c666 Privacy Policy — How We Handle
Your Personal Data

For the purposes of this Privacy Policy, the data controller — the entity that determines how and why your personal data is processed — is c666, operating the platform at c666-jit.com.

When this policy refers to "c666", "we", "us" or "our", it means the c666 platform and its operating entity. If you have any question about how your data is handled, you can reach the c666 data team through the contact details in Section 14 of this policy.

c666 collects personal data in the following categories:

We do not collect sensitive personal data such as ethnicity, religion or political opinion. We collect only what is necessary for the specific purposes set out in Section 4 of this policy.

c666 collects personal data through three primary channels:

• Directly from you: When you register an account, complete identity verification, make a deposit or withdrawal, set responsible gaming limits, contact support or participate in a promotion, you provide information to us directly.
• Automatically through platform use: When you access the c666 website or interface, our systems automatically record technical data — your IP address, device identifiers, browser type, pages visited, session duration and interaction patterns. This happens through standard server logs and cookies (see Section 10 for cookie details).
• From payment providers: When you deposit or withdraw using Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or a bank card, the relevant payment provider shares transaction confirmation data with c666 to allow us to credit your account or process your withdrawal. We receive transaction reference numbers and masked account identifiers — not your full payment provider credentials or PIN.

c666 does not purchase data from data brokers or compile profiles of individuals from external sources beyond what is described above.

Every data processing activity at c666 serves a specific purpose. We use your personal data for the following:

• Account creation and management: To create your c666 account, maintain it, authenticate your logins and manage your profile settings.
• Identity verification (KYC): To confirm that you are who you say you are, that you meet the 18+ age requirement and that you are not a person prohibited from using our services. This is a legal and operational necessity for a real-money gaming platform.
• Payment processing: To process deposits from and withdrawals to your Easypaisa, JazzCash, bank or card account. This requires sharing payment-related data with the relevant payment provider at the time of each transaction.
• Fraud prevention and security: To identify and prevent fraudulent account activity, multi-accounting, bot use, money laundering and other prohibited conduct. This includes automated analysis of gaming patterns, login behaviour and transaction data.
• Responsible gaming: To monitor gaming activity for patterns consistent with problematic gambling behaviour, to administer the responsible gaming tools you set and to act on self-exclusion requests.
• Customer support: To respond to your queries, resolve disputes and maintain records of support interactions for quality and compliance purposes.
• Platform improvement: To understand how members use the c666 platform, identify areas for improvement and optimise the mobile and desktop experience. This uses aggregated, anonymised analytics data.
• Legal and regulatory compliance: To comply with any applicable legal obligations, respond to lawful requests from authorities and maintain records required by applicable regulations.
• Marketing communications: To send you promotional offers, bonus notifications and platform updates — only where you have given explicit consent or where we have a legitimate interest in contacting existing members about directly relevant offers. You can opt out of marketing communications at any time via your account settings or by contacting support.

c666 processes your personal data under the following legal bases, depending on the specific processing activity:

• Contract performance: Processing necessary to deliver the services you registered for — account operation, bet placement, payment processing. Without this processing, we cannot provide the service.
• Legal obligation: Processing required to comply with applicable law — identity verification, transaction record-keeping, responding to lawful authority requests.
• Legitimate interests: Processing that serves c666's legitimate business interests where those interests are not overridden by your privacy rights — fraud detection, platform security, aggregated analytics and service improvement.
• Consent: Processing based on your explicit consent — primarily for marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of processing already carried out.

c666 does not sell your personal data to third parties. We share data only in the following circumstances and with the following categories of recipients:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT-connected banks and card networks receive the payment-related data necessary to process your transactions. These providers have their own privacy policies governing how they handle data on their end.
• Identity verification services: Where c666 uses a third-party KYC service to assist with document verification, the relevant identity documents and data points are shared with that service for the sole purpose of completing the verification. KYC providers are contractually prohibited from using your data for any other purpose.
• Gaming software providers: The companies whose games and betting software run on the c666 platform receive the session and wagering data necessary to operate their games. They do not receive your full personal profile.
• Legal and regulatory authorities: c666 will disclose personal data to competent authorities where required by applicable law or in response to a valid legal process — for example, a court order or a formal request from a financial intelligence unit in connection with anti-money laundering obligations.
• Business operations: c666 may share data with trusted service providers involved in operating the platform — hosting providers, email service providers, analytics platforms — under strict contractual data processing agreements that prohibit those providers from using the data for their own purposes.

Given that c666 serves Pakistani players with local payment methods, it is worth explaining specifically how payment data is handled:

• Easypaisa and JazzCash: When you deposit or withdraw via these services, you initiate a transfer through the Easypaisa or JazzCash interface. c666 receives a transaction confirmation and reference number. We store the masked wallet identifier (typically the last four digits of your registered mobile number) for the purpose of processing withdrawals back to the same account. We do not store your full Easypaisa or JazzCash PIN or complete account credentials.
• Bank cards: Card payments are processed through a PCI-DSS compliant payment gateway. c666 receives a tokenised card reference and the last four digits of your card number. Full card numbers are never stored on the c666 platform.
• Bank IBFT transfers: When processing IBFT deposits or withdrawals, c666 holds your bank account number and bank name for the duration of the relationship. This data is stored securely and used only for payment processing and anti-money laundering record-keeping.
• Transaction history: c666 maintains a full record of your deposit and withdrawal history for account management, dispute resolution and regulatory compliance. This history is accessible to you through your account transaction page.

c666 retains personal data for as long as is necessary for the purpose it was collected and for as long as is required to meet legal obligations. Specific retention periods are as follows:

• Account data (identity, contact, payment identifiers): Retained for the lifetime of your active c666 account and for five years following account closure. This retention period reflects standard anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction, in line with financial record-keeping requirements.
• Gaming activity logs: Retained for five years. Used for dispute resolution, responsible gaming assessments and compliance purposes.
• Identity verification documents (CNIC scans): Retained for the duration of the account relationship and five years following closure. Stored with restricted access controls.
• Support communication records: Retained for three years from the date of each interaction.
• Technical and device data (logs, IP records): Retained for 12 months, unless a specific security investigation requires retention beyond that period.

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be associated with a specific individual.

c666 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or alteration. Our security measures include:

• Encryption in transit: All data exchanged between your device and the c666 platform is encrypted using TLS (Transport Layer Security). Look for HTTPS in your browser address bar as confirmation of this protection.
• Encryption at rest: Sensitive personal data — including identity documents and financial data — is encrypted in our database storage. Even if storage were to be accessed without authorisation, the data would not be readable without the encryption key.
• Access controls: c666 staff access to personal data is restricted on a need-to-know basis. Only team members with a legitimate operational reason can access specific categories of member data, and all access is logged.
• Two-factor authentication: Available for member accounts and required for c666 internal administrative access.
• Fraud monitoring: Automated systems monitor account activity around the clock for patterns consistent with unauthorised access, unusual transaction behaviour and other security threats.
• Penetration testing and security review: The c666 platform undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited.

No security system is completely impenetrable. In the event of a data breach that poses a material risk to your rights, c666 will notify affected members and take appropriate remedial action as quickly as possible.

c666 uses cookies and similar technologies to make the platform work properly and to understand how members use it. Here is what you need to know:

• Essential cookies: Required for the platform to function — keeping you logged in, remembering your preferences and maintaining your session. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to understand how members navigate the platform — which sections are used most, where members drop off, what device types are common. This data is aggregated and anonymised — it is not used to build individual profiles.
• Security cookies: Help detect and prevent fraudulent access, bot activity and session hijacking.
• Preference cookies: Remember settings you have applied — such as language preferences or notification choices.

c666 does not use third-party advertising cookies or share cookie data with ad networks. You can manage cookie settings through your browser — note that disabling essential cookies will affect your ability to use the platform normally.

As a c666 member, you have the following rights in relation to your personal data. To exercise any of these rights, contact the c666 support team using the details in Section 14:

c666 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Registration requires confirmation of eligibility and the platform actively verifies age at the withdrawal stage.

If c666 discovers that an account has been registered by a person under 18, the account will be suspended immediately, all gaming activity will be voided and any deposited funds will be returned to the payment source. No winnings generated on an underage account will be paid out.

If you believe a minor has registered a c666 account, please contact our support team immediately so the matter can be dealt with promptly.

c666 may update this Privacy Policy from time to time to reflect changes in the platform, applicable law or industry best practice. When material changes are made, we will:

• Post the updated policy on this page with a revised "Last Updated" date
• Notify registered members via email or an in-platform notification where the changes are significant

We encourage you to review this policy periodically — particularly before making large deposits or sharing additional personal information with the platform. Continued use of c666 after the effective date of an updated policy constitutes your acceptance of the changes.

If you disagree with any change to this policy, you should stop using the platform and contact support to close your account and arrange withdrawal of your balance.

If you want to exercise any of your data rights, have a question about how c666 handles your personal information or want to raise a privacy concern, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly from your c666 account — fastest response for routine queries
• Email: support@c666-jit.com — for detailed data access requests, deletion requests and formal privacy complaints. Please include "Privacy" in your subject line so the query is routed to the right team.
• VIP Direct Line: Available to Platinum, Diamond and Elite members — your dedicated VIP manager can handle privacy queries directly

c666 commits to acknowledging all privacy-related requests within 48 hours and providing a substantive response within 30 days. Where a request involves a large volume of data or requires complex verification, we may extend this to 60 days — you will be notified if that is the case.