Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how 666cb ("we", "us", "our"), operating the website at https://666cb.cam (the "Platform"), collects, uses, stores, shares and protects personal data belonging to users ("you", "your") of the Platform.

666cb is an English-language online betting information and guide platform serving users in Pakistan and other jurisdictions. We are committed to handling personal data responsibly, transparently and in accordance with applicable data protection legislation.

This Policy applies to all users who access or interact with the Platform, including users who register an account, use informational content, contact customer support or simply browse publicly available pages.

By using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform. This Policy should be read alongside our Terms & Conditions.

2 Definitions

In this Policy, the following terms carry the meanings set out below:

3 Information We Collect

3.1 Information You Provide Directly

When you register an Account or interact with the Platform, we may collect:

• Full name and date of birth;
• Email address and, where provided, a contact number;
• Username and encrypted password;
• Residential address or city (e.g., Karachi, Lahore, Islamabad, Rawalpindi);
• Identity documents submitted for KYC verification (CNIC, passport, proof of address);
• Communications submitted through support channels, feedback forms or live chat.

3.2 Information Collected Automatically

When you browse the Platform, we may automatically collect technical data including:

• IP address and approximate geolocation derived from IP data;
• Browser type, version and operating system;
• Device identifiers and screen resolution;
• Pages visited, time on page, referral source and clickstream data;
• Session duration and navigation patterns;
• Cookie identifiers and local storage data.

3.3 Information from Third Parties

We may receive supplementary information from identity verification providers, fraud detection services and analytics platforms. Such information is used solely for the purposes outlined in this Policy and is handled under binding data processor agreements.

4 Legal Basis for Processing

We process Personal Data on the following legal bases, which we assess on a category-by-category basis:

• Contractual Necessity: Processing required to deliver the services you requested — such as maintaining your Account and providing access to Platform Content;
• Legal Obligation: Processing required to comply with AML, KYC, age verification and other applicable regulatory obligations;
• Legitimate Interests: Processing for platform security, fraud prevention, analytics and service improvement — where such interests are not overridden by your rights;
• Consent: Processing for optional activities such as email marketing communications, where you have explicitly opted in. Consent may be withdrawn at any time.

Where processing is based on consent, you may withdraw that consent at any time by contacting us at the details in Section 15. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

5 How We Use Your Data

Personal data collected through the Platform is used for the following purposes:

• Account Management: Creating, maintaining and administering your Account, including password reset and account recovery processes;
• Identity & Age Verification (KYC): Confirming that you meet the minimum age requirement (18+ or higher where required) and verifying your identity for AML compliance;
• Customer Support: Responding to queries, complaints and technical issues submitted via email or live chat, with response primarily in English;
• Platform Operations: Ensuring technical functionality, diagnosing errors, conducting load balancing and maintaining platform security;
• Analytics & Improvement: Analysing aggregated usage patterns to improve Content, navigation, performance and user experience across devices used in Pakistan and other markets;
• Legal Compliance: Meeting our obligations under applicable data protection, AML and gaming-adjacent regulations;
• Fraud Prevention: Detecting and preventing fraudulent registration, bonus abuse, multi-accounting and other prohibited conduct described in our Terms & Conditions;
• Marketing Communications (Consent Only): Sending you relevant Platform updates or promotional information where you have explicitly opted in. You may unsubscribe at any time.

6 Data Sharing

6.1 We Do Not Sell Your Data

666cb does not sell, rent or trade your Personal Data to third parties for their own marketing or commercial purposes. This is an absolute commitment.

6.2 Authorised Third-Party Sharing

We may share Personal Data with the following categories of third party, strictly for the purposes described:

• Identity Verification Providers: To carry out KYC checks using your submitted documents in accordance with AML obligations;
• Analytics Service Providers: To process aggregated, pseudonymised usage data for platform improvement under data processing agreements;
• Cloud Infrastructure Providers: To host and operate Platform services under appropriate data security contractual terms;
• Legal and Regulatory Authorities: Where we are legally required to disclose information to law enforcement, courts or regulatory bodies under applicable law;
• Fraud Prevention Services: To verify account integrity and prevent financial crime.

