Privacy Policy —
How jj666 Handles Your Data

This Privacy Policy ("Policy") describes how jj666 ("jj666", "we", "us", "our") collects, processes, stores, shares and protects personal data relating to users ("you", "your") of the jj666 platform, accessible at https://jj666.cam (the "Platform").

jj666 is committed to handling personal data responsibly, transparently and in accordance with applicable data protection legislation in the operator's licensing jurisdiction. We recognise that users of the Platform include individuals based in Pakistan, and this Policy is written in plain English to ensure clarity for all readers, including those accessing the Platform from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and across Pakistan.

By registering an Account, accessing the Platform or using any of its services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not access or use the Platform.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that relates to an identified or identifiable natural person. This includes name, email address, date of birth, CNIC number, IP address, device identifiers and financial information.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, alteration and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, jj666's operator entity is the Data Controller.
• "Data Processor" means any third party that processes Personal Data on behalf of and under the instruction of the Data Controller.
• "Consent" means a freely given, specific, informed and unambiguous indication of your agreement to the processing of your Personal Data for a specific purpose.
• "CNIC" means a Computerised National Identity Card issued by the National Database and Registration Authority (NADRA), Pakistan, or equivalent government-issued identity document.
• "KYC" means Know Your Customer identity verification procedures required for regulatory and anti-money laundering compliance.
• "Sensitive Personal Data" means a special category of Personal Data that warrants heightened protection, including information about health, biometric data and financial source-of-funds documentation.

jj666 collects Personal Data from you directly, from your device and browser, and from third-party service providers in the following categories:

3.1 Data You Provide Directly

3.2 Data Collected Automatically

• IP address, approximate geographic location and internet service provider;
• Device type, operating system and browser version;
• Session data including login timestamps, pages visited, bet history and session duration;
• Cookie and tracking technology data as described in Section 9;
• Gameplay and betting activity logs, including game selections, stake amounts and outcomes.

3.3 Data from Third Parties

• Identity verification data from third-party KYC and AML service providers;
• Payment verification data from payment processing partners;
• Fraud screening data from third-party risk management services.

jj666 processes Personal Data only where a valid lawful basis exists. The lawful bases we rely on are as follows:

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal. Withdrawal of consent may limit your ability to use certain features of the Platform.

jj666 uses the Personal Data we collect for the following purposes:

• Account Management: Creating, maintaining and operating your Account, including processing deposits, managing withdrawals and updating account settings;
• Identity and Age Verification: Conducting KYC checks to confirm your identity, verify that you meet the minimum age requirement (18+ or higher as required), and fulfil AML obligations;
• Payment Processing: Facilitating deposits and withdrawals through the payment methods available in the Cashier section;
• Service Delivery: Providing access to sports betting markets, live casino games, slots and other Platform features;
• Customer Support: Responding to your queries, resolving disputes and maintaining support records;
• Responsible Gambling: Monitoring gaming patterns to identify potential problem gambling indicators and administering responsible gambling tools including deposit limits, session controls and self-exclusion;
• Fraud Prevention and Security: Detecting, investigating and preventing fraudulent transactions, account abuse and other unlawful activity;
• Regulatory Compliance: Meeting reporting, record-keeping and other obligations imposed by the operator's licensing jurisdiction;
• Platform Improvement: Analysing aggregated usage data to improve Platform performance, user experience and feature development;
• Marketing Communications: Sending promotional offers, bonus notifications and platform updates — only where you have provided consent and subject to your opt-out rights.

jj666 does not sell, rent or commercially exploit your Personal Data to or with third parties. We share Personal Data only in the following circumstances and with the following categories of recipients:

• KYC and AML Service Providers: Third-party identity verification platforms that process your identity documents and liveness checks on our behalf, under strict data processing agreements;
• Payment Processing Partners: Payment gateway and transaction processing providers necessary to process deposits and withdrawals. Payment method names referenced on the Platform (such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah) are contextual references only and do not confirm current payment partnerships;
• Game and Software Providers: Third-party game developers and casino software providers who operate the games available on the Platform may receive aggregated game activity data as necessary for game delivery and RNG certification;
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order or regulatory instruction, we may disclose Personal Data to competent authorities;
• Fraud and Risk Management Providers: Third-party fraud screening services used to identify and prevent fraudulent account activity;
• Professional Advisers: Legal, accounting or audit professionals where disclosure is necessary for professional advice or compliance purposes, subject to confidentiality obligations.

All third parties with whom Personal Data is shared are required to process such data only for the specified purpose and in accordance with applicable data protection standards.

jj666 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable legal or regulatory obligations.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identified individual.

