666bat Privacy Policy
At 666bat, your privacy is not a legal formality — it is a core operational commitment. This Privacy Policy explains precisely what personal data we collect from Pakistani players, why we collect it, how we use it, who we share it with, and what rights you hold over your information. Please read this document carefully before creating a 666bat account.
How 666bat Protects Your Data
These six principles summarise 666bat's approach to your personal information. The full legal detail follows in the policy sections below.
Minimal & Purposeful Collection
666bat collects only the personal data that is strictly necessary for account management, identity verification, payment processing, fraud prevention, and regulatory compliance. We do not collect data speculatively or beyond the purposes disclosed in this policy.
Bank-Grade Encryption
All data transmitted between your device and 666bat's servers is protected by 256-bit SSL/TLS encryption — the same standard used by major international financial institutions. Your CNIC details, payment information, and account credentials are never transmitted in plaintext.
No Sale of Personal Data
666bat does not sell, rent, or trade your personal information to third-party marketing companies or data brokers under any circumstances. Data shared with service providers is limited to what those providers need to deliver their specific service to 666bat, and they are contractually bound to confidentiality obligations.
Your Rights Over Your Data
You retain rights over your personal data held by 666bat — including the right to access a copy of the data we hold, to request correction of inaccurate data, and to request deletion of your data subject to applicable legal retention obligations. These requests can be submitted via 666bat's 24/7 live chat support.
Defined Retention Periods
666bat retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable anti-money laundering and gaming licensing regulations. Account data is held for a minimum of five years following account closure in line with standard international gaming regulatory requirements.
Marketing Preference Control
You control whether 666bat sends you promotional communications. Marketing preferences can be updated from your account settings at any time without contacting support. Players who have self-excluded from the platform are automatically removed from all 666bat marketing communications lists as part of the self-exclusion process.
Data Controller
666bat operates the online gaming platform accessible at 666bat.ws and is the data controller responsible for the personal information collected from users of this platform. As data controller, 666bat determines the purposes for which and the means by which your personal data is processed.
References in this Privacy Policy to "666bat", "we", "our", or "us" refer to the 666bat platform and its operating entity. References to "you", "your", or "Player" refer to any individual who accesses the 666bat platform, creates an account, or otherwise provides personal data to 666bat.
This Privacy Policy applies exclusively to data collected through the 666bat platform at 666bat.ws. It does not govern the data practices of any third-party payment processors, game providers, or other external services that you may access in connection with your 666bat account — those parties maintain their own privacy policies.
Personal Data We Collect
666bat collects the following categories of personal data from Pakistani players in the course of account registration, identity verification, payment processing, and platform use:
| Data Category | Specific Data Points | Collection Stage |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, CNIC number, CNIC photograph (front and back), selfie photograph for biometric verification | KYC verification (required prior to withdrawal) |
| Contact Data | Pakistani mobile number, email address, city of residence (Karachi, Lahore, Islamabad, Faisalabad, Multan, etc.) | Account registration |
| Financial Data | JazzCash/EasyPaisa mobile wallet number, bank account details (HBL, UBL, Meezan Bank), card details (last four digits, card type), USDT wallet address, transaction history | Deposit and withdrawal processing |
| Account Data | Username, encrypted password, account balance history, betting history, bonus usage, session logs, responsible gaming settings | Ongoing platform use |
| Technical Data | IP address, device type and model, operating system, browser type and version, mobile network operator, time zone, screen resolution | Automatic — on each platform session |
| Usage Data | Pages visited on 666bat, game sessions initiated, features accessed, navigation path, time spent per section, search queries | Automatic — on each platform session |
| Communications Data | Live chat transcripts, email correspondence, support ticket content, any other communications directed to 666bat support | When contacting 666bat support |
666bat does not intentionally collect special category data (as defined under international data protection frameworks) — including health data, religious beliefs, political opinions, or biometric data beyond identity photograph comparison for KYC purposes.
