d666 Privacy Policy – How We Handle Your Personal Data in Pakistan

d666 is an online betting and casino platform serving registered players in Pakistan. The platform operates at d666.cash and provides sports betting including PSL and football markets, live casino games, poker, Andar Bahar and esports betting, all denominated in Pakistani Rupees (PKR).

For the purposes of this Privacy Policy, d666 is the data controller responsible for personal information collected through the d666 website and any associated services. When this policy refers to "d666", "we", "us" or "our", it refers to the platform operator responsible for data processing as described in this document.

If you have any questions about how d666 handles your personal data at any point, you can contact the d666 privacy team directly at support@d666.cash. We respond to privacy enquiries within 30 days as standard, and typically much sooner for urgent matters.

d666 collects personal data in two broad categories: information you provide directly when registering and using the platform, and information generated automatically by your use of d666.

d666 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data or health information. The only exception is where age verification requires document submission, in which case the identification document is used solely to confirm your date of birth and identity, then stored securely with restricted access.

d666 collects personal data through three main channels. Understanding each one helps you know exactly where your information comes from when it enters our systems.

• Directly from you: When you register an account on d666, complete your profile, make a deposit or withdrawal, contact support, claim a promotion or submit identity verification documents.
• Automatically during use: When you browse d666, log in, place a bet, play a casino game or navigate between pages, our systems record technical data including your IP address, device information and session timestamps.
• From payment processors: When you deposit using Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or a Visa or Mastercard card, the relevant payment processor confirms the transaction reference and account status to d666. Full payment credentials are never stored by d666 directly.

d666 does not purchase personal data from third-party data brokers or marketing lists. Every piece of data held about you either came from your own interaction with d666 or was generated by your use of the platform.

Every use of your personal data by d666 has a specific, legitimate reason. We do not collect data speculatively or for purposes that are not directly related to operating the platform and serving you as a registered player.

• Account operation: To create and maintain your d666 account, verify your identity, authenticate your logins and process your requests.
• Payment processing: To facilitate PKR deposits via Easypaisa, JazzCash and other local payment methods, and to process withdrawals accurately and promptly.
• Fraud prevention and security: To detect and prevent unauthorised access, fraudulent transactions, bonus abuse and other activity that threatens the integrity of d666 or the safety of other players.
• Responsible gaming: To monitor account activity for signs of problem gambling and to enforce self-exclusion and other responsible gaming tools that you have activated.
• Regulatory compliance: To comply with applicable laws including anti-money laundering (AML) and know-your-customer (KYC) obligations, and to respond to lawful requests from authorities.
• Customer support: To respond to your support queries, resolve disputes and improve the quality of assistance we provide.
• Platform improvement: To analyse usage patterns in aggregate and improve the d666 experience, including page performance, game availability and feature design.

d666 takes the security of financial data with the utmost seriousness. All PKR transactions on d666 pass through certified payment processors. d666 does not store your full Easypaisa PIN, JazzCash PIN, bank account password, full card number or CVV at any point. What d666 does retain is a transaction reference, the account identifier associated with your payment method and the PKR amount of each transaction, solely for the purposes of reconciling your balance and processing future withdrawals to the same account.

Withdrawals on d666 are always sent to the same payment method used for your most recent qualifying deposit. This policy protects you against unauthorised withdrawal attempts by third parties. If you need to change your withdrawal account due to a genuine change in circumstances, please contact d666 support and we will guide you through the secure verification process required.

All financial data held by d666 is encrypted at rest using industry-standard encryption. Transaction logs are retained for a minimum of five years in compliance with AML regulatory requirements. You may request a copy of your transaction history at any time by contacting support@d666.cash.

d666 does not sell your personal data to any third party under any circumstances. Your name, contact details, betting history and financial information are not provided to advertisers, data brokers or marketing companies. The only parties with whom d666 shares your personal data are those strictly necessary to operate the platform and comply with legal obligations.

