y666 Privacy Policy — Your Data, Your Rights, Our Commitment

01 Who We Are

y666 is an internationally licensed online gaming and sports betting platform operating at the domain y666.bio. The Platform provides sports betting (including cricket, PSL, and international sporting events), live dealer casino games, slot titles, instant games, and associated account and payment management services to adult users.

y666 is the data controller responsible for personal data collected through the Platform. All references to "y666," "we," "us," and "our" in this Policy refer to the entity operating the Platform under its international gaming license. For enquiries relating to your personal data, please contact us at the details provided in Section 16 of this Policy.

02 Data We Collect

y666 collects the following categories of personal data, depending on how you interact with the Platform:

03 How We Collect Your Data

y666 collects personal data through the following channels:

• Direct Submission: Information you provide directly when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your account settings.
• Automated Technical Collection: Technical data including IP addresses, device identifiers, browser fingerprints, session timestamps, and usage patterns collected automatically when you access the Platform through standard web server logs and analytics systems.
• Payment Processor Confirmation: Transaction reference numbers, payment method identifiers, and transaction status information returned by payment processors (JazzCash, EasyPaisa, bank gateways) after deposit or withdrawal events.
• Third-Party Game Providers: Game session identifiers, bet amounts, game outcomes, and RNG certification data passed between y666 and licensed game providers during gameplay. This data is used for account crediting, bet settlement, and dispute resolution.
• Cookies and Tracking Technologies: Session cookies, preference cookies, and analytics data collected through standard browser cookie mechanisms. See Section 8 for full details.
• Fraud Prevention Systems: Device fingerprinting, IP geolocation, and behavioural analysis data used to detect duplicate accounts, identify suspicious login patterns, and prevent financial fraud.

04 Purpose & Legal Basis for Processing

y666 processes personal data under the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing required to perform our obligations under the User Agreement (Terms & Conditions) you entered into when creating a y666 account. This includes account management, bet placement and settlement, game provision, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and the obligations of our international gaming license, including KYC identity verification, anti-money laundering (AML) screening, fraud prevention, and regulatory reporting.
• Legitimate Interests: Processing necessary for y666's legitimate business interests, including Platform security, fraud detection, duplicate account prevention, improving Platform features based on usage analytics, and communicating service updates — provided such interests are not overridden by your fundamental privacy rights.
• Consent: Processing based on your freely given, informed consent, specifically for optional marketing communications (email newsletters, bonus notifications, promotional offers). You may withdraw consent for marketing at any time through your Account Settings or by contacting support.

05 How We Use Your Personal Data

y666 uses your personal data for the following specific purposes:

• Account Creation and Management: Creating and maintaining your y666 account, authenticating your identity on login, managing account settings, and enabling two-factor authentication where activated.
• Identity Verification (KYC): Verifying your identity and age (21+) in compliance with the requirements of our international gaming license and applicable anti-money laundering regulations. KYC documents are reviewed by authorised y666 compliance team members only.
• Payment Processing: Processing deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20. Transaction data is used for reconciliation, fraud screening, and dispute resolution.
• Bet Settlement and Game Provision: Placing, recording, and settling bets across the y666 sportsbook; tracking game sessions in the casino, slot, and instant game sections; crediting wins to your wallet.
• Responsible Gaming: Enforcing deposit limits, loss limits, session time limits, cooling-off periods, and self-exclusion settings you have activated. Monitoring account activity for indicators of problem gambling behaviour where this falls within our licensing obligations.
• Fraud Prevention and Security: Detecting and preventing account fraud, payment fraud, bonus abuse, duplicate account creation, and unauthorised access attempts. Sharing relevant data with fraud prevention services and payment processors as needed.
• Regulatory Compliance: Reporting to regulatory and law enforcement authorities as required by applicable law or our gaming license conditions.
• Customer Support: Responding to support queries, investigating complaints, and resolving disputes. Support interaction records are retained for quality assurance and dispute resolution purposes.
• Platform Improvement: Analysing aggregated, anonymised usage data to identify performance issues, improve game category layouts, optimise the mobile experience, and develop new features.
• Marketing Communications (Consent-Based): Sending bonus notifications, promotional offers, and platform updates to users who have explicitly opted in. Users may opt out at any time.

06 Sharing of Personal Data

6.1 y666 does not sell your personal data. Personal data is never sold, rented, or traded to unaffiliated third parties for their independent commercial purposes.

