01 Who We Are
d6666 ("d6666", "we", "us", "our") is an online gaming platform accessible at https://d6666.biz, offering cricket betting, live casino, slot games, fishing games, and related entertainment services to registered players in Pakistan and other eligible jurisdictions. d6666 is the data controller responsible for the personal data of all registered players and website visitors.
This Privacy Policy applies to all personal data collected by d6666 through the following channels:
- The d6666 website at https://d6666.biz and all associated subdomains.
- Any d6666 mobile application made available for Android or iOS devices.
- Customer support interactions via live chat, email, or any other communication channel offered by d6666.
- Promotional activities, surveys, competitions, and affiliate referral programs associated with d6666.
If you have any questions about how d6666 handles your personal data, please contact our Data Protection Officer directly at [email protected] before proceeding to register on our platform.
Scope: This Privacy Policy governs only the data practices of d6666 itself. It does not apply to third-party websites, payment processors, or game providers that you may interact with through links or integrations on the d6666 platform. Each third party operates under its own privacy policy.
02 Personal Data We Collect
d6666 collects personal data across several categories, each of which serves a defined purpose in delivering and securing our platform. The following table summarises the categories of data d6666 collects and the primary purpose of each:
| Data Category |
Examples |
Primary Purpose |
| Identity Data |
Full name, CNIC number, date of birth, nationality, gender |
Age and identity verification; KYC compliance |
| Contact Data |
Email address, mobile number, city of residence (e.g. Karachi, Lahore, Islamabad) |
Account communications, support, notifications |
| Financial Data |
JazzCash / EasyPaisa account numbers, bank account details, transaction history |
Processing deposits, withdrawals, and AML compliance |
| Gaming Activity Data |
Game sessions, bets placed, wins and losses, bonus usage, session duration |
Platform functionality, responsible gaming, fraud detection |
| Technical Data |
IP address, device type, browser, operating system, session tokens |
Security, fraud prevention, platform performance |
| Preference Data |
Favourite games, language settings, marketing preferences, self-exclusion status |
Personalisation and responsible gaming tools |
| Communications Data |
Live chat transcripts, email correspondence, support ticket contents |
Support quality, dispute resolution, compliance |
d6666 does not intentionally collect any special category data (such as health information, political opinions, or biometric data) except where strictly required under applicable regulatory obligations — for example, where a responsible gaming assessment requires disclosure of a medical diagnosis relevant to a self-exclusion request.
03 How We Collect Your Data
d6666 collects personal data through the following methods:
- Direct Collection: Data you voluntarily provide when registering a d6666 account, completing identity verification, making a deposit or withdrawal, contacting customer support, or participating in a d6666 promotion or survey.
- Automated Collection: Technical and behavioural data collected automatically when you access and use the d6666 platform, including through cookies, server logs, device fingerprinting technologies, and analytics tools.
- Third-Party Sources: Data received from identity verification providers, payment processors (such as JazzCash, EasyPaisa, HBL, and UBL), fraud detection services, and credit reference agencies where required to verify your identity or detect suspicious activity.
- Publicly Available Sources: In certain circumstances, d6666 may cross-reference information you have provided with publicly available sources such as national CNIC databases to confirm the accuracy of identity data submitted during registration.
Minimal Data Principle: d6666 follows a data minimisation approach. We collect only the personal data that is genuinely necessary to fulfil the purpose for which it is being collected. We do not collect data speculatively or build profiles beyond what is needed to operate a secure, fair, and personalised gaming platform.
04 Purpose & Legal Basis for Processing
d6666 processes your personal data only where there is a lawful basis for doing so. The following table sets out the primary purposes for which d6666 processes personal data, together with the applicable legal basis in each case:
- Account Registration & Management: Processing is necessary for the performance of the contract between you and d6666. Without this processing, d6666 cannot create or maintain your account.
- Identity & Age Verification: Processing is necessary for compliance with d6666's legal obligations, including its duty to prevent underage gambling and to comply with anti-money laundering regulations applicable to online gaming operators. 21+ strictly enforced.
- Payment Processing: Processing is necessary for the performance of the contract between you and d6666, specifically to facilitate deposits and withdrawals in Pakistani Rupees (PKR) through your selected payment method.
- Fraud Detection & Security: Processing is based on d6666's legitimate interest in protecting the integrity of its platform, preventing financial crime, and safeguarding the interests of genuine players.
- Responsible Gaming: Processing is necessary for compliance with d6666's legal obligations and is also in your vital interests. Gaming activity data is used to identify patterns that may indicate problem gambling, enabling d6666 to offer timely support and intervention.
- Personalisation & Marketing: Where you have given your consent at registration or via account settings, d6666 may use your data to personalise your gaming experience and send you relevant promotional offers. You may withdraw consent at any time.
- Legal Compliance & Regulatory Reporting: Processing is necessary for d6666 to meet its legal obligations, including reporting obligations to financial intelligence units and regulatory authorities where required by applicable law.
