Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 666m ("we", "us", "our" or "the Platform") collects, uses, stores, shares and protects personal data relating to users ("you", "your") of the 666m website at 666m.cam and any associated services. This Policy forms part of the broader agreement between you and 666m, alongside the Terms and Conditions and the Responsible Gambling Policy.

By registering an account or using the Platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should not create an account or continue to use the Platform.

666m is committed to handling personal data responsibly, transparently and in a manner consistent with applicable data protection laws. We recognise that users in Pakistan and other jurisdictions have reasonable expectations of privacy, and we take those expectations seriously.

2. Definitions

The following definitions apply throughout this Policy:

3. Data We Collect

666m collects personal data in the following categories, depending on how you interact with the Platform:

3.1 Registration Data

When you create an Account, we collect the information you provide during registration, which typically includes your full name, date of birth, email address, phone number, chosen username and password, and your city or region of residence (such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar).

3.2 Identity Verification (KYC) Data

As part of mandatory Know Your Customer verification, we may collect copies of your Computerised National Identity Card (CNIC), passport, driving licence or other government-issued photo identification, along with proof of address documentation and any additional information required to verify your identity, age or payment method ownership.

3.3 Financial Data

We collect records of deposits, withdrawals, wager transactions and bonus activity on your Account. We do not store full payment card numbers; where card details are processed, they are handled by PCI-compliant third-party payment processors. References to payment methods such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah reflect familiar Pakistani payment references only and do not imply that those providers endorse 666m.

3.4 Usage and Technical Data

We automatically collect certain technical data when you access the Platform, including your IP address, device type, browser type and version, operating system, referring URLs, pages visited, time spent on pages, session duration, click patterns and error logs. This data is used to maintain Platform security, improve performance and support fraud detection.

3.5 Communications Data

If you contact our support team or interact with us via email or live chat, we retain records of those communications, including the content of your messages, timestamps and any attachments you submit. This data is used to resolve your query, improve support quality and maintain an audit trail.

3.6 Responsible Gambling Data

Where you use self-exclusion tools, deposit limits, loss limits or session time controls, we record those elections and the dates on which they were made. This data is processed to enforce your chosen protections and to support our responsible gambling obligations.

4. How We Use Your Data

666m uses personal data for the following specific purposes:

5. Legal Basis for Processing

666m processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform the agreement between you and 666m, including operating your Account, processing wagers and handling deposits and withdrawals.
• Legal Obligation: Processing necessary to comply with applicable legal and regulatory requirements, including KYC verification, anti-money laundering obligations and responses to lawful authority requests.
• Legitimate Interests: Processing carried out in pursuit of 666m's legitimate business interests — such as fraud detection, Platform security, responsible gambling monitoring and service improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent for a specific processing activity, such as sending marketing communications, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Data Sharing & Disclosure

666m does not sell your personal data to third parties. We may share your personal data in the following limited circumstances:

6.1 Third-Party Service Providers

We engage carefully selected third-party processors to support Platform operations. These include identity verification and KYC providers, payment processing services, fraud detection and anti-money laundering technology providers, customer support platforms, cloud hosting and infrastructure providers, and analytics and performance monitoring services. All third-party processors are bound by data processing agreements that require them to handle your data only as instructed by 666m and to implement appropriate security measures.

6.2 Regulatory and Legal Disclosure

We may disclose personal data to competent regulatory authorities, law enforcement agencies or courts where we are required to do so by applicable law, court order or lawful regulatory request. In such cases, 666m will disclose only the minimum amount of data necessary to satisfy the legal obligation.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of 666m's business, personal data held by 666m may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections being maintained.

6.4 With Your Consent

We may share your personal data with additional third parties where you have given your explicit consent to that specific disclosure.

7. Cookies & Tracking Technologies

666m uses cookies and similar tracking technologies to deliver, maintain and improve the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session management cookies, authentication tokens and security cookies. These cannot be disabled without significantly impairing your use of the Platform.
• Functional Cookies: Used to remember your preferences, such as language settings and display preferences, so that we can personalise your experience on return visits.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform — including pages visited, time spent and navigation paths — to help us improve performance and content.
• Marketing Cookies: Used, with your consent, to identify your interests and deliver relevant promotional content. You may opt out of marketing cookies at any time through your browser or device settings.

