hd666 Privacy Policy —
How We Handle Your Personal Data

This Privacy Policy applies to all personal data processed by hd666 in connection with the operation of the hd666 online betting and casino platform at hd666.bet. The following definitions apply throughout this document:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, date of birth, contact details, financial information, device identifiers, and behavioural data generated through use of the hd666 platform.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
• "hd666," "we," "us," or "our" refers to the hd666 platform operated at hd666.bet under an internationally recognised gaming licence.
• "You" or "Player" refers to any individual whose Personal Data is processed by hd666, including registered account holders and visitors to the hd666 website.
• "KYC Data" refers to identity verification information collected during the Know Your Customer process, including CNIC copies, proof of address, and payment method verification documents.

This Privacy Policy covers all data processing activities conducted by hd666 in connection with account registration, gameplay, deposits and withdrawals, customer support interactions, and platform usage analytics.

hd666 is the data controller responsible for the Personal Data collected and processed through the hd666 platform. As data controller, hd666 determines the purposes and means of processing your Personal Data and is responsible for ensuring that all processing activities comply with applicable data protection laws and the requirements of hd666's international gaming licence.

For all data protection enquiries, requests to exercise your data subject rights, or complaints relating to hd666's handling of your Personal Data, please contact the hd666 support team using the details provided in Section 15 of this Privacy Policy.

hd666 collects the following categories of Personal Data in connection with the provision of its platform services:

hd666 does not collect sensitive personal data such as biometric data, health data, or racial/ethnic origin data unless specifically required by our licensing authority in connection with a fraud or responsible gaming investigation.

hd666 collects Personal Data through the following channels:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or updating your account profile.
• Automated collection: Technical and usage data collected automatically when you access the hd666 platform, including IP address, device fingerprint, browser data, and behavioural analytics via cookies and similar technologies (see Section 8).
• Third-party sources: hd666 may receive identity verification data from KYC service providers engaged to assist with document authentication. hd666 may also receive fraud risk signals from payment processors in connection with deposit and withdrawal transactions.

hd666 processes your Personal Data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and hd666 — including account creation, processing bets, handling deposits and withdrawals, and providing customer support.
• Legal obligation: Processing required to comply with hd666's obligations under its gaming licence, anti-money laundering regulations, and applicable data protection laws — including KYC identity verification and transaction monitoring.
• Legitimate interests: Processing necessary for hd666's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and platform improvement analytics — where those interests are not overridden by your rights.
• Consent: Processing based on your freely given and informed consent, such as for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

hd666 uses your Personal Data for the following specific purposes:

• Creating, verifying, and managing your hd666 account;
• Processing deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank;
• Verifying your identity and age (21+) in compliance with KYC requirements under hd666's gaming licence;
• Detecting and preventing fraud, money laundering, and other prohibited conduct;
• Monitoring your account for responsible gaming indicators and applying responsible gaming tools where warranted;
• Providing customer support and responding to enquiries and complaints;
• Sending transactional communications, including deposit confirmations, withdrawal notifications, and security alerts;
• Sending marketing communications about hd666 promotions, bonuses, and new products — where you have given consent or where permitted under legitimate interests;
• Analysing platform usage to improve the hd666 product, detect technical issues, and enhance the player experience;
• Complying with regulatory reporting obligations under hd666's gaming licence.

hd666 shares Personal Data only with the following categories of third parties, and only to the extent necessary for the specific purpose stated:

• KYC and identity verification providers: Third-party services engaged to assist with document authentication and identity verification as required under hd666's gaming licence.
• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment service providers receive the financial information necessary to process your deposits and withdrawals.
• Game content providers: Live casino studio providers and slot game suppliers receive session data necessary to deliver their games within the hd666 platform. These providers operate under their own data protection agreements with hd666.
• Fraud prevention and anti-money laundering services: Risk and compliance technology providers that assist hd666 in meeting its regulatory obligations.
• Regulatory and law enforcement authorities: hd666 will disclose Personal Data to regulatory bodies, licensing authorities, or law enforcement agencies where required by law or court order.
• IT and hosting service providers: Cloud infrastructure and platform technology providers that support the operation of hd666.bet under appropriate data processing agreements.

hd666 uses cookies and similar tracking technologies (including local storage and session tokens) on the hd666 platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for core platform functionality, including maintaining your login session, processing your bets, and operating the hd666 cashier. These cookies cannot be disabled without breaking core platform features.
• Security cookies: Used to detect fraudulent activity, protect against session hijacking, and enforce hd666's one-account-per-person policy. These cookies are essential to platform integrity.
• Analytics cookies: Used — with your consent — to understand how players use the hd666 platform, identify technical issues, and improve platform performance. hd666 uses anonymised or pseudonymised analytics data where possible.
• Personalisation cookies: Used — with your consent — to remember your platform preferences such as language settings, preferred game lobby view, and responsible gaming display preferences.

