t666 Privacy Policy

This Privacy Policy is issued by t666, the operator of the online gaming platform accessible at t666.blog ("t666," "we," "us," "our"). t666 acts as the data controller for all personal data collected from players who register, access, or otherwise interact with the t666 platform.

For all privacy-related enquiries, data subject requests, or complaints, players may contact the t666 privacy team using the details set out in Section 14 of this Policy. t666's privacy team will acknowledge all enquiries within 48 hours and aim to resolve them within 30 calendar days.

This Privacy Policy applies to all personal data processed by t666 in connection with: account registration and management, deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, USDT, and BTC, KYC identity verification, participation in games and betting markets, the Rewards and Mine loyalty programmes, and all customer support interactions.

t666 collects personal data from you in the following categories. The data collected in each category depends on the features of the t666 platform you use and the stage of your account relationship:

t666 does not collect sensitive special-category data — such as health, racial, religious, or political information — from players. Where a player voluntarily discloses sensitive information in the context of a responsible gaming conversation (for example, disclosing a gambling problem), that information is handled with strict confidentiality and used only to provide appropriate support.

t666 uses the personal data it collects for the following specific purposes:

• Account Creation and Management: To register your t666 account, verify your identity, maintain your account settings, and provide you with access to the full platform.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, USDT, and BTC. Financial data is shared only with payment processors strictly for the purpose of completing transactions.
• KYC and Compliance: To verify your age (21+ requirement) and identity, to comply with anti-money laundering (AML) obligations, and to meet the requirements of t666's international gaming license.
• Game Delivery and Fairness: To provide access to casino games, live dealer tables, slot games, and cricket and sports betting markets, and to ensure game outcomes are correctly recorded and disputes can be investigated.
• Customer Support: To respond to your support queries, process complaints, and manage responsible gaming requests including deposit limits, cooling-off periods, and self-exclusion.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, money laundering, multi-accounting, bot usage, and other prohibited conduct, using automated monitoring and manual review.
• Rewards and Promotions: To administer the t666 Rewards points programme, the Mine daily bonus feature, and promotional offers, including tracking qualifying activity and distributing reward credits.
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how players interact with the t666 platform and to improve the user experience for Pakistani players on mobile and desktop.
• Marketing Communications: To send you promotional emails, SMS, or on-site notifications about t666 bonuses, new game releases, and cricket betting markets — but only where you have consented to receive marketing communications or have not opted out.
• Legal Obligations: To comply with applicable laws and regulations, respond to law enforcement requests, and fulfil reporting obligations under t666's gaming license and AML framework.

t666 processes your personal data only where a valid legal basis exists. The primary legal bases on which t666 relies are:

• Contractual Necessity: Processing required to perform the contract between t666 and you as a registered player — including account management, payment processing, game delivery, and KYC verification. Without this processing, t666 cannot provide the service.
• Legal Obligation: Processing required to comply with applicable laws — including AML reporting, age verification requirements under t666's gaming license, and responses to lawful law enforcement requests.
• Legitimate Interests: Processing carried out for t666's legitimate business interests, including fraud detection, security monitoring, abuse prevention, platform analytics, and responsible gaming monitoring — where those interests are not overridden by your privacy rights.
• Consent: Processing carried out on the basis of your explicit, freely given consent — primarily marketing communications. You may withdraw consent at any time by adjusting your communication preferences in your account settings or by contacting t666 support.

t666 does not sell, rent, or commercially transfer your personal data to third parties. Your data is shared only in the following specific, controlled circumstances:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processing services receive the financial data necessary to process your deposit and withdrawal requests. These providers act as data processors under binding agreements and are not permitted to use your data for their own purposes.
• Identity Verification (KYC) Services: t666 may use third-party identity verification providers to assist with CNIC verification, selfie matching, and address validation. These providers process KYC data only as instructed by t666.
• Game Providers: Certain game providers whose titles are hosted on the t666 platform may receive a player identifier and game session data necessary to deliver the game experience. No personally identifiable contact details are shared with game providers.
• Regulatory and Law Enforcement Authorities: t666 may disclose personal data where required by law, court order, or by the demands of a regulatory authority with jurisdiction over t666's gaming operations. t666 will notify you of such disclosures where legally permitted to do so.
• Internal Group Companies: Where t666 operates through affiliated entities, limited account and compliance data may be shared within the group for the purposes of centralised compliance monitoring and fraud prevention.

All third-party data processors used by t666 are bound by written data processing agreements requiring them to: process data only on t666's documented instructions; implement appropriate technical and organisational security measures; and not sub-process data without t666's prior written authorisation.

The t666 platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. The categories of cookies in use on t666 are as follows:

• Strictly Necessary Cookies: Required for the t666 platform to function. These include session authentication tokens, security cookies, and load-balancing identifiers. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: Used to remember your preferences — such as language settings, last-played games, and preferred deposit method — so you do not have to reset these on each visit.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the t666 platform — which pages are visited, how long sessions last, and where users exit the funnel. This data is used to improve the platform experience for Pakistani players. Analytics data is not linked to individual identities.
• Marketing and Preference Cookies: Used, where you have consented, to track your engagement with t666 promotional content and to optimise the relevance of bonus and offer communications you receive.

