Privacy Policy – How 66p Collects, Uses, and Protects Your Data

1Scope of This Policy

This Privacy Policy applies to all personal data processed by 66p in connection with the operation of the 66p.asia online gaming and sports betting platform. It covers data collected directly from users during registration and use of the platform, data collected automatically through technical systems, and data received from third-party sources in connection with identity verification, payment processing, and fraud prevention activities. This policy applies to all registered users of the 66p platform, including players located in Pakistan and other permitted jurisdictions.

2Data Controller

For the purposes of this Privacy Policy, 66p — the operator of 66p.asia — acts as the data controller in respect of personal data collected through the platform. As data controller, 66p determines the purposes and means of processing personal data as described in this policy. Where 66p engages third-party processors to handle data on its behalf, those processors are contractually bound to process data only in accordance with 66p's instructions and this policy.

3Personal Data We Collect

66p collects personal data in the following categories:

• Registration Data: Full name, date of birth, email address, mobile number, and any additional information provided during account creation on 66p.
• Identity Verification Data: Copies of government-issued identity documents (such as CNIC or passport), proof of address, and selfie photographs where required for KYC compliance.
• Financial Data: Payment method details including JazzCash account references, Easypaisa wallet identifiers, bank account information for HBL, UBL, Meezan Bank, Bank Alfalah, and USDT wallet addresses. Full payment card numbers are not stored by 66p.
• Transaction Data: Records of all deposits, withdrawals, bets placed, games played, and bonuses claimed on the 66p platform.
• Technical Data: IP address, device identifiers, browser type and version, operating system, session timestamps, and geolocation data derived from IP address.
• Communications Data: Content of messages exchanged with 66p customer support, including live chat transcripts and email correspondence.
• Behavioural Data: Platform navigation patterns, game preferences, betting history, session durations, and feature usage — collected to improve the 66p user experience and for responsible gaming monitoring purposes.

4How We Use Your Data

66p processes your personal data for the following purposes:

• To create and manage your 66p account, including verifying your identity and eligibility to use the platform;
• To process deposits and withdrawals and maintain accurate financial records of all transactions on your 66p account;
• To provide, maintain, and improve the 66p platform's gaming and betting services;
• To detect and prevent fraud, money laundering, unauthorised account access, and other prohibited activities;
• To comply with applicable legal and regulatory obligations, including anti-money laundering (AML) and know-your-customer (KYC) requirements;
• To communicate with you regarding your 66p account, transactions, security alerts, and promotional offers (where you have opted in to marketing communications);
• To operate 66p's responsible gaming program, including monitoring for indicators of problem gambling and administering self-exclusion and limit-setting tools;
• To analyse platform usage and improve product features, user interface design, and game content recommendations.

5Legal Basis for Processing

66p processes personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil the 66p user agreement, including account management, transaction processing, and service delivery;
• Legal Obligation: Processing required to comply with applicable AML, KYC, tax reporting, and other regulatory requirements;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by your fundamental rights;
• Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained and remains in effect.

6Data Sharing and Disclosure

66p does not sell personal data to third parties. 66p may share personal data with the following categories of recipients in the circumstances described:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment service providers receive financial data necessary to process deposits and withdrawals on 66p accounts;
• Identity Verification Services: Third-party KYC providers who assist 66p in verifying user identity documents and screening against sanctions and politically exposed persons (PEP) lists;
• Game Providers: Certified game studios integrated into the 66p platform receive technical session data necessary to deliver their games and maintain RNG audit trails;
• Fraud Prevention Services: Third-party fraud detection tools that analyse transaction patterns and device fingerprints to identify suspicious activity on the 66p platform;
• Regulatory and Law Enforcement Authorities: Where 66p is legally required or permitted to disclose information to regulators, law enforcement agencies, or courts of competent jurisdiction;
• Business Successors: In the event of a merger, acquisition, or sale of 66p assets, user data may be transferred to the acquiring entity subject to equivalent privacy protections.

All third-party service providers engaged by 66p are contractually required to process personal data only for the purposes specified by 66p and to maintain appropriate security measures.

7International Data Transfers

As an international online gaming platform serving Pakistani users, 66p may transfer personal data to countries outside your jurisdiction of residence for processing by service providers and platform infrastructure. Where such transfers occur, 66p implements appropriate safeguards to ensure that personal data receives equivalent protection to that required under applicable data protection standards. These safeguards may include standard contractual clauses, adequacy decisions, or other recognised transfer mechanisms. By using the 66p platform, you acknowledge that your personal data may be processed internationally for the purposes described in this policy.

8Data Retention

66p retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to applicable legal and regulatory retention requirements. In general:

• Account registration and identity verification data is retained for a minimum of five (5) years following account closure, in accordance with AML and KYC regulatory requirements;
• Transaction and financial records are retained for a minimum of seven (7) years following the relevant transaction date;
• Customer support communications are retained for a minimum of three (3) years from the date of the relevant interaction;
• Technical and analytical data is retained for shorter periods consistent with its operational purpose, typically twelve (12) to twenty-four (24) months.

Following the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9Cookies and Tracking Technologies

The 66p platform uses cookies and similar technologies including local storage, session tokens, and pixel tags to operate the platform, maintain authenticated sessions, remember user preferences, and analyse user behaviour for platform improvement purposes. The categories of cookies used by 66p include:

• Strictly Necessary Cookies: Required for the 66p platform to function, including authentication tokens and session management cookies. These cannot be disabled without impairing platform functionality;
• Performance and Analytics Cookies: Used to collect aggregated, anonymised data on how users interact with the 66p platform, enabling us to identify areas for improvement;
• Functionality Cookies: Remember your language preferences, display settings, and other customisations on the 66p platform;
• Marketing Cookies: Where you have consented, these cookies track your interaction with 66p promotional content to measure campaign effectiveness.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the 66p platform from operating correctly.

10Your Rights as a Data Subject

Subject to applicable law and regulatory restrictions, you have the following rights in respect of personal data held by 66p:

• Right of Access: You may request a copy of the personal data 66p holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data on your 66p account;
• Right to Erasure: You may request deletion of your personal data, subject to 66p's legal retention obligations;
• Right to Restriction: You may request that 66p restrict processing of your data in certain circumstances;
• Right to Object: You may object to processing based on legitimate interests, including direct marketing;
• Right to Data Portability: You may request a structured, machine-readable copy of your personal data for transfer to another service provider where technically feasible.

To exercise any of these rights, contact 66p support via the live chat on your account dashboard or by email at the address listed in Section 14 of this policy. 66p will respond to verified requests within a reasonable timeframe in accordance with applicable law.

11Children's Privacy

The 66p platform is not intended for, marketed to, or accessible to persons under the age of 18. 66p does not knowingly collect personal data from minors. During registration, all users are required to confirm their age. 66p conducts periodic age verification checks and will promptly close any account found to belong to an underage individual, deleting all associated personal data in accordance with this policy and applicable data protection requirements. If a parent or guardian believes their child has registered on 66p, they should contact support immediately.

12Security Measures

66p implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for all data in transit, encryption of sensitive data fields at rest, access control policies restricting internal access to personal data on a need-to-know basis, multi-factor authentication for platform administrative access, regular security assessments and vulnerability testing, and incident response procedures for data security events. Notwithstanding these measures, no online platform can guarantee absolute security. In the event of a data breach affecting your personal data, 66p will notify affected users in accordance with applicable regulatory requirements.

13Changes to This Policy

66p reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal or regulatory requirements, or platform operations. The date of the most recent revision is displayed at the top of this page. Where changes are material, 66p will take reasonable steps to notify registered users — including through in-platform notifications or email to your registered address. Your continued use of the 66p platform after the effective date of any amendment constitutes your acceptance of the updated policy.

14Contact and Complaints

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or wish to raise a complaint about how 66p has handled your personal data, please contact us through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via your 66p account dashboard

66p will acknowledge receipt of privacy-related queries within three (3) business days and aim to provide a substantive response within thirty (30) days of receipt. Where a complaint cannot be resolved through direct contact with 66p, you may have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.