99x666 Privacy Policy — Your Data, Your Rights, Our Commitment

99x666 operates the online gaming and sports betting platform accessible at 99x666.pro. For the purposes of this Privacy Policy, 99x666 is the data controller responsible for personal data collected through the Platform. When this policy refers to "99x666", "we", "us", or "our", it means the operator of the 99x666 Platform.

99x666 is committed to operating in accordance with internationally recognised data protection principles and the data protection standards applicable under our gaming licence. This Privacy Policy governs all personal data processing activities carried out in connection with your use of 99x666.pro, including account registration, deposits, withdrawals, gameplay, and customer support interactions.

If you have any questions about this Privacy Policy or how 99x666 handles your personal data, please contact our support team at any time via live chat on the Platform or by emailing [email protected].

99x666 collects and processes the following categories of personal data in connection with your use of the Platform:

99x666 does not collect sensitive special-category personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data for identification purposes beyond what is contained within your CNIC for age and identity verification.

99x666 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you actively provide during account registration, the KYC verification process, deposit and withdrawal requests, or when contacting our support team.
• Automated Technical Collection: Data automatically generated by your device and browser each time you access 99x666.pro — including IP address, session timing, and device fingerprint data used for fraud prevention.
• Payment Processors: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or USDT, our payment processing partners confirm transaction status and may share reference identifiers with us for reconciliation purposes.
• Game Providers: Our certified game providers — including live casino studio operators and RNG slot suppliers — generate gameplay log data that is relayed to 99x666 for account history purposes and dispute resolution.
• Cookies and Similar Technologies: As described in Section 8, cookies on 99x666.pro collect session and preference data automatically when you browse the Platform.

99x666 does not purchase personal data from third-party data brokers and does not source personal data about you from social media platforms.

Under internationally recognised data protection principles, 99x666 must have a lawful basis for each type of personal data processing it carries out. The following bases apply to 99x666's processing activities:

• Contractual Necessity: Processing your identity, contact, financial, and transaction data is necessary to perform the contract between you and 99x666 — specifically, to operate your account, accept deposits, settle bets, and process withdrawals.
• Legal Obligation: Processing your CNIC and identity data for KYC purposes is required to comply with anti-money laundering obligations and the age verification requirements of our gaming licence.
• Legitimate Interests: Processing technical data such as IP address and device fingerprint is carried out on the basis of 99x666's legitimate interest in preventing fraud, detecting multi-accounting, and maintaining platform security. We have conducted a balancing assessment and determined that this interest does not override your data protection rights.
• Consent: Processing your contact data for marketing communications — including bonus offers, PSL cricket promotions, and new game announcements — is carried out only on the basis of your explicit opt-in consent, which you may withdraw at any time.

99x666 uses the personal data it collects for the following specific purposes, each of which corresponds to a lawful basis described in Section 4:

• Account Management: Creating and maintaining your player account, verifying your identity and age, and managing your account settings and preferences.
• Payment Processing: Receiving and processing your deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT; processing withdrawal requests to your verified payment method; maintaining accurate financial records for your account.
• KYC and Compliance: Verifying that you meet the minimum age requirement of 21 years; conducting anti-money laundering screening on transactions above applicable thresholds; maintaining records required under our gaming licence obligations.
• Platform Security and Fraud Prevention: Detecting and investigating suspicious account activity; identifying and blocking multi-account registrations; analysing device and IP data to identify automated or bot-driven behaviour.
• Customer Support: Responding to your queries submitted via live chat or email; investigating and resolving disputes relating to your account, bets, or transactions; processing responsible gaming requests including self-exclusion.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling indicators; implementing deposit limits, loss limits, or self-exclusion at your request; generating reality check notifications.
• Service Improvement: Analysing aggregated, anonymised usage data to improve the 99x666 platform, optimise page performance, and develop new features. This analysis does not involve processing of individually identifiable data.
• Marketing Communications (consent only): Sending you information about bonus offers, PSL and cricket betting promotions, new game launches, and 99x666 platform updates where you have opted in to receive such communications.

