66zz Privacy Policy

Introduction

66zz ("we", "us", "our") is an internationally licensed online casino and sports betting platform operating at 66zz.cam and serving registered players across Pakistan. This Privacy Policy governs the collection, processing, storage, sharing, and deletion of personal data relating to all individuals who interact with the 66zz platform — including visitors who browse without registering, registered players, and individuals who contact our support team.

We take our data protection responsibilities seriously. This policy is written in plain, accessible English so that Pakistani players — whether in Karachi, Lahore, Islamabad, Faisalabad, or elsewhere — can clearly understand how their personal information is handled. We have aligned our data practices with internationally recognised data protection standards, including principles broadly consistent with the General Data Protection Regulation (GDPR), which we regard as the global benchmark for responsible data handling.

By accessing or using the 66zz platform, you acknowledge that you have read and understood this Privacy Policy. This Policy forms part of the 66zz Terms and Conditions. In the event of any conflict between this Privacy Policy and the Terms and Conditions on a data-related matter, this Privacy Policy shall prevail.

Data Controller

For the purposes of applicable data protection standards, 66zz is the data controller in respect of all personal data processed in connection with the operation of the 66zz platform. This means 66zz determines the purposes for which your personal data is collected and the means by which it is processed.

Where 66zz engages third-party service providers to process personal data on its behalf — such as payment processors or identity verification providers — those parties act as data processors under 66zz's instruction and are bound by contractual data protection obligations that are no less stringent than those set out in this Policy.

What We Collect

The categories of personal data that 66zz collects and processes in connection with your use of our platform are set out in the table below. We collect only what is necessary for the stated purposes.

We do not collect sensitive categories of personal data such as racial or ethnic origin, religious beliefs, health data, or political opinions, unless such information is voluntarily disclosed in the context of a support interaction — in which case it is handled with heightened protection and is not used for any purpose other than resolving the relevant support matter.

How We Collect It

66zz collects personal data through the following channels:

• Direct Submission: Information you actively provide when creating your account, completing KYC verification, making deposits or withdrawals, contacting support, or responding to promotions.
• Automated Technical Collection: Technical data such as IP address, device identifiers, and session data collected automatically when you access the 66zz platform via cookies and similar tracking technologies (see Section 8 for full cookie detail).
• Third-Party Verification Services: Identity and document verification data received from KYC service providers when we process your verification request.
• Payment Processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard when processing your deposits and withdrawals.
• Fraud and AML Screening Services: Risk signals and screening results received from anti-money-laundering and fraud-prevention databases as required by our licensing obligations.

Legal Basis for Processing

Every instance of personal data processing at 66zz rests on one of the following legal bases:

• Contractual Necessity: Processing required to register your account, process your transactions in PKR, verify your identity, and provide the gaming and betting services you have signed up for. Without this processing, we cannot operate your account.
• Legal Obligation: Processing required to comply with our international gaming license conditions, anti-money-laundering (AML) regulations, and any lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and platform improvement — where these interests are balanced against and do not override your privacy rights.
• Consent: Processing for optional marketing communications, where we have obtained your explicit prior consent. You may withdraw consent for marketing communications at any time by contacting support or using the unsubscribe mechanism in any marketing email.

How We Use Your Data

66zz uses the personal data described in Section 3 for the following purposes:

• Account Registration and Management: Creating, verifying, and maintaining your 66zz player account; managing your PKR balance; processing login authentication and two-factor security checks.
• Payment Processing: Facilitating deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard; confirming successful PKR transactions; investigating and resolving payment disputes.
• KYC and Compliance: Verifying your identity using your CNIC and supporting documents; satisfying our anti-money-laundering and counter-terrorist-financing screening obligations; maintaining records required under our international gaming license.
• Customer Support: Responding to your queries, complaints, and support requests; maintaining a record of interactions for quality assurance and dispute resolution purposes.
• Responsible Gaming: Monitoring play patterns to identify signs of problem gambling; implementing deposit limits, cooling-off periods, and self-exclusion requests; fulfilling our duty of care to Pakistani players.
• Security and Fraud Prevention: Detecting and preventing unauthorised account access; identifying multi-accounting, bonus abuse, and other prohibited conduct; protecting the integrity of the 66zz platform.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience for Pakistani players.
• Marketing (Consent-Based Only): Sending promotional offers, bonus announcements, and PSL or cricket betting updates to players who have explicitly opted in to marketing communications.

Data Sharing

66zz does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard receive the transaction data necessary to process your deposits and withdrawals. These entities are independently regulated financial service providers subject to their own data protection obligations.
• KYC and Identity Verification Providers: Specialist identity verification service providers receive your identity documents for the purpose of processing your KYC verification. These providers act as data processors under contractual obligations.
• Fraud Prevention and AML Screening Services: We share limited identifying information with fraud-prevention and anti-money-laundering screening databases to fulfil our compliance obligations under our gaming license.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or our licensing authority, 66zz will disclose personal data to the relevant authority. We will notify you of such a disclosure where legally permitted to do so.
• Game Content Providers: Where you play games provided by third-party studios, limited technical session data may be shared with the provider to facilitate game operation. Game providers do not receive your identity or financial data.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of 66zz's assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments. You will be notified of any such transfer in advance.

Cookies & Tracking

The 66zz platform uses cookies and similar tracking technologies to operate correctly, maintain session security, and — where you have consented — to analyse usage patterns. The categories of cookies we use are:

You can manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to or using the 66zz platform. Disabling analytics cookies will not affect your ability to use any platform feature.

Data Retention

66zz retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by our licensing obligations and applicable law. Our standard retention periods are:

• Active Account Data: Retained for the full duration of your account's active status, plus a post-closure period of five years to satisfy licensing record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five years following account closure, as required under international anti-money-laundering standards.
• Transaction Records: Retained for five years from the date of the transaction, consistent with standard financial record-keeping requirements.
• Support Correspondence: Retained for two years from the date of the last interaction in the relevant support thread.
• Technical and Session Logs: Retained for 90 days for active security monitoring, then anonymised.
• Marketing Consent Records: Retained for two years following withdrawal of consent, to evidence that consent was properly given and withdrawn.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual. Where anonymisation is the chosen approach, the resulting anonymised data may be retained indefinitely for statistical purposes.

Data Security

66zz implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• Transport Security: All data transmitted between your device and 66zz is encrypted using TLS 1.2 or higher (256-bit SSL). HTTP connections are automatically redirected to HTTPS.
• Password Security: Account passwords are hashed using a strong one-way hashing algorithm with individual salts. No 66zz employee or system can read your password in plain text. If you forget your password, it is reset — not retrieved.
• Access Controls: Internal access to personal data is restricted to employees and contractors who require it to perform their specific job function. All internal access is logged and subject to periodic access review.
• Two-Factor Authentication: 66zz supports and encourages the use of two-factor authentication (2FA) on all player accounts to reduce the risk of unauthorised access.
• Fraud Detection Systems: Automated systems monitor for unusual account behaviour, including unusual login locations, rapid deposit-withdrawal cycles, and other patterns associated with account compromise or fraudulent activity.
• Incident Response: 66zz maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players and relevant authorities without undue delay.

While we implement robust technical and organisational security measures, no internet-based system is completely immune to risk. You are responsible for maintaining the security of your own device, browser, and 66zz account credentials. If you suspect your account has been compromised, contact 66zz support immediately.

Your Rights

As a 66zz player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our support team at [email protected] with your registered account details and a clear description of your request. We will respond within 30 days.

Where a data request cannot be fulfilled — for example because retaining the data is required by our licensing obligations — we will explain the reason clearly and advise you of any available options.

Minors & Age Policy

The 66zz platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in our KYC process, and all accounts are required to pass age verification before a first withdrawal can be processed.

If 66zz discovers that personal data has been collected from an individual who was under 21 years of age at the time of registration, the account will be immediately closed, all balances will be forfeited, and all personal data associated with the account will be deleted except where retention is required by law or our licensing obligations to document the breach.

If you are a parent or guardian and believe that a minor has registered an account on the 66zz platform, please contact us immediately at [email protected]. We take underage gambling prevention extremely seriously and will act on such reports as an urgent priority.

International Transfers

As an internationally licensed platform, 66zz may process or store certain categories of personal data on servers located outside Pakistan. Where personal data is transferred internationally, 66zz ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

International data transfers at 66zz may occur in the following contexts:

• Transmission of KYC data to identity verification providers whose processing infrastructure may be located in multiple jurisdictions.
• Storage of platform data on cloud infrastructure provided by reputable international providers operating under certified security frameworks.
• Processing of card transactions through international payment networks operating under Payment Card Industry (PCI-DSS) security standards.

In all cases, 66zz applies contractual data protection obligations on data recipients that are no less stringent than those set out in this Privacy Policy. If you require further detail on international transfer safeguards, contact [email protected].

Changes to This Policy

66zz may update this Privacy Policy from time to time to reflect changes in our data practices, our platform services, applicable law, or our licensing requirements. When material changes are made — those that significantly affect your rights or how your data is used — we will notify registered players via their registered email address at least 7 days before the change takes effect.

The "Last Updated" date at the top of this page indicates when the current version was published. We encourage you to review this Policy periodically to stay informed about how 66zz protects your personal data. Your continued use of the 66zz platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy.

Previous versions of this Privacy Policy are available upon request by contacting our support team.

Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 66zz handles your personal data, please contact us through the following channels. All contacts are treated as plain-text references — do not attempt to reach 66zz through unofficial third-party channels.

• Data Queries Email: [email protected]
• Live Chat: Available on-site 24 hours a day, 7 days a week
• Response Commitment: We acknowledge data-related queries within 48 hours and provide a substantive response within 30 days

If you are not satisfied with our response to a data protection concern, you have the right to escalate the matter to the relevant supervisory authority under the jurisdiction of 66zz's operating license. Details of the applicable supervisory authority will be provided upon request.

When contacting us regarding a Privacy Policy matter, please include your registered account username and a clear description of your request or concern to help us respond as efficiently as possible.