6.3 Business Transfers

In the event of a merger, acquisition, asset sale or corporate restructuring, Personal Data may be transferred as part of the transaction. You will be notified of any such transfer and any change in Data Controller via email or Platform notice.

7 International Data Transfers

The Platform serves users in Pakistan and other jurisdictions. Personal data may be transferred to and stored on servers located outside Pakistan. Where such transfers occur, we ensure that appropriate safeguards are in place — including standard contractual clauses, adequacy decisions or equivalent data protection measures — before any transfer proceeds.

Pakistani users should note that data protection frameworks vary by country. Where your data is transferred internationally, we take reasonable steps to ensure it is afforded a standard of protection equivalent to that applied within the Platform's primary operating jurisdiction.

8 Data Retention

We retain Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

• Account Data: Retained for the duration of your Account and for a defined period following Account closure, as required for legal and compliance purposes;
• KYC Documents: Retained for the period required by applicable AML regulations, which is typically a minimum of five years from the date of the last transaction or Account closure;
• Support Communications: Retained for a reasonable period following the resolution of the relevant query, to assist with recurring issues and dispute resolution;
• Analytics Data: Aggregated, pseudonymised analytics data may be retained indefinitely as it no longer constitutes Personal Data;
• Marketing Consent Records: Retained until consent is withdrawn and for a reasonable period thereafter to demonstrate compliance.

Upon expiry of the relevant retention period, data will be securely deleted or anonymised in a manner that prevents reconstruction of the original Personal Data.

9 Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow the site to recognise your device on subsequent visits and store preferences or session information. 666cb uses cookies and similar technologies to operate the Platform effectively.

9.2 Cookie Categories

9.3 Managing Cookies

You can manage or disable cookies through your browser settings at any time. Disabling essential cookies will affect Platform functionality. Most browsers allow you to block or delete cookies — refer to your browser's help documentation for specific instructions.

10 Children's Privacy

The Platform is strictly intended for adults aged 18 years or older — or the higher minimum age required by the applicable operator or licence jurisdiction. 666cb does not knowingly collect Personal Data from individuals under the age of 18.

If we become aware that Personal Data has been collected from a person below the minimum age threshold, we will take immediate steps to delete that data and close the associated Account. If you believe that we have inadvertently collected data from a minor, please contact us immediately using the details in Section 15.

11 Data Security

666cb implements a range of technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration, loss or destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and our servers;
• Encrypted storage of sensitive Account and KYC data at rest;
• Role-based access controls limiting data access to authorised personnel with a legitimate need;
• Regular security audits and vulnerability assessments of Platform infrastructure;
• Staff training on data protection obligations and security best practices;
• Incident response procedures for the timely detection and management of data security events.

While we take significant steps to protect your data, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials. 666cb will never ask you for your password via email, live chat or any other channel. Any suspected security breach should be reported to us immediately.

12 Your Rights as a Data Subject

Depending on the data protection legislation applicable in your jurisdiction, you may have some or all of the following rights in relation to your Personal Data:

To exercise any of the above rights, please contact us using the details in Section 15. We will acknowledge your request within a reasonable timeframe and respond substantively in accordance with applicable law. We may need to verify your identity before actioning certain requests.

13 Third-Party Links & Operator Platforms

The Platform may contain references to or links to third-party operator platforms. Once you leave the 666cb Platform and access a third-party site or operator, this Privacy Policy no longer applies. We are not responsible for the data protection practices of any third-party platform, and we strongly recommend that you review the privacy policy of any external site before submitting Personal Data.

References to payment platforms such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are contextual only. These providers operate their own privacy and data protection policies, which apply independently to any interaction you have with them.

14 Policy Amendments

666cb reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated via Platform notice or email to registered users where feasible. The effective date at the top of this page will be updated to reflect the date of the most recent revision.

Continued use of the Platform following publication of an updated Policy constitutes acceptance of the revised terms. If you do not accept the updated Policy, you must cease using the Platform and, where applicable, request deletion of your Account data.

15 Contact Us

For any questions, concerns or requests relating to this Privacy Policy or the handling of your Personal Data, please contact the 666cb data protection team using the details below. All contact details are provided as plain text only — they are not clickable links.