Privacy Policy — m666g

This Privacy Policy ("Policy") is issued by m666g ("we", "us", "our"), the operator of the online gaming information platform accessible at https://m666g.cam ("Platform"). It describes how m666g collects, uses, stores, discloses, retains and protects personal data about individuals who access or use the Platform ("Users", "you", "your").

m666g is committed to responsible, transparent data handling. This Policy has been drafted in plain English to ensure that Pakistani users — and users in any other jurisdiction — can clearly understand their privacy rights and our corresponding obligations without needing legal expertise to interpret the document.

This Policy applies to all personal data collected through the Platform, including data submitted during account registration, KYC verification, payment processing, customer support interactions, and general browsing of the Platform.

By accessing the Platform and creating an account, you confirm that you have read this Policy and consent to the data practices described herein. If you do not agree to this Policy, please discontinue your use of the Platform immediately.

The following terms carry specific meanings throughout this Policy:

The Data Controller responsible for your personal data on the m666g Platform is the m666g Operator, whose registered details are available upon written request to [email protected]. The Operator operates the Platform under a gaming licence issued by the relevant licensing jurisdiction. Specific licensing details are disclosed within the Platform's legal documentation.

Where m666g engages third-party service providers to process personal data on its behalf — including payment processing companies, identity verification services and IT infrastructure providers — those third parties act as Data Processors and are bound by data processing agreements that require them to handle your data in accordance with applicable law and this Policy.

m666g collects personal data from you through several channels. The categories of data we collect, and the circumstances in which we collect them, are set out below.

4.1 Registration Data

When you create an account on m666g, we collect the following data:

• Full legal name
• Date of birth
• Residential address (including city — for example Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar)
• Email address
• Username and password (password stored in hashed, salted form — the plaintext value is never stored)
• Mobile number (where provided)
• Preferred currency (PKR where applicable)

4.2 Identity Verification (KYC) Data

For compliance with AML and licensing obligations, we collect and verify:

• Government-issued photo identification (e.g., CNIC, passport or national identity document)
• Proof of address (e.g., utility bill, bank statement — dated within the required period)
• Proof of payment method (where required to confirm the ownership of a deposit source)
• Selfie or liveness check image (where required by the Operator's verification provider)

4.3 Financial Transaction Data

When you make deposits or request withdrawals, we collect:

• Payment method type (for example, bank transfer or mobile wallet category — specific provider names such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah are referenced as familiar categories only; their inclusion does not imply these services are available or endorsed)
• Transaction amounts in PKR or other applicable currency
• Transaction timestamps and reference numbers
• Partial payment account identifiers (e.g., masked card numbers or account last-four digits)

4.4 Gameplay and Activity Data

When you use Platform features, we collect:

• Game sessions, wager amounts, outcomes and session durations
• Betting market selections and live wager history
• Bonus activations, wagering progress and promotional redemptions
• Responsible gambling tool settings (deposit limits, session times, self-exclusion status)

4.5 Technical and Device Data

Automatically collected when you access the Platform:

• IP address and approximate geolocation (country/city level)
• Device type, operating system, browser type and version
• Page interaction data, session duration and navigation path
• Cookie identifiers and similar tracking data (see Section 9)

4.6 Communications Data

When you contact m666g support:

• Content of chat transcripts, email correspondence and support ticket records
• Contact channel used and timestamp of communication
• Complaint history and resolution records

m666g processes your personal data only where we have a valid lawful basis for doing so. The primary lawful bases on which we rely are as follows:

We use the personal data we collect for the following purposes:

• Account Management: Creating, maintaining and administering your m666g account; processing authentication and account security functions.
• Service Delivery: Enabling you to access games, place wagers, use betting markets, redeem bonuses and interact with Platform features.
• Payment Processing: Facilitating deposits and withdrawals in PKR or other applicable currencies; matching payment source to account holder identity.
• KYC and AML Compliance: Verifying your identity and age; screening against sanctions and PEP databases; reporting suspicious activity as required by applicable regulation.
• Fraud Prevention and Security: Detecting and investigating fraudulent account activity, multi-accounting, collusion, chargebacks and other prohibited conduct as defined in the Terms & Conditions.
• Responsible Gambling: Monitoring for patterns associated with problem gambling; enforcing self-exclusion decisions; maintaining deposit and loss limit settings.
• Customer Support: Responding to queries, resolving complaints, processing account closure requests and maintaining communication records.
• Platform Improvement: Analysing aggregated usage data to improve the design, performance and content of the Platform.
• Marketing Communications: Sending promotional updates about offers, bonuses and Platform developments — only where you have provided valid consent. You may opt out at any time.
• Legal and Regulatory Obligations: Meeting record-keeping, reporting and disclosure requirements imposed by the Operator's licensing authority and applicable law.

m666g does not sell, rent or trade your personal data to any third party for that party's independent marketing or commercial purposes. We share your personal data with third parties only in the following circumstances:

• Service Providers (Data Processors): We engage carefully selected third-party vendors — including identity verification providers, payment processing infrastructure partners, cloud hosting services and customer support platform operators — who process data on our behalf under strict contractual data processing agreements.
• Gaming Software Providers: Where games are provided by third-party software studios, limited technical data (session tokens, wager amounts) may be shared with those studios to enable game functionality. These studios do not receive your personal identity data.
• Regulatory and Licensing Authorities: The Operator's licensing authority may require access to certain transaction, player or compliance records as part of its regulatory oversight functions. We comply with lawful requests from competent authorities.
• Law Enforcement and Legal Process: We will disclose personal data when required to do so by a valid court order, regulatory direction, search warrant or equivalent legal instrument, or where we believe in good faith that disclosure is necessary to prevent fraud, criminal activity or harm to any individual.
• Corporate Restructuring: In the event of a merger, acquisition, asset sale or corporate restructuring, personal data may be transferred to a successor entity, subject to equivalent data protection commitments.

