666ad Privacy Policy — Your Data, Our Responsibility

This Privacy Policy applies to all services offered by 666ad, including the website at 666ad.onl, sports betting (covering cricket, PSL T20, football, esports and other sports), slots, live casino, bingo, and all related account and customer support functions. When we refer to "666ad", "we", "us", or "our" in this document, we mean the operator of the 666ad platform.

Privacy matters. When you register on 666ad, deposit PKR, place a bet on a cricket match, or contact our support team, you're sharing information with us. This policy explains in clear terms what we do with that information, why we need it, and how we keep it safe. We've tried to write this in plain English rather than dense legal language, while still covering everything you need to know.

By using the 666ad platform, you acknowledge that you have read and understood this Privacy Policy. If you have questions about anything in this document, contact support via live chat — details are at the bottom of this page.

The personal information we collect falls into several categories depending on how you interact with the platform. Here's a breakdown of what we collect and where it comes from:

We do not collect sensitive categories of personal data such as racial or ethnic origin, religious beliefs, or health information unless specifically required for responsible gaming purposes (such as self-exclusion requests) and with your explicit consent.

Every piece of data we collect has a specific purpose. We do not collect data speculatively or hold onto it for potential future use that hasn't been identified. The main reasons we use your personal information are:

• Account management: Creating and maintaining your 666ad player account, verifying your identity, managing your login credentials, and updating your account details when requested.
• Processing transactions: Handling PKR deposits through JazzCash, Easypaisa, Raast, bank transfers, and cards; processing withdrawal requests back to your registered payment methods; maintaining an accurate transaction history.
• Providing the platform: Delivering sports betting markets (cricket, PSL, football, esports), operating slot games, running live casino tables and bingo rooms, calculating and settling bets, and crediting winnings.
• Fraud prevention and security: Detecting suspicious activity, preventing multiple account creation, protecting against identity fraud, and ensuring only the legitimate account holder accesses the account.
• Responsible gaming: Monitoring account activity for signs of problem gambling behaviour, enforcing self-exclusion requests, applying deposit limits, and supporting players who use responsible gaming tools.
• Customer support: Responding to queries, resolving disputes, investigating complaints, and following up on technical issues reported by players.
• Marketing communications: Sending promotional offers, new feature announcements, and bonus information to players who have opted into marketing communications. You can opt out at any time.

Given that 666ad handles real PKR transactions, payment data is a particularly sensitive category that deserves its own section. Here's exactly how financial information is handled on the platform.

JazzCash and Easypaisa: When you make a deposit via JazzCash or Easypaisa, the transaction is processed within those respective apps. 666ad receives confirmation of the transaction along with the wallet number associated with it — we do not receive or store your wallet PIN, MPIN, or any other authentication credentials. Your JazzCash and Easypaisa security credentials remain entirely within those platforms.

Bank transfers and cards: Bank account details provided for IBFT transfers are stored securely to enable future withdrawals back to the same account. Card data is handled through a tokenised payment process — full card numbers are not stored on 666ad servers. Only a secure token representing the card is retained, which can process future transactions without requiring the full card number to be entered again.

Transaction records: Full records of deposits and withdrawals are maintained for operational, security, and audit purposes. Your transaction history is accessible from your account dashboard and through the support team on request.

666ad does not sell personal data. We share information with third parties only where necessary to operate the platform, comply with legal requirements, or protect players. The categories of third parties we work with are:

• Payment processors: JazzCash, Easypaisa, Raast, banks, and card processors receive transaction data necessary to complete deposits and withdrawals. These companies operate under their own privacy policies and security standards.
• Identity verification services: We use third-party KYC (Know Your Customer) services to verify the identity documents players submit during the verification process. These services process document data for verification purposes only.
• Game providers: Slots, live casino, and bingo games are provided by third-party game studios. These providers receive the minimum player data needed to run the games — typically a player reference ID rather than full personal details.
• Fraud detection: We use third-party fraud detection tools that analyse technical data (IP addresses, device fingerprints, session patterns) to identify suspicious activity. These services do not receive full player identity data.
• Legal and regulatory requirements: Where required by law or a valid legal order, 666ad may disclose player information to relevant authorities. We do not volunteer information beyond what is legally required.

