- 1. Introduction
- 2. Definitions
- 3. Data We Collect
- 4. How We Collect Data
- 5. Legal Basis for Processing
- 6. How We Use Your Data
- 7. Data Sharing & Disclosure
- 8. International Transfers
- 9. Data Retention
- 10. Cookies & Tracking
- 11. Your Rights
- 12. Security Measures
- 13. Children & Minors
- 14. Third-Party Links
- 15. Policy Amendments
- 16. Contact & Complaints
Introduction
This Privacy Policy ("Policy") describes how 44x666 ("we", "us", "our", "the Company") collects, processes, stores and protects the personal data of users ("you", "your", "User") who access or use the 44x666 online gambling platform at https://44x666.cam and its associated pages (collectively, the "Platform").
44x666 is an English-language online gambling platform serving Pakistani users and is operated by an internationally licensed gaming entity. We take the privacy and security of your personal data seriously and are committed to handling it transparently, responsibly and in accordance with the data protection standards applicable under the laws of our operating jurisdiction.
By registering an account, accessing the Platform or providing personal information in any form, you acknowledge that you have read, understood and consent to the practices described in this Policy. This Policy is to be read together with our Terms & Conditions and Responsible Gambling Policy.
Note for Pakistan Users: 44x666 is not regulated by any Pakistani government authority, including the Pakistan Telecommunication Authority (PTA) or the State Bank of Pakistan. Data protection obligations applied here are those of our international operating jurisdiction. Pakistani users should be aware that local data protection frameworks may differ. This is not legal advice.
Definitions
For the purposes of this Policy, the following terms have the meanings set out below:
| Term | Meaning |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person, including name, email address, date of birth, CNIC number, IP address and transaction records. |
| Processing | Any operation performed on personal data, including collection, storage, use, disclosure, transfer or deletion. |
| Data Controller | The entity that determines the purposes and means of processing personal data — in this case, the operator of 44x666. |
| Data Processor | A third party that processes personal data on behalf of the Data Controller under a contractual obligation (e.g., KYC providers, payment processors). |
| Consent | A freely given, specific, informed and unambiguous indication of agreement to the processing of personal data for a stated purpose. |
| Cookies | Small text files stored on your device by the Platform for functional, analytics and security purposes. |
| KYC | Know Your Customer — the identity and address verification process required to meet anti-money laundering and responsible gambling obligations. |
Personal Data We Collect
44x666 collects only the personal data that is necessary for the purposes described in this Policy. The categories of data we collect are:
3.1 Registration & Account Data
- Full legal name;
- Date of birth (to verify age eligibility — 18+ requirement);
- Email address and account password (stored in hashed form);
- Residential address (including city — for example Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar);
- Preferred currency (e.g., PKR) and language preferences;
- Security question responses, where set.
3.2 Identity Verification (KYC) Data
- Copy of government-issued photo ID (e.g., CNIC, passport or driving licence);
- Proof of address documents (e.g., utility bill, bank statement);
- Proof of payment method ownership;
- Selfie or liveness check image, where required by the KYC provider;
- Any additional documentation requested to comply with anti-money laundering obligations.
3.3 Financial & Transaction Data
- Deposit and withdrawal transaction records (amounts, methods, timestamps);
- Payment method references (e.g., partial account numbers, wallet identifiers — not full card numbers, which are handled by PCI-DSS compliant processors);
- Bonus and promotional history;
- Win/loss records and bet history.
3.4 Technical & Device Data
- IP address and approximate geographic location derived from it;
- Device type, operating system and browser version;
- Session duration, pages visited and navigation patterns;
- Log files generated during Platform use;
- Cookie identifiers and similar tracking technologies (see Section 10).
3.5 Communications Data
- Content of messages sent to our support team via live chat or email;
- Survey responses or feedback submitted voluntarily;
- Records of marketing opt-in and opt-out choices.
We do not collect or store full payment card numbers on our servers. Card processing is handled by PCI-DSS compliant third-party payment processors. When you use Easypaisa, JazzCash, Raast or bank transfer references, only the transaction reference and status are recorded by us.
How We Collect Personal Data
Personal data is collected through the following channels:
- Direct provision — when you register, complete KYC, make a deposit or contact support;
- Automated collection — through cookies, server logs and analytics tools during your use of the Platform;
- Third parties — KYC verification providers, payment processors and fraud prevention services may supply verified data back to us as part of their contracted services;
- Publicly available sources — in limited circumstances (e.g., sanctions screening or fraud investigation), we may consult publicly available records.
