1. Who We Are
This Privacy Policy applies to q666, the online gaming platform operated at q666.wine ("q666", "we", "us", "the Platform"). q666 is designed and operated specifically for the Pakistani market, providing sports betting, live casino games, Teen Patti, card games, and crash games to registered adult players in Pakistan.
For the purposes of this policy, q666 acts as the data controller — meaning we determine how and why your personal data is processed. When you register an account or otherwise use q666, you are sharing your personal information with us and we take that responsibility seriously. This policy explains in plain language exactly what we do with your information, and what you can do about it.
Data Controller Contact: For any privacy-related matter, contact q666 at support@q666.wine. We aim to acknowledge all privacy queries within two business days and resolve them within 30 days.
2. What Data We Collect
q666 collects personal data across several categories depending on how you interact with the Platform. Below is a full breakdown of what we collect and why each category is necessary.
2.1 Sensitive Data
q666 does not intentionally collect sensitive personal data such as biometric data, health information, political opinions, or religious beliefs. The only potentially sensitive data collected is your CNIC information during KYC verification, which is handled with heightened security measures and accessed only by authorised verification personnel.
3. How We Collect Your Data
3.1 Directly From You
The majority of personal data q666 holds is provided directly by you during the account lifecycle. This includes information you submit during registration (name, mobile number, date of birth), information you provide during KYC verification (CNIC, photograph), payment details you enter when making a deposit or requesting a withdrawal, and communications you initiate with q666 support.
3.2 Automatically During Platform Use
When you use q666, certain technical data is collected automatically by our systems. This includes your IP address, the type of device and browser you are using, the pages of q666 you visit and the time spent on each, session start and end times, and cookie identifiers placed on your device. This technical data collection is necessary for platform security, fraud detection, and improving the user experience for all q666 players.
3.3 From Third-Party Payment Providers
When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card payment, the relevant payment provider shares transaction confirmation data with q666. This includes the transaction reference number, the amount in PKR, and a masked identifier for the payment account used. Full payment credentials are never shared with q666 by payment providers — they are processed and stored by the provider in their own secure systems.
3.4 Identity Verification Services
In certain cases, q666 uses third-party identity verification services to validate CNIC documents submitted during KYC. These services process your document data according to their own privacy policies and return a verification result to q666. The raw document data is not retained by q666 beyond what is necessary for the verification record.
4. Why We Use Your Data
q666 processes personal data only for specific, legitimate purposes. The following table lists each purpose alongside the lawful basis that justifies the processing.
q666 does not use your personal data for automated decision-making that produces significant legal or similarly significant effects, except in fraud detection processes where automated flags are always reviewed by a human before any account action is taken.
5. Sharing Your Data
q666 does not sell, rent, or trade your personal data. We share data with third parties only where it is necessary to provide you with the q666 service, comply with our legal obligations, or prevent fraud. The categories of third parties we may share data with are:
- Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking networks, and card payment processors receive only the transaction data necessary to process your PKR deposit or withdrawal. These providers operate under their own privacy policies and applicable Pakistani financial regulations.
- Identity Verification Providers: Third-party KYC services receive document images you submit for verification. They return only a pass/fail verification result to q666 and do not retain your documents beyond their operational requirements.
- Game Software Providers: Licensed game providers whose titles are available on q666 (such as crash game and live casino providers) may receive your session data to generate provably fair results and settle game outcomes. This data is limited to in-game activity and does not include your full identity or payment information.
- Fraud Prevention Services: q666 may use specialist fraud detection services that process technical data (IP address, device fingerprint, session patterns) to identify and prevent fraudulent account activity. These services do not receive your identity or payment data.
- Legal and Regulatory Authorities: q666 will disclose personal data to law enforcement, regulators, or other government bodies where required to do so by law, court order, or in response to a valid legal process. We will notify you of such disclosure where legally permitted to do so.
Important: q666 will never share your personal data with advertising networks, data brokers, or social media platforms for commercial targeting purposes. Your q666 account data is not used to serve you advertisements on other platforms.
