Privacy Policy – g666.cash Protects Your Personal Data in Pakistan

This Privacy Policy is published by the operators of g666.cash ("g666", "we", "us", "our"). g666.cash is an online gaming and sports betting platform serving registered players in Pakistan and other jurisdictions permitted under our operating licence. Our registered contact address and data protection contact details are available upon written request through the email address provided in Section 14 of this policy.

g666 is the data controller for all personal data collected through the g666.cash website, mobile experience, and associated services. This means we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers who process data on our behalf, they act as data processors under our instruction and are contractually bound to maintain the same standards of data protection set out in this policy.

By registering an account and using g666.cash, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, please do not create an account or continue using the platform.

g666 collects personal data in two categories: data you provide directly when you register and use the platform, and data generated automatically through your interaction with the g666.cash website and services.

Data you provide directly:

Data collected automatically:

• Device and browser information: Browser type and version, operating system, screen resolution, and device type (mobile, tablet, or desktop).
• IP address and approximate location: Used for fraud prevention, regulatory compliance, and to confirm you are accessing g666 from a permitted jurisdiction.
• Session data: Pages visited on g666.cash, time spent on each page, click patterns, and navigation paths through the platform.
• Transaction records: A full record of all deposits, withdrawals, bets placed, games played, bet amounts, and settlement outcomes on g666.
• Support communications: Records of live chat, email, and WhatsApp communications with the g666 support team, including the content of those messages.
• Responsible gaming data: Any deposit limits, session reminders, cooling-off periods, or self-exclusion instructions you set through your g666 account dashboard.

We do not collect biometric data, location tracking beyond IP-level approximation, or any sensitive personal categories beyond what is strictly required for identity verification under our KYC obligations.

g666 collects personal data through the following mechanisms, each of which is transparent and directly tied to your use of the platform.

• Account Registration: When you sign up on g666.cash, you provide your name, mobile number, date of birth, and email address. This data is submitted directly through the registration form.
• KYC Verification: When you request a withdrawal above the verification threshold, you submit a copy of your CNIC and — where required — a photograph and proof of payment method. This is uploaded through a secure submission portal on the g666 platform.
• Deposits and Transactions: Each time you make a deposit or withdrawal on g666, your payment method details and transaction information are recorded. Mobile wallet transactions via Easypaisa and JazzCash are confirmed through callbacks from those payment providers to the g666 platform.
• Platform Usage: Automatically collected through cookies, web server logs, and analytics tools embedded in the g666 website. See Section 10 for full details on cookies.
• Customer Support: When you contact g666 support, the content and metadata of those communications are recorded and linked to your account.
• Third-Party Identity Verification: g666 may use a regulated third-party identity verification service to assist with the CNIC verification process. That service processes only the data required for identity confirmation and does not retain your documents beyond the verification process.

g666 uses your personal data for clearly defined purposes. We do not process data beyond what is necessary for those purposes, and we do not repurpose data without a valid legal basis to do so.

Marketing communications from g666 are sent only to players who have explicitly opted in. You can opt out at any time by updating your communication preferences in your g666 account settings or by contacting support.

g666 processes your personal data under one or more of the following legal bases, depending on the specific processing activity involved.

• Contract: Processing is necessary to perform the contract between you and g666 — specifically, to operate your account, accept deposits, settle bets, and process withdrawals. Without this processing, g666 cannot provide its services to you.
• Legal Obligation: g666 is required by its operating licence and applicable law to collect and retain certain data — including KYC identity verification records and transaction histories — for defined minimum periods. This processing is mandatory and cannot be opt-out.
• Legitimate Interests: g666 processes certain data — particularly security logs, fraud detection signals, and responsible gaming monitoring data — on the basis of legitimate interests. In each case, we have assessed that our interests do not override your rights and freedoms.
• Consent: Where g666 processes data for marketing communications, that processing is based on your explicit consent provided at registration or through your account settings. Consent can be withdrawn at any time without affecting any other processing.

g666 shares your personal data only in the circumstances described below. We do not engage in data sharing beyond these defined categories.

