y666y Privacy Policy

1. Data Controller

The data controller responsible for the personal information collected through the y666y platform — accessible at y666y.biz — is the licensed international gaming company that operates the y666y brand (hereinafter referred to as "y666y," "we," "us," or "our"). y666y holds a gaming license issued by a recognised international gaming regulatory authority, which mandates compliance with applicable data protection standards as a condition of licensure.

This Privacy Policy applies to all personal data collected through: the y666y website and mobile web interface; the account registration and login process; sports betting, live casino, slot, and fishing game interactions; payment deposit and withdrawal transactions; and any communications with y666y customer support.

2. Personal Data We Collect

y666y collects personal data in the following categories, depending on how you interact with the platform:

2.1 Registration Data

When you create a y666y account, we collect:

• Full legal name
• Date of birth (to verify the minimum age requirement of 21 years)
• Pakistani mobile number (used for OTP authentication via JazzCash or EasyPaisa)
• Email address
• Preferred username and encrypted password
• Country and city of residence

2.2 Identity Verification Data

Where required by our compliance obligations — including anti-money-laundering (AML) and Know Your Customer (KYC) procedures — y666y may collect:

• Copy of Pakistani national identity document (CNIC / NICOP)
• Proof of address (utility bill, bank statement)
• Source of funds declaration or supporting documentation
• Selfie or facial verification for identity confirmation

2.3 Transaction Data

All financial interactions on y666y generate transaction records including: deposit amounts and timestamps, payment method identifiers (JazzCash number, EasyPaisa account, bank account details), withdrawal amounts and processing status, wager amounts, game outcomes, and bonus transactions.

2.4 Technical & Usage Data

When you access y666y, we automatically collect certain technical data including: IP address, device type and operating system, browser type and version, session duration and page navigation patterns, and geolocation data (city/region level, derived from IP address).

2.5 Communications Data

Records of your interactions with y666y customer support — including live chat transcripts, email correspondence, and any documentation submitted — are retained as part of your account record.

3. Why We Collect Your Data

y666y processes personal data for the following specific and documented purposes:

4. Legal Basis for Processing

y666y processes personal data on one or more of the following legal grounds:

• Contractual necessity: Processing is required to fulfil the y666y Terms & Conditions — the contract between you and y666y. This includes account management, payment processing, and game access.
• Legal obligation: y666y is required by its gaming license and applicable financial regulations to conduct KYC checks, maintain transaction records, and file reports with regulatory authorities.
• Legitimate interests: y666y processes certain technical and usage data to prevent fraud, maintain platform security, and improve service quality — all of which are necessary for operating a responsible gaming platform.
• Consent: Where processing is not covered by the above grounds — particularly in the context of direct marketing communications — y666y relies on your explicit opt-in consent, which may be withdrawn at any time.

5. Sharing Your Personal Data

y666y does not sell your personal data to third parties. We share personal data only in the following limited and necessary circumstances:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processors receive only the data necessary to process your specific transaction. These providers operate under their own privacy policies and regulatory obligations.
• Identity verification services: Third-party KYC providers process identity document data for the purpose of age and identity verification. They are contractually prohibited from using your data for any other purpose.
• Game software providers: Certified gaming studios and providers whose games are available on y666y may receive anonymised session data for game performance monitoring. No personally identifiable data is shared with game providers.
• Regulatory and law enforcement authorities: Where required by our gaming license, anti-money-laundering regulations, or a lawful order from a competent authority, y666y will disclose personal data to the relevant body.
• Fraud prevention services: Where fraud, account abuse, or criminal activity is suspected, y666y may share relevant data with industry fraud prevention databases and, where required, law enforcement.

6. Payment Data & Financial Information

y666y processes all player transactions in Pakistani Rupees (PKR). Financial data — including mobile wallet identifiers, bank account numbers, and transaction records — is handled with the highest level of security and confidentiality.

y666y does not store complete payment card numbers, CVV codes, or full bank account numbers on its own servers. Where card or bank data is involved in a transaction, it is processed directly by our licensed payment service partners through encrypted and tokenised channels, and y666y retains only a masked reference for record-keeping.

Transaction records — including deposit and withdrawal amounts, dates, and payment method types — are retained as required by our gaming license and applicable financial regulations, typically for a minimum of five years from the date of the transaction.

7. Cookies & Tracking Technologies

y666y uses cookies and similar browser-based technologies to provide a functional, secure, and personalised experience. The categories of cookies used by y666y are as follows:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in to your y666y account and security cookies that protect against cross-site request forgery (CSRF) attacks. These cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences — such as language settings, game lobby layout, and notification preferences — to provide a more personalised experience across sessions.
• Analytical cookies: Collect anonymised data on how players navigate the y666y platform. This data is used internally to identify usability issues and improve the platform. y666y uses anonymised analytics tools and does not share this data with advertising networks.
• Responsible gaming cookies: Track session duration and activity patterns for the purpose of delivering reality check notifications and enforcing session time limits that you have configured in your account settings.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent access to core y666y platform functionality, including your account login.

