mc666 Privacy Policy —
Your Data, Your Rights

This Privacy Policy ("Policy") is issued by mc666 and applies to all players, visitors, and users who access the mc666 website, platform, and associated services. It sets out how mc666 collects, processes, stores, uses, and protects personal data in connection with the provision of its online casino, sports betting, and related digital services.

This Policy should be read together with the mc666 Terms and Conditions, which govern the overall relationship between mc666 and its registered players. By registering an account at mc666, depositing funds, or using any service on the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Policy does not apply to third-party websites, services, or platforms that may be linked to or from mc666. mc666 is not responsible for the privacy practices of any third-party entity and encourages players to review the privacy policies of any third-party services they use independently of mc666.

For the purposes of this Privacy Policy, mc666 acts as the data controller in respect of the personal data collected from players and users of the mc666 platform. As data controller, mc666 is responsible for determining the purposes and means by which your personal data is processed.

mc666 operates under an international gaming regulatory framework and adheres to applicable data protection standards in the discharge of its obligations as data controller. Where mc666 engages third-party service providers to process personal data on its behalf — such as KYC verification partners, payment processors, and fraud prevention services — those third parties act as data processors under written agreements that impose appropriate data protection obligations.

For all data-related enquiries, subject access requests, and privacy complaints, players should contact mc666 through the support channels described in Section 16 of this Policy.

mc666 collects personal data from players across the following categories. All data collection is proportionate to the purpose for which it is collected and limited to what is genuinely necessary for that purpose.

mc666 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than facial image matching used during identity document verification), or health data except where specifically required by responsible gaming obligations and with the player's knowledge.

mc666 collects personal data through the following means:

• Directly from you: When you complete the mc666 registration form; when you submit KYC documentation; when you make deposits or withdrawal requests; when you contact mc666 support by live chat or email; when you complete surveys or feedback forms; and when you update your account profile information.
• Automatically through platform interaction: When you access and use the mc666 platform, our systems automatically collect technical and usage data including your IP address, device identifiers, browser information, session activity, game history, and betting records. This data is collected through server logs, session management systems, and first-party analytics tools.
• Through cookies and similar tracking technologies: mc666 uses cookies and similar technologies as described in Section 8 of this Policy. These collect limited technical data to maintain your session, prevent fraud, and improve platform performance.
• From authorised third parties: mc666 may receive identity verification data from authorised KYC verification service providers who have processed your identity documents. mc666 may also receive fraud-alert signals from payment processing partners where a transaction triggers a risk flag. All third-party data received by mc666 is subject to the same protections as data collected directly.

mc666 uses the personal data it collects for the following specific purposes:

• Account creation and management: Processing your registration, verifying your identity, maintaining your account, and enabling you to access mc666 services.
• Service delivery: Processing deposits and withdrawals, recording betting and gaming activity, delivering game results, and providing access to all mc666 platform features.
• Identity verification and KYC compliance: Verifying your identity and age (minimum 21 years) in accordance with mc666's regulatory obligations and anti-money laundering (AML) requirements.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent account activity, unauthorised account access, money laundering, and other prohibited conduct as defined in the mc666 Terms and Conditions.
• Responsible gaming: Monitoring player activity to identify indicators of problem gambling and delivering responsible gaming tools including deposit limits, session controls, and self-exclusion functionality.
• Customer support: Responding to your queries, resolving disputes, handling complaints, and providing assistance with account issues.
• Marketing and promotions: Sending promotional offers, bonus notifications, and platform updates where you have given your consent to receive such communications. You may withdraw marketing consent at any time by contacting mc666 support or updating your account preferences.
• Regulatory compliance: Meeting mc666's obligations to its licensing authority, including record-keeping requirements and mandatory reporting obligations.
• Platform improvement: Analysing aggregated usage data to improve the performance, content, and user experience of the mc666 platform.

