d666 Privacy Policy

1. Data We Collect

d666 collects personal data that is necessary to provide its services, comply with applicable legal obligations, and maintain a secure and fair platform. The categories of personal data we may collect include:

• Identity Data: Full legal name, date of birth, gender, and national identity document details (CNIC number) where verification is required.
• Contact Data: Email address, mobile phone number, and residential address (city and province, including locations such as Karachi, Lahore, Islamabad, Rawalpindi, and Faisalabad).
• Financial Data: Payment method details including JazzCash account numbers, Easypaisa wallet references, bank account details (HBL, UBL, Meezan Bank, Bank Alfalah), and transaction history. Full card numbers are not stored by d666.
• Account Data: Username, hashed password, account registration date, login history, session tokens, and account preferences.
• Transaction Data: Records of all deposits, withdrawals, bets, game play, bonus claims, and related financial activity on d666.
• Technical Data: IP address, browser type and version, device type, operating system, screen resolution, and referring URL.
• Usage Data: Pages visited, games played, time spent on each section, click patterns, and platform navigation behaviour.
• Communications Data: Records of communications with d666 support, including live chat transcripts and email correspondence.

2. How We Collect Data

d666 collects personal data through the following means:

• Direct Interactions: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting support, or responding to surveys or promotional communications.
• Automated Technologies: Technical and usage data collected automatically when you access the Platform, through cookies, web beacons, server logs, and similar technologies. See Section 6 for further detail.
• Third-Party Sources: Data received from payment processors (such as JazzCash and Easypaisa), identity verification services, and fraud prevention providers where we are legally permitted to use such data.

3. Legal Basis for Processing

d666 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfil our obligations to you under the d666 Terms & Conditions, including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable anti-money laundering (AML), know-your-customer (KYC), and other regulatory requirements.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your rights.
• Consent: Processing based on your explicit consent, such as receiving marketing communications. You may withdraw consent at any time by contacting d666 support.

4. How We Use Your Data

d666 uses the personal data it collects for the following purposes:

• Creating and managing your d666 account and verifying your identity.
• Processing deposits and withdrawals through your chosen payment method.
• Providing access to casino games, sports betting markets, and other Platform services.
• Administering bonuses, promotions, and loyalty programmes.
• Communicating with you regarding your account, transactions, and service updates.
• Detecting, investigating, and preventing fraud, cheating, money laundering, and other prohibited activities.
• Monitoring gaming activity to identify and respond to signs of problem gambling in accordance with our Responsible Gaming obligations.
• Complying with applicable legal, regulatory, and compliance requirements.
• Analysing usage patterns to improve Platform performance and user experience.
• Sending promotional communications where you have provided consent or where permitted by applicable law.

5. Data Sharing and Disclosure

d666 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment service providers, to the extent necessary to process your transactions.
• Game Providers: Third-party game software suppliers whose titles are offered on d666, where player account data is required for game operation and RNG certification purposes.
• Identity Verification Services: Third-party KYC and AML service providers engaged to verify player identity and screen against sanctions and politically exposed person (PEP) lists.
• Regulatory Authorities: Competent regulatory, law enforcement, or governmental bodies where disclosure is required by applicable law or a valid legal order.
• Professional Advisers: Legal, accounting, and auditing firms engaged by d666, subject to professional confidentiality obligations.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of d666's business, your data may be transferred to the successor entity, subject to equivalent privacy protections.

6. Cookies and Tracking Technologies

d666 uses cookies and similar tracking technologies to operate the Platform, maintain secure sessions, analyse usage, and deliver relevant content. The categories of cookies used include:

• Strictly Necessary Cookies: Required for core Platform functionality including user authentication, session management, and security. These cannot be disabled.
• Performance and Analytics Cookies: Used to measure Platform performance, identify errors, and understand how players navigate d666. Data collected is aggregated and anonymous.
• Functional Cookies: Used to remember your preferences such as language settings and display options to personalise your d666 experience.

You may control non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of the d666 Platform. By continuing to use d666, you consent to the use of cookies as described in this section.

7. Data Retention

d666 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations (including AML record-keeping requirements which typically mandate retention for a minimum of five years), and to resolve any outstanding disputes or claims. Account data is generally retained for the duration of the account's active status plus a further period as required by law. Upon expiry of the applicable retention period, data is securely deleted or anonymised.

8. Data Security

d666 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption for all data transmitted between your device and the d666 servers, hashed password storage, token-based session authentication, access controls limiting data access to authorised personnel only, and regular security reviews of Platform infrastructure.

Notwithstanding the above, no method of data transmission over the internet or electronic storage is completely secure. d666 cannot guarantee absolute security of your data and shall not be liable for any unauthorised access resulting from circumstances beyond our reasonable control. You are responsible for maintaining the security of your own account credentials.

9. Your Rights

Subject to applicable data protection laws, you may have the following rights in relation to your personal data held by d666:

• Right of Access: To request a copy of the personal data d666 holds about you.
• Right to Rectification: To request correction of inaccurate or incomplete personal data.
• Right to Erasure: To request deletion of your personal data, subject to overriding legal retention obligations.
• Right to Restriction: To request that d666 restrict processing of your data in certain circumstances.
• Right to Object: To object to processing of your personal data based on legitimate interests, including direct marketing.
• Right to Data Portability: To receive your personal data in a structured, machine-readable format where technically feasible.
• Right to Withdraw Consent: To withdraw any previously given consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact d666 via live chat or email at [email protected]. d666 will respond to verified data rights requests within thirty (30) days of receipt.

10. Children's Privacy

The d666 Platform is strictly intended for adults aged 18 years and above. d666 does not knowingly collect, process, or retain personal data relating to any individual under the age of 18. If d666 becomes aware that personal data has been collected from a minor, such data will be deleted without delay and the associated account will be permanently closed. If you believe a minor has accessed or registered on d666, please notify us immediately via live support.

11. International Data Transfers

d666 may transfer your personal data to servers or service providers located outside of Pakistan. Where such transfers occur, d666 takes reasonable steps to ensure that recipient entities provide an adequate level of data protection through contractual mechanisms or equivalent safeguards. By using d666, you consent to the transfer of your personal data to international locations as described in this section.

12. Third-Party Links

The d666 Platform does not include external links to third-party websites in its main content. However, where any such links are present (for example, in game provider content or embedded media), d666 is not responsible for the privacy practices of those third-party sites. We recommend that you review the privacy policy of any website you visit independently of d666.

13. Changes to This Policy

d666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. Material changes will be communicated to registered players via the email address associated with their account and by a notice displayed on the Platform. The "Last updated" date at the top of this document reflects the date of the most recent revision. Continued use of d666 following publication of an amended Privacy Policy constitutes acceptance of the revised terms.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by d666, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the d666 Platform.
• Email: [email protected]

d666 aims to acknowledge all privacy-related enquiries within two (2) business days and to resolve substantive data rights requests within thirty (30) calendar days.