a666 Privacy Policy – How We Protect Your Data

1About This Privacy Policy

a666 operates the online casino and sports betting platform available at a666.ad. This Privacy Policy describes how we collect, store, use and protect personal information relating to registered players and visitors in Pakistan. It also sets out the rights you have in relation to your personal data and how you can exercise them.

This policy should be read alongside our Terms and Conditions and our Responsible Gaming policy. Together, these documents set out the full framework governing your use of the a666 platform and the obligations we have toward you.

We may update this policy from time to time. When we do, the revised version will be published on this page with an updated date. For significant changes we will notify registered players via email. Continued use of the platform after any update constitutes acceptance of the revised policy.

2What Personal Data We Collect

We collect personal data from you in three ways: information you give us directly, information generated automatically when you use the platform, and information received from third-party service providers.

Information you provide directly:

• Full name and date of birth (required for age verification)
• Mobile number and email address
• Residential address in Pakistan
• CNIC number (Computerised National Identity Card) when requested for verification
• Payment method details — including JazzCash account number, Easypaisa wallet, Raast ID, bank account details or card information as applicable
• Communications you send to our support team
• Responsible gaming preferences and self-imposed limits you set on your account

Information collected automatically:

• IP address and approximate location derived from IP
• Device type, operating system and browser
• Session data — pages visited, games played, time spent, bet history, deposit and withdrawal history
• Login timestamps and account activity logs
• Cookie and local storage data (see Section 6)

Information from third parties:

• Identity verification results from document verification service providers
• Transaction confirmation and status data from payment processors (JazzCash, Easypaisa, Raast, banks)
• Fraud screening signals from anti-fraud service providers

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information or biometric data unless specifically required and consented to for identity verification purposes.

3How We Use Your Personal Data

Every piece of data we collect is used for a clear, specific purpose. The table below summarises the main uses:

We will not use your personal data for any purpose incompatible with the purposes stated above without first obtaining your consent or as otherwise required by law.

4Legal Basis for Processing Your Data

We process your personal data on one or more of the following legal grounds:

• Contractual necessity. Processing your name, date of birth, payment details and account activity data is necessary to operate your a666 account and fulfil the agreement between you and a666 under the Terms and Conditions.
• Legal obligation. Certain processing — particularly identity verification and anti-money laundering checks — is required to comply with applicable laws and regulations. We have no discretion to opt out of these requirements.
• Legitimate interests. We process device data, IP addresses and session logs to protect the security of the platform, detect fraud, prevent multi-accounting and ensure the integrity of betting and gaming activity. These are legitimate interests that do not override your fundamental privacy rights.
• Consent. Where we send you promotional communications by email or SMS, we do so on the basis of your consent, which you gave at registration. You can withdraw this consent at any time through your account settings or by contacting support.

5Who We Share Your Data With

a666 does not sell your personal data. We share data only with the categories of third parties listed below, and only to the extent necessary for the stated purpose:

• Payment processors. JazzCash, Easypaisa, Raast, banks and card processors receive the payment data required to complete your deposit or withdrawal transactions in PKR. Each provider operates under its own privacy and data security standards.
• Identity verification providers. When we carry out account verification, we may pass identity document data to specialist document verification service providers. These providers process data strictly for verification purposes and do not retain it for other uses.
• Anti-fraud and security services. We work with fraud detection providers that analyse device fingerprints, IP data and transaction patterns to identify suspicious activity and protect accounts from unauthorised access.
• Game software providers. Third-party casino and slot game studios that supply games to a666 may receive a session token and game activity data required to run the game. They do not receive your full account details or payment information.
• Customer support tools. Our support team uses ticketing and live chat software. Messages you send to support may be stored within these tools, which are operated by reputable third-party providers under data processing agreements.
• Legal and regulatory bodies. Where required by applicable law — for example, in response to a court order, anti-money laundering investigation or regulatory inquiry — we may be required to disclose account and transaction data. We will only do so to the extent legally required.

All third-party service providers that process personal data on our behalf are required to handle it securely, use it only for the agreed purpose and comply with applicable data protection standards.