All third-party partners used by 666ad are required to handle data securely and use it only for the purpose for which it was shared. We do not share data with sports integrity organisations except where we have identified and confirmed suspicious betting activity that requires escalation.

Protecting the personal and financial data of 666ad players is a core operational priority. The security measures in place include:

• SSL/TLS encryption: All data transmitted between your browser or device and 666ad servers is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser confirms this connection is active.
• Access controls: Internal access to player data is restricted to team members who need it for their specific role. Access logs are maintained and reviewed. No team member has unrestricted access to all player data.
• Payment tokenisation: Card details are never stored in full on 666ad systems. Tokenisation means a secure reference replaces the actual card number after the first transaction.
• Secure password storage: Account passwords are stored using one-way cryptographic hashing — meaning 666ad staff cannot see your actual password, only a mathematical representation of it.
• Regular security reviews: The platform infrastructure undergoes regular security assessments to identify and address potential vulnerabilities before they can be exploited.

Cookies are small text files stored on your device when you visit 666ad. We use them to keep the platform working correctly and to understand how players use the site. Here's a breakdown of the cookie types in use:

Essential and security cookies cannot be disabled as they are required for the platform to function. Optional cookies (functional and analytics) can be managed through your browser settings. Most modern browsers allow you to see, delete, and block cookies on a per-site basis.

We do not keep your personal data indefinitely. Retention periods are based on operational necessity and legal requirements:

• Active account data: Retained for as long as your account remains open and active on 666ad.
• Transaction records: Financial transaction data is retained for a minimum of five years from the date of the transaction, in line with standard financial record-keeping requirements.
• Identity verification documents: Retained for the duration of account activity plus a reasonable period thereafter to comply with anti-money laundering requirements.
• Support communications: Live chat logs and support correspondence are retained for a period sufficient to allow investigation of any disputes that may arise from the interaction — typically two years.
• Closed accounts: When an account is closed, personal data is moved to a restricted state. Some data is retained for the legally required periods, after which it is securely deleted.

When data reaches the end of its required retention period, it is permanently deleted or anonymised such that it can no longer be linked back to you as an individual.

You have rights over the personal information that 666ad holds about you. Here's what those rights are and how to exercise them:

666ad is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. The registration process includes a date of birth field, and accounts where the holder is later found to be under 18 are closed immediately.

If a parent or guardian believes that a minor has created an account on 666ad, they should contact support immediately via live chat. We will investigate promptly, close the account, void any activity, and return any deposited funds to the original payment source.

We encourage parents to use device-level parental controls on shared devices to prevent minors from accessing online gaming platforms. For more information on responsible gaming and age protection measures, visit the Responsible Gaming page.

This Privacy Policy may be updated from time to time. When we make material changes — particularly those affecting how your data is used, shared, or stored — we will notify registered players via the email address on their account and/or display a prominent notice on the 666ad platform.

The "Last updated" date at the top of this page reflects the most recent revision. Minor updates (such as clarifications of existing practices rather than changes to them) may not be individually notified but will be reflected in the updated document date.

Continued use of 666ad following any update to this Privacy Policy indicates that you have read and accepted the revised policy. If you do not agree with the updated policy, you should stop using the platform and contact support to close your account.

If you have any questions about this Privacy Policy, want to exercise your data rights, or have concerns about how your personal information has been handled, the support team is available 24/7 via live chat on the 666ad platform.

For written privacy-related enquiries, you can also reach us by email. The support email address is listed in the footer of this page. When contacting us about a data matter, please include your registered username and a brief description of your request so we can route it to the right team member promptly.

We aim to acknowledge all privacy-related requests within 48 hours and to resolve them fully within 30 days. Complex requests involving data access or erasure may take slightly longer where identity verification steps are involved.