Privacy Policy

Section 01

Introduction

This Privacy Policy ("Policy") is published by 666w1 ("666w1", "we", "us", "our"), the operator of the online gambling information platform accessible at https://666w1.cam ("Platform"). It describes how 666w1 collects, processes, uses, stores and protects personal data relating to users ("you", "your", "User") of the Platform, in accordance with applicable data protection principles and obligations.

666w1 serves players across Pakistan — including users in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — as well as internationally. By using the Platform or registering an account, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This Policy applies to all personal data collected through the Platform, including during account registration, identity verification (KYC), deposit and withdrawal transactions, gameplay activity, customer support interactions and any communications between you and 666w1.

Section 02

Definitions

For the purposes of this Privacy Policy, the following definitions apply:

"Personal Data"

Any information relating to an identified or identifiable natural person — including name, contact details, identification documents, payment data, IP address and behavioural data collected through platform use.

"Processing"

Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, transmission, restriction, erasure or destruction.

"Data Controller"

666w1, as the entity that determines the purposes and means of processing your personal data.

"Data Processor"

A third party that processes personal data on behalf of 666w1 under contract and in accordance with this Policy (e.g., payment processors, identity verification providers, hosting providers).

"KYC"

Know Your Customer — the identity and age verification process required by the operator, involving submission of official identification documents such as a valid Pakistani CNIC or passport.

"Cookies"

Small text files placed on your device by the Platform to enable session management, security features and analytical functions.

"Consent"

A freely given, specific, informed and unambiguous indication of your agreement to the processing of your personal data for one or more specified purposes.

"Special Category Data"

Particularly sensitive personal data including health information, biometric data and data relating to criminal convictions, which may be collected in limited circumstances during enhanced due diligence procedures.

Section 03

Personal Data We Collect

666w1 collects personal data across several categories, depending on your level of engagement with the Platform. The table below summarises the categories of data collected and provides examples of the specific data points within each category.

Section 04

How We Collect Your Data

4.1 Directly from You

The majority of personal data 666w1 holds is provided directly by you during the following interactions:

• Completing the account registration form (name, email, date of birth, phone number);
• Submitting identity documents and selfie images during the KYC verification process;
• Making deposits or requesting withdrawals via the Platform cashier;
• Contacting the support team via live chat or email;
• Updating your account profile or preferences;
• Participating in promotions, surveys or competitions where applicable.

4.2 Automatically During Platform Use

Technical and behavioural data is collected automatically as you browse and use the Platform, including via cookies, web server logs and analytics tools. This includes your IP address, device identifiers, pages visited, session duration and interaction patterns. See Section 7 (Cookies) for further detail.

4.3 From Third-Party Verification Providers

Where 666w1 uses accredited third-party identity verification services to assist with KYC and AML compliance, additional data may be received from those providers in the course of the verification process. Such providers are engaged under data processing agreements that require equivalent data protection standards.

4.4 From Payment Processors

When you make a deposit or request a withdrawal, the payment processor handling the transaction may share transaction confirmation data, payment method details and related fraud-screening information with 666w1. Payment method references familiar to Pakistani users — such as those relating to mobile wallets or bank transfers — are processed solely to facilitate transactions and in compliance with applicable financial regulations.

Section 05

Purposes of Processing & Legal Basis

666w1 processes your personal data for the following purposes. Each purpose is supported by one or more lawful bases for processing, as described below.

5.1 Account Management

Purpose: Creating, maintaining and managing your 666w1 user account, including processing login credentials, account preferences and communication settings.
Legal Basis: Performance of a contract (i.e., the Terms & Conditions you agreed to at registration).

5.2 Identity Verification (KYC)

Purpose: Verifying your identity, age and eligibility to use the Platform in accordance with the operator's KYC and AML obligations.
Legal Basis: Legal obligation; legitimate interest in preventing fraud and underage gambling.

