we666 Privacy
Policy

1. Introduction

we666 ("we", "us", "our", "the Operator") is committed to protecting the privacy and personal data of all users ("you", "the User") of the we666 platform at we666.biz. This Privacy Policy has been prepared in compliance with the data protection obligations applicable under we666's internationally recognised gaming licence and in accordance with recognised data protection principles, including purpose limitation, data minimisation, storage limitation, integrity, and confidentiality.

This Privacy Policy should be read alongside our Terms & Conditions, which govern your overall contractual relationship with we666. Capitalised terms used but not defined in this Privacy Policy have the meanings assigned to them in the we666 Terms & Conditions.

we666 serves an English-speaking Pakistani user base. References in this Privacy Policy to identity documents refer to Pakistani National Identity Cards (CNIC) issued by NADRA. References to payment methods refer to Pakistani mobile wallet and banking services including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20, as applicable.

2. Data Controller

For the purposes of applicable data protection law, the data controller in respect of personal data collected through the we666 platform is the entity operating we666.biz under its internationally recognised gaming licence. The Data Controller is responsible for determining the purposes and means of processing personal data collected through the platform. Enquiries regarding data controller identity may be directed to [email protected].

we666 has designated a Data Protection Officer (DPO) responsible for overseeing the platform's compliance with its data protection obligations. The DPO may be contacted via the same support email address, clearly marked as a Data Protection enquiry.

3. Personal Data We Collect

we666 collects the following categories of personal data in the course of operating the platform:

3.1 Data We Do Not Collect

we666 does not collect: precise GPS location data; biometric data beyond the selfie photograph required for CNIC KYC matching; data relating to racial or ethnic origin, political opinions, religious beliefs, or trade union membership; health data except where voluntarily disclosed in the context of a responsible gaming self-exclusion request; or financial account credentials (PINs, passwords, full bank account numbers).

4. Lawful Basis for Processing

we666 processes personal data only where a valid lawful basis exists under applicable data protection law. The lawful bases we rely upon are:

• Contractual Necessity: Processing your identity data, contact data, and payment data is necessary to perform our contract with you — the we666 Terms & Conditions — including registering your account, processing deposits and withdrawals, and providing access to games and betting markets.
• Legal Obligation: Processing your identity data for KYC/AML verification purposes is required under the legal and regulatory obligations imposed on we666 by its international gaming licence, including obligations to verify age (21+), prevent money laundering, and implement responsible gaming controls.
• Legitimate Interests: Processing technical data and account activity data for fraud prevention, security monitoring, platform performance optimisation, and customer support quality improvement is justified by we666's legitimate interest in operating a safe, secure, and high-quality platform.
• Consent: Where we666 processes your data for optional communications such as promotional email newsletters, we rely on your explicit consent. You may withdraw consent at any time by updating your communication preferences in your account settings or by contacting support.

5. How We Use Your Data

5.1 Platform Operation

we666 uses your identity, contact, and payment data to create and maintain your account, verify your eligibility to use the platform, process deposits and withdrawals in PKR, provide access to all games and betting markets, and communicate essential account information to you (transaction confirmations, security alerts, account notifications).

5.2 Regulatory Compliance

we666 processes identity data and account activity data to fulfil its obligations under its international gaming licence, including: verifying that all users are aged 21 or above, conducting ongoing anti-money laundering (AML) monitoring of transaction patterns, implementing responsible gaming controls, and cooperating with regulatory authorities when required by law.

5.3 Security and Fraud Prevention

we666 processes technical data (IP addresses, device identifiers, login patterns) and account activity data to detect and prevent fraudulent activity, including unauthorised account access, duplicate account creation, bonus abuse, and payment fraud. Suspicious activity may trigger account review, temporary restriction, or permanent closure in accordance with our Terms & Conditions.

5.4 Platform Improvement

we666 uses anonymised and aggregated account activity and technical data to analyse platform usage patterns, optimise game loading performance for Pakistani mobile network conditions, improve the sportsbook interface during high-traffic PSL periods, and enhance the overall user experience. This analytics processing does not involve decisions based on identified individual data.

5.5 Customer Support

we666 retains records of your support chat transcripts and email correspondence to: resolve your support queries effectively, maintain a history of resolved issues for continuity, train support agents (using anonymised transcripts), and handle any complaints or disputes raised in connection with your account.