mc666 processes your personal data on the following legal bases, depending on the purpose of the processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between mc666 and you as a registered player — including account creation, payment processing, and service delivery.
• Legal obligation: Processing required to comply with mc666's regulatory and legal obligations, including AML reporting, KYC verification, age verification, and record-keeping requirements imposed by our licensing authority.
• Legitimate interests: Processing carried out for mc666's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and general platform improvement — provided these interests are not overridden by your privacy rights and interests.
• Consent: Processing based on your explicit consent — primarily in relation to direct marketing communications. Where consent is the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

mc666 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Personal data may be shared with the following categories of third party, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• KYC and identity verification providers: Third-party services that assist mc666 in verifying player identities, age, and document authenticity as part of the KYC process. These providers process identity data solely for the purpose of identity verification on behalf of mc666.
• Payment processing partners: JazzCash, EasyPaisa, and banking partners (HBL, UBL, Meezan Bank), as well as cryptocurrency payment infrastructure providers, who process financial transaction data strictly for the purpose of executing deposits and withdrawals.
• Fraud prevention and AML services: Third-party risk and compliance services that assist mc666 in detecting and preventing fraudulent activity, money laundering, and other prohibited conduct.
• Game software providers: Casino game software providers whose titles are hosted within the mc666 lobby. These providers may receive limited gameplay data (such as bet amounts and game outcomes) as part of the technical operation of their games. They do not receive your personal identity data.
• Customer support technology: Third-party live chat and support ticketing platforms used to deliver mc666's 24/7 customer support services.
• Regulatory and law enforcement authorities: mc666 may be legally required to disclose player data to its licensing authority, relevant regulatory bodies, or law enforcement agencies in accordance with applicable laws and its international licensing obligations. Such disclosures are made only where legally required and to the minimum extent necessary.

All third-party service providers engaged by mc666 are required to maintain appropriate technical and organisational security measures to protect player data and are prohibited from using that data for any purpose other than the specific service they provide to mc666.

mc666 uses cookies and similar tracking technologies on its platform. Cookies are small text files placed on your device when you access the mc666 website. mc666 uses the following categories of cookies:

• Essential / Strictly Necessary Cookies: These cookies are required for the mc666 platform to function correctly. They maintain your login session, remember your account preferences, enable secure page navigation, and prevent cross-site request forgery. These cookies cannot be disabled without impairing your ability to use the mc666 platform.
• Security Cookies: Used to detect fraudulent or suspicious login activity, prevent account takeover attempts, and support mc666's fraud prevention systems. These are strictly necessary for account security and cannot be disabled.
• Analytics Cookies: mc666 uses first-party analytics cookies to understand how players interact with the platform — which pages are visited most frequently, how long sessions last, and which platform features are most used. This data is aggregated and anonymised and is used solely to improve the mc666 platform experience.
• Preference Cookies: Remember your platform preferences such as language settings, display preferences, and responsible gaming tool configurations, so these do not need to be re-entered on each visit.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookie categories may affect your experience on the mc666 platform. mc666 does not use third-party advertising cookies or permit third-party advertisers to place tracking cookies on the mc666 platform.

mc666 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general data retention periods apply:

• Active account data: Retained for the duration of your account relationship with mc666, plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements applicable under mc666's licensing framework.
• Transaction records: All financial transaction records — including deposits, withdrawals, and gaming activity — are retained for a minimum of seven (7) years from the date of each transaction for regulatory and audit purposes.
• KYC and identity documents: Retained for a minimum of five (5) years following the end of the player-mc666 relationship, or longer where specifically required by applicable law or regulatory mandate.
• Customer support communications: Retained for three (3) years from the date of the interaction unless the communication relates to an open dispute, in which case it is retained until final resolution of that dispute.
• Marketing preference records: Records of your marketing opt-in or opt-out status are retained for the duration of your account relationship with mc666, to allow mc666 to demonstrate compliance with its marketing consent obligations.

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with mc666's data disposal procedures. Anonymised data — from which all identifying information has been permanently removed — may be retained indefinitely for analytical and statistical purposes.

mc666 implements a comprehensive set of technical and organisational security measures to protect the personal data of its players against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption of all data in transit between player devices and mc666 servers.
• Encryption of sensitive data at rest within mc666 database infrastructure.
• Role-based access controls limiting access to player personal data strictly to authorised mc666 personnel with a demonstrated need-to-know.
• Regular independent penetration testing and security vulnerability assessments of mc666's platform infrastructure.
• Multi-factor authentication requirements for mc666 staff who access internal systems containing player data.
• Continuous monitoring of mc666's systems for unusual access patterns or potential data breach indicators.
• A documented data breach response procedure enabling mc666 to respond swiftly and appropriately in the event of any confirmed or suspected data security incident.

