663bt Privacy Policy — How We Safeguard Your Data

01 Who We Are

663bt is an internationally licensed online gaming and sports betting platform operating at 663bt.org. 663bt provides Pakistani players with access to a comprehensive suite of casino games, live dealer tables, slot titles, lottery products, and sports betting markets including PSL cricket, international cricket fixtures, and other major sporting events.

For the purposes of this Privacy Policy, 663bt is the data controller in respect of all personal data collected from players during the registration, verification, gameplay, and support process. References to "663bt", "we", "us", or "our" throughout this Privacy Policy refer to the 663bt platform and its operating entity.

If you have any questions about how 663bt handles your personal data, or if you wish to exercise any of your privacy rights described in Section 8 below, you may contact our Data Protection Officer using the contact details provided in Section 13.

02 Information We Collect

663bt collects personal data from you through several channels: directly during account registration and verification, automatically through your use of the 663bt platform, and occasionally from third-party sources such as payment processors and identity verification providers. The categories of personal data we collect are as follows:

03 How We Use Your Data

663bt processes your personal data for the following specific purposes. Each purpose is tied to a lawful basis for processing as described in Section 4:

• Account registration and management: To create and maintain your 663bt player account, verify your identity, authenticate your login sessions, and manage your account preferences and security settings.
• Payment processing: To process deposits via JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank, to facilitate withdrawal requests, and to maintain accurate transaction records as required by applicable financial regulations.
• KYC and AML compliance: To verify your identity and age (21+ requirement), conduct anti-money laundering checks, screen against sanctions lists, and fulfil 663bt's obligations under applicable international gaming and financial regulations.
• Game and platform delivery: To provide you with access to 663bt's casino games, slot titles, lottery products, live dealer tables, and cricket and sports betting markets, and to personalise your platform experience based on your activity.
• Customer support: To respond to your enquiries, resolve complaints, process responsible gaming requests, and maintain records of support interactions for quality assurance purposes.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, bonus abuse, and other prohibited activities that may harm you or other 663bt players.
• Responsible gaming monitoring: To monitor gameplay patterns for signs of problem gambling behaviour, to enforce self-exclusion orders, and to apply account restrictions where required by 663bt's responsible gaming obligations.
• Marketing communications: To send you promotional offers, bonus notifications, and relevant product updates where you have given explicit consent. You may withdraw consent for marketing communications at any time through your account settings.
• Legal and regulatory compliance: To retain records as required by applicable laws, respond to lawful requests from regulatory authorities, and enforce 663bt's Terms & Conditions.

04 Legal Basis for Processing

663bt processes your personal data only where a valid lawful basis exists under applicable data protection law. The primary legal bases on which 663bt relies are:

• Contractual necessity: Processing required to perform our contract with you — including account management, payment processing, and game delivery — is carried out on the basis that it is necessary to fulfil the services you have requested from 663bt.
• Legal obligation: Processing carried out to comply with 663bt's legal and regulatory obligations, including KYC/AML requirements, age verification, and mandatory record-keeping, is based on legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is carried out on the basis of 663bt's legitimate interests in operating a safe and compliant platform, balanced against your rights and interests.
• Consent: Where consent is the applicable basis — primarily for marketing communications and non-essential cookies — 663bt will obtain your explicit, informed consent before processing. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

05 Data Sharing & Disclosure

663bt does not sell your personal data. We share your data with third parties only in the limited circumstances set out below, and only to the minimum extent necessary for each specific purpose:

• Payment processors: Your payment data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast solely to the extent required to process your deposit or withdrawal transaction. These providers operate under their own privacy policies and are independently regulated financial institutions.
• Identity verification providers: To fulfil our KYC and age verification obligations, 663bt works with third-party identity verification services that process your CNIC details and identity documents on our behalf under strict data processing agreements.
• Game software providers: The third-party game studios whose titles are available on the 663bt platform may receive anonymised gameplay data for technical performance and fairness auditing purposes. No personally identifiable information is shared with game providers beyond what is technically required for game session management.
• Fraud and risk management: 663bt participates in industry-wide fraud prevention networks. Where fraudulent activity is confirmed, relevant data may be shared with partner platforms and fraud prevention bodies to protect the wider online gaming community.
• Legal and regulatory authorities: 663bt will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required by law, pursuant to a valid legal order, or where 663bt determines in good faith that disclosure is necessary to protect the rights, property, or safety of 663bt, its players, or third parties.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of 663bt's assets, your personal data may be transferred to the successor entity. You will be notified via email prior to any such transfer, and your data will remain subject to the protections described in this Privacy Policy.

06 Cookies & Tracking Technologies

663bt uses cookies and similar tracking technologies on the 663bt platform to ensure proper functionality, improve your experience, and support our security and analytics operations. The categories of cookies we use are:

• Strictly necessary cookies: These cookies are essential for the 663bt platform to function. They manage your login session, maintain your authentication state between pages, and enable secure transactions. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These cookies remember your preferences such as language settings, game favourites, and responsible gaming configurations so that you do not need to reset them each time you visit.
• Analytics cookies:663bt uses first-party analytics to understand how players use the platform — which games are most popular, where players encounter difficulties, and how to improve the overall experience. Where third-party analytics tools are used, data is anonymised before transmission.
• Security cookies: These cookies help 663bt identify suspicious login attempts, detect bot activity, and protect your account against unauthorised access.

