Privacy Policy – y666 Casino

Who We Are – Data Controller

y666 Casino ("y666," "we," "us," or "our") operates the online casino and sports betting platform accessible at y666.asia and all associated sub-domains. y666 is the data controller responsible for the personal data you provide when registering, using, or transacting on the Platform.

This Privacy Policy applies to all personal data processed by y666 in connection with the registration, operation, and termination of player accounts on y666.asia, including data collected during the identity verification (KYC) process, deposit and withdrawal transactions, and customer support interactions. By registering an account at y666, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

If you have questions about this Privacy Policy or wish to exercise your data rights, you may contact y666's data protection team at [email protected] (displayed as plain text – not a clickable link).

Personal Data We Collect

y666 collects personal data from players through several channels including account registration forms, the identity verification process, payment transactions, gameplay activity, and customer support communications. The categories of personal data we collect include:

y666 does not collect sensitive personal data beyond what is strictly necessary for identity verification and regulatory compliance. y666 does not request or store full payment card numbers; card data is tokenised by our PCI-DSS compliant payment processors and y666 retains only the tokenised reference.

How We Use Your Personal Data

y666 processes your personal data exclusively for the following defined purposes. We do not use your data for any purpose that is incompatible with those listed below:

• Account Registration and Management: To create and maintain your y666 account, verify your identity, process your login credentials securely, and manage account settings including responsible gaming tools such as deposit limits, loss limits, and self-exclusion.
• Transaction Processing: To process PKR deposits via JazzCash, Easypaisa, HBL, and other accepted payment methods; to process withdrawal requests; and to maintain accurate financial records of all transactions associated with your account.
• Identity Verification (KYC/AML): To verify that you are who you claim to be, that you are aged 18 or over, and to comply with anti-money laundering (AML) regulations applicable to online gaming platforms. KYC processing is a legal obligation and cannot be opted out of by players who wish to withdraw funds.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, bonus abuse, collusion, and other prohibited activities as defined in the y666 Terms and Conditions.
• Customer Support: To respond to your queries, complaints, and support requests via live chat, email, or SMS. Support communications are retained to maintain a record of your interaction history with y666.
• Responsible Gaming Compliance: To monitor gaming patterns for signs of problem gambling and to enforce self-exclusion and account restriction settings that you have applied to your y666 account.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, usability, and content of y666.asia. Individual player data is not used for platform analytics without anonymisation.
• Marketing Communications (with consent only): To send you promotional offers, bonus notifications, and PSL / cricket betting alerts via SMS or email – but only where you have explicitly opted in to marketing communications during registration or through your account settings. You may withdraw this consent at any time.

Legal Basis for Processing

y666 processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and y666, including account management, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws, including identity verification (KYC), anti-money laundering (AML) checks, and record-keeping obligations under gaming regulations.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where y666's legitimate interests do not override your fundamental rights and freedoms.
• Consent: Processing for marketing communications, where your freely given, specific, and informed consent has been obtained. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Data Sharing & Third Parties

y666 does not sell, rent, or commercially transfer your personal data to third parties for their own marketing purposes under any circumstances. Personal data is shared with third parties only in the following limited circumstances, and only to the minimum extent necessary:

• Payment Processors: JazzCash, Easypaisa, and other payment partners receive the transaction data strictly necessary to process your deposits and withdrawals. These partners operate under their own privacy policies and data protection frameworks.
• Identity Verification Providers: Third-party KYC service providers receive identity documents and personal data necessary to perform CNIC verification and age confirmation. All such providers are contractually bound to process data solely for KYC purposes.
• Game Software Providers: Casino game providers may receive anonymised session identifiers necessary to authenticate your game session. No personal identity data is shared with game providers.
• Legal and Regulatory Authorities: y666 may disclose personal data to law enforcement agencies, gaming regulators, or courts where required by a valid legal obligation, court order, or regulatory directive.
• Fraud Prevention Networks: Anonymised or pseudonymised risk signals may be shared with industry fraud prevention databases to identify and block fraudulent account activity across the online gaming sector.

