Introduction
This Privacy Policy (the "Policy") is published by 66fd (the "Platform", "we", "us" or "our"), accessible at https://66fd.cam. It describes how we collect, process, store, share and protect personal data belonging to individuals (each a "User", "you" or "your") who access or use our website and associated services.
66fd is an English-language online gaming information platform serving Pakistani users. We provide editorial content about online sports betting, live casino gaming, cricket wagering, payment guidance and responsible gambling. We are not a licensed gambling operator and we do not process real-money gambling transactions directly on this Platform.
By accessing or using any part of the 66fd Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree to this Policy, please discontinue use of the Platform immediately.
Our core commitment: We collect only what we need, use it only for stated purposes, protect it with appropriate technical controls, and never sell it to third parties. Your trust matters more than our data inventory.
Definitions
The following terms carry the meanings defined below throughout this Policy:
| Term | Definition |
|---|---|
| "Personal Data" | Any information that relates to an identified or identifiable natural person, including name, email address, IP address, device identifiers and account credentials. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure and deletion. |
| "Data Controller" | 66fd, as the entity that determines the purposes and means of processing Personal Data collected through this Platform. |
| "Data Processor" | Any third party that processes Personal Data on behalf of 66fd under a contractual arrangement, such as a hosting provider or analytics service. |
| "Cookies" | Small text files placed on your device by a website to store information about your session, preferences or behaviour on the site. |
| "KYC Documents" | Identity verification documents such as a valid CNIC (Computerised National Identity Card) or passport submitted during the account verification process. |
| "Sensitive Data" | A sub-category of Personal Data warranting heightened protection, including financial information, identity document numbers and biometric data used for liveness checks. |
Data We Collect
The categories and specific data points we collect depend on how you interact with the Platform. We collect data in three primary ways: information you provide directly, information collected automatically, and information received from third parties.
3.1 Information You Provide Directly
- Account Registration: Full name, email address, chosen username, password (stored in hashed form) and date of birth.
- KYC Verification: CNIC number or passport details, scanned copies of identity documents, proof of address (where required) and selfie/liveness check images. These are collected only through the Platform's secure HTTPS verification portal.
- Support Correspondence: Communications you submit to our support team via email at [email protected], including the content of your messages and any attachments you choose to provide.
- Optional Profile Information: City of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar), preferred language and communication preferences.
3.2 Information Collected Automatically
- Technical Data: IP address, browser type and version, operating system, device type and screen resolution.
- Usage Data: Pages visited, time spent on each page, navigation path, click patterns and referring URLs.
- Session Data: Login timestamps, session duration and platform feature interactions.
- Cookie Data: Cookie identifiers and associated preference or analytics data as described in Section 8.
3.3 Information from Third Parties
- Identity Verification Partners: Where we use a third-party KYC service, that service may return a verification result (pass/fail) and associated metadata. We do not instruct these services to retain document images beyond the verification event.
- Analytics Providers: Aggregated, anonymised usage statistics provided by analytics platforms used to understand site performance.
Note on Payment Data: 66fd does not directly collect, store or process payment card numbers, bank account details or mobile wallet credentials. Any financial transaction data is handled exclusively by the operator's payment infrastructure. References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah on this Platform are for reader familiarity only.
How We Use Your Data
We use the Personal Data we collect for the following specific purposes:
| Purpose | Data Used | Basis |
|---|---|---|
| Account creation and management | Name, email, username, password | Contractual necessity |
| Identity and age verification (KYC) | CNIC / passport, selfie, proof of address | Legal obligation / contractual necessity |
| Platform security and fraud prevention | IP address, session data, usage patterns | Legitimate interests |
| Customer support | Email, account details, correspondence | Contractual necessity |
| Platform analytics and improvement | Usage data, technical data (anonymised) | Legitimate interests |
| Legal and regulatory compliance | All categories as required | Legal obligation |
| Responsible gambling monitoring | Account activity, session data | Legitimate interests / legal obligation |
| Service communications | Email address | Legitimate interests / consent |
We do not use your Personal Data for automated decision-making that produces legal or similarly significant effects without human review. We do not build behavioural profiles for sale to advertising networks or data brokers.
