y6666 Privacy Policy – How We Protect Your Data

1 Who We Are

y6666 is an online sports betting and gaming platform operating under the domain y6666.pro. The platform is designed specifically for adult players in Pakistan, with all account balances, deposits and withdrawals denominated in Pakistani Rupees (PKR).

For the purposes of this Privacy Policy, "y6666", "we", "us" and "our" refer to the operator of the y6666 platform. "You" and "your" refers to any person who visits the website, uses the mobile app or holds a registered account.

This Privacy Policy applies to all data collected through the y6666 website at y6666.pro, the Android APK, the iOS home screen application and any communications between you and the y6666 support team. It does not apply to third-party websites or payment providers, which have their own privacy practices.

2 What Data We Collect

The data y6666 collects falls into three broad categories: information you provide directly, information generated by your use of the platform and technical data collected automatically.

y6666 collects only the data necessary for account operation, security, fraud prevention and service improvement. We do not collect data that is unrelated to these purposes.

3 How We Collect Data

Data is collected through the following means:

• Direct input — Information you type into registration forms, deposit screens, support chat or any other input field on the platform.
• Automatic collection — When you access y6666 via browser or app, technical data such as your IP address, device identifiers and session duration is logged automatically.
• Payment provider integration — When you initiate a deposit or withdrawal via JazzCash, Easypaisa, Raast or bank transfer, the payment provider shares a transaction reference and masked account identifier with y6666 to confirm the transaction. y6666 does not receive your full JazzCash PIN, bank password or card CVV at any point.
• Cookies and similar technologies — The y6666 website uses cookies to maintain your session, remember preferences and measure platform performance. Full details are in Section 6.
• Third-party analytics — Aggregated, anonymised data may be received from analytics tools to understand traffic patterns and improve the user experience. This data cannot be used to identify you individually.

4 Why We Use Your Data

y6666 uses the data it collects for the following purposes:

• Account management — Creating, maintaining and securing your y6666 account. This includes password resets, login verification and biometric authentication in the app.
• Processing transactions — Verifying, processing and recording your PKR deposits and withdrawals across all supported payment methods.
• Identity verification — Confirming that account holders are genuine adults aged 18 or above and that accounts are not being used for fraud or financial crime.
• Bet and game settlement — Recording the outcome of sports bets, casino sessions and fish game rounds so your balance is updated correctly.
• Customer support — Responding to your queries, resolving disputes and investigating complaints using your account history and communication records.
• Responsible gaming — Monitoring play patterns to identify signs of problem gambling and enforcing the deposit limits, session reminders and self-exclusion settings you have chosen.
• Fraud prevention and security — Detecting unusual account activity, multiple account registrations and any attempt to exploit the platform through prohibited conduct.
• Platform improvement — Using anonymised, aggregated activity data to understand which features are most used and where the experience can be improved.
• Marketing communications — Sending you information about promotions, new games, cricket betting markets and PSL or T20 special offers, only if you have not opted out. You can withdraw consent at any time from account settings.

y6666 does not use your personal data for automated decision-making that produces legal or significant effects on you, other than standard fraud detection processes that may temporarily restrict an account pending manual review.

5 Payment Data

Because all transactions on y6666 are processed in PKR, payment data is handled with particular care. The following explains exactly what is and is not stored:

• JazzCash and Easypaisa — The mobile number linked to your wallet is stored as a payment reference to enable withdrawals to the same account used for deposits. Your wallet PIN is never transmitted to or stored by y6666.
• Raast — Your Raast ID or linked bank account identifier is stored as a withdrawal reference. Authentication for Raast transactions occurs on the SBP network, not on y6666 servers.
• Bank Transfer — Your bank account number and branch details are stored as a withdrawal reference only. y6666 does not store your online banking credentials.
• Debit and Credit Cards — Card transactions are processed through a PCI-DSS compliant payment gateway. y6666 does not store full card numbers, expiry dates or CVV codes after a transaction is complete.

Transaction records — including the amount in PKR, timestamp, method used and status — are retained for a minimum period in line with standard financial record-keeping practice. These records may be required during a withdrawal dispute or fraud investigation.

6 Cookies and Tracking

The y6666 website uses cookies — small text files stored on your device — to provide core functionality and improve your experience. The following types of cookies are used:

• Essential cookies — Required for the platform to function. These include session cookies that keep you logged in while you navigate between pages. These cannot be disabled without preventing core features from working.
• Preference cookies — Store your chosen language, display settings and notification preferences so you do not have to set them each time you visit.
• Analytics cookies — Collect anonymised data on page visits, time spent on each section and navigation paths. This information is used to improve the platform. No personally identifiable information is included in analytics data.
• Security cookies — Used to detect fraudulent logins, bot activity and suspicious session behaviour.

The y6666 mobile app uses equivalent device-side storage mechanisms such as local storage and secure device storage for the same purposes. Biometric authentication tokens are stored in your device's secure enclave and are never transmitted to y6666 servers.

Third-party advertising cookies are not used on y6666. The platform does not run banner advertising networks or share cookie data with ad exchanges.