You can manage and withdraw consent for non-essential cookies at any time through your browser's cookie settings. Note that disabling strictly necessary or security cookies may impair your ability to use the hd666 platform.

hd666 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and the hd666 platform;
• Encryption of sensitive data at rest, including financial information and KYC documents;
• Access controls ensuring that Personal Data is accessible only to authorised hd666 personnel with a legitimate operational need;
• Regular security assessments and penetration testing of the hd666 platform infrastructure;
• Two-factor authentication (2FA) available to all account holders to protect against unauthorised login;
• Incident response procedures to detect, contain, and notify affected parties of any Personal Data breach within the timeframes required by applicable law.

hd666 retains Personal Data only for as long as necessary for the purpose for which it was collected, subject to the following retention requirements:

• Account data: Retained for the duration of your active hd666 Account and for a minimum of five (5) years following Account closure, in compliance with anti-money laundering record-keeping obligations under hd666's gaming licence.
• KYC documents: Retained for a minimum of five (5) years from the date of collection, or longer where required by a specific regulatory or legal obligation.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for up to two (2) years from the date of the last interaction, unless the communication relates to a dispute or regulatory matter that requires longer retention.
• Analytics data: Aggregated and anonymised analytics data may be retained indefinitely as it no longer constitutes Personal Data once anonymisation is applied.

Following the expiry of applicable retention periods, Personal Data will be securely deleted or anonymised using industry-standard data destruction methods.

hd666 operates under an international gaming licence and may engage third-party service providers — such as cloud infrastructure providers, KYC verification services, and live casino studio operators — that process Personal Data in jurisdictions outside Pakistan.

Where Personal Data is transferred internationally, hd666 ensures that appropriate safeguards are in place to protect your data, including contractual protections in data processing agreements with all third-party processors that receive Personal Data originating from hd666 players.

hd666 does not transfer Personal Data to any jurisdiction that does not offer an adequate level of data protection without first implementing contractual or other appropriate safeguards as required under applicable law.

The hd666 platform is strictly for individuals aged 21 years and older. hd666 does not knowingly collect Personal Data from any person under the age of 21. Age is verified during the KYC process using a valid CNIC.

If hd666 discovers that it has inadvertently collected Personal Data from a person under 21, the relevant Account will be immediately suspended, any funds will be returned to the deposit source (net of any bonus amounts), and all Personal Data associated with that Account will be deleted as promptly as legally permissible.

If you believe that a minor has registered or gained access to a hd666 Account, please contact hd666 support immediately via live chat so that appropriate action can be taken without delay.

Where you have consented to receiving marketing communications from hd666, or where hd666 has a legitimate interest in communicating with you about products and services directly related to your hd666 Account, hd666 may send promotional emails, SMS messages, or in-platform notifications about bonuses, promotions, new games, and PSL season offers.

You can withdraw your consent to marketing communications at any time by:

• Clicking the unsubscribe link in any hd666 marketing email;
• Updating your communication preferences from within your hd666 Account settings;
• Contacting hd666 customer support and requesting removal from all marketing lists.

Withdrawal of consent for marketing communications does not affect your ability to use the hd666 platform and will not prevent hd666 from sending transactional communications such as deposit confirmations, withdrawal notifications, and security alerts, which are sent on the basis of contractual necessity rather than consent.

hd666 may update this Privacy Policy from time to time to reflect changes in applicable law, our gaming licence requirements, or our data processing practices. Where amendments are material, hd666 will notify registered players via the email address associated with their Account before the changes take effect.

The current version of this Privacy Policy, together with the effective date, is always available at hd666.bet/privacy-policy. Your continued use of the hd666 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

To exercise any of your data subject rights, ask questions about how hd666 processes your Personal Data, or submit a complaint about hd666's data handling practices, please contact the hd666 support team through the following channels:

• Live Chat: Available directly on the hd666 platform, 10:00 AM to 2:00 AM PKT, 7 days a week. This is the fastest way to reach hd666 for urgent data protection matters.
• Email: [email protected]

hd666 aims to respond to all data subject rights requests within 30 days of receipt. For complex requests, hd666 may extend this period by a further 30 days and will notify you of the extension within the initial 30-day period.

If you are not satisfied with hd666's response to a data protection complaint, you have the right to escalate the matter to the data protection supervisory authority relevant to hd666's licensing jurisdiction or to the dispute resolution mechanism provided by hd666's gaming licence authority.