• Payment Processors: Your payment method details are shared with our payment processing partners — including Easypaisa, JazzCash, NayaPay, SadaPay, and card processing networks — strictly for the purpose of completing your deposit or withdrawal transaction on g666. These providers are bound by their own regulatory obligations and data protection requirements.
• Identity Verification Providers: CNIC and identity document data is shared with a regulated third-party verification service for the purpose of completing your KYC check. This provider processes data under a data processing agreement with g666 and is prohibited from using your data for any other purpose.
• Regulatory Authorities: g666 may be required to disclose player data to its licensing authority, financial intelligence units, or law enforcement agencies where legally compelled to do so — for example, in connection with an AML investigation or a court order. We will only make such disclosures where legally required and, where permissible, will notify you.
• Game Providers: Where games on g666 are provided by third-party game studios operating through an integration, anonymised or pseudonymised game session data may be shared with that provider for game performance and integrity purposes. These providers do not receive your identity or payment data.
• Business Transfer: In the event that g666's business is acquired, merged, or restructured, your data may be transferred to the acquiring entity as part of that transaction. You will be notified before any such transfer and given the option to close your account if you do not wish your data to be transferred.

g666 handles payment data with particular care given its sensitivity. The following describes how financial information is specifically managed on the platform.

When you make a deposit via Easypaisa or JazzCash, your mobile wallet credentials are never stored by g666. The transaction is initiated through a secure redirect or API call to the payment provider, and g666 receives only a transaction reference and confirmation status — not your wallet PIN or account password.

For card payments processed via Visa or Mastercard, card details are handled exclusively by the PCI-DSS compliant payment gateway. g666's servers do not receive or store your full card number, CVV, or expiry date at any point during or after the transaction.

Withdrawal requests are matched against the payment method used for the most recent deposit, and funds are sent only to an account confirmed to be held in your name. This matching process is part of g666's AML controls and cannot be waived.

• Transaction records — including amounts, dates, and payment method references — are retained for a minimum period as required by our licence and applicable AML regulations.
• If g666 detects suspicious transaction patterns, we may temporarily hold a withdrawal pending review. You will be notified through your account and asked to provide any additional information required to complete the review.
• g666 never initiates outbound requests for payment credentials. If you receive any communication purporting to be from g666 that asks for your Easypaisa PIN, JazzCash password, or bank card details, it is a fraudulent communication — do not respond to it and report it to our support team immediately.

g666 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security posture is reviewed and tested regularly by an independent security firm.

• Transport Security: All communications between your device and g666's servers use TLS 1.2 or higher. The g666.cash domain enforces HTTPS; plain HTTP connections are not accepted.
• Password Security: Your account password is never stored in plain text. Passwords are hashed using a strong, salted hashing algorithm. Even g666's own engineers cannot retrieve your original password — only you know it.
• Two-Factor Authentication: g666 provides two-factor authentication (2FA) via OTP to your registered Pakistani mobile number. We strongly recommend enabling 2FA on your account for an additional layer of protection.
• Data Encryption at Rest: Sensitive stored data — including identity documents and financial records — is encrypted at rest on g666's infrastructure.
• Access Controls: Role-based access controls limit which g666 team members can view player data. All access to player data by internal staff is logged and audited.
• Penetration Testing: g666's platform infrastructure undergoes regular penetration testing by an external specialist security firm. Identified vulnerabilities are remediated within defined timescales based on severity.
• Incident Response: g666 maintains a data breach incident response plan. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players as soon as practicable after the breach is discovered and contained.

g666 retains personal data only for as long as necessary for the purpose for which it was collected, or as required by our legal and regulatory obligations — whichever is longer.

• Active accounts: Your personal data is retained for the full duration that your g666 account remains active.
• Closed accounts: Following account closure, g666 retains transaction records, KYC documents, and account history for a minimum of five years. This is a regulatory requirement under our AML compliance obligations and cannot be shortened on request.
• Marketing data: If you withdraw consent to receive marketing communications, your contact details are removed from marketing lists within 30 days. They may still be retained for regulatory purposes as described above.
• Support records: Records of customer support interactions are retained for two years from the date of the most recent communication in a support thread.
• Technical and security logs: Server logs and security monitoring data are retained for 90 days and then purged automatically.

Once the applicable retention period expires and there is no other legal basis to continue holding your data, g666 will securely delete or anonymise that data.

g666.cash uses cookies and similar tracking technologies to operate the platform, improve performance, and — with your consent — understand how players use the site. The table below explains the categories of cookies we use.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent g666.cash from functioning correctly. For all other categories, you can opt out without affecting core platform functionality.

As a player on g666.cash, you have a number of rights in relation to your personal data. These rights are real and exercisable — contact our support team and we will respond within 30 days.