Privacy Policy

b6668 ("we", "us", "our" or "the Platform") operates the website accessible at https://b6668.cam as an English-language online betting and live casino information platform designed for Pakistani users and other eligible audiences. We take the privacy of all users — whether browsing from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar or anywhere else — seriously, and we are committed to handling personal data responsibly and transparently.

This Privacy Policy ("Policy") sets out in detail the categories of personal data b6668 collects, the purposes for which that data is processed, the legal bases upon which processing rests, the parties with whom data may be shared, the security measures we employ, the period for which we retain data, and the rights available to you as a data subject.

If you do not agree with the terms of this Policy, you must discontinue use of the Platform immediately. Where required by applicable law, we will seek your explicit consent before processing certain categories of sensitive personal data.

In this Policy, the following terms carry the meanings set out below:

b6668 collects Personal Data across several categories, each serving a defined and legitimate purpose. The categories of data we may collect include:

b6668 collects Personal Data through the following channels and mechanisms:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, submitting a support enquiry or updating your account profile.
• Automated Technical Means: Data collected passively as you interact with the Platform, including via cookies, web beacons, server logs and similar technologies that record Technical Data and Usage Data.
• Third-Party Sources: Data received from identity verification service providers, payment processors, fraud prevention agencies and, where applicable, credit reference agencies — solely to the extent necessary for KYC/AML compliance.
• Responsible Gambling Tools: Data generated when you interact with self-exclusion, limit-setting or session management features within your account settings.

b6668 processes Personal Data for the following defined purposes. Processing is limited strictly to what is necessary for each purpose:

1. Account Administration: Creating, maintaining, verifying and, where necessary, closing User accounts. This includes processing Identity Data and Contact Data to authenticate users and manage account states.
2. KYC and AML Compliance: Verifying the identity of Users prior to enabling certain account functions, and monitoring transaction activity to detect and prevent money laundering, fraud and other financial crimes as required by applicable regulations.
3. Transaction Processing: Processing deposits, withdrawals and any associated currency conversions, and maintaining accurate financial records of all PKR-denominated and other currency transactions.
4. Customer Support: Responding to enquiries, complaints and support requests submitted via email or live chat, and maintaining records of those communications for quality assurance and dispute resolution purposes.
5. Platform Improvement: Analysing Usage Data and Technical Data in aggregated or pseudonymised form to improve Platform performance, user experience, content relevance and feature development.
6. Responsible Gambling Monitoring: Monitoring account activity for indicators of problem gambling, applying User-configured limits and self-exclusion settings, and fulfilling obligations under applicable responsible gambling standards.
7. Marketing Communications: Sending promotional communications, bonus notifications and Platform updates to Users who have opted in to receive such communications. You may withdraw consent for marketing communications at any time through your account settings or by contacting support.
8. Legal and Regulatory Compliance: Fulfilling obligations arising under applicable laws, regulations and licence conditions, including responding to lawful requests from regulatory authorities or law enforcement agencies.

b6668 processes Personal Data only where a recognised legal basis applies. The primary legal bases relied upon are as follows:

• Contractual Necessity: Processing required to perform the contract between you and b6668, including account creation, transaction processing and customer support delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing necessary for the legitimate interests of b6668 or a third party, where those interests are not overridden by your fundamental rights and freedoms. This includes fraud prevention, Platform security, analytics and responsible gambling monitoring.
• Consent: Processing based on your freely given, specific, informed and unambiguous consent. This applies primarily to optional marketing communications and, where required by law, the placement of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

b6668 does not sell, rent or trade Personal Data to third parties for their own commercial purposes. We may share Personal Data with third parties only in the following circumstances and strictly to the extent necessary:

• Service Providers: Third-party vendors engaged by b6668 to provide specific services, including identity verification (KYC) providers, payment processors, fraud detection services, cloud hosting providers, email delivery platforms and analytics tools. All service providers are bound by data processing agreements requiring them to handle data securely and solely for the purpose specified by b6668.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order or regulatory direction, b6668 will disclose Personal Data to competent authorities. b6668 will, where legally permissible, notify affected Users of such disclosures.
• Responsible Gambling Bodies: Where a User activates a cross-operator self-exclusion programme, relevant account status information may be shared with applicable responsible gambling registers to give effect to that exclusion.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of all or part of b6668's business, Personal Data may be transferred to the acquiring entity, subject to equivalent data protection commitments.
• With Your Consent: For any sharing purpose not listed above, b6668 will seek your explicit prior consent.

b6668 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. The following general retention principles apply:

