Privacy Policy

This Privacy Policy (hereinafter "Policy") sets out the basis on which 666ps (hereinafter "the Platform", "we", "us" or "our") collects, processes, stores and discloses personal data from users (hereinafter "User", "you" or "your") of the website located at https://666ps.cam and all associated services.

666ps is an English-language online gambling information and entertainment platform primarily serving adult Pakistani users. We are committed to protecting your privacy and processing your personal data lawfully, fairly and transparently in accordance with applicable data-protection law. By accessing or using the Platform you acknowledge that you have read this Policy and agree to its terms.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy. Nothing in this Policy constitutes legal advice.

The following terms carry the meanings set out below throughout this Policy:

3.1  666ps acts as the Data Controller in respect of Personal Data collected through the Platform. Queries relating to data processing may be directed to our support team using the contact details provided in Section 15.

3.2  666ps does not hold a Pakistani gambling licence and does not claim to be regulated by any Pakistani authority, including the Pakistan Telecommunication Authority, the State Bank of Pakistan or any provincial regulator. Data-protection obligations are governed by the laws of the jurisdiction in which the Platform's operator is incorporated and, where applicable, any jurisdiction from which Users access the Platform.

We collect Personal Data in the following categories depending on how you interact with the Platform:

We collect only the minimum Personal Data necessary for the purposes described in Section 5. We do not collect sensitive personal data (e.g., racial or ethnic origin, health data, political opinions) unless specifically required by applicable law.

We process your Personal Data on one or more of the following legal bases:

We will not use your Personal Data for purposes incompatible with those stated above without providing you with prior notice and, where required, obtaining your consent.

6.1  We do not sell your Personal Data. We will never sell, rent or trade your Personal Data to third parties for their own marketing purposes.

6.2  We may share your Personal Data with third parties in the following circumstances only:

• Service Providers & Data Processors: Identity verification providers, KYC platforms, payment processors, analytics providers, cloud hosting services and customer support software vendors — each operating under a written data-processing agreement with appropriate safeguards.
• Regulatory & Legal Compliance: Where required by applicable law, court order, regulatory authority or government body. We will notify you of any such disclosure to the extent permitted by law.
• Anti-Money Laundering (AML): Financial intelligence units or law-enforcement agencies where we have a legal obligation to report suspicious activity.
• Business Transfers: In the event of a merger, acquisition or sale of all or part of the Platform's business assets, Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections.
• With Your Explicit Consent: For any other purpose not described herein, only upon your clear and informed consent.

6.3  Where we engage third-party Data Processors, we ensure that appropriate contractual safeguards are in place and that processors act only on our documented instructions.

7.1  We retain Personal Data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, resolve disputes and enforce our agreements.

7.2  As a general guide — not a guaranteed minimum — the following retention periods apply:

• Account & Registration Data: Duration of active Account plus a minimum of five (5) years following Account closure, or longer where required by applicable law.
• KYC Documentation: Minimum of five (5) years from last transaction or Account closure, in compliance with anti-money-laundering legislation.
• Financial Transaction Records: Minimum of five (5) years from the date of each transaction.
• Communications Data: Up to three (3) years from last communication, or longer where required for legal proceedings.
• Technical & Usage Logs: Up to twenty-four (24) months, subject to periodic review.
• Responsible Gambling Records: Duration of self-exclusion period plus a minimum of five (5) years thereafter.

7.3  On expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data-disposal procedures.

8.1  666ps implements a range of technical and organisational measures designed to protect your Personal Data against unauthorised access, loss, alteration, disclosure or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the Platform.
• Password hashing using industry-standard algorithms (e.g., bcrypt or Argon2).
• Access controls and role-based permissions limiting staff access to Personal Data on a need-to-know basis.
• Regular security assessments and penetration testing of platform infrastructure.
• Two-factor authentication (2FA) options available to registered Users.
• Incident response procedures to detect, contain and report data breaches in accordance with applicable notification obligations.

8.2  Notwithstanding the above, no method of electronic transmission or storage is entirely secure. We cannot guarantee absolute security of your Personal Data. You are responsible for maintaining the confidentiality of your own account credentials.

9.1  666ps uses cookies and similar tracking technologies (e.g., pixel tags, local storage) to improve Platform functionality, analyse usage patterns and — where you have consented — deliver relevant content. By continuing to use the Platform, you accept our use of essential cookies. Non-essential cookies require your explicit consent.

9.2  The categories of cookies we use are set out below:

9.3  You can control and delete cookies through your browser settings at any time. Instructions vary by browser; consult your browser's help documentation for guidance. Disabling certain cookies may affect the functionality of the Platform.

10.1  As 666ps operates internationally, your Personal Data may be transferred to, and processed in, countries outside Pakistan. Some of these countries may not provide a level of data protection equivalent to Pakistani law.

10.2  Where we transfer Personal Data internationally, we implement appropriate safeguards, which may include: standard contractual clauses (SCCs) approved by relevant data-protection authorities; binding corporate rules; adequacy decisions; or other mechanisms recognised under applicable law.

10.3  By using the Platform from Pakistan, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Pakistan as described in this Policy.

Subject to applicable law and any overriding legal obligations we may have, you hold the following rights in respect of your Personal Data:

To exercise any of the rights above, please contact us using the details in Section 15. We may need to verify your identity before actioning any request. We will respond within the timeframe required by applicable law.

12.1  The Platform is strictly for users aged 18 or over, or the higher minimum age required by the operator's licensing jurisdiction. We do not knowingly collect Personal Data from persons under the applicable minimum age.

12.2  We employ age-verification measures as part of the KYC process to prevent underage access. If we discover that Personal Data has been collected from a person under the minimum age threshold, we will immediately delete that data and close the associated account.

12.3  If you believe that a minor has submitted Personal Data to the Platform, please contact us immediately at the details in Section 15 so we can take prompt corrective action.

13.1  Pakistani data-protection law is evolving. The Personal Data Protection Bill (PDPB) and related secondary legislation govern how organisations collect and process data related to individuals in Pakistan. Users are encouraged to familiarise themselves with applicable Pakistani data-protection regulations as they are enacted and updated.

13.2  We do not claim that our data-processing activities are specifically authorised by the Government of Pakistan, the National Commission for Personal Data Protection, the Pakistan Telecommunication Authority or any other Pakistani regulatory body.

13.3  Pakistani users accessing the Platform do so subject to their own applicable local laws, including data-protection legislation. If you have concerns about how your data is processed in a Pakistani legal context, we recommend seeking independent legal advice.

13.4  Where we reference payment methods such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah, we do so purely to provide familiar local context. Each of these providers operates independently with their own privacy policies. We are not responsible for, and do not endorse, their data-handling or transaction-acceptance practices in a gambling context.

14.1  We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law or Platform features. The revised Policy will be published on this page with an updated "Last Updated" date.

14.2  Where changes are material, we will endeavour to notify registered Users by email or by means of a prominent notice on the Platform before the changes take effect. Your continued use of the Platform following publication of any revised Policy constitutes your acceptance of that revision.

14.3  If you do not accept any revision to this Policy, you should cease using the Platform and may close your account in accordance with the Terms & Conditions.

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or have a complaint about how we process your Personal Data, please contact our Data Protection team using the details below. All contact details are displayed as plain text only and are not clickable links.