05 Data Sharing & Third Parties
d6666 does not sell your personal data. We share personal data with third parties only in the limited circumstances described below, and only where necessary to fulfil the relevant purpose:
- Identity Verification Providers: d6666 works with regulated identity verification services to confirm CNIC details and age. These providers act as data processors under contractual obligations to protect your data.
- Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, Visa, Mastercard, and USDT gateway providers receive the financial data strictly necessary to process your transactions. Each payment provider operates under its own data protection obligations.
- Game Content Providers: Third-party game studios whose titles are available on d6666 may receive anonymised or pseudonymised session data necessary for game functionality, RNG certification compliance, and dispute resolution. No directly identifiable personal data is shared with game providers beyond what is required for these specific purposes.
- Analytics & Security Providers: d6666 uses trusted analytics and cybersecurity partners to monitor platform performance, detect fraud, and maintain service integrity. These partners process data on d6666's behalf and are bound by strict data processing agreements.
- Legal & Regulatory Authorities: d6666 will disclose personal data to competent regulatory authorities, law enforcement agencies, or financial intelligence units where required to do so by applicable law, court order, or regulatory direction. d6666 will notify affected players of such disclosures where legally permitted to do so.
- Business Transfers: In the event of a merger, acquisition, or sale of all or part of d6666's business, player data may be transferred to the successor entity. Affected players will be notified prior to any such transfer, and the successor entity will be required to honour the commitments set out in this Privacy Policy.
No Sale of Data: d6666 will never sell, auction, rent, or otherwise commercially exploit your personal data for third-party advertising or marketing purposes. This commitment applies regardless of any future changes to d6666's business model.
06 Cookies & Tracking Technologies
d6666 uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, to analyse platform usage, and to help detect fraud and security threats. The following categories of cookies are used on d6666:
- Strictly Necessary Cookies: These cookies are essential for the d6666 platform to function. They maintain your login session, remember your language settings, and enable core features such as the game lobby and account dashboard. These cookies cannot be disabled without breaking platform functionality.
- Functional Cookies: These cookies remember your preferences such as preferred payment method, favourite games, and responsible gaming limits you have set. They enhance your experience but are not strictly required for basic platform operation.
- Analytics Cookies: d6666 uses analytics tools to understand how players navigate and interact with the platform. This data is used in aggregate and pseudonymised form to identify improvements and optimise the user experience. You may opt out of analytics cookies via your account settings.
- Security & Fraud Prevention Cookies: These cookies help d6666 identify suspicious login attempts, detect bot activity, and protect the integrity of the platform. They are treated as strictly necessary for security purposes.
d6666 does not use third-party advertising or retargeting cookies that track your behaviour across other websites. Our cookie usage is limited to what is necessary for platform operation, performance, and security.
You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use d6666's platform, including logging in and accessing games.
07 Data Retention
d6666 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:
- Active Account Data: Personal data associated with an active d6666 account is retained for the full duration of your account relationship with d6666 plus a minimum of five (5) years following account closure, as required under applicable anti-money laundering regulations.
- Identity & KYC Documents: CNIC copies, proof of address, and source-of-funds documentation are retained for a minimum of five (5) years following the conclusion of your account relationship or the completion of the transaction to which they relate, whichever is later.
- Transaction Records: Records of all financial transactions, including deposits, withdrawals, and bonus awards, are retained for a minimum of seven (7) years to comply with financial record-keeping obligations.
- Gaming Activity Logs: Game session logs, bet histories, and responsible gaming tool usage records are retained for a minimum of three (3) years following account closure to support dispute resolution and responsible gaming monitoring.
- Communications Data: Customer support interactions and correspondence are retained for three (3) years to support dispute resolution and quality assurance.
- Marketing Consent Records: Records of your marketing consent preferences are retained for the duration of your account plus two (2) years following account closure.
Following the expiry of the applicable retention period, d6666 will securely delete or anonymise your personal data so that it can no longer be attributed to you as an individual.
08 Data Security
d6666 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, destruction, or accidental loss. These measures include:
- TLS Encryption: All data transmitted between your browser or app and d6666's servers is encrypted using Transport Layer Security (TLS 1.2 or higher). This applies to all account activity, payment transactions, and support communications.
- Data Encryption at Rest: Sensitive personal data stored on d6666's servers — including identity documents, payment account details, and authentication credentials — is encrypted using AES-256 encryption.
- Access Controls: Access to personal data within d6666's systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular access reviews.
- Two-Factor Authentication: d6666 supports two-factor authentication for player accounts and enforces it for all internal staff accounts with access to personal data systems.
- Penetration Testing: d6666 commissions regular independent security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
- Incident Response: d6666 maintains a formal data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, d6666 will notify affected players within 72 hours of becoming aware of the incident.
Your Responsibility: While d6666 takes every reasonable precaution to protect your data on our end, the security of your account also depends on the strength of your password and your own device security practices. We strongly recommend using a unique password for your d6666 account and enabling two-factor authentication. Never share your login credentials with anyone.