All third parties who receive data from d666 are bound by data processing agreements that restrict how they may use that data. They are permitted to use it only for the specific purpose for which it was shared and must handle it in a manner consistent with the protections described in this policy.

d666 uses cookies and similar technologies to operate the platform correctly and improve your experience. A cookie is a small file placed on your device when you visit d666. Some cookies are essential for the platform to function – without them, you cannot stay logged in or maintain a betting slip across pages. Others are used for performance and analytics purposes to help d666 understand how the platform is being used so we can improve it.

• Essential cookies: Required for login sessions, security tokens and core platform functionality. These cannot be disabled without breaking the platform.
• Functional cookies: Remember your language preference, odds format and other personalisation settings.
• Analytics cookies: Collect anonymised data about which pages are visited and how long players spend on them, helping d666 identify performance improvements.
• Security cookies: Used to detect and prevent fraudulent sessions and unauthorised access attempts.

d666 does not use advertising tracking cookies or any pixel tracking technology from social media or advertising networks. You can manage non-essential cookies through your browser settings. Disabling cookies entirely may affect certain features of the d666 platform.

d666 takes data security seriously and implements a range of technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration or destruction.

• All data transmitted between your device and d666 is encrypted using TLS 1.3 (256-bit SSL). The padlock you see in your browser address bar confirms this encryption is active at all times on d666.
• Personal data at rest in d666 databases is encrypted using AES-256, an industry-standard symmetric encryption algorithm used by financial institutions worldwide.
• Access to personally identifiable data within d666 is restricted on a strict need-to-know basis. Staff who do not require access to personal data to perform their role cannot access it.
• d666 systems are monitored 24 hours a day for unusual access patterns, intrusion attempts and other security incidents. Automated alerts escalate potential security events to the security team immediately.
• Account passwords on d666 are stored as salted cryptographic hashes. Even d666 support staff cannot see your password – if you forget it, it must be reset rather than retrieved.

d666 retains personal data only for as long as it is needed to fulfil the purpose for which it was collected, or as required by applicable law. The specific retention periods for different categories of data are as follows.

• Account data: Retained for the duration of your active account plus five years following account closure, to comply with AML regulatory requirements.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction, in line with financial record-keeping obligations.
• Identity verification documents: Retained for five years following account closure or the completion of the specific verification process, whichever is later.
• Betting and gaming history: Retained for five years following the date of each transaction or session.
• Support correspondence: Retained for three years following the resolution of the relevant query or complaint.
• Technical and session logs: Retained for up to 12 months for security and platform performance purposes.

When data is no longer required and its retention period has expired, d666 securely deletes or anonymises it in a manner that prevents reconstruction of the original personal information.

As a registered player on d666, you have the following rights regarding your personal data. You can exercise any of these rights by contacting us at support@d666.cash. d666 will respond to all data rights requests within 30 days, and in most cases much sooner.

d666 does not knowingly collect personal data from anyone under the age of 18. The platform is strictly for adults and registration requires confirmation that you are at least 18 years old. If d666 becomes aware that personal data has been collected from a person under 18, that account will be immediately closed, all data deleted and any deposited funds returned to the source payment method.

If you are a parent or guardian and believe your child has registered on d666 without your knowledge, please contact us immediately at support@d666.cash. We take these reports seriously and act on them without delay.

d666 may update this Privacy Policy from time to time to reflect changes in applicable law, our data practices or the services we offer. When material changes are made, registered players will be notified by email or through an in-platform notice before the changes take effect.

We encourage you to review this page periodically so you always know how d666 handles your personal data. The date at the top of this page reflects when the policy was most recently updated. Continued use of d666 after the effective date of any change constitutes acceptance of the revised policy.

Minor corrections – such as fixing a typo or clarifying language without changing the substance of any policy point – do not require advance notification and take effect immediately on publication.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or need to report a privacy concern, please contact the d666 privacy team. We handle all privacy communications promptly and confidentially.

Email: support@d666.cash
Live Chat: Available on every page of d666, 24 hours a day
Response Target: Within 30 days (usually much faster)

For data erasure, access or portability requests, please include your registered email address and the specific data request in your message so we can process it as efficiently as possible. d666 may ask you to verify your identity before fulfilling a data rights request, to ensure we are responding to the correct person.