for example, in response to a valid legal order or as part of an anti-money-laundering investigation.

No personal data of 666win players is transferred to third parties in countries with inadequate data protection standards without appropriate safeguards in place.

666win uses cookies and similar technologies on the 666win.wine website. Cookies are small text files stored on your device that help the platform function correctly, remember your preferences, and — with your consent — analyse how you use the site.

The categories of cookies 666win uses are as follows:

• Essential cookies: Required for the platform to function — keeping you logged in, remembering your session, and enabling secure transactions. These cannot be disabled without breaking the platform.
• Performance cookies: Collect anonymised data about how visitors use 666win — which pages are most visited, where errors occur. Used to improve the platform. Enabled by default; you can opt out.
• Functionality cookies: Remember your preferences — language settings, game filters, display preferences — so you don't have to reset them each visit.
• Analytics cookies: Used with your consent to understand traffic patterns and player behaviour in aggregate. 666win does not use analytics data to track individuals across unrelated websites.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to use the 666win platform normally. A cookie consent banner is displayed on your first visit to 666win.wine where non-essential cookies require your explicit consent.

666win retains personal data for only as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the lifetime of your account plus a minimum of 5 years after account closure. This covers the requirement to retain gambling records and financial transaction history under applicable regulatory standards.
• KYC and identity documents: Retained for a minimum of 5 years from the date of submission, in line with anti-money-laundering obligations. This period cannot be shortened by a data deletion request.
• Financial transaction records: Retained for a minimum of 5 years. Required for audit, anti-fraud, and regulatory compliance purposes.
• Support communications: Retained for 2 years from the date of the interaction, or longer if the communication relates to an ongoing complaint or legal matter.
• Marketing consent records: Retained for as long as your opt-in consent is active, plus 1 year after withdrawal of consent as evidence of prior authorisation.
• Technical and log data: Retained for 12 months from collection, then deleted or anonymised.

Once the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

666win takes the security of player data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or disclosure. These include:

• SSL/TLS encryption on all data transmitted between your device and 666win's servers
• Encryption at rest for sensitive stored data including financial information and identity documents
• Multi-factor authentication requirements for internal staff accessing player data systems
• Role-based access controls ensuring staff only access the data necessary for their specific function
• Regular security assessments and penetration testing of the 666win platform
• Monitoring systems that detect unusual access patterns and trigger alerts for investigation
• Incident response procedures that enable 666win to identify, contain, and notify players of any data breach in a timely manner

No digital security system is completely infallible. In the event of a data breach that poses a risk to your rights and freedoms, 666win will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach.

As a 666win player, you have the following rights regarding your personal data. To exercise any of these rights, email support@666win.wine with the subject line "Data Rights Request" and your account username. 666win will respond within 30 days.

666win is strictly an adults-only platform. We do not knowingly collect personal data from any individual under the age of 18. The registration process includes age verification steps specifically designed to prevent minors from creating accounts.

If 666win becomes aware that personal data belonging to a person under 18 has been collected — whether through a fraudulent registration or any other means — that data will be deleted immediately and the account permanently closed. Any funds in the account at the time of closure will be handled in accordance with applicable legal requirements.

If you are a parent or guardian and you believe that your child has created an account on 666win, please contact support@666win.wine immediately with the relevant account details. We will investigate and act without delay.

666win may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or improvements in our privacy practices. When material changes are made, we will notify registered players via email or in-platform notification at least 7 days before the changes take effect.

The "last updated" date at the top of this page indicates when the most recent revision was made. The most current version of this policy is always available at 666win.wine/privacy-policy. We encourage you to review this page periodically, especially if you are about to share new personal information with us — for example, uploading a fresh KYC document or changing your payment method.

Continuing to use the 666win platform after the effective date of an update to this policy means you have accepted the revised terms. If you disagree with any changes, please contact support to discuss your options or request account closure before the updated policy takes effect.

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data 666win holds about you, please use the contact details below. We aim to respond to all privacy-related enquiries within 48 hours and to fully resolve requests within 30 days.