66ab Privacy Policy

This Privacy Policy ("Policy") describes how 66ab ("the Company," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals who access or use the 66ab platform, including the website at 66ab.ws and all associated services, including the online sportsbook, casino, live casino, and promotional features (collectively, the "Platform").

This Policy applies to all registered 66ab players and to any individual who browses the Platform without registering an account. By accessing the Platform or completing the registration process, you acknowledge that you have read this Policy and that you consent to the data practices described herein.

This Policy should be read in conjunction with the 66ab Terms & Conditions and the Responsible Gaming Policy, all of which together govern your use of the Platform.

66ab is an internationally licensed online gaming operator serving players in Pakistan and other eligible jurisdictions. The Company acts as the data controller in respect of the personal data collected from players and visitors through the Platform. As data controller, 66ab is responsible for determining the purposes and means by which your personal data is processed.

66ab operates under an international gaming license and is subject to the data protection and player privacy obligations prescribed by that licensing framework. Our data processing practices are designed to comply with applicable international standards for the protection of personal information in the context of online gaming operations.

66ab collects personal data through several channels: directly from you during the registration process and subsequent account use; automatically through your interaction with the Platform; and from third parties such as payment processors and identity verification services. The categories of data collected are set out below.

66ab does not collect or process special category data (such as health data, racial or ethnic origin, or political opinions) as part of its standard operations, except where a player voluntarily discloses health-related information in the context of a responsible gaming support request. In such cases, the data is processed solely for the purpose of providing appropriate support and is handled with heightened care.

66ab uses the personal data it collects for the following purposes. Each purpose is linked to a legal basis for processing, as described in Section 5 of this Policy.

• Account Registration and Management: To create and maintain your 66ab account, verify your identity, and provide you with access to the Platform and its features.
• Payment Processing: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard, and to maintain accurate financial records of all transactions.
• KYC and Age Verification: To verify that you meet the 66ab minimum age requirement of 21 years and to comply with our international gaming license's know-your-customer obligations.
• Anti-Money Laundering (AML) Compliance: To monitor transactions for unusual activity, to conduct enhanced due diligence where required, and to report suspicious activity to relevant authorities as required by law.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour, to implement player-requested limits and self-exclusion tools, and to provide responsible gaming resources where appropriate.
• Customer Support: To respond to your enquiries, resolve complaints, and provide technical assistance via live chat and email.
• Platform Improvement: To analyse aggregated usage data, identify technical issues, and improve the features, performance, and design of the 66ab Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have given your consent to receive such communications. You may withdraw this consent at any time.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, cheating, collusion, and other security threats to the Platform and its players.
• Legal and Regulatory Compliance: To comply with obligations under our international gaming license, applicable data protection standards, and any lawful requests from regulatory or law enforcement authorities.

66ab processes your personal data on the following legal bases, depending on the specific processing activity involved:

• Contract Performance: Processing that is necessary to deliver the services you have requested — including account management, payment processing, and gaming access — is carried out on the basis that it is necessary for the performance of the contract between you and 66ab.
• Legal Obligation: Processing required for compliance with KYC, AML, responsible gaming, and licensing obligations is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, and analytical purposes is carried out on the basis of 66ab's legitimate interests, where those interests are not overridden by your own rights and interests.
• Consent: Processing for marketing communications is carried out on the basis of your freely given and revocable consent.

66ab does not sell, rent, or trade your personal data to third parties. We may share your data with the following categories of recipients only where there is a legitimate and lawful basis for doing so:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card network processors receive transaction data necessary to process your deposits and withdrawals. These processors operate under their own privacy policies and security standards.
• Identity Verification Providers: Third-party KYC service providers receive identity documents and verification data solely for the purpose of age and identity verification as required under our gaming license.
• Regulatory and Licensing Authorities: 66ab's international gaming licensing authority may receive player data as required for regulatory oversight, audit, and compliance verification purposes.
• Law Enforcement and Legal Authorities: 66ab will disclose personal data to law enforcement agencies, courts, or other public authorities where required to do so by law, court order, or binding regulatory instruction.
• Technology and Platform Providers: Hosting providers, software suppliers, and platform infrastructure vendors may access certain data as part of delivering technical services to 66ab. All such providers are contractually bound to process data only on 66ab's instructions and to maintain appropriate security standards.

