Privacy Policy — 666 RS Online Gaming Platform Pakistan

1Information We Collect

666 RS collects personal information only when it is necessary for operating the platform, processing your transactions, verifying your identity, or improving the service we provide to you. We do not collect data simply to have it — every category below serves a specific operational or regulatory purpose.

1.1 Registration Information

When you create an account at 666 RS, we collect your full legal name, date of birth, Pakistani mobile number, email address, and a username of your choice. This information is required to open your account, communicate with you, and verify your identity during any disputes or account reviews.

1.2 Identity Verification (KYC) Data

To comply with anti-fraud standards and protect all players, 666 RS requires identity verification before processing withdrawals above certain thresholds. KYC documents collected include a copy of your Pakistani CNIC (Computerised National Identity Card) or valid passport, and where required, a selfie alongside the document to confirm identity. These documents are used solely for verification and are not shared with any third party except authorised fraud prevention services.

1.3 Financial Transaction Data

666 RS records all deposit and withdrawal transactions associated with your account. This includes transaction amounts, timestamps, payment method identifiers (such as your Easypaisa account number or the last four digits of a bank card), and transaction reference numbers. Full card details and complete mobile wallet numbers are processed by our payment partners and are not stored on 666 RS servers.

1.4 Gaming Activity Data

We collect records of all bets placed, games played, game outcomes, session durations, bonus usage, and cashout actions on the 666 RS platform. This data is used for account management, dispute resolution, provably fair verification, responsible gaming monitoring, and service improvement.

1.5 Technical and Device Data

• IP address at the time of registration and each login session
• Device type, operating system, and browser version
• Mobile carrier information (where available from device headers)
• Session start and end times, pages visited, and actions taken
• Cookie identifiers and local storage data (see Section 7)

1.6 Communication Records

If you contact 666 RS via live chat, email, or any other channel, we retain a record of that communication for a minimum of 12 months. These records are used for quality assurance, dispute resolution, and to ensure continuity when you contact us about an ongoing issue.

2How We Use Your Data

Every piece of data collected by 666 RS is used for one or more of the following purposes. We do not process your data for purposes that are incompatible with those listed below without first obtaining your explicit consent.

2.1 Marketing Communications

With your explicit consent given during registration or updated in your account settings, 666 RS may send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, and special offers. You can withdraw this consent at any time in your account notification settings. Withdrawing marketing consent does not affect your ability to use the 666 RS platform or receive transactional communications.

2.2 Responsible Gaming Monitoring

Gaming activity data at 666 RS is used to monitor for patterns that may indicate problem gambling behaviour — such as significantly increased bet sizes, rapid loss chasing, or extended uninterrupted sessions. This monitoring is conducted to protect players, not to penalise them. If our systems flag a concern, our responsible gaming team will reach out to check in. No action is taken against player accounts based on responsible gaming monitoring alone.

3Legal Basis for Processing

666 RS processes your personal data on one or more of the following legal bases, depending on the specific data and purpose involved:

• Contractual necessity: Processing required to fulfil the account agreement between you and 666 RS — such as processing deposits, settling bets, and paying withdrawals
• Legitimate interests: Processing necessary for 666 RS's legitimate business interests — such as fraud detection, platform security, and service improvement — where these interests are not overridden by your rights
• Legal obligation: Processing required to comply with applicable anti-money laundering regulations, identity verification requirements, and record-keeping obligations
• Consent: Processing based on your explicit consent — specifically for marketing communications. You may withdraw consent at any time without affecting other processing

For any processing activity where the legal basis is not immediately apparent from the description above, you may request clarification by contacting our support team. We will provide a written explanation within 7 business days.

4Data Sharing and Third Parties

666 RS does not sell, rent, or trade your personal data with marketers or data brokers under any circumstances. Data sharing with third parties is limited to the specific categories below, each governed by strict data processing agreements.

4.1 Payment Service Providers

To process your deposits and withdrawals, 666 RS shares relevant transaction information with payment processors supporting Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT transfers, and card payment networks. These processors receive only the data necessary to complete your specific transaction and are contractually prohibited from using it for any other purpose.