You can manage your cookie preferences through your browser settings. Blocking strictly necessary cookies will affect your ability to use the 663bt platform. For all other cookie categories, you may opt out without affecting core functionality.

07 Data Retention

663bt retains your personal data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulation. The general retention periods applied by 663bt are:

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be associated with you. Self-exclusion records are retained permanently to prevent circumvention of player protection measures.

08 Your Privacy Rights

As a 663bt player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact the 663bt Data Protection Officer using the details in Section 13. 663bt will respond to all valid requests within five business days and will complete the request within one calendar month:

• Right of access: You have the right to request a copy of all personal data 663bt holds about you, together with information about how it is being used.
• Right to rectification: If any personal data held by 663bt about you is inaccurate or incomplete, you have the right to have it corrected. You may update basic account information directly through your 663bt account settings.
• Right to erasure: In certain circumstances — for example, where processing was based solely on consent and you have withdrawn that consent — you may request that 663bt delete your personal data. This right is subject to overriding legal retention obligations, particularly in respect of financial and AML records.
• Right to restriction: You may request that 663bt restrict the processing of your personal data in circumstances where you contest its accuracy, where processing is unlawful, or where you have objected to processing and a determination of legitimate interests is pending.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests. 663bt will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

09 Children & Minors — 21+ Only

663bt's gaming and betting services are strictly intended for adults aged 21 years and above only. 663bt does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not attempt to register an account, use the 663bt platform, or provide any personal information to 663bt.

663bt conducts mandatory age verification on all new accounts. Where our age verification process identifies or reasonably suspects that a player is under 21 years of age, the account will be suspended immediately pending a formal age verification review. Any funds deposited by an underage player will be returned to the originating payment source, and any winnings accrued will be forfeited in full.

10 Data Security

663bt implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• Transport layer security: All data in transit is protected by TLS 1.3 with 256-bit encryption. HTTPS is enforced across the entire 663bt domain with HTTP Strict Transport Security (HSTS) enabled.
• Encryption at rest: All personally identifiable data stored in 663bt's databases is encrypted at rest using AES-256 encryption.
• Access controls: Access to production systems and personal data is strictly controlled on a need-to-know basis. 663bt staff with access to personal data are subject to background checks and confidentiality obligations. Privileged access requires multi-factor authentication.
• Penetration testing: 663bt's security infrastructure undergoes regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
• Incident response: 663bt maintains a documented data breach response plan. In the event of a data breach that poses a risk to your rights and freedoms, affected players will be notified without undue delay and within 72 hours of 663bt becoming aware of the breach.

While 663bt maintains rigorous security standards, no internet-based system can guarantee absolute security. We strongly recommend that all players use strong, unique passwords for their 663bt account and enable two-factor authentication (2FA) via their registered Pakistani mobile number.

11 International Data Transfers

663bt operates as an internationally licensed platform. As a result, your personal data may be processed in countries outside Pakistan where 663bt's servers, service providers, or partner organisations are located. In all cases, 663bt ensures that appropriate safeguards are in place before transferring personal data internationally, including:

• Standard contractual clauses or equivalent data transfer mechanisms with all receiving parties;
• Adequate data protection assessments of the receiving jurisdiction;
• Binding data processing agreements imposing GDPR-equivalent protections on all data processors regardless of their location.

By using the 663bt platform, you acknowledge that your personal data may be transferred to and processed in countries outside Pakistan. 663bt will take all steps reasonably necessary to ensure your data is treated securely and in accordance with this Privacy Policy wherever it is processed.

12 Changes to This Privacy Policy

663bt reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. Where a material change is made, we will notify all registered players via email to their registered address at least seven days before the updated policy takes effect.

The current version number and effective date of this Privacy Policy are displayed at the top of this page in the // effective_date metadata field. We encourage you to review this Privacy Policy periodically. Your continued use of the 663bt platform after the effective date of any update constitutes your acceptance of the revised policy.

Previous versions of this Privacy Policy are available upon request from the 663bt Data Protection Officer. All historical versions are archived and date-stamped.

13 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or to 663bt's processing of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly from the 663bt platform. For urgent data security concerns — such as suspected unauthorised account access — live chat is the fastest route to assistance, with an average first-response time of three to five minutes.
• Email — Data Protection: support@663bt.org — please include "Privacy Request" in your subject line so your query is routed directly to our Data Protection Officer. We aim to acknowledge all privacy-related emails within one business day and provide a full response within five business days.

663bt is committed to resolving all privacy-related queries and data subject rights requests fairly, promptly, and with full confidentiality. If you are a Pakistani player in Karachi, Lahore, Islamabad, Faisalabad, or anywhere else in Pakistan and you have a concern about your personal data, please reach out — our team is always available.