Privacy Policy — m6666

1 Introduction

This Privacy Policy ("Policy") describes the manner in which m6666 ("we", "us", "our" or the "Operator"), operating the platform at m6666.cam, collects, processes, stores, uses and protects personal data relating to users ("you", "User" or "Player") of the m6666 website, mobile applications, games and all associated services (collectively, the "Platform" or "Services").

m6666 is committed to responsible data handling and to respecting the privacy rights of all individuals who interact with the Platform. This Policy has been prepared in accordance with the Operator's obligations under applicable data protection and privacy legislation in its licensing jurisdiction, and reflects recognised international data protection principles including transparency, purpose limitation, data minimisation and storage limitation.

Pakistani users are advised that data protection law in Pakistan is governed primarily by the Personal Data Protection Bill and associated regulations currently in force or in the process of enactment. Nothing in this Policy overrides any applicable local legal requirements.

2 Definitions

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, address, email address, phone number, financial details and device identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, storage, use, disclosure, transmission, alteration and deletion.
• "Data Controller" means m6666, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of m6666 under a contractual arrangement.
• "KYC Data" means identity and address documentation submitted for Know Your Customer verification, including government-issued identity documents, proof of address and source-of-funds documentation.
• "Cookies" means small text files placed on your device by the Platform to store session information, preferences and analytical data.
• "Consent" means a freely given, specific, informed and unambiguous indication of the User's agreement to the processing of their Personal Data for a stated purpose.
• "Legitimate Interest" means a processing activity that is necessary for the purposes of the Operator's legitimate business interests, provided those interests are not overridden by the User's fundamental rights and freedoms.

3 Data We Collect

3.1 Data You Provide Directly

We collect Personal Data that you provide when you register, verify your account, make deposits or withdrawals, or contact support, including:

• Full legal name, date of birth and gender;
• Residential address, city and country (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar);
• Email address and phone number;
• Username and hashed password (passwords are never stored in plain text);
• KYC documentation including national identity cards, passports and proof-of-address documents;
• Payment method details including partial card numbers, e-wallet identifiers and bank account references (full card numbers are never stored on our servers);
• Source-of-funds documentation where required by the Operator's compliance procedures.

3.2 Data Collected Automatically

When you use the Platform, we automatically collect certain technical and behavioural data, including:

• IP address, device type, operating system and browser information;
• Login timestamps, session duration and navigation paths within the Platform;
• Game activity logs, wagering history, deposit and withdrawal transaction records;
• Geolocation data (country and city-level) derived from your IP address;
• Cookie identifiers and analytics data as described in Section 9.

3.3 Data from Third Parties

We may receive Personal Data about you from third parties in certain circumstances, including:

• Identity verification service providers engaged to validate KYC documentation;
• Payment processors and financial institutions processing your deposits or withdrawals;
• Responsible gambling databases or self-exclusion registries where we are required to check eligibility;
• Fraud prevention and anti-money laundering screening providers.

4 Legal Basis for Processing

m6666 processes your Personal Data on one or more of the following legal bases:

5 How We Use Your Personal Data

m6666 uses the Personal Data collected for the following purposes:

1. Account Creation and Verification: To register your account, verify your identity and age, and maintain accurate account records;
2. Service Delivery: To provide access to casino games, live dealer tables, sports betting markets (including cricket, PSL T20, ICC events, football and other sports) and all platform features;
3. Payment Processing: To process deposits and withdrawals, reconcile transactions and detect payment fraud;
4. Regulatory Compliance: To meet our obligations under applicable anti-money laundering (AML), counter-terrorist financing (CTF) and licensing laws, including filing regulatory reports where required;
5. Responsible Gambling: To monitor account activity for indicators of problem gambling behaviour, enforce self-exclusion and deposit limits, and provide targeted responsible gambling interventions;
6. Customer Support: To respond to your queries, complaints and account-related requests in an efficient and accurate manner;
7. Platform Improvement: To analyse usage patterns, test new features and improve the overall user experience on the Platform;
8. Marketing and Promotions: To send you relevant offers, bonuses and platform news where you have consented or where a legitimate interest applies. You may opt out at any time;
9. Security and Fraud Prevention: To detect and prevent fraudulent activity, account takeovers, bonus abuse and other prohibited conduct described in the Terms and Conditions.

6 Data Sharing & Disclosure

6.1 We Do Not Sell Your Data

m6666 does not sell, rent or trade your Personal Data to any third party for their own marketing or commercial purposes. Any sharing of Personal Data is limited to what is strictly necessary for the purposes described in this Policy.

6.2 Service Providers

We share Personal Data with carefully selected third-party service providers who process data on our behalf under contractual data processing agreements, including:

• Identity verification and KYC platform providers;
• Payment processors and gateway providers;
• Game studio and software providers who deliver games on the Platform;
• Cloud hosting and infrastructure providers;
• Fraud detection and cybersecurity vendors;
• Customer support platform providers;
• Email delivery and communications platforms.