Legal Basis for Processing
We process your personal data on one or more of the following legal bases, depending on the specific processing activity:
| Legal Basis | Examples of Processing Activity |
|---|---|
| Contractual Necessity | Operating your account, processing deposits and withdrawals, delivering the betting and casino services you have requested. |
| Legal Obligation | KYC / AML verification, age verification, fraud detection, record-keeping required under licensing conditions. |
| Legitimate Interests | Platform security, fraud prevention, service improvement, internal analytics, responsible gambling monitoring. |
| Consent | Sending marketing emails or push notifications where you have explicitly opted in. You may withdraw consent at any time. |
How We Use Your Personal Data
44x666 uses personal data for the following purposes:
- Account management — creating, maintaining and securing your account;
- Identity verification — confirming your age (18+ requirement), identity and residential address;
- Transaction processing — handling deposits, withdrawals and bonus allocations;
- Regulatory compliance — meeting anti-money laundering, counter-terrorism financing and licensing obligations;
- Responsible gambling — monitoring activity patterns that may indicate problem gambling; applying self-exclusion and limit settings you have configured;
- Fraud prevention and security — detecting, investigating and preventing fraudulent, abusive or prohibited conduct;
- Customer support — responding to queries, complaints and account issues;
- Platform improvement — analysing usage patterns to improve performance, usability and content;
- Marketing communications — sending promotional offers, newsletters and product updates where you have consented or where legitimate interest applies, in English;
- Legal proceedings — establishing, exercising or defending legal claims.
We do not use your personal data to build automated profiles that make legally significant decisions about you without human review. Responsible gambling monitoring may flag accounts for human review, but no automated account action is taken solely on the basis of algorithmic profiling.
Data Sharing & Disclosure
44x666 does not sell, rent or trade your personal data to third parties. We may share personal data with the following categories of recipients, solely for the purposes described in this Policy:
7.1 Service Providers (Data Processors)
We engage vetted third-party service providers acting on our instructions under data-processing agreements. These include: KYC and identity verification providers; payment processing platforms; fraud detection and risk management services; email and communication delivery services; cloud hosting and infrastructure providers; and customer support platform providers.
7.2 Regulatory and Licensing Authorities
We may be required to share data with our licensing authority, financial intelligence units, law enforcement agencies or courts where required by law, court order, or our licensing obligations. Such disclosures are made in compliance with applicable legal requirements.
7.3 Business Transfers
In the event of a merger, acquisition, restructuring or sale of all or part of the 44x666 business, personal data held by us may be transferred to the successor entity. Users will be notified of any such transfer and the applicable privacy terms via the email address on file.
7.4 Payment Reference Context
Payment provider names such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are referenced on 44x666 as familiar local payment instruments for Pakistani user context only. None of these providers has access to your 44x666 account data. Data shared with payment processors is limited to what is necessary to process individual transactions.
We never sell your data. No third-party advertising network receives your personal data for the purpose of targeting advertisements without your explicit consent. Any analytics data shared externally is aggregated and anonymised.
International Data Transfers
44x666 is an internationally operated platform. Your personal data may be transferred to and stored in countries outside Pakistan and outside the jurisdiction in which you are located. These countries may have different data protection laws to those in your home jurisdiction.
Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as contractual clauses, binding corporate rules or adequacy decisions from the relevant supervisory authority. We take reasonable steps to ensure that recipients of your data provide adequate protection.
By using the Platform, you acknowledge and consent to the transfer of your personal data across international borders for the purposes described in this Policy.
Data Retention
We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting and reporting requirements. The following general retention guidelines apply:
| Data Category | Retention Period |
|---|---|
| Account & registration data | Duration of account plus minimum 5 years after account closure (licensing requirement). |
| KYC / identity documents | Minimum 5 years from date of verification, or as required by licensing / AML obligations. |
| Transaction records | Minimum 5 years from the date of the transaction. |
| Responsible gambling records | Duration of self-exclusion or limit period, plus 5 years post-closure. |
| Support communications | 3 years from the date of the last interaction. |
| Marketing consent records | Until consent is withdrawn plus 3 years to demonstrate compliance. |
| Technical logs & session data | Typically 12 months, unless required for security investigation. |
After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an individual.
Cookies & Tracking Technologies
10.1 What Are Cookies
Cookies are small text files placed on your device by the Platform when you visit. They are widely used to make websites function correctly and to provide information to site operators. We also use similar technologies such as web beacons, pixel tags and local storage.