How We Collect Your Data
3.1 Data You Provide Directly
The majority of personal data held by 666bat is provided directly by Players during the following interactions: account registration (name, mobile number, email, city); KYC identity verification (CNIC details and photographs); deposit and withdrawal requests (payment method details); completion of responsible gaming preference settings; and communications with the 666bat support team via live chat or email.
3.2 Data Collected Automatically
When you access the 666bat platform — whether via desktop browser or mobile device — certain technical and usage data is collected automatically through standard web technologies including session cookies, local storage, and server-side logging. This automatic collection is necessary for the platform to function correctly, to maintain session security, and to enable responsible gaming monitoring functions.
3.3 Data from Third Parties
666bat may receive supplementary identity verification data from authorised third-party KYC service providers where additional identity confirmation is required. Payment processors may share transaction status information with 666bat for the purpose of deposit crediting and withdrawal confirmation. 666bat does not purchase personal data from data brokers or marketing list providers.
Purpose & Legal Basis for Processing
666bat processes your personal data on the following legal bases and for the following purposes:
- Performance of Contract: Processing necessary to create and manage your 666bat account, process deposits and withdrawals in PKR, settle winning bets, administer bonuses, and provide customer support. This is the primary legal basis for the majority of 666bat's data processing activities.
- Legal Obligation: Processing required to comply with anti-money laundering (AML) regulations, Know Your Customer (KYC) obligations under international gaming licensing requirements, and fraud prevention obligations. This includes verifying your identity before processing withdrawals and retaining transaction records for the legally required minimum period.
- Legitimate Interests: Processing for the purpose of platform security and fraud detection, responsible gaming monitoring (including identifying patterns of play that may indicate problem gambling), improvement of 666bat's platform and services, and where applicable, direct marketing communications to existing registered Players (subject to your marketing preferences).
- Consent: Where 666bat seeks your consent for specific processing activities — such as optional marketing communications sent to your registered email or mobile number — this consent is obtained separately and may be withdrawn by you at any time through your account settings.
666bat's responsible gaming monitoring function processes your betting history and session data to identify behavioural indicators of problem gambling. This processing is conducted as a legitimate interest and a regulatory obligation, and cannot be opted out of while your account remains active. It is a core part of 666bat's commitment to player welfare.
Data Sharing & Disclosure
666bat does not sell, rent, or trade your personal data. We share personal data with third parties only in the following strictly defined circumstances:
5.1 Payment Processors
To process deposits and withdrawals, 666bat shares the minimum necessary payment information with payment service providers including JazzCash, EasyPaisa, and participating Pakistani banking institutions (HBL, UBL, Meezan Bank). These providers are independent data controllers for the data they process in connection with their payment services, and their own privacy policies apply to their processing activities.
5.2 Identity Verification Providers
To fulfil KYC obligations, 666bat may share identity data — including CNIC details and photographic documents — with authorised third-party identity verification service providers. These providers are contractually restricted to using the shared data exclusively for the purpose of completing 666bat's identity verification request.
5.3 Game Content Providers
Where you access third-party game content through the 666bat platform (including live casino games and slot titles from external providers), a game session identifier may be shared with the relevant provider for the purpose of game delivery and winnings calculation. Full identity data is not shared with game providers.
5.4 Regulatory & Law Enforcement Disclosure
666bat will disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, and courts where required to do so by applicable law, regulatory direction, valid legal process, or where 666bat has a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other serious criminal activity.
5.5 Corporate Transactions
In the event of a merger, acquisition, restructuring, or sale of all or part of 666bat's business, personal data held by 666bat may be transferred to the successor entity as part of the transaction, subject to equivalent data protection obligations being imposed on the receiving entity.
Cookies & Tracking Technologies
The 666bat platform uses cookies and similar technologies including local storage and session tokens to maintain your logged-in session, remember your preferences, detect fraudulent access patterns, and analyse aggregate platform usage for improvement purposes.