5.3 Transaction Processing

Purpose: Processing deposits, withdrawals and related financial transactions including currency conversion where applicable (e.g., PKR balances).
Legal Basis: Performance of a contract.

5.4 Fraud Prevention & AML Compliance

Purpose: Detecting, investigating and preventing fraud, money laundering, bonus abuse and other prohibited activities through transaction monitoring and behavioural analysis.
Legal Basis: Legal obligation; legitimate interest.

5.5 Responsible Gambling

Purpose: Monitoring gambling activity to identify signs of problem gambling, applying voluntary and mandatory limit controls, and facilitating self-exclusion requests.
Legal Basis: Legal obligation; legitimate interest in player welfare.

5.6 Customer Support

Purpose: Responding to support queries, complaints and escalations; maintaining records of communications for quality and compliance purposes.
Legal Basis: Performance of a contract; legitimate interest.

5.7 Marketing Communications

Purpose: Sending promotional offers, bonus notifications and platform updates to users who have opted in to receive such communications.
Legal Basis: Consent. You may withdraw consent at any time by updating your marketing preferences in your account settings or by contacting support.

5.8 Platform Improvement & Analytics

Purpose: Analysing aggregated and anonymised user behaviour to improve platform performance, game selection, navigation and user experience.
Legal Basis: Legitimate interest.

Section 06

Data Sharing & Disclosure

666w1 does not sell, rent or trade your personal data. We may share data with third parties only in the following circumstances:

6.1 Service Providers (Data Processors)

We engage trusted third-party service providers to assist in delivering the Platform's services. These include: payment processors and gateway providers; identity verification and KYC platform providers; cloud hosting and infrastructure providers; fraud detection and risk management services; and customer support technology providers. All service providers are engaged under formal data processing agreements and are required to process data only for the purposes specified by 666w1.

6.2 Regulatory and Law Enforcement Authorities

666w1 is required by applicable law and its regulatory obligations to share certain data with financial intelligence units, gambling regulators, law enforcement agencies and tax authorities upon lawful request or as part of mandatory reporting obligations (including AML/CTF reporting). Such disclosures are made without prior notice to the account holder where legally required.

6.3 Corporate Transactions

In the event of a merger, acquisition, restructuring or sale of substantially all assets of 666w1, personal data may be transferred to the successor entity, subject to equivalent data protection obligations being in place. Users will be notified of any such transfer where practicable and required by applicable law.

6.4 With Your Consent

We may share data with additional parties with your prior explicit consent, which will be sought separately and distinctly at the relevant time.

Section 07

Cookies & Similar Technologies

The 666w1 Platform uses cookies and similar technologies (such as local storage and session tokens) to enable core functionality, maintain security and understand how users interact with the Platform. We categorise our cookie use as follows:

666w1 does not use third-party advertising cookies or cross-site tracking technologies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may impair core Platform functionality, including login and security features.

Section 08

Data Retention

666w1 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory and compliance obligations. The following general retention principles apply:

• Account Data: Retained for the duration of the active account relationship and for a defined period following account closure, as required by applicable financial, AML and gambling regulations.
• KYC and Identity Documents: Retained for a minimum period required by AML and KYC regulatory obligations, which typically extends several years beyond the end of the account relationship.
• Transaction Records: Retained for the period required by applicable financial record-keeping laws, which may extend to five years or longer.
• Support Communications: Retained for a reasonable period sufficient to enable complaint management, dispute resolution and quality monitoring, typically not exceeding three years.
• Marketing Data: Retained until you withdraw consent or for a reasonable period of inactivity following opt-in, whichever occurs first.
• Technical Logs: Retained for a limited period sufficient for security incident investigation and fraud detection purposes.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with industry-standard data destruction practices.

Section 09

Data Security

666w1 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, accidental loss or destruction. Our security framework includes the following controls:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encrypted storage for sensitive data at rest, including financial information and identity documents;
• Role-based access controls limiting internal access to personal data to authorised personnel only, on a need-to-know basis;
• Multi-factor authentication options for user accounts;
• Real-time fraud and intrusion monitoring systems;
• Regular security assessments and vulnerability testing of Platform infrastructure;
• Formal data breach response procedures, including notification obligations where required by applicable law.

