1. Who We Are
y666 (referred to in this Privacy Policy as "y666", "we", "us", or "our") is an international online casino and sports betting platform accessible at y666.one. y666 is the data controller responsible for the personal information collected from users who register and access the platform, including Pakistani players who deposit in PKR and use JazzCash, Easypaisa, or other supported payment methods.
This Privacy Policy applies to all personal data collected through the y666 website, mobile-optimised platform, customer support channels, and any associated services provided by y666. It should be read in conjunction with y666's Terms & Conditions.
2. Data We Collect
y666 collects personal data in the following categories:
- Identity data: Full name, date of birth, gender, government-issued identification number (where required for KYC verification), and copies of identity documents such as CNIC for Pakistani users.
- Contact data: Email address, mobile telephone number (including Pakistani mobile numbers used for JazzCash or Easypaisa), and residential address.
- Account data: Username, encrypted password, account preferences, communication settings, and VIP tier status.
- Financial data: PKR deposit and withdrawal history, transaction records, payment method details (such as JazzCash mobile wallet reference numbers, Easypaisa transaction IDs, and bank account details where applicable). y666 does not store full card numbers; card payment processing is handled by PCI-DSS-compliant payment processors.
- Gaming and betting data: Wager history, game session logs, bet amounts, PSL and cricket betting activity, casino game play records, and responsible gaming settings.
- Technical data: IP address, device type, operating system, browser type and version, time zone, approximate geographic location, session duration, and platform interaction logs.
- Communications data: Records of live chat support conversations, email correspondence, and any feedback submitted through the y666 platform.
3. How We Use Your Data
y666 uses the personal data it collects for the following purposes:
- Account management: To create, maintain, and administer your y666 account, verify your identity, and process login requests.
- Service delivery: To provide access to sports betting markets (including PSL cricket), live casino tables, slot games, and all other y666 platform features.
- Payment processing: To process PKR deposits via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa/Mastercard, and USDT TRC20, and to execute withdrawal requests to verified payment methods.
- Fraud prevention and AML compliance: To monitor transactions and account activity for signs of fraud, money laundering, or prohibited conduct as required by applicable anti-money laundering obligations.
- KYC verification: To verify the identity and age of users as required by y666's responsible gaming commitments and applicable regulatory frameworks.
- Customer support: To respond to enquiries, resolve disputes, and provide assistance via live chat and email.
- Responsible gaming: To monitor gaming behaviour and enforce responsible gaming limits, deposit caps, session reminders, and self-exclusion requests where applicable.
- Platform improvement: To analyse usage patterns and technical performance data in order to improve the y666 platform, optimise mobile performance, and develop new features.
- Marketing communications: To send promotional offers, bonus notifications, and PSL season updates to users who have opted in to receive marketing communications. You may opt out at any time via account settings or by contacting support.
4. Legal Basis for Processing
y666 processes personal data on the following legal bases:
- Contractual necessity: Processing required to fulfil y666's obligations to you under the Terms & Conditions — including account creation, service delivery, and payment processing.
- Legal obligation: Processing required to comply with applicable anti-money laundering laws, KYC verification requirements, and regulatory reporting obligations.
- Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and the improvement of y666 services, where such interests are not overridden by your data protection rights.
- Consent: Processing of personal data for direct marketing communications, where you have given explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing based on consent prior to its withdrawal.
5. Payment Data & Financial Information
y666 processes financial transaction data in connection with PKR deposits and withdrawals made through supported payment methods including JazzCash, Easypaisa, HBL Internet Banking, UBL Digital, Meezan Bank, Bank Alfalah, Visa/Mastercard, and USDT TRC20. The following data handling principles apply to all financial data processed by y666:
- Full payment card numbers are never stored by y666. Card payment processing is delegated entirely to PCI-DSS Level 1 certified third-party payment processors.
- JazzCash and Easypaisa mobile wallet transaction references are retained for the minimum period required to fulfil regulatory reporting and dispute resolution obligations.
- PKR transaction records — including deposit amounts, timestamps, and withdrawal history — are retained as part of your account record and are accessible in your transaction history within the y666 platform.
- All financial data transmissions between y666 and third-party payment processors are encrypted using industry-standard TLS/SSL protocols.
6. Cookies & Tracking Technologies
y666 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:
- Strictly necessary cookies: Required for platform functionality, including maintaining your logged-in session, remembering language preferences, and enabling secure payment flows. These cookies cannot be disabled without breaking core platform features.
- Performance cookies: Used to collect anonymous data about how users interact with the y666 platform — such as page load times, navigation paths, and error reports — to help improve performance for Pakistani mobile users.
- Functionality cookies: Used to remember your preferences, such as your preferred deposit method (e.g., JazzCash or Easypaisa) and your responsible gaming limit settings.
