w666 Privacy Policy — How We Collect, Use & Protect Your Data

1. Definitions and Scope

This Privacy Policy applies to all personal data collected, processed, stored, and shared by the w666 platform (accessible at w666.lat) in connection with the provision of its online gaming, sports betting, and account management services.

In this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could identify a living individual directly or in combination with other information — including name, date of birth, CNIC number, mobile number, email address, IP address, payment account details, and device identifiers.
• "Processing" means any operation performed on personal data — including collection, recording, organisation, storage, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means w666, the entity that determines the purposes and means of processing personal data.
• "Data Subject" means the individual whose personal data is being processed — in the context of the w666 platform, this is you, the registered player.
• "Third Party" means any entity other than w666 and you — including payment processors, KYC verification providers, game studios, and regulatory authorities.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement by which the Data Subject permits w666 to process their personal data for a stated purpose.

This policy applies to all users of the w666 platform regardless of device type, location, or method of access. It applies to data collected through the w666 website, any associated mobile-optimised interfaces, and all communications between you and the w666 support team.

2. Data Controller Information

w666 is the data controller in respect of all personal data collected through the w666 platform. As data controller, w666 is responsible for determining how and why personal data is processed and ensuring that processing occurs in compliance with applicable data protection obligations under our international gaming license.

Where w666 engages third-party service providers to process data on our behalf (such as payment processors or identity verification services), those providers act as data processors under contractual arrangements that impose equivalent data protection obligations. They are not authorised to use your data for their own independent purposes.

3. Personal Data We Collect

w666 collects the following categories of personal data in connection with your use of the platform:

Registration and Identity Data

• Full legal name as it appears on your identity document;
• Date of birth (used for age verification — 21+ requirement);
• Residential address;
• Pakistani mobile number (e.g., Jazz, Telenor, Zong, Ufone, Warid);
• Email address;
• Account username and encrypted password hash.

KYC and Verification Documents

• Images of your valid Pakistani Computerised National Identity Card (CNIC) — front and back;
• Additional identity or address documentation where enhanced due diligence is required;
• Selfie or liveness verification data where applicable.

Financial Data

• JazzCash or EasyPaisa account numbers used for deposits and withdrawals;
• Bank account names and numbers (HBL, UBL, Meezan, etc.) where bank transfer is used;
• Transaction history — amounts, timestamps, methods, and reference numbers;
• Source of funds information where required by anti-money laundering obligations.

Technical and Usage Data

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Session duration, login timestamps, and pages accessed;
• Game play history — titles accessed, wagers placed, outcomes, and session durations;
• Betting history on cricket, PSL, and other sports markets.

Communications Data

• Content and metadata of your communications with the w666 support team via live chat or email;
• Records of complaints and their resolution outcomes;
• Marketing preference settings and communication opt-in or opt-out records.

4. How We Collect Your Data

w666 collects personal data through the following channels:

• Directly from you: When you complete the registration form on the w666 platform; when you submit KYC documents for identity verification; when you initiate a deposit or withdrawal transaction; when you contact the support team; and when you update your account settings or preferences.
• Automatically: When you visit and interact with the w666 platform, technical data including IP addresses, device identifiers, session timestamps, and browser characteristics are collected automatically through server logs and analytics tools.
• Via cookies and tracking technologies: As described in Section 10, the w666 platform uses cookies and similar technologies to collect information about your browsing behaviour, session activity, and platform preferences.
• From third-party providers: w666 may receive supplementary identity verification data from licensed KYC and anti-money laundering compliance service providers used to verify the accuracy of information you have provided.

