66fd Privacy Policy —
Your Data, Handled Responsibly

66fd is committed to protecting the privacy and personal data of every player who uses the 66fd platform. This Privacy Policy sets out in clear and precise terms what personal data 66fd collects, for what purposes it is used, with whom it may be shared, how long it is retained, and what rights you hold as the data subject.

As a platform serving Pakistani players, 66fd recognises that trust is built through transparency. We do not hide behind vague language or bury important disclosures in fine print. This policy is written to give you a genuine understanding of your data and our obligations toward it.

This Privacy Policy should be read alongside the 66fd Terms & Conditions and the Responsible Gaming policy, both of which are incorporated by reference. Together they form the complete framework governing your relationship with the 66fd platform.

For the purposes of this Privacy Policy, the data controller responsible for your personal data is the licensed entity operating the 66fd platform under its international gaming license. The 66fd platform is accessible at 66fd.net and all data processing activities described in this policy are carried out by or on behalf of that licensed entity.

If you have questions about who specifically holds your data or wish to submit a formal data subject request, please contact 66fd's support team using the contact details provided in Section 15 of this policy. 66fd will confirm the data controller details in response to any such query within the applicable statutory response timeframe.

66fd collects personal data across several categories depending on how you interact with the platform. The table below summarises the main data types collected:

66fd does not collect sensitive personal data such as biometric data, health information, or religious or political beliefs. We collect only what is necessary for the specific operational and regulatory purposes described in this policy.

66fd collects your personal data through the following channels:

• Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey or promotion on 66fd.
• Automated technical collection: When you browse or interact with the 66fd platform, our servers and analytics tools automatically record technical data including your IP address, device identifiers, session duration, and in-platform behaviour. This data is collected via cookies and similar tracking technologies — see Section 11 for full details.
• Third-party sources: In limited circumstances, 66fd may receive data about you from third-party identity verification providers engaged to assist with KYC, or from payment processors to confirm transaction status. Data received from third parties is handled in accordance with this Privacy Policy and the same security standards applied to directly collected data.
• Responsible gaming tools: When you set deposit limits, activate a cooling-off period, or request self-exclusion, this information is recorded as part of your account profile to ensure the tool is enforced correctly and consistently.

66fd uses the personal data it collects for the following specific purposes:

• Account creation and management: To register your 66fd account, maintain your account profile, and provide access to all platform features including betting, casino games, and payment services.
• Identity verification (KYC): To verify your identity and age (21+) as required by our international gaming license. This is a non-optional process for all accounts that wish to make withdrawals.
• Payment processing: To process your deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, and IBFT; and to process your withdrawal requests to your nominated payment method.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in the 66fd Terms & Conditions.
• Regulatory compliance: To meet our obligations under the terms of 66fd's international gaming license, including AML reporting, responsible gaming monitoring, and data retention requirements.
• Responsible gaming: To monitor player activity for indicators of problem gambling, to enforce responsible gaming tools you have activated, and to support any self-exclusion or account closure request you submit.
• Customer support: To respond to your queries, complaints, and data subject requests, and to maintain records of support interactions for quality assurance purposes.
• Platform improvement: To analyze aggregated and anonymized usage data to improve the 66fd platform experience, optimize page performance, and develop new features relevant to Pakistani players.
• Direct communications: To send you transaction confirmations, account security alerts, and — where you have opted in — promotional messages about 66fd bonuses and offers. You may opt out of promotional communications at any time via your account settings or by contacting support.

66fd processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing your registration data, identity data, and payment data is necessary to provide you with the 66fd services under our Terms & Conditions. Without this processing, we cannot operate your account.
• Legal obligation: Processing your KYC documents, financial transaction records, and responsible gaming data is required to comply with our international gaming license conditions and applicable anti-money laundering regulations.
• Legitimate interests: Processing technical and usage data for fraud prevention, platform security, and service improvement serves 66fd's legitimate business interests and those of our player community, provided these interests are not overridden by your privacy rights.
• Consent: Where 66fd sends you optional promotional communications or uses non-essential cookies, this is done on the basis of your consent, which you may withdraw at any time without affecting any other processing.

66fd does not sell your personal data to any third party. We share personal data only in the following circumstances and only to the extent necessary for the specific purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard processing networks receive transaction-level data necessary to process your deposits and withdrawals. These providers operate under their own privacy frameworks and are contractually required to protect the data shared with them.
• KYC verification providers: Licensed third-party identity verification services may process your CNIC or Passport scan to assist 66fd in completing the KYC verification process. These providers are engaged under data processing agreements that restrict their use of your data to verification purposes only.
• Regulatory authorities: 66fd may be required to disclose player data to its gaming license authority, financial intelligence units, or law enforcement agencies in response to lawful requests or as part of mandatory AML reporting. 66fd will only disclose the minimum data required and will notify you where legally permitted to do so.
• Platform technology providers: Cloud hosting, database, and infrastructure providers that support the operation of 66fd may process data on our behalf under strict data processing agreements. These providers have no independent right to use your data.
• Professional advisers: Legal, audit, and compliance advisers engaged by 66fd may access player data on a confidential, need-to-know basis in connection with specific advisory engagements.

In all cases of third-party data sharing, 66fd applies appropriate contractual, technical, and organisational safeguards to protect your personal data and restrict its use to the purposes for which it was shared.