4.2 Identity Verification Services

During KYC verification, your identity documents may be processed by a third-party identity verification service partner. These partners operate under strict data processing agreements and are permitted to use your KYC data only for the verification process requested by 666 RS.

4.3 Fraud Prevention and Security Services

666 RS uses specialist third-party fraud detection services to identify suspicious account activity, prevent money laundering, and protect all players on the platform. These services may process your IP address, device fingerprint, and transaction patterns. They do not receive your full name, CNIC, or payment credentials.

4.4 Legal and Regulatory Authorities

We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts when we are legally required to do so — for example, in response to a valid legal process. 666 RS will notify you of such disclosure where legally permitted.

5Data Security

Protecting your personal data is a core responsibility at 666 RS. We implement multiple layers of technical and organisational security measures to prevent unauthorised access, data loss, and misuse.

5.1 Technical Security Measures

• All data transmitted between your device and 666 RS is protected using TLS 1.3 SSL encryption
• Stored personal data is encrypted at rest using AES-256 encryption
• KYC documents are stored in access-controlled secure storage environments with full audit trails
• Payment card data is tokenised by our payment processors — full card numbers are never stored on 666 RS systems
• Two-factor authentication is available for all player accounts and is mandatory for staff accounts

5.2 Organisational Security Measures

• Access to player personal data is restricted to staff with a clear operational need
• All team members with data access are subject to confidentiality agreements
• Security training is conducted for all relevant 666 RS staff on a regular basis
• Platform security is reviewed periodically by internal and external security assessments

5.3 Data Breach Response

In the event of a data security incident affecting your personal information, 666 RS will notify affected players by email within 72 hours of confirming the breach. The notification will describe the nature of the incident, what data was affected, what actions we have taken to contain it, and what steps you should take to protect yourself.

6Data Retention

666 RS retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data: retained for the lifetime of your active 666 RS account plus 5 years after closure
• Financial transaction records: retained for 7 years from the date of the transaction, as required for financial record-keeping compliance
• KYC documents: retained for 5 years after account closure or your last transaction, whichever is later
• Gaming activity logs: retained for 5 years for dispute resolution and responsible gaming purposes
• Support communication records: retained for 3 years from the date of the last interaction
• Marketing consent records: retained until you withdraw consent or for 3 years from the date of last marketing interaction

After applicable retention periods expire, personal data is securely deleted or anonymised. Anonymised data (from which you cannot be identified) may be retained indefinitely for analytical purposes.

7Cookies and Similar Technologies

The 666 RS website uses cookies and similar local storage technologies to provide core platform functionality, remember your preferences, and understand how the platform is being used. Cookies do not contain your personal data and cannot be used to identify you by name.

666 RS does not use advertising cookies or third-party tracking technologies that follow your activity on other websites. Your browsing activity outside of 666rs.wine is not monitored or recorded. You can manage cookie settings in your browser, but disabling essential cookies will prevent core platform features from functioning correctly.

8Your Data Rights

As a player at 666 RS, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team at support@666rs.wine with "Data Rights Request" in the subject line. We will respond within 14 business days.

9Minors and Child Protection

The 666 RS platform is strictly for users aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Age is verified during the KYC process before any withdrawals are processed.

If 666 RS becomes aware that personal data has been collected from a person under 18 years of age, that account will be immediately closed, all associated data will be deleted (except records required for legal compliance), and any deposited funds will be returned to their source payment method after verification.

If you are a parent or guardian and believe your child may have registered an account at 666 RS without your knowledge, contact us immediately at support@666rs.wine and we will investigate and act without delay.

10Changes to This Privacy Policy

666 RS may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable regulations. All updates will be posted on this page with a revised "Last Updated" date visible at the top.

For significant changes — those that materially affect how your data is collected or used — 666 RS will notify you by email at least 14 days before the changes take effect. You will also be presented with a notification on your next login prompting you to review and acknowledge the updates.

If you do not agree with an updated Privacy Policy, you have the right to close your account and request deletion of your data (subject to mandatory retention periods). Continued use of 666 RS after the effective date of an update constitutes your acceptance of the revised Policy.

11Contact Us

For any privacy-related questions, data rights requests, or concerns about how 666 RS handles your personal information, please contact us using the details below.