b9666 Privacy
Policy

b9666 is committed to protecting the privacy and personal data of every player who uses the b9666 platform. We understand that for players in Pakistan, trust and transparency around personal data are important — especially when engaging with an online gaming platform. This Policy explains in plain, accessible English exactly what happens to your data from the moment you register an account on b9666 through to the closure of that account and beyond.

This Policy forms part of the broader legal framework governing your use of b9666, alongside the Terms and Conditions available at /terms-conditions. Where this Policy and the Terms and Conditions overlap on data-related matters, this Policy shall take precedence. The practices described in this Policy reflect b9666's obligations under its international gaming licensing framework, which includes data protection requirements applicable to licensed gaming operators.

For the purposes of this Privacy Policy, b9666 is the data controller in respect of all personal data collected through the b9666 platform. As data controller, b9666 determines the purposes for which personal data is processed and the means by which that processing takes place. b9666 is responsible for ensuring that all data processing activities comply with applicable data protection requirements under its licensing framework.

If you have any questions about how b9666 processes your personal data, or if you wish to exercise any of your data subject rights described in Section 11 of this Policy, you may contact b9666's data protection point of contact directly at [email protected]. Please include "Privacy Request" in the subject line of your email so that your query is directed to the appropriate team member without delay.

b9666 collects the following categories of personal data from players. The specific data collected at each stage of the player journey is outlined in the table below:

b9666 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health data except where directly relevant to a responsible gaming assessment requested by the player.

b9666 collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings, you provide data directly to b9666.
• Automatically through platform use: Technical data — including IP addresses, device identifiers, and session data — is collected automatically when you access the b9666 platform through standard web logging and analytics tools.
• Through cookies and similar technologies: b9666 uses cookies and similar tracking technologies to maintain session security, remember your preferences, and analyse platform usage. See Section 8 for full details on b9666's cookie practices.
• From third-party verification services: When processing KYC verification, b9666 may receive identity verification results from third-party KYC service providers who check the authenticity of documents submitted by players.
• From payment processors: Payment processors used by b9666 — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT payment gateways — may share transaction confirmation data with b9666 as necessary to reconcile player deposits and withdrawals.

b9666 uses the personal data it collects for the following specific purposes:

• Account Management: Creating, maintaining, and administering your b9666 player account, including processing login sessions and account preference changes.
• Identity Verification (KYC): Verifying your identity and age in compliance with b9666's licensing obligations. KYC is required before processing any withdrawal from your b9666 account.
• Payment Processing: Processing deposits and withdrawals via your chosen payment method, and reconciling transaction records for your account balance.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, multiple account registrations, and other prohibited conduct as defined in b9666's Terms and Conditions.
• Regulatory Compliance: Fulfilling b9666's obligations under its international gaming license, including maintaining transaction records, reporting suspicious activity where legally required, and cooperating with regulatory inquiries.
• Customer Support: Responding to player queries, complaints, and support requests submitted via live chat or email.
• Responsible Gaming: Monitoring player activity for signs of problem gambling and administering deposit limits, cooling-off periods, and self-exclusion requests.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the b9666 platform, identify technical issues, and enhance the player experience.
• Marketing (with consent): Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive marketing communications. See Section 12 for full details.

b9666 processes personal data on the following legal bases, consistent with the data protection requirements applicable under its licensing framework:

• Contractual Necessity: Processing your registration data, payment information, and KYC identity data is necessary for b9666 to perform its contractual obligations to you as a player — specifically to provide a functioning account, process transactions, and enable gameplay.
• Legal Obligation: b9666 is required by its gaming license to conduct KYC verification, maintain transaction records for a minimum retention period, and report certain activities to relevant authorities. This data is processed on the basis of legal obligation.
• Legitimate Interests: b9666 processes technical data, session data, and fraud detection data on the basis of its legitimate interest in maintaining platform security, preventing fraud, and protecting the integrity of the gaming environment for all players.
• Consent: Where b9666 relies on your consent — specifically for marketing communications and non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

b9666 does not sell, rent, or trade your personal data to any third party. Personal data is shared with third parties only in the following limited circumstances, and only to the extent necessary for the specified purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT payment gateway providers receive the minimum payment data necessary to process your deposits and withdrawals.
• KYC Verification Services: Third-party identity verification providers receive your KYC documents solely for the purpose of verifying document authenticity as part of b9666's compliance obligations.
• IT Infrastructure Providers: Cloud hosting and server infrastructure providers who store b9666 platform data process personal data on b9666's behalf under strict data processing agreements that prohibit any use of the data for the provider's own purposes.
• Regulatory Authorities: b9666 may be required to disclose player data to gaming regulators, financial intelligence units, or law enforcement authorities where legally compelled to do so.
• Fraud Prevention Networks: In cases of confirmed fraud, b9666 may share relevant account data with fraud prevention databases and other licensed gaming operators to prevent serial fraudulent activity across platforms.

b9666 uses cookies and similar tracking technologies on the b9666 website. Cookies are small text files stored on your device that help the platform remember your preferences and maintain session security. b9666 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the b9666 platform to function correctly. They manage your login session, maintain account security, and prevent cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised information about how players use the b9666 platform — such as which pages are visited most frequently and whether any pages generate error messages. This data is used to improve the platform and is not linked to individual player identities.
• Preference Cookies: These cookies remember your account settings and display preferences, such as your language preference and notification settings, so that they persist across sessions.
• Marketing Cookies (Consent Required): Where you have consented to receive personalised promotional content, marketing cookies may be used to serve relevant bonus offers and promotions based on your activity patterns. These cookies are only active where you have provided explicit consent.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from accessing your b9666 account. Disabling other cookie categories will not affect your ability to log in or play, but may result in a less personalised experience.