As a player whose personal data is processed by mc666, you have the following rights in relation to your data. To exercise any of these rights, please contact mc666 support as described in Section 16:

mc666 will respond to all data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by up to two further months, in which case mc666 will notify you of the extension and the reasons for it within the initial thirty-day period. mc666 will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

Please note that certain rights — particularly the right to erasure — may be limited where mc666 is legally required to retain data under its regulatory obligations (e.g., AML record-keeping requirements). Where a request for erasure cannot be fully fulfilled due to legal retention obligations, mc666 will inform you of the specific grounds for this limitation.

mc666 is an international online platform and its infrastructure — including servers, data storage systems, and third-party service providers — may be located in jurisdictions outside Pakistan. As a result, your personal data may be transferred to, stored in, and processed in countries other than Pakistan.

Where personal data is transferred internationally, mc666 ensures that appropriate safeguards are in place to protect that data, including:

• Transfers to service providers operating in jurisdictions recognised as providing an adequate level of data protection under applicable standards.
• The use of appropriate contractual provisions — such as standard contractual clauses — with service providers in jurisdictions that are not deemed to provide an equivalent level of data protection.
• Ensuring all international data transfers are subject to the same security and confidentiality standards that apply to data processed within mc666's primary operating infrastructure.

By using the mc666 platform and accepting this Privacy Policy, you consent to the international transfer of your personal data as described in this section, subject to the protections described above.

The mc666 platform may contain references or links to third-party websites, payment platforms, or services (including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank portals accessed during the deposit or withdrawal process). This Privacy Policy applies only to data processed by mc666 and does not cover the data processing practices of any third-party service.

When you navigate away from the mc666 platform to a third-party service — for example to complete a JazzCash payment — you are subject to that third party's own privacy policy and terms of service. mc666 has no control over and accepts no responsibility for the privacy practices or data security of any third-party platform.

mc666 strongly encourages all players to review the privacy policies of any third-party payment service or platform they use in connection with their mc666 account to ensure they are comfortable with those practices before providing any information.

mc666 employs age verification procedures during the registration process and as part of its KYC verification requirements specifically to prevent access by individuals who are under the age of 21. These procedures include verification of government-issued identity documents such as the Pakistani CNIC, passport, or driving licence.

If mc666 discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21 — whether through the registration process or at any subsequent point — mc666 will immediately suspend the relevant account, conduct a review of all data associated with that account, and permanently delete any personal data collected from the underage individual from its systems to the extent permissible under applicable legal obligations.

Parents and guardians who believe that a minor in their care may have registered an mc666 account should contact mc666 support immediately using the contact details in Section 16 of this Policy. mc666 will prioritise and act on all such reports promptly.

mc666 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in its data processing practices, applicable legal requirements, or regulatory obligations. The current version of this Policy will always be published on this page, together with the version date and version number shown at the top of the document.

Where mc666 makes material changes to this Policy — changes that significantly affect how your personal data is processed or your rights in relation to it — mc666 will notify registered players of the update via the email address associated with their account and will publish a clear notice on the mc666 platform. Non-material changes (such as corrections of typographical errors or minor clarifications that do not alter the substance of the Policy) will be updated without individual notification, though the version date will always be updated to reflect the change.

Your continued use of the mc666 platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not accept a material change to this Policy, you should cease using the mc666 platform and may request account closure in accordance with the mc666 Terms and Conditions.

For all privacy-related enquiries, subject access requests, marketing opt-out requests, data correction requests, or complaints regarding mc666's handling of your personal data, please contact the mc666 support team through the following channels:

• 24/7 Live Chat: Available directly on the mc666 platform. For privacy-specific enquiries, please state "Privacy Request" at the start of your message so the query can be directed to the appropriate team member. Live support is available in both English and Urdu.
• Email: [email protected] — please use the subject line "Privacy Policy Enquiry" or "Data Subject Request" to ensure your message is prioritised and routed correctly. Allow up to five (5) business days for a response to data-related email enquiries.

mc666 is committed to resolving all privacy complaints internally in the first instance. If you are not satisfied with mc666's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction, or with the data protection authority of the jurisdiction in which mc666 is licensed and regulated. Details of the applicable regulatory authority are available from mc666 support on request.