01 Introduction
This Privacy Policy describes how y666 — the operator of the online casino and sports betting platform available at y666.online — collects, uses, stores, shares and protects the personal information of its players and website visitors. References to "y666", "we", "us" and "our" throughout this document refer to the operator of the y666 platform. References to "you", "player" and "user" refer to any individual who accesses, registers with or uses the platform.
y666 is committed to protecting the privacy of every player on our platform. We understand that Pakistani players entrust us with sensitive personal and financial information when they create an account and make transactions in PKR. That trust is something we take seriously, and this policy is our clear and honest account of what we do with the data you share with us.
This Privacy Policy forms part of your overall agreement with y666, alongside our Terms and Conditions and our Responsible Gaming policy. By registering at y666 or by continuing to use the platform, you confirm that you have read and understood this Privacy Policy and that you agree to the processing of your personal data as described here.
Plain English commitment: This policy is written to be understood by real people, not just lawyers. If any part of it is unclear, contact us at support@y666.online and we will explain it to you directly.
02 Data We Collect
y666 collects personal data across several categories. The following table sets out each category of data, the specific types of information it includes, and the primary purpose for which it is collected.
| Data Category |
What It Includes |
Purpose |
| Identity Data |
Full legal name, date of birth, national identity information submitted during verification |
Account setupAge verificationCompliance |
| Contact Data |
Mobile phone number, email address |
Account accessSupportNotifications |
| Financial Data |
Easypaisa/JazzCash/NayaPay account identifiers, bank account details for IBFT, card numbers (masked), deposit and withdrawal history in PKR |
TransactionsAML compliance |
| Gaming Activity Data |
Games played, bets placed and amounts, win/loss records, session duration, bonus usage |
Platform operationResponsible gamingDispute resolution |
| Technical Data |
IP address, device type, browser type and version, operating system, session timestamps |
SecurityFraud preventionPlatform improvement |
| Cookie Data |
Session cookies, preference cookies, analytics cookies |
Session managementUser experience |
y666 does not collect any special category data such as health information, political opinions, religious beliefs or biometric data unless specifically required by applicable law for identity verification purposes, in which case it is collected with your explicit consent and handled with additional security measures.
03 How We Collect Your Data
y666 collects personal data through the following channels:
- Direct submission: Information you provide when registering an account, completing identity verification, contacting support, or updating your account details.
- Automated collection during platform use: Technical and gaming activity data collected automatically as you use the y666 website or mobile browser interface. This includes IP addresses, device information, session data and all gaming transactions.
- Payment providers: Confirmation data received from Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processors and card networks when you make deposits or receive withdrawals. y666 receives confirmation of transactions but does not store full payment credentials — those remain with the respective payment providers.
- Cookies and similar technologies: Data collected via cookies placed on your browser when you visit y666.online. See Section 7 for full details.
04 How We Use Your Data
y666 uses the personal data we hold about you for the following purposes, each of which has a lawful basis under applicable data protection principles:
- Account registration and management: Creating and maintaining your y666 account, verifying your identity and age, processing login authentication and managing account settings.
- Processing transactions in PKR: Handling your deposits and withdrawals through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card payment channels. Maintaining accurate records of all financial transactions on your account.
- Providing gaming services: Operating the casino, poker, sports betting and Aviator game products you use on the y666 platform. Recording game outcomes, bet histories and session data for platform integrity and dispute resolution.
- Customer support: Using your account and interaction history to help resolve queries, complaints and technical issues efficiently.
- Regulatory and legal compliance: Meeting anti-money laundering (AML), know-your-customer (KYC) and responsible gaming obligations. Maintaining records as required by applicable law.
- Security and fraud prevention: Detecting and preventing fraudulent account activity, unauthorised access, bonus abuse and other prohibited conduct as defined in the y666 Terms and Conditions.
- Responsible gaming monitoring: Identifying patterns of play that may indicate problematic gambling behaviour and triggering support interventions where appropriate, in line with our responsible gaming commitments.
- Platform improvement: Analysing aggregated, anonymised usage data to improve the y666 platform, fix technical issues and develop new features that better serve Pakistani players.
- Communications: Sending account-related notifications, security alerts, transaction confirmations and, where you have opted in, promotional communications about y666 offers and new features.
y666 does not use your personal data for automated decision-making that has a significant effect on you without human review. All account suspension or restriction decisions made on the basis of data analysis are reviewed by a member of the y666 compliance team before being applied.
05 Sharing Your Data
y666 does not sell your personal data. We share it only in the following limited and necessary circumstances:
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT processors and card networks receive the transaction data they need to process your deposits and withdrawals. Each of these providers operates under its own privacy policy and is subject to applicable Pakistani financial regulations.
- Identity verification providers: Third-party KYC verification services receive your identity documents and personal details when verification is required. These providers are bound by strict data processing agreements with y666 and may not use your data for any purpose beyond completing the verification.
- Legal and regulatory authorities: y666 will disclose personal data to law enforcement agencies, regulatory bodies or courts when required to do so by applicable law, court order or lawful regulatory demand. y666 will not voluntarily disclose your data to any authority beyond what is legally required.
- IT and security service providers: Cloud hosting, security monitoring and platform maintenance providers may have access to data in the course of providing their services to y666. All such providers are contracted under data processing agreements that restrict their use of your data to the services they provide to us.
