r666 Privacy Policy – How We Handle Your Personal Data

01 Who We Are

This Privacy Policy is published by r666 ("r666", "the Platform", "we", "us", "our"), the operator of r666.life — an online betting and casino platform serving players in Pakistan. r666 acts as the data controller in respect of all personal data collected from players and visitors to r666.life.

This Privacy Policy applies to all personal data collected and processed in connection with your registration, use of any r666 product (cricket betting, football betting, live casino, Teen Patti, card games, fishing games, live cricket scores), deposits, withdrawals, and any other interaction you have with the r666 platform, website, or customer support team.

This Privacy Policy should be read alongside the r666 Terms and Conditions and Responsible Gaming policy. By registering an account on r666 or continuing to use the r666 platform, you acknowledge that you have read and understood this Privacy Policy.

02 Personal Data We Collect

r666 collects the following categories of personal data in connection with the operation of your account:

2.1 Registration Data

When you create an r666 account, we collect: your full name, date of birth, Pakistani mobile number, email address (if provided), preferred language, and account password (stored in encrypted, hashed form — we never see your raw password).

2.2 Identity Verification Data

To comply with anti-money laundering (AML) and know-your-customer (KYC) requirements, r666 may request copies of your CNIC (Computerised National Identity Card), passport, or other government-issued identification. We may also request proof of your payment method ownership, such as a screenshot of your Easypaisa or JazzCash account showing your name and registered number.

2.3 Financial Data

r666 records all deposits, withdrawals, and transaction history associated with your account. This includes the payment method used, transaction amounts in PKR, timestamps, and transaction reference numbers. Full payment card numbers are never stored by r666 — card processing is handled by PCI-DSS-certified payment processors.

2.4 Betting and Gaming Activity Data

r666 records all bets placed, markets selected, stakes, outcomes, winnings, and gaming session data across all products including cricket betting, live casino, Teen Patti, card games, and fishing games. This data is used for account management, dispute resolution, bonus management, and responsible gaming monitoring.

2.5 Technical and Device Data

When you access r666, we automatically collect: IP address, device type, operating system, browser type and version, screen resolution, and session duration. This data is used for security monitoring, fraud prevention, and platform optimisation.

2.6 Communication Data

Records of your communications with r666 customer support — including live chat transcripts, emails, and any documents you share — are retained for service quality, training, and dispute resolution purposes.

03 How We Collect Your Data

r666 collects personal data through the following means:

• Directly from you: When you complete the r666 registration form, submit KYC documents, contact customer support, or update your account profile.
• Automatically during platform use: Technical data such as IP address, device information, and session data is collected automatically when you access r666.life through any browser or connection.
• From payment processors: When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or Visa/Mastercard, transaction confirmation and reference data is shared with r666 by the payment processor to reconcile your account balance.
• From third-party fraud and AML screening services: r666 may use third-party services to verify identity documents and screen against sanctions lists or fraud databases. These services return a pass/fail signal and risk score — they do not retain copies of your documents beyond the verification event.
• Through cookies and tracking technologies: r666 uses cookies and similar technologies to maintain your session, remember preferences, and analyse how the platform is used. See Section 7 for full cookie details.

04 How r666 Uses Your Personal Data

The following table summarises every purpose for which r666 uses your personal data:

05 Legal Basis for Processing

r666 processes your personal data on the following legal bases:

• Contract: Processing that is necessary to provide the services you have signed up for — account management, payments, bet settlement.
• Legal Obligation: Processing required to comply with gaming regulations, AML laws, KYC requirements, and reporting obligations under our operating licence.
• Legitimate Interest: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and platform improvement — where these interests do not override your rights.
• Consent: For marketing communications only. You can withdraw consent at any time — see Section 11 for details.

06 How r666 Shares Your Data

r666 does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

6.1 Payment Processors

To process your PKR deposits and withdrawals, r666 shares necessary transaction data with licensed payment processors including Easypaisa, JazzCash, NayaPay, SadaPay, and Visa/Mastercard network processors. These processors are bound by their own privacy and security obligations and are prohibited from using your data for any purpose beyond completing your transaction.

6.2 Identity Verification Services

r666 uses third-party KYC/AML verification providers to confirm the authenticity of identity documents and to screen against international sanctions and fraud databases. These providers process your data solely on r666's instructions and under binding data processing agreements.

6.3 Regulatory and Legal Authorities

r666 will share player data with relevant regulatory authorities, law enforcement agencies, or financial intelligence units when required to do so by law, court order, or our gaming licence obligations. We will notify you of such disclosure wherever legally permitted to do so.

6.4 Platform Infrastructure Providers

r666 uses third-party cloud hosting and infrastructure providers to store and process data. These providers are contractually bound to handle data only under r666's instructions and may not use it for their own purposes.

6.5 Game Content Providers

Some r666 games — particularly live casino titles — are provided by third-party game studios. Session identifiers and bet records may be shared with game providers solely to facilitate the gaming session. Game providers do not receive your name, CNIC, or payment details.

