Privacy Policy — 666q

666q is an online gaming and sports betting information platform serving Pakistani players and other users in permitted jurisdictions. We are committed to handling personal data responsibly, transparently and in compliance with applicable data protection standards.

This Policy describes the types of information we collect when you use the 666q platform, the purposes for which we process that information, the parties with whom we may share it, the safeguards we maintain to protect it, and the rights you hold as a data subject. It should be read alongside our Terms & Conditions and Responsible Gambling Policy.

We do not collect data from individuals we know to be under the age of 18. If you are under 18 years of age — or the higher minimum required by the applicable operator or license jurisdiction — please do not use this platform or submit any personal information to us.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information that identifies or could reasonably identify a living individual, directly or in combination with other data.
• "Processing" — Any operation performed on personal data, including collection, storage, use, disclosure, transfer or deletion.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For this platform, 666q acts as the Data Controller.
• "Data Processor" — A third party that processes personal data on behalf of the Data Controller, under documented instructions.
• "User" — Any individual who accesses, browses or registers an account on the 666q platform.
• "Consent" — A freely given, specific, informed and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "Cookies" — Small text files placed on a User's device by a website to store preferences, session state or behavioural data.
• "Platform" — The 666q website located at https://666q.cam and all associated pages, features and content.

We collect personal data through several channels. The categories of data we may collect are described in the table below:

We do not directly collect financial credentials, payment card numbers or bank account details. Any payment-related information is handled exclusively by licensed third-party payment processors. References to payment methods such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah on this platform are for informational context only and do not involve 666q handling your financial account data.

666q processes personal data for the following purposes, each of which is tied to a lawful basis described in Section 5:

• Account administration: Creating and maintaining your user account, verifying your identity and age, and managing your account preferences and settings.
• Platform operation: Delivering content, guides, betting information and responsible gambling resources that are relevant to your use of the platform.
• Customer support: Responding to enquiries, resolving complaints and providing assistance when you contact us at [email protected].
• Security and fraud prevention: Detecting and preventing fraudulent activity, unauthorised account access, abuse of promotional features and other harmful conduct.
• Legal compliance: Meeting obligations under applicable law, including anti-money laundering (AML) requirements, data protection regulations and any regulatory directives applicable to our operator license jurisdiction.
• Platform improvement: Analysing aggregated usage patterns to improve content quality, site performance and User experience.
• Responsible gambling: Monitoring usage patterns to identify indicators of problem gambling and enabling responsible gambling tools such as deposit limits, session timers and self-exclusion features.
• Communications: Sending service-related notifications, security alerts and, where you have provided consent, marketing communications about platform updates or relevant content.

We do not use your data for automated decision-making that produces significant legal or similarly significant effects without providing you with the opportunity to request human review of such decisions.

Every instance of data processing carried out by 666q rests on at least one of the following lawful bases:

• Contractual necessity: Processing required to deliver the services you have requested, including account registration and content access.
• Legal obligation: Processing necessary for compliance with applicable laws, such as AML verification and data retention requirements mandated by our license jurisdiction.
• Legitimate interests: Processing that serves 666q's legitimate business interests — such as fraud detection, platform security and analytics — provided those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your explicit opt-in, such as receiving marketing communications or the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Vital interests: In exceptional circumstances, processing necessary to protect the vital interests of a User or another person, including safeguarding in relation to problem gambling indicators.

Where processing is based on consent, you have the right to withdraw that consent at any time by updating your account preferences or contacting us at [email protected]. Withdrawal of consent does not affect processing already carried out prior to that withdrawal.

666q does not sell, rent or commercially trade your personal data. We share data only in the following limited circumstances:

• Service providers: We engage trusted third-party processors — including hosting providers, analytics platforms and email delivery services — who handle data strictly on our behalf and under binding data processing agreements.
• Identity verification partners: Where age or identity verification is required, we may share limited data with specialised KYC (Know Your Customer) service providers operating under equivalent data protection standards.
• Legal authorities: We may disclose personal data to law enforcement, regulatory bodies or courts when required by law, valid legal process or to protect the rights, property or safety of 666q, its users or the public.
• Business transfers: In the event of a merger, acquisition or asset sale involving 666q, personal data may be transferred to the acquiring entity, subject to the same data protection obligations set out in this Policy.
• With your explicit consent: We may share data with any additional third party where you have provided specific, informed consent to that disclosure.