6.2 y666 may share personal data with the following categories of recipients, strictly as necessary for the purposes described in this Policy:

• Licensed Game Providers: Game session identifiers and bet data are exchanged with licensed third-party game studios (such as Pragmatic Play, PG Soft, NetEnt) to deliver gameplay and settle bets. These providers operate under their own data processing agreements with y666 and are required to maintain equivalent data protection standards.
• Payment Processors: Transaction-relevant personal and financial data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and cryptocurrency payment processors strictly for the purpose of executing the specific transaction.
• KYC and AML Service Providers: Identity and document data may be shared with authorised third-party KYC verification and anti-money laundering screening services under strict data processing agreements.
• Fraud Prevention Services: Technical and account data may be shared with fraud detection services to identify and prevent financial crime, account fraud, and bonus abuse.
• Regulatory and Law Enforcement Authorities: y666 will disclose personal data to governmental authorities, regulators, or law enforcement agencies when required by law, court order, or the conditions of our international gaming license. y666 will, where legally permissible, notify affected users of such disclosures.
• Professional Advisors: Legal, accounting, and auditing advisors engaged by y666 who are subject to professional confidentiality obligations may access personal data on a need-to-know basis in connection with their advisory services.

07 Payment Data & Financial Privacy

7.1 y666 does not store full JazzCash or EasyPaisa account credentials, full bank account passwords, or complete payment card data on its own systems. Payment transactions are processed by certified third-party payment processors under PCI-DSS compliance frameworks. y666 retains only the transaction reference, amount, timestamp, and payment method identifier needed for wallet crediting, reconciliation, and dispute resolution.

7.2 For USDT TRC20 cryptocurrency transactions, y666 records the sending and receiving wallet addresses and transaction hash for blockchain verification purposes. Cryptocurrency transactions are irreversible; y666 bears no liability for cryptocurrency sent to incorrect addresses provided by the user.

7.3 Financial transaction records — including deposit history, withdrawal history, and bet settlement records — are retained for a minimum of five (5) years following account closure or the final transaction date, whichever is later, in compliance with international gaming license requirements and anti-money laundering regulations.

08 Cookies & Tracking Technologies

8.1 Types of Cookies Used. y666 uses the following categories of cookies and similar tracking technologies on the Platform:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in, security cookies that prevent cross-site request forgery, and load balancing cookies that distribute traffic across server infrastructure. These cookies cannot be disabled without breaking Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming limit settings so that these do not need to be re-entered on each visit.
• Analytics Cookies: Collect anonymised data about how users navigate the Platform — which pages are visited most, where users drop off, which game categories are most popular — to help y666 improve the Platform experience. Analytics data is not linked to your personal identity.
• Security and Fraud Prevention Cookies: Used to detect and prevent fraud, identify bot activity, and flag unusual access patterns that may indicate account compromise or abuse.

8.2 You may control non-essential cookies through your browser's cookie management settings. Disabling analytics or functional cookies will not prevent you from using core y666 services but may affect the quality of your personalised experience on the Platform.

8.3 y666 does not use advertising network cookies or cross-site tracking cookies that track your behaviour across other websites for commercial advertising purposes.

09 Data Retention

y666 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and gaming license conditions. The following standard retention periods apply:

• Account and Identity Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering regulatory requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, regardless of account status.
• KYC Documentation: Retained for the duration of your account and for five (5) years after closure. KYC documents may be retained for longer periods if required by regulatory authority instruction.
• Betting and Gaming Records: Retained for the duration of your account and for three (3) years after account closure for dispute resolution purposes.
• Support Communications: Live chat transcripts and email correspondence retained for two (2) years from the date of the interaction.
• Technical and Log Data: Server access logs and security logs retained for twelve (12) months on a rolling basis.
• Marketing Preferences: Retained until you withdraw consent or request deletion, after which suppression records are kept to ensure we do not inadvertently re-contact you.

After the applicable retention period expires, personal data is securely deleted or anonymised in a manner that prevents re-identification.

10 International Data Transfers

10.1 y666 operates globally and may process your personal data on servers located outside of Pakistan. Where personal data is transferred internationally — including to server infrastructure, game providers, or service providers in other jurisdictions — y666 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

10.2 Applicable safeguards for international transfers may include: contractual data processing agreements incorporating standard data protection clauses, processing by recipients in jurisdictions with adequacy determinations by recognised data protection authorities, or processing by entities that are certified under internationally recognised data protection frameworks.

