666wc Privacy Policy

01 Who We Are and How to Contact Us

This Privacy Policy is issued by 666wc ("the Company," "we," "us," "our"), the operator of the online gaming platform accessible at https://666wc.org (the "Platform"). 666wc is licensed and regulated under an international gaming license, the details of which are available upon request from our support team.

For all privacy-related enquiries, data access requests, or complaints regarding the handling of your personal data, please contact us through the following channel:

• Live Chat: Available 24/7 via the chat widget on the 666wc Platform — the fastest route for all enquiries.
• Email: [email protected] — for written privacy requests or formal complaints. Please include "Privacy Request" in the subject line to ensure prompt routing.

We aim to acknowledge all formal privacy requests within five (5) business days and to resolve them within thirty (30) calendar days of receipt, in accordance with our licensing obligations.

02 Data We Collect and Why

666wc collects personal data from you in the following ways: (a) information you provide directly when registering or using the Platform; (b) information generated automatically through your use of the Platform; and (c) information received from third-party service providers such as payment processors and fraud prevention partners. The table below sets out the categories of data collected and the purpose of each:

03 Legal Basis for Processing

666wc processes your personal data only where a valid legal basis exists. The applicable legal bases are as follows:

• Contractual Necessity: Processing required to provide you with the services you have requested — including account management, payment processing, and game delivery — is carried out on the basis that it is necessary to perform the contract between you and 666wc (our Terms & Conditions).
• Legal Obligation: Certain processing activities — particularly KYC verification, AML record-keeping, and the reporting of suspicious transactions — are mandatory under the conditions of our international gaming license. 666wc has no discretion to omit this processing.
• Legitimate Interests: Processing for fraud detection, platform security, abuse prevention, and internal analytics is carried out on the basis of 666wc's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where 666wc sends you promotional communications (such as bonus offers or newsletters), this is done only on the basis of your explicit consent. You may withdraw marketing consent at any time via your account notification settings or by contacting support.

04 How We Use Your Personal Data

In addition to the primary purposes set out in Section 2, 666wc may use your personal data for the following activities:

• To verify your identity and age (21+) at registration and at any subsequent point where verification is required by our licensing authority.
• To process financial transactions, including deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard.
• To administer bonus offers, wagering requirements, and promotional programmes in accordance with the applicable promotion terms.
• To monitor gaming activity for signs of problem gambling and to enforce responsible gaming measures, including the application of deposit limits or self-exclusion where requested or required.
• To investigate and resolve disputes, chargebacks, or fraud allegations relating to your account.
• To comply with requests from our licensing authority, financial intelligence units, or law enforcement agencies where we are legally required to do so.
• To send you transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — which are integral to operating your account and cannot be unsubscribed from.
• To send you marketing and promotional communications where you have provided explicit consent, which you may withdraw at any time.
• To conduct internal analytics and product development that improves the 666wc Platform experience for all Pakistani players.

05 Cookies and Tracking Technologies

666wc uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help the Platform function correctly and allow us to understand how users interact with it. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in to your 666wc account. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences — such as language settings and display options — to personalise your experience on return visits.
• Analytics Cookies: Collect aggregated, anonymised information about how players use the Platform (page views, session duration, navigation paths) to help us improve usability and performance.
• Security Cookies: Used for fraud detection and to identify suspicious or automated access patterns that may indicate a threat to the integrity of the Platform or your account.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some Platform features. 666wc does not use third-party advertising cookies or behavioural targeting cookies that track you across other websites.

06 Sharing Your Data with Third Parties

666wc does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. Data sharing is limited to the following strictly necessary circumstances:

• Payment Processors: Your financial data is shared with payment service providers (such as the operators of JazzCash, EasyPaisa, and card networks) solely to facilitate the processing of your deposit and withdrawal transactions. These providers are bound by their own privacy and data security obligations.
• KYC and Identity Verification Partners: Where 666wc uses a third-party identity verification service to process KYC documents, your identity data is shared with that provider under a strict data processing agreement.
• Fraud Prevention and Security Providers: Anonymised or pseudonymised technical data (such as IP addresses and device fingerprints) may be shared with fraud prevention partners to protect the Platform from abuse.
• Licensing Authority and Regulators: 666wc is legally obligated to provide account and transaction data to its licensing authority, financial intelligence units, or other competent authorities upon receipt of a valid legal request. We cannot decline such requests.
• Legal Proceedings: Where required by a court order or applicable law, 666wc may disclose personal data to relevant parties in connection with legal proceedings.

All third-party service providers engaged by 666wc are contractually required to process your personal data only for the specified purpose and in accordance with applicable data protection standards. They are prohibited from using your data for any other purpose.

