Privacy Policy – m666com Pakistan Data Protection & Player Privacy Rights

1 Introduction

This Privacy Policy applies to all users of the m666com website at https://m666com.bet and all associated services, including sports betting, live casino, jackpot slots, and account management features. m666com ("we", "us", "the Platform") is the data controller responsible for your personal information.

When you register an account at m666com, use the platform, or contact our support team, you provide us with personal data. We understand that Pakistani players value their privacy, and we are committed to handling your information with care, transparency, and respect. This policy is our complete explanation of how we do that.

By registering at m666com and accepting the Terms and Conditions, you also consent to the processing of your personal data as described in this Privacy Policy. If you do not agree with any part of this policy, you should not register or continue using m666com.

2 Data We Collect

2.1 Registration Data

When you create an account at m666com, we collect the information you provide during registration. This includes your full legal name, mobile phone number, date of birth, and the password you set for your account. If you complete identity verification (KYC), we also collect a copy of your CNIC (Computerised National Identity Card) and a photograph or selfie for identity confirmation purposes.

2.2 Transaction and Payment Data

m666com records all deposit and withdrawal transactions associated with your account, including the payment method used, the amount transacted, the date and time of the transaction, and the reference numbers provided by the payment processor. For mobile wallet payments via Easypaisa or JazzCash, we record the mobile number associated with the transaction. For card payments, we record the last four digits of the card and the card type. m666com does not store full card numbers or wallet PINs.

2.3 Betting and Gaming Activity Data

All bets placed, games played, and wagers made at m666com are recorded in association with your account. This includes the markets you bet on, the stakes and odds involved, the outcomes, and the timing of all activity. This data is used for account management, dispute resolution, fraud prevention, and regulatory compliance purposes.

2.4 Technical and Device Data

When you access m666com, our servers automatically collect certain technical information. This includes your IP address, the type and version of browser you are using, your operating system, the device type (mobile, tablet, or desktop), and the pages you visit on m666com along with the times of those visits. This data is used for security monitoring, platform optimisation, and fraud detection.

2.5 Communication Data

If you contact m666com's support team via live chat or email, we retain records of those communications to assist with ongoing queries, quality assurance, and training purposes. We also retain any feedback, complaints, or other correspondence you send to m666com.

3 How We Use Your Data

m666com uses your personal data only for specific, legitimate purposes. We do not process your data in ways that go beyond what is reasonably necessary for those purposes. The main uses of your data at m666com are as follows:

• Account Management: To create, maintain, and manage your m666com account, including login verification and security.
• Transaction Processing: To process deposits, withdrawals, and any other financial transactions through your account at m666com.
• Identity Verification (KYC): To verify your identity in accordance with anti-money laundering (AML) requirements and to comply with legal age restrictions.
• Fraud and Security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, account sharing, and other harmful behaviours on the m666com platform.
• Responsible Gaming: To monitor account activity for signs of problem gambling behaviour and to implement any responsible gaming tools or restrictions that you have requested or that m666com has applied under its responsible gaming obligations.
• Customer Support: To respond to your queries, resolve disputes, and improve the quality of m666com's support services.
• Platform Improvement: To analyse usage patterns and technical performance in order to improve m666com's features, reliability, and user experience.
• Legal Compliance: To comply with applicable laws, regulations, and lawful requests from regulatory or law enforcement authorities.
• Communications: To send transactional communications such as deposit and withdrawal confirmations, account security alerts, and important policy updates. m666com does not send unsolicited marketing emails or messages without your explicit consent.

4 Payment Data Privacy

Payment privacy is a particularly important concern for Pakistani players using mobile wallet services, and m666com takes this seriously. The way we handle payment data at m666com is designed to protect you at every stage of a transaction.

4.1 What Payment Data We Store

m666com stores the minimum payment information necessary to manage your account and comply with anti-money laundering requirements. For Easypaisa and JazzCash transactions, we store the mobile number associated with the wallet and the transaction reference. We do not store wallet PINs or passwords. For card transactions, we store only the last four digits of the card number, the card type (Visa or Mastercard), and the transaction reference — full card numbers are handled only by the PCI-DSS compliant payment processor and are never stored on m666com's servers.

4.2 Payment Method Matching

m666com records which payment method was used for each deposit specifically to enforce our method-matching withdrawal policy, which is a security measure designed to protect you from unauthorised withdrawal requests. This matching requirement means that withdrawals are routed back to the same verified payment source used for deposits where technically possible.

4.3 Payment Processor Data Sharing

To process transactions, m666com must share certain data with payment processors including the operators of Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners for IBFT transfers. Data shared with payment processors is limited to what is necessary to complete the transaction and is governed by those processors' own privacy policies and by contractual data protection obligations they hold with m666com.

5 Data Sharing

5.1 Who We Share Data With

m666com shares your personal data only in the specific circumstances described below. In all cases, data sharing is limited to what is necessary for the stated purpose, and third parties who receive your data are required to handle it in accordance with data protection obligations.