6.3 Regulatory and Legal Disclosures

We may disclose your Personal Data to regulatory authorities, law enforcement agencies or judicial bodies where we are legally obliged to do so, including in response to a valid court order, subpoena, regulatory investigation or anti-money laundering reporting obligation. We will notify you of such disclosure where legally permitted to do so.

6.4 Business Transfers

In the event of a merger, acquisition, corporate restructuring or sale of the m6666 business or assets, your Personal Data may be transferred to the acquiring entity. We will provide advance notice of such a transfer via the registered email address on your account.

7 Data Retention

m6666 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable law. Our standard retention periods are as follows:

• Account and KYC data: Retained for a minimum of five (5) years from account closure, in accordance with AML and licensing obligations;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Communications and support logs: Retained for three (3) years from the date of the communication;
• Marketing consent records: Retained for the duration of your account and two (2) years following account closure or withdrawal of consent;
• Game and wagering logs: Retained for a minimum of five (5) years to support dispute resolution and regulatory review.

Where data is no longer required and no legal retention obligation applies, we will securely delete or anonymise it in a manner that prevents recovery or re-identification.

8 Data Security

m6666 implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure. Our security measures include, but are not limited to:

• TLS/SSL encryption for all data transmitted between your device and our servers;
• Encryption at rest for sensitive personal and financial data stored in our systems;
• Strict role-based access controls limiting internal access to Personal Data on a need-to-know basis;
• Regular security audits, vulnerability assessments and penetration testing;
• Two-factor authentication (2FA) available for user accounts and mandated for internal staff accessing Personal Data;
• Incident response procedures to detect, investigate and contain data breaches in a timely manner.

9 Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the Platform. They serve a variety of purposes including maintaining your login session, remembering your preferences and enabling the Platform to analyse usage patterns for improvement.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies and security tokens. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Store your preferences such as language settings, game display options and responsible gambling tool configurations.
• Analytical Cookies: Collect anonymised data about how users interact with the Platform, including pages visited, time spent and navigation paths. This data is used to improve the user experience.
• Marketing Cookies: Track your activity to enable personalised promotional content and offers. These are only active where you have provided consent.

9.3 Managing Cookies

You can manage non-essential cookie preferences through the cookie consent interface presented on first access to the Platform. You may also adjust cookie settings in your browser at any time. Please note that disabling certain cookies may limit Platform functionality.

10 Your Data Rights

Subject to applicable law and any overriding legal retention obligations, you have the following rights in relation to your Personal Data held by m6666:

• Right of Access: Request a copy of the Personal Data we hold about you;
• Right to Rectification: Request correction of inaccurate or incomplete Personal Data;
• Right to Erasure: Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations;
• Right to Restrict Processing: Request that we limit the processing of your data in certain circumstances;
• Right to Data Portability: Request a structured, machine-readable copy of the Personal Data you have provided to us;
• Right to Object: Object to processing based on legitimate interest, including direct marketing;
• Right to Withdraw Consent: Withdraw any consent previously given for processing activities at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact our Data Protection team using the details in Section 15. We will respond to verified requests within thirty (30) days. We may request proof of identity before processing a data rights request to protect the security of your account.

11 International Data Transfers

m6666 operates in an international environment and your Personal Data may be transferred to, stored and processed in countries other than your country of residence, including countries outside Pakistan. Such transfers may occur when we work with service providers, technology partners or hosting infrastructure located in different jurisdictions.

Where we transfer Personal Data internationally, we implement appropriate safeguards to ensure an adequate level of data protection, including contractual clauses, data processing agreements and equivalent transfer mechanisms recognised under applicable law.

12 Minors and Under-Age Access

The Services are strictly intended for adults aged 18 and above, or the higher minimum age required by the operator's licensing jurisdiction. m6666 does not knowingly collect or process Personal Data from individuals below this minimum age. If we discover that Personal Data has been collected from a minor, we will delete it immediately and close the associated account.

Parents and guardians are encouraged to make use of available parental control software to prevent minors from accessing online gambling platforms. If you believe a minor has registered on the Platform, please contact support using the details in Section 15 immediately.

13 Third-Party Services & Links

The Platform may reference or connect to third-party game studios, payment processors and technology providers. These third parties operate their own privacy policies and data processing practices, which are independent of this Policy. m6666 is not responsible for the privacy practices of any third party.

Where we engage Data Processors on your behalf, we ensure that appropriate data processing agreements are in place requiring those processors to handle your data securely and only for the purposes instructed by m6666.

14 Policy Amendments

m6666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, technology, legal requirements or business operations. The current version of this Policy is always available on this page and is identified by the "Last Updated" date at the top.

Where changes are material, we will notify you via your registered email address or through a prominent notice on the Platform. Your continued use of the Services following the effective date of an amendment constitutes your acceptance of the revised Policy. If you do not accept the revised terms, you should cease using the Services and close your account.

15 Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or need to report a data protection concern, please contact our support and data protection team through the following channels:

We aim to acknowledge all data rights requests and privacy complaints within five (5) business days and to provide a substantive response within thirty (30) calendar days. Complex requests may take longer, in which case we will notify you of the extended timeline.