66com Privacy Policy —
Your Data, Protected and
Transparent

66com ("we", "us", "the Platform") is committed to protecting the personal information of every Pakistan player who accesses, registers with, or interacts with the 66com platform. This Privacy Policy explains what personal data we collect about you, how and why we use it, who we may share it with, how long we retain it, and what rights you hold over your own data.

This Policy covers all 66com services: the 66com Casino platform, all game categories including Jackpot Slots, Crash games, Fish Hunter, Cockfighting, and Live Dealer tables, the 66com Login system, the PKR cashier (deposits and withdrawals), the 66com customer support system, and any associated communications, notifications, or promotional materials sent by 66com.

This Policy should be read alongside the 66com Terms and Conditions. Where a conflict exists between this Policy and the Terms and Conditions, the Terms and Conditions shall prevail.

66com collects personal information that is necessary and proportionate to the operational requirements of running a licensed online casino platform for Pakistan players. The categories of data we collect are as follows:

We do not collect sensitive personal data beyond what is listed above. We do not collect biometric data, health data, religious beliefs, political opinions, or any other special-category data.

66com collects personal data through the following mechanisms:

• Direct submission: Information you provide when creating your 66com account, completing KYC verification, making a PKR deposit or withdrawal, or contacting 66com support.
• Automated collection: Technical data such as your IP address, device type, and browser information that is automatically collected when you visit 66com.games or use the 66com Login page.
• Payment processors: Transaction confirmation data relayed to 66com by Easypaisa, JazzCash, Raast, or partner Pakistan banks when a PKR transaction is initiated or completed.
• KYC verification partners: Verification outcome data returned by the identity verification service used to confirm your CNIC and age eligibility to use 66com Casino.
• Cookies and tracking technologies: Session data and usage analytics collected through cookies and similar technologies as described in Section 6 of this Policy.
• Game providers: Gaming session and outcome data relayed from 66com's certified game providers to maintain bet history and wallet settlement accuracy.

66com processes your personal data for specific, legitimate purposes. The table below sets out the primary purposes for which each category of data is used:

• Account management: To create, maintain, verify, and close your 66com account. Legal basis: contractual necessity.
• Age verification: To confirm that you are 18 years of age or older before granting access to real-money features on 66com Casino. Legal basis: legal obligation and platform safety.
• PKR transaction processing: To accept deposits via Easypaisa, JazzCash, Raast, and Pakistan banks, and to process withdrawals to your registered payment method. Legal basis: contractual necessity.
• Anti-money-laundering (AML) compliance: To monitor PKR transaction patterns for indicators of money laundering or financial crime and to fulfil reporting obligations. Legal basis: legal obligation.
• Customer support: To respond to queries, complaints, and account assistance requests submitted by Pakistan players. Legal basis: legitimate interest and contractual necessity.
• Responsible gaming: To manage deposit limits, cool-off periods, and self-exclusion requests, and to monitor gaming behaviour for responsible gaming indicators. Legal basis: player protection and legal obligation.
• Platform improvement: To analyse aggregated and anonymised usage data to improve 66com's game selection, platform performance, and mobile experience for Pakistan players. Legal basis: legitimate interest.
• Marketing communications: To send promotional offers and bonus notifications to players who have opted in. Legal basis: consent. Marketing communications may be opted out of at any time through your account settings.

66com will not use your personal data for any purpose not listed above without first obtaining your explicit consent.

Your PKR financial data is shared only with the specific payment processor required to complete your transaction (e.g., Easypaisa's processing infrastructure for an Easypaisa deposit). Payment processors are contractually obligated to handle your data in accordance with applicable financial privacy standards and may not use your data for any purpose other than processing the specific 66com transaction.

• Full bank account numbers and mobile wallet numbers are encrypted at rest and are never displayed in full in any 66com interface after initial entry.
• Individual PKR transaction amounts are visible only to you (in your 66com account transaction history) and to authorised 66com compliance staff where required for AML monitoring or dispute investigation.
• 66com does not share your PKR transaction data with any third-party advertisers or marketing platforms.
• USDT cryptocurrency transaction data is handled with the same level of confidentiality as PKR transaction data, with the understanding that blockchain transaction records are inherently public in nature.

66com uses cookies and similar tracking technologies to operate the platform, maintain your authenticated 66com Login session, remember your language and settings preferences, and collect aggregated usage analytics. The following types of cookies are used on 66com.games:

• Essential cookies: Required for the 66com platform to function correctly. These include session authentication cookies that maintain your 66com Login state. These cookies cannot be disabled without breaking platform functionality.
• Functional cookies: Used to remember your preferences — such as language settings and responsible gaming tool configurations — across sessions.
• Analytics cookies: Used to collect aggregated, anonymised data about how Pakistan players navigate and interact with 66com. This data helps 66com's team improve the platform. No personally identifiable information is included in analytics data.
• Security cookies: Used to detect and prevent fraudulent activity, session hijacking, and account takeover attempts on the 66com platform.

You may manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from using the 66com Login system and accessing your account. Disabling analytics cookies will not affect your ability to use the platform.