6.1 Essential Cookies
Certain cookies are strictly necessary for the 666bat platform to function and cannot be disabled without impairing your ability to use the service. These include session authentication cookies that keep you logged in, security cookies that protect against cross-site request forgery, and cookies that maintain your language and display preferences between sessions.
6.2 Analytics Cookies
666bat uses analytics technologies to understand how Players navigate and interact with the platform in aggregate. This data is used to identify usability issues, optimise game loading performance, and improve the overall 666bat experience for Pakistani players. Analytics data is processed at an aggregate level and is not used to build individual Player profiles for marketing purposes.
6.3 Managing Cookies
You may configure your browser or mobile device to restrict or block cookies. However, disabling essential cookies will impair or prevent your ability to log in and use the 666bat platform. Disabling analytics cookies will not affect platform functionality. Browser-level cookie management instructions vary by browser and device — consult your browser's help documentation for guidance specific to your setup.
Data Security
666bat implements a multi-layered security architecture to protect personal and financial data against unauthorised access, disclosure, alteration, and destruction. Security measures in place include:
- 256-bit SSL/TLS encryption for all data in transit between your device and 666bat's servers.
- Encrypted storage of sensitive data at rest, including CNIC details, payment information, and authentication credentials. Passwords are stored as salted cryptographic hashes — 666bat staff cannot read or retrieve your password.
- Multi-factor authentication (MFA) available for Player accounts and enforced for all internal administrative access to Player data systems.
- Regular independent security audits and penetration testing of 666bat's platform infrastructure.
- Access controls restricting internal access to personal data on a strict need-to-know basis — only staff whose role requires access to specific categories of Player data are authorised to access those categories.
- Automated fraud detection and unusual activity monitoring systems that flag anomalous account behaviour for manual security review.
While 666bat takes all commercially reasonable steps to protect your data, no digital system can provide absolute guarantees of security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 666bat will notify affected Players in accordance with applicable notification obligations.
Data Retention
666bat retains personal data for defined periods determined by the purpose for which the data was collected and applicable legal retention obligations:
- Active Account Data: Retained for the duration of your active 666bat account plus a minimum of five (5) years following account closure, in compliance with international anti-money laundering record-keeping requirements applicable to gaming operators.
- KYC & Identity Documents: Retained for a minimum of five (5) years from the date of verification, or longer where required by the gaming regulator under whose licence 666bat operates.
- Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial crime prevention regulations.
- Responsible Gaming Records: Self-exclusion requests and responsible gaming tool usage records are retained for a minimum of five (5) years to enable enforcement of self-exclusion obligations and to support responsible gaming monitoring across the platform.
- Support Communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of the communication, or longer where the communication relates to an open dispute or regulatory matter.
- Technical & Usage Logs: Server access logs and technical usage data are retained for ninety (90) days for security monitoring purposes, after which they are deleted or anonymised.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual.
Your Data Rights
Subject to applicable law and the specific circumstances of your request, you hold the following rights in respect of your personal data held by 666bat:
- Right of Access: You may request a copy of the personal data 666bat holds about you. Requests will be fulfilled within thirty (30) days of receipt, subject to identity verification.
- Right to Rectification: Where personal data held by 666bat is inaccurate or incomplete, you may request that it be corrected. Some data corrections — particularly KYC identity data — may require re-submission of supporting documentation.
- Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no legal retention obligation requires continued storage. This right does not apply to data that 666bat is legally required to retain under anti-money laundering or gaming regulatory obligations.
- Right to Restrict Processing: In certain circumstances, you may request that 666bat restrict the processing of your personal data — for example, where you have contested the accuracy of data and pending resolution of the accuracy dispute.
- Right to Object: Where 666bat processes your data on the basis of legitimate interests, you may object to that processing. 666bat will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
To exercise any of these rights, please contact 666bat via live chat (available 24/7) or by emailing [email protected]. 666bat will respond within thirty (30) days and may request identity verification before fulfilling your request.