• Active Accounts: Personal Data associated with an active User account is retained for the duration of the account's existence and for a defined period following account closure.
• Financial and Transaction Records: Transaction records, including PKR deposit and withdrawal history, are retained for a minimum of five (5) years following the relevant transaction date, in accordance with standard AML and financial record-keeping requirements.
• KYC Documentation: Identity verification documents are retained for the period required by the operator's licence jurisdiction, typically a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Support Communications: Customer support correspondence is retained for up to three (3) years to support dispute resolution and quality assurance processes.
• Marketing Data: Personal Data processed solely on the basis of consent for marketing purposes is deleted promptly upon withdrawal of that consent, subject to any overriding legal retention obligation.
• Technical and Usage Data: Pseudonymised or aggregated analytics data may be retained indefinitely. Identifiable Technical Data is deleted or anonymised within twelve (12) months of collection.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any identifiable individual.

b6668 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, analyse usage patterns and, where you have consented, deliver relevant promotional content. The following categories of cookies may be active on the Platform:

• Strictly Necessary Cookies: Essential to the operation of the Platform. They enable core functions such as session management, security token validation and navigation between pages. These cookies cannot be disabled without materially impairing Platform functionality. No consent is required for their use.
• Performance and Analytics Cookies: Collect anonymised or pseudonymised data about how Users interact with the Platform — which pages are visited most frequently, where users navigate from, and how long sessions last. This data informs Platform improvement efforts. These cookies are deployed only where you have provided consent.
• Functional Cookies: Remember your preferences, such as language settings, display options and previously entered information, to improve your experience on return visits.
• Marketing and Targeting Cookies: Used — with your explicit consent — to deliver promotional content that is relevant to your browsing behaviour and preferences. These cookies do not give any third party direct access to Personal Data held by b6668.

b6668 implements a range of technical, administrative and organisational security measures designed to protect Personal Data against unauthorised access, disclosure, alteration, loss or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the b6668 Platform is encrypted using industry-standard HTTPS/TLS protocols.
• Encryption at Rest: Sensitive Personal Data stored in b6668 systems is encrypted at rest using strong encryption standards.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. Internal staff with access to Personal Data are subject to confidentiality obligations and receive regular data protection training.
• Intrusion Detection: b6668 employs automated monitoring and intrusion detection systems to identify and respond to potential security incidents promptly.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, b6668 will notify affected Users and, where required, relevant supervisory authorities, within the timeframe required by applicable law.

Subject to applicable law and any overriding regulatory or legal obligation, you hold the following rights in respect of your Personal Data held by b6668. To exercise any of these rights, contact us at [email protected] with a clear description of your request. We will respond within a reasonable timeframe.

b6668 is strictly an adults-only platform. We do not knowingly collect, store or process Personal Data from any individual under the age of 18 — or the higher minimum age required by the operator's licence jurisdiction. Access to the Platform by minors is expressly prohibited.

If b6668 becomes aware that Personal Data has been collected from a person under the applicable minimum age, that data will be deleted promptly and the associated account will be closed immediately. Any funds deposited by a minor may be subject to forfeiture in accordance with the operator's terms and applicable regulatory requirements.

b6668 operates globally and may transfer Personal Data to, or process it in, countries outside Pakistan, including countries in which b6668's infrastructure providers, KYC vendors or payment processors are based.

Where Personal Data is transferred internationally, b6668 takes appropriate steps to ensure that the receiving party provides an adequate level of protection consistent with the standards applied under this Policy. These steps may include:

• Entering into standard contractual data transfer clauses with the receiving entity;
• Ensuring the receiving country benefits from an adequate level of data protection recognised by applicable law;
• Implementing supplementary technical safeguards such as end-to-end encryption where the adequacy of local protections is uncertain.

By using b6668, you acknowledge that your Personal Data may be transferred and processed in countries outside Pakistan. b6668 does not represent that such transfers are unreservedly lawful under all interpretations of Pakistani law. Users are responsible for satisfying themselves as to their own legal position.

b6668 reserves the right to update or amend this Privacy Policy at any time. Material changes — such as the introduction of new processing purposes, significant changes to data sharing practices or modifications to your rights — will be communicated by updating the "Last Updated" date at the top of this document and, where appropriate, by notifying registered Users via email or a Platform notification.

Your continued use of the b6668 Platform following publication of an updated Policy constitutes your acknowledgement and acceptance of the changes. We encourage you to review this Policy periodically — at minimum once every three months — to remain informed of how your data is being handled.

If you do not accept any amendment to this Policy, you must cease using the Platform and, if applicable, request account closure. Previous versions of this Policy are available on request by contacting our support team.

If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your Personal Data, please contact the b6668 Data Privacy team. All privacy-related communications are handled in English and our team is available 24 hours a day, 7 days a week.

For questions about our Terms & Conditions or our Responsible Gambling commitments, please visit the respective pages or include the relevant topic in your support enquiry.