Privacy Policy — 668win

1.Introduction

668win ("668win", "we", "us", "our") operates the online betting and live casino platform accessible at 668win.cam ("Platform"). This Privacy Policy ("Policy") governs the collection, processing, storage, protection and disclosure of personal data relating to individuals who access or use the Platform ("Users", "you", "your").

668win is committed to protecting the privacy and personal data of all Users. We process personal data only for the purposes described in this Policy and only to the extent necessary to fulfil those purposes. This Policy is designed to be transparent, readable and informative — not a document intended to obscure how your data is used.

This Policy should be read alongside 668win's Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy.

2.Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

3.Data Controller

668win acts as the Data Controller in respect of all personal data collected through the Platform. As Data Controller, 668win determines the purposes for which, and the manner in which, personal data is processed.

Where 668win engages third-party service providers to assist in operating the Platform — including payment technology providers, KYC verification services, analytics platforms and customer support systems — those providers act as Data Processors under binding contractual data processing agreements. 668win remains responsible for ensuring that such processors handle personal data in accordance with the standards set out in this Policy.

For any queries relating to data controller status or to exercise your data rights, please contact 668win using the contact details provided in Section 16 of this Policy.

4.Data We Collect

668win collects the following categories of personal data from Users:

4.1 Registration & Account Data

• Full legal name
• Date of birth (for age verification purposes)
• Email address
• Mobile telephone number
• Residential address, including city (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar)
• Username and encrypted password credentials
• Preferred currency (including PKR where applicable)

4.2 Identity Verification (KYC) Data

• Copy of valid government-issued identity document (CNIC, passport)
• Proof of residential address documents where required
• Selfie or liveness verification image
• Payment method ownership verification documents

4.3 Financial & Transaction Data

• Deposit and withdrawal records, including amounts in PKR or other supported currencies
• Payment method references (e.g., mobile wallet identifiers for services such as Easypaisa or JazzCash, bank account details for transfers via HBL, UBL, Meezan Bank, Bank Alfalah or Raast-enabled institutions)
• Transaction timestamps and processing outcomes
• Responsible gambling limit settings and transaction history

4.4 Behavioural & Usage Data

• Betting and gaming history, including markets accessed, stake amounts and outcomes
• Session duration, login timestamps and device access records
• Navigation patterns and feature usage within the Platform
• Customer support interaction records

4.5 Technical Data

• IP address and approximate geolocation data
• Device type, operating system and browser information
• Cookie identifiers and session tokens
• Error logs and diagnostic data relevant to Platform performance

5.How We Collect Data

668win collects personal data through the following means:

• Direct submission: Data you actively provide when registering, completing KYC, making deposits or withdrawals, contacting support, or setting responsible gambling preferences.
• Automated collection: Technical and behavioural data collected automatically as you interact with the Platform, through cookies, session tracking and server logs.
• Third-party verification services: Identity data verification outcomes returned by our KYC and anti-fraud service providers following document submission.
• Payment processors: Transaction confirmation and status data received from payment processing infrastructure where applicable.

668win does not collect personal data from social media platforms or purchase personal data from data brokers.

6.Data Processing & Use

668win processes personal data for the following purposes:

7.Legal Basis for Processing

668win processes personal data on the following legal bases:

7.1 Performance of a Contract

The majority of processing activities — including account management, transaction processing, service delivery and KYC — are necessary for the performance of the contract between 668win and the User (as set out in the Terms & Conditions). Without this processing, 668win cannot provide the Services.

7.2 Legal Obligation

Certain processing activities — including anti-money laundering checks, fraud prevention measures, identity verification and responsible gambling recordkeeping — are required by applicable law or regulatory obligation in 668win's licensing jurisdiction. This processing is mandatory and cannot be opted out of.

7.3 Legitimate Interests

Processing for purposes such as fraud detection, platform security, abuse prevention and anonymised analytics is carried out on the basis of 668win's legitimate interests in maintaining a secure, well-functioning platform. These interests are balanced against User privacy rights and do not override them.

7.4 Consent

Where 668win sends promotional or marketing communications, it does so on the basis of explicit User consent. Users may withdraw consent for marketing communications at any time by contacting the support team or using the unsubscribe mechanism in any communication received.

