Section 1
Who We Are
This Privacy Policy is issued by the entity operating the 66rs platform at 66rs.ws (referred to in this document as "66rs", "we", "us", or "our"). 66rs is an internationally licensed online casino and sports betting platform primarily serving English-speaking Pakistani players.
For the purposes of applicable data protection law, 66rs acts as the data controller in respect of all personal data collected through the Platform. This means 66rs determines the purposes and means by which your personal data is processed.
If you have any questions about how 66rs handles your personal data, you may contact our privacy team at any time. Contact details are set out in Section 15 of this Policy.
Section 2
Scope of This Policy
This Privacy Policy applies to all personal data collected or processed by 66rs in connection with your use of the 66rs Platform, including:
- The 66rs website accessible at 66rs.ws and all sub-domains.
- The 66rs mobile-optimised browser interface.
- All communications between you and 66rs, including live chat, email, and promotional notifications.
- All financial transactions made through the 66rs cashier, including deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20.
This Policy does not apply to third-party websites, payment processors, or game software providers whose own privacy policies govern data collected directly by those third parties through their own interfaces. 66rs recommends reviewing the privacy policies of any third-party service you interact with in connection with your use of the Platform.
Note for Pakistani Players: 66rs is committed to maintaining the privacy and confidentiality of all player data, with particular care given to the sensitivity of financial information associated with Pakistani payment methods including JazzCash, EasyPaisa, and local bank accounts.
Section 3
Personal Data We Collect
66rs collects the following categories of personal data from players registered on the Platform:
| Category |
Specific Data Points |
Purpose |
| Identity Data |
Full legal name, date of birth, CNIC number, passport number (where applicable), nationality |
KYC verification, age verification, regulatory compliance |
| Contact Data |
Email address, phone number, residential address |
Account management, security alerts, support communications |
| Financial Data |
Payment method type, mobile wallet identifiers (masked), bank account details (masked), transaction history |
Deposit processing, withdrawal processing, AML compliance |
| Account Activity Data |
Login timestamps, session durations, games played, bet amounts, win/loss records, bonus usage |
Responsible gaming monitoring, fraud prevention, platform improvement |
| Technical Data |
IP address, device type, browser type, operating system, geolocation (country-level) |
Security, fraud prevention, regulatory compliance |
| Communications Data |
Live chat transcripts, support emails, survey responses |
Support quality, dispute resolution, service improvement |
66rs does not collect sensitive personal data such as biometric information, health records, religious beliefs, or political opinions, except where expressly required by applicable regulation.
Section 4
How We Collect Your Data
66rs collects personal data through the following channels:
- Direct Provision: Data you supply when registering your 66rs account, completing the KYC process, making deposits or withdrawals, contacting support, or participating in promotions.
- Automated Collection: Technical data collected automatically when you interact with the 66rs Platform, including through cookies, server logs, and session tracking tools.
- Third-Party Sources: Identity and financial verification data received from KYC service providers, payment processors, and fraud prevention partners in connection with verifying your identity and processing transactions.
- Public Sources: In limited circumstances, 66rs may supplement profile data with information available from public registries or watchlists as required by AML and sanctions compliance obligations.
Section 5
Legal Basis for Processing
66rs processes your personal data on the following legal bases:
- Contract Performance: Processing necessary to fulfil our obligations to you as a registered 66rs account holder — including operating your account, processing deposits and withdrawals, and delivering casino and sports betting services.
- Legal Obligation: Processing required to comply with applicable regulatory requirements, including KYC identity verification, AML (Anti-Money Laundering) obligations, and responsible gaming mandates under our international gaming licence.
- Legitimate Interests: Processing carried out in pursuit of 66rs's legitimate business interests, including fraud prevention, platform security, product improvement, and internal analytics — where such interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing based on your explicit consent, specifically in relation to marketing communications. Where processing is consent-based, you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
Section 6
How 66rs Uses Your Personal Data
66rs uses the personal data it collects for the following purposes:
- Creating and managing your 66rs account, including verifying your identity and age in compliance with our 21+ minimum age policy.
- Processing PKR deposits and withdrawals through JazzCash, EasyPaisa, and other supported Pakistani payment methods.
