99x666 Privacy Policy

1 Who We Are

99x666 (referred to in this Privacy Policy as "99x666", "we", "us", or "our") operates the online gaming platform accessible at 99x666.one. The platform offers casino games, live dealer tables, sports and cricket betting, jackpot titles, slot machines, and fishing arcade games to registered players in Pakistan.

99x666 acts as the Data Controller for all personal data collected through the registration process, account management, gameplay activity, financial transactions, and customer support interactions on the 99x666 platform.

For all data-related enquiries, requests, or complaints, you may contact us at [email protected] (plain text — not a clickable link).

2 Scope of This Policy

This Privacy Policy applies to all personal data processed by 99x666 in connection with:

• Registration and management of a 99x666 player account;
• Deposits and withdrawals using JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or any other accepted payment method;
• Casino gameplay, live dealer sessions, sports and cricket betting activity;
• Communications with 99x666 customer support (live chat, email);
• Participation in 99x666 promotional campaigns, bonuses, or VIP programmes;
• Browsing the 99x666 website, including cookie-based and technical data collection.

3 Data We Collect

99x666 collects and processes the following categories of personal data from registered players and website visitors:

3.1 Identity Data

4 How We Collect Your Data

99x666 collects personal data through the following mechanisms:

• Direct submission: Information you provide during account registration, KYC verification, deposit and withdrawal requests, and customer support interactions;
• Automated collection: Technical and device data collected automatically through your browser and session activity on 99x666.one, including via cookies and similar technologies (see Section 8);
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank following successful deposit or withdrawal processing;
• Third-party identity verification: Results of automated CNIC verification and liveness checks conducted by our KYC service provider in connection with your account verification;
• Fraud prevention systems: Risk signals and device fingerprinting data generated by our anti-fraud platform in connection with login events and financial transactions.

5 How We Use Your Personal Data

99x666 uses the personal data it collects for the following purposes:

6 Legal Basis for Processing

99x666 processes personal data on the following lawful bases:

• Contractual necessity: Processing required to register your account, process deposits and withdrawals, provide gaming services, and manage your player relationship with 99x666;
• Legal obligation: Processing required to comply with our international gaming licence obligations, anti-money laundering (AML) requirements, and mandatory KYC verification;
• Legitimate interests: Processing for fraud prevention, platform security monitoring, responsible gaming safeguards, and internal analytics — where such interests are not overridden by your fundamental rights;
• Consent: Processing for direct marketing communications, where you have actively opted in to receive promotional messages from 99x666. You may withdraw consent at any time.

7 Data Sharing & Third Parties

99x666 does not sell, rent, or commercially trade your personal data. We share data only with the following categories of third parties, strictly for the purposes described:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive transaction data necessary to process PKR deposits and withdrawals on your behalf;
• KYC verification providers: Our identity verification partner receives CNIC scan data and selfie photographs for automated identity and age verification in compliance with our licensing requirements;
• Anti-fraud and security providers: Device fingerprinting and risk-scoring providers receive technical and device data to assist in detecting and preventing fraud;
• Game providers: Casino and live dealer game providers may receive your player identifier and gaming session data to deliver games within the 99x666 platform;
• Regulatory authorities: We are obligated to share specified data with our licensing authority and, where legally required, with law enforcement agencies or financial intelligence units;
• IT and hosting providers: Infrastructure and cloud service providers who process data on our behalf under strict data processing agreements.

8 Cookies & Tracking Technologies

99x666 uses cookies and similar tracking technologies on the 99x666.one website. These include:

• Strictly necessary cookies: Essential for the operation of your account session, login state persistence, and basic platform functionality. These cookies cannot be disabled without affecting platform use;
• Performance cookies: Used to collect anonymised analytics data about how Pakistani players navigate and use the 99x666 platform, enabling us to identify and fix performance issues;
• Functional cookies: Used to remember your preferences, such as language settings (Urdu or English) and game lobby filters, between sessions;
• Security cookies: Used for session authentication, CSRF token management, and protection against login brute-force attacks.

You may control cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or prevent your ability to log in and use the 99x666 platform.

