01 Introduction
This Privacy Policy ("Policy") is issued by td666 ("the Platform," "we," "us," "our") and applies to all personal data collected from individuals ("Players," "Users," "you," "your") who access or use the td666 online gaming platform accessible at https://td666.biz and any related sub-domains, mobile applications, or platform services.
td666 is committed to protecting the privacy and personal data of all players, with particular regard to the Pakistani users who form the core of our player community, including those based in Karachi, Lahore, Islamabad, Faisalabad, and across the country. We take our data protection obligations seriously and have designed this Policy to be transparent, comprehensive, and written in clear English.
By creating a td666 account or by continuing to use the td666 platform, you acknowledge that you have read, understood, and consented to the data practices described in this Privacy Policy. If you do not agree with any provision of this Policy, you must discontinue your use of the td666 platform immediately.
Scope of This Policy: This Policy covers all personal data processing activities conducted by td666 in connection with the provision of online gaming services, including sports betting, cricket wagering, live casino games, slot games, and all associated support and payment processing activities.
02 Data Controller
For the purposes of applicable data protection law, td666 acts as the Data Controller in respect of the personal data it collects and processes from players using the platform. As Data Controller, td666 determines the purposes for which personal data is collected and the means by which it is processed.
td666 operates under international gaming license standards and is subject to the data protection and privacy requirements imposed by its applicable gaming regulatory framework. Where td666 engages third-party service providers to process personal data on its behalf, those third parties act as Data Processors and are bound by data processing agreements that require them to maintain the same standard of data protection as td666.
Any queries relating to td666's role as Data Controller, or any request to exercise your data subject rights as described in Section 11 of this Policy, should be directed to the td666 support team using the contact details set out in Section 14.
03 Personal Data We Collect
td666 collects personal data across the following categories. In all cases, we apply the principle of data minimisation — collecting only what is necessary for the specified purpose:
3.1 Identity and Verification Data
- Full legal name as it appears on your CNIC, passport, or other government-issued identity document.
- Date of birth, required to verify that you meet the minimum age requirement of 21 years.
- Copies of government-issued identity documents submitted during KYC verification, including CNIC, passport, or driving licence scans.
- Selfie photographs or live facial verification images where biometric verification is required by our compliance procedures.
3.2 Contact and Account Data
- Email address used for account registration and communications.
- Mobile phone number, which may be used for two-factor authentication and support communications.
- Residential address in Pakistan, required for identity verification and anti-fraud purposes.
- Account username and encrypted password hash (td666 does not store plain-text passwords).
3.3 Financial and Payment Data
- JazzCash mobile wallet number and associated transaction references.
- EasyPaisa account details and transaction references.
- Bank account details for HBL, UBL, Meezan Bank, and other Pakistani banking institutions where bank transfer is used.
- USDT TRC20 wallet addresses where cryptocurrency transactions are processed.
- Raast ID, SadaPay account details, or 1LINK payment references where applicable.
- Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used.
3.4 Technical and Device Data
- IP address at the time of each login and transaction.
- Device type, model, and operating system version.
- Browser type and version, screen resolution.
- Session start and end timestamps, duration of gaming sessions.
- Login history, including failed login attempts.
3.5 Usage and Behavioural Data
- Games accessed, played, and wagered on, including bet amounts, game types, and outcomes.
- Bonus and promotion interactions, including bonuses claimed and wagering progress.
- Responsible gaming tool settings, including deposit limits, loss limits, and self-exclusion activations.
- Platform navigation patterns and feature usage data.
04 How We Collect Your Data
td666 collects personal data through the following mechanisms:
- Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, submitting feedback, or using any interactive platform feature.
- Automated technical collection: Data collected automatically when you access the td666 platform, including IP address, device identifiers, browser information, and session logs, through standard web server logging and analytics tools.
- Cookies and similar technologies: Functional, analytical, and security cookies placed on your device during platform use. Full details are provided in Section 8 of this Policy.
- Third-party verification services: Identity verification and KYC data may be supplemented or verified using third-party identity verification service providers where required by td666's compliance obligations.
- Payment processors: Transaction data provided by JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment partners in connection with deposit and withdrawal processing.
05 Legal Basis for Processing
td666 processes personal data on one or more of the following legal bases, depending on the category of data and the specific processing activity:
- Contractual necessity: Processing required to perform the contract between td666 and the player, including account management, payment processing, and game provision.
- Legal obligation: Processing required to comply with applicable gaming regulations, anti-money laundering laws, and international sanctions screening obligations applicable under td666's international operating licence.
- Legitimate interests: Processing conducted for td666's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by the data subject's rights and freedoms.