10.3 By using y666 services, you acknowledge that your personal data may be processed in jurisdictions outside Pakistan and consent to such international transfers subject to the safeguards described above.

11 Your Privacy Rights

Depending on your jurisdiction of residence and applicable data protection law, you may hold some or all of the following rights in relation to your personal data held by y666. To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy Rights Request — [Right Type]" and your registered account email address.

12 Security Measures

12.1 y666 implements a layered technical and organisational security framework designed to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• Encryption in Transit: 256-bit SSL/TLS encryption applied to all data transmitted between user devices and y666 servers.
• Encryption at Rest: Sensitive data fields, including identity document images and financial identifiers, are encrypted at rest in y666's database infrastructure.
• Password Security: User passwords are stored exclusively as one-way cryptographic hashes using industry-standard algorithms. y666 cannot retrieve your plaintext password and will never ask for it.
• Access Controls: Personal data is accessible internally only on a strict need-to-know basis, with role-based access controls enforced across all y666 systems. Access logs are maintained and regularly audited.
• Intrusion Detection: Automated intrusion detection and anomaly monitoring systems operate on y666's network infrastructure around the clock.
• Two-Factor Authentication: Optional 2FA is available for all user accounts and strongly recommended. Internal y666 administrative systems require multi-factor authentication for all staff access.
• Security Testing: y666 conducts regular penetration testing and vulnerability assessments on Platform infrastructure. Critical vulnerabilities are addressed on an emergency basis; non-critical findings are remediated within defined security patch cycles.

12.2 Notwithstanding these measures, no internet-based system can guarantee absolute security. Users are encouraged to maintain strong, unique passwords for their y666 accounts, enable two-factor authentication, and report any suspected security incidents to [email protected] immediately.

13 Children & Minors

y666 employs age verification as a mandatory component of its KYC process. If you believe a minor has created an account on y666, please report this immediately to [email protected] with the subject line "Minor Account Report." y666 will investigate and take action within 24 hours of receiving a credible report.

Parents and guardians are encouraged to use parental control software to restrict access to gambling websites for minors in their household. y666 supports the responsible gaming mission of preventing underage gambling in Pakistan and globally.

14 Third-Party Services & Links

14.1 The y666 Platform integrates with third-party licensed game providers (including but not limited to Pragmatic Play, PG Soft, NetEnt, Hacksaw Gaming, and Jili Games) whose game engines operate within the y666 environment. These providers are subject to their own privacy policies in respect of data collected directly through their game interfaces. y666 is not responsible for the privacy practices of third-party game providers beyond the data processing agreements that govern their integration with the Platform.

14.2 y666 does not include hyperlinks to external third-party websites in its Platform content. Where users navigate away from y666.bio to any external website, y666 bears no responsibility for the content or privacy practices of that external destination.

14.3 Payment processors integrated with y666 — including JazzCash, EasyPaisa, and banking gateways — operate under their own privacy policies and applicable Pakistani financial services regulations. y666 recommends that users review the privacy policies of their chosen payment providers to understand how those providers handle their financial data.

15 Changes to This Privacy Policy

15.1 y666 reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, applicable law, gaming license requirements, or Platform functionality. The "Last Updated" date at the top of this Policy will be revised to reflect the date of each update.

15.2 For material changes — meaning changes that meaningfully affect how your personal data is processed or your rights in relation to that data — y666 will notify registered users via email to their registered address and/or via a prominent in-Platform notification, at least fourteen (14) days before the changes take effect.

15.3 Minor amendments, including typographical corrections and clarifications that do not substantively alter any data processing practice, may take effect upon publication without advance notice. Your continued use of y666 following any amendment constitutes acceptance of the revised Policy. If you do not accept the revised Policy, please contact support to close your account.

16 Contact & Complaints

For questions, concerns, or requests relating to this Privacy Policy or your personal data held by y666, please contact the y666 Data Privacy team through the following channels:

• Privacy Requests Email: [email protected] — Subject line: "Privacy Rights Request — [Right Type]" (plain text address; not a clickable link)
• Live Chat: Available 24/7 through your y666 account dashboard after login
• General Support: For non-privacy queries, the same support channels apply — y666 support is staffed around the clock including during PSL match hours and weekend evenings when player activity is highest

If you are not satisfied with y666's response to a privacy complaint after completing the internal review process, you may have the right to escalate to the data protection supervisory authority in your jurisdiction, or to the dispute resolution mechanism provided under y666's international gaming license. Details of the applicable escalation route are available upon request from the y666 support team.