Legal Basis for Processing
All processing of Personal Data by 66fd is conducted under one or more of the following legal bases:
- Contractual Necessity: Processing required to fulfil our obligations to you under the Terms & Conditions, including account management and customer support.
- Legal Obligation: Processing necessary to comply with applicable laws and regulations, including anti-money laundering obligations, KYC requirements and law enforcement requests made through proper legal channels.
- Legitimate Interests: Processing carried out for our legitimate business interests — such as platform security, fraud prevention and service analytics — where those interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing for which you have given specific, informed and freely revocable consent, such as receiving optional marketing or promotional communications. You may withdraw consent at any time by contacting [email protected].
Data Sharing
66fd does not sell, rent or trade your Personal Data to any third party for commercial purposes. We may share your data only in the following limited circumstances:
- Service Providers and Data Processors: We engage carefully selected third-party service providers — such as hosting companies, analytics platforms and KYC verification services — who process data on our behalf under binding contractual data processing agreements. These processors are permitted to use your data only for the specific purposes we direct.
- Legal and Regulatory Authorities: We may disclose Personal Data to law enforcement agencies, regulatory bodies or courts where required to do so by law, by a valid court order or by an equivalent legal mechanism. We will notify you of any such request where legally permitted to do so.
- Business Transfers: In the event of a merger, acquisition, asset sale or restructuring involving 66fd, your Personal Data may be transferred to the successor entity. We will provide notice of any such transfer and, where required, seek your consent.
- With Your Consent: We may share data with third parties in other circumstances where you have provided specific prior consent to that sharing.
We will never share your Personal Data with advertising networks, data brokers, social media platforms for retargeting purposes, or any party whose primary use of your data would be commercial profiling.
Data Retention
We retain Personal Data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, or to resolve disputes and enforce our agreements. Specific retention periods are as follows:
- Account Data: Retained for the duration of your active account plus a period of up to five (5) years following account closure, to comply with anti-money laundering record-keeping requirements where applicable.
- KYC Documents: Retained for the period required by the applicable KYC/AML regulatory framework, typically a minimum of five (5) years from the completion of the verification event or the closure of the account, whichever is later.
- Support Correspondence: Retained for up to three (3) years from the date of the last interaction, unless the subject matter requires longer retention for dispute resolution or legal purposes.
- Usage and Analytics Data: Anonymised aggregated analytics data may be retained indefinitely for platform improvement purposes. Non-anonymised usage logs are retained for no more than twelve (12) months.
- Cookie Data: Session cookies expire at the end of your browsing session. Persistent cookies expire at the times stated in Section 8.
Upon expiry of applicable retention periods, Personal Data is securely deleted or anonymised using industry-standard methods. You may request earlier deletion of your data subject to the conditions set out in Section 10.
Cookies & Tracking Technologies
66fd uses cookies and similar technologies to ensure the Platform functions correctly, to remember your preferences and to understand how the site is used. We do not use third-party advertising cookies or tracking pixels linked to external ad networks.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Authentication, session management and core Platform functionality. Cannot be disabled without breaking the site. | Session / up to 24 hours |
| Functional | Remembers your preferences such as language setting and display options to personalise your experience. | Up to 12 months |
| Analytical | Aggregated, anonymised data about page visits, navigation paths and feature usage to help us improve Platform content. | Up to 13 months |
You may control cookie behaviour through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies or configure alerts when cookies are set. Please note that disabling strictly necessary cookies will impair your ability to use the Platform.
Data Security
66fd implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction or alteration. These measures include:
- HTTPS/TLS Encryption: All data transmitted between your browser and our servers is protected using Transport Layer Security (TLS). Always verify the padlock icon and the correct domain before entering any personal information.