As 66fd operates under an international gaming license, some of your personal data may be processed in or transferred to countries outside Pakistan. Where such transfers occur, 66fd ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within 66fd's primary operating jurisdiction.

Safeguards applied to international data transfers include contractual clauses binding receiving entities to data protection standards consistent with this Privacy Policy, and technical security measures including encryption of data in transit and at rest.

If you have concerns about the cross-border transfer of your personal data, please contact 66fd support with your specific query and we will provide details of the applicable safeguards for the transfer in question.

66fd implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• TLS encryption for all data in transit between your device and the 66fd platform.
• Encryption at rest for stored sensitive data, including KYC documents, financial records, and authentication credentials.
• Access controls limiting internal access to personal data on a strict need-to-know basis, with role-based access permissions and audit logging of data access events.
• Vulnerability management including regular security testing of platform infrastructure and prompt patching of identified vulnerabilities.
• Incident response procedures covering detection, containment, notification, and remediation of data security incidents.

While 66fd takes all reasonable and technically practicable steps to secure your personal data, no digital system can guarantee absolute security. You also have a role to play — please protect your 66fd account credentials and never share your password with anyone, including 66fd support staff who will never ask for it.

66fd retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law and our gaming license conditions. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship, plus 5 years following account closure, in compliance with AML record-keeping requirements under our gaming license.
• Financial transaction records: Retained for 5 years from the date of each transaction, consistent with standard AML obligations applicable to licensed gaming operators.
• KYC documents: Retained for 5 years post-account closure or post-transaction, whichever is later, as required by anti-money laundering regulations.
• Customer support records: Retained for 3 years from the date of the last support interaction to support quality assurance, dispute resolution, and regulatory inquiry purposes.
• Technical and session data: Retained for up to 13 months for security monitoring, fraud investigation, and platform optimisation purposes, after which it is aggregated or deleted.
• Marketing consent records: Retained for the duration of your consent plus a reasonable period to demonstrate compliance with consent obligations.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymized so that it can no longer be attributed to you as an identified individual.

66fd uses cookies and similar tracking technologies on the platform to ensure it functions correctly, to remember your session and preferences, and to analyze how the platform is used. The main categories of cookies used by 66fd are as follows:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies and security cookies. They cannot be disabled without preventing you from using 66fd.
• Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool status to provide a more consistent experience.
• Analytics cookies: Collect aggregated, anonymized data about how players use the 66fd platform — pages visited, features used, and session duration — to help us improve the platform. This data is not linked to your individual identity.
• Fraud prevention cookies: Used to detect and prevent fraudulent activity including multi-accounting and automated bot activity. These serve the security interests of all players on the platform.

66fd does not use third-party advertising or behavioral tracking cookies. You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to access the 66fd platform normally.

As a data subject whose personal data is processed by 66fd, you hold the following rights in relation to your information:

• Right of Access: You have the right to request a copy of the personal data 66fd holds about you. 66fd will provide this in a structured, machine-readable format within 30 days of a verified request.
• Right to Rectification: If any personal data 66fd holds about you is inaccurate or incomplete, you have the right to request correction. For account data, you may update certain details directly in your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 66fd's legal obligation to retain certain data under its gaming license and AML requirements.
• Right to Restriction: You may request that 66fd restricts processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: Where data is processed on the basis of your consent or contractual necessity, you have the right to receive it in a portable format for transfer to another service.
• Right to Object: You may object to processing of your personal data carried out on the basis of 66fd's legitimate interests. 66fd will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please submit your request to 66fd support via live chat or email as described in Section 15. We will verify your identity before processing any data subject request and will respond within 30 days. Complex requests may require up to 60 days with prior notification to you.

66fd strictly prohibits the use of its platform by any person under the age of 21. The 66fd platform does not knowingly collect personal data from individuals under 21 years of age.

If 66fd becomes aware that personal data has been collected from a person under 21, that account will be immediately closed, all data will be deleted in accordance with applicable law, and any deposits will be returned to the funding source. Age verification is a mandatory step in the 66fd KYC process and is enforced without exception.

If you are a parent or guardian and believe that your child has accessed or registered a 66fd account, please contact 66fd support immediately via the channels in Section 15. We will investigate and take immediate corrective action.

66fd may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When changes are material, 66fd will notify registered Players via their registered email address and will post a prominent notice on the platform prior to the changes taking effect.

The effective date shown at the top of this page indicates when the current version came into force. We recommend reviewing this Privacy Policy periodically, particularly if you have not done so within the last 90 days. Your continued use of 66fd following any update constitutes acceptance of the revised policy.

All prior versions of this Privacy Policy are archived and available on request from 66fd support.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 66fd handles your personal data, please reach out to us through one of the following channels:

• Live Chat: Available 24/7 directly on the 66fd platform — the fastest way to reach our support team for any privacy query or data subject request.
• Email: [email protected] (plain text — not a clickable link). Please use the subject line "Privacy Request" for all data subject access, rectification, erasure, or portability requests. We aim to acknowledge all privacy-related emails within 2 business days and resolve them within 30 days.

When submitting a data subject request, please include your registered 66fd username and a clear description of the request. 66fd will verify your identity before processing any request that involves accessing or modifying personal data. This verification step is for your own protection.

For formal complaints about 66fd's data handling practices that have not been resolved through our support process, you may escalate the matter to the relevant regulatory authority under 66fd's international gaming license jurisdiction. Details of the applicable authority are available from 66fd support on request.