Privacy Policy — How 666ep Handles Your Data in Pakistan

666ep collects personal data in three main ways: information you provide directly when registering or using the platform, information generated automatically by your use of the platform, and information received from third-party services such as payment processors and identity verification providers.

Data you provide directly:

• Full legal name as it appears on your CNIC or government-issued identity document.
• Date of birth — required to verify that you meet the minimum age requirement of 18 years.
• Residential address in Pakistan.
• Mobile phone number and email address — used for account communications and two-factor authentication.
• CNIC number and, when required for KYC verification, a copy of your CNIC or passport.
• Payment method details — mobile wallet numbers (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details for IBFT transfers, or card details for Visa/Mastercard transactions. Full card numbers are never stored by 666ep and are processed directly by our PCI-DSS compliant payment partner.
• Communications you send to the 666ep support team, including the content of Live Chat, WhatsApp and email conversations.

Data collected automatically:

• IP address and approximate geographic location at the time of login.
• Device type, operating system and browser version.
• Pages visited on the 666ep platform, time spent on each section and click-path data.
• Betting and gaming activity — stakes placed, games played, session duration and wagering history.
• Login timestamps and logout times.
• Cookies and similar tracking technologies (see Section 06 for full details).

Every category of data listed in Section 01 is collected for a specific, legitimate purpose. Below is a straightforward breakdown of those purposes:

666ep will not use your data for any purpose not listed above without first obtaining your explicit consent. If we intend to use your data for a new purpose in the future, we will update this policy and notify you in advance.

666ep does not share your personal data with third parties for commercial or marketing purposes. Data is shared only in the following limited, necessary circumstances:

• KYC and identity verification providers: When you submit identity documents for account verification, those documents are processed by a licensed third-party KYC provider. This provider operates under a strict data processing agreement with 666ep and may only use the data for the purpose of identity verification.
• Payment processors: When you make a deposit or withdrawal, your payment details are transmitted to the relevant payment processor — for example, the Easypaisa gateway, JazzCash, NayaPay, SadaPay or our card processing partner. These processors handle your data under their own regulated privacy frameworks and PCI-DSS certification.
• Fraud prevention services: 666ep uses industry-standard fraud detection tools that may process device fingerprinting and behavioural data to identify suspicious activity. This helps protect your account from unauthorised access as much as it protects the integrity of the platform.
• Legal and regulatory bodies: If 666ep receives a lawful request from a regulatory authority, law enforcement agency or court requiring disclosure of member data, we are legally obligated to comply. We will notify you of such a request where legally permitted to do so.
• Responsible gaming organisations: In limited circumstances, where a member has self-excluded or where we have identified serious problem gambling behaviour, data may be shared with licensed responsible gaming support organisations to facilitate appropriate intervention.

666ep retains personal data only for as long as it is necessary for the purposes described in this policy, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data: Retained for the duration of your membership at 666ep, plus a minimum period of 5 years after account closure (required for anti-money laundering and financial compliance purposes).
• KYC and identity documents: Retained for a minimum of 5 years after the end of your relationship with 666ep, in line with financial services compliance requirements.
• Transaction and betting history: Retained for 7 years after the relevant transaction date to support dispute resolution, audit requirements and regulatory compliance.
• Support communications: Retained for 3 years, after which they are anonymised for quality assurance purposes.
• Marketing preferences and communications: Retained for the duration of your account, or until you withdraw consent to receive marketing. Records of consent are retained for 3 years after the consent was given or withdrawn.
• Device and session data: Retained for 12 months, after which aggregate anonymised analytics data may be kept for platform improvement purposes.

When data reaches the end of its retention period and there is no legal basis to continue holding it, 666ep securely deletes or irreversibly anonymises the data. Deletion requests from members are processed within 30 days subject to any legal retention obligations that prevent earlier deletion.

Protecting your personal data is not just a legal obligation at 666ep — it is a practical priority. A data breach would harm our members and damage the trust that the 666ep platform has built with Pakistani players. The following technical and organisational measures are in place:

• SSL/TLS encryption: All data transmitted between your device and the 666ep platform is encrypted using 256-bit SSL/TLS. This prevents interception of your data during transit.
• Encrypted storage: Sensitive data held in 666ep databases — including personal details and payment information — is encrypted at rest. Plain-text storage of sensitive data is not permitted under 666ep's internal data security standards.
• Access controls: Access to member data within 666ep is governed by a strict role-based access control framework. Staff can only access the specific data they need to perform their job function. All data access is logged and auditable.
• Two-factor authentication: 666ep offers two-factor authentication for all member accounts. We strongly recommend that all Pakistani members enable this feature to add an additional layer of security beyond their password.
• Regular security testing: The 666ep platform undergoes periodic penetration testing and vulnerability assessments by independent security professionals.
• Incident response: In the event of a data security incident, 666ep has a documented incident response procedure. Affected members will be notified within 72 hours of a confirmed incident being identified.

The 666ep website uses cookies and similar technologies to provide a functional, personalised and secure experience. A cookie is a small text file stored on your device by your browser when you visit a website. Below is a summary of the types of cookies used on 666ep and their purpose:

You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core 666ep platform, though some personalisation features may not function as expected. Note that clearing cookies will log you out of any active 666ep session.

You have the following rights in relation to your personal data held by 666ep. To exercise any of these rights, contact the 666ep support team with your account details and a description of the right you wish to exercise. All requests are processed within 30 days.

666ep sends marketing communications — including bonus offers, new game announcements, tournament invitations and promotional updates — only to members who have explicitly opted in to receive them. Opting in is entirely voluntary and is separate from any requirement to create or maintain a 666ep account.

Marketing communications from 666ep may be sent via:

• Email to the address registered on your account.
• SMS to the mobile number registered on your account.
• WhatsApp or Telegram, if you have provided contact details for these channels and opted in.
• In-platform notifications visible when you are logged in to 666ep.

You can withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in your 666ep account settings.
• Clicking the unsubscribe link in any marketing email from 666ep.
• Contacting the 666ep support team and requesting to be removed from marketing communications.

The 666ep platform is strictly for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has registered an account or provided personal data to 666ep, we will immediately close the account, delete all associated data and void any transactions.

If you are a parent or guardian and you believe your child has accessed the 666ep platform and provided personal information, please contact our support team immediately at support@666ep.biz. We will investigate and take action within 24 hours of receiving a verified report.

666ep actively uses age verification checks during the registration process and as part of KYC verification to minimise the risk of underage access. We also support the use of parental control tools at the device and internet service level for households where minors may have access to devices used to visit adult content platforms.

666ep may update this Privacy Policy from time to time as the platform evolves, as our data practices change or as legal requirements are updated. When changes are made, the revised policy will be published on this page with an updated "Last updated" date at the top.

If the changes are material — meaning they significantly alter how we collect, use or share your personal data — we will notify active 666ep members via the contact details held on their account at least 14 days before the changes take effect. This gives you time to review the updated policy and, if you do not agree with the changes, to exercise your rights including account closure and data deletion.

Continued use of the 666ep platform after the effective date of any policy update constitutes your acceptance of the revised terms. This policy was last updated in January 2025 and supersedes all previous versions of the 666ep Privacy Policy.