q666 Privacy Policy — How We Protect Your Data

This Privacy Policy ("Policy") describes the practices of q666 ("q666," "we," "us," "our") with respect to the collection, use, storage, disclosure, and protection of personal data provided by or collected from individuals ("Members," "Users," "you") who access or use the q666 online casino and sports betting platform available at q666.site, including all associated browser-based gaming interfaces and account management systems.

q666 is committed to processing personal data responsibly, transparently, and in accordance with applicable data protection principles and the requirements of our international gaming licence. We do not sell personal data to third parties, and we do not use your personal information for any purpose beyond those explicitly described in this Policy without your prior consent.

If at any point you have questions about how q666 handles your personal data, our support team is available 24/7. You may also raise a formal data subject enquiry by contacting us at the details provided in Section 15 of this Policy.

For the purposes of applicable data protection law and international data governance standards, q666 acts as the Data Controller in respect of all personal data collected from Members and Users of the q666 platform. As Data Controller, q666 is responsible for determining the purposes and means by which personal data is processed and for ensuring that such processing is conducted lawfully, fairly, and transparently.

q666 operates under international gaming licensing standards. Our data processing activities are subject to the requirements of our gaming licence, which includes obligations relating to record-keeping, player identity verification, anti-money laundering compliance, and responsible gaming monitoring. Where such regulatory obligations require data processing, q666 processes that data on the legal basis of legal obligation as described further in Section 5 of this Policy.

q666 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we may collect are set out in the table below:

q666 does not collect special category personal data (such as racial origin, political opinions, religious beliefs, biometric data, or health data) except where you voluntarily disclose such information in the context of a responsible gaming enquiry, in which case it is processed solely for the purpose of providing appropriate support and with your explicit consent.

q666 collects personal data through the following methods:

• Information submitted during the account registration process, including your name, date of birth, mobile number, and chosen username.
• Identity and address documents submitted during KYC verification, including CNIC scans and proof of payment method ownership.
• Communications you send to q666 via live chat, email, or support ticket systems.
• Preferences and settings you configure within your q666 account settings, including responsible gaming tool configurations.

• Platform usage data generated each time you access q666, including session start and end times, pages visited, games launched, bets placed, and actions taken within the platform.
• Device and browser data collected automatically via our platform infrastructure, including IP address, device identifiers, operating system version, and browser type.
• Cookie and tracking technology data as described in Section 9 of this Policy.

• Payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan, Raast, 1LINK, Visa/Mastercard) may provide transaction reference data to q666 for the purpose of reconciling deposits and processing withdrawals.
• Identity verification service providers may confirm the authenticity of CNIC documents submitted during KYC.
• Fraud detection and AML screening services may provide risk scores or alerts associated with specific account activities or payment transactions.

q666 processes personal data only where a valid legal basis exists under applicable data protection law. The following table summarises the primary purposes for which q666 processes your personal data and the legal basis applicable to each purpose:

q666 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your data is shared with third parties only where strictly necessary for the purposes described in this Policy, and only with parties who are contractually bound to handle it securely and in accordance with applicable data protection standards.

The categories of third parties with whom q666 may share your personal data include:

• Payment service providers (JazzCash, EasyPaisa, HBL, UBL, Meezan, Raast, 1LINK, Visa/Mastercard) — to process your deposits and withdrawals in PKR. These providers receive only the minimum data necessary to complete the transaction.
• Identity verification providers — third-party KYC services that assist q666 in verifying the authenticity of identity documents submitted during the verification process.
• Fraud detection and AML compliance providers — specialist services that monitor transaction patterns and alert q666 to potentially suspicious activity in compliance with our licensing obligations.
• Gaming software providers — the studios and providers whose games are hosted on the q666 platform may receive anonymised or pseudonymised gameplay data for the purpose of game performance monitoring and RTP auditing. No directly identifying personal data is shared with game providers unless required for dispute resolution.
• IT infrastructure and cloud service providers — companies providing server hosting, data storage, CDN services, and platform infrastructure to q666. These providers act as data processors under contract with q666 and have no independent right to use your data.
• Legal and regulatory authorities — courts, law enforcement agencies, our licensing authority, and other government bodies where disclosure is required by applicable law, court order, or regulatory direction. q666 will, where legally permissible, notify you of such disclosures.
• Professional advisers — lawyers, auditors, and accountants acting as service providers to q666, subject to professional confidentiality obligations.

q666 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. The following retention periods apply as a general guide:

• Account data and KYC records: Retained for a minimum of five (5) years from the date of account closure, as required by anti-money laundering and gaming licence regulations.
• Transaction records (deposits and withdrawals): Retained for a minimum of five (5) years from the date of the transaction.
• Gaming activity logs: Retained for three (3) years from the date of the relevant activity, unless a longer period is required for dispute resolution or regulatory compliance purposes.
• Customer support communications: Retained for two (2) years from the date of the last communication in a support thread.
• Marketing preferences and opt-in records: Retained for the duration of your account plus two (2) years post-closure as evidence of consent.
• Device and technical logs: Retained for twelve (12) months from the date of collection unless required for a longer period in connection with a security investigation.

