At hh666, we treat the personal data of our Pakistani players with the same seriousness that we bring to our odds, our games, and our payment infrastructure. This Privacy Policy explains exactly what personal data hh666 collects, why we collect it, how we use it, who we share it with, how long we keep it, and what rights you hold over it. We have written this document in plain, readable English — not to obscure anything, but because Pakistani players deserve to understand precisely how their information is handled.
hh666 is the data controller responsible for the personal information you provide when using the hh666 platform at hh666.ws. All data processing decisions are made by hh666.
For any questions regarding this Privacy Policy or your personal data, contact our support team via Live Chat (24/7) or email at [email protected].
The foundational principles guiding how hh666 collects, handles, and protects your personal data — in plain terms, before the full legal policy below
hh666 does not collect personal data for the sake of it. We collect only the information that is genuinely necessary to create and manage your account, process your PKR transactions via JazzCash or EasyPaisa, verify your identity, and comply with applicable anti-money-laundering standards. Nothing more, nothing less.
All personal data held by hh666 is stored on encrypted servers with access restricted to authorised personnel only. We use industry-standard 256-bit SSL encryption for all data in transit. CNIC documents and KYC verification records are stored in isolated, access-controlled environments with full audit logging of every access event.
hh666 does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances. Data sharing with third parties occurs only where strictly necessary for service delivery — such as payment processors for JazzCash and EasyPaisa transactions — and only under binding data processing agreements that hold those parties to equivalent standards.
hh666 respects your right to access, correct, export, and in certain circumstances delete the personal data we hold about you. These are not token rights — they are enforceable entitlements and hh666 has processes in place to honour them promptly. Submit a data rights request any time via Live Chat or email and we will respond within 30 days.
hh666 does not hold personal data indefinitely. Data is retained for the minimum period required to fulfil the purpose for which it was collected, or as required under applicable regulatory and AML standards. When retention periods expire, data is securely and permanently deleted using certified data destruction methods.
If hh666 makes material changes to this Privacy Policy, we will notify registered users via email or in-platform notification before the changes take effect. You will never discover a significant privacy change only by rereading a document you haven't visited in months — we consider proactive notification a basic obligation to our players.
1.1 Scope. This Privacy Policy applies to all personal data collected, processed, and stored by hh666 in connection with the operation of the hh666 platform at hh666.ws. It covers data collected during account registration, identity verification, deposits and withdrawals, sports betting and casino gaming activity, customer support interactions, and marketing communications.
1.2 Who This Applies To. This Policy applies to all current and former registered users of hh666, all visitors to the hh666.ws website, and any individual who contacts hh666 via its support channels. By using the hh666 platform, you acknowledge that you have read and understood this Privacy Policy.
1.3 Relationship to Terms & Conditions. This Privacy Policy should be read alongside the hh666 Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions on a matter of data privacy, this Privacy Policy shall take precedence on the specific privacy question.
1.4 Data Controller. hh666 is the data controller in respect of the personal data described in this Policy. As data controller, hh666 determines the purposes and means by which your personal data is processed. All enquiries regarding the exercise of data rights should be directed to hh666's support team.
hh666 collects the following categories of personal data from its users. The specific data collected in any given context depends on the nature of your interaction with the hh666 platform:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC/NICOP number, selfie photograph | Registration; KYC verification |
| Contact Data | Pakistani mobile number, email address, city of residence | Registration; account updates |
| Financial Data | JazzCash / EasyPaisa wallet number, bank account details (HBL/UBL/Meezan), USDT wallet address, transaction history | Deposit; withdrawal; KYC |
| Activity Data | Bets placed, games played, bonus usage, session timestamps, wager amounts, win/loss records | Ongoing platform use |
| Technical Data | IP address, device type and model, operating system, browser type, device identifiers | Every platform visit |
| Usage Data | Pages visited, links clicked, time on page, navigation paths, feature interactions | Every platform visit |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Support interactions |
| Marketing Preferences | Opt-in/opt-out status, communication preferences, bonus interest signals | Registration; preference updates |
3.1 Directly From You. The majority of personal data hh666 holds is provided directly by users during account registration, KYC submission, deposit and withdrawal requests, support interactions, and when users update their account settings. hh666 does not obtain personal data about you from data brokers or purchased lists.
3.2 Automatically. When you visit hh666.ws, certain technical and usage data is automatically collected by hh666's servers and analytics systems. This includes your IP address, device identifiers, browser type and version, pages visited, session duration, and click-path data. This automatic collection occurs regardless of whether you are logged into an hh666 account.
3.3 From Payment Processors. When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT, hh666 receives transaction confirmation data from the relevant payment processor, including transaction reference numbers and wallet or account identifiers. hh666 does not have access to your full banking credentials — only transaction confirmation data provided by the processor.
3.4 Cookies and Tracking Technologies. hh666 uses cookies and similar tracking technologies on its platform. A full description of the cookies used, their purposes, and how to manage them is provided in Section 7 of this Policy.
hh666 processes personal data for the following specific purposes:
hh666 processes personal data only where a valid legal basis exists. The principal legal bases on which hh666 relies are as follows:
6.1 Categories of Recipients. hh666 shares personal data with third parties only where necessary and only under binding data processing agreements or equivalent legal protections. The categories of recipients with whom hh666 may share personal data include:
6.2 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of assets involving hh666, personal data held by hh666 may be transferred to the successor entity. In such circumstances, hh666 will notify registered users via email or in-platform notification and will ensure that the successor entity is bound to handle your personal data in accordance with this Privacy Policy.
7.1 What Are Cookies. Cookies are small text files placed on your device when you visit hh666.ws. They allow hh666's systems to recognise your device, maintain your session, remember your preferences, and collect analytics data about how the Platform is used.
7.2 Types of Cookies Used by hh666. hh666 uses the following categories of cookies:
7.3 Managing Cookies. You can manage cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Note that refusing strictly necessary cookies will prevent you from logging into and using hh666. Refusing analytics and functional cookies will not prevent platform access but may affect certain personalisation features.
8.1 Technical Measures. hh666 employs a comprehensive suite of technical security measures to protect the personal data of its users, including:
8.2 Organisational Measures. hh666 maintains internal data protection policies, conducts regular staff training on data handling obligations, and limits access to personal data to those employees and contractors who have a genuine operational need for it. All personnel with access to personal data are bound by confidentiality obligations.
8.3 Breach Response. In the event of a personal data breach that poses a risk to users, hh666 will take immediate containment steps and notify affected users as promptly as circumstances permit. hh666 maintains an incident response plan specifically for data security events.
9.1 General Principle. hh666 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. When personal data is no longer required, it is securely deleted or anonymised using certified data destruction methods.
9.2 Specific Retention Periods. The following retention periods apply to the principal categories of personal data held by hh666:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account identity data | Account lifetime + 5 years post-closure | AML compliance; legal obligation |
| KYC documents (CNIC, selfie) | Account lifetime + 5 years post-closure | Regulatory requirement |
| Transaction records | Account lifetime + 7 years post-closure | AML and financial record-keeping obligations |
| Betting and gaming activity | Account lifetime + 3 years post-closure | Dispute resolution; responsible gaming |
| Support communications | 3 years from last interaction | Complaint resolution; quality assurance |
| Technical and usage data | 13 months from collection | Analytics and platform improvement |
| Marketing preference records | Until opt-out + 3 years | Evidence of consent management |
9.3 Account Closure. When you close your hh666 account, your account becomes inactive but your personal data is not immediately deleted. Data is retained for the periods specified in 9.2 above, primarily to satisfy hh666's AML and legal record-keeping obligations. Data that is no longer required after the applicable retention period is securely and permanently deleted.
You hold the following rights in relation to the personal data that hh666 processes about you. To exercise any of these rights, contact hh666 via Live Chat or email at [email protected]. hh666 will respond to all data rights requests within 30 days of receipt, and will not charge a fee for processing legitimate requests.
Request a copy of all personal data hh666 holds about you. We will provide this in a clear, readable format within 30 days. The copy will include what data we hold, why we hold it, who we've shared it with, and how long we intend to keep it.
Request correction of any inaccurate or incomplete personal data hh666 holds about you. For example, if your CNIC number was recorded incorrectly, you may request that hh666 correct it. We will action rectification requests promptly.
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. This right is subject to exceptions — hh666 may be required to retain certain data to comply with AML and legal obligations even after a deletion request.
Request that hh666 pause the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or while an objection to processing is being assessed. Data will be stored but not actively processed during a restriction.
Request a machine-readable export of the personal data you provided to hh666, where processing is based on consent or contract. This allows you to transfer your data to another service provider if you choose. The export will be provided in a standard structured format.
Object to hh666's processing of your personal data where that processing is based on legitimate interests or for direct marketing purposes. Where you object to direct marketing processing, hh666 will cease marketing processing immediately. Other objections will be assessed on their individual merits.
11.1 Opt-In Basis. hh666 sends marketing communications — including promotional bonus offers, PSL season campaigns, deposit match notifications, and platform news — only to users who have opted in to receive them. Marketing opt-in is presented as a separate, unticked checkbox during account registration.
11.2 Opt-Out. You may opt out of marketing communications from hh666 at any time by: (a) updating your communication preferences in Account Settings; (b) clicking the unsubscribe link included in all hh666 marketing emails; or (c) contacting the hh666 support team via Live Chat. Opt-out requests will be processed within 5 business days. Opting out of marketing does not affect transactional or account security communications.
11.3 Responsible Marketing. hh666 will not direct promotional communications at users who have activated self-exclusion, deposit limits, or cooling-off periods. Our marketing segmentation systems are configured to respect responsible gaming restrictions.
12.1 Age Restriction. hh666 does not knowingly collect or process personal data belonging to any person under the age of 21. The hh666 platform is strictly for adults, and age verification is a mandatory part of the account registration and KYC process.
12.2 Discovery of Underage Data. If hh666 discovers or is informed that it has collected personal data from a person under the age of 21, the following steps will be taken immediately: (a) the associated account will be permanently closed; (b) all personal data associated with the account will be deleted, subject only to retention obligations that cannot be avoided by law; (c) any funds in the account will be returned to the original payment source; and (d) the matter will be assessed for any required reporting obligations.
13.1 The hh666 platform does not contain links to third-party websites. All content and navigation on hh666.ws is internal to the hh666 platform. However, certain embedded services — such as live casino game studios — operate within the hh666 platform environment under their own privacy and data handling practices.
13.2 hh666 is not responsible for the privacy practices of embedded third-party game studios or payment processors operating within the Platform. Where relevant, hh666 contractually requires these parties to handle user data in accordance with standards equivalent to those set out in this Privacy Policy. Players who wish to understand how specific game studio or payment processor partners handle their data should consult those parties' own privacy documentation.
14.1 hh666's primary operations are conducted from servers and operational centres that adhere to internationally recognised data protection standards. In certain circumstances, personal data may be transferred to, stored on, or processed by systems located outside Pakistan — for example, where a KYC verification provider or game studio partner operates internationally.
14.2 Where personal data is transferred internationally, hh666 ensures that adequate safeguards are in place to protect your data, including binding contractual clauses in agreements with data recipients that require them to protect your personal data to standards equivalent to those described in this Privacy Policy.
14.3 By using the hh666 platform and submitting your personal data, you acknowledge that your data may be transferred to, processed in, and stored in jurisdictions outside Pakistan. hh666 takes all reasonable steps to ensure that any such transfer is conducted securely and in compliance with applicable standards.
15.1 hh666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or platform functionality.
15.2 Where changes are material — meaning they significantly affect how your personal data is processed or your rights in relation to it — hh666 will notify registered users via email or in-platform notification at least 14 days before the revised Policy takes effect, where practicable.
15.3 The current version of this Privacy Policy is always available at hh666.ws/privacy-policy. The "Last Updated" date at the top of this page reflects when the Policy was most recently revised. Your continued use of the hh666 platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy.
15.4 If you do not agree with any revision to this Policy, you should cease using the hh666 platform and may request account closure in accordance with Section 13 of the hh666 Terms & Conditions.
For all queries, concerns, or requests relating to this Privacy Policy or the processing of your personal data by hh666, please use one of the following contact channels:
By accessing or using the hh666 platform, you confirm that you have read this Privacy Policy and understand how hh666 collects, uses, and protects your personal data. For the full legal terms governing your use of hh666, please read the Terms & Conditions.
hh666's support team is available around the clock to answer any question about how we handle your personal data, process PKR transactions, or manage your account information.