We retain personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal, regulatory and licensing obligations. The following general retention principles apply:

• Active Account Data: Retained for the full duration of your account relationship with m666g and for a minimum period thereafter as required by the Operator's licensing authority.
• KYC and Identity Documents: Retained for the period specified by AML regulations applicable to the Operator's licensing jurisdiction — typically a minimum of five (5) years following the closure of the account or the final transaction, whichever is later.
• Financial Transaction Records: Retained for a minimum of five (5) years following each transaction, as required by AML record-keeping obligations.
• Support and Communication Records: Retained for up to three (3) years following the resolution of the matter to which they relate, or longer where required by law or where a dispute remains pending.
• Technical and Log Data: Typically retained for twelve (12) months from collection, unless longer retention is required for security investigation or legal purposes.
• Inactive Accounts: Where an account has been dormant for twelve (12) consecutive months or longer, data is reviewed for retention necessity. Dormant account policy is set by the Operator in accordance with applicable law.

When personal data is no longer required for any lawful purpose, it is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

m666g uses cookies and similar browser-based technologies to provide, secure and improve the Platform. Cookies are small data files stored on your device when you visit the Platform. They do not contain executable code and cannot access other files on your device.

Subject to applicable law and any overriding legal obligations (such as AML record-keeping requirements that may prevent immediate deletion), you hold the following rights over your personal data held by m666g:

The m666g Platform is operated from, and personal data may be processed in, jurisdictions outside Pakistan. When your personal data is transferred outside your country of residence — including to countries whose data protection laws may differ from those of Pakistan — we take appropriate safeguards to ensure that your data remains protected to a standard consistent with this Policy.

Such safeguards may include:

• Standard contractual clauses or equivalent data transfer mechanisms recognised by the Operator's licensing jurisdiction;
• Data processing agreements with all third-party processors that require them to implement equivalent technical and organisational security measures;
• Restricting international transfers to countries or entities that have been assessed as providing an adequate level of data protection.

For further information about the specific safeguards applied to international transfers of your personal data, contact the m666g privacy team at [email protected].

The m666g Platform is strictly intended for adults aged 18 years and over — or the higher minimum age required by the Operator's licensing jurisdiction, whichever is greater. We do not knowingly collect personal data from individuals under this minimum age threshold.

If we become aware that personal data has been submitted by or on behalf of a person below the applicable minimum age, we will:

• Immediately suspend the associated account pending investigation;
• Delete or anonymise the personal data collected from the underage individual as soon as it is safe to do so while complying with any legal retention obligations;
• Reverse any deposits associated with the account in accordance with applicable law and Operator policy.

m666g implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures include:

• HTTPS/TLS Encryption: All data transmitted between your browser and the Platform is encrypted using current Transport Layer Security (TLS) protocols.
• Password Hashing: Account passwords are stored using industry-standard one-way hashing with salt. Plaintext passwords are never stored or transmitted.
• Access Controls: Internal access to personal data is restricted on a need-to-know basis. Personnel with data access are subject to confidentiality obligations.
• Security Monitoring: The Platform employs automated security monitoring tools to detect unusual access patterns, potential breaches and system anomalies.
• Regular Security Reviews: Our security practices are reviewed periodically and updated in response to new threats and industry standards.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, m666g will notify affected users and relevant regulatory authorities in accordance with applicable data breach notification obligations.

The Platform may, from time to time, contain references to or integrations with third-party services, including payment processing providers and gaming software studios. These third parties operate under their own privacy policies and terms of service, over which m666g exercises no control.

m666g is not responsible for the privacy practices, data collection methods or security standards of any third-party service. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the m666g Platform.

References to payment services familiar to Pakistani users — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — appear in Platform content for contextual familiarity only. Their appearance does not imply a commercial partnership, data-sharing arrangement or endorsement by any of those institutions.

m666g reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, our services or our organisational structure. When we make material changes — those that significantly affect your rights or our obligations — we will:

• Update the "Effective Date" and "Last Reviewed" date at the top of this Policy;
• Provide notice of material changes through an in-Platform notification, email communication or a prominent banner on the Platform homepage, where reasonably practicable;
• Where required by applicable law, seek fresh consent from affected users before implementing changes that involve new processing purposes.

We recommend reviewing this Policy periodically. The current version of this Policy is always accessible at https://m666g.cam/privacy-policy. Your continued use of the Platform following publication of an amended Policy constitutes your acceptance of the revised terms.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how your personal data is being handled, please contact the m666g privacy team using the details below. All privacy enquiries are handled in confidence and with priority.