9 Data Security

99x666 implements technical and organisational security measures proportionate to the sensitivity of the data we hold. These include:

• 256-bit SSL/TLS encryption on all data in transit between your device and 99x666 servers;
• Encrypted storage of all personal and financial data at rest on secured servers;
• Role-based access controls limiting internal access to personal data to authorised personnel only;
• SMS one-time password (OTP) verification for new-device logins and high-value withdrawal requests;
• Regular security audits and penetration testing of the 99x666 platform;
• Incident response procedures governing the detection, containment, and notification of any personal data breach.

While 99x666 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own login credentials and should report any suspected unauthorised access immediately.

10 Data Retention

99x666 retains personal data for the following periods:

• Active accounts: All personal, financial, and gaming activity data is retained for the duration of your active 99x666 account and for a minimum of five years following account closure, as required by our international gaming licence and applicable AML regulations;
• KYC documents: CNIC scans, selfie photographs, and identity verification records are retained for a minimum of five years post-account closure in compliance with anti-money laundering requirements;
• Support communications: Live chat and email support records are retained for three years following the date of the last interaction;
• Marketing opt-in records: Records of marketing consent are retained for the duration of the consent and for two years following withdrawal of consent;
• Technical and device data: Session logs and device fingerprinting data are retained for up to 13 months for fraud prevention and security purposes.

Upon expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised in accordance with 99x666's internal data deletion procedures.

11 Your Data Rights

As a registered 99x666 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days of receiving a verified request:

• Right of Access: You have the right to request a copy of all personal data 99x666 holds about you, including your transaction history, gaming records, and KYC submission status.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by 99x666 be corrected. Account name changes require re-submission of KYC documents.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where 99x666 no longer has a lawful basis to retain it. Note that mandatory retention obligations (e.g., AML, licensing) may override this right in whole or in part.
• Right to Restriction: You have the right to request that 99x666 restricts the processing of your personal data in certain circumstances — for example, while a rectification request is being resolved.
• Right to Portability: You may request that 99x666 provide your personal data in a structured, commonly used, machine-readable format for transfer to another controller.
• Right to Object: You have the right to object to processing based on 99x666's legitimate interests, including direct marketing. Marketing opt-outs take effect within 48 hours of your request.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing messages), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

12 Children's Privacy

The 99x666 platform is strictly intended for adults aged 21 and above. We do not knowingly collect or process personal data from persons under the age of 21. If you are a parent or guardian and believe that a minor has registered on 99x666, please contact our support team immediately at [email protected]. We will investigate and, if confirmed, immediately close the account and securely delete all associated data.

13 Marketing Communications

99x666 may send you promotional communications about reload bonuses, PSL cricket betting markets, new game launches, VIP tier updates, and special events — but only where you have explicitly opted in to receive such communications during registration or via your account marketing preferences.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in your 99x666 account dashboard under Settings > Notifications;
• Replying "STOP" to any SMS promotional message from 99x666;
• Contacting support via live chat or email to request removal from all marketing lists.

Opting out of marketing communications does not affect the receipt of transactional communications (e.g., deposit confirmations, withdrawal notifications, security alerts), which are sent as part of your account service regardless of marketing preferences.

14 Third-Party Links

The 99x666 platform may contain references to third-party services (for example, game provider documentation or payment method help pages). This Privacy Policy applies only to data processed directly by 99x666. We are not responsible for the privacy practices of any third-party websites or services. We recommend reviewing the privacy policies of any third-party service you access in connection with your 99x666 account.

15 Changes to This Privacy Policy

99x666 may update this Privacy Policy periodically to reflect changes in our data practices, applicable law, or licensing requirements. When material changes are made, we will notify registered players via their registered mobile number or via a prominent notice on the 99x666 platform at least seven (7) calendar days before the changes take effect.

The date of the most recent update is displayed at the top of this Privacy Policy. Continued use of the 99x666 platform after an updated Privacy Policy takes effect constitutes acceptance of the revised policy. If you do not accept the changes, you may request account closure before the effective date.

16 Contact Us & Data Complaints

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about 99x666's data processing practices, please contact us:

• Email: [email protected] — plain text only, not a clickable link;
• Live Chat: Available 24/7 directly on the 99x666 platform in English and Urdu;
• Response time: Data rights requests are acknowledged within 5 business days and resolved within 30 calendar days of receipt.

If you are not satisfied with 99x666's response to a data complaint, you have the right to escalate your complaint to the supervisory authority in the jurisdiction in which 99x666 holds its international gaming licence, in accordance with applicable data protection legislation.