- Analytics cookies: Used to understand aggregate user behaviour on the y666 platform through privacy-compliant analytics tools. No personally identifiable information is shared with analytics providers.
You may manage cookie preferences through your browser settings. Please note that disabling certain cookie categories may affect your ability to use some y666 platform features.
7. Data Sharing & Third Parties
y666 does not sell, rent, or otherwise trade personal data to third parties for their own marketing purposes. y666 may share your personal data with the following categories of third parties only to the extent strictly necessary:
- Payment processors: JazzCash, Easypaisa, and other PKR payment service providers, card processing networks, and cryptocurrency exchange services — solely for the purpose of processing your transactions.
- Identity verification providers: Third-party KYC and age verification services used to confirm your identity and comply with responsible gaming requirements.
- Game content providers: Licensed game studios (e.g., Evolution Gaming, Pragmatic Play, Hacksaw Gaming) who may receive technical session data necessary to deliver certified gaming content.
- Regulatory and legal authorities: y666 may disclose personal data to regulators, law enforcement agencies, or judicial bodies when required to do so by applicable law or in connection with fraud or money laundering investigations.
- Platform service providers: Cloud infrastructure, cybersecurity, and customer support platform providers operating under binding data processing agreements with y666.
All third parties with whom y666 shares personal data are required to implement appropriate technical and organisational security measures and are contractually prohibited from using your data for any purpose beyond the specific service they provide to y666.
8. Data Retention
y666 retains personal data for the period necessary to fulfil the purposes described in this Privacy Policy, subject to any longer retention periods required by applicable law. In general:
- Active account data is retained for the duration of your y666 account and for a minimum of five (5) years following account closure, in accordance with AML and financial record-keeping obligations.
- Transaction and financial records are retained for a minimum of five (5) years from the date of the relevant transaction.
- Customer support communications are retained for a minimum of three (3) years from the date of the last interaction.
- Marketing consent records are retained for three (3) years from the date of consent, or until consent is withdrawn, whichever is earlier.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with y666's data destruction procedures.
9. Your Rights
Subject to applicable law, you have the following rights in relation to the personal data y666 holds about you:
- Right of access: You may request a copy of the personal data y666 holds about you.
- Right to rectification: You may request correction of inaccurate or incomplete personal data in your y666 account profile.
- Right to erasure: You may request deletion of your personal data, subject to y666's legal retention obligations (for example, AML and financial record-keeping requirements may prevent full deletion prior to the end of the mandatory retention period).
- Right to restrict processing: You may request that y666 restrict the processing of your personal data in certain circumstances.
- Right to data portability: Where processing is based on consent or contractual necessity, you may request a structured, machine-readable copy of the personal data you have provided to y666.
- Right to withdraw consent: Where y666 processes your data on the basis of consent (e.g., marketing communications), you may withdraw consent at any time via account settings or by contacting support.
To exercise any of these rights, please contact y666's support team via the live chat widget available 24/7 on the platform, or by email at [email protected]. y666 aims to respond to all data subject requests within 30 days of receipt.
10. Security Measures
y666 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:
- 256-bit SSL/TLS encryption for all data in transit between your device and y666's servers.
- Encryption of sensitive data fields at rest within y666's database infrastructure.
- Two-factor authentication (2FA) available on all y666 accounts to prevent unauthorised login.
- Regular security audits and penetration testing of y666's platform and infrastructure.
- Strict access controls limiting employee access to personal data on a need-to-know basis.
- Active session monitoring and the ability to revoke unrecognised login sessions via account settings.
Notwithstanding these measures, no internet transmission is completely secure. y666 cannot guarantee the absolute security of data transmitted to or from the platform. In the event of a data breach that poses a risk to your rights and freedoms, y666 will notify affected users in accordance with applicable data breach notification requirements.
11. Children's Privacy
y666 does not knowingly collect personal data from individuals under the age of 18. The platform is strictly intended for adult users. If y666 becomes aware that personal data has been collected from a user under 18, the relevant account will be suspended immediately and the data will be deleted as promptly as possible, subject to any legal obligations requiring its temporary retention. Parents or guardians who believe their child has registered on y666 should contact support immediately via the live chat widget or email.
12. Changes to This Privacy Policy
y666 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered users via email notification or a prominent notice on the y666 platform at least 14 days before the changes take effect. Continued use of y666 following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. The current version of this Privacy Policy is always available on this page, with the effective date displayed in the header.
13. Contact & Data Enquiries
If you have any questions, concerns, or requests relating to this Privacy Policy or y666's handling of your personal data, please contact us via:
- Live Chat: Available 24/7 via the chat widget on the y666 platform.
- Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in your subject line for faster routing.
y666 aims to acknowledge all privacy-related communications within 48 hours and to resolve substantive data subject requests within 30 calendar days of receipt.