- Consent: Where td666 seeks to process data for purposes beyond those described above — such as sending optional marketing communications — your explicit consent will be sought and may be withdrawn at any time.
06 How td666 Uses Your Personal Data
td666 uses the personal data we collect for the following clearly defined purposes:
- To create, verify, and manage your td666 player account, including processing your registration, verifying your identity, and maintaining your account settings.
- To process deposits and withdrawals in PKR through your chosen Pakistani payment method, including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, SadaPay, 1LINK, and USDT TRC20.
- To provide access to all td666 gaming products, including cricket betting, sports wagering, live casino tables, and slot games.
- To fulfil our age verification obligations and enforce the 21+ minimum age requirement on the td666 platform.
- To comply with anti-money laundering (AML) regulations, financial crime prevention obligations, and international sanctions screening requirements.
- To prevent, detect, and investigate fraud, cheating, abuse of promotional offers, and any other prohibited conduct as defined in the td666 Terms and Conditions.
- To administer and enforce the responsible gaming tools available on the platform, including deposit limits, loss limits, session timers, and self-exclusion requests.
- To communicate with you regarding your account, transactions, security alerts, and support queries.
- To send promotional and marketing communications where you have consented to receive such communications or where permitted under applicable regulations.
- To analyse platform usage, improve the td666 product and user experience, and develop new features relevant to Pakistani players.
No Unsolicited Marketing: td666 will not send you unsolicited marketing communications unless you have explicitly opted in to receive them. You may opt out of marketing communications at any time by contacting our support team.
07 Data Sharing & Third-Party Disclosure
td666 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Data sharing is limited to the following categories of recipients and the specific purposes stated:
- Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment partners receive the minimum data necessary to process your deposits and withdrawals. These entities are independently subject to their own data protection and financial regulations.
- Identity verification services: Third-party KYC and identity verification providers may receive copies of your identity documents and verification data solely for the purpose of completing the verification process on td666's behalf.
- Game content providers: Game studios whose products are hosted on the td666 platform may receive session and wagering data in an aggregated or anonymised form for technical integration and RNG certification purposes.
- Regulatory and law enforcement authorities: td666 may disclose personal data to applicable gaming regulatory authorities, financial intelligence units, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, regulatory obligation, or valid legal process.
- Fraud prevention networks: td666 participates in industry fraud prevention initiatives and may share data with shared fraud databases for the purpose of preventing account fraud and bonus abuse across the gaming industry.
- Professional advisors: Legal, audit, and compliance advisors engaged by td666 may access personal data on a confidential, need-to-know basis where necessary in the course of their professional engagement.
Third-Party Processors: All third-party service providers engaged by td666 to process personal data on its behalf are required to enter into data processing agreements that impose binding obligations equivalent to those applicable to td666 under its operating licence privacy requirements.
08 Cookies & Tracking Technologies
td666 uses cookies and similar tracking technologies on the platform. Cookies are small text files placed on your device that help us recognise you across sessions, maintain your login state, and improve your platform experience. The categories of cookies used by td666 are as follows:
- Strictly necessary cookies: These cookies are essential for the td666 platform to function and cannot be disabled. They include session management cookies that maintain your logged-in state and security cookies that protect against cross-site request forgery attacks.
- Functional cookies: These cookies remember your preferences — such as your preferred language, currency display settings, and game category filters — to personalise your experience on repeat visits to td666.
- Analytical cookies: td666 uses analytical tools to understand how players use the platform, which pages are visited most frequently, and where technical issues may be occurring. This data is used in aggregate form to improve the td666 product.
- Security cookies: These cookies assist with fraud detection, bot prevention, and unusual session activity monitoring to protect the security of your td666 account and funds.
You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the functionality of the td666 platform and may prevent you from logging in or completing transactions. Disabling functional and analytical cookies will not prevent you from using the core platform features.
09 Data Retention
td666 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods imposed by our regulatory obligations:
- Account data and KYC documents: Retained for a minimum of five (5) years from the date of account closure, as required by applicable anti-money laundering regulations applicable under our international gaming licence.
- Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, consistent with financial record-keeping requirements.
- Wagering and gaming history: Retained for a minimum of three (3) years from the date of activity, for the purposes of dispute resolution, responsible gaming monitoring, and regulatory audit.
- Support and communication records: Retained for a minimum of two (2) years from the date of each communication, for dispute resolution and quality assurance purposes.
- Technical and security logs: Retained for a maximum of twelve (12) months from the date of generation, unless specific data is required to be retained in connection with an ongoing fraud investigation or legal proceeding.