Subject to applicable law and certain limitations, you have the following rights regarding your Personal Data held by jj666. To exercise any of these rights, please contact our support team as described in Section 15:

• Right of Access: You have the right to request confirmation of whether we process Personal Data about you, and if so, to receive a copy of that data and information about how it is processed;
• Right to Rectification: You have the right to request correction of inaccurate or incomplete Personal Data held about you. Some corrections may require re-submission of KYC documentation;
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data in certain circumstances, such as where the data is no longer necessary for the purpose for which it was collected. This right is subject to our legal retention obligations — we cannot delete data that we are legally required to retain;
• Right to Restriction of Processing: You may request that we restrict the processing of your Personal Data in certain circumstances, for example while the accuracy of data is being contested;
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request a copy of your Personal Data in a structured, commonly used and machine-readable format;
• Right to Object: You have the right to object to processing based on legitimate interests, including direct marketing. Where you object to marketing, we will cease that processing promptly;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

We will respond to valid rights requests within a reasonable timeframe, and in any event within the period required by applicable law. We may need to verify your identity before processing a rights request. We will not charge a fee for standard rights requests; however, where a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or decline the request.

jj666 uses cookies and similar tracking technologies to operate the Platform, improve performance and, where you have consented, deliver relevant promotional content. A cookie is a small text file placed on your device when you visit the Platform.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect Platform functionality. Withdrawing consent for non-essential cookies will not affect your ability to use core Platform features.

jj666 implements technical and organisational measures designed to protect Personal Data against unauthorised access, accidental loss, destruction or alteration. These measures include:

• TLS/SSL encryption for all data in transit between your device and the Platform;
• Encryption at rest for stored Personal Data and identity documents;
• Access controls limiting data access to authorised personnel only, subject to role-based permissions;
• Secure HTTPS-only verification portals for KYC document upload — documents must never be submitted via unsecured channels;
• Regular internal security reviews and vulnerability assessments;
• Strict data processing agreements with all third-party vendors who handle Personal Data.

In the event of a personal data breach that poses a risk to your rights and freedoms, jj666 will notify the relevant supervisory authority within the timeframe required by applicable law and will inform affected users without undue delay where required.

jj666 is an internationally operating platform. Personal Data may be transferred to, stored or processed in countries other than the country in which you reside, including countries outside Pakistan. This may include the operator's licensing jurisdiction and the locations of our third-party service providers.

Where Personal Data is transferred internationally, jj666 ensures that appropriate safeguards are in place to protect your data to a standard consistent with applicable data protection requirements. These safeguards may include:

• Standard contractual clauses or equivalent approved transfer mechanisms between jj666 and the receiving entity;
• Adequacy decisions recognising the data protection standards of the recipient country;
• Binding corporate rules where transfers occur within a corporate group.

By using the Platform, you acknowledge that your Personal Data may be processed outside Pakistan and that the data protection laws of the destination country may differ from those applicable in Pakistan.

The Platform is strictly intended for adults aged 18 years or above, or such higher minimum age as required by the operator's licensing jurisdiction. jj666 does not knowingly collect Personal Data from individuals below the minimum age threshold.

Age verification is conducted as part of the KYC process. If jj666 discovers or has reason to believe that an Account has been registered by a minor, the Account will be suspended immediately, all associated transactions will be reversed where possible, and the Personal Data will be deleted in accordance with applicable law.

If you believe that a minor has registered an Account on the Platform or that jj666 has inadvertently collected Personal Data from a minor, please contact our support team immediately at the email address provided in Section 15.

jj666 acknowledges that a significant portion of its users access the Platform from Pakistan. The following additional information is provided for Pakistani users:

• Regulatory Framework: Pakistan's data protection legislation is evolving. jj666's privacy practices are governed primarily by the operator's licensing jurisdiction rather than Pakistani law. Pakistani users should review both this Policy and any applicable Pakistani data protection legislation;
• CNIC Data: Where you provide CNIC or NADRA-issued identity document data for KYC purposes, this data is processed solely for identity and age verification and is subject to the security measures described in Section 10. jj666 does not transmit CNIC data to Pakistani governmental or financial authorities except where required by a lawful order from a competent authority;
• Payment Data: References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah on the Platform are contextual references to familiar local payment infrastructure. No payment transaction data is shared with these institutions beyond what is operationally necessary to process the transaction itself, and their listing does not imply any partnership or endorsement of gambling;
• Right to Complain: If you have concerns about how jj666 processes your Personal Data, you may contact our support team in the first instance. Where concerns are not resolved to your satisfaction, you may have recourse to applicable supervisory authorities in your jurisdiction.

jj666 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law or operational requirements. Where changes are material — meaning they significantly affect how we process your Personal Data or your rights — we will notify registered users via the email address associated with their Account and will update the "Last Updated" date at the top of this page.

We encourage you to review this Policy periodically to remain informed of our current practices. Your continued use of the Platform following the posting of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should cease using the Platform and may request Account closure through our support team.

For any significant changes affecting how we process Sensitive Personal Data, we will seek fresh consent where required by applicable law.

If you have any questions about this Privacy Policy, wish to exercise your data rights or have a complaint about how we process your Personal Data, please contact our support team:

• Live Chat: Available 24/7 directly from the Platform. Use the live chat widget accessible from any page on the jj666 website.
• Email: [email protected] — this is a plain-text address and is not a clickable link. Target response time: under 4 hours for standard queries. Data rights requests may require up to 30 days to process in full.

When submitting a data rights request by email, please include your registered Account username, the specific right you wish to exercise, and sufficient information to allow us to identify your account and verify your identity. We may require additional identity confirmation before processing sensitive requests.