You may manage your cookie preferences through your browser settings. Blocking strictly necessary cookies may affect your ability to log in and use the t666 platform. Blocking analytics or marketing cookies will not affect your core gaming experience. Note that clearing cookies will log you out of your current t666 session.

t666 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• Encryption in Transit: All data transmitted between your device and the t666 platform is protected using TLS 1.3 / 256-bit SSL encryption. Connections that do not meet this standard are refused.
• Encryption at Rest: Sensitive personal data — including CNIC details, financial records, and authentication credentials — is stored encrypted at rest using AES-256 encryption.
• Access Controls: Internal access to player personal data is restricted to authorised t666 personnel who require that data to perform their job functions. All access is logged, monitored, and subject to periodic review.
• Two-Factor Authentication: t666 offers 2FA for all player accounts and enforces 2FA for all internal staff accounts with access to player data systems.
• Regular Security Audits: t666's security infrastructure is subject to regular penetration testing, vulnerability scanning, and third-party security audits. Identified vulnerabilities are remediated according to a risk-based priority schedule.
• Incident Response: In the event of a data breach that presents a risk to your rights and freedoms, t666 will notify affected players promptly and take all reasonable steps to contain the breach and prevent recurrence.

While t666 takes robust measures to protect your data, no internet transmission or digital storage system is 100% secure. You are also responsible for keeping your t666 account credentials confidential and for enabling available security features such as 2FA.

t666 retains personal data for the following periods, after which data is securely deleted or anonymised:

• Active Account Data: Retained for the duration of your account relationship with t666, plus a post-closure period as set out below.
• Financial Transaction Records: Retained for 7 years following the date of each transaction, in compliance with anti-money laundering regulations applicable to t666's gaming license.
• KYC Documents: Retained for 5 years following account closure, in compliance with AML and gaming license requirements.
• Account Data (Closed Accounts): Retained for 5 years following account closure for regulatory compliance purposes, then securely deleted.
• Customer Support Records: Retained for 3 years following resolution of the relevant interaction.
• Marketing Consent Records: Retained for the duration of the account relationship and for 3 years following withdrawal of consent, as evidence of consent history.
• Technical Logs: Session logs and IP records are retained for 12 months for security monitoring purposes, then deleted.

Where retention beyond these periods is required by a specific legal obligation — such as an ongoing regulatory investigation or litigation hold — t666 will retain the relevant data for the duration of that obligation and delete it promptly once the obligation is discharged.

As a t666 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact the t666 privacy team at the details provided in Section 14:

t666 may send you marketing communications — including promotional emails, SMS messages, and on-site notifications about bonuses, new game releases, PSL cricket betting markets, and the Rewards programme — where you have consented to receive such communications during the registration process, or where you have subsequently opted in via your account preferences.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any t666 marketing email;
• Updating your notification and marketing preferences in your t666 account settings;
• Contacting the t666 support team via live chat and requesting removal from marketing lists.

Opting out of marketing communications will not affect your ability to receive transactional and service communications — such as deposit confirmations, withdrawal notifications, KYC status updates, and account security alerts. These communications are necessary for the operation of your account and cannot be opted out of while your account remains active.

During any responsible gaming cooling-off or self-exclusion period, t666 will automatically suppress all marketing communications to your registered contact details, regardless of your stated marketing preferences at the time.

The t666 platform is strictly restricted to individuals aged 21 years and above. t666 does not knowingly collect, process, or store personal data from individuals under the age of 21. The collection of personal data from minors is not permitted under any circumstances and constitutes a serious breach of t666's Terms and Conditions as well as applicable gaming license requirements.

During the registration process, all players are required to confirm that they are aged 21 or over. KYC verification — including CNIC submission and date of birth confirmation — is mandatory before any withdrawal is processed and may be triggered at any point during the account lifecycle where t666 has reasonable grounds to doubt a player's age.

If t666 discovers that personal data has been collected from a player who is under 21 years of age, that account will be immediately suspended, all data associated with the account will be flagged for deletion, and any funds deposited will be returned to the original payment source after appropriate verification. If you believe that a person under 21 may have registered a t666 account, please contact the t666 compliance team immediately at [email protected].

As an internationally operating online gaming platform serving Pakistani players, t666 may transfer your personal data to servers and service providers located outside of Pakistan. Such transfers occur in the following circumstances:

• Cloud Infrastructure: t666's platform data is hosted on cloud infrastructure that may be located in multiple geographic regions. All hosting providers are selected for their compliance with internationally recognised security standards.
• Game Provider Systems: Where third-party game providers' servers are located outside Pakistan, limited game session identifiers may be processed in those jurisdictions solely for the purpose of game delivery.
• KYC Verification Services: Identity verification providers used by t666 may process CNIC verification data from servers located in jurisdictions with established data protection frameworks.

In all cases where personal data is transferred internationally, t666 ensures that appropriate safeguards are in place — including contractual data transfer protections — to ensure your data receives a standard of protection equivalent to that described in this Privacy Policy. t666 does not transfer personal data to jurisdictions with no meaningful data protection framework without implementing contractual protections.

t666 reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform features, or data processing practices. The "Last Revised" date at the top of this document will be updated whenever a material change is made.

Where changes are material — meaning they significantly affect how t666 processes your personal data or affect your rights — t666 will provide advance notice via the email address registered to your account, with at least 14 days' notice before the revised policy takes effect. For minor, non-material changes, the updated policy will take effect on the date of publication.

Continued use of the t666 platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should close your t666 account and request deletion of your personal data before the new policy takes effect. To do so, contact the t666 privacy team at the details in Section 14.

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data t666 holds about you, please contact the t666 privacy team using the following details:

When submitting a data subject request, please include your full name as registered on your t666 account and a clear description of your request. t666 may need to verify your identity before processing the request to ensure that data is not disclosed to an unauthorised party. Identity verification for privacy requests does not require you to submit new KYC documents if your account is already verified — a confirmation of your registered email address and username is typically sufficient.

If you are not satisfied with t666's handling of your privacy concern or data subject request, you have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction governing t666's gaming license. t666 will cooperate fully with any such authority in the investigation of a complaint.