me666 Privacy Policy —
How We Handle Your Personal Data

1 Who We Are

me666 is an online gaming platform operating at me666.ws, offering sports betting (including cricket and PSL markets), live casino games, slot games, Fortune Bingo, and related entertainment services primarily to adult players across Pakistan, including Karachi, Lahore, Islamabad, Faisalabad, Multan, and other major cities.

me666 operates under an international gaming licence. For data protection purposes, me666 is the data controller responsible for the personal information collected through the platform. We are committed to handling your personal data lawfully, transparently, and in accordance with the applicable data protection standards under our licensing jurisdiction.

References in this policy to "the Platform" mean the me666 website at me666.ws, any associated mobile web interface, and all services accessible through those properties.

2 Personal Data We Collect

me666 collects personal information through several channels: directly from you when you register or use the platform, automatically through your interaction with the platform, and from third-party verification providers where necessary. The categories of data we collect are set out below.

2.1 Registration & Account Data

When you create a me666 account, we collect the following information:

• Full legal name (as it appears on your government-issued ID);
• Date of birth (to verify you are aged 21 or above);
• Residential address (including city — e.g., Karachi, Lahore, Islamabad);
• Email address;
• Mobile phone number;
• Username and encrypted password;
• Preferred currency (PKR).

2.2 Identity Verification (KYC) Data

To comply with our licensing obligations and prevent fraud and money laundering, we may request:

• Copy of your CNIC (Computerised National Identity Card) or passport;
• Proof of address (recent utility bill or bank statement);
• Proof of payment method ownership (screenshot of JazzCash / EasyPaisa wallet, bank statement, or HBL / UBL / Meezan Bank account details);
• Selfie or liveness check for biometric identity confirmation where required by our KYC provider.

2.3 Financial Transaction Data

When you make deposits or withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or any other supported payment method, we record:

• Transaction amounts and timestamps;
• Payment method identifiers (partial mobile wallet numbers, partial bank account references — never full card or account numbers stored on our servers);
• Deposit and withdrawal histories associated with your account.

2.4 Gaming & Betting Activity Data

We record all betting and gaming activity on your account, including:

• Bets placed, markets selected, odds accepted, and outcomes;
• Casino games played, session durations, and wagering amounts;
• Slot games accessed and Fortune Bingo participation history;
• Bonus offers claimed and wagering requirement progress.

2.5 Technical & Usage Data

When you access the me666 platform, our servers and analytics tools automatically collect:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Pages visited, features used, and time spent on each section;
• Referral source (how you arrived at me666.ws);
• Cookie identifiers and session tokens (see Section 5).

2.6 Communications Data

If you contact the me666 support team via live chat or email, we retain records of those communications, including the content of your messages and our responses, for quality assurance and dispute resolution purposes.

3 How We Use Your Personal Data

me666 uses the personal data we collect for the following purposes:

4 Legal Basis for Processing

me666 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing your registration details, payment transactions, and gaming activity is necessary to fulfil our contract with you as a registered player;
• Legal Obligation: KYC verification, anti-money laundering checks, and regulatory record-keeping are required by the conditions of our gaming licence;
• Legitimate Interests: Fraud detection, platform security monitoring, and aggregated usage analytics are conducted on the basis of our legitimate interest in operating a safe and compliant gaming platform;
• Consent: Marketing communications and non-essential cookies are processed only on the basis of your explicit, freely given consent, which you may withdraw at any time without detriment.

5 Cookies & Tracking Technologies

5.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens that keep you logged in, security cookies that prevent cross-site request forgery, and load-balancing cookies. These cannot be disabled without breaking the platform.
• Functional Cookies: Remember your preferences such as language settings, preferred sports markets (e.g., PSL, cricket), and interface layout choices. Enabled by default but can be disabled.
• Analytics Cookies: Used by our internal analytics tools to understand how players navigate me666, which games are most popular, and where users encounter friction. All data is aggregated and anonymised. Require consent.
• Marketing Cookies: Used to measure the effectiveness of our promotional campaigns. Only set if you have given explicit consent to receive marketing communications.

5.2 Managing Your Cookie Preferences

On your first visit to me666.ws, you will be presented with a cookie preference centre where you can accept, reject, or customise each category of cookie. You may revisit and update your preferences at any time via the cookie settings link in the footer of the platform. Please note that disabling certain cookies may affect your experience — for example, functional cookies help us remember that you prefer cricket betting markets so you are not shown an irrelevant default page each session.

5.3 Third-Party Cookies

Our third-party game providers and payment partners (including JazzCash and EasyPaisa redirect flows) may set their own cookies during your session. These are governed by the respective third-party privacy policies. me666 does not control third-party cookies and cannot accept responsibility for them; however, we only work with partners whose privacy practices meet acceptable standards.

6 Third-Party Sharing

me666 does not sell, rent, or trade your personal information to any third party for their own marketing purposes. We share personal data only in the following limited circumstances, and only to the minimum extent necessary:

6.1 Payment Processors

To process your deposits and withdrawals, we share relevant transaction data with payment service providers including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. These providers act as data processors and are bound by contractual data protection obligations.

6.2 KYC & Identity Verification Providers

To verify your age, identity, and payment method ownership, we use third-party KYC service providers who process your identity documents and biometric data on our behalf. These providers are subject to strict data processing agreements and may only use your data for the specific verification purpose for which it was shared.

