Privacy Policy — 666pkr

1 Introduction

This Privacy Policy ("Policy") is issued by 666pkr ("we", "us", "our"), the operator of the online gaming and sports betting information platform accessible at https://666pkr.cam ("the Platform"). This Policy applies to all users ("you", "your") who access or use the Platform, including registered Account Holders and anonymous visitors.

666pkr is committed to handling personal data with care, transparency and respect for user privacy. This Policy describes, in plain and accessible English, the categories of personal data we collect, the purposes for which we process that data, the lawful bases on which we rely, the third parties with whom data may be shared, the rights available to you, and how to exercise those rights.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling guidelines, which together form the complete framework governing your use of the Platform.

2 Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information relating to an identified or identifiable natural person; an identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data or online identifier.
• "Processing" — Any operation or set of operations performed on Personal Data, whether or not by automated means, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" — The entity that determines the purposes and means of the processing of Personal Data. For this Platform, 666pkr acts as the Data Controller.
• "Data Processor" — A third party that processes Personal Data on behalf of the Data Controller under a data processing agreement.
• "User" / "Data Subject" — Any individual who accesses or uses the 666pkr Platform, whether as a registered Account Holder or anonymous visitor.
• "KYC" — Know Your Customer; the identity verification process undertaken to confirm a User's identity, age, address and, where required, source of funds.
• "Cookies" — Small text files stored on a User's device by the Platform, used to remember preferences, maintain sessions and gather analytics data.
• "Applicable Data Protection Law" — All laws, regulations and official guidance applicable to the processing of Personal Data, including the laws of the jurisdiction in which the Platform is licensed and any mandatory laws of the User's jurisdiction of residence.

3 Data Controller

666pkr is the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, 666pkr determines the purposes and means of processing your Personal Data and is responsible for ensuring that processing is carried out in accordance with applicable data protection law.

Where 666pkr engages third-party service providers to process Personal Data on its behalf (for example, payment processors, KYC verification providers, analytics platforms and customer support tools), those providers act as Data Processors and are bound by contractual data processing agreements requiring them to handle your data only as instructed by 666pkr and in compliance with applicable law.

For all data protection enquiries, requests to exercise your rights, or concerns about this Policy, please contact us using the details set out in Section 18.

4 Data We Collect

666pkr collects Personal Data across the following categories. We collect only the data that is reasonably necessary for the purposes described in this Policy.

4.1 Identity & Contact Data

4.2 Financial & Transactional Data

4.3 Technical & Usage Data

5 How We Collect Your Data

666pkr collects Personal Data through the following means:

• Directly from you — when you register an Account, complete KYC verification, make deposits or withdrawals, contact support, or respond to surveys or promotions;
• Automatically — when you use the Platform, through cookies, server logs, session data and device fingerprinting tools embedded in the Site;
• From third-party identity verification providers — during KYC processing, where our verification partner may supply enhanced identity confirmation data;
• From payment processors — limited transaction reference data to reconcile deposits and withdrawals. Full payment credentials (such as card numbers) are handled exclusively by the payment processor and are not stored by 666pkr;
• From fraud prevention and AML screening services — where required by our operating licence and AML obligations.

6 Lawful Basis for Processing

666pkr processes Personal Data on one or more of the following lawful bases, depending on the nature of the processing activity:

7 How We Use Your Data

Personal Data collected by 666pkr is used solely for the following purposes:

7.1 Account Management & Service Delivery

To create, maintain and administer your Account; to process deposits and withdrawals; to settle bets and gaming transactions; to communicate essential account and service notifications; and to deliver customer support.

7.2 Identity Verification & Compliance

To verify your identity and age in compliance with KYC requirements; to screen against applicable sanctions and watchlists; and to meet anti-money laundering (AML) reporting obligations under applicable law.

7.3 Fraud Prevention & Security

To detect, investigate and prevent fraudulent activity, unauthorised account access, money laundering, collusion, bonus abuse and other prohibited conduct as defined in our Terms & Conditions.

7.4 Responsible Gambling

To monitor betting behaviour for indicators of problem gambling; to enforce deposit limits, loss limits and self-exclusion requests; and to provide appropriate responsible gambling communications to Users who may require support.