No system is completely impenetrable. In the unlikely event of a personal data breach that poses a significant risk to your rights and freedoms, 666w1 will notify affected users in accordance with applicable legal requirements.

Section 10

Your Data Rights

Subject to applicable law and certain conditions, you have the following rights in relation to your personal data held by 666w1. To exercise any of these rights, please contact us using the details in Section 15.

666w1 will respond to data rights requests within a reasonable timeframe and in accordance with applicable law. Note that certain rights may be limited where processing is required for legal compliance or fraud prevention purposes — for example, KYC records must be retained for regulatory periods regardless of an erasure request.

Section 11

International Data Transfers

666w1 operates an internationally accessible platform. Personal data collected from users in Pakistan may be transferred to, and processed in, countries outside of Pakistan — including where 666w1's hosting infrastructure, payment processors or KYC verification providers are located.

Where personal data is transferred internationally, 666w1 ensures that appropriate safeguards are in place to protect such data, including contractual obligations on data processors that reflect applicable data protection standards. 666w1 does not transfer personal data to parties that cannot provide adequate data protection assurances.

Section 12

Minors

The 666w1 Platform is strictly for adults aged 18 and over — or the higher minimum age required by the applicable operator's license jurisdiction. 666w1 does not knowingly collect or process personal data of minors. Age verification is a mandatory part of the account registration and KYC process.

If 666w1 becomes aware that personal data has been collected from a minor, the relevant account will be immediately suspended, the data will be deleted in accordance with applicable law, and any associated funds will be handled in compliance with regulatory obligations.

If you have reason to believe that a minor has registered an account with 666w1, please contact the support team immediately using the details provided in Section 15.

Section 13

Third-Party Services

The 666w1 Platform does not contain links to unrelated third-party websites. Where third-party service providers are integrated into the Platform — such as payment gateways, game studios or identity verification tools — those providers operate under their own privacy policies and data processing terms, in addition to any contractual obligations placed on them by 666w1.

Game content provided by third-party software studios may involve the collection of certain gameplay data by those studios for purposes such as RNG certification and game audit trails. Such data collection is governed by the relevant studio's data processing agreements and is limited to the minimum necessary for those purposes.

666w1 is not responsible for the privacy practices of third-party service providers beyond what is governed by applicable data processing agreements. Users are encouraged to review the privacy policies of any third-party service they interact with independently.

Section 14

Policy Updates

666w1 reserves the right to update or amend this Privacy Policy at any time. Material changes — such as new categories of data collection, new sharing arrangements or significant changes to user rights — will be communicated to registered users by email or via a prominent notice on the Platform prior to taking effect.

Minor or non-material changes (such as typographic corrections or clarifications that do not affect your rights) may be made without prior notice. The "Last reviewed" date at the top of this Policy reflects when it was most recently updated.

Your continued use of the Platform following notification of any update to this Policy constitutes acceptance of the revised version. If you do not accept the updated Policy, you must cease using the Platform and may request account closure as described in the Terms & Conditions.

Section 15

Contact Us

For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact the 666w1 Data & Privacy team through the following channels:

• Support Email (plain text — not a link):
  [email protected]
• Live Chat: Available via your account dashboard during operator-stated support hours. The fastest channel for urgent account-related privacy matters.
• Help Centre: Visit the FAQ page for guidance on common data and account management questions.

Please include your registered email address and a clear description of your request or concern when contacting us. Data rights requests will be processed within a reasonable timeframe and in accordance with applicable law. Where a request relates to KYC data held under mandatory regulatory retention obligations, additional processing time may be required.

For responsible gambling support — including self-exclusion requests — please visit the Responsible Gambling page. For full account terms, refer to the Terms & Conditions.