09 Your Privacy Rights
As a d6666 player, you have the following rights over your personal data. To exercise any of these rights, contact d6666's Data Protection Officer at [email protected] with the subject line "Data Rights Request". d6666 will respond to all valid requests within ten (10) business days:
- Right of Access: You have the right to request a copy of all personal data d6666 holds about you, together with information about how it is being used.
- Right to Rectification: If any personal data d6666 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
- Right to Erasure: You may request that d6666 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where you object to processing and there is no overriding legitimate interest. Note that d6666 may be required to retain certain data to meet regulatory obligations even following an erasure request.
- Right to Restriction: You may request that d6666 restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that d6666 transmit that data directly to another controller where technically feasible.
- Right to Object: You have the right to object to d6666 processing your personal data on the basis of legitimate interests, including profiling for personalisation purposes. d6666 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where d6666 processes your data on the basis of your consent — such as for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.
10 Children's Privacy & Underage Protection
d6666's gaming services are strictly intended for adults aged 21 and above. d6666 does not knowingly collect personal data from anyone under the age of 21. The collection of data from minors on our platform is strictly prohibited and constitutes a violation of our Terms & Conditions.
During the registration process, d6666 requires CNIC verification to confirm that all players meet the minimum age requirement of 21 years. Where d6666 has reason to suspect that a registered account may belong to a person under 21, the account will be suspended immediately and an age verification investigation will be initiated.
If d6666 discovers that it has inadvertently collected personal data from a person under the age of 21, the following steps will be taken:
- The account will be permanently closed and access to all gaming services blocked immediately.
- All personal data associated with the underage account will be securely deleted as soon as practically possible, except where retention is required for legal or regulatory purposes.
- Any deposits made to the underage account will be returned in full. Any winnings generated will be voided.
- The matter will be reviewed by d6666's compliance team to assess whether any reporting obligations to relevant authorities are triggered.
Parents & Guardians: If you believe that a person under 21 in your household has registered on d6666, please contact us immediately at
[email protected]. We will act swiftly to close the account, delete the data, and return any funds deposited. We also recommend using parental controls on shared devices to prevent minors from accessing online gaming platforms.
11 International Data Transfers
d6666 operates as an international online gaming platform. In the course of providing our services, your personal data may be transferred to, stored on, or processed by systems located outside Pakistan. This may occur, for example, where d6666 uses cloud infrastructure providers, game content hosts, or identity verification services whose servers are located in other countries.
Where personal data is transferred internationally, d6666 takes the following measures to ensure an adequate level of data protection:
- Transfers to service providers are governed by data processing agreements that incorporate appropriate safeguards, including contractual data protection obligations equivalent to those applicable in Pakistan.
- d6666 conducts data transfer impact assessments before engaging new international service providers to identify and mitigate any risks to player privacy arising from the transfer.
- d6666 only transfers data to jurisdictions or organisations that meet d6666's minimum data protection standards, as assessed through our vendor due diligence process.
By registering on d6666 and accepting this Privacy Policy, you acknowledge and consent to the international transfer of your personal data in accordance with the safeguards described above.
12 Policy Updates & Changes
d6666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or the services we offer. When material changes are made, d6666 will:
- Update the "Effective Date" at the top of this Privacy Policy to reflect the date on which the updated version takes effect.
- Send a notification to your registered email address summarising the key changes and providing a link to the full updated policy.
- Display a prominent notice on the d6666 platform for a reasonable period following the update to ensure all active players are aware of the changes.
Your continued use of d6666 following the effective date of an updated Privacy Policy constitutes your acceptance of the changes described therein. If you do not agree with any material change to this Privacy Policy, you must close your d6666 account before the effective date of the change and request deletion of your personal data by contacting [email protected].
Non-material changes — such as typographical corrections, minor clarifications, or updates to contact details — may be made without prior notice, though the effective date will always be updated to reflect the date of any revision.
13 Contact Us & Data Protection Officer
If you have any questions, concerns, or complaints regarding this Privacy Policy or d6666's handling of your personal data, please reach out to us through the following channels. d6666 is committed to responding to all privacy-related inquiries promptly and transparently.
- Data Protection Officer (DPO): [email protected] — Please use the subject line "Privacy / Data Protection" to ensure your message is routed directly to our DPO team.
- Live Chat: Available 24/7 on the d6666 platform. For privacy inquiries requiring account verification, email is recommended to maintain a written record of the request.
- Postal Correspondence: Privacy-related correspondence may also be submitted in writing to d6666's registered address, details of which are available on request from our support team.
d6666 commits to acknowledging all privacy inquiries within forty-eight (48) hours and providing a substantive response within ten (10) business days. Complex requests that require extended investigation will be acknowledged with an estimated timeline for full resolution.
If you feel that d6666 has not adequately addressed your privacy concern, you retain the right to lodge a complaint with the competent data protection authority in your jurisdiction. d6666 will cooperate fully with any such regulatory inquiry.
Support Available 24/7: Our support team — including our privacy and data protection specialists — is available around the clock, every day of the year. Whether you are in Karachi, Lahore, Islamabad, or Faisalabad, d6666 is always here to help with your privacy questions. Response time: under 2 hours for email inquiries.