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners, and card processors receive the transaction-specific data required to process your deposits and withdrawals.
• Identity Verification Providers: Where m666com uses a third-party identity verification service to assist with KYC processing, your CNIC data and verification selfie may be shared with that provider solely for verification purposes.
• Game Software Providers: In live casino and some slot game contexts, your account identifier and game activity data may be shared with the game software provider to facilitate the game session. These providers do not receive your full personal profile.
• Fraud Prevention Services: m666com may share technical data including IP addresses and device fingerprints with fraud prevention services to identify and prevent fraudulent activity across the platform.
• Legal and Regulatory Authorities: m666com will disclose personal data to law enforcement agencies, regulators, or courts where required to do so by law, court order, or in connection with the investigation of criminal activity. We will notify you of any such disclosure unless legally prohibited from doing so.
• Business Transfers: In the event of a merger, acquisition, or sale of m666com's assets, your data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

5.2 What We Do Not Do

m666com does not sell your personal data to any third party. We do not share your data with third-party advertisers for the purposes of serving you targeted advertising outside of m666com. We do not share your data with any organisation unless there is a clear legitimate purpose as described in this policy.

6 Cookies & Tracking Technologies

m666com uses cookies and similar technologies to ensure the platform works correctly, to understand how players use the site, and to maintain session security. A cookie is a small text file placed on your device by a website. You can manage cookie preferences through your browser settings, though disabling certain cookies may affect platform functionality.

m666com does not use cookies to track your activity on other websites or to build advertising profiles. The analytics cookies used at m666com are processed in aggregate and are not linked to individual player identities for advertising purposes.

7 Data Retention

m666com retains your personal data for as long as your account is active and for a defined period after account closure. The retention periods are determined by the purpose for which the data was collected and by applicable legal obligations.

• Account and registration data is retained for the duration of the account and for five years after the account is closed, in line with standard anti-money laundering record-keeping requirements.
• Transaction records including deposits, withdrawals, and betting history are retained for five years after the relevant transaction, consistent with AML compliance obligations.
• KYC documents including CNIC copies are retained for five years after account closure or the date of last transaction, whichever is later.
• Support communications are retained for two years from the date of the last communication in the relevant thread.
• Technical and device data is retained for 12 months from collection for security and fraud analysis purposes.

After applicable retention periods expire, m666com securely deletes or anonymises the relevant data so that it can no longer be associated with any individual player.

8 Data Security

m666com implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. The specific measures in place at m666com include:

• TLS Encryption: All data transmitted between your device and m666com's servers uses Transport Layer Security (TLS) encryption, the same standard used by banks and financial institutions for online transactions.
• Encrypted Storage: Sensitive personal data including CNIC documents and financial records is stored in encrypted form on m666com's servers. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to personal player data within m666com is restricted to staff members who require it to perform their job functions. Access is logged and monitored. No staff member has blanket access to all player data without a legitimate business reason.
• Fraud Monitoring: m666com's security systems continuously monitor for suspicious account activity, unusual login patterns, and potential fraud indicators, with automated alerts for events that fall outside normal parameters.
• Regular Security Reviews: m666com conducts regular reviews of its security infrastructure and processes to identify and address vulnerabilities. Third-party security assessments are conducted periodically.

9 Your Data Rights

As a player at m666com, you have the following rights in relation to your personal data. To exercise any of these rights, contact m666com's support team via live chat or at support@m666com.bet. We will respond to all data rights requests within a reasonable timeframe.

10 Children's Privacy

m666com does not knowingly collect personal data from individuals under the age of 18. The platform is intended exclusively for adults aged 18 and over. Registration at m666com requires confirmation that the player is at least 18 years old, and identity verification (KYC) includes date of birth confirmation.

If m666com discovers that personal data has been collected from a person under the age of 18, the associated account will be suspended immediately, all data will be deleted, and any deposits will be returned via the original payment method. If you believe a minor has registered at m666com, please contact our support team immediately with the relevant details and we will act without delay.

Parents and guardians are encouraged to use device-level parental controls to prevent minors from accessing online gambling sites including m666com. m666com recommends not leaving devices logged into m666com unattended in environments where minors may have access.

11 International Data Transfers

m666com's primary operations are focused on Pakistan. However, some of the technology infrastructure and third-party service providers used by m666com may be located outside Pakistan. Where your personal data is transferred to and processed in countries outside Pakistan, m666com ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or greater than what is required within Pakistan.

These safeguards may include contractual data protection clauses with service providers, adherence to internationally recognised data protection frameworks, and the use of technically secure data transfer mechanisms. m666com will not transfer your data internationally except where necessary to provide the services you use at m666com and where appropriate protections are confirmed to be in place.

12 Updates to This Privacy Policy

m666com may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer. When we make changes, we will update the "Last Updated" date at the top of this page. For significant changes that materially affect how we handle your personal data, we will notify registered players via the mobile number or email address associated with their account.

We encourage you to review this Privacy Policy periodically. Your continued use of m666com following the posting of an updated Privacy Policy constitutes your acceptance of the changes. If you have questions about any update, contact our support team and we will explain the changes clearly.

13 Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a complaint about how m666com has handled your personal data, you can contact us through the following channels:

When submitting a data rights request, please include your registered mobile number and full name so that we can verify your identity before processing the request. This verification step is necessary to prevent unauthorised access to account data.

If you are not satisfied with m666com's response to a privacy complaint, you have the right to escalate the matter through appropriate legal or regulatory channels available in your jurisdiction. m666com takes all privacy complaints seriously and will work with you to reach a fair resolution.