b9666 retains personal data only for as long as is necessary for the purpose it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Account and registration data: Retained for the duration of your account's active life, plus a minimum of five years following account closure, in compliance with b9666's gaming license retention requirements.
• KYC identity documents: Retained for a minimum of five years following the last transaction on your account, as required under anti-money laundering and gaming license obligations.
• Transaction and gaming history: Retained for a minimum of five years for regulatory compliance and dispute resolution purposes.
• Support and communications records: Retained for three years following the resolution of the relevant inquiry or complaint.
• Technical and session data: Retained for 12 months on a rolling basis for fraud detection and security monitoring purposes.
• Marketing consent records: Retained for the duration of your account and for two years following account closure or marketing opt-out, as evidence of consent history.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

b9666 implements a comprehensive set of technical and organisational security measures to protect player personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• AES-256 Encryption: All personal data stored in b9666's databases is encrypted using AES-256 encryption, the same standard used by major financial institutions globally.
• TLS/SSL Transport Security: All data transmitted between your device and the b9666 platform is protected using TLS 1.3 encryption, visible as the HTTPS prefix in your browser's address bar.
• Access Controls: Access to personal data within b9666's internal systems is restricted on a strict need-to-know basis. All internal access is authenticated, logged, and subject to regular audit.
• Penetration Testing: b9666's platform undergoes regular security assessments including penetration testing by independent security professionals to identify and address vulnerabilities.
• Incident Response: b9666 maintains a documented data breach response procedure. In the event of a data breach that is likely to result in a risk to player rights, b9666 will notify affected players without undue delay.

As a b9666 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact b9666 at [email protected] with "Privacy Request" in the subject line. b9666 will respond to all data rights requests within 30 days of receipt.

b9666 may send promotional communications — including bonus offers, new game announcements, tournament invitations, and platform updates — to players who have explicitly opted in to receive such communications. Marketing consent is collected during the account registration process and can be updated at any time through your account notification preferences.

b9666 will never send unsolicited marketing communications to players who have not provided explicit consent. If you receive a marketing communication from b9666 that you did not consent to, please report it to [email protected] so that the issue can be investigated and corrected.

You may opt out of all marketing communications from b9666 at any time by:

• Clicking the "Unsubscribe" link present in all b9666 marketing emails
• Updating your notification preferences in your b9666 account dashboard
• Contacting b9666 support at [email protected] with the subject line "Marketing Opt-Out"

Opt-out requests are processed within 48 hours. Please note that opting out of marketing communications does not affect transactional communications from b9666, such as deposit confirmations, withdrawal notifications, and account security alerts, which are sent regardless of marketing preferences as they relate to your account operations.

The b9666 platform is strictly for individuals aged 21 years and above. b9666 does not knowingly collect personal data from individuals under the age of 21. If b9666 identifies or is notified that personal data has been collected from a person under 21 years of age, that data will be deleted immediately and the associated account will be closed without notice.

b9666 implements age verification checks at account registration level and reserves the right to request KYC documents confirming a player's date of birth at any time. Accounts that cannot provide satisfactory proof of age will be suspended pending verification and closed where verification is not provided within a reasonable period.

b9666 operates under an international gaming license and, as a result, some personal data processing activities — such as cloud infrastructure hosting and KYC verification services — may involve the transfer of personal data to servers or processors located outside Pakistan. Where such transfers occur, b9666 ensures that appropriate safeguards are in place to protect your personal data to the same standard as described in this Policy.

Safeguards for international data transfers employed by b9666 include:

• Contractual clauses in data processing agreements with third-party processors that require equivalent data protection standards regardless of the processor's geographic location
• Selection of third-party processors that operate under recognised international data protection frameworks or certifications
• Encryption of all data in transit and at rest, ensuring that any data transferred internationally is protected during transmission and storage

Where you have questions about the specific countries to which your personal data may be transferred, you may submit a data rights request to [email protected] requesting details of any international processing activities that apply to your account data.

b9666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform operations. Where material changes are made to this Policy — that is, changes that significantly affect how b9666 uses your personal data or your rights in relation to it — b9666 will notify registered players via email and via an in-platform notification displayed upon next login.

The updated Policy will be published on the b9666 website at b9666.app/privacy-policy with a revised "Last Updated" date prominently displayed at the top of the page. Minor clarifications or formatting changes that do not affect the substance of the Policy may be made without specific notification but will always be reflected in the updated "Last Updated" date.

Your continued use of the b9666 platform following the effective date of any revised Privacy Policy constitutes acceptance of the updated practices described therein. b9666 recommends that players review this Policy periodically to stay informed about how their data is being handled.

If you have any questions, concerns, or requests relating to this Privacy Policy or to b9666's handling of your personal data, please contact the b9666 privacy team through the following channels:

• Email: [email protected] — please use the subject line "Privacy Request" or "Privacy Complaint" as appropriate
• Live Chat: Available 24/7 via the b9666 platform at b9666.app
• FAQ: General privacy questions may be answered in the b9666 FAQ at /faq

b9666 aims to respond to all privacy-related queries within 72 hours and to resolve complaints within 30 days of receipt. If you are not satisfied with b9666's response to a privacy complaint, you may refer the matter to the data protection supervisory authority applicable under b9666's licensing jurisdiction or to the independent dispute resolution service designated under b9666's gaming license.