Privacy Policy – d666 Online Gaming Platform Pakistan

1. Who We Are

d666 is an online gaming platform operating at d666.life, providing casino games, sports and esports betting, poker, crash games, Ludo and related gaming services to players in Pakistan and other permitted jurisdictions. All references to "d666", "we" or "us" in this policy refer to the d666 platform and its operating entity.

d666 is the data controller with respect to your personal data. This means we determine the purposes for which your data is collected and the means by which it is processed. We are responsible for ensuring that your data is handled lawfully, fairly and transparently in accordance with applicable data protection principles.

Our designated point of contact for all privacy-related matters is the d666 Data Protection team, reachable at support@d666.life with the subject line "Privacy Request". We aim to respond to all privacy-related enquiries within 5 business days.

2. Personal Data We Collect

d666 collects the following categories of personal data from registered players and platform visitors:

We do not collect sensitive categories of personal data (such as health, ethnic origin, religious beliefs or biometric data) unless directly relevant to a responsible gaming assessment, and only with your explicit consent in that specific context.

3. How We Collect Your Data

d666 collects your personal data through several methods:

• Direct provision: When you register an account, complete verification, make deposits or withdrawals, contact support, or submit any form on the d666 platform, you provide data directly to us.
• Automated collection: When you access d666.life, our platform automatically collects technical data about your device, browser and session through server logs and cookies. This happens whether or not you are a registered player.
• Third-party verification providers: When d666 conducts identity or age verification, we may receive confirmation data from third-party KYC service providers. We receive confirmation status and reference data — not copies of your documents, which are handled directly by the verification provider under their own security protocols.
• Payment processors: When you deposit or withdraw funds, our payment processing partners (Easypaisa, JazzCash, bank networks, card processors) transmit transaction confirmation data to d666 to facilitate account crediting and settlement.

d666 does not purchase personal data from data brokers or third-party list providers. All data we hold about you originates from your own interactions with the platform or from the operational services required to run it.

4. Why We Use Your Data

d666 uses the personal data it collects for the following purposes:

• Account creation and management: To register your account, authenticate your identity at login and maintain your account in correct operational status.
• Payment processing: To process deposits from your chosen PKR payment method and to transfer winnings and withdrawal requests back to your verified payment account.
• Identity and age verification: To confirm that you are who you say you are, that you are at least 18 years of age, and that your account details are accurate and consistent with your verification documents.
• Game operation and history: To operate games fairly, maintain bet and win/loss records, calculate VIP points, settle bonuses and provide you with your complete account history.
• Customer support: To respond to your questions, resolve disputes, investigate complaints and provide technical assistance through live chat, email and WhatsApp support channels.
• Responsible gaming: To monitor account activity for indicators of problem gambling, enforce player-set deposit limits and self-exclusions, and provide appropriate interventions where there is genuine concern for a player's welfare.
• Fraud and AML prevention: To detect, investigate and prevent fraudulent activity, money laundering, bonus abuse and other activities that breach our Terms and Conditions or applicable law.
• Legal and regulatory compliance: To fulfil our obligations under applicable laws, respond to lawful requests from regulatory or law enforcement authorities and maintain required records for audit purposes.
• Platform improvement: To analyse aggregated, anonymised usage data to understand how the platform is used and how it can be improved. This analysis uses anonymised data and does not result in decisions about individual players.
• Communications: To send you account notifications, security alerts, bonus credits, VIP updates and, where you have opted in, promotional communications about d666 offers.

5. Legal Basis for Processing

d666 processes your personal data on the following legal bases depending on the purpose:

• Contract performance: Processing necessary to deliver the services you signed up for — account management, game operation, payment processing and customer support. Without this processing, d666 cannot provide you with the service.
• Legal obligation: Processing required to comply with applicable laws — including identity verification, anti-money laundering checks, age verification and maintaining financial transaction records for required retention periods.
• Legitimate interests: Processing that serves d666's legitimate business interests, where those interests do not override your rights — including fraud prevention, platform security monitoring, responsible gaming assessments and aggregated platform analytics. In each case, d666 has assessed that the processing is proportionate and that the impact on your privacy is minimal.
• Consent: Processing based on your explicit opt-in — including marketing communications. Consent can be withdrawn at any time without affecting the legality of processing that took place before withdrawal.

