Privacy Policy – y 666 Pakistan Online Gaming & Betting Platform

y 666 is an online gaming and sports betting platform operating at y666.run, serving players across Pakistan. When this Privacy Policy refers to "y 666", "we", "us", or "our", it means the operator of the y 666 platform — the entity responsible for collecting and processing your personal data when you register and use the platform.

y 666 is the data controller for all personal information collected through this platform. This means y 666 determines the purposes for which your data is used and the manner in which it is processed. We take that responsibility seriously, and this Privacy Policy is our commitment to being fully transparent about what we do with your information.

This policy applies to all users of y 666 who are based in Pakistan, regardless of which city or region they are accessing the platform from. Whether you are in Karachi, Lahore, Islamabad, Peshawar, Quetta, Hyderabad, Multan, or anywhere else in Pakistan — your privacy is governed by this policy.

y 666 collects only the personal data that is necessary to operate the platform, process your transactions, verify your identity, and comply with applicable legal requirements. We do not collect personal data speculatively or for purposes beyond what is described in this policy.

Registration & Identity Data

• Full legal name as it appears on your national identity documents.
• Date of birth (for age verification — must be 18+).
• Pakistani mobile number and email address.
• Username and encrypted password.
• CNIC (Computerised National Identity Card) number, where required for enhanced verification.

Financial & Transaction Data

• Easypaisa, JazzCash, NayaPay, or SadaPay account numbers associated with deposits or withdrawals.
• Bank account details (IBAN/IBFT) for bank transfer transactions.
• Masked Visa or Mastercard details (we never store full card numbers).
• Deposit history, withdrawal history, and transaction references in PKR.
• Betting history, game history, and account balance records.

Technical & Usage Data

• IP address and approximate location (city-level, not GPS).
• Device type, operating system, and browser version.
• Pages visited on y 666 and time spent on each section.
• Session duration, login timestamps, and platform feature usage.

Communications Data

• Records of any support tickets, chat messages, or email correspondence with y 666.
• Responses to any surveys or feedback requests you choose to complete.

y 666 collects personal data through several channels, all of which are described transparently here. You always have visibility into what is being collected and why at the point of collection.

Directly from you: When you fill in the y 666 registration form, make a deposit or withdrawal, contact customer support, update your account profile, or respond to a y 666 survey, you provide information directly. This is the primary source of your personal data on y 666.

Automatically through platform use: When you access y 666 — whether on mobile or desktop — certain technical data is collected automatically. This includes your IP address, device information, and browsing behaviour within the platform. This data is collected using standard server logs and analytics tools and is used to ensure the platform functions correctly for Pakistani users on a range of devices and network connections.

Through payment processors: When you make a deposit or request a withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer, or card payment, transaction confirmation data is returned to y 666 from the payment processor. y 666 uses this data to credit your account, confirm withdrawal completion, and maintain your transaction history. y 666 never has access to your full payment credentials — only confirmation references and amounts.

Through fraud prevention and identity verification services: y 666 uses third-party identity verification and fraud prevention services where required by its compliance obligations. These services may cross-reference the information you provide against third-party databases to confirm identity and screen for fraud indicators.

y 666 processes your personal data only for clearly defined purposes. We do not use your data for anything that has not been described in this policy, and we do not use it beyond what is proportionate to the purpose stated. The table below summarises how y 666 uses your data and the legal basis for doing so.

Marketing communications from y 666 are sent only to users who have explicitly opted in. You can withdraw consent for marketing at any time through your account settings or by contacting support. Withdrawal of marketing consent does not affect any other aspect of your y 666 account.

y 666 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. This is an absolute commitment with no exceptions. The only circumstances under which y 666 shares your personal data with external parties are described below, and in every case the sharing is limited to what is strictly necessary.

Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer (IBFT) providers, and card networks receive the minimum transaction data required to process deposits and withdrawals. These parties operate under their own privacy policies and are obligated to handle your data securely.

Identity verification and fraud prevention services: y 666 uses accredited third-party services to verify user identities and screen for fraud. These services receive only the specific data elements needed for verification and are contractually bound to confidentiality.

Legal and regulatory disclosure: y 666 will disclose personal data to law enforcement agencies, courts, or regulatory authorities where required by applicable law — for example, in response to a lawful investigation or court order. y 666 does not voluntarily disclose data to authorities without a legal requirement to do so, and will inform affected users where legally permitted.

Platform service providers: y 666 uses third-party providers for hosting, analytics, and platform infrastructure. These providers act as data processors under contract with y 666 and are prohibited from using your data for their own purposes. They are required to implement security standards consistent with y 666's own obligations under this policy.

Because y 666 handles real PKR transactions — deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payments — financial data security is a top priority. Here is exactly how y 666 handles your payment information.

We never store full card numbers. When you make a deposit using a Visa or Mastercard, the full card number is processed directly by the payment gateway using tokenisation. y 666 servers receive only a masked reference — for example, the last four digits and card type — which is sufficient to match the transaction to your account but cannot be used to initiate any payment.

Mobile wallet account numbers are stored in encrypted form. Your Easypaisa or JazzCash number is stored in an encrypted database. It is used solely to process your withdrawal requests to the correct account and to comply with transaction reporting requirements. It is never displayed in full within the y 666 interface beyond the account settings section accessible only by you.

All transactions are logged with reference numbers. Every PKR deposit and withdrawal on y 666 generates a unique transaction reference. This reference is stored securely and is accessible in your account history. If there is ever a dispute about a transaction, this reference is used to trace the payment through the processor's records.