- Password Hashing: Account passwords are stored using a one-way cryptographic hashing function. We never store plaintext passwords.
- Access Controls: Access to personal data within our organisation is restricted on a need-to-know basis. Personnel handling personal data are bound by confidentiality obligations.
- Secure KYC Portal: Identity documents must be submitted only through our secure HTTPS verification flow. Never send sensitive documents — including CNIC copies or passport scans — via unencrypted email, live chat or social media platforms.
- Regular Security Reviews: Our security posture is reviewed on an ongoing basis and updated in response to emerging threats.
Despite these measures, no data transmission or storage system is entirely immune to risk. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users without undue delay and take all reasonable steps to mitigate the impact.
Your Rights
Subject to applicable law and any overriding legal obligations (such as AML record-keeping requirements), you hold the following rights in relation to your Personal Data:
Right of Access
Request a copy of the Personal Data we hold about you, along with information about how it is processed.
Right of Rectification
Request correction of inaccurate or incomplete Personal Data we hold about you.
Right to Erasure
Request deletion of your Personal Data, subject to overriding legal retention obligations such as AML requirements.
Right to Restriction
Request that we temporarily restrict processing of your data whilst a dispute or inaccuracy is resolved.
Right to Portability
Request a machine-readable copy of Personal Data you have provided to us for portability to another service.
Right to Object
Object to processing carried out on the basis of legitimate interests, including profiling or direct marketing.
To exercise any of the above rights, please contact our support team at [email protected] (plain text — not a link). We will respond within 30 days of receipt of a verified request. We may need to verify your identity before processing your request.
Minors
The 66fd Platform is strictly intended for adults. We do not knowingly collect Personal Data from individuals under the age of 18 — or the higher minimum age required by the operator's licence jurisdiction. If we become aware that we have inadvertently collected Personal Data from a minor, we will delete that data without delay and close the associated account.
If you are a parent or guardian and believe that a minor under your care has provided us with Personal Data, please contact us immediately at [email protected] so that we can take appropriate action.
International Data Transfers
66fd operates with hosting infrastructure and service providers that may be located outside of Pakistan. Where Personal Data is transferred to jurisdictions that may not have equivalent data protection laws to those of Pakistan, we take steps to ensure appropriate safeguards are in place. These safeguards may include:
- Standard contractual clauses or equivalent contractual protections with data processors;
- Transfers to jurisdictions with an internationally recognised adequate standard of data protection;
- Pseudonymisation or anonymisation of data prior to transfer where technically feasible.
By using this Platform, you acknowledge that your Personal Data may be processed in jurisdictions outside Pakistan as described above.
Third-Party Links
The 66fd Platform may contain informational references or links to third-party websites or platforms, including gambling operators to which users may navigate independently. This Privacy Policy applies solely to data collected by 66fd through this Platform.
We have no control over the data practices of third-party platforms and accept no responsibility for their privacy policies, terms or data handling. When you navigate to a third-party site, you do so subject to that site's own privacy policy. We strongly recommend reviewing the privacy documentation of any platform before submitting personal information.
Policy Amendments
We reserve the right to update or amend this Privacy Policy at any time. Changes will be posted to this page with a revised "Last Updated" date. For material changes that significantly affect how we handle your Personal Data, we will provide additional notice — such as a prominent on-site notification or an email to your registered address.
Your continued use of the Platform following the posting of an updated Policy constitutes your acceptance of the revised terms. We encourage you to check this page periodically. The current version is always accessible at https://66fd.cam/privacy-policy.
Contact Us
For any questions, requests or concerns relating to this Privacy Policy or the handling of your Personal Data, please contact our Data Support team using the details below. We commit to responding to all verified data-related requests within 30 calendar days.
Data Privacy Contact
Subject line: Privacy Request — [Your Name]
Email (plain text — not a link):
[email protected]Please include sufficient detail to allow us to identify your account and process your request efficiently. We may need to verify your identity before actioning data access, correction or deletion requests.