07 Cookies and Tracking Technologies

r666 uses cookies and similar technologies to ensure the platform functions correctly and to understand how it is used. The following types of cookies are used on r666.life:

• Essential Cookies: Required for the platform to function. These cookies maintain your login session, remember your language preference, and protect against cross-site request forgery. They cannot be disabled without breaking the platform.
• Analytics Cookies: Used to collect anonymised data about how players navigate and use r666. This data is used to identify usability issues and improve the platform. Analytics data is aggregated and does not identify individual players.
• Security Cookies: Used to detect and prevent fraudulent activity, including device fingerprinting for bot detection and account protection.
• Preference Cookies: Used to remember your display preferences, default odds format, and other interface settings between sessions.

r666 does not use third-party advertising or retargeting cookies. You will not be followed around other websites by r666 tracking technology after leaving r666.life. You can manage essential and preference cookie settings through your browser settings, though disabling essential cookies will prevent you from logging in to r666.

08 Data Retention

r666 retains personal data only for as long as necessary for the purpose it was collected, or as required by applicable law:

• Active account data: Retained for the lifetime of your r666 account plus a minimum of 5 years following account closure, in compliance with gaming licence and AML record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years following the transaction date, as required under financial record-keeping regulations.
• KYC documents: Retained for the duration of your account plus 5 years following closure. Originals are stored in encrypted form with access restricted to compliance personnel.
• Customer support communications: Retained for 3 years from the date of the communication unless a dispute is ongoing, in which case records are retained until final resolution plus 1 year.
• Marketing consent records: Retained for 3 years from the date of consent withdrawal, as evidence of your consent history.
• Technical and session data: Retained in identifiable form for 90 days, then anonymised or deleted. Anonymised aggregated analytics data may be retained indefinitely.

09 Data Security

r666 takes data security seriously and has implemented technical and organisational measures appropriate to the sensitivity of the data we hold. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and r666's servers.
• Encrypted database storage for sensitive personal data fields including identity document copies and payment reference data.
• Hashed and salted password storage — r666 never stores raw passwords and cannot retrieve your password; only a reset is possible.
• Access controls — staff access to personal data is restricted by role, with minimum-privilege principles applied. Access is logged and audited.
• Regular security testing — r666 conducts periodic vulnerability assessments and penetration testing of its platform infrastructure.
• PCI-DSS compliance for all payment card data processing, handled through certified third-party processors with no raw card data stored on r666 systems.

In the event of a data breach that is likely to result in a risk to your rights or freedoms, r666 will notify affected players without undue delay and will take all necessary steps to contain the breach and prevent recurrence.

10 Your Data Rights

As an r666 player, you have the following rights in respect of your personal data. To exercise any of these rights, contact r666 at support@r666.life:

r666 will respond to all data rights requests within 30 days. In complex cases, this may be extended to 60 days with notice. r666 will not charge a fee for reasonable requests. Requests that are clearly unfounded or excessive may be subject to an administrative fee or refused, with written explanation.

11 Marketing Communications

r666 may send you marketing messages about new products, promotions, bonuses, and cricket betting offers via SMS, push notification, or email — but only if you have explicitly opted in to receive them during registration or through your r666 account settings.

You can withdraw your marketing consent at any time in the following ways:

• By updating your communication preferences in your r666 account settings.
• By clicking the unsubscribe link included in any r666 marketing email.
• By replying STOP to any r666 SMS marketing message.
• By contacting r666 support at support@r666.life with the subject line "Unsubscribe from Marketing".

Withdrawing marketing consent will not affect your ability to use the r666 platform or receive service communications (such as transaction confirmations and support responses, which are sent regardless of marketing preference).

12 Protection of Minors

r666 does not knowingly collect, process, or retain personal data from individuals under the age of 18. The r666 platform is strictly for adults aged 18 and over. If r666 discovers or is notified that a player under the age of 18 has registered an account, that account will be immediately suspended, all transactions will be reversed where possible, and any collected data will be securely deleted.

r666 recommends that parents and guardians use internet filtering software to prevent underage individuals from accessing online betting and gambling platforms. If you believe a minor has accessed r666 using your details or another person's identity, contact support@r666.life immediately.

13 Updates to This Privacy Policy

r666 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform features. When material changes are made, we will notify registered players via their registered mobile number or email address at least 7 days before the changes take effect, where practicable.

The current version of the r666 Privacy Policy is always available at r666.life/privacy-policy and is identified by the "Last Updated" date at the top of this page. Your continued use of the r666 platform following notification of changes constitutes acceptance of the updated policy.

If you do not agree with a material change to the Privacy Policy, you have the right to close your r666 account and withdraw your data (subject to legal retention obligations) before the change takes effect.

14 Contact r666 About Privacy

For any privacy-related queries, data rights requests, or concerns about how r666 handles your personal data, please contact us through the following channels:

• Email: support@r666.life — use subject line "Privacy Request" for data rights requests
• Live Chat: Available 24/7 through r666.life after logging in to your account

r666 customer support handles privacy queries in both English and Urdu, 24 hours a day, seven days a week. For account deletion requests, please include your registered mobile number and a brief statement confirming your identity in your message.

r666 aims to respond to all privacy-related requests within 5 business days for standard queries, and within 30 days for formal data rights requests. If you feel your privacy concerns have not been adequately addressed by r666, you have the right to escalate your complaint to the relevant data protection authority in the jurisdiction under which r666 operates.