You will never be asked for payment credentials via email, chat, or phone. y 666 will never request your Easypaisa PIN, JazzCash password, bank account password, or card CVV through any communication channel. If you receive any such request, it is fraudulent — contact y 666 support immediately.

y 666 uses cookies and similar technologies to make the platform work properly, remember your preferences, and understand how Pakistani users interact with different sections of the site. Here is a plain-language breakdown of the types of cookies in use.

Essential cookies are necessary for the platform to function at all. They maintain your login session so you do not need to re-enter your credentials every time you navigate to a new page, and they remember your language and currency preferences. These cookies cannot be disabled without breaking core platform functionality.

Analytics cookies help y 666 understand which features Pakistani users find most useful, where users encounter problems, and how overall platform performance can be improved. y 666 uses anonymised analytics data — individual users are not identified in these reports. You can opt out of analytics cookies through your browser settings.

Functionality cookies remember your personal preferences — such as your preferred payment method, default stake size, and notification settings — so the platform feels familiar each time you return. Disabling these cookies means y 666 will not remember your preferences between sessions.

y 666 does not use third-party advertising cookies or tracking pixels that follow your browsing activity outside of the y 666 platform. The cookies in use on y 666 relate exclusively to the operation and improvement of the y 666 platform itself.

y 666 keeps your personal data only for as long as it is necessary for the purposes described in this policy, or for as long as required by applicable legal and regulatory obligations. The retention periods below apply to the main categories of data y 666 holds.

• Account and identity data is retained for the lifetime of your active y 666 account plus a minimum of five years after account closure. This retention is required by anti-money laundering (AML) regulations and financial record-keeping obligations.
• Transaction and betting records — all deposits, withdrawals, and bet histories in PKR — are retained for a minimum of five years from the date of each transaction. This is a legal requirement for financial record-keeping.
• Communications data (support tickets and correspondence) is retained for two years from the date of the last communication, unless the communication relates to an open dispute or legal matter.
• Technical and usage data (server logs, IP addresses, session records) is retained for a rolling 90-day period before being deleted or anonymised.
• Responsible gaming records — including self-exclusion requests, deposit limit settings, and any interaction with y 666's responsible gaming tools — are retained for a minimum of seven years to ensure exclusions are respected even if an account is later re-opened.

When data is no longer required, it is securely deleted or anonymised. Anonymised data — where individual users cannot be identified — may be retained indefinitely for aggregate platform analysis.

As a y 666 user and the subject of the personal data we hold, you have a number of rights in relation to that data. y 666 will honour these rights promptly and without charge. To exercise any of the rights below, contact y 666 support at support@y666.run.

y 666 is strictly an 18+ platform. We do not knowingly collect, process, or retain personal data belonging to persons under 18 years of age. Age verification is a mandatory step in the y 666 registration process, and accounts suspected of belonging to minors are suspended immediately pending verification.

If y 666 discovers that personal data of a person under 18 has been collected — whether through misrepresentation or error — that data will be deleted promptly and the associated account will be permanently closed. Any funds deposited by a verified minor will be returned through the original payment method after identity checks are completed.

If you are a parent or guardian and believe your child has registered on y 666, please contact support@y666.run immediately. y 666 will investigate and act within 24 hours of receiving a verified report.

y 666 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, disclosure, or misuse. These measures include but are not limited to the following.

• TLS/SSL encryption: All data transmitted between your device and y 666's servers is encrypted using Transport Layer Security (TLS). This applies to login sessions, form submissions, payment processing, and all API communications.
• Encryption at rest: Sensitive data stored in y 666's databases — including identity documents, payment references, and hashed passwords — is encrypted at rest using AES-256 or equivalent standards.
• Password hashing: y 666 never stores passwords in plain text. Passwords are hashed using a strong one-way algorithm before storage. This means even y 666's own technical staff cannot read your password.
• Two-factor authentication (2FA): y 666 offers 2FA for all accounts. Enabling 2FA means that even if your password were compromised, an attacker could not access your account without your registered mobile device.
• Access controls: Access to personal data within y 666's internal systems is restricted to staff who need it to perform their job functions. Access is logged and reviewed regularly.
• Intrusion detection and monitoring: y 666's platform is monitored continuously for unusual activity, failed login attempts, and signs of unauthorised access. Alerts are acted upon immediately by the security team.

y 666 may update this Privacy Policy from time to time to reflect changes in platform operations, legal obligations, or data processing practices. All updates are published on this page with a revised "Last Updated" date at the top.

When y 666 makes material changes to this policy — changes that meaningfully affect how your data is used or your rights as a user — registered users will be notified via email or an in-platform notification before the changes take effect. Minor clarifications that do not change the substance of the policy will be updated without individual notification, though the revised date will always reflect the change.

We encourage you to review this Privacy Policy periodically. Continued use of y 666 following a policy update constitutes your acknowledgement that you have been notified of the change and have had the opportunity to review it.

If you have any question about this Privacy Policy, want to exercise any of your data rights, or wish to raise a concern about how y 666 has handled your personal information, the y 666 data team is the right starting point.

Contact y 666's data team at support@y666.run with the subject line "Privacy Query" or "Data Request". Please include your registered mobile number or email address so we can verify your identity before processing any data-related request. All privacy queries are acknowledged within 48 hours and resolved within 30 days for standard requests.

If you are not satisfied with y 666's response to a privacy complaint, you may have the right to escalate the matter to a relevant data protection authority. y 666 will cooperate fully with any such inquiry and provide all information requested through the proper legal channels.

y 666 is committed to resolving all privacy concerns fairly and transparently. No user will face any penalty for raising a legitimate privacy concern — your continued access to y 666's platform is not conditional on withdrawing or refraining from raising a complaint about data handling.