Privacy Policy — p666p

This Privacy Policy ("Policy") describes how p666p ("p666p", "we", "us", "our") — the operator of the online betting and casino information platform available at https://p666p.cam (the "Platform") — collects, uses, stores, shares and protects the personal data of individuals who access or use the Platform ("Users", "you", "your").

p666p is committed to handling personal data responsibly, transparently and in accordance with applicable data protection and privacy laws. This Policy forms part of our broader Terms and Conditions and should be read alongside our Terms & Conditions and Responsible Gambling pages.

By accessing the Platform, registering for an Account or otherwise submitting personal data to p666p, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with this Policy, please discontinue use of the Platform immediately.

For clarity and consistency throughout this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that can identify you directly or indirectly, including your name, email address, date of birth, IP address and payment details.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, p666p.
• "Data Processor" means any third party that processes personal data on behalf of p666p under a formal data processing agreement.
• "Cookies" means small text files placed on your device by the Platform to support functionality, analytics and session management.
• "KYC" means Know Your Customer — the identity verification process required before processing certain financial transactions.
• "Account" means a registered user profile created on the Platform following completion of the registration process.
• "Third Party" means any entity other than you and p666p, including payment processors, analytics providers and regulatory authorities.

p666p acts as the Data Controller for all personal data collected through the Platform. As Data Controller, p666p is responsible for determining the purposes for which your personal data is processed and for ensuring that such processing is conducted lawfully, fairly and transparently.

Where p666p engages third-party service providers to process personal data on its behalf — for example, payment processing partners, identity verification providers and analytics platforms — those providers act as Data Processors and are contractually bound to process data only in accordance with p666p's written instructions and applicable data protection obligations.

p666p collects the following categories of personal data, depending on how you interact with the Platform:

p666p does not intentionally collect special category data (such as health data, biometric data or data revealing racial or ethnic origin) unless you voluntarily disclose such information in a support communication, in which case it will be handled with heightened care and deleted once no longer necessary.

p666p collects personal data through the following channels:

• Direct Submission: Data you provide when registering for an Account, completing KYC verification, making deposits or withdrawals, contacting customer support or submitting feedback;
• Automated Technologies: Data collected automatically when you access the Platform, including cookies, web beacons, log files and similar tracking technologies that record Technical Data and Usage Data;
• Third-Party Sources: Data received from identity verification providers, payment processors and fraud detection services, for the purposes of KYC compliance and financial security;
• Public Sources: In limited circumstances, data sourced from publicly available records to support fraud prevention or compliance checks.

All collection methods are designed to be proportionate to the purpose for which the data is required. p666p does not use deceptive or coercive means to collect personal data.

p666p processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and p666p — for example, creating and managing your Account, processing financial transactions and delivering customer support;
• Legal Obligation: Processing necessary to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations, KYC requirements and tax reporting duties;
• Legitimate Interests: Processing that serves p666p's legitimate business interests — such as fraud prevention, Platform security, improving service quality and direct communications about Platform features — where such interests are not overridden by your rights;
• Consent: Processing based on your explicit, freely given and informed consent, such as receiving optional marketing communications or promotional updates. You may withdraw consent at any time without affecting the lawfulness of prior processing.

p666p uses personal data for the following specific purposes:

• To create, verify and manage your registered Account on the Platform;
• To process deposits, withdrawals and other financial transactions and to prevent fraud and money laundering;
• To conduct KYC identity verification as required by applicable licensing and regulatory obligations;
• To provide customer support, respond to enquiries and resolve disputes;
• To monitor and enforce compliance with our Terms & Conditions, including detection of Prohibited Conduct;
• To personalise your Platform experience, including providing relevant content, game recommendations and promotional offers where you have consented to receive them;
• To conduct analytics and improve the functionality, security and performance of the Platform;
• To send transactional communications such as account confirmations, transaction receipts, security alerts and policy update notifications;
• To comply with applicable laws, respond to lawful requests from regulatory authorities and protect the legal rights of p666p and its users;
• To support responsible gambling initiatives, including monitoring for signs of problem gambling behaviour and activating user-requested gambling controls.

p666p does not sell, rent or trade your personal data. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: Financial data is shared with payment service providers — such as banks, mobile wallet platforms and cryptocurrency processing services — solely for the purpose of executing your deposit and withdrawal transactions. References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah represent payment infrastructure context and do not imply those providers endorse gambling activity;
• Identity Verification Providers: KYC documents and identity data are shared with regulated third-party verification services to fulfil AML and compliance obligations;
• Analytics Providers: Aggregated and pseudonymised usage data may be shared with analytics partners to support Platform improvement. No directly identifiable personal data is shared for this purpose;
• Legal & Regulatory Authorities: p666p will disclose personal data to law enforcement agencies, regulators or courts where required to do so by applicable law, a valid legal order or to protect the rights and safety of p666p and its users;
• Business Transfers: In the event of a merger, acquisition or sale of all or substantially all of p666p's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party processors are required to maintain appropriate technical and organisational security measures and to process data only for specified, disclosed purposes.