8. Data Retention

y666y retains personal data for as long as is necessary to fulfil the purposes described in this policy, and no longer. The general retention framework is as follows:

• Active account data: Retained for the full duration of your y666y account and for a minimum of five years following account closure, as required by anti-money-laundering regulations applicable to our gaming license.
• Identity verification documents: Retained for a minimum of five years from the date of verification, or longer where a specific regulatory requirement applies.
• Transaction records: Retained for a minimum of five years from the date of each transaction for regulatory reporting and audit purposes.
• Support communications: Retained for two years from the date of last interaction, unless the record relates to an unresolved dispute or regulatory matter.
• Anonymised analytical data: May be retained indefinitely as it contains no personally identifiable information.
• Self-exclusion records: Retained permanently to prevent re-registration during or after a permanent self-exclusion period.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard data destruction methods.

9. Security Measures

y666y implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• Transport-layer encryption: All data transmitted between your browser or mobile device and y666y servers is encrypted using TLS 1.3 / 256-bit SSL.
• Data-at-rest encryption: Stored personal data is encrypted using AES-256, ensuring that raw data cannot be read even in the event of a server breach.
• Access controls: Internal access to player personal data is restricted on a strict need-to-know basis with role-based access controls and full audit logging.
• Multi-factor authentication: Login to the y666y platform supports OTP verification via JazzCash and EasyPaisa, providing a second authentication layer beyond password.
• Fraud monitoring: Automated systems continuously monitor login patterns, payment behaviour, and gameplay activity for indicators of account compromise or fraudulent access.
• Penetration testing: y666y undergoes regular third-party security assessments to identify and remediate vulnerabilities before they can be exploited.

10. Your Data Rights

As a y666y player, you have the following rights in relation to your personal data. You may exercise any of these rights by contacting y666y support via live chat or email.

y666y will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, y666y may extend this period by a further 30 days with prior notice. Requests that are manifestly unfounded or excessive may be subject to a reasonable administrative fee.

Please note that certain rights — particularly the right to erasure — may be limited where retention of your data is required by our gaming license, AML regulations, or to defend against or pursue legal claims.

11. Minors & Age Protection

Age verification is a mandatory step of the y666y registration and KYC process. y666y may request a copy of a valid Pakistani identity document (CNIC or NICOP) at any stage of the account lifecycle to confirm that the account holder meets the minimum age requirement. If such documentation is not provided within a reasonable timeframe, y666y reserves the right to restrict or close the account.

If you are a parent or guardian and believe that someone under 21 has registered on y666y, please contact our support team immediately via live chat. We will investigate and take appropriate action without delay.

12. International Data Transfers

y666y operates as an internationally licensed gaming platform. Accordingly, your personal data may be processed by y666y's operating entity and its authorised service providers in jurisdictions outside of Pakistan. Where such transfers occur, y666y ensures that appropriate safeguards are in place to protect your data in accordance with applicable international data protection standards, including:

• Contractual protections with service providers through standard data processing agreements
• Transfers only to jurisdictions with adequate data protection frameworks
• Ongoing monitoring of third-party compliance with agreed data protection standards

By registering a y666y account, you acknowledge that your personal data may be processed in these international locations as described above, subject to the protections outlined in this policy.

13. Marketing Communications

y666y may send you promotional communications — including information about bonuses, PSL betting promotions, new game launches, and seasonal offers — where you have given explicit consent to receive such communications at the time of registration or subsequently through your account preferences.

You may withdraw consent to receive marketing communications at any time by:

• Updating your notification preferences in your y666y account settings
• Contacting y666y support via live chat and requesting removal from marketing lists
• Replying to any marketing SMS or email with an opt-out request

Opt-out requests for marketing communications are processed within 48 hours. Withdrawal of marketing consent does not affect your ability to use the y666y platform or receive transactional communications (such as deposit confirmations, withdrawal notifications, and account security alerts) which are necessary components of the service.

14. Changes to This Privacy Policy

y666y reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, regulatory requirements, or platform features. The effective date at the top of this page indicates when the current version was last updated.

Where changes are material — meaning they affect how we collect or use your personal data in a significant way — y666y will notify you via the email address or mobile number registered to your account at least seven days before the changes take effect. For non-material updates, the revised policy will be published on this page without individual notification.

Continued use of y666y following publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree to an update, you should contact y666y support to discuss account closure options before the revised policy takes effect.

15. Contact & Data Requests

For any questions about this Privacy Policy, to exercise your data rights, or to raise a data protection concern, please contact the y666y team through the following channels:

y666y aims to acknowledge all data rights requests within 72 hours of receipt and to provide a substantive response within 30 days. For complex requests, this period may be extended once with prior notification to you.