Upon expiry of the applicable retention period, q666 will securely delete or anonymise your personal data in accordance with our data disposal protocols. Where data has been anonymised such that you can no longer be identified from it, q666 may retain it for analytical, statistical, or research purposes without further restriction.

q666 takes the security of your personal data extremely seriously. We implement a layered combination of technical, organisational, and procedural safeguards to protect your data against unauthorised access, accidental loss, destruction, alteration, and unlawful disclosure. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data transmissions between your device and q666 servers — the same standard used by Pakistan's major banks including HBL and UBL.
• Encryption at rest for all sensitive personal data stored within q666's database infrastructure, including financial data, identity documents, and account credentials.
• Multi-factor authentication options for Member account access, including OTP verification via registered Pakistani mobile numbers (JazzCash and EasyPaisa compatible).
• Access controls and role-based permissions ensuring that q666 staff can only access Member personal data on a strict need-to-know basis and that all access is logged and auditable.
• Intrusion detection and prevention systems monitoring q666 infrastructure in real time for unauthorised access attempts and anomalous activity.
• Regular security penetration testing conducted by independent cybersecurity specialists to identify and remediate vulnerabilities before they can be exploited.
• Incident response procedures ensuring that any personal data breach is identified, contained, and reported in accordance with applicable legal obligations without undue delay.

Notwithstanding the foregoing, no method of internet transmission or electronic storage is 100% secure. While q666 employs commercially reasonable measures to protect your personal data, we cannot guarantee absolute security. You play an important role in keeping your data safe by maintaining the confidentiality of your q666 account credentials.

The q666 platform uses cookies and similar tracking technologies (collectively, "Cookies") to enhance your experience, maintain session continuity, and collect analytics data that helps us improve the platform. A cookie is a small data file stored on your device by your browser when you visit a website.

• Strictly Necessary Cookies: Essential for the q666 platform to function. These cookies enable session management, login authentication, and security features. They cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: Collect anonymised data about how Members use the q666 platform — which games are most accessed, session durations, and navigation patterns — to help us identify areas for improvement.
• Functional Cookies: Remember your preferences such as language settings, responsible gaming configurations, and interface customisations so you do not need to re-enter them each visit.
• Marketing Cookies: Used only where you have opted in to marketing communications. These cookies help q666 understand which promotional messages are most relevant to you and avoid sending duplicate offers.

You may control cookie settings through your browser's privacy or settings menu. Disabling strictly necessary cookies will impair your ability to use the q666 platform. Disabling performance or marketing cookies will not affect your ability to play games, place bets, or manage your account, but may affect the relevance of any promotions you see. q666 does not use cookies to serve advertising from third-party ad networks on the platform.

With your explicit consent, q666 may send you promotional communications regarding bonuses, game launches, PSL cricket betting specials, new features, and other q666 offers. These communications may be delivered via SMS to your registered Pakistani mobile number or by email to your registered address. Marketing communications are sent only to Members who have opted in during registration or subsequently through their account settings.

You may opt out of marketing communications at any time by updating your communication preferences in your q666 account settings or by contacting q666 support. Opting out of marketing communications does not affect transactional communications (such as deposit confirmations, withdrawal notifications, and account security alerts), which q666 is required to send as part of the contractual service.

As a data subject whose personal data is processed by q666, you hold the following rights under applicable data protection principles. To exercise any of these rights, contact q666 at the details provided in Section 15. We will respond to all data subject requests within thirty (30) calendar days of receipt.

q666 employs robust age verification measures as part of its mandatory KYC process. All Members are required to provide proof of age before withdrawal privileges are activated. Where q666 becomes aware that personal data of a person under 21 has been inadvertently collected, such data will be immediately and permanently deleted, the associated account will be suspended, and any funds deposited will be returned to the source payment method.

If you are a parent or guardian and believe that a minor has registered an account on q666 without consent, please contact us immediately at the details in Section 15. q666 takes underage gambling extremely seriously and will act without delay to resolve any such situation.

In the course of providing services to Members across Pakistan — from Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and beyond — q666 may transfer personal data to and process it in countries outside Pakistan where our technical infrastructure, data processors, or affiliated entities are located. Such transfers may include jurisdictions that have been designated as providing adequate levels of data protection, or transfers subject to appropriate contractual safeguards (such as standard contractual clauses or data processing agreements) that require the receiving party to protect your personal data to a standard equivalent to the protections described in this Policy.

By using q666 services, you acknowledge and consent to the international transfer of your personal data as described above. q666 takes all commercially reasonable steps to ensure that international data transfers are conducted with appropriate safeguards and that your personal data receives a level of protection consistent with this Privacy Policy regardless of where it is processed.

q666 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, our gaming licence requirements, or the services we offer. When material changes are made, q666 will notify you by email to your registered address and/or by a notice on the q666 platform prior to the changes taking effect.

The current effective version of this Privacy Policy is always accessible at q666.site/privacy-policy. The "Last Updated" date at the top of this document indicates when the most recent version was published. Your continued use of the q666 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any update, you should discontinue use of the platform and contact q666 support to close your account.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data q666 holds about you — including Subject Access Requests, rectification requests, or data deletion requests — please contact q666 using the details below: