Privacy Policy — m666 Platform

1. Data Controller

For the purposes of this Privacy Policy, m666 (operated via the domain m666.bio) acts as the data controller in respect of personal data collected from users of the m666 platform. When this policy refers to "m666", "we", "us", or "our", it refers to the operating entity behind the m666 platform.

This policy applies to all personal data collected and processed in connection with your use of m666's website, mobile-optimised web application, and all associated betting, casino, and gaming services available on the platform. It covers users accessing m666 from all locations within Pakistan, including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, and all other cities and provinces.

2. Data We Collect

m666 collects personal data through multiple touchpoints during your registration, account usage, payment processing, and customer support interactions. The categories of data we collect are as follows:

2.1 Registration & Account Data

• Full legal name
• Date of birth (collected for mandatory age verification purposes)
• Pakistani mobile number (primary account identifier)
• Username and encrypted password
• Province and city of residence (e.g., Karachi, Lahore, Islamabad)

2.2 Identity Verification Data

Where m666 requests identity verification in accordance with its security and anti-fraud procedures, we may collect:

• Copies of government-issued identity documents (e.g., CNIC)
• Selfie or liveness verification imagery
• Proof of address documentation

2.3 Financial & Transaction Data

• Deposit and withdrawal amounts and dates
• Payment method details (e.g., JazzCash account number, Easypaisa registered mobile, HBL or UBL account references, Meezan Bank or Bank Alfalah account references — stored only to the extent required for transaction processing and anti-fraud purposes)
• Transaction history including bet stakes and winnings

2.4 Usage & Technical Data

• IP address and approximate geolocation
• Device type, operating system, and browser
• Session duration, pages visited, and features accessed
• Betting and gaming activity logs

2.5 Communications Data

• Content of messages sent to m666 customer support
• Records of promotional communications sent to you and your opt-in/opt-out preferences

Data Category	Primary Purpose	Retention Period
Registration & Account	Account management, age verification	Duration of account + 5 years post-closure
Identity Verification	KYC compliance, fraud prevention	5 years post-closure minimum
Financial & Transaction	Payment processing, AML compliance	7 years (regulatory requirement)
Usage & Technical	Platform security, service improvement	Up to 24 months
Communications	Customer support, dispute resolution	3 years

3. How We Use Your Data

m666 uses the personal data it collects for the following purposes:

• Account creation and management: To create, maintain, and administer your m666 account, including processing deposits, withdrawals, bets, and winnings in PKR.
• Identity and age verification: To verify that you meet the minimum age requirement of 18 years and to confirm your identity in accordance with our anti-fraud and Know Your Customer (KYC) procedures.
• Service delivery: To provide you access to all m666 features, including cricket betting, slots, live casino, and all other games and promotional offers available on the platform.
• Customer support: To respond to your enquiries, resolve disputes, and process complaints in connection with your m666 account.
• Fraud prevention and security: To monitor account activity for signs of fraud, money laundering, unauthorised access, or other prohibited conduct, and to take appropriate action where such activity is detected.
• Responsible gaming: To monitor player behaviour for indicators of problem gambling, to administer self-exclusion and limit requests, and to fulfil our duty of care obligations towards all players.
• Legal and regulatory compliance: To comply with applicable laws, regulations, and directives including anti-money laundering (AML) obligations and data protection requirements.
• Marketing communications (where consented): To send you information about m666 promotions, bonuses, and new features where you have provided your consent to receive such communications. You may withdraw consent at any time.
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the performance and user experience of the m666 platform.