7.5 Platform Improvement & Analytics

To analyse usage patterns, technical performance and user experience data for the purpose of improving the Platform's functionality, content and services. Analytics data is processed in aggregated or pseudonymised form where practicable.

7.6 Marketing Communications (Consent-Based Only)

Where you have explicitly opted in, to send promotional communications, bonus offers and platform news. You may withdraw marketing consent at any time by contacting support or using the unsubscribe mechanism included in each marketing message. Withdrawal of marketing consent does not affect your ability to use the Platform or receive essential service communications.

8 Data Sharing & Disclosure

666pkr may share your Personal Data with the following categories of third party, only to the extent necessary for the purposes described in this Policy:

8.1 Payment Service Providers

Limited transactional data is shared with payment processors to facilitate deposits and withdrawals. These may include international payment gateways and, where supported, mobile wallet networks. References to services such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are informational context only — 666pkr does not represent or imply any affiliation with or endorsement from these providers.

8.2 Identity Verification & KYC Providers

Identity document data and selfie/liveness check data may be processed by our third-party KYC verification partner. These providers act as Data Processors and are contractually bound to process data only as instructed and in compliance with applicable data protection law.

8.3 Fraud Prevention & AML Screening Services

Relevant User data may be shared with fraud prevention and AML screening services for the purpose of detecting and preventing financial crime, in accordance with our legal and regulatory obligations.

8.4 Legal & Regulatory Authorities

Personal Data may be disclosed to law enforcement agencies, regulatory authorities, courts or other governmental bodies where required by applicable law, a valid legal process, court order, or where disclosure is necessary to protect the rights, property or safety of 666pkr, its users or the public.

8.5 Successors in Interest

In the event of a merger, acquisition, sale of assets or corporate restructuring involving 666pkr, Personal Data may be transferred to the relevant successor entity, subject to continued protection under this Policy or a substantially equivalent privacy framework.

9 Cookies & Tracking Technologies

The 666pkr Platform uses cookies and similar tracking technologies to operate essential site functions, improve user experience and gather analytics data. The following categories of cookies may be used:

• Strictly Necessary Cookies — Required for the Platform to function. These include session cookies, authentication tokens and security cookies. These cannot be disabled without disrupting Platform functionality.
• Functional Cookies — Used to remember user preferences such as language settings, display options and previously entered information to improve the browsing experience.
• Analytics Cookies — Used to collect anonymised or pseudonymised data about how users interact with the Platform, including pages visited, session duration and navigation paths. This data is used to improve Platform performance and content.
• Security & Fraud Prevention Cookies — Used to detect and prevent fraudulent activity, bot traffic and account takeover attempts.

You may control non-essential cookies through your browser settings or through any cookie preference centre made available on the Platform. Please note that disabling certain cookies may affect the functionality of parts of the Platform.

10 Data Retention

666pkr retains Personal Data for as long as is reasonably necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:

• Active Account Data — Retained for the duration of your Account's active status and for a reasonable period thereafter to facilitate re-activation and service continuity;
• KYC & Identity Documents — Retained for the minimum period required by the Platform's operating licence and applicable AML regulations, which may extend for a number of years following Account closure;
• Financial Transaction Records — Retained for the period required by applicable financial record-keeping obligations and AML regulations;
• Self-Exclusion Records — Retained for the duration of the self-exclusion period and for an appropriate period thereafter to prevent re-registration in breach of the exclusion;
• Technical & Log Data — Retained for a limited period as necessary for security and fraud investigation purposes.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in accordance with our data disposal procedures.

11 Data Security

666pkr implements appropriate technical and organisational measures to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure or destruction. Our security measures include, but are not limited to:

• All Platform sessions and data transmissions are encrypted using industry-standard TLS/HTTPS protocols;
• Access to Personal Data is restricted to authorised personnel on a need-to-know basis;
• Sensitive data at rest is protected by encryption and access control mechanisms;
• Regular security assessments and penetration testing of Platform infrastructure;
• Multi-factor authentication requirements for administrative access to user data systems;
• Third-party Data Processors are subject to contractual security obligations and are assessed for security compliance.