10.2 Types of Cookies We Use
| Type | Purpose | Essential? |
|---|---|---|
| Strictly Necessary | Authentication, session management, security tokens, fraud prevention. | Yes |
| Functional | Remembering your language, currency (PKR) and display preferences. | Yes |
| Analytics | Understanding how users navigate the Platform to improve performance and usability. | Optional |
| Marketing | Recording opt-in consent and suppressing opted-out users from marketing lists. | Optional |
10.3 Managing Cookies
You can manage or disable non-essential cookies through your browser settings or the cookie preferences panel on the Platform. Disabling strictly necessary cookies will impair Platform functionality, including the ability to log in and process transactions. Note that clearing cookies may log you out of your session.
Your Data Protection Rights
Subject to applicable law and our legitimate obligations (including licensing and AML requirements that may override individual rights in specific circumstances), you hold the following rights regarding your personal data:
Right of Access
Request a copy of the personal data we hold about you and information on how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data. Some corrections require re-verification.
Right to Erasure
Request deletion of your personal data where it is no longer necessary — subject to retention obligations under licensing and AML law.
Right to Restrict Processing
Request that we limit processing while accuracy is disputed or while an objection is considered.
Right to Portability
Receive a structured, machine-readable copy of data you have provided to us based on consent or contract.
Right to Object
Object to processing based on legitimate interests, including direct marketing. Marketing objections are honoured immediately.
To exercise any of the above rights, contact our support team at [email protected] (plain text — not a clickable link; copy and paste into your email client). We will respond within a reasonable timeframe and no later than the period required under applicable law. We may ask you to verify your identity before processing any rights request.
Regulatory Override: Certain data — particularly KYC documents and transaction records — must be retained for mandatory periods under AML and licensing regulations. Erasure requests in respect of such data may be partially or wholly declined on legal grounds, with written explanation provided.
Security Measures
44x666 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction. These measures include:
- TLS encryption for all data transmitted between your device and our servers;
- Encryption of sensitive data at rest, including identity documents and payment references;
- Role-based access controls ensuring staff can only access data necessary for their function;
- Regular internal security assessments and vulnerability reviews;
- Incident response procedures for reporting and addressing data breaches;
- Passwords stored using industry-standard one-way hashing algorithms — never in plain text.
Despite these measures, no system is completely secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and the relevant supervisory authority in accordance with applicable law.
You also play a role in data security. Keep your account password confidential, log out of shared devices, and contact support immediately at [email protected] if you suspect unauthorised access to your account.
Children & Minors
44x666 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18, or below the higher minimum age required by the operator or license jurisdiction. Age verification is performed during the registration and KYC processes.
If we become aware that personal data has been collected from a minor without proper age verification, we will immediately close the account, return any deposited funds to the source payment method (pending investigation), and delete all associated personal data from our systems.
If you believe a minor has registered on the Platform, please contact us immediately at [email protected] (plain text — not a clickable link).
Third-Party Links & Services
The 44x666 Platform is an English-language site with no external outbound links in its navigation or footer. However, third-party services integrated within the Platform — such as payment processors, KYC providers and live casino software providers — operate under their own privacy policies and data practices.
44x666 is not responsible for the privacy practices of third-party service providers operating on the Platform. We require all third-party processors to sign data-processing agreements and to meet our minimum data protection standards, but their processing activities beyond their contractual obligations with us are governed by their own policies.
Amendments to This Policy
44x666 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements or Platform functionality. Where changes are material, registered users will be notified via the email address on file and/or a prominent notice on the Platform prior to the changes taking effect.
The "Last Updated" date at the top of this page indicates when the current version was published. We encourage you to review this Policy periodically. Continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy.
All prior versions of this Policy are superseded by the current version. The current Policy is always accessible at https://44x666.cam/privacy-policy.
Contact & Complaints
For any queries, requests or concerns relating to this Privacy Policy or our data processing practices, please contact our support team through the following channels:
- Email (plain text — not a clickable link): [email protected] (Copy and paste into your email client.)
- Live Chat: Available 24/7 via the chat widget on the Platform. Availability is operator-provided and may vary during high-volume periods.
- FAQ: Visit our FAQ page for answers to common data and account questions.
Privacy-related requests (access, rectification, erasure, etc.) will be acknowledged promptly and resolved within the timeframe required under applicable law. Identity verification will be required before actioning any data rights request.
If you are not satisfied with our handling of a privacy complaint, you have the right to escalate to the supervisory authority of the jurisdiction governing our data processing activities. Contact details for the relevant authority will be provided upon request.
This Privacy Policy was last reviewed in January 2026 and supersedes all prior versions. For your records, you may print or save this page at any time.