99x666 does not sell, rent, or disclose your personal data to third parties for their own commercial or marketing purposes under any circumstances. Your data may be shared with third parties only in the following limited and controlled circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and our USDT processing partner receive only the minimum data necessary to execute your specific deposit or withdrawal transaction. These providers are contractually bound to handle your data securely and to use it only for transaction processing purposes.
• Game Providers: Certified game studios that supply live casino and slot content to 99x666 receive a session token and anonymised player identifier. They do not receive your full identity or financial data.
• KYC Verification Partners: Where 99x666 uses a third-party identity verification service to process CNIC checks, that service receives your identity documents solely for verification purposes and is bound by strict data processing agreements.
• Regulatory Authorities: In response to a lawful request, court order, or regulatory requirement, 99x666 may disclose personal data to gaming regulatory bodies, financial intelligence units, or law enforcement agencies. 99x666 will always seek to challenge overly broad disclosure requests through available legal channels.
• Fraud Prevention Services: Anonymised or pseudonymised technical data may be shared with shared fraud prevention databases to protect the broader gaming industry from known fraudulent actors.

All third parties to whom 99x666 discloses personal data are required to maintain appropriate technical and organisational security measures and to process the data only for the specified purpose.

99x666 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to the following retention standards:

• Account and Identity Data: Retained for the duration of your active account plus five years following account closure, in compliance with anti-money laundering record-keeping requirements under international gaming standards.
• Transaction and Financial Records: Retained for five years from the date of each transaction, in line with financial compliance obligations applicable to gaming operators.
• KYC Documentation (CNIC images): Retained for five years from the date of verification or from the date of account closure, whichever is later.
• Support Communications: Live chat transcripts and email correspondence are retained for two years from the date of the interaction, unless a related dispute or regulatory matter requires extended retention.
• Technical and Log Data: IP address and device log data is retained for 12 months, after which it is aggregated and anonymised.
• Marketing Preference Records: Consent and opt-out records are retained for the duration of your account plus three years to demonstrate compliance with marketing consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. You may request early deletion of your data where no legal retention obligation prevents it — see Section 11 for details on exercising this right.

99x666.pro uses cookies and similar session technologies to operate the Platform, maintain login state, and improve your experience. The following cookie categories are in use on this site:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your logged-in session, store your language and currency preferences, and prevent session timeout during active gameplay. These cookies cannot be disabled without breaking core Platform functionality.
• Performance Cookies: These cookies collect anonymised data about how players navigate the Platform — which pages load slowly, which features are most used — to help the 99x666 technical team improve site performance. All data collected by performance cookies is aggregated and does not identify individual players.
• Fraud Prevention Cookies: A persistent device identifier cookie is used by 99x666's fraud prevention systems to detect multi-accounting and bot activity. This cookie stores a hashed device fingerprint and is not shared with third parties.

99x666 does not use third-party advertising cookies, social media tracking pixels, or cross-site behavioural tracking technologies of any kind. You will not be targeted with advertising elsewhere on the internet based on your 99x666 browsing activity.

Most browsers allow you to manage cookie settings directly. Blocking strictly necessary cookies will impair or prevent your ability to log in and use the Platform. Blocking performance or fraud prevention cookies will not prevent you from accessing the Platform but may limit our ability to detect fraudulent activity.

99x666 implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• TLS Encryption: All data transmitted between your browser and 99x666.pro is encrypted using TLS 1.2 or higher, ensuring that your personal and financial data cannot be intercepted in transit.
• Encrypted Database Storage: Personal data at rest — including CNIC information, financial records, and account credentials — is stored in encrypted database systems with access restricted to authorised systems and personnel only.
• Access Controls: Internal access to personal data is governed by a role-based access control system. Only staff members with a specific operational need access any given category of personal data.
• Audit Logging: All internal access to personal data is logged and audited. Anomalous access patterns trigger automated alerts to the 99x666 security team.
• Penetration Testing: 99x666 engages independent third-party security firms to conduct periodic penetration testing of the Platform and its data infrastructure.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to your rights, 99x666 will notify affected players and relevant regulatory authorities within the timeframe required under applicable data protection standards.