8.Data Sharing & Third-Party Disclosure

8.1 Data Processors

668win may share personal data with carefully selected third-party service providers who assist in operating the Platform, including: KYC and identity verification services, payment processing infrastructure, fraud detection and security services, customer support platform providers, and cloud hosting and infrastructure providers. All such providers are bound by contractual data processing agreements requiring them to handle personal data in accordance with the standards set out in this Policy.

8.2 Payment Context

Where Users transact via payment methods such as Easypaisa, JazzCash, Raast-enabled banking, HBL, UBL, Meezan Bank or Bank Alfalah, the necessary transaction data is shared with the relevant payment processing infrastructure to facilitate the transfer. The mention of these payment names is for contextual clarity only and does not imply that these providers endorse or support gambling services.

8.3 Legal & Regulatory Disclosures

668win may disclose personal data to competent authorities, regulators, law enforcement agencies or courts where required by applicable law, regulatory directive, court order or other legal obligation. Such disclosures will be limited to the data necessary to satisfy the specific legal requirement.

8.4 No Sale of Data

668win does not sell, rent or trade personal data to third parties for their own commercial or marketing purposes. Personal data is shared only as described in this Section 8.

9.Data Retention

668win retains personal data for as long as is necessary to fulfil the purposes described in this Policy, satisfy applicable legal and regulatory retention obligations, and resolve any disputes or enforce agreements.

As a general principle:

• Account and transaction data is retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering and record-keeping obligations.
• KYC verification documents are retained for the same period, unless a longer retention period is required by the applicable regulatory framework.
• Marketing consent records are retained for the duration of the consent and for a reasonable period thereafter to demonstrate compliance.
• Technical and log data is typically retained for shorter periods sufficient for security and operational purposes, unless required for a specific ongoing investigation.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 668win's internal data lifecycle procedures.

10.Security Measures

668win implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction or alteration. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmissions between User devices and the Platform
• Encrypted storage of sensitive data including passwords and KYC documents
• Access controls ensuring that personal data is accessible only to authorised personnel with a legitimate operational need
• Regular security assessments and vulnerability testing of Platform infrastructure
• Secure HTTPS-only KYC document submission portals
• Session timeout and anomaly detection controls on User accounts

While 668win takes all reasonable steps to protect personal data, no internet-based system is completely immune from security risks. Users are encouraged to use strong, unique passwords for their 668win accounts and to enable any available two-factor authentication options.

11.Cookies & Tracking Technologies

11.1 Types of Cookies Used

668win uses the following categories of cookies and similar technologies on the Platform:

11.2 Managing Cookies

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform, including the ability to remain logged in across sessions or retain your preferences. Essential and security cookies are necessary for the Platform to operate and cannot be disabled without ceasing use of the Platform.

12.International Data Transfers

668win may process and store personal data in jurisdictions outside the country in which the User is located, including where our servers, cloud infrastructure or third-party service providers are situated. Where personal data is transferred internationally, 668win ensures that appropriate safeguards are in place to protect the data, such as contractual data transfer mechanisms or equivalent protections.

Users in Pakistan should be aware that data transferred to 668win's infrastructure may be processed in jurisdictions with different data protection frameworks than those applicable in Pakistan. 668win commits to maintaining the standards described in this Policy regardless of where data is physically processed.

13.Your Rights

Subject to applicable law and regulatory constraints, Users of the 668win Platform have the following rights in respect of their personal data. To exercise any of these rights, please contact 668win using the details in Section 16.

14.Minors & Age Restriction

The 668win Platform is strictly restricted to individuals aged eighteen (18) years or older, or the higher minimum age required by the operator's licence jurisdiction. 668win does not knowingly collect personal data from individuals below this age threshold.

Where 668win identifies or has reasonable grounds to believe that personal data has been collected from a minor, it will take prompt steps to delete that data and close the associated account. If you have reason to believe that a minor has registered an account or submitted personal data on the Platform, please contact the support team immediately.

15.Policy Amendments

668win reserves the right to update or amend this Privacy Policy at any time to reflect changes in our processing activities, applicable law or operational practices. Where material changes are made, 668win will endeavour to notify registered Users via the email address associated with their account or through a prominent notice on the Platform prior to the changes taking effect.

The effective date and version information at the top of this page will be updated to reflect each revision. We encourage Users to review this Policy periodically to remain informed about how their data is being handled. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.

16.Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or to the processing of your personal data by 668win, please contact our support team using the details below. Please include "Privacy Request" or "Data Query" in the subject of your message to ensure it is directed to the appropriate team member.