5. Legal Basis for Processing

w666 processes personal data only where a lawful basis exists for doing so. The applicable legal bases are as follows:

1. Performance of Contract: Processing is necessary to provide the w666 gaming and betting services to you as a registered account holder — including account management, game delivery, transaction processing, and customer support.
2. Legal Obligation: Processing is required to comply with obligations under our gaming license, anti-money laundering regulations, age verification requirements, and applicable tax and reporting laws.
3. Legitimate Interests: Processing is carried out for w666's legitimate business interests where those interests are not overridden by your fundamental rights — including fraud detection, platform security monitoring, responsible gambling pattern analysis, and product improvement.
4. Consent: Where processing is based on your consent — such as optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

6. How w666 Uses Your Personal Data

The personal data w666 collects is used for the following purposes:

• Account creation and management — creating, maintaining, and securing your w666 account throughout its lifecycle;
• Age and identity verification — confirming that you meet the 21+ age requirement and that your identity is accurately represented for regulatory compliance;
• Payment processing — facilitating deposits from and withdrawals to your JazzCash, EasyPaisa, or bank account in PKR;
• Regulatory compliance — meeting our obligations under our gaming license, anti-money laundering (AML) frameworks, and Know Your Customer (KYC) requirements;
• Fraud and security monitoring — detecting unauthorised access attempts, account sharing, bonus abuse, money laundering patterns, and other prohibited activities;
• Responsible gaming management — monitoring play patterns to identify potential problem gambling indicators and applying appropriate safeguarding measures where warranted;
• Customer support — responding to your enquiries, resolving complaints, and providing assistance with account and payment issues;
• Platform improvement — using aggregated, anonymised usage data to understand how players use the w666 platform and to make product improvements;
• Marketing communications — where you have opted in, sending promotional offers, bonus notifications, and platform updates relevant to your account (opt-out available at any time).

7. Data Sharing and Third Parties

w666 shares personal data with third parties only in the following circumstances:

• Payment processors: Your payment details are shared with licensed payment providers (JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank and their technical partners) solely for the purpose of completing your requested transactions. These providers are contractually bound to confidentiality.
• KYC and AML providers: Identity documents and verification data may be shared with licensed third-party identity verification and anti-money laundering compliance services used by w666 to fulfil its regulatory obligations.
• Regulatory and licensing authorities: w666 is required to provide account and transaction data to our gaming licensing authority upon request as part of our regulatory obligations. This may include providing information to law enforcement or financial intelligence authorities where required by applicable law.
• Game studios and platform providers: Technical session and gameplay data may be shared with the licensed game studios whose titles appear on the w666 platform for the purpose of game operation and audit. This data is anonymised where possible.
• Legal and professional advisers: w666 may share data with legal counsel, auditors, and professional advisers who are bound by professional confidentiality obligations in connection with the operation of the platform.
• Business succession: In the event of a merger, acquisition, or transfer of the w666 business, personal data may be transferred to the acquiring entity as part of the transaction — with equivalent data protection obligations imposed contractually.

8. International Data Transfers

As an internationally operated platform, w666 may process or store personal data in jurisdictions outside of Pakistan. Where such transfers occur, w666 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this policy.

Safeguards for international transfers include:

• Contractual data processing agreements with third-party providers imposing binding data protection obligations;
• Use of third-party providers who are themselves subject to international data protection certifications or regulatory frameworks;
• Data minimisation during transfers — only the data necessary for the specific service being provided is transferred.

Players in Pakistan whose data is transferred internationally retain all of the rights described in Section 12 of this policy regardless of where their data is processed.

9. Data Retention

w666 retains personal data only for as long as is necessary for the purposes for which it was collected and to comply with applicable legal retention requirements. The following general retention periods apply:

• Account data: Retained for the duration of the account and for a period of five (5) years following account closure, in compliance with gaming regulatory and anti-money laundering obligations;
• KYC documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, as required under AML obligations;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction for regulatory, audit, and dispute resolution purposes;
• Communications data: Support communications are retained for two (2) years from the date of the last interaction, or longer where required for ongoing dispute resolution or regulatory matters;
• Technical and log data: Server logs and session data are typically retained for twelve (12) months unless required for active fraud investigation or regulatory review.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with w666's data destruction procedures.