The 99x666 Platform is strictly intended for individuals who are 21 years of age or older. 99x666 does not knowingly collect personal data from any person under the age of 21, and it is a fundamental condition of registration that all players certify they meet this age requirement.

Age verification is conducted during the KYC process through CNIC submission. The CNIC system issued by the National Database and Registration Authority (NADRA) of Pakistan confirms the holder's date of birth, allowing 99x666 to verify that the minimum age requirement is met before an account is fully activated for real-money play.

If 99x666 discovers or has reasonable grounds to suspect that an account is held by or on behalf of a person under the age of 21, the following actions will be taken immediately:

• The account will be suspended pending investigation.
• All deposits made to the account will be returned to the source payment method.
• Any winnings accumulated during the period of underage use will be forfeited.
• Personal data collected in connection with the account will be securely deleted following the completion of any required regulatory reporting.

If you are a parent or guardian and believe that a minor in your care has registered an account with 99x666, please contact our support team immediately via live chat or at [email protected] so that we can take appropriate action without delay.

You may exercise any of the data rights described in the summary section above by submitting a request to the 99x666 support team. The following process applies to all data rights requests:

• Submission: Contact the support team via live chat on the Platform or by emailing [email protected] from your registered email address. Please state clearly which right you wish to exercise and provide any relevant context.
• Identity Verification: To protect your data, 99x666 is required to verify your identity before processing any data rights request. You will be asked to confirm your registered email address, CNIC number, and in some cases provide a current CNIC image.
• Response Timeline: 99x666 will acknowledge your request within five business days and provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, the response period may be extended by an additional 30 days with notice provided to you.
• No Fee: Data rights requests are processed at no cost to the player in standard cases. Where a request is manifestly unfounded or repetitive, 99x666 reserves the right to charge a reasonable administrative fee or decline to process the request, with written reasons provided.

Where 99x666 is unable to fulfil a data rights request in full — for example, because retention of certain data is legally mandated — we will inform you of the specific reason and the extent to which the request can be fulfilled partially.

99x666 sends promotional communications — including bonus offers, PSL cricket betting specials, new game announcements, and seasonal promotions — only to players who have explicitly opted in to receive such communications during registration or through their account settings.

Marketing communications from 99x666 may be delivered via the following channels where you have opted in:

• Email to your registered email address
• SMS to your registered Pakistani mobile number
• On-platform notifications displayed within your logged-in account dashboard

You may withdraw your marketing consent and unsubscribe from all promotional communications at any time through any of the following methods:

• Updating your marketing preferences in your 99x666 account settings
• Clicking the unsubscribe link included in any 99x666 marketing email
• Contacting the support team via live chat or at [email protected] and requesting removal from all marketing lists

Withdrawal of marketing consent will be processed within five business days. Please note that transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — are not marketing communications and will continue regardless of your marketing preferences.

99x666 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, updates to applicable data protection standards, or changes to the services we offer. The "Last Reviewed" date displayed in the hero section of this page indicates when the policy was most recently reviewed and confirmed or amended.

Where a change to this Privacy Policy materially affects your rights or the way your personal data is processed, 99x666 will notify you by:

• Displaying a prominent notice on the 99x666.pro homepage for a period of at least 30 days following the change.
• Sending a notification to your registered email address where the change is significant and affects your active account.

Your continued use of the 99x666 Platform following the effective date of a privacy policy update constitutes your acknowledgement of the revised policy. If you do not accept the revised terms, you should contact our support team to arrange account closure and data handling in accordance with your rights under Section 11.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 99x666 handles your personal data, please reach out through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week through the 99x666 Platform. The fastest route to our support team for any privacy-related query.
• Email: [email protected] — please use your registered email address when contacting us so we can identify your account and respond accurately to your query.

For data rights requests specifically — access, rectification, erasure, portability, restriction, or objection — please mark your message clearly as a "Data Rights Request" so it can be routed directly to the relevant team and processed within the timelines described in Section 11.

99x666 takes all privacy-related enquiries seriously and is committed to responding with the care and transparency that our players deserve. Whether you are a player from Karachi, Lahore, Islamabad, Faisal abad, or anywhere else in Pakistan, your privacy rights are equal and our commitment to protecting your data is the same.