07 International Data Transfers

666wc is an internationally operated platform. As a result, your personal data may be transferred to, and processed in, countries outside of Pakistan where our servers, licensing authority, or service providers are located. Where such transfers occur, 666wc takes reasonable steps to ensure that your data receives an equivalent level of protection to that which it would receive in its country of origin.

Safeguards applied to international transfers include contractual data processing agreements with receiving parties that impose data protection obligations, and the selection of service providers in jurisdictions with recognised data protection frameworks where possible.

08 Data Retention

666wc retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods mandated by our licensing obligations:

• Account and Identity Data: Retained for a minimum of five (5) years from the date of account closure, as required by AML regulations applicable under our international gaming license.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC Documentation: Retained for the duration of the account relationship plus a minimum of five (5) years post-closure.
• Support and Communications Data: Retained for three (3) years from the date of the last interaction, for complaint handling and dispute resolution purposes.
• Cookie and Analytics Data: Anonymised analytics data is retained for up to twenty-four (24) months before aggregation or deletion.

Once the applicable retention period expires and no legal obligation requires further retention, 666wc will securely delete or anonymise your personal data in a manner that prevents its reconstruction or re-identification.

09 Security Measures

666wc implements a layered set of technical and organisational security measures designed to protect your personal data from unauthorised access, accidental loss, alteration, disclosure, or destruction. Key measures include:

• TLS Encryption: All data in transit between your device and the 666wc Platform is encrypted using 256-bit Transport Layer Security (TLS) protocols.
• Data-at-Rest Encryption: Sensitive data stored on 666wc servers — including KYC documents and financial records — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within the 666wc organisation is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations.
• Two-Factor Authentication (2FA): 2FA is available for all player accounts and is strongly recommended. Players can enable 2FA via the Security section of their account dashboard.
• Fraud Detection Systems: Real-time monitoring systems flag and investigate unusual account activity, including login attempts from new devices or locations, abnormal transaction patterns, and other risk indicators.
• Penetration Testing: The Platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.

While 666wc takes every reasonable precaution to protect your data, no security system is impenetrable. In the event of a data breach that poses a risk to your rights, 666wc will notify affected users and relevant authorities as required by our licensing obligations.

10 Your Rights Over Your Personal Data

Subject to applicable law and our licensing obligations, all 666wc players hold the following rights in relation to their personal data:

• Right of Access: You may request a copy of all personal data 666wc holds about you at any time. We will provide this in a structured, readable format within thirty (30) days of receiving a valid request.
• Right to Rectification: If any personal data held by 666wc is inaccurate or incomplete, you have the right to request its correction. Account profile data can be updated directly via your account settings; KYC data corrections require a formal request to support.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, and where no legal obligation requires its continued retention. Note that data subject to mandatory AML retention periods cannot be deleted until those periods expire.
• Right to Restriction of Processing: In certain circumstances you may request that 666wc restrict the processing of your data — for example, while a dispute over its accuracy is resolved — rather than delete it outright.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request that your personal data be provided to you in a machine-readable format for transfer to another service provider.
• Right to Object: You have the right to object to processing carried out on the basis of 666wc's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact 666wc support via live chat or email at [email protected]. We may need to verify your identity before processing a data rights request to ensure that your data is not disclosed to an unauthorised third party.

11 Children and Minors

The 666wc Platform is strictly intended for adults aged 21 years and over. 666wc does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the KYC process for all registered accounts.

If 666wc discovers that personal data has been collected from a minor — whether through a misrepresentation of age at registration or any other means — that account will be immediately closed, all associated data will be securely deleted (subject to any legal retention obligations), and any balance will be returned to the payment method used for deposits, pending investigation.

If you are a parent or guardian and believe that a minor in your household may have accessed or registered on the 666wc Platform, please contact our support team immediately via live chat so that we can take prompt action.

12 Changes to This Privacy Policy

666wc reserves the right to update or amend this Privacy Policy at any time. Changes may be required to reflect updates to our services, changes in applicable law, new guidance from our licensing authority, or improvements to our data handling practices.

When a material change is made to this Privacy Policy, 666wc will notify registered users by email and/or via a prominent notice on the Platform at least seven (7) days before the change takes effect, except where an immediate change is required by law. The effective date shown at the top of this page will be updated accordingly.

Your continued use of the 666wc Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should stop using the Platform and request account closure before the revised policy takes effect.

13 Complaints and Supervisory Authority

If you have a concern about how 666wc has handled your personal data, we encourage you to contact our support team in the first instance so that we can attempt to resolve your concern promptly and directly.

If you are not satisfied with the outcome of a complaint raised directly with 666wc, you have the right to escalate the matter to the supervisory authority relevant to our licensing jurisdiction. Details of the applicable supervisory body are available upon written request to our support team.