6. Cookies & Tracking Technologies
6.1 What Are Cookies
Cookies are small text files placed on your device when you visit q666. They help the Platform remember your preferences, maintain your login session, and collect analytical data about how the Platform is used. q666 uses cookies in the categories described below.
6.2 Types of Cookies q666 Uses
- Essential Cookies: Required for basic Platform functionality including maintaining your logged-in session, remembering your language preference, and ensuring security features work correctly. These cookies cannot be disabled without breaking core q666 functionality.
- Analytical Cookies: Used by q666 to understand how players use the Platform — which pages are visited most, where users drop off in the registration flow, and how features are being used. This data is aggregated and anonymised before analysis. These cookies are set by q666's internal analytics systems and do not share data with third-party analytics platforms.
- Security Cookies: Used to detect unusual login activity, prevent cross-site request forgery attacks, and identify potentially fraudulent sessions. These cookies are essential for account security and cannot be disabled.
6.3 Managing Cookies
You can control cookie settings through your browser. Most browsers allow you to view, delete, and block cookies from specific websites. Note that disabling essential cookies on q666 will prevent you from logging in and using core Platform features. Analytical and security cookies can be disabled with less impact on core functionality, though security features may be reduced.
q666 does not use third-party advertising cookies or tracking pixels that share your behaviour data with external advertising networks.
7. Data Security
q666 implements a layered security approach to protect your personal data from unauthorised access, alteration, disclosure, or destruction. The specific security measures in place include:
- TLS Encryption in Transit: All data transmitted between your device and q666 servers is encrypted using Transport Layer Security (TLS 1.2 or higher). This means your login credentials, payment information, and account data cannot be read by third parties intercepting your connection.
- Encryption at Rest: Sensitive personal data stored on q666 systems is encrypted at rest using AES-256 encryption. This includes identity documents stored during KYC verification and payment account identifiers.
- Password Hashing: Your q666 account password is stored as a one-way cryptographic hash using a modern hashing algorithm with salt. This means q666 staff cannot see, retrieve, or reconstruct your password. If you forget your password, it must be reset — it cannot be recovered.
- Access Controls: Access to personal data within q666's systems is restricted on a need-to-know basis. Staff can access only the data categories necessary for their specific role. Access is logged and audited regularly.
- Two-Factor Authentication: q666 supports two-factor authentication (2FA) for player accounts. Enabling 2FA significantly reduces the risk of unauthorised account access even if your password is compromised. We strongly recommend enabling 2FA in your account settings.
- Regular Security Reviews: q666's security posture is reviewed regularly. This includes vulnerability assessments of the Platform infrastructure and periodic review of data access logs.
No online platform can guarantee absolute security. In the unlikely event of a data breach that affects your personal information, q666 will notify you promptly in accordance with applicable notification requirements, describing what happened, what data was involved, and what steps are being taken.
8. Data Retention
q666 retains your personal data for as long as your account is active and for a defined period after account closure, based on the type of data and the purpose for which it was collected.
- Account and Identity Data: Retained for the duration of your active q666 account plus 5 years after closure, in line with financial record-keeping obligations and to resolve any post-closure disputes.
- Transaction Records (PKR deposits, withdrawals, bet history): Retained for 7 years after the transaction date in compliance with applicable financial regulations.
- KYC Documents: Retained for 5 years after account closure. Original document images are deleted after verification is confirmed; only the verification record is retained long-term.
- Support Communications: Retained for 3 years after the support case is closed, to support quality review and enable resolution of any follow-up queries.
- Technical and Session Data (IP logs, device data): Retained for 12 months for fraud investigation purposes, then deleted or fully anonymised.
- Marketing Consent Records: Retained for 3 years after consent is withdrawn, as evidence that consent was properly obtained and withdrawn.
When data reaches the end of its retention period, it is permanently deleted from q666 systems or irreversibly anonymised. You may request early deletion of your data subject to the limitations described in Section 9.
9. Your Rights
As a q666 player, you have specific rights over your personal data. These rights are described below, along with how to exercise each one. All requests should be submitted to support@q666.wine with "Privacy Request" in the subject line.
