w666 Privacy Policy

01 Who We Are

w666 ("we", "us", "the Company") operates the online gaming platform accessible at w666.cam, offering casino games, sports betting, live dealer experiences, and related services to adult users aged 21 and above, primarily serving the Pakistani market.

This Privacy Policy applies to all personal data processed in connection with your use of the w666 Platform, including data collected during account registration, identity verification, payment processing, gameplay, customer support interactions, and marketing communications where you have provided consent.

By accessing or using the w666 Platform, you confirm that you have read and understood this Privacy Policy and the manner in which w666 processes your personal data. This Policy should be read in conjunction with our Terms & Conditions.

02 Personal Data We Collect

w666 collects the following categories of personal data in the course of providing and operating the Platform:

2.1 Registration and Identity Data

When you create a w666 account, we collect: full legal name, date of birth, Pakistani CNIC number, residential address, mobile number, and email address. This data is required to verify your identity, confirm you meet the 21+ age requirement, and create your account.

2.2 KYC Verification Documents

As part of our Know Your Customer (KYC) obligations, we may collect copies of identity documents including your Pakistani CNIC, proof of address, and payment method verification documents. These are processed for identity verification and AML compliance purposes only.

2.3 Financial and Transaction Data

We collect records of all deposits, withdrawals, bonus transactions, and gaming activity on your account, including payment method details (mobile wallet identifiers, bank account references, and crypto wallet addresses). Full card or bank account numbers are never stored by w666 — they are handled directly by our payment processors.

2.4 Technical and Usage Data

We automatically collect certain technical data when you use the Platform, including your IP address, device type and model, operating system, browser type, session duration, pages visited, and game sessions. This data is used for security monitoring, fraud prevention, and Platform performance optimisation.

2.5 Communications Data

Records of your communications with w666 customer support — including live chat transcripts, email correspondence, and call recordings where applicable — are retained for quality assurance, dispute resolution, and regulatory compliance purposes.

2.6 Marketing Preferences

Where you have provided consent to receive promotional communications, we retain records of your marketing preferences and consent history.

03 How We Use Your Personal Data

w666 uses personal data collected from users for the following purposes:

• Account Management: To create, maintain, and administer your w666 account, including processing registration, verifying identity, resetting credentials, and managing account settings.
• Service Delivery: To process deposits and withdrawals, facilitate casino and sportsbook gameplay, apply bonuses and promotions, and provide customer support services.
• Identity and Age Verification: To verify that you meet the mandatory 21+ age requirement and to comply with international KYC standards, including verifying the authenticity of submitted identification documents.
• Fraud and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, account sharing, bonus abuse, and other prohibited activities outlined in our Terms & Conditions.
• Legal and Regulatory Compliance: To meet our obligations under applicable international AML, KYC, and data protection frameworks, and to respond to lawful requests from regulatory and law enforcement authorities.
• Platform Improvement: To analyse user behaviour patterns, improve game performance, optimise the deposit and withdrawal experience, and develop new features — using aggregated and anonymised data where possible.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling and to administer responsible gaming tools including deposit limits, session timers, and self-exclusion requests.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to users who have provided explicit consent to receive such communications. You may withdraw consent at any time.

04 Legal Basis for Processing

w666 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the Terms & Conditions, including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable international AML, KYC, data retention, and reporting obligations imposed on online gaming operators.
• Legitimate Interests: Processing carried out for purposes of fraud prevention, Platform security, responsible gaming monitoring, and internal analytics, where these interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and the use of non-essential cookies and tracking technologies, where you have provided explicit, freely given, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

05 Data Sharing and Disclosure

w666 does not sell, rent, or share your personal data with third-party marketing organisations. Personal data may be disclosed to the following categories of recipients only for the purposes described in this Policy:

5.1 Payment Processors

Your financial transaction data is shared with our payment processing partners — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and cryptocurrency network service providers — to the extent necessary to process your deposits and withdrawal requests. These processors are contractually bound to process your data only as directed by w666 and in accordance with applicable data protection standards.

5.2 Identity Verification Services

KYC document data may be shared with regulated third-party identity verification service providers for the purpose of verifying your identity and age in compliance with AML requirements.

5.3 Game Content Providers

Certain technical data (such as session tokens and Player IDs) is shared with our licensed game content providers to facilitate gameplay. These providers do not receive personally identifiable information beyond what is strictly necessary for game delivery and RNG certification.

5.4 Law Enforcement and Regulatory Authorities

w666 will disclose personal data to competent law enforcement, regulatory, or government authorities where required to do so by applicable law, court order, or in connection with the prevention or investigation of financial crime, fraud, or other illegal activity.

5.5 Corporate Transactions

In the event of a merger, acquisition, or sale of all or part of w666's business, personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection obligations.

06 Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device by websites you visit. w666 uses cookies and similar technologies (including local storage and session tokens) to operate the Platform, maintain your logged-in session, remember your preferences, and analyse usage patterns.