p666p uses cookies and similar technologies to support the operation, security and improvement of the Platform. The categories of cookies used are set out below:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session management cookies, authentication tokens and security cookies. These cannot be disabled without affecting Platform functionality;
• Performance & Analytics Cookies: Used to collect anonymised data about how users interact with the Platform — for example, which pages are visited most frequently and how long users spend on each section. This data is used solely to improve Platform performance;
• Functional Cookies: Used to remember your preferences, such as language settings, display options and logged-in status, to provide a more personalised experience;
• Targeting / Preference Cookies: Used to deliver relevant promotional content based on your browsing behaviour on the Platform. These are only activated where you have provided consent.

You may manage or disable non-essential cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of some Platform features. Consult your browser's help documentation for instructions on managing cookie preferences.

p666p retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting and reporting requirements. The principal retention periods applied by p666p are as follows:

• Account Data: Retained for the duration of your Account and for a period of five (5) years following Account closure, in compliance with AML and licensing obligations;
• KYC Documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by applicable regulatory requirements;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction;
• Customer Support Communications: Retained for three (3) years from the date of each communication, or until a related dispute is fully resolved;
• Technical & Usage Data: Retained for up to thirteen (13) months from collection, after which it is aggregated and anonymised;
• Marketing Consent Records: Retained for the duration of the consent plus three (3) years to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of identifiable information.

p666p implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and our servers;
• AES-256-bit encryption for all sensitive data at rest, including financial records and KYC documents;
• Multi-factor authentication requirements for administrative access to data processing systems;
• Regular security audits, penetration testing and vulnerability assessments conducted by qualified third-party specialists;
• Strict access controls ensuring that only authorised personnel with a legitimate business need can access personal data;
• Comprehensive staff training on data protection obligations and incident response procedures;
• A documented data breach response plan, with defined timelines for assessment, containment and notification where required.

p666p may transfer personal data to countries outside your country of residence — including outside Pakistan — where our servers, data processors or group companies are located. Where such transfers occur, p666p ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable privacy law.

Safeguards used for international transfers may include:

• Transfers to countries that maintain an adequate level of data protection as assessed by relevant authorities;
• Contractual clauses or data transfer agreements with receiving entities that impose data protection obligations equivalent to applicable legal requirements;
• Binding corporate rules where transfers occur within a corporate group.

For further information about the specific safeguards applied to any international transfer of your personal data, please contact us using the details in Section 17.

Subject to applicable law, you have the following rights in respect of your personal data held by p666p. These rights may be exercised at any time by contacting us using the details in Section 17:

p666p will respond to all valid data rights requests within 30 days of receipt. In complex cases, we may extend this period by a further 60 days, in which case we will inform you of the extension and the reasons for it. There is no charge for exercising your rights, unless a request is manifestly unfounded or excessive.

The Platform is strictly intended for adults aged 18 years or older, or the higher minimum age required by the applicable operator or license jurisdiction. p666p does not knowingly collect, process or retain personal data from individuals under the required minimum age.

If p666p becomes aware that personal data has been collected from a minor — whether through misrepresentation during registration or any other means — that data will be deleted promptly and the associated Account will be closed immediately. Any funds held in such an Account may be forfeited in accordance with applicable operator terms.

If you are a parent or guardian and believe that a minor under your supervision has registered with p666p or submitted personal data to the Platform, please contact us immediately using the details in Section 17.

The Platform may contain references to third-party services, payment providers or organisations for informational context. p666p does not include outbound hyperlinks to external websites within its core page content. Where any such reference exists, p666p has no control over the privacy practices or content of those third-party entities and accepts no responsibility for them.

This Policy applies exclusively to the p666p Platform at https://p666p.cam. We encourage you to review the privacy policies of any other platforms or services you choose to use independently.

p666p reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, Platform functionality, applicable law or regulatory requirements. The most recent version of this Policy will always be accessible on this page, and the "Last Updated" date at the top of this document will reflect the date of the most recent revision.

Where changes are material — meaning they significantly affect your rights or how your personal data is processed — we will notify registered Users by email or through a prominent notice on the Platform prior to the changes taking effect. Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms.

We recommend reviewing this Policy periodically to stay informed of how p666p protects your information.

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by p666p, please contact our Data Protection team using the details below. All data rights requests and privacy enquiries will be handled with priority.

When submitting a data rights request, please include your registered email address and a clear description of your request so that we can verify your identity and respond accurately. p666p may request additional information to confirm your identity before processing a data access, rectification or erasure request.