pp666 Privacy Policy
— Your Data, Handled
With Respect

1 Introduction & Scope

This Privacy Policy ("Policy") is published by pp666 ("pp666", "we", "us", "our") and applies to all personal data collected from individuals ("you", "the Player", "the User") who access, register on, or otherwise interact with the pp666 platform, accessible at pp666.vu and any associated subdomains or mobile interfaces.

pp666 is committed to processing your personal data lawfully, fairly, and transparently in accordance with applicable data protection legislation and the obligations imposed by our international gaming licence. This Policy forms part of the broader contractual relationship between you and pp666, alongside the pp666 Terms & Conditions and the Responsible Gaming Policy.

2 Data Controller

For the purposes of applicable data protection law, pp666 acts as the data controller in respect of personal data collected from players and users of the pp666 platform. As data controller, pp666 determines the purposes for which and the means by which your personal data is processed.

All data protection queries, subject access requests, and privacy complaints should be directed to the pp666 data protection point of contact via the channels set out in Section 15 of this Policy.

3 Personal Data We Collect

pp666 collects personal data through multiple channels during the course of your use of the platform. The categories of data collected and the primary collection context for each are set out in the table below.

3.1 Sensitive Personal Data

pp666 does not intentionally collect special categories of sensitive personal data (including health, biometric, or religious data) as part of its standard registration or operational processes. Where such data is provided voluntarily in the context of a responsible gaming referral or support interaction, it is processed strictly for the purpose for which it was provided and is not retained beyond the resolution of the relevant interaction.

3.2 Data from Third Parties

In the course of KYC verification, pp666 may receive personal data about you from third-party identity verification providers, credit reference agencies, sanctions screening services, and fraud prevention databases. This data is used solely to fulfil pp666's legal and regulatory obligations and is not used for marketing purposes.

4 How pp666 Uses Your Personal Data

pp666 processes your personal data for the following purposes:

• Account Creation & Management: To register your pp666 account, maintain your profile, and administer your balance, bonuses, and preferences.
• Identity Verification (KYC): To verify your identity and age in compliance with anti-money laundering obligations and our licensing requirements before processing withdrawals or approving large deposits.
• Payment Processing: To facilitate PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20, and to process withdrawal requests to verified payment methods.
• Customer Support: To respond to your queries, resolve disputes, and maintain records of support interactions for quality and compliance purposes.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, and other prohibited conduct on the pp666 platform.
• Responsible Gaming Monitoring: To monitor gameplay patterns for indicators of problem gambling behaviour and to administer the responsible gaming tools requested by players, including self-exclusion orders.
• Legal & Regulatory Compliance: To fulfil pp666's obligations under applicable anti-money laundering law, gaming regulation, and the requirements of our international gaming licence.
• Platform Improvement: To analyse aggregated usage data for the purpose of improving the pp666 platform, game library, payment infrastructure, and customer experience — exclusively using anonymised or pseudonymised data at this stage.

5 Legal Basis for Processing

pp666 processes your personal data only where a valid legal basis exists under applicable data protection law. The relevant legal bases for pp666's data processing activities are:

• Contractual Necessity: Processing required to perform the contract between you and pp666 — including account registration, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable law — including KYC verification, AML record-keeping, and reporting obligations to our licensing authority.
• Legitimate Interests: Processing conducted for the legitimate interests of pp666 or its players, where those interests are not overridden by your privacy rights — including fraud detection, platform security, and responsible gaming monitoring.
• Consent: Where processing is based on consent (such as optional marketing communications), pp666 will obtain your explicit, informed consent before processing and will not condition access to pp666 services on the provision of marketing consent.

6 Data Sharing & Disclosure

pp666 does not share your personal data with third parties except in the following circumstances:

6.1 Service Providers

pp666 engages third-party service providers to support platform operations, including: payment processing partners (JazzCash, EasyPaisa, and banking partners for HBL, UBL, Meezan Bank, Allied Bank); identity verification and KYC service providers; fraud detection technology providers; cloud infrastructure and hosting providers; and live chat support platform operators. All such service providers are engaged under contractual terms that restrict their use of your data to the specific services they provide to pp666 and prohibit any independent use of your personal data.

6.2 Regulatory & Legal Disclosure

pp666 may be required to disclose your personal data to its licensing authority, regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required by applicable law, court order, or legally valid regulatory directive. pp666 will notify you of any such disclosure request to the extent permitted by law.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the pp666 business, your personal data may be transferred to the acquiring entity as part of the transaction. pp666 will notify you of any such transfer and any material change to the data controller identity in advance of the transfer taking effect.

7 International Data Transfers

The pp666 platform serves Pakistani players and some of our service providers and infrastructure partners operate in jurisdictions outside Pakistan. Where personal data is transferred to a country that does not provide a level of data protection equivalent to that applicable in the jurisdiction of our gaming licence, pp666 implements appropriate safeguards for such transfers, including standard contractual clauses and data processing agreements that impose obligations on data recipients consistent with this Policy.

Payment data relating to JazzCash and EasyPaisa transactions is processed within Pakistan by the respective domestic payment operators and is not subject to international transfer by pp666.