You can control and manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform. For more detailed information on the specific cookies in use, please contact our support team.

8. Data Retention

666m retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law and regulatory obligations. The following general retention principles apply:

• Account Data: Retained for the duration of your active Account and for a period following Account closure as required by anti-money laundering regulations and the operator's licensing obligations — typically a minimum of five years from the date of Account closure.
• KYC and Identity Documents: Retained for the period required by applicable AML and regulatory obligations, which is generally no less than five years from the date of the last transaction or Account closure, whichever is later.
• Transaction Records: Retained for a minimum of five years from the date of each transaction to support regulatory compliance, dispute resolution and audit requirements.
• Support Communications: Retained for up to three years from the date of the last communication, unless a longer period is required to resolve an ongoing dispute or legal claim.
• Marketing Data: Retained until you withdraw your consent to marketing communications, after which it is deleted or anonymised within a reasonable timeframe.
• Technical and Usage Data: Retained in anonymised or aggregated form for analytical purposes. Identifiable technical data is deleted or anonymised within 12 months of collection in most cases.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

9. Data Security

666m implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or alteration. These measures include:

• Encryption of data in transit using TLS/SSL protocols across all Platform connections.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Access controls that restrict employee and contractor access to personal data on a strict need-to-know basis.
• Regular internal security reviews, vulnerability assessments and penetration testing.
• Incident response procedures to detect, contain and report any personal data breach in accordance with applicable legal requirements.

While 666m takes reasonable and appropriate steps to secure your personal data, no system is entirely immune to security risk. You also have a role to play — please ensure that your Account credentials are kept confidential and that you log out of your Account when using shared or public devices. If you suspect any unauthorised access to your Account, contact support immediately.

10. International Data Transfers

666m operates on an international basis and may transfer your personal data to countries outside Pakistan for processing. These transfers may occur where our third-party service providers — including cloud infrastructure, payment processors or KYC verification providers — are based in jurisdictions other than Pakistan.

Where personal data is transferred internationally, 666m takes appropriate steps to ensure that an adequate level of data protection is maintained. This may include relying on standard contractual clauses, adequacy decisions applicable to the recipient jurisdiction, or other recognised transfer mechanisms.

By using the Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Pakistan, and you consent to such transfers subject to the protections described in this Policy.

11. Your Rights

Subject to applicable law and regulatory constraints, you have the following rights in relation to your personal data held by 666m:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data. Note that we may be unable to fulfil an erasure request where retention is required by law — for example, to comply with AML record-keeping obligations.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy or object to its processing.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data in a structured, commonly used and machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including direct marketing. Where you object to marketing, we will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact us using the details in Section 15. We will respond to your request within a reasonable timeframe, and no later than the period required by applicable law. We may need to verify your identity before processing your request.

12. Minors

The Platform is strictly for adults aged 18 and above, or the higher minimum age required by the operator or license jurisdiction. 666m does not knowingly collect personal data from individuals under the applicable minimum age. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated Account.

If you are a parent or guardian and believe that a minor in your care has registered an Account on 666m, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

13. Third-Party Services

The Platform may reference or integrate with third-party services — such as game suppliers, live streaming providers, and payment processors — in the course of delivering its features. Each third-party service operates under its own privacy policy, and 666m is not responsible for the data practices of those third parties once you interact directly with them outside of the Platform's direct control.

666m does not include external links to third-party websites within this Policy or on the Platform's navigation. Where third-party processors handle your data on our behalf, they do so under the terms of data processing agreements that require appropriate protections, as described in Section 6.

14. Policy Amendments

666m reserves the right to update or revise this Privacy Policy at any time. Material changes will be communicated to registered users via the Platform or by email to the address registered on your Account. The "Last updated" date at the top of this page reflects the most recent revision.

Your continued use of the Platform following notification of any amendment constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed of how your personal data is being handled.

15. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data, please contact the 666m support team. All privacy-related communications are handled in English; support in Urdu is available on request.