6. Data Sharing with Third Parties

we666 does not sell your personal data. We share your personal data only with the following categories of third parties, strictly limited to what is necessary for each stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 processing partners receive payment transaction data (account identifiers and transaction amounts) solely to process your deposits and withdrawals. These parties are bound by their own applicable privacy and financial regulations.
• Identity Verification Partners: Third-party KYC and AML screening services receive your identity data (name, CNIC number, date of birth) solely for the purpose of conducting legally required identity and age verification checks.
• Game Content Providers: Third-party game studios whose titles appear in the we666 library may receive anonymised session data (game title, session duration, bet amounts in PKR) for regulatory reporting purposes under their own game certification obligations. No personally identifiable data is shared with game content providers.
• Regulatory Authorities: we666 will disclose your personal data to gaming regulatory authorities, financial intelligence authorities, or law enforcement agencies when required to do so by law, court order, or legitimate regulatory demand under we666's gaming licence conditions.
• IT Infrastructure Providers: We use licensed cloud hosting, database management, and cybersecurity service providers to operate the we666 platform. These providers process personal data solely as data processors on our instructions and are contractually prohibited from using your data for any other purpose.

7. Payment Data Processing

we666 processes payment data — including your JazzCash mobile wallet number, EasyPaisa account identifier, bank account details, and transaction records — exclusively for the purpose of facilitating your deposits and withdrawals in PKR and maintaining the financial records required under our gaming licence's AML obligations.

we666 does not store full bank account passwords, JazzCash PINs, EasyPaisa m-PINs, or other authentication credentials for payment accounts. Payment authentication is handled directly by the respective payment service provider (JazzCash, EasyPaisa, or your bank) in their own secure environment. we666 receives only confirmation of payment success or failure — not your payment account login credentials.

All payment transaction records are retained for a minimum of five (5) years following the transaction date, in compliance with anti-money laundering record-keeping requirements applicable to licensed gambling operators.

8. KYC & Identity Verification Data

we666 is legally required to verify the identity of all account holders as a condition of its gaming licence. KYC verification for Pakistani users involves submission of your CNIC (front and back) and a selfie photograph. This data is used exclusively to: confirm that you are a real person; verify that you are aged 21 or above; confirm that your name and CNIC number match across your account; and comply with AML obligations by screening against relevant watchlists.

CNIC scan images and selfie photographs submitted for KYC purposes are stored on encrypted servers with access restricted to authorised compliance personnel only. These documents are not used for any purpose other than regulatory identity verification. KYC documents are retained for a minimum of five (5) years following account closure, as required under applicable gaming licence conditions.

9. Cookies and Tracking Technologies

9.1 Cookies We Use

we666 uses cookies — small text files stored on your device — for the following limited purposes:

• Session Cookies (Essential): Maintain your login session while you are actively using the we666 platform. These expire when you close your browser or log out. Disabling these cookies will prevent you from logging in.
• Preference Cookies (Functional): Remember your language preference and certain display settings between sessions. These can be disabled without preventing platform access, though some settings may need to be re-entered each visit.
• Analytics Cookies (Performance): Collect anonymised, aggregated data about how users navigate the we666 platform — which pages are visited most, average session durations, common navigation paths. This data is used exclusively to improve platform performance. No individual user is identifiable from analytics data.

9.2 What We Do Not Use

we666 does not use: third-party advertising or retargeting cookies; cross-site tracking technologies; social media tracking pixels; or fingerprinting scripts designed to identify your device across unrelated websites. we666 does not serve any behavioural advertising.

10. Data Retention

we666 retains personal data for the following periods, determined by the purpose for which data was collected and applicable legal retention requirements:

• Active Account Data: Retained throughout the duration of your we666 Account and for a minimum of 5 years following account closure.
• Transaction Records (Deposits, Withdrawals, Bets): Retained for a minimum of 5 years from the date of each transaction, as required under AML/CFT record-keeping obligations applicable to licensed gaming operators.
• KYC Documents (CNIC scans, selfie photographs): Retained for a minimum of 5 years following account closure.
• Support Chat Transcripts & Email Correspondence: Retained for 3 years from the date of the interaction, for dispute resolution and service quality purposes.
• Technical Logs (IP addresses, session data): Retained for 12 months from the date of collection, for security monitoring and fraud prevention purposes.
• Anonymised Analytics Data: Retained indefinitely in anonymised, aggregated form that cannot be re-associated with any individual user.