6.2 Categories of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load balancing cookies. They cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Store your preferences such as language settings, game display preferences, and responsible gaming tool configurations to personalise your experience.
• Analytical Cookies: Used to understand how users interact with the Platform — which pages are visited, how long sessions last, and where users encounter difficulties — so that we can improve the experience. Data is aggregated and anonymised where possible.
• Security Cookies: Used to detect fraudulent activity, bot traffic, and unusual access patterns that may indicate account compromise or abuse.

6.3 Managing Cookies

You can manage non-essential cookies through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or receive a notification when cookies are set. Please note that disabling certain cookies may affect the functionality of the w666 Platform, particularly features that require an active session.

07 Data Security

w666 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• Encryption in Transit: All data transmitted between your device and the w666 Platform is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed on a continuous basis.
• Encryption at Rest: Sensitive personal data and financial records stored in w666's infrastructure are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to w666 employees and contractors who require it to perform their job functions, enforced through role-based access control and multi-factor authentication on all administrative systems.
• Security Monitoring: w666 operates continuous security monitoring of its infrastructure, with automated alerts for anomalous access patterns and regular penetration testing conducted by independent security specialists.
• Vendor Security: All third-party vendors with access to personal data are subject to security due diligence assessments and are contractually required to maintain security standards commensurate with those of w666.

08 Data Retention

w666 retains personal data for the minimum period necessary to fulfil the purposes described in this Policy or to comply with applicable legal, regulatory, and AML obligations. The following retention periods apply:

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with w666's data disposal procedures.

09 Your Data Rights

As a data subject, you have the following rights in respect of personal data held by w666. To exercise any of these rights, please contact us at [email protected]:

• Right of Access: You have the right to request a copy of the personal data w666 holds about you, along with information about how it is being used and shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. For certain data types, corrections can be made directly within your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (for consent-based processing), or where processing is unlawful. Note that certain data must be retained for legal compliance periods as described in Section 8.
• Right to Restriction: You have the right to request that we restrict processing of your data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for responsible gaming purposes. w666 will cease such processing unless compelling legitimate grounds can be demonstrated.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

w666 will respond to all data subject requests within 30 calendar days of receipt. Where requests are complex or numerous, this period may be extended by a further 30 days, with notice provided to you of the extension and the reasons for it.

10 Children's Privacy

The w666 Platform is strictly intended for adults aged 21 years and above. w666 does not knowingly collect, process, or store personal data relating to individuals under 21 years of age. Age verification is a mandatory step in the account registration process.

If w666 becomes aware that personal data has been collected from an individual under 21 years of age, that account will be immediately suspended, all data associated with the account will be deleted, and any deposits made will be returned to the originating payment method following an investigation.

If you believe that a minor has registered on the w666 Platform, please contact us immediately at [email protected] so that we can take prompt action.

11 International Data Transfers

w666 operates internationally, and your personal data may be transferred to and processed in countries outside Pakistan where w666's infrastructure, service providers, or game content partners are located. Such transfers are carried out subject to appropriate safeguards, including data processing agreements that incorporate internationally recognised data transfer mechanisms.

Where personal data is transferred to third-party processors in other jurisdictions, w666 ensures that those processors are contractually bound to maintain data protection standards equivalent to those described in this Policy.

12 Third-Party Services and Links

The w666 Platform does not contain links to third-party websites or services other than those integrated into the Platform for the purpose of delivering w666's core services (such as payment gateways and game providers). w666 is not responsible for the privacy practices of any third-party service providers, and we encourage you to review the privacy policies of any external services you use independently of the w666 Platform.

All game content providers integrated into the w666 Platform are licensed and certified operators subject to their own regulatory frameworks. Technical session data shared with game providers for gameplay purposes is governed by data processing agreements between w666 and each respective provider.

13 Updates to This Privacy Policy

w666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we offer. All amendments will be published on this page with an updated effective date.

Where amendments are material — meaning they significantly affect how we process your personal data or your rights in relation to it — w666 will notify registered users via email or on-Platform notification prior to the changes taking effect. We encourage you to review this Policy periodically to remain informed of how w666 protects your data.

Your continued use of the w666 Platform following publication of an amended Privacy Policy constitutes your acknowledgement of the updated version. Where the amended Policy requires fresh consent for new processing activities, we will seek that consent through a clear and affirmative mechanism before commencing such processing.

14 Contact Us and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or w666's data processing practices, please contact our data protection team:

• Email: [email protected]
• Subject Line: Please use "Privacy Request" or "Data Subject Request" in the subject line for faster routing to our data protection team
• Response Time: Privacy enquiries are acknowledged within 48 hours and responded to substantively within 30 calendar days
• Live Chat: Available 24/7 on w666.cam for general privacy questions in Urdu or English

w666 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection obligations. All formal data subject requests should be directed to [email protected] with the subject line "FAO: Data Protection Officer".