666q uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences and to understand how Users interact with our content. The types of cookies we use are as follows:

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the platform. Refer to your browser's help documentation for instructions on managing cookie preferences.

We retain personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. Our general retention guidelines are:

• Account data: Retained for the duration of your account relationship with 666q, plus a further period of up to 7 years following account closure to meet legal and regulatory obligations.
• Communications and support records: Retained for up to 3 years from the date of the last communication, unless a longer period is required for dispute resolution or legal proceedings.
• Technical and usage data: Retained in identifiable form for up to 24 months, after which it is anonymised or deleted. Anonymised aggregate data may be retained indefinitely for analytical purposes.
• Cookie data: Session cookies are deleted when you close your browser. Persistent cookies expire in accordance with the duration specified at the time of consent, typically between 30 days and 12 months.
• Legal compliance records: Retained for the period required by applicable AML, KYC or other regulatory frameworks, which may exceed the periods above.

Once data is no longer required, it is securely deleted, anonymised or archived in accordance with our internal data disposal procedures. You may request early deletion of your data as described in Section 11, subject to applicable legal retention requirements.

666q implements a range of technical and organisational measures designed to protect your personal data against unauthorised access, loss, alteration or disclosure. These measures include:

• TLS/SSL encryption for all data transmitted between your browser and our servers.
• Encryption of sensitive data fields at rest using industry-standard algorithms.
• Role-based access controls that restrict internal access to personal data to authorised personnel only.
• Regular security assessments, vulnerability scanning and penetration testing of platform infrastructure.
• Mandatory data protection training for all staff members with access to personal data.
• Incident response procedures that ensure timely detection, investigation and notification of any data breach in accordance with applicable law.

666q's platform and infrastructure may involve the transfer of personal data to servers or processors located outside Pakistan. Where such transfers occur, we take steps to ensure that your data receives a level of protection consistent with the standards described in this Policy, including through:

• Contractual safeguards — binding data processing agreements with all third-party processors that include appropriate data protection clauses.
• Technical safeguards — encryption and access controls applied irrespective of the geographic location of processing.
• Vendor due diligence — assessment of the data protection practices of all third-party providers before engagement.

Users based in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and other cities across Pakistan should be aware that data protection law in Pakistan is evolving. The Personal Data Protection Bill, when enacted, may impose additional requirements. 666q will update this Policy as and when such legislation comes into force. We encourage Users to remain informed about developments in local data protection law.

Subject to applicable law, you hold the following rights in respect of your personal data held by 666q. You may exercise any of these rights by contacting us at [email protected]. We will respond within 30 days of receiving your request.

We will not charge a fee for handling your request unless it is manifestly unfounded or excessive. In such cases we may charge a reasonable administrative fee or decline to act, providing written reasons for our decision.

The 666q platform is strictly intended for adults aged 18 or over — or the higher minimum age required by the relevant operator or license jurisdiction. We do not knowingly collect, process or retain personal data from individuals below this age threshold.

During registration, Users are required to confirm their date of birth and agree that they meet the minimum age requirement. 666q reserves the right to request documentary evidence of age at any time. Where we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you are a parent or legal guardian and have reason to believe that a minor in your care has accessed the platform or submitted personal data, please contact us immediately at [email protected] so that we can investigate and act promptly.

666q may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, applicable law or regulatory requirements. When material changes are made, we will update the "Last updated" date shown at the top of this page.

We encourage you to review this Policy periodically. Where required by law, we will provide more prominent notice of significant changes — for example, via an in-platform notification or a direct email to registered Users. Your continued use of the platform following any update constitutes your acceptance of the revised Policy.

If you disagree with the changes, you should discontinue use of the platform and may request account closure and data deletion as described in Section 11. For questions about any amendments, contact us at [email protected].

If you have any questions, concerns or requests regarding this Privacy Policy or the way 666q handles your personal data, please get in touch using the details below. We take all privacy enquiries seriously and aim to respond within 30 calendar days.