7 Third-Party Sharing

y6666 does not sell, rent or trade your personal data. Data may be shared with third parties only in the following limited circumstances:

• Payment processors — JazzCash, Easypaisa, Raast and banking partners receive only the transaction details necessary to process your deposit or withdrawal. Each payment provider operates under its own privacy policy.
• Identity verification providers — If a third-party KYC service is used to verify your identity documents, the data shared is limited to what is required for that verification. The provider is contractually restricted from using your data for any other purpose.
• Game and software providers — Casino game providers and sports data feed suppliers may receive anonymised session data for the purposes of game fairness auditing and live odds delivery. No personally identifiable information is included.
• Legal and regulatory requirements — y6666 may disclose your data if required to do so by a valid legal order, court process or other binding legal obligation. In such cases, only the minimum necessary data will be disclosed.
• Business successors — In the event of a merger, acquisition or transfer of the y6666 business, account data may be transferred to the successor entity. You will be notified of any such transfer and your data will continue to be protected under equivalent standards.

Any third party that receives data from y6666 in the circumstances above is required to handle that data securely and use it only for the specific purpose for which it was shared.

8 Data Retention

y6666 retains your personal data for as long as your account is active and for a reasonable period thereafter, in line with the following guidelines:

• Active accounts — All account data is retained for the duration of your account's active status.
• Closed accounts — Following a voluntary account closure, core account data and transaction records are retained for a minimum period to allow for the resolution of any disputes or chargebacks that may arise after closure.
• Inactive accounts — Accounts with no login activity for an extended period may be flagged as dormant. You will be notified before any data reduction process is applied to a dormant account.
• Support communications — Chat logs and email correspondence are retained for a period sufficient to support dispute resolution and to identify repeat issues.
• Identity documents — Verification documents submitted for KYC purposes are retained in encrypted storage for the minimum period required and then securely deleted.

When data is no longer required and retention obligations have been met, y6666 deletes or anonymises it in a secure and irreversible manner.

9 Data Security

y6666 takes the security of your personal data seriously and has implemented the following technical and organisational measures:

• Encryption in transit — All data transmitted between your device and y6666 servers is encrypted using TLS. This applies to the website, the Android app and the iOS home screen version.
• Encryption at rest — Sensitive data stored on y6666 servers, including identity documents and payment references, is encrypted at rest.
• Access controls — Access to personal data within the y6666 organisation is restricted to team members who genuinely need it to perform their role. Access logs are maintained and reviewed regularly.
• Two-factor authentication — Internal systems that hold personal data are protected with multi-factor authentication. Players are also encouraged to use available account security features.
• Fraud monitoring — Automated systems monitor for unusual login patterns, multiple account attempts and suspicious financial activity around the clock.
• Incident response — In the event of a data breach that affects your personal information, y6666 will notify affected users promptly and take immediate steps to contain the incident.

No system is completely immune to security risks. While y6666 does everything reasonable to protect your data, you also play a role — keep your password strong and unique, do not share your login details with anyone and contact support immediately if you notice anything unusual in your account.

10 Your Rights

As a y6666 user, you have the following rights in relation to your personal data:

• Right of access — You can request a copy of the personal data y6666 holds about you. Requests are typically fulfilled within 30 days.
• Right to correction — If any data held about you is inaccurate or out of date, you can request that it be corrected. For name and date of birth changes, identity verification may be required.
• Right to deletion — You can request that your personal data be deleted. This right is subject to legal obligations that may require y6666 to retain certain records for a minimum period.
• Right to restrict processing — You can ask y6666 to limit how your data is used in specific circumstances, for example if you have disputed the accuracy of certain records.
• Right to data portability — You can request your account and activity data in a structured, commonly used format.
• Right to withdraw marketing consent — You can opt out of promotional communications at any time from your account settings without affecting your ability to use the platform.

To exercise any of these rights, contact the y6666 support team through live chat or by writing to [email protected]. Please include your registered account username so your request can be processed efficiently.

11 Children's Privacy

y6666 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Registration requires confirmation that you are an adult, and identity verification may be requested at any time to confirm this.

If y6666 becomes aware that an account has been created by or on behalf of a minor, the account will be closed immediately, all funds will be returned to the payment source and any collected data will be deleted without retention.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gaming platforms. If you believe a minor has created an account on y6666, please contact support immediately with the relevant details so the matter can be investigated and resolved quickly.

12 Changes to This Policy

y6666 may update this Privacy Policy from time to time as the platform evolves or as legal requirements change. When updates are made, the revised policy will be published on this page with a new "Last updated" date at the top of the page.

For material changes — such as a new category of data being collected or a new type of third-party sharing — y6666 will notify registered users via email or an in-platform message before the change takes effect, giving you the opportunity to review the update and take any action you consider appropriate.

Continued use of y6666 after an updated Privacy Policy is published constitutes your acceptance of the revised terms. If you do not agree with an update, you should stop using the platform and contact support to request account closure and data deletion where applicable.

13 Contact Us

If you have any questions, concerns or requests related to this Privacy Policy or the way y6666 handles your personal data, the support team is available 24 hours a day, 7 days a week through the live chat feature on the website and in the app.

For written privacy enquiries, you can reach us at: [email protected]

When submitting a privacy request, please include your registered username or email address and a clear description of your request. For data access or deletion requests, you may be asked to verify your identity before the request is processed. y6666 aims to respond to all privacy-related enquiries within 30 days.