8 Data Retention

pp666 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law or our regulatory obligations. The principal retention periods applicable to pp666 data categories are:

• Account & KYC Data: Retained for the duration of your pp666 account and for a minimum of 5 years following account closure, in compliance with AML record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of 5 years following the date of each transaction, as required by applicable financial regulation.
• Customer Support Records: Retained for 3 years following resolution of the relevant interaction, except where the record relates to a formal dispute or legal claim, in which case it is retained until the matter is fully resolved.
• Responsible Gaming Data: Retained for the duration of any active self-exclusion or cooling-off period and for 5 years thereafter, to ensure compliance with self-exclusion obligations and to protect the player's stated preferences.
• Marketing Consent Records: Retained until consent is withdrawn, plus 1 year thereafter as evidence of consent status.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes.

9 Security Measures

pp666 implements a layered information security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. The principal security measures in place at pp666 include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and the pp666 platform;
• AES-256 encryption for personal and financial data stored in the pp666 database infrastructure;
• Role-based access controls limiting internal access to personal data to authorised personnel only, on a strict need-to-know basis;
• Two-factor authentication (2FA) enforced for internal staff access to all systems holding player data;
• Regular penetration testing and security audits conducted by independent third-party security specialists;
• 24/7 monitoring of the pp666 infrastructure for anomalous access patterns and potential security incidents;
• Documented incident response procedures, including a commitment to notify affected players and relevant authorities within 72 hours of identifying a data breach that poses a risk to player rights.

10 Cookies & Tracking Technologies

10.1 What Cookies pp666 Uses

pp666 uses the following categories of cookies on its platform:

• Strictly Necessary Cookies: Required for the pp666 platform to function — including session management, authentication, and security tokens. These cannot be disabled without affecting platform functionality.
• Functional Cookies: Remember your preferences on pp666, such as language settings, game lobby view preferences, and responsible gaming tool configurations.
• Analytical Cookies: Used to understand how players navigate and use the pp666 platform, allowing us to identify areas for improvement. Data collected is aggregated and pseudonymised.

10.2 What pp666 Does Not Use

pp666 does not deploy third-party advertising cookies, social media tracking pixels, or cross-site tracking technologies on its platform. No data collected via pp666 cookies is shared with external advertising networks or marketing platforms.

10.3 Managing Cookie Preferences

You can manage your cookie preferences — including opting out of analytical cookies — through the pp666 cookie settings panel accessible from the platform footer. Note that disabling strictly necessary cookies will impair your ability to use pp666 services.

11 Your Privacy Rights

Subject to applicable law and any overriding regulatory obligations, every pp666 player holds the following rights in respect of their personal data:

• Right of Access: You may request a copy of the personal data pp666 holds about you (a Subject Access Request). pp666 will respond within 30 days of receipt of a valid request.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data pp666 holds about you. Corrections to identity data may require supporting documentation.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. This right does not apply where pp666 is required to retain data by law (e.g., AML record-keeping obligations).
• Right to Restrict Processing: You may request that pp666 restrict processing of your personal data in certain circumstances — for example, while a dispute regarding data accuracy is under review.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or a contract, you may request a machine-readable copy of the data you have provided to pp666.
• Right to Object: You may object to processing carried out on the basis of pp666's legitimate interests, including profiling for fraud prevention purposes. pp666 will assess and respond to such objections.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, contact pp666 via the channels in Section 15. pp666 will not charge a fee for handling privacy rights requests except in cases of manifestly unfounded or excessive requests.

12 Children & Minors

The pp666 platform is strictly for adults aged 21 years and over. pp666 does not knowingly collect personal data from any person under the age of 21. If pp666 becomes aware that personal data has been collected from a person under 21, that data will be immediately deleted and the associated account will be closed in accordance with pp666's age verification and underage gambling policy.

If you are a parent or guardian and believe that a person under 21 in your care has registered on the pp666 platform, please contact pp666 support immediately using the contact details in Section 15. pp666 treats such reports as a priority and will act on them without delay.

13 Responsible Gaming & Data Processing

pp666 uses gameplay data — including session duration, wagering frequency, deposit patterns, and use of responsible gaming tools — to monitor for behavioural indicators associated with problem gambling. This processing is carried out on the basis of pp666's legitimate interest in protecting the welfare of its players and its regulatory obligation to promote responsible gaming.

Where pp666's monitoring systems identify patterns of concern, pp666 may make proactive contact with the relevant player to offer information about responsible gaming resources and to invite the player to review their responsible gaming tool settings. This does not constitute a conclusion that the player has a gambling problem — it is a welfare measure. For full details, see the pp666 Responsible Gaming Policy.

14 Updates to This Privacy Policy

pp666 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or our licensing obligations. Material changes to this Policy — meaning changes that affect the nature or purpose of processing your personal data — will be communicated to registered pp666 players via email or through an in-platform notification, with a minimum of 14 days' notice before the updated Policy takes effect.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of pp666 following the effective date of any update constitutes acceptance of the revised Policy.

15 Contact & Privacy Complaints

For all privacy-related queries, Subject Access Requests, data correction requests, consent withdrawal, or formal privacy complaints, please contact the pp666 data protection team through the following channels:

• Live Chat: Available 24/7 on the pp666 platform — average response time under 5 minutes for general queries.
• Email: [email protected] — for formal Subject Access Requests, written complaints, and data deletion requests, email is the recommended channel to ensure a documented record is maintained.

pp666 commits to acknowledging privacy complaints and Subject Access Requests within 5 business days and providing a substantive response within 30 calendar days of receipt. Complex requests may require additional time — in such cases, pp666 will notify you of the expected timeframe within the initial acknowledgement.

Where you are not satisfied with pp666's handling of a privacy complaint, you may have the right to lodge a complaint with the relevant supervisory authority or data protection regulator in the jurisdiction applicable to your situation.