10. Children's Privacy
q666 is strictly intended for adults aged 18 years and over. We do not knowingly collect personal data from anyone under the age of 18. If q666 becomes aware that a player under 18 has registered an account, that account will be immediately suspended, any balance returned to the original deposit payment method, and the personal data associated with the account deleted.
If you are a parent or guardian and believe your child has registered on q666, please contact us immediately at support@q666.wine. We will investigate and take appropriate action within 48 hours of receiving your report. We take underage access seriously and have age verification measures at both registration and withdrawal stages to detect and prevent it.
11. International Data Transfers
q666 is operated primarily for and from Pakistan. Some of the third-party service providers used by q666 — such as cloud hosting infrastructure and identity verification services — may process data on servers located outside Pakistan. Where international transfers occur, q666 ensures appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this policy.
Safeguards for international transfers include contractual data processing agreements with all third-party providers that require them to protect your data in accordance with applicable privacy standards, and selection of providers that maintain recognised security certifications.
q666 does not transfer your personal data to countries with inadequate data protection frameworks without first ensuring appropriate contractual protections are in place. Your core identity and financial data are processed in systems with strict access controls regardless of the physical server location.
12. Marketing Communications
12.1 What We Send
q666 sends two types of electronic communications to registered players. Transactional communications — deposit confirmations, withdrawal notifications, account security alerts, and verification requests — are sent as part of operating your account and do not require separate consent. Marketing communications — promotional offers, bonus announcements, VIP Club updates, and new game notifications — are sent only where you have given consent.
12.2 Giving and Withdrawing Consent
You can opt in to marketing communications from q666 during registration or at any time in your account settings. You can withdraw consent at any time by updating your communication preferences in your q666 account settings, or by replying "STOP" to any SMS from q666, or by contacting support@q666.wine. Withdrawal of marketing consent does not affect transactional communications, which continue for as long as your account is active.
12.3 No Third-Party Marketing
q666 does not share your contact details with third parties for their own marketing purposes. You will not receive marketing from other companies as a result of being a q666 player.
13. Third-Party Links
q666 does not include links to external websites within the player-facing Platform interface. This Privacy Policy applies solely to the q666 Platform at q666.wine. If you navigate away from q666 to any external site — for example, by entering a URL manually — the privacy practices of that external site are entirely separate and not covered by this policy.
q666 is not responsible for the content, privacy practices, or security of any third-party websites. We recommend reviewing the privacy policy of any website you visit outside of q666.
14. Changes to This Privacy Policy
q666 reviews this Privacy Policy regularly and updates it when our data practices change, when new services are added to the Platform, or when applicable law requires. When material changes are made — changes that affect how we use your data or the rights available to you — q666 will notify registered players via their registered mobile number or email address at least 7 days before the changes take effect.
The updated Privacy Policy will be published at q666.wine/privacy-policy with a revised effective date. If you do not agree with the updated policy, you may request account closure and withdrawal of your remaining PKR balance before the changes take effect. Continued use of q666 after the effective date of any update constitutes acceptance of the revised Privacy Policy.
Minor updates — such as corrections to formatting, clarifications that do not change the meaning of any provision, or updates to contact details — may be made without advance notice and will be reflected in the publication date at the top of this policy.
15. Contact & Complaints
If you have any questions about this Privacy Policy, want to exercise any of your data rights, or wish to raise a privacy complaint about q666, please contact us:
- Email: support@q666.wine — use the subject line "Privacy Request" for data rights enquiries
- Live Chat: Available 24/7 through the q666 Platform when logged in
- Response Commitment: Privacy queries acknowledged within 2 business days; substantive response within 30 days
If you make a privacy complaint to q666 and are not satisfied with our response, you have the right to escalate the complaint to the relevant data protection authority in your jurisdiction. q666 will cooperate fully with any such investigation.
Effective Date: This Privacy Policy is effective as of 1 January 2025. It replaces all previous versions of the q666 Privacy Policy.