6Cookies and Tracking Technologies

a666 uses cookies and similar technologies (such as local storage) to make the platform function correctly and to understand how it is being used. Here is a breakdown of what we use and why:

• Essential cookies. These are required for the platform to work. They keep you logged in during your session, remember your language and display preferences, and maintain the state of your game session. Without these, the platform cannot function. They cannot be disabled.
• Analytics cookies. We use anonymised analytics to understand which pages and games are most popular, how long sessions typically last and where players encounter problems. This helps us improve the platform. No personally identifiable information is included in analytics data.
• Security cookies. Short-lived cookies are used to detect and prevent certain security threats such as cross-site request forgery (CSRF). These are essential to protecting your account.
• Preference cookies. If you have configured display, notification or responsible gaming preferences, these may be stored locally to ensure your settings persist across sessions.

We do not use third-party advertising or retargeting cookies. Your activity on a666 is not tracked across other websites. You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent the platform from functioning correctly.

7How Long We Keep Your Data

We retain personal data only for as long as it is needed for the purpose it was collected, or as required by applicable legal obligations. The general retention periods we apply are as follows:

• Active accounts. While your account is active, we retain all account and transaction data to operate your account, provide support and comply with anti-money laundering requirements.
• Closed accounts. After an account is closed, we retain identity, account and transaction records for a minimum period as required by anti-money laundering and financial record-keeping obligations. This period is typically five years from the date of account closure.
• Support communications. Records of your communications with our support team are retained for the period your account is active and for a period after closure in case of follow-up queries or disputes.
• Analytics data. Aggregated, anonymised analytics data does not contain personal identifiers and may be retained indefinitely for platform improvement purposes.
• Marketing consent records. If you have given or withdrawn consent for marketing communications, we retain a record of that consent or withdrawal to demonstrate compliance.

Once retention periods have passed and there is no other legal basis to keep the data, it is securely deleted or anonymised.

8Your Privacy Rights

As a registered player on a666, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team from the email address associated with your account.

9How We Keep Your Data Secure

a666 takes data security seriously. We apply multiple layers of technical and operational measures to protect your personal data from unauthorised access, loss or disclosure.

• Encryption in transit. All data exchanged between your browser or app and a666 servers is encrypted using SSL/TLS. Look for the padlock icon in your browser address bar as confirmation.
• Encryption at rest. Sensitive data fields — including payment details and identity information — are encrypted when stored in our databases.
• Access controls. Access to player data within a666 is restricted on a strict need-to-know basis. Staff who handle support queries, verification or financial operations are the only roles with access to personal account data, and only the fields relevant to their function.
• Two-factor authentication. You can enable two-factor authentication (2FA) on your a666 account for an additional layer of login security. We strongly recommend doing so.
• Fraud monitoring. Automated systems monitor account activity for patterns consistent with fraud, multi-accounting or unauthorised access. Suspicious activity triggers alerts for review by our security team.
• Incident response. We maintain an internal process for identifying, containing and reporting data security incidents. In the event of a breach affecting your personal data, we will notify you promptly.

While we work hard to protect your data, no internet platform can guarantee absolute security. You also have a role to play — keep your password private, do not use the same password across multiple sites and log out of your account when using a shared device.

10Children's Privacy

a666 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you are not permitted to register an account, and any attempt to do so is a violation of our Terms and Conditions.

If we discover or have reason to believe that an account has been registered by someone under 18 — whether through our own checks or a report from a third party — the account will be closed immediately, any balance will be forfeited, and any personal data collected will be deleted unless retention is required for legal or investigative reasons.

If you are a parent or guardian and believe that a minor has registered on a666, please contact our support team immediately so we can investigate and take appropriate action. We also recommend using parental control software on devices shared with or accessible to minors.

11Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer or applicable legal requirements. When changes are made, the updated policy will be published on this page with a revised "Last Updated" date at the top.

For material changes — those that significantly affect how we use your data or what rights you have — we will notify registered players by email in advance of the change taking effect. For minor or clarificatory changes, the updated page on a666.ad constitutes notice.

Your continued use of the platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with changes to this policy, you should stop using the platform and request account closure.

12Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how your personal information has been handled, please get in touch with our support team.

• Live chat: Available through your account when logged in — the fastest route for most queries.
• Email support: Contact details are available in the support section of your account portal. Please use the email address registered on your a666 account when submitting a privacy request so we can verify your identity.

We aim to respond to all privacy-related requests within a reasonable timeframe. Complex requests — such as a full data export or deletion across multiple systems — may take longer, but we will keep you updated throughout the process.

For questions about our Terms and Conditions or responsible gaming tools, visit the relevant pages: Terms and Conditions and Responsible Gaming.