- Detecting, investigating, and preventing fraud, money laundering, and other prohibited activities as required under our international gaming licence.
- Monitoring your account activity for responsible gaming indicators and applying appropriate safeguards where problem gambling patterns are identified.
- Personalising your experience on the 66rs Platform, including surfacing relevant cricket betting markets, PSL fixtures, slot recommendations, and promotional offers.
- Sending transactional communications including deposit confirmations, withdrawal notifications, account security alerts, and KYC request emails.
- Sending marketing communications (where consent has been given) including promotional offers, bonus notifications, and 66rs platform updates.
- Improving the 66rs Platform through aggregate usage analytics, A/B testing, and performance monitoring.
- Complying with legal obligations, regulatory requests, and court orders issued by competent authorities.
Section 7
Cookies and Tracking Technologies
The 66rs Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised user experience. The following categories of cookies are used by 66rs:
- Strictly Necessary Cookies: Essential for the operation of the 66rs Platform. These include session management cookies that keep you logged in during your casino or betting session. These cookies cannot be disabled without disrupting Platform functionality.
- Functional Cookies: Used to remember your preferences such as language settings, display preferences, and recently played games. These cookies enhance your 66rs experience but are not required for basic functionality.
- Analytics Cookies: Used to collect anonymous aggregate data about how players interact with the 66rs Platform — including pages visited, session duration, and device types — to inform product improvements. No personally identifiable data is included in analytics reports.
- Security Cookies: Used to detect fraudulent activity, verify that interactions with the 66rs Platform originate from legitimate users, and protect against cross-site request forgery attacks.
You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the 66rs Platform and may prevent you from logging in or completing transactions.
No Third-Party Advertising Cookies: 66rs does not deploy third-party advertising or retargeting cookies on the Platform. Your browsing behaviour on 66rs is not shared with advertising networks for the purpose of serving you targeted advertisements on other websites.
Section 8
Third-Party Data Sharing
66rs does not sell or rent your personal data to third parties. Data is shared with external parties only in the following limited and controlled circumstances:
- Payment Processors: Financial data necessary to process your JazzCash, EasyPaisa, or bank transfer transactions is shared with the relevant payment service providers. These providers are contractually bound to process your data solely for the purpose of completing your transaction.
- KYC & Identity Verification Providers: Identity documents and personal data submitted during KYC are processed by accredited third-party identity verification services contracted by 66rs. These providers are subject to strict data processing agreements.
- Fraud Prevention & AML Services: Transaction data and technical identifiers may be shared with fraud detection and AML compliance platforms to identify and prevent prohibited financial activities.
- Game Software Providers: Game session data including bet amounts, game rounds played, and round outcomes may be shared with the relevant game software provider (e.g., Pragmatic Play, Evolution Gaming) for game result verification and RNG audit purposes.
- Regulatory Authorities: 66rs will disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, regulatory obligation, or valid legal process.
- Group Companies: 66rs may share data with affiliated group entities for internal administrative, compliance, or operational purposes, subject to equivalent data protection standards.
Data Processing Agreements: All third parties to whom 66rs discloses personal data are required to maintain appropriate technical and organisational security measures and to process such data only for the purposes specified in their contracts with 66rs.
Section 9
International Data Transfers
As an internationally licensed platform, 66rs may store or process your personal data in jurisdictions outside Pakistan. Where personal data is transferred internationally, 66rs ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections afforded under the applicable data protection framework of our licensing jurisdiction.
Such safeguards may include:
- Contractual data transfer agreements incorporating standard data protection clauses.
- Transfer to jurisdictions recognised as providing an adequate level of data protection by the relevant regulatory authority.
- Technical and organisational measures including encryption and access controls that mitigate the risk of unauthorised access during international transmission.
Section 10
Data Retention
66rs retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, subject to the following minimum retention periods mandated by applicable regulatory and legal obligations:
- Account and Identity Data: Retained for a minimum of five (5) years following account closure, as required by anti-money laundering regulations applicable under our gaming licence.
- Financial Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, in compliance with financial record-keeping obligations.
- KYC Documents: Retained for a minimum of five (5) years following the completion of KYC verification, or five years following account closure if later.