All third parties with whom y666 shares personal data are required to maintain appropriate technical and organisational security measures and to process data only for the specified purpose under contractual data processing agreements.

Cookies & Tracking Technologies

y666.asia uses cookies and similar tracking technologies to operate the Platform efficiently, remember your login session, and analyse site usage in aggregate. The categories of cookies used by y666 are as follows:

• Essential Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your y666 session. Disabling essential cookies will prevent the Platform from operating correctly.
• Functional Cookies: Remember your preferences such as language settings, game lobby filter configurations, and responsible gaming alert settings.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate y666.asia. This information is used solely to improve Platform performance and user experience. Individual players are not identifiable through analytics data.
• Security Cookies: Support fraud detection and security functions by identifying anomalous session behaviour patterns that may indicate account compromise or automated bot activity.

y666 does not use advertising or cross-site tracking cookies. You may manage cookie preferences through your browser settings. Note that disabling essential cookies will affect Platform functionality including your ability to log in and maintain a game session.

Data Retention

y666 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods driven by legal and regulatory obligations:

• Account and identity data is retained for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements applicable to online gaming operators.
• Financial transaction records, including all PKR deposits and withdrawals, are retained for a minimum of five (5) years from the date of the transaction.
• KYC verification documents are retained for five (5) years post-account closure or such longer period as required by applicable gaming regulations.
• Customer support communications are retained for three (3) years from the date of the last interaction.
• Technical and session log data is retained for twelve (12) months and then purged unless required for an ongoing fraud investigation or legal matter.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with y666's data disposal procedures.

Data Security

y666 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption across all y666.asia pages, including login, cashier, and account management sections.
• Password hashing using industry-standard cryptographic algorithms. y666 staff cannot view plain-text passwords at any time.
• Two-factor authentication (2FA) via SMS to your registered Pakistani mobile number, available to all account holders.
• Access controls limiting internal staff access to personal data on a strict need-to-know basis, with full access logging.
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure.
• PCI-DSS compliant payment processing for card transactions, with payment credential tokenisation.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, y666 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

Your Data Rights

As a registered player on y666.asia, you have the following rights in respect of your personal data. To exercise any of these rights, please contact y666 at [email protected]:

• Right of Access: You have the right to request a copy of all personal data that y666 holds about you. We will provide this within 30 days of a verified request.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data. Account contact details can be updated directly in Account Settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where y666 no longer has a legal basis to retain it. Note that AML and gaming regulation record-keeping obligations will apply and may prevent full erasure of certain data categories.
• Right to Restrict Processing: You may request that y666 restrict processing of your data while a rectification or objection request is under review.
• Right to Data Portability: You may request that y666 provide your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object to Marketing: You may withdraw consent to marketing communications at any time via Account Settings → Notifications, or by contacting customer support. Withdrawal of marketing consent does not affect the processing of data for contractual or legal purposes.

Children's Privacy

y666 does not knowingly collect personal data from any individual under the age of 18. The Platform is intended for adult users only. Age verification is conducted as part of the registration and KYC process to prevent minor access.

If y666 becomes aware that personal data has been collected from a person under the age of 18, the account will be immediately suspended, all associated data will be deleted, and any funds will be returned to the originating payment method following verification. If you have reason to believe that a minor has accessed or registered on y666.asia, please notify y666 support at [email protected] immediately.

Changes to This Privacy Policy

y666 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. The updated Policy will be published on this page with a revised effective date. Where changes are material, y666 will notify registered players via the mobile number or email address on their account at least seven (7) days before the revised Policy takes effect.

Your continued use of y666.asia after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We recommend reviewing this page periodically to stay informed about how y666 protects your data.

Contact Us – Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the personal data y666 holds about you, please contact our data protection team through the following channels:

• Email: [email protected] (plain text – not a clickable link)
• Live Chat: Available 24/7 on y666.asia – fastest response channel for urgent data matters

y666 will acknowledge all data rights requests within 48 hours and provide a substantive response within 30 calendar days. Where a request is complex or involves multiple data categories, we may extend this period by a further 30 days and will inform you accordingly.