10. Cookies and Tracking Technologies

The w666 platform uses cookies and similar tracking technologies to operate and improve the service. Cookies are small text files stored on your device when you visit the platform. w666 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the operation of the platform — including session authentication, account security, and payment page function. These cannot be disabled without preventing platform access.
• Functional cookies: Remember your preferences such as language settings, currency display, and game lobby layout to improve your w666 experience across sessions.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate and use the w666 platform, used to identify usability improvements. Individual players are not identified through analytics data.
• Responsible gaming cookies: Track session duration locally to power session time reminder features and voluntary time-limit tools available in your account settings.

w666 does not use third-party advertising cookies or cross-site tracking cookies that profile you across other websites for commercial purposes unrelated to the operation of the platform.

11. Security Measures

w666 implements a range of technical and organisational measures to protect the personal data we hold against unauthorised access, loss, alteration, disclosure, or destruction:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the w666 platform is encrypted in transit using industry-standard TLS protocols;
• Encrypted data storage: Sensitive personal data — including KYC documents and financial details — is stored in encrypted form with access restricted to authorised personnel only;
• Access control: Internal access to personal data is restricted on a need-to-know basis, with role-based access controls and activity logging for all data access events;
• OTP device authentication: Unrecognised device logins trigger one-time password verification sent to your registered Pakistani mobile number;
• Regular security review: w666 conducts periodic internal security assessments to identify and remediate vulnerabilities in platform infrastructure and data handling procedures.

Despite these measures, no data transmission over the internet is entirely without risk. w666 cannot guarantee the absolute security of data transmitted to the platform, and players are encouraged to maintain their own device security practices — including keeping their w666 password confidential and logging out on shared devices.

In the event of a data breach that poses a material risk to affected players, w666 will notify affected Data Subjects and relevant regulatory authorities within the timeframes required by applicable law.

12. Your Privacy Rights

As a data subject, you hold the following rights in relation to the personal data processed by w666. To exercise any of these rights, submit a written request to [email protected]. w666 will respond within 30 days of receipt of a valid request.

• Right of Access: You may request a copy of all personal data w666 holds about you, along with information about how it is processed, where it is stored, and with whom it has been shared.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held by w666. Most contact and preference data can be updated directly through your account settings.
• Right to Erasure: You may request deletion of personal data where processing is no longer necessary, consent has been withdrawn, or a legal basis for processing no longer applies — subject to w666's legal retention obligations.
• Right to Restriction: You may request that processing of your data be restricted while a correction or objection request is under review.
• Right to Object: You may object to processing based on w666's legitimate interests, including for marketing purposes. Objections to marketing are honoured immediately; other objections are assessed on a case-by-case basis.
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to w666 for transfer to another service provider where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting prior lawful processing.

13. Children and Minors

If w666 identifies or is notified that an account belongs to an individual under 21 years of age, the account will be immediately suspended, all associated personal data will be reviewed, and the account will be permanently closed. Any balance held in such an account will be forfeited in accordance with the w666 Terms and Conditions.

If you are a parent or guardian and believe that a minor has provided personal data to w666 through an account registration, please contact [email protected] immediately. We will act on such notifications promptly and will delete any data associated with underage accounts from our systems following the conclusion of any required regulatory review.

14. Changes to This Privacy Policy

w666 reserves the right to update or amend this Privacy Policy at any time. Material changes — those that affect how we collect, use, or share your personal data in a meaningful way — will be communicated to registered users via email notification to the registered account address and/or via a prominent notice on the platform, prior to the change taking effect.

The version number and effective date published at the top of this document identify the currently applicable version of the w666 Privacy Policy. Your continued use of the platform following any update constitutes your acknowledgement of and agreement to the revised policy terms.

Historic versions of this Privacy Policy are available upon written request to [email protected]. If you have concerns about any proposed or recent change to this policy, please contact us before the change takes effect.

Privacy Policy enquiries: [email protected]  |  Response within 30 days  |  Subject line: "Privacy Request — [Your Registered Email]"