- Account Activity Logs: Retained for a minimum of two (2) years following account closure for responsible gaming audit and dispute resolution purposes.
- Support Communications: Retained for up to two (2) years following resolution of the relevant matter.
Following expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 66rs's data deletion procedures. Anonymised or aggregated data may be retained indefinitely as it no longer constitutes personal data.
Section 11
Your Data Protection Rights
Subject to applicable law and the conditions of our regulatory obligations, you have the following rights in respect of the personal data 66rs holds about you:
- Right of Access: You may request a copy of all personal data held about you by 66rs. 66rs will provide a structured, machine-readable copy within 30 days of receiving a verified request.
- Right to Rectification: You may request correction of any personal data that is inaccurate, incomplete, or out of date.
- Right to Erasure: You may request deletion of your personal data subject to retention obligations under Section 10. Where erasure is not possible due to regulatory requirements, 66rs will inform you of the applicable retention period.
- Right to Restrict Processing: You may request that 66rs restricts the processing of your personal data in certain circumstances, for example while the accuracy of your data is contested.
- Right to Data Portability: You may request that 66rs provides your personal data in a portable, machine-readable format for transfer to another service provider.
- Right to Object: You may object at any time to processing of your personal data carried out on the basis of legitimate interests, including profiling for marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise any of the above rights, please contact the 66rs privacy team using the contact details set out in Section 15. 66rs will verify your identity before processing any data subject request. Requests will be acted upon within 30 days and you will receive written confirmation of the outcome.
Section 12
Children's Privacy
The 66rs Platform is strictly intended for individuals who are at least 21 years of age. 66rs does not knowingly collect personal data from persons under the age of 21. If 66rs becomes aware that personal data has been collected from a person under the minimum age, that data will be deleted immediately and the associated account closed.
66rs encourages parents and guardians in Pakistan to use reputable parental control software to restrict access to online gambling platforms on devices accessible to minors. If you believe a minor has created an account on 66rs, please contact our support team immediately at the address in Section 15.
21+ Strict Enforcement: Age verification is carried out at the KYC stage before any withdrawal is processed. No withdrawal will be approved for any account where the holder has not provided satisfactory documentary proof of being at least 21 years of age.
Section 13
Security Measures
66rs implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction:
- Encryption at Rest: All personal data stored in 66rs systems is encrypted using AES-256 encryption. Database access is governed by strict role-based access controls.
- Encryption in Transit: All data transmitted between your device and the 66rs Platform is protected by TLS 1.3, the current industry standard for secure web communications.
- Password Security: User passwords are hashed using a salted cryptographic hashing algorithm. 66rs never stores passwords in recoverable plain text form.
- Two-Factor Authentication: Optional 2FA is available for all 66rs accounts. Players are strongly encouraged to enable 2FA for additional account security.
- Access Controls: Access to personal data within 66rs systems is restricted on a need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular data protection training.
- Security Audits: 66rs conducts regular third-party security assessments and penetration tests of its Platform infrastructure. Critical vulnerabilities are addressed within defined remediation timelines.
- Incident Response: In the event of a data security incident affecting your personal data, 66rs will notify you and the relevant regulatory authority within the timeframes required by applicable data protection law.
Section 14
Updates to This Privacy Policy
66rs may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where a material change is made to this Policy, 66rs will notify registered account holders by email to the address associated with their 66rs account, and will display a prominent notice on the Platform prior to the change taking effect.
The "Last updated" date at the top of this Privacy Policy will be revised each time a change is made. Your continued use of the 66rs Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you must cease using the Platform and may request account closure in accordance with the 66rs Terms and Conditions.
Section 15
Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or want to raise a concern about how 66rs has handled your personal data, please contact us through any of the following channels:
Email: [email protected] (plain text — not a clickable link)
Live Chat: Available 24/7 directly within the 66rs Platform interface.
66rs will acknowledge privacy-related enquiries within two (2) business days and aim to provide a substantive response within thirty (30) calendar days. Where a request is complex or involves a high volume of data, 66rs may extend this period by a further thirty days and will inform you of the extension in writing.
Security Reminder: When contacting 66rs about your account or personal data, our support team will verify your identity before discussing or actioning any data-related request. 66rs agents will never ask for your full account password via any communication channel.