d666 Privacy Policy

This Privacy Policy ("Policy") describes how d666 ("d666", "we", "us", "our"), the operator of the online gaming platform at https://d666.click ("Platform"), collects, uses, stores, and protects personal information relating to players and visitors ("you", "your") based in Pakistan and internationally.

d666 is committed to handling your personal data responsibly, transparently, and in compliance with applicable international data protection principles. We recognise that players in Pakistan trust us with sensitive financial and personal information, and we take that responsibility seriously. This Policy applies to all personal data processed in connection with your use of d666, including our website, mobile-optimised platform, customer support channels, and promotional communications.

This Policy was last updated on 1 January 2026. The most current version is always available at d666.click/privacy-policy.

d666 acts as the data controller in respect of the personal data collected through the Platform. As data controller, d666 determines the purposes and means by which your personal data is processed. All data protection enquiries, subject access requests, and deletion requests should be directed to our support team at the contact details provided in Section 15 of this Policy.

d666 collects several categories of personal data depending on how you interact with the Platform. The table below summarises the main categories and specific data points we may collect:

You are not required to provide data marked optional; however, failure to provide mandatory data may prevent us from opening or maintaining your d666 account or processing transactions.

d666 collects your personal data through the following channels and means:

• Direct registration: Data you provide when creating a d666 account, completing KYC verification, or updating your account profile.
• Platform activity: Data generated automatically as you browse the d666 website, play games, place bets, make deposits, or request withdrawals.
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, and banking partners following a deposit or withdrawal.
• Identity verification providers: Results of identity and age verification checks conducted by our third-party KYC partners.
• Customer support interactions: Information provided when you contact d666 support via email or live chat.
• Cookies and tracking technologies: Technical and behavioural data collected automatically through cookies and similar technologies as described in Section 10.

d666 processes your personal data for specific, defined purposes. We rely on one or more of the following legal bases for each processing activity: (a) performance of a contract with you; (b) compliance with a legal obligation; (c) our legitimate interests where not overridden by your rights; or (d) your explicit consent where required.

d666 does not sell your personal data. We share your personal data only with the following categories of third parties, and only to the extent necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum data required to execute and confirm your financial transactions.
• Identity verification providers: Third-party KYC and age verification services receive the identity documents you submit to verify your eligibility to use d666.
• Game software providers: Licensed game studios that supply casino and crash game content may receive anonymised session data necessary to run their games correctly.
• IT and infrastructure providers: Hosting, security, and technical support vendors who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: We may disclose personal data to law enforcement, regulatory bodies, or courts where required by applicable law, a court order, or to protect the rights and safety of d666 or third parties.
• Professional advisers: Lawyers, auditors, and insurers under binding confidentiality obligations where necessary for legitimate business purposes.

d666 accepts deposits and withdrawals in Pakistani Rupees (PKR) via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. When you make a transaction, payment data is transmitted directly to the relevant payment processor using encrypted channels. d666 does not store your full JazzCash or EasyPaisa PIN, your internet banking credentials, or your full bank account numbers on our servers.

We do retain transaction reference numbers, amounts, timestamps, and confirmation statuses as part of your account transaction history. This data is retained for a minimum of five (5) years to comply with our AML obligations and to resolve any disputes arising from financial transactions.

d666 retains your personal data for different periods depending on the category of data and the purpose for which it was collected:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, to meet AML and regulatory requirements.
• Transaction and gaming records: Retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications: Retained for two (2) years from the date of the last interaction.
• Technical and log data: Retained for up to twelve (12) months, after which it is automatically deleted or anonymised.
• Marketing consent records: Retained until you withdraw consent or close your account, whichever is earlier.

Where data is no longer required for its original purpose and there is no legal obligation to retain it, d666 will securely delete or irreversibly anonymise it. Anonymised data (which can no longer identify you) may be retained indefinitely for statistical and analytical purposes.

d666 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and d666 servers.
• Encrypted storage of passwords using industry-standard hashing algorithms; d666 staff cannot view your password in plain text.
• Role-based access controls ensuring that only authorised d666 personnel with a legitimate business need can access personal data.
• Regular security audits and penetration testing of the d666 platform and underlying infrastructure.
• Firewall protection, intrusion detection systems, and DDoS mitigation for our server infrastructure.
• Two-factor authentication (2FA) available for all d666 player accounts and mandatory for internal staff systems.

Whilst d666 takes every reasonable precaution, no internet-based system is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, d666 will notify affected players without undue delay and take immediate remedial action.

d666 uses cookies and similar technologies (local storage, session tokens) to operate the Platform and improve your experience. The following categories of cookies are used:

d666 does not use third-party advertising cookies or cross-site tracking cookies. You can disable non-essential cookies through your browser settings at any time, though doing so may affect the functionality of certain features on the Platform.

Subject to applicable law and certain exceptions, you have the following rights in relation to the personal data d666 holds about you:

• Right of Access: Request a copy of all personal data d666 holds about you (commonly known as a Subject Access Request).
• Right to Rectification: Request correction of inaccurate or incomplete personal data held about you.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
• Right to Restriction: Request that d666 temporarily restrict processing of your personal data while the accuracy or legality of processing is contested.
• Right to Data Portability: Request a machine-readable copy of the personal data you have provided to d666 for transfer to another service provider.
• Right to Object: Object to processing of your data based on legitimate interests, including the receipt of direct marketing communications.
• Right to Withdraw Consent: Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact d666 at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 72 hours and respond in full within 30 days. We may ask you to verify your identity before processing a rights request.

d666 strictly prohibits the use of its platform by any person under the age of 21. d666 does not knowingly collect personal data from persons under 21 years of age. If you are a parent or guardian and believe that a person under 21 in your care has created a d666 account or provided personal data to d666, please contact us immediately at [email protected].

Upon receiving such a notification, d666 will verify the claim and, if confirmed, will immediately close the account and securely delete all associated personal data without undue delay. Any funds associated with an under-age account will be handled in accordance with applicable law and our Terms & Conditions.

In order to provide a reliable and secure platform, d666 may process or store some of your personal data on servers or through service providers located outside Pakistan. In all such cases, d666 ensures that adequate safeguards are in place to protect your personal data, including contractual data processing agreements with all international sub-processors that impose data protection obligations equivalent to those described in this Policy.

Where data is transferred to a country that does not have data protection laws equivalent to those in your jurisdiction, d666 relies on recognised transfer mechanisms such as standard contractual clauses or equivalent international frameworks to legitimise the transfer.

d666 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will notify registered players by email and/or by displaying a prominent notice on the Platform at least 14 days before the changes take effect.

The updated Policy will always show the revised effective date at the top of the document. We encourage you to review this Policy periodically. Your continued use of d666 after the effective date of any revision constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way d666 processes your personal data, please contact our support team. We aim to acknowledge all privacy-related enquiries within 72 hours and resolve them fully within 30 days.

For Subject Access Requests or deletion requests, please include your registered email address and a brief description of your request. We may require identity verification before processing your request to ensure your data is not disclosed to or deleted by an unauthorised party.