11. Data Security

we666 implements technical and organisational security measures designed to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. These measures include:

• 256-bit SSL encryption for all data in transit between your device and we666 servers;
• Encryption of sensitive data stored on we666 servers (CNIC data, payment identifiers);
• Role-based access controls limiting access to personal data to authorised personnel only;
• Multi-factor authentication required for all we666 staff accessing systems containing personal data;
• Regular third-party penetration testing and security audits;
• Incident response procedures for identification, containment, and notification of any personal data breach.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we666 will notify you via your registered email address without undue delay, and in any event within 72 hours of becoming aware of the breach, where technically feasible.

12. Your Data Subject Rights

Subject to applicable data protection law and the specific circumstances of your request, you have the following rights in relation to your personal data held by we666:

• Right of Access: You may request a copy of all personal data we666 holds about you. we666 will provide this within 30 days of a valid request, at no charge for the first request per 12-month period.
• Right to Rectification: You may request correction of inaccurate personal data. For corrections to identity data (name, CNIC number), re-verification may be required.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. This right is subject to we666's legal obligation to retain certain data (transaction records, KYC documents) for the retention periods stated in Clause 10.
• Right to Restriction of Processing: You may request that we666 restrict the processing of your data in specific circumstances, such as while accuracy is disputed or while you have objected to processing based on legitimate interests.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format where processing is based on consent or contractual necessity.
• Right to Object: You may object to processing based on we666's legitimate interests. we666 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., promotional communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact we666 via live chat inside your account dashboard or by email at [email protected]. we666 will respond within 30 days of receiving a valid request. We may request proof of identity before processing certain data subject requests to protect against unauthorised third-party data requests.

13. Minors — 21+ Age Policy

The we666 platform is strictly restricted to users aged 21 and above. we666 does not knowingly collect or process personal data from individuals under the age of 21. Age verification is conducted through mandatory CNIC submission during KYC verification, which confirms date of birth against the CNIC record.

If we666 becomes aware that personal data has been collected from a person under 21, that data will be permanently deleted and the associated Account will be immediately and permanently closed. If you have reason to believe that a person under 21 has registered a we666 Account, please contact [email protected] immediately.

14. International Data Transfers

The we666 platform is operated under an internationally recognised gaming licence. Some of we666's IT infrastructure providers, KYC verification partners, and game content providers may process your personal data outside Pakistan. Where such international transfers occur, we666 ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses requiring the receiving party to maintain equivalent data protection standards to those applied by we666 under this Privacy Policy.

we666 does not transfer personal data to entities in jurisdictions that do not provide an adequate level of data protection without first implementing appropriate contractual safeguards. If you wish to obtain information about the specific safeguards applicable to international transfers of your personal data, please contact our support team.

15. Changes to This Privacy Policy

we666 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our licensing obligations. Material changes to this Privacy Policy will be communicated to registered Account holders via email to their registered address and via an in-platform notice displayed upon login, no less than 7 days before the amended policy takes effect.

The date of the most recent update to this Privacy Policy appears at the top of this document. We encourage you to review this Privacy Policy periodically. Your continued use of the we666 platform after the effective date of any amendment constitutes your acceptance of the amended Privacy Policy.

16. Contact Us — Data Protection Enquiries

For all data protection enquiries, data subject access requests, complaints relating to the processing of your personal data, or questions about this Privacy Policy, please contact we666 through the following channels:

• Live Chat: Available 24/7 inside your we666 account dashboard. Mark your query as "Data Protection Enquiry" for priority routing to our compliance team.
• Email: [email protected] — please include "Privacy / Data Protection" in your email subject line.

we666 commits to acknowledging all data protection enquiries within 48 hours and providing a substantive response within 30 calendar days. If you are not satisfied with our response to a data protection complaint, you may have the right to escalate your complaint to the supervisory authority applicable under we666's gaming licence jurisdiction — our support team can provide details of the applicable authority upon request.