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with td666's data deletion procedures. Data subject to active legal proceedings or regulatory investigations will be retained for as long as such proceedings remain unresolved.
10 Security Measures
td666 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
- SSL/TLS encryption: All data transmitted between your device and the td666 platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. The padlock icon visible in your browser confirms that your connection to td666 is encrypted.
- Password security: Passwords are never stored in plain text. td666 uses industry-standard cryptographic hashing algorithms with salting to store password credentials securely.
- Access controls: Access to systems containing personal data is restricted on a need-to-know basis. td666 internal staff access to player data is logged, audited, and subject to role-based access control policies.
- Two-factor authentication: td666 supports and encourages the use of two-factor authentication (2FA) for player accounts to provide an additional layer of protection against unauthorised account access.
- Penetration testing: The td666 platform is subject to regular third-party security assessments and penetration testing to identify and remediate potential vulnerabilities before they can be exploited.
- Incident response: td666 maintains a documented data breach incident response procedure. In the event of a data breach that poses a risk to your rights and freedoms, td666 will notify affected players and relevant regulatory authorities in accordance with applicable obligations and without undue delay.
Your Role in Security: While td666 takes every reasonable measure to protect your data, you also have a responsibility to maintain the security of your own account. Use a strong, unique password for your td666 account. Do not share your login credentials with anyone. Log out of your td666 account when using shared devices. Contact our support team immediately if you suspect unauthorised access to your account.
11 Your Data Subject Rights
As a player on the td666 platform, you hold a number of rights with respect to your personal data. td666 is committed to facilitating the exercise of these rights in a timely and transparent manner. Your rights include:
Right of Access
You have the right to request a copy of the personal data that td666 holds about you. We will provide this information within a reasonable timeframe upon receipt of a verifiable request.
Right of Rectification
You have the right to request correction of any inaccurate or incomplete personal data held by td666. Some data corrections may require re-verification of your identity or updated KYC documentation.
Right of Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that data subject to regulatory retention obligations cannot be deleted before the applicable retention period expires.
Right to Restrict Processing
You may request that td666 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to a particular processing activity.
Right to Data Portability
Where technically feasible and where processing is based on your consent or contractual necessity, you may request that td666 provide your personal data in a structured, machine-readable format.
Right to Object
You have the right to object to processing of your personal data based on td666's legitimate interests. You may also opt out of direct marketing communications at any time without affecting your account status.
To exercise any of the above rights, please contact the td666 support team as detailed in Section 14. We may need to verify your identity before processing your request. We will respond to all valid requests within thirty (30) days of receipt.
12 Children's Privacy and the 21+ Rule
The td666 platform is strictly for adults aged 21 years and above. td666 does not knowingly collect personal data from any individual under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will immediately suspend the associated account, void all associated activity, and delete the relevant data as soon as practicable.
Parents and guardians who believe that a minor may have registered on the td666 platform are encouraged to contact our support team immediately so that the situation can be addressed without delay.
21+ Age Enforcement: td666 enforces the 21+ minimum age requirement through KYC identity verification procedures. Age misrepresentation is a material breach of the td666 Terms and Conditions and will result in permanent account closure with forfeiture of all associated balances where the player is confirmed to be under 21 years of age.
13 Amendments to This Privacy Policy
td666 reserves the right to update or amend this Privacy Policy at any time. Changes to this Policy will be communicated to registered players via email notification and/or a prominent notice displayed on the td666 platform for a reasonable period prior to the amended Policy taking effect.
Where changes to this Policy represent a material change to the way td666 processes your personal data, we will seek your explicit acknowledgement of the updated Policy before you continue to use the platform. For non-material updates, such as corrections of typographical errors or clarifications that do not alter the substance of our data practices, continued use of the platform following the publication of the updated Policy constitutes acceptance of the amendments.
The effective date displayed at the top of this page will be updated each time a new version of the Privacy Policy is published. We encourage you to review this Policy periodically to stay informed of how td666 protects your personal data.
14 Contact Us — Privacy Queries
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that td666 holds about you, please contact the td666 support team through the following channel. All privacy-related queries will be handled with appropriate confidentiality and prioritised by our compliance team:
td666 Privacy & Data Support
Email:
[email protected]
Subject Line (recommended):
Privacy Query — [Your Account Username]
Support Hours: 24 hours a day, 7 days a week
Target Response Time: Within 30 days for formal data subject rights requests; within 48 hours for general privacy queries.
Please note that the email address above is presented as plain text for informational purposes only and is not a clickable link. For the most efficient resolution of privacy queries, please log in to your td666 account and submit your query through the in-platform support messaging system, quoting "Privacy Policy Query" in your subject line.