Notwithstanding the above, no method of data transmission or storage over the internet is completely secure. While we take reasonable and appropriate steps to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, we will notify you in accordance with applicable law.

12 International Data Transfers

As an internationally operating platform, 666pkr may transfer your Personal Data to countries outside your jurisdiction of residence, including countries that may not provide the same level of data protection as your home jurisdiction.

Where such transfers occur, 666pkr will ensure that appropriate safeguards are in place, such as contractual data protection clauses, to ensure that your Personal Data is afforded an equivalent level of protection. By using the Platform, you acknowledge that your data may be transferred to, stored in, and processed in jurisdictions outside Pakistan.

For users in Pakistan: There is currently no comprehensive data protection law enacted at the federal level in Pakistan that precisely mirrors EU GDPR or similar frameworks. 666pkr's data handling practices are governed by the laws of the jurisdiction in which the Platform is licensed, as well as any mandatory applicable Pakistani law. We are committed to handling your data with care regardless of where it is processed.

13 Your Rights as a Data Subject

Subject to applicable data protection law and any limitations imposed by our legal obligations (for example, AML record-keeping requirements), you have the following rights in respect of your Personal Data:

To exercise any of the above rights, please contact us using the details provided in Section 18. We will respond to all valid requests within a reasonable timeframe in accordance with applicable law. We may request identity verification before processing a data subject rights request.

14 Children's Privacy

The 666pkr Platform is strictly intended for adults aged 18 and over — or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect Personal Data from individuals under the applicable minimum age.

If we become aware that Personal Data has been collected from a minor, that data will be deleted immediately, the associated Account will be permanently closed, and any funds held will be handled in accordance with our Terms & Conditions and applicable law.

Parents or guardians who believe that a minor may have registered or used the Platform should contact us immediately via the details in Section 18.

15 Payment Data & Financial Privacy

666pkr takes the privacy of payment-related data very seriously. The following principles apply to the handling of financial and payment method data:

• Full payment card numbers, CVV codes and banking authentication credentials are never stored by 666pkr. These are handled exclusively by PCI-compliant payment processors;
• Payment method reference identifiers (such as the mobile number associated with an Easypaisa or JazzCash account, or a bank account reference number) may be stored by 666pkr solely for the purpose of processing withdrawals to the same method used for deposit, in accordance with our anti-money-laundering withdrawal matching policy;
• References to payment services including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah throughout this Policy and the Platform are for informational context only. 666pkr does not represent or claim affiliation with, endorsement from or support of gambling by any of these providers;
• Financial transaction records are retained for the period required by applicable AML and financial record-keeping obligations.

16 Responsible Gambling & Behavioural Data

As part of our commitment to responsible gambling, 666pkr processes certain behavioural and transactional data — including betting frequency, session duration, deposit patterns and loss levels — for the purpose of monitoring for indicators of potential problem gambling and enforcing responsible gambling controls.

This processing is carried out on the basis of our legitimate interest in protecting the welfare of our users and our legal obligations under our operating licence. Data processed for responsible gambling purposes is handled sensitively and is not used for any commercial purpose unrelated to player protection.

Where a User has set deposit limits, loss limits, session time limits or self-exclusion, those restrictions are recorded and enforced as a priority. Self-exclusion data is retained for the duration of the exclusion period and for a reasonable period thereafter to prevent circumvention. For more information, see our Responsible Gambling page.

17 Updates to This Privacy Policy

666pkr reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the Platform's features and services. The effective date at the top of this Policy indicates when the most recent revision was made.

Where changes are material — for example, where we introduce a new category of data processing or a new third-party data sharing arrangement — we will take reasonable steps to notify registered Account Holders, such as by displaying a notice on the Platform or by email to the address associated with your Account.

We encourage you to review this Policy periodically. Continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the changes, to the extent permitted by applicable law. If you do not agree with an updated Policy, you may close your Account in accordance with the Terms & Conditions.

18 Contact Us

For all data protection enquiries, to exercise your rights as a data subject, or to raise a concern regarding this Privacy Policy or 666pkr's handling of your Personal Data, please contact our team using the details below.

Please do not send copies of identity documents, CNIC images or bank details via unsecured email. All sensitive document submissions must be made through the Platform's secure verification portal.