No third party that receives your data from y666 is permitted to use it for marketing, profiling or any purpose beyond the specific service they provide to us. This is a contractual obligation in every data sharing arrangement y666 operates.
06 Payments & PKR Data
Because y666 is specifically designed for Pakistani players transacting in PKR, the way we handle payment data is worth explaining clearly. When you make a deposit via Easypaisa, JazzCash, NayaPay or SadaPay, the transaction is processed directly through that provider's secure infrastructure. y666 receives a transaction reference and confirmation of the PKR amount — we do not receive or store your full mobile wallet credentials or PIN.
For IBFT bank transfers, y666 receives your bank account name and the transaction reference provided by your bank. For Visa and Mastercard payments, card numbers are handled by our PCI-DSS compliant payment gateway — y666 stores only the last four digits of your card number for identification purposes.
All PKR transaction records — deposits, bets, wins, withdrawals and bonuses — are stored on y666 servers in encrypted form. These records are retained for a minimum period as required for financial compliance and are used only for the purposes described in this policy.
y666 applies no fees on deposits or withdrawals. The payment data we hold is never used to influence odds, restrict withdrawal amounts beyond published limits, or in any way disadvantage the player based on their transaction history.
07 Cookies
y666 uses cookies — small data files placed on your browser — to make the platform work properly and to improve your experience. We use the following types of cookies:
- Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled without preventing you from using the y666 platform.
- Preference cookies: Store your chosen platform settings such as language preferences and display options so that you do not need to reset them on each visit.
- Analytics cookies: Collect anonymised, aggregated data about how visitors use the y666 website — which pages are visited most, where players navigate from, how long sessions last. This data is used to improve the platform. It does not identify you individually.
y666 does not use advertising cookies or tracking cookies that follow your activity across other websites. When you first visit y666.online, you will be shown a cookie notice. You may adjust your cookie preferences at any time through your browser settings, though disabling essential cookies will affect platform functionality.
08 Data Retention
y666 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
- Active account data: Retained for the full duration of your account being active at y666.
- Financial and transaction records: Retained for a minimum of five years after the relevant transaction, as required for financial compliance and anti-money laundering record-keeping obligations.
- Identity verification documents: Retained for a minimum of five years after account closure or the completion of the verification process, whichever is later.
- Gaming activity records: Retained for three years after the relevant session or bet for platform integrity and dispute resolution purposes.
- Support and communication records: Retained for two years after the interaction, unless the matter remains unresolved.
- Technical and log data: Retained for 12 months and then deleted or anonymised unless flagged for a security investigation.
When the retention period for any data expires, it is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual. You may request earlier deletion of your data in accordance with your rights set out in Section 10, subject to any legal retention obligations that override that request.
09 Security
y666 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, alteration or disclosure. These measures include:
- AES-256 encryption for data stored on y666 servers.
- TLS encryption for all data transmitted between your device and y666 servers.
- Role-based access controls that restrict internal data access to staff with a genuine operational need.
- Regular security audits and penetration testing conducted by independent third parties.
- Multi-factor authentication for internal system access by y666 staff.
- Secure development practices including code review and vulnerability scanning for all platform updates.
While y666 takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. You can help protect your account by using a strong, unique password, not sharing your login credentials with anyone, and contacting y666 support immediately if you suspect your account has been accessed without your authorisation.
If y666 ever detects suspicious activity on your account, we will contact you via your registered mobile number or email address. y666 will never ask for your password via any communication channel. If anyone contacts you claiming to represent y666 and asks for your password, do not provide it and report the contact to us immediately.
10 Your Rights Over Your Data
As a y666 player, you have the following rights in relation to your personal data. These rights can be exercised at any time by contacting support@y666.online. We will handle your request within 30 days and confirm when it has been completed.
Right to Access
Request a copy of all personal data y666 holds about you. We will provide this in a clear, readable format.
Right to Rectification
Request correction of any personal data that is inaccurate or incomplete. You can update most account details directly from your y666 account settings.
Right to Erasure
Request deletion of your personal data. This right applies where data is no longer necessary, subject to any legal retention obligations y666 must comply with.
Right to Portability
Request an export of your personal data in a structured, machine-readable format so you can transfer it to another service if you wish.
Right to Restriction
Request that y666 temporarily stops processing your data in certain circumstances — for example, while the accuracy of data is being disputed.
Right to Object
Object to the processing of your data where y666 is relying on legitimate interest as the legal basis. This applies to analytical and platform improvement uses of your data.
11 Children and Minors
y666 is strictly an 18+ platform. We do not knowingly collect or process personal data from individuals under the age of 18. Age verification is a mandatory part of the y666 registration process and may be repeated at any time during your use of the platform.
If y666 becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be closed. If you are a parent or guardian and believe your child has created a y666 account or had their data collected by y666 in error, please contact us immediately at support@y666.online and we will act without delay.
12 Changes to This Privacy Policy
y666 may update this Privacy Policy periodically to reflect changes in our data practices, the services we offer, or applicable legal requirements. When material changes are made, we will notify registered players by email and via an in-platform notification with reasonable advance notice before the updated policy takes effect.
The "Last Updated" date displayed at the top of this page shows when the current version of the Privacy Policy was published. Continued use of the y666 platform after an update takes effect constitutes your acceptance of the revised policy. If you disagree with any changes, you have the right to close your account, after which any remaining withdrawable balance will be returned to your most recent payment method.
Archived versions of previous Privacy Policy versions are available on request by contacting our support team.