4. Legal Basis for Processing

m666 processes your personal data on the following legal bases, depending on the specific purpose for which the data is used:

• Contractual necessity: Processing required to provide you with the services you have requested by registering an m666 account and using the platform.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and age verification obligations.
• Legitimate interests: Processing carried out to protect m666's platform, prevent fraud, ensure security, and improve our services, where these interests are not overridden by your privacy rights.
• Consent: Where processing is based on your consent — for example, marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing & Disclosure

m666 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data in the following limited circumstances:

• Payment processors: Personal and financial data is shared with our payment service partners (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah) solely to the extent necessary to process your deposits and withdrawals.
• Identity verification providers: Where KYC verification is required, data may be shared with third-party identity verification service providers operating under contractual confidentiality obligations.
• Game providers: Technical usage data may be shared with the software providers that supply game content to m666, solely for the purpose of delivering and maintaining the gaming products available on the platform.
• Regulatory and law enforcement authorities: m666 may disclose personal data to competent authorities where required by law, court order, or in connection with the investigation of fraud or criminal activity.
• Responsible gaming bodies: Where a player is self-excluded, relevant data may be shared with recognised responsible gaming databases to enforce the exclusion across participating operators.

All third parties with whom m666 shares personal data are required to handle that data in accordance with applicable privacy standards and their contractual obligations to m666.

6. Data Retention

m666 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, and compliance obligations. The indicative retention periods for each category of data are set out in the table in Section 2 above.

Following account closure, certain categories of data — particularly financial transaction records and identity verification data — are retained for extended periods in compliance with anti-money laundering regulations and to enable dispute resolution in connection with historical account activity. After applicable retention periods expire, data is securely deleted or anonymised.

7. Data Security

m666 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and m666's servers
• Encrypted storage of passwords using industry-standard hashing algorithms — m666 staff cannot read your password
• Two-factor authentication available to all registered users
• Regular security audits and penetration testing of m666's platform infrastructure
• Access controls ensuring that only authorised personnel can access personal data, on a need-to-know basis
• Automated monitoring for suspicious login activity and unusual account behaviour

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed as completely secure. In the event of a data security incident affecting your personal data, m666 will notify affected users in accordance with applicable notification obligations.

8. Cookies & Tracking Technologies

m666 uses cookies and similar tracking technologies to operate and improve its platform. The categories of cookies used by m666 include:

• Strictly necessary cookies: Required for core platform functions such as maintaining your logged-in session and processing transactions. These cannot be disabled without affecting platform functionality.
• Performance cookies: Used to collect anonymised data about how users interact with m666 — pages visited, features used, error messages encountered — to help us identify and fix issues and improve the platform.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalised experience on m666.

You may control non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of some m666 features. For Pakistani users accessing m666 on mobile, browser cookie settings are typically accessible through the browser's privacy or settings menu.

9. Your Rights

As a user of m666, you have rights in respect of your personal data. These include:

• Right of access: You may request a copy of the personal data m666 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held in your m666 account.
• Right to erasure: In certain circumstances you may request deletion of your personal data, subject to m666's legal retention obligations.
• Right to restriction: You may request that m666 restrict the processing of your personal data in certain circumstances.
• Right to object: You may object to processing of your personal data where that processing is based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time.

To exercise any of these rights, please contact m666 using the details in Section 12. m666 will respond to all rights requests within a reasonable period. Please note that certain rights are subject to limitations where m666 has overriding legal obligations to retain or process data.

10. Minors & Age Verification

m666 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 18. Age verification is conducted at the point of registration and may be repeated at any time through our identity verification procedures.

If m666 discovers that personal data has been collected from a user who is under 18, the relevant account will be closed immediately and all associated personal data will be deleted, subject to any legal requirements to retain records of the underage account activity for regulatory purposes.

Parents and guardians who believe a minor may have registered on m666 should contact us immediately using the details in Section 12 so that the account can be investigated and closed without delay.

11. Changes to This Privacy Policy

m666 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, m666 will provide advance notice via a notification displayed upon login or via the email address associated with your account. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

Continued use of m666 following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated policy. If you do not agree with any changes, you should cease using m666 and may request account closure.

12. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to make a complaint about m666's handling of your personal data, please contact our data protection team at:

m666 Data Protection
[email protected]

m666 will acknowledge all data-related enquiries and complaints promptly and will endeavour to resolve them in a timely manner. If you are not satisfied with m666's response to a complaint regarding personal data handling, you may have the right to escalate the matter to a relevant supervisory authority.