668win Privacy Policy

Introduction

This Privacy Policy ("Policy") is published by 668win, the operator of the online gaming and sports betting platform accessible at 668win.ws ("Platform", "668win", "we", "us", "our"). It describes how 668win collects, uses, stores, and protects the personal data of individuals who access or use our platform, including visitors, registered account holders, and prospective players in Pakistan and internationally.

668win operates under an internationally recognised gaming licence and is bound by the data protection obligations of that regulatory framework. We take our responsibility to handle your personal data lawfully, fairly, and transparently very seriously. This Policy is designed to give you clear, honest information about our data practices — not to bury important information in legal language.

By accessing the 668win platform, creating an account, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing described herein, to the extent that consent is the applicable legal basis. Where processing is required for contractual performance or legal compliance, that processing will occur regardless of consent.

Data Controller

668win is the data controller responsible for the personal data processed in connection with the 668win platform. As data controller, 668win determines the purposes and means of processing your personal data and is accountable for ensuring that processing is carried out in accordance with applicable data protection laws and our international licensing obligations.

For all data protection enquiries, access requests, and complaints, you may contact 668win's data protection point of contact at the following address:

Where 668win engages third-party processors to handle data on our behalf — such as payment processors or KYC verification providers — those processors act under our instruction and are bound by data processing agreements that meet applicable legal standards.

Data We Collect

668win collects several categories of personal data in connection with platform registration, account operation, identity verification, payment processing, and regulatory compliance. The following table outlines the main data categories, their specific types, and the purposes for which they are collected.

668win does not intentionally collect sensitive personal data such as health information, racial or ethnic origin, political opinions, or religious beliefs. If you voluntarily disclose such information during support interactions — for example, disclosing a gambling-related health condition when requesting self-exclusion — it will be processed solely for the purpose of providing the requested support and will not be used for any other purpose.

How We Collect Your Data

668win collects personal data through the following channels and methods:

Direct Collection

The majority of your personal data is provided directly by you during account registration, KYC verification submissions, deposit and withdrawal transactions, customer support interactions, and when completing responsible gaming tool requests such as self-exclusion or deposit limit settings.

Automated Collection

Technical data — including IP addresses, device identifiers, browser information, and session activity — is collected automatically when you access the 668win platform. This data is collected via server logs, session management systems, and cookies placed on your device in accordance with our Cookie Policy described in Section 8.

Third-Party Sources

668win may receive identity verification data from licensed KYC and AML service providers who verify the information you provide against third-party databases, including government identity records where permitted. We may also receive fraud-related data from industry fraud prevention networks to protect the 668win platform and its users.

Legal Basis for Processing

668win processes your personal data on the following legal bases, which vary depending on the category of data and the specific processing activity:

• Contractual Necessity: Processing required to perform our contract with you — including operating your account, processing deposits and withdrawals, providing gaming services, and responding to support requests — is carried out on the basis that it is necessary for the performance of our agreement with you.
• Legal Obligation: Certain processing activities — including KYC identity verification, age verification, AML transaction monitoring, and regulatory reporting — are carried out because 668win is legally obligated to perform them under our gaming licence conditions and applicable financial crime prevention regulations.
• Legitimate Interests: Processing for platform security, fraud detection, technical improvement, responsible gaming monitoring, and internal analytics is carried out on the basis of 668win's legitimate interests in operating a secure, compliant, and commercially viable gaming platform, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications is carried out only where you have provided explicit, freely given, informed consent. You may withdraw marketing consent at any time without affecting the lawfulness of prior processing or your continued use of the platform.

How We Use Your Data

668win uses the personal data we collect for the following specific purposes:

• Creating, verifying, and managing your 668win account throughout its lifecycle.
• Processing deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT payment methods.
• Conducting KYC age and identity verification as required by our gaming licence.
• Monitoring gaming and financial activity for AML compliance and fraud prevention.
• Providing customer support, processing complaints, and resolving disputes.
• Administering and enforcing our responsible gaming tools, including deposit limits, loss limits, cooling-off periods, and self-exclusion.
• Sending transactional communications — account notifications, withdrawal confirmations, security alerts — necessary for account operation.
• Sending promotional and marketing communications where you have provided consent.
• Maintaining platform security, detecting and preventing unauthorised access, fraud, and abuse.
• Complying with regulatory requirements, responding to lawful authority requests, and fulfilling our legal obligations under our gaming licence.
• Analysing platform usage patterns to improve 668win's products, services, and user experience.

Data Sharing & Disclosure

668win shares your personal data only in the circumstances described below. All third-party recipients of your data are required to handle it in accordance with applicable data protection standards and, where they are processors acting on our behalf, are bound by formal data processing agreements.

Service Providers and Processors

668win engages third-party service providers to assist in delivering the platform's services. These include payment gateway operators (for JazzCash, EasyPaisa, banking, and USDT processing), KYC and identity verification providers, game content suppliers, cloud hosting and infrastructure providers, and customer support platform operators. These parties access your data only to the extent necessary to perform their contracted services for 668win.

Regulatory and Legal Authorities

668win is required by its gaming licence and applicable law to report certain information to regulatory and law enforcement authorities. This includes reporting suspicious transactions under AML obligations, responding to lawful court orders, regulatory investigation requests, and other binding legal requirements. Such disclosures are made only to the extent required by law.

Industry Fraud Prevention Networks

668win may share fraud-related data with licensed industry fraud prevention organisations and gaming sector AML networks for the purpose of detecting and preventing financial crime across the industry. This sharing is conducted under appropriate legal frameworks and is limited to data necessary for fraud detection purposes.

Business Transfers

In the event of a merger, acquisition, or transfer of all or substantially all of 668win's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified by email of any such transfer in advance, and the acquiring entity will be bound by this Privacy Policy or a materially equivalent successor policy.

Cookies & Tracking Technologies

The 668win platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session state when you are logged in, and to collect analytics data that helps us understand how the platform is used and where it can be improved.

Essential Cookies

These cookies are strictly necessary for the 668win platform to operate. They maintain your login session, store your language and currency preferences, and enable core security functions. Essential cookies cannot be disabled without preventing you from using the platform's fundamental features.

Analytics Cookies

668win uses privacy-respecting analytics tools to collect aggregated, anonymised data about how users navigate the platform — including which pages are visited most frequently, session duration, and device types. This data is used exclusively to improve the platform experience and is not used to identify individual users in analytics contexts.

Preference Cookies

These cookies remember your stated preferences — such as game lobby filters, display settings, and notification preferences — so you do not need to reset them each time you log in to your 668win account.

You can manage non-essential cookies through your browser settings. Note that disabling essential cookies will affect your ability to use the 668win platform. Continued use of the platform without adjusting browser cookie settings constitutes acceptance of our cookie usage as described in this section.

Data Retention

668win retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following retention principles:

• Active Accounts: Personal data associated with active 668win accounts is retained for the duration of the account and for a period following account closure as required by our legal and regulatory obligations.
• KYC and Financial Records: Identity verification documents and financial transaction records are retained for a minimum of five (5) years following the end of the business relationship, in accordance with international AML record-keeping requirements under our gaming licence.
• Gaming Activity Records: Game session and betting history records are retained for a minimum of five (5) years for regulatory compliance and dispute resolution purposes.
• Support Communications: Customer support interactions are retained for up to three (3) years for quality assurance, training, and dispute resolution purposes.
• Marketing Data: Data processed solely on the basis of marketing consent is deleted within 30 days of consent withdrawal, subject to retention required for other lawful purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. Anonymised data that cannot be re-linked to an individual may be retained indefinitely for statistical and analytical purposes.

Data Security

668win implements a comprehensive technical and organisational security framework to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:

• 256-bit SSL / TLS encryption for all data transmitted between your device and the 668win platform.
• Encryption of sensitive data at rest within our database infrastructure.
• Role-based access controls ensuring that 668win personnel can access personal data only to the extent required for their specific job function.
• Two-factor authentication (2FA) available and encouraged for all 668win accounts.
• Automated IP monitoring and anomaly detection systems that flag and investigate unusual account activity.
• Regular security audits and penetration testing of the platform infrastructure.
• Formal data breach response procedures, including regulatory notification where required by our licence conditions.

Your Privacy Rights

As a data subject, you have a number of rights with respect to your personal data held by 668win. These rights are described below. To exercise any of these rights, contact us at [email protected] with the subject line "Data Subject Request — [Right Type]". We will respond within 30 days.

Children's Privacy

The 668win platform is strictly for adults aged 21 and above. 668win does not knowingly collect personal data from any person under the age of 21. Our mandatory KYC verification process is designed to prevent underage registration and detect any account that may have been created by a minor.

If you are a parent or guardian and believe that a person under 21 in your care has created a 668win account or submitted personal data to our platform, please contact us immediately at [email protected]. We will investigate and, where confirmed, promptly close the account, delete all associated personal data, and return any deposited funds to the payment method used, subject to verification.

International Data Transfers

668win operates as an internationally licensed platform and uses service providers located in various countries to deliver its services. As a result, your personal data may be transferred to and processed in countries other than Pakistan. These transfers may include countries whose data protection laws differ from those in your jurisdiction.

Where personal data is transferred internationally, 668win ensures that appropriate safeguards are in place to protect the data in accordance with applicable standards. Safeguards may include standard contractual clauses in data processing agreements with service providers, reliance on adequacy decisions where applicable, and binding corporate rules where relevant.

By using the 668win platform and providing your personal data, you acknowledge and consent to the international transfer of your data as described in this section, subject to the safeguards described above. If you have questions about the specific safeguards applicable to a particular transfer, contact us at [email protected].

Third-Party Links

The 668win platform may from time to time contain links to third-party websites or services — for example, links to game supplier information pages or responsible gaming support resources. 668win is not responsible for the privacy practices of third-party websites and this Privacy Policy does not apply to any website operated by a third party.

We encourage you to review the privacy policies of any third-party websites you visit via links from the 668win platform. Visiting a third-party website linked from 668win is entirely at your own discretion and risk.

Policy Updates

668win reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes will be communicated to registered 668win account holders by email to the address on file, and by a prominent notice on the 668win platform, at least 14 days before the updated Policy takes effect.

The current version of this Privacy Policy is always accessible at 668win.ws/privacy-policy. The "Last Updated" date at the top of this document indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed of how 668win handles your personal data.

Continued use of the 668win platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not accept a material change to this Policy, you should close your account before the change takes effect. Verified pending withdrawal balances will be honoured regardless of account closure.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a complaint about how 668win has handled your personal data, please contact us using the details below. We take all privacy enquiries seriously and will respond promptly and in good faith.

When submitting a data subject rights request, please include your full name, registered 668win account email address, and a clear description of the right you wish to exercise or the complaint you wish to make. We may request additional verification of your identity before processing any request that involves access to or deletion of personal data.

If you are unsatisfied with 668win's response to a privacy complaint, you have the right to escalate the matter through the data protection oversight mechanism available under our gaming licensing jurisdiction. Details of the applicable oversight body are available upon request by contacting support.