Privacy Policy

1.1 q666 ("we," "us," "our," "the Operator") operates Pakistan's premier online gaming and sports betting platform. As part of delivering our services to Pakistani players, q666 necessarily collects and processes personal data relating to registered account holders and, in limited circumstances, individuals who interact with the platform without registering.

1.2 q666 takes its data protection obligations seriously — not merely because our international gaming licence requires it, but because the 850,000+ Pakistani players who trust q666 with their real PKR deserve a platform that handles their personal information with the same care and transparency they expect from their money.

1.3 This Privacy Policy has been drafted in clear English and is available at all times via the q666 platform. Pakistani players who prefer to discuss privacy matters in Urdu may contact q666's support team via live chat at any time — our Urdu-speaking support staff are available 24 hours a day, 7 days a week.

1.4 This policy should be read alongside q666's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference and address matters that intersect with data processing.

q666 collects the following categories of personal data from Pakistani players, depending on their level of engagement with the platform:

q666 collects personal data through the following channels and mechanisms:

4.1 Directly from You

• When you complete the q666 account registration form
• When you submit KYC verification documents in response to a verification request
• When you initiate a deposit or withdrawal transaction
• When you contact q666's support team via live chat or email
• When you set responsible gaming limits or submit a self-exclusion request
• When you respond to surveys, promotions, or feedback requests

4.2 Automatically During Platform Use

• Through server logs that record IP addresses, access times, and pages visited
• Through device fingerprinting technology used for fraud prevention and account security
• Through session analytics that record game interactions, bet placement sequences, and session duration
• Through cookies and similar tracking technologies as detailed in Section 9

4.3 From Third Parties

• From KYC verification service providers who confirm identity document authenticity
• From payment processors who confirm transaction status and flag suspicious payment activity
• From fraud prevention databases that identify patterns associated with account fraud or financial crime

q666 processes personal data only where a legitimate legal basis exists for doing so. The table below sets out the primary purposes for which q666 processes player data and the corresponding legal basis for each:

6.1 q666 does not sell personal data. q666 does not share personal data with third parties for their own marketing or commercial profiling purposes under any circumstances.

6.2 q666 shares personal data with the following categories of third parties, strictly on a need-to-know basis and subject to binding data processing agreements:

• KYC Verification Providers: Identity data and CNIC documentation shared for age and identity verification under q666's international licensing obligations
• Payment Processors: Financial data shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT network providers to facilitate deposits and withdrawals
• Fraud Prevention Services: Technical data and transaction patterns shared with fraud screening providers to detect and prevent financial crime
• Cloud Infrastructure Providers: Personal data hosted on secure cloud infrastructure under strict data processing agreements that prohibit independent use of the data
• Game Software Providers: Anonymised or pseudonymised gaming activity data shared with game providers for RNG certification and technical audit purposes only
• Regulatory and Licensing Authorities: Data shared with licensing and regulatory bodies as required under q666's applicable gaming licences
• Law Enforcement: Data disclosed to Pakistani or international law enforcement agencies where required by valid legal process or court order

6.3 All third-party data processors are contractually required to process personal data only for the specific purposes for which it was shared, to implement appropriate technical and organisational security measures, and to return or securely destroy data when processing is complete.

7.1 q666 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention period required by applicable legal, licensing, or regulatory obligations.

7.2 The following retention periods apply to key categories of player data:

• Account and Identity Data: Retained for the lifetime of the active account plus 5 years following account closure, for compliance audit purposes
• Financial Transaction Data: Retained for a minimum of 5 years from the date of each transaction under anti-money laundering record-keeping obligations
• Gaming Activity Data: Retained for 3 years from the date of each session for responsible gaming monitoring and dispute resolution purposes
• KYC Documentation: Retained for 5 years from the date of verification under applicable compliance obligations
• Communication Data: Live chat transcripts retained for 2 years; email correspondence retained for 3 years
• Technical / Log Data: Server logs retained for 12 months for security and fraud investigation purposes
• Self-Exclusion Records: Retained indefinitely to prevent circumvention of self-exclusion decisions by re-registration

7.3 Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification.

