c6666 Privacy Policy — How We Protect Your Personal Data

This Privacy Policy ("Policy") is issued by c6666, the operator of the online gaming platform accessible at c6666.vu (the "Platform"). It describes how c6666 collects, uses, stores, shares, and protects the personal data of individuals who access the Platform, register as members, place wagers, or otherwise interact with c6666 services ("Members" or "you").

c6666 acts as the data controller in respect of personal data processed under this Policy. As data controller, c6666 determines the purposes for which personal data is collected and the means by which it is processed. c6666 is committed to handling personal data in a manner that is lawful, fair, transparent, and respectful of individual privacy rights.

This Policy should be read in conjunction with the c6666 Terms & Conditions, which set out the broader legal framework governing your use of the Platform. In the event of any inconsistency between this Policy and the Terms & Conditions on matters relating to personal data, this Policy shall prevail.

c6666 collects the following categories of personal data from Members, depending on the nature of their interaction with the Platform:

c6666 does not intentionally collect sensitive personal data such as biometric data (beyond CNIC photograph for identity verification), health information, religious beliefs, or political opinions. If such data is incidentally provided by a Member, it will not be processed beyond what is strictly necessary for the specific purpose for which it was submitted.

c6666 collects personal data through the following means:

Data is collected directly from Members when they complete the registration form, submit KYC documentation, contact customer support, update their account profile, set responsible gaming preferences, or submit any other information through Platform interfaces.

When you access the c6666 Platform, certain technical data is collected automatically, including your IP address, device identifiers, browser characteristics, and Platform interaction data. This collection is facilitated by standard web technologies including cookies, session tokens, and server-side logging systems. Please refer to Section 6 for the c6666 Cookie Policy.

c6666 may receive personal data from third-party sources in limited circumstances, including: identity verification service providers used to validate CNIC authenticity; payment processors who confirm payment method ownership; and fraud prevention services that provide risk signals associated with specific IP addresses or device fingerprints. Data received from third parties is used only for the specific purpose for which it was shared and is handled in accordance with this Policy.

c6666 processes your personal data for the following purposes, each supported by a corresponding legal basis:

• Account Registration and Management: Processing is necessary for the performance of the contract between c6666 and the Member. We use identity and contact data to create and maintain your c6666 account, authenticate your login sessions, and communicate account-related updates.
• KYC and Age Verification: Processing is required for compliance with legal obligations relating to age verification (21+ requirement) and anti-money laundering (AML) standards applicable to online gaming operations.
• Payment Processing: Processing is necessary for the performance of the contract and for compliance with financial crime prevention obligations. Financial data is used solely to execute deposit and withdrawal transactions and to verify payment method ownership.
• Fraud Prevention and Security: c6666 has a legitimate interest in detecting and preventing fraudulent activity, multiple account creation, bonus abuse, and other conduct that undermines the integrity of the Platform.
• Gaming Activity Monitoring for Responsible Gaming: c6666 has both a legitimate interest and a legal obligation to monitor Member gaming patterns to identify potential problem gambling behaviour and to enforce responsible gaming tools and limits.
• Customer Support: Processing of communications data is necessary for the performance of the contract — specifically to respond to Member queries, resolve disputes, and provide technical assistance.
• Marketing Communications: Where you have provided explicit consent to receive promotional communications, c6666 will use your contact data to send you relevant offers, promotions, and platform updates. Consent may be withdrawn at any time through your account settings or by contacting support.
• Platform Improvement and Analytics: c6666 has a legitimate interest in analysing aggregated and anonymised usage data to improve the Platform's features, performance, and user experience. This processing does not involve individualised profiling.

c6666 does not sell, rent, or trade your personal data to any third party for commercial gain. Your data is shared only in the following limited and controlled circumstances:

c6666 engages carefully selected third-party service providers to assist with operational functions including payment processing (JazzCash, EasyPaisa, bank transfer gateways), KYC verification, customer support platform infrastructure, game delivery, and cloud hosting. These providers are contractually bound to process personal data solely in accordance with c6666's instructions and are prohibited from using Member data for their own independent purposes.

c6666 may disclose personal data to competent governmental, regulatory, or law enforcement authorities where required to do so by applicable law, valid legal process, court order, or the directions of a recognised regulatory authority. c6666 will, where legally permissible, notify affected Members of such disclosure requests before complying.

In the event of a merger, acquisition, restructuring, or sale of assets involving c6666 or its operator, personal data held by c6666 may be transferred to the successor entity as part of the transaction. Members will be notified of any such transfer and of any changes to data processing arrangements that result from it.

The c6666 Platform uses cookies and similar tracking technologies to deliver and improve the gaming experience. A cookie is a small text file placed on your device by the Platform when you visit. Cookies are used for the following purposes on c6666:

• Essential Cookies: Required for the Platform to function correctly — these include session authentication cookies that keep you logged in during your gaming session and security tokens that protect against cross-site request forgery. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Store your Platform preferences such as language settings, responsible gaming limit configurations, and game lobby layout preferences between sessions.
• Analytical Cookies: Used to collect aggregated and anonymised data about how Members use the Platform — which game categories are most accessed, which pages have the highest exit rates, and how mobile performance compares to desktop. This data is used solely to improve the Platform and is not linked to individual Member identities.
• Security and Fraud Prevention Cookies: Help c6666 detect and prevent fraudulent activity, suspicious login patterns, and automated bot access attempts.