66com does not sell, rent, or commercially transfer your personal data to third parties. Your data may be shared in the following limited and controlled circumstances:

• Payment processors: Easypaisa, JazzCash, Raast, partner Pakistan banks, and USDT network operators receive only the minimum financial data required to process your specific PKR deposit or withdrawal transaction.
• KYC verification services: Your identity documents are submitted to a third-party KYC service provider to verify your age and identity as part of the 66com account activation process. This provider is contractually bound to handle your data confidentially and to use it only for identity verification.
• Game providers: 66com's certified game providers receive session and outcome data necessary to operate live game streams, settle bets, and maintain RNG certification records.
• Legal and regulatory authorities: 66com may disclose personal data to relevant authorities in Pakistan or other applicable jurisdictions where required by law, court order, or regulatory obligation — including AML reporting obligations.
• Fraud prevention services: Aggregated or specific account data may be shared with fraud prevention partners to detect and prevent fraudulent activity, account takeover, bonus abuse, and money laundering on the 66com platform.
• Business successors: In the event of a merger, acquisition, or sale of the 66com platform, personal data held by 66com may be transferred to the successor entity subject to the same privacy protections described in this Policy.

All third-party service providers who receive 66com player data are bound by contractual data processing agreements that restrict their use of your data to the specific purpose for which it was shared.

66com retains personal data only for as long as is necessary for the purposes described in this Policy, and in any case for no longer than required by applicable law. The following retention principles apply:

• Active account data: Personal, financial, and gaming data associated with an active 66com account is retained for the lifetime of the account plus a minimum of five years following account closure, in order to comply with AML record-keeping obligations.
• KYC documentation: Identity verification documents (CNIC copies, photo ID) are retained for a minimum of five years from the date of submission to satisfy financial crime prevention requirements.
• PKR transaction records: Deposit and withdrawal transaction records are retained for a minimum of five years to comply with Pakistan financial record-keeping standards applicable to online payment platforms.
• Support correspondence: Customer support chat transcripts and email correspondence are retained for a minimum of three years to support dispute resolution and compliance review.
• Responsible gaming records: Self-exclusion and cool-off records are retained for the duration of the restriction plus a minimum of three years thereafter to prevent inadvertent re-registration during an active exclusion period.
• Analytics data: Aggregated and anonymised analytics data that contains no personally identifiable information is retained indefinitely for platform improvement purposes.

Once the applicable retention period expires, personal data is securely deleted or anonymised in accordance with 66com's internal data lifecycle management procedures.

66com implements a multi-layered security architecture to protect your personal and financial data. The security measures in place include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and 66com's servers — including the 66com Login session, all PKR transaction requests, and all KYC document submissions.
• Encrypted database storage for all personally identifiable information, financial records, and KYC documentation. Encryption keys are managed separately from the encrypted data.
• Role-based access controls ensuring that 66com staff can only access the categories of player data that are directly relevant to their specific operational role.
• Two-factor authentication (OTP) for 66com account logins and for certain account-changing operations such as withdrawal method changes.
• Regular penetration testing conducted by independent security professionals to identify and remediate vulnerabilities in the 66com platform infrastructure.
• Fraud detection systems that monitor 66com account activity for unusual patterns indicative of account takeover, collusion, or financial fraud.
• Incident response procedures that ensure any data breach affecting Pakistan players is identified, contained, and reported in accordance with applicable notification obligations, within the timeframes required by law.

As a 66com account holder, you hold the following rights over your personal data. Requests to exercise these rights may be submitted to 66com's support team via live chat or email:

• Right of Access: You may request a summary of the personal data 66com holds about you, including the categories of data collected and the purposes for which it is processed.
• Right to Rectification: If any personal data held by 66com about you is inaccurate or incomplete, you may request that it be corrected. Some corrections — such as changes to your registered name — will require re-submission of KYC documentation.
• Right to Erasure: You may request deletion of your personal data where 66com no longer has a legal basis to retain it. This right is subject to 66com's legal obligations to retain certain data categories for AML, KYC, and financial record-keeping purposes. Data that falls within a mandatory retention period cannot be deleted before that period expires.
• Right to Restriction: You may request that 66com restrict the processing of your personal data in certain circumstances — for example, while a data accuracy dispute is pending.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. Opt-out from marketing communications is available through your 66com account settings.
• Right to Data Portability: In certain circumstances, you may request that 66com provide a copy of your personal data in a machine-readable format.

66com will respond to all verified privacy rights requests within 30 calendar days. Complex requests may require up to an additional 60 days, with notification provided within the initial 30-day period.

If you believe a minor has registered a 66com account or submitted personal data to 66com, please contact our support team immediately. Parental controls and responsible online use should be maintained on all household devices that could provide access to the 66com platform.

The 66com platform does not contain links to third-party websites for advertising or general browsing purposes. All navigation on 66com.games remains within the 66com ecosystem.

66com does, however, integrate with third-party service providers who are necessary for platform operation — including Pakistan payment processors (Easypaisa, JazzCash), KYC verification services, game providers, and cloud infrastructure providers. Each of these providers operates under a separate privacy policy. 66com's contractual agreements with these providers require that they handle 66com player data in a manner consistent with the principles set out in this Privacy Policy.

66com is not responsible for the privacy practices of any third-party service providers beyond the contractual data protection obligations described above. If you have concerns about how a specific third-party provider handles your data, please contact 66com support, and we will provide available information about that provider's data handling practices.

66com reserves the right to update this Privacy Policy at any time. When material changes are made, 66com will notify active Pakistan players by sending a notification to the mobile number or email address registered with their 66com account, or by displaying a clear notice on the 66com platform for a period of at least 14 days following the change.

The effective date at the top of this Policy will be updated to reflect the date of the most recent revision. Your continued use of the 66com platform after any update to this Policy constitutes your acceptance of the revised terms. We encourage all 66com account holders to review this Policy periodically.

If you have any questions, concerns, or requests related to this Privacy Policy or the way 66com handles your personal data, please contact the 66com privacy support team through one of the following channels:

When submitting a privacy request by email, please include your registered Pakistan mobile number and a clear description of your request. This allows 66com's team to verify your identity and process your request without unnecessary delays.