Children's Privacy
The 666bat platform is strictly restricted to adults aged 21 years and above. 666bat does not knowingly collect or process personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process, and accounts where the account holder is found to be under 21 years of age are immediately suspended.
If 666bat becomes aware that it has inadvertently collected personal data from an individual under the age of 21, the data will be deleted as promptly as operationally practicable, the account will be closed, and any deposits made will be returned to the payment method used — net of any real-money winnings generated, which will be voided.
If you are a parent or guardian and believe that your child has registered a 666bat account, please contact 666bat support via live chat immediately so that the account can be reviewed and closed without delay.
Marketing Communications
666bat may send promotional communications to registered Players regarding bonuses, new game releases, PSL cricket betting promotions, and other platform offers. Marketing communications are sent to your registered Pakistani mobile number (via SMS) and/or registered email address, depending on the preferences you have configured in your 666bat account settings.
You may opt out of receiving marketing communications from 666bat at any time by updating your communication preferences in your account settings dashboard — no support contact is required to adjust marketing preferences. 666bat will honour opt-out requests within a commercially reasonable timeframe, typically within two (2) business days.
Players who have self-excluded from the 666bat platform are automatically removed from all marketing communications lists as part of the self-exclusion implementation process. If you receive a marketing communication after submitting a self-exclusion request, please report this to 666bat support immediately.
Opting out of marketing communications does not affect transactional communications — including account security alerts, deposit confirmations, withdrawal notifications, and account verification messages — which are sent regardless of marketing preferences as they relate directly to your account security and financial activity.
Third-Party Services & Links
The 666bat platform may reference or provide access to game content delivered by third-party providers. These third-party providers operate independently of 666bat and maintain their own privacy policies and data practices. 666bat is not responsible for the privacy practices of third-party game providers, payment processors, or any other external service whose content or services are accessed in connection with your use of the 666bat platform.
666bat selects third-party service providers that are subject to contractual data protection obligations and who demonstrate adequate data security standards. However, 666bat recommends that you review the privacy policies of any significant third-party services you interact with in connection with your gaming activity.
Amendments to This Privacy Policy
666bat reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. The "Effective Date" displayed at the top of this policy will be updated each time a revision is made.
Where amendments are material — meaning they substantially change how we process your personal data or affect your privacy rights — 666bat will notify registered Players via their registered email address or Pakistani mobile number a reasonable period in advance of the changes taking effect, providing an opportunity to review the updated policy before it applies.
Continued use of the 666bat platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not accept a material change to this policy, you should discontinue use of the platform and contact 666bat support to discuss your account options.
Contact & Privacy Complaints
For any questions, concerns, or requests relating to this Privacy Policy or 666bat's data practices, please contact our support team through the following channels:
- Live Chat: Available 24 hours a day, 7 days a week, directly within the 666bat platform. Live chat is the fastest channel for privacy queries and data subject rights requests.
- Email: [email protected] — for formal privacy complaints and detailed data subject rights requests. Please allow up to thirty (30) days for a substantive response to formal privacy requests.
When submitting a data subject rights request, please include your registered 666bat username and registered Pakistani mobile number so that we can verify your identity before fulfilling the request. 666bat will not fulfil data subject rights requests that cannot be associated with a verified account holder.
If you are not satisfied with 666bat's response to a privacy complaint, you may escalate the matter to the relevant gaming regulatory authority under whose licence 666bat operates, or to an applicable data protection supervisory authority, in accordance with the procedures of those bodies.
Your Data Is Safe with 666bat
Pakistan's premier gaming platform protects your information with bank-grade security — so you can focus on the cricket and the casino, not the small print.
666bat is strictly for adults aged 21 years and above. Your personal data — including your CNIC, payment details, and betting history — is protected by 256-bit SSL encryption and processed in accordance with this Privacy Policy. Responsible gaming tools including deposit limits, self-exclusion, and session controls are available in your account settings at any time. 666bat operates under international gaming licensing standards. Please gamble responsibly.