The 66ab Platform uses cookies and similar tracking technologies to deliver, improve, and secure the Platform. Cookies are small text files placed on your device when you visit the Platform. They allow 66ab to recognise your browser, remember your preferences, and analyse how the Platform is used.

The following categories of cookies are used on the 66ab Platform:

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that maintain your login state and security cookies that protect your account. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Used to remember your preferences — such as your chosen language, display settings, and recently viewed game categories — to personalise your experience.
• Analytical Cookies: Used to collect aggregated information about how players use the Platform, including which pages are visited most frequently and where technical errors occur. This data helps 66ab improve the Platform.
• Security and Fraud Prevention Cookies: Used to detect unusual behaviour patterns, bot activity, and potential fraud across sessions.

You may control non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of parts of the 66ab Platform. 66ab does not use third-party advertising cookies or cross-site tracking cookies to serve targeted advertising on external platforms.

66ab retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our gaming license obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where anonymisation is not technically feasible, data is archived with restricted access pending deletion.

66ab implements a multi-layered approach to data security, combining technical, organisational, and procedural measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

• All data in transit between your device and the 66ab Platform is encrypted using 256-bit SSL/TLS protocols.
• Personal data at rest is stored on access-controlled servers with encryption applied to sensitive fields including identity documentation and payment references.
• Access to player personal data within 66ab's systems is restricted on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations.
• 66ab conducts regular internal security assessments and engages third-party security specialists to conduct periodic penetration testing and vulnerability assessments of the Platform.
• In the event of a data security incident that affects your personal data, 66ab will notify affected players and relevant regulatory authorities in accordance with applicable notification obligations.

While 66ab takes all reasonable and appropriate steps to protect your data, no system can be guaranteed to be completely secure. You also have a responsibility to keep your account credentials confidential and to notify 66ab immediately if you believe your account has been compromised.

As a player whose personal data is processed by 66ab, you hold the following rights in relation to that data. To exercise any of these rights, please contact the 66ab support team via live chat or email. 66ab will respond to all valid data rights requests within 30 days of receipt.

Please note that the exercise of some rights — particularly the right to erasure — may be limited where 66ab is required to retain certain data for regulatory, legal, or AML compliance purposes. In such cases, 66ab will explain the applicable limitation when responding to your request.

The 66ab platform is strictly intended for individuals aged 21 years and above. 66ab does not knowingly collect or process personal data from individuals below this minimum age. Age verification is a mandatory step in the KYC process, and 66ab will suspend any account where it discovers that the account holder does not meet the minimum age requirement.

If you believe that a minor has registered an account on the 66ab Platform or that their personal data has been inadvertently collected, please contact the 66ab support team immediately. Upon verification, 66ab will take prompt steps to close the account and delete the associated personal data.

As an internationally licensed gaming operator, 66ab may transfer personal data to servers, processors, and service providers located in jurisdictions outside Pakistan. Where such transfers occur, 66ab ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under our licensing framework.

Safeguards for international data transfers may include contractual data protection clauses with the recipient, reliance on the recipient's adherence to internationally recognised data security certifications, or confirmation that the destination jurisdiction maintains an adequate level of data protection.

66ab reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal and regulatory obligations. When material changes are made to this Policy, 66ab will take reasonable steps to notify registered players — for example, by displaying a prominent notice on the Platform or by sending a notification to your registered email address.

The effective date of the current version of this Policy is displayed at the top of this page. It is your responsibility to review this Policy periodically. Continued use of the 66ab Platform following the publication of an updated Policy constitutes your acknowledgement of and agreement to the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 66ab processes your personal data, please contact the 66ab Data Support team using the details below. All privacy-related enquiries and data rights requests will be acknowledged within three business days and responded to in full within 30 days.