You may control cookie settings through your browser preferences. Disabling essential cookies will prevent c6666 from functioning correctly. Disabling functional or analytical cookies will not prevent you from using the Platform but may affect certain preferences and improvements. c6666 does not use third-party advertising cookies.

c6666 implements a comprehensive programme of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, destruction, and accidental loss. Key measures include:

• All data transmitted between your device and the c6666 Platform is encrypted using TLS 1.3 (Transport Layer Security). The Platform enforces HTTPS exclusively — unencrypted HTTP connections are rejected.
• Personal data and financial records stored in c6666 infrastructure are encrypted at rest using AES-256 encryption. Encryption keys are managed under strict access control policies.
• Access to Member personal data within c6666's internal systems is restricted on a strict need-to-know basis. Internal access is controlled by role-based access controls, multi-factor authentication for privileged accounts, and detailed audit logging.
• c6666 conducts regular penetration testing and vulnerability assessments of the Platform and its underlying infrastructure to identify and remediate potential security weaknesses before they can be exploited.
• All staff with access to Member personal data receive mandatory data protection training and are bound by confidentiality obligations as a condition of their engagement.

c6666 retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal, regulatory, audit, or accounting obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised such that it can no longer be attributed to any individual Member. Anonymised, aggregated data may be retained beyond these periods for statistical and Platform improvement purposes without restriction, as it no longer constitutes personal data.

As a c6666 Member, you hold a defined set of rights with respect to the personal data c6666 holds about you. These rights are set out below. To exercise any of these rights, please contact c6666 at [email protected] with the subject line "Data Rights Request". c6666 will acknowledge your request within five (5) business days and respond substantively within thirty (30) days, or within an extended period of up to sixty (60) days for complex requests, with prior notification of the extension.

• Right of Access: You have the right to request a copy of the personal data c6666 holds about you, along with information about how that data is being processed. c6666 will provide this information in a structured, commonly used format.
• Right to Rectification: You have the right to request correction of any personal data held by c6666 that is inaccurate or incomplete. For certain data fields, you may be able to update your information directly through your account settings without contacting support.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent on which processing is based, or where processing is unlawful. This right is subject to overriding legal obligations — for example, c6666 cannot delete financial records required to be retained under AML law during the applicable retention period.
• Right to Restriction of Processing: You may request that c6666 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or where processing is unlawful but you prefer restriction over erasure.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to request that it be transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data that is based on c6666's legitimate interests, including profiling carried out on that basis. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

c6666 may send you promotional communications — including information about bonuses, new game launches, seasonal promotions, and platform updates — where you have provided explicit consent to receive such communications at the time of registration or subsequently through your account settings.

Marketing communications from c6666 may be delivered via SMS to your registered Pakistani mobile number, or via email to your registered address. You may withdraw consent for marketing communications at any time by updating your notification preferences within your c6666 account settings, or by contacting support at [email protected] with an unsubscribe request. Withdrawal of marketing consent will not affect your ability to receive essential transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — which are sent regardless of marketing preferences as they are necessary for the performance of the contract.

The c6666 Platform is strictly intended for use by adults aged twenty-one (21) years and above. c6666 does not knowingly collect or process personal data from individuals below this age threshold. The KYC verification process — which requires submission of a valid Pakistani CNIC — is designed specifically to prevent minors from accessing the Platform.

If c6666 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, the relevant Account will be immediately suspended, all associated data will be deleted to the extent not required to be retained for legal compliance purposes, and any funds in the Account will be returned to the depositing payment method after appropriate verification. Parents and guardians who believe their child may have registered with c6666 are urged to contact [email protected] immediately.

c6666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or the services we offer. When material changes are made to this Policy, c6666 will notify registered Members by SMS to the registered mobile number or email to the registered address on file, and will update the "Last Updated" date at the beginning of this document.

We encourage Members to review this Policy periodically to remain informed about how c6666 protects their personal data. The version of the Policy published on the Platform at any given time is the version that governs current data processing. Continued use of the c6666 Platform following the effective date of any amended Policy constitutes acceptance of the amended terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data c6666 holds about you, please contact the c6666 privacy team using the details below. c6666 is committed to addressing privacy enquiries promptly, respectfully, and in accordance with the commitments set out in this Policy.

• Privacy Enquiries: [email protected] — please use the subject line "Privacy Enquiry" for fastest routing to the relevant team.
• Data Rights Requests: [email protected] — please use the subject line "Data Rights Request" and include your registered mobile number to assist with identity verification.
• Response Timeframe: c6666 acknowledges all privacy-related correspondence within five (5) business days and provides substantive responses within thirty (30) days.
• Language: Privacy enquiries and data rights requests may be submitted in English. c6666 support will respond in English.