8.1 q666 implements comprehensive technical and organisational security measures to protect player personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between players' devices and q666's servers
• AES-256 encryption for personal data stored at rest within q666's database infrastructure
• Role-based access control ensuring that q666 personnel access personal data only where required for their specific job function
• Comprehensive access logging and audit trails for all access to personal data by q666 personnel
• Regular penetration testing and vulnerability assessments conducted by independent security firms
• Multi-factor authentication required for all q666 personnel accessing systems that contain personal data
• Secure development practices including code review and security testing for all platform updates

8.2 In the event of a personal data breach that poses a risk to Player rights, q666 will notify affected Players via their registered email address within 72 hours of becoming aware of the breach, detailing the nature of the incident, the data affected, and the steps q666 has taken to mitigate its impact.

8.3 Players are reminded that account security also depends on their own conduct. Maintaining a strong, unique password and enabling two-factor authentication on your q666 account are strongly recommended. q666 is not liable for security breaches resulting from a Player's failure to maintain adequate credential security.

9.1 q666 uses cookies and similar tracking technologies on the q666 platform to ensure the platform functions correctly, to maintain your session state while you are logged in, to detect and prevent fraudulent activity, and to understand aggregate usage patterns for platform improvement purposes.

9.2 The following categories of cookies are used on the q666 platform:

• Essential Cookies: Strictly necessary for the platform to function. These cookies maintain your login session, remember your responsible gaming settings, and enable secure transaction processing. They cannot be disabled without preventing platform use.
• Security Cookies: Used for fraud detection, bot prevention, and device fingerprinting to protect your account and the platform's integrity. These operate in the background and do not track your browsing outside the q666 platform.
• Analytics Cookies: Used to understand how players navigate the q666 platform in aggregate — which games are most visited, where players encounter errors, and how the platform can be improved. Analytics data is aggregated and anonymised.
• Preference Cookies: Remember your language, display, and notification preferences so you do not have to reset them each session.

9.3 q666 does not use third-party advertising or retargeting cookies. Your browsing behaviour on q666 is not shared with advertising networks for the purpose of displaying targeted advertisements outside the q666 platform.

9.4 You may manage non-essential cookie preferences via the cookie settings panel accessible from the q666 platform footer. Disabling analytics or preference cookies will not affect your ability to use any core gaming or betting functionality.

10.1 As a q666 player whose personal data is processed by q666, you hold the following rights in relation to your personal data:

• Right of Access: You may request a copy of all personal data q666 holds about you. q666 will provide this within 30 days of a verified request, free of charge for the first request in any 12-month period.
• Right to Rectification: You may request correction of inaccurate personal data. For most contact and preference data, corrections can be made directly from within your Account Dashboard without contacting support.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where q666 no longer has a legitimate purpose for retaining it. This right is subject to q666's legal retention obligations — financial transaction data, for example, must be retained for compliance purposes even after account closure.
• Right to Restrict Processing: You may request that q666 restrict processing of your personal data in certain circumstances — for example, while the accuracy of your data is being disputed.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format for transfer to another service provider, where technically feasible.
• Right to Object: You may object to q666's processing of your personal data where that processing is based on q666's legitimate interests. q666 will cease processing unless compelling legitimate grounds exist that override your interests.
• Right to Withdraw Consent: Where q666 processes your data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

10.2 To exercise any of these rights, contact q666's support team via live chat or at [email protected] (plain text only — not a clickable link). q666 may require identity verification before processing rights requests to protect against fraudulent access to another Player's data.

10.3 q666 will respond to all data rights requests within 30 calendar days of receipt of a verified request. In cases of complexity or high volume, this period may be extended by a further 60 days with prior notice to the Player.

11.1 The q666 platform is strictly for adults aged 21 and above. q666 does not knowingly collect, process, or retain any personal data from individuals under the age of 21.

11.2 If q666 becomes aware that personal data has been collected from a person under 21 — through KYC verification, parental notification, or any other means — the associated Account will be immediately closed, all personal data will be securely deleted to the extent not required for compliance purposes, and any deposited funds will be returned to the source payment method.

11.3 Parents and guardians who become aware that a person under 21 in their household has registered a q666 account are encouraged to contact q666's support team immediately via live chat. q666 will prioritise such notifications and act within 24 hours of receipt.

12.1 q666's platform infrastructure and some of its third-party service providers operate systems and servers located outside Pakistan. Accordingly, personal data collected from Pakistani players may be transferred to and processed in jurisdictions other than Pakistan.

12.2 Where personal data is transferred internationally, q666 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that applied within Pakistan, including:

• Binding contractual clauses with all international data processors that impose data protection obligations equivalent to those applied by q666
• Transfer only to jurisdictions that q666's licensing authority considers to provide adequate data protection standards
• Technical safeguards including encryption in transit that apply regardless of the jurisdiction through which data passes

12.3 Players may request information about the specific international transfers affecting their personal data by contacting q666's support team.

13.1 q666 may send promotional and marketing communications to registered Players regarding new games, bonus offers, VIP programme updates, and platform news, where the Player has consented to receive such communications at registration or has subsequently opted in.

13.2 Marketing communications from q666 are delivered via SMS to registered Pakistani mobile numbers and/or via email to the registered email address on the Account. q666 does not use push notification marketing for Players who have not explicitly enabled it.

13.3 Players may opt out of marketing communications at any time by:

• Adjusting communication preferences in the Account Dashboard under Settings > Notifications
• Clicking the unsubscribe link included in every q666 marketing email
• Contacting q666 support via live chat and requesting removal from marketing lists

13.4 Opting out of marketing communications will not affect the delivery of service communications — transactional messages relating to deposits, withdrawals, account security, and responsible gaming notifications will continue to be sent regardless of marketing preferences.

13.5 q666 does not send marketing communications to Players who are subject to self-exclusion or account restriction under responsible gaming measures.

14.1 q666 processes gaming activity data as part of its responsible gaming monitoring programme. This involves automated analysis of betting patterns, session durations, redepositing frequency, and other behavioural indicators to identify Players who may be experiencing difficulty managing their gambling activity.

14.2 Where automated monitoring identifies a Player as potentially at risk, a member of q666's responsible gaming team — a real person, not a bot — will review the case and may proactively contact the Player via their registered contact method to offer support and information about available tools.

14.3 Responsible gaming data, including self-exclusion records, deposit limit settings, and risk assessments, is classified as Sensitive Data within q666's data framework and is subject to the most stringent access controls within q666's systems. This data is never used for commercial profiling or marketing purposes.

14.4 Self-exclusion records are retained indefinitely — even after account closure — to prevent circumvention of exclusion decisions through re-registration. This retention is a mandatory requirement under q666's responsible gaming obligations and takes precedence over erasure requests in relation to self-exclusion records specifically.

For comprehensive information on q666's responsible gaming tools and commitment, please visit our Responsible Gaming page.

15.1 q666 reviews and updates this Privacy Policy periodically to reflect changes in data processing practices, applicable law, licensing requirements, or platform functionality. The effective date at the top of this page reflects the date of the most recent revision.

15.2 For material changes — meaning changes that substantively affect how q666 collects, uses, or shares player personal data — q666 will notify registered Players via their registered email address at least 14 days before the revised policy takes effect, and will display a prominent notification on the q666 platform during that period.

15.3 For non-material changes — such as clarifications, typographical corrections, or updated contact details — q666 may update the policy immediately upon publication without individual notification, noting the change in the revision history.

15.4 Continued use of the q666 platform following the effective date of any revised Privacy Policy constitutes acceptance of the updated policy. Players who do not accept the revised policy should cease using the platform and may request account closure in accordance with the Terms & Conditions.

For all privacy-related enquiries, data rights requests, or concerns about q666's handling of your personal data, please contact q666 through the following channels:

• Live Chat: Available 24/7 in English and Urdu via the on-site chat widget — average response time 3–5 minutes
• Email: [email protected] (plain text only — this is not a clickable link)
• Data Rights Requests: Please title your message "Data Rights Request" and include your registered mobile number for identity verification
• Response Time: All privacy enquiries acknowledged within 48 hours; substantive responses within 30 calendar days
• Languages: Privacy enquiries accepted in English and Urdu