6. Who We Share Your Data With

d666 shares your personal data with third parties only where necessary and only to the extent required for the stated purpose. The categories of third parties who may receive your data are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank partners and card networks — to facilitate deposits and withdrawals. These providers operate under their own privacy policies and applicable financial regulations.
• Identity verification providers: Third-party KYC and age verification services engaged by d666 to confirm player identity. These providers are contractually bound to handle data in accordance with d666's instructions and applicable data protection standards.
• Game software providers: Technology partners who provide game engines and RNG certification may receive aggregated, anonymised game outcome data for audit purposes. Individual player identity is not shared with game providers without your consent.
• IT and infrastructure providers: Hosting, cloud storage and security service providers who process data on d666's behalf under strict data processing agreements and security obligations.
• Legal and regulatory authorities: Where required by applicable law, court order or the lawful request of a regulatory or law enforcement authority, d666 may disclose personal data. We will notify you of any such disclosure where legally permitted to do so.

7. Financial Data & Payment Security

Financial data is among the most sensitive personal data d666 handles, and it receives the highest level of protection. When you deposit or withdraw using Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card methods, the following protections apply:

• All payment transactions are transmitted over encrypted connections. d666 does not transmit financial credentials in plain text under any circumstances.
• Card data (where applicable) is handled in accordance with PCI-DSS standards. d666 does not store full card numbers — only masked references sufficient to identify the payment method for withdrawal purposes.
• Mobile wallet credentials (Easypaisa, JazzCash PINs etc.) are entered directly in your payment provider's own interface and are never transmitted to or stored by d666.
• Bank account details provided for IBFT withdrawals are stored securely with access restricted to the minimum number of authorised personnel necessary to process the transaction.
• Transaction records are retained for the periods required by applicable financial regulations — typically a minimum of five years — even after account closure.

d666 monitors all financial transactions for patterns associated with fraud and money laundering. Where unusual activity is detected, transactions may be held pending review and your account may be temporarily restricted while the review is conducted. This is a protective measure for both you and the platform.

8. Cookies & Tracking Technologies

d666 uses cookies and similar tracking technologies to operate the platform, remember your preferences and improve your experience. The following types of cookies are used:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during a visit and security cookies that protect against CSRF and other web vulnerabilities. Essential cookies cannot be disabled without breaking the platform.
• Functional cookies: Remember your preferences such as language settings, preferred game view and responsible gaming reminder settings. These improve your experience but are not strictly required.
• Analytics cookies: Collect anonymised data about how pages are accessed and used — which sections players visit, where they spend time, and where technical errors occur. This data is aggregated and does not identify individual players.
• Session security cookies: Track active sessions to prevent simultaneous logins from different devices without authorisation and to detect suspicious login patterns.

You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from using the d666 platform. Disabling functional and analytics cookies will reduce the quality of your experience but will not prevent you from accessing games or conducting transactions.

d666 does not use third-party advertising or social media tracking cookies. No data collected by d666 cookies is passed to advertising networks.

9. Data Security

d666 implements a layered security programme designed to protect your personal data from unauthorised access, disclosure, alteration or destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and d666's servers
• Encryption at rest for sensitive stored data including financial records and identity documents
• Role-based access controls that restrict employee access to personal data on a strict need-to-know basis
• Multi-factor authentication requirements for all administrative access to d666 production systems
• Regular security audits and penetration testing by qualified third-party security professionals
• Automated anomaly detection systems that flag unusual login patterns, transaction volumes and account behaviour
• Incident response procedures in place to contain and remediate any data security incident promptly

In the event of a data security incident that affects your personal data, d666 will notify you within a reasonable timeframe — consistent with applicable notification obligations — providing details of what occurred, what data was affected and what steps d666 is taking to address the incident.

10. Data Retention

d666 retains your personal data for as long as it is necessary for the purposes for which it was collected, subject to any legal obligations to retain data for longer periods. The following general retention periods apply:

• Account data: Retained for the duration of your account and for a period of up to 5 years following account closure, to support any post-closure disputes, regulatory enquiries or legal proceedings.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction, as required by applicable anti-money laundering and financial record-keeping obligations.
• Identity verification records: Retained for the period of account activity and for 5 years following account closure, consistent with KYC regulatory requirements.
• Communications and support records: Retained for up to 3 years from the date of the last interaction, to support complaint management and dispute resolution.
• Responsible gaming records: Retained for the duration of the account and for 5 years following account closure to support welfare-related reviews and regulatory reporting.
• Technical and log data: Typically retained for 12 months from collection, with aggregated anonymised summaries retained for longer-term platform improvement purposes.

Once the applicable retention period expires, data is securely deleted or irreversibly anonymised. Anonymised data (from which individual identity cannot be reconstructed) may be retained indefinitely for platform analytics and improvement purposes.

11. Your Data Rights

As a d666 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at support@d666.life. We will respond within 10 business days and may ask you to verify your identity before acting on the request.

12. Children's Privacy

d666 strictly prohibits use of its platform by anyone under the age of 18. We do not knowingly collect personal data from individuals under 18. If d666 discovers that a player is under 18, the account will be immediately suspended, all gaming activity will be voided, and original deposits will be returned to the source payment method after verification.

If you are a parent or guardian and believe that a minor may have registered on d666 using your payment details or contact information, please contact us immediately at support@d666.life. We will investigate and take appropriate action without delay.

d666 does not direct any marketing or promotional content at individuals under 18 and does not use platforms or channels primarily used by minors for advertising purposes.

13. Responsible Gaming Data

Data collected in connection with responsible gaming tools — including self-set deposit limits, self-exclusion requests, session reminder settings and any welfare-related communications — is handled with particular care at d666.

This data is used exclusively to enforce the player's own stated preferences, to identify players who may need additional support, and to fulfil d666's responsible gaming obligations. Responsible gaming data is never used for marketing profiling, is not shared with third parties except where legally required, and is retained for a minimum of five years to support regulatory reporting and to prevent players from circumventing self-exclusion by closing and re-opening accounts.

During a self-exclusion period, d666 will suppress all marketing communications to the affected player and will block account access for the duration of the exclusion. Responsible gaming data is accessible only to authorised welfare and compliance staff within d666.

More information about responsible gaming tools at d666 is available on our Responsible Gaming page.

14. International Data Transfers

d666 may transfer your personal data to servers and service providers located outside Pakistan where this is necessary to operate the platform effectively. Where data is transferred internationally, d666 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection principles. These safeguards include contractual data protection obligations in service provider agreements and verification that receiving entities maintain appropriate technical and organisational security measures.

d666 does not transfer your data to jurisdictions that are known to provide inadequate data protection without first ensuring that adequate contractual safeguards are in place. If you would like more information about the safeguards applied to international transfers of your specific data, contact us at support@d666.life.

15. Changes to This Privacy Policy

d666 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or improvements to the platform. When we update the policy, we will revise the "Last updated" date at the top of this page.

For material changes — such as new categories of data being collected, new sharing arrangements, or changes to how long we retain your data — d666 will notify registered players by email or in-platform notification at least 14 days before the change takes effect. For minor changes (such as clarifications of existing practice), notification will be provided through the revised policy text alone.

Your continued use of d666 after the effective date of any change constitutes your acceptance of the revised policy. If you do not accept a material change, please contact support@d666.life to request account closure and data handling in accordance with the previous policy version where legally permissible.

16. Contact Us & Complaints

If you have any questions about this Privacy Policy, about how d666 handles your personal data, or if you wish to exercise any of your data rights, please get in touch using the following channels: