e666 Privacy Policy — How We Handle Your Personal Data

1 Who We Are

e666 is an online betting and gaming platform operating at e666.online, serving members in Pakistan. For the purposes of this Privacy Policy, e666 is the data controller — meaning we are responsible for deciding how and why your personal data is collected and used.

Our platform offers a range of services including cricket betting, PSL live score tracking, sports betting, esports markets, jackpot slots, Ludo games, and a VIP loyalty club. Each of these services involves some degree of data collection and processing, and this policy covers all of them.

If you have any questions about how e666 handles your personal data, or if you wish to exercise any of your rights under this policy, you can reach us at any time at support@e666.online or through the live chat feature available within your e666 account.

2 What Data We Collect

e666 collects only the personal data that is necessary to provide its services, comply with legal obligations, and maintain platform security. We do not collect data speculatively or for purposes unrelated to your account and the services you use.

3 How We Collect Your Data

e666 collects personal data through the following channels:

• Direct registration: When you create an e666 account, you provide your name, date of birth, mobile number, and email address directly through the registration form.
• Identity verification: When completing KYC verification, you upload copies of your CNIC or other identity documents. These are processed through our verification partner and the results are stored against your account.
• Transaction activity: Every deposit, withdrawal, bet, and game spin generates a record that is stored in your account history. This data is created as a natural consequence of using the platform.
• Device and browser data: When you visit e666.online, your device automatically sends technical information including your IP address, browser type, and operating system. This is standard for all websites and is used for security and analytics purposes.
• Cookies and tracking technologies: e666 uses cookies to maintain your session, remember your preferences, and analyse platform usage. See Section 7 for full details of our cookie practices.
• Support interactions: Any communication you have with e666's support team — via live chat, email, or any other channel — is recorded for quality assurance and dispute resolution purposes.

4 Why We Use Your Data

e666 uses the personal data it collects for specific, defined purposes. We do not use data for any purpose that a reasonable person would not expect given the nature of our services. The main purposes for which e666 processes personal data are:

• Account management: Creating, maintaining, and managing your e666 account, including processing your login credentials, account settings, and membership status.
• Service delivery: Processing your bets, settling winnings, running jackpot slots and Ludo games, and providing access to live cricket scores and sports betting markets.
• Financial transaction processing: Receiving deposits from your Easypaisa, JazzCash, NayaPay, SadaPay, bank account, or card, and sending withdrawals back to the same verified source.
• Identity verification and KYC compliance: Verifying that you are who you say you are, confirming you are at least 18 years of age, and meeting anti-money laundering (AML) regulatory requirements.
• Fraud prevention and security: Monitoring account activity for patterns associated with fraud, bonus abuse, multi-accounting, and other prohibited activities. Protecting both e666 members and the platform from malicious actors.
• Customer support: Responding to your questions, resolving disputes, investigating complaints, and providing assistance with your account and transactions.
• Promotions and marketing: Sending you information about bonuses, promotions, PSL season offers, and other relevant offers — but only where you have consented or where our legitimate interests apply, and always with an easy opt-out.
• Platform improvement: Analysing how members use e666 to identify areas for improvement, optimise page performance, and develop new features that better serve Pakistani users.
• Legal and regulatory compliance: Meeting our obligations under applicable laws, responding to lawful requests from regulatory authorities, and maintaining records as required by law.

5 Legal Basis for Processing

e666 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: The majority of processing at e666 — including running your account, processing transactions, and settling bets — is necessary to fulfil the service contract you enter into when you register. Without this processing, e666 cannot provide the services you have signed up for.
• Legal obligation: Certain processing is required by law, including identity verification under KYC regulations, transaction record-keeping for financial compliance, and reporting of suspicious activity under AML regulations.
• Legitimate interests: e666 processes some data on the basis of its legitimate interests as a business, including fraud detection, security monitoring, abuse prevention, and platform analytics. In each case, we have assessed that e666's legitimate interest is not outweighed by your privacy interests.
• Consent: Where e666 processes data for marketing communications, we rely on your consent. You gave that consent when you opted in to receive marketing messages during registration or at a later point. Consent can be withdrawn at any time — see Section 12 for details.

6 Who We Share Your Data With

e666 does not sell, rent, or trade your personal data. We share data only where it is necessary to deliver our services or meet legal obligations, and only with parties who are contractually required to handle data securely and in accordance with applicable data protection standards.

The categories of third parties with whom e666 may share your data are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT-connected banks, and card processors — to execute deposits and withdrawals on your behalf. These parties receive only the transaction data necessary to complete the transfer.
• Identity verification providers: A third-party KYC provider that receives your identity documents and verifies them on e666's behalf. This provider is contractually bound to process documents only for identity verification and to delete them after a specified retention period.
• Technology infrastructure providers: Cloud hosting, database management, and cybersecurity service providers who power the technical infrastructure of e666. These providers operate under strict data processing agreements and do not use e666 member data for their own purposes.
• Regulatory and legal authorities: Where required by applicable law, e666 may be legally obliged to share data with government agencies, financial intelligence units, or law enforcement authorities. e666 will not share data with authorities beyond what is legally required and will notify affected members where legally permitted to do so.
• Fraud prevention networks: e666 may share limited data with industry fraud prevention services to identify and prevent fraudulent activity across the platform. This data is shared in an anonymised or pseudonymised form wherever possible.

7 Cookies and Tracking Technologies

e666 uses cookies and similar tracking technologies on its platform. A cookie is a small text file that is stored in your browser when you visit e666.online. Cookies allow the platform to recognise your device on return visits, maintain your login session, and remember your preferences.

The types of cookies e666 uses are:

• Essential cookies: These are required for the platform to function. Without them, you cannot log in, maintain a session, or place bets. These cookies cannot be disabled without preventing you from using e666.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorised access, and cross-site request forgery. These cookies are also essential and cannot be disabled.
• Preference cookies: Store your platform preferences such as language settings, display options, and recently viewed pages. Disabling these cookies will mean your preferences are not remembered between sessions.
• Analytics cookies: e666 uses analytics tools to understand how members navigate the platform — which pages are visited most, where members encounter difficulties, and how betting flows are used. This data is aggregated and does not identify individual members. You can opt out of analytics cookies without affecting core platform functionality.
• Marketing cookies: If you have consented to receiving personalised promotions, marketing cookies may be used to tailor the offers displayed to you based on your activity. These can be disabled by withdrawing marketing consent — see Section 12.

You can manage cookie settings through your browser's privacy controls. Please note that disabling essential or security cookies will significantly limit your ability to use e666's services.

8 Data Retention

e666 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The key retention periods applied by e666 are as follows:

• Active account data: Retained for the full duration of your membership on e666, plus 5 years after account closure. This extended period is required for financial compliance and AML record-keeping.
• Transaction records: Deposit and withdrawal records, including associated financial data, are retained for 7 years from the date of the transaction. This is a requirement under applicable financial regulations.
• Identity verification documents: CNIC copies and other KYC documents are retained for 5 years after account closure, as required by anti-money laundering regulations. They are stored in encrypted form throughout this period.
• Support communications: Live chat transcripts and emails are retained for 3 years from the date of the interaction. After this period they are anonymised or deleted.
• Marketing consent records: Records of when you gave or withdrew consent for marketing communications are kept for 3 years to provide an audit trail in case of disputes.
• Analytics and usage data: Aggregated usage analytics are retained indefinitely as they do not identify individuals. Session-level data is retained for 12 months and then deleted.

When data reaches the end of its retention period, e666 deletes or anonymises it in a manner that makes identification of the original member impossible. If you close your account, this triggers a review of all data associated with your account and the commencement of the applicable retention period for each data category.

9 Data Security

e666 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or alteration.

The key security measures in place at e666 include:

• Transport encryption: All data transmitted between your device and e666.online is encrypted using TLS 1.3, the current industry standard for secure web communications.
• Data-at-rest encryption: Personal and financial data stored in e666's databases is encrypted using AES-256. This means that even in the event of an unauthorised database access, the data is unreadable without the encryption key.
• Password security: Member passwords are stored as salted cryptographic hashes — the actual password is never stored in a retrievable form. Even e666's own engineers cannot see your password.
• Two-factor authentication: 2FA is available for all e666 accounts and is mandatory for withdrawals above Rs 50,000. We strongly recommend enabling 2FA for all accounts.
• Access controls: Access to member data within e666's internal systems is restricted on a need-to-know basis. Support agents see only the data necessary to resolve your specific query. Database-level access is restricted to a small number of authorised engineers.
• Security monitoring: e666's systems are monitored continuously for suspicious access patterns, unusual transaction activity, and potential intrusion attempts. Automated alerts are triggered immediately when anomalies are detected.
• Security audits: e666 undergoes periodic third-party security audits to identify vulnerabilities and verify that security controls are operating as intended.

10 Your Rights

As an e666 member and data subject, you have a number of rights regarding how your personal data is handled. e666 is committed to making these rights easy to exercise. You can make any of the following requests by contacting support via live chat or by emailing support@e666.online.

e666 will respond to all data rights requests within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by up to 60 days — we will inform you of the extension and the reason for it within the initial 30-day window.

11 Children's Privacy

e666's services are strictly for adults aged 18 and over. e666 does not knowingly collect personal data from anyone under 18. If a minor has registered on e666 using falsified age information, their account will be suspended as soon as this is discovered, any winnings will be forfeited, and deposited funds will be returned to the original payment source after verification.

If you are a parent or guardian and believe that a person under 18 has registered on e666 using your or their details, please contact us immediately at support@e666.online. e666 will investigate promptly and take appropriate action, including deletion of any data collected and closure of the account.

e666 also supports parental control tools and recommends that households with minors use device-level content filtering to prevent access to online betting platforms. The responsible gaming tools available on e666 — including account self-exclusion — can also be used by a parent to close an account if they discover a minor has created one.

12 Marketing Communications

With your consent, e666 may send you marketing communications via SMS, email, and in-app notifications about promotions, bonuses, PSL season offers, jackpot milestones, and other platform news. You can give or withdraw this consent at any time through your account settings under the "Notifications" section, or by clicking the unsubscribe link at the bottom of any marketing email.

Withdrawing marketing consent will not affect your ability to use e666's services. You will still receive transactional communications — deposit confirmations, withdrawal notifications, security alerts, and support responses — as these are necessary for account management and cannot be disabled without affecting the functionality of your account.

13 Changes to This Privacy Policy

e666 may update this Privacy Policy from time to time to reflect changes in our data practices, new services offered on the platform, or changes in applicable law. When material changes are made, e666 will notify members via email and through an in-app notification at least 7 days before the changes take effect.

The updated policy will always be available at this URL — e666.online/privacy-policy — with the "Last Updated" date revised accordingly. We encourage you to review this policy periodically to stay informed about how e666 protects your privacy. Your continued use of e666 after the effective date of any changes constitutes your acknowledgment of the revised policy.

If you disagree with changes to this policy and no longer wish to use e666, you can close your account before the effective date. Any personal data we hold will be handled in accordance with the version of the policy that was in effect at the time it was collected, for as long as we are legally required to retain it.

14 Contact and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way e666 handles your personal data, please get in touch with us through any of the following channels:

• Live Chat: Available within your e666 account, 24 hours a day, 7 days a week. For privacy-related queries, please state "Privacy Request" at the start of your chat so it is directed to the appropriate team.
• Email: support@e666.online — for formal data subject requests, please use the subject line "Data Rights Request". e666 will acknowledge your email within 24 hours and provide a full response within 30 days.

If you are not satisfied with how e666 has handled a privacy concern, you have the right to escalate the matter. e666 encourages members to contact us first so we have the opportunity to resolve your concern directly. For formal complaints that remain unresolved after engaging with e666 support, you may contact the relevant data protection authority or consumer rights body in your jurisdiction.

This Privacy Policy was last updated on 1 January 2025. Your continued use of e666 after this date constitutes acknowledgment of this policy.