6.3 Game Software Providers

Our casino games, slots, and Fortune Bingo are powered by third-party software providers. These providers receive a player identifier and session token to initialise your game sessions but do not receive your full personal profile. Game outcome data is returned to me666 for settlement purposes.

6.4 Regulatory & Law Enforcement Authorities

Where required by the conditions of our gaming licence or by applicable law, me666 may disclose personal data to regulatory bodies, law enforcement agencies, or other competent authorities. This includes mandatory suspicious transaction reports and responses to lawful requests from Pakistani regulatory or law enforcement bodies.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the me666 business, player data may be transferred to the acquiring entity as part of that transaction. We will notify registered players by email and via a prominent platform notice prior to any such transfer, and the receiving entity will be required to honour this Privacy Policy.

7 International Data Transfers

me666 operates under an international gaming licence, and some of our service providers — including KYC verification partners and cloud infrastructure providers — may process your data in jurisdictions outside Pakistan. Where personal data is transferred internationally, we take steps to ensure that an adequate level of protection applies, including:

• Standard contractual clauses between me666 and the relevant data processor;
• Selecting providers who maintain internationally recognised security certifications (e.g., ISO 27001);
• Restricting the scope of data shared to only what is necessary for the specific processing purpose.

If you have questions about specific international transfers involving your personal data, you may contact the me666 privacy team at the address in Section 14.

8 Data Retention

me666 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by law or our gaming licence conditions. The following general retention periods apply:

After the applicable retention period expires, your personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

9 Security Measures

me666 takes the security of your personal data seriously. We implement a layered approach to data security that includes both technical and organisational controls:

9.1 Technical Controls

• TLS Encryption in Transit: All data exchanged between your browser and me666.ws is encrypted using TLS 1.2 or higher, preventing interception by third parties;
• AES-256 Encryption at Rest: Sensitive data stored in our databases — including KYC documents and payment references — is encrypted at rest;
• Password Hashing: Your account password is never stored in plain text. It is salted and hashed using industry-standard algorithms before storage;
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their me666 accounts for an additional layer of login security;
• Intrusion Detection Systems: Our infrastructure is monitored 24/7 for anomalous activity, unauthorised access attempts, and potential data breaches.

9.2 Organisational Controls

• Access to player personal data is restricted on a strict need-to-know basis — only staff who require access to perform their specific job function can view personal data;
• All staff with access to personal data receive data protection training as part of their onboarding and ongoing compliance programme;
• Third-party data processors are subject to contractual data security obligations before being granted any access to me666 player data.

9.3 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, me666 will notify the relevant regulatory authority within 72 hours of becoming aware of the breach and will directly notify affected players without undue delay where the breach poses a high risk to their rights.

10 Your Privacy Rights

• Right of Access: You have the right to request a copy of all personal data that me666 holds about you, along with information about how it is being processed. We will provide this in a structured, readable format (data subject access request / DSAR);
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. You may also update basic account information directly through your me666 account settings;
• Right to Erasure: You may request that me666 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal and regulatory obligations — for example, we cannot delete financial transaction records that we are required to retain under our gaming licence conditions;
• Right to Restrict Processing: You may request that we temporarily suspend certain processing activities while a dispute or accuracy challenge is resolved;
• Right to Data Portability: Where processing is based on your consent or on contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to have it transmitted to another controller where technically feasible;
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. You also have the unconditional right to object to marketing at any time;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11 Children & Minors

Parents and guardians who believe that a minor may have accessed or registered on the me666 platform are urged to contact our support team immediately. We take all such reports seriously and will investigate and act swiftly. We also recommend that parents and guardians make use of parental controls and internet filtering software to prevent minors from accessing online gambling platforms.

12 Marketing Communications

me666 will only send you promotional communications — including welcome bonus notifications, reload offers, PSL cricket betting promotions, slot game announcements, and Fortune Bingo jackpot alerts — where you have explicitly opted in to receive them at the time of registration or through your account settings.

12.1 Opting Out

You may withdraw your marketing consent and opt out of all promotional communications at any time by:

• Updating your notification preferences in your me666 account settings;
• Clicking the unsubscribe link included in any marketing email we send you;
• Contacting the me666 support team directly and requesting removal from all marketing lists.

Opt-out requests are processed within 5 business days. Please note that opting out of marketing communications does not affect transactional communications — we will continue to send you account-related notifications such as deposit confirmations, withdrawal processing updates, and security alerts, as these are necessary for the operation of your account.

13 Changes to This Privacy Policy

me666 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, new regulatory requirements, or changes to the platform's services. The effective date at the top of this page will be updated whenever a material change is made.

Where changes are material — for example, introducing a new category of data processing or a new third-party sharing arrangement — we will notify registered players by email and via a prominent notice on the platform prior to the changes taking effect. Your continued use of the me666 platform following the effective date of any revision constitutes acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically so that you remain informed about how me666 protects your personal information.

14 Contact Us & Privacy Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or wish to raise a concern about the way in which me666 handles your personal data, please contact our privacy team. We are available 24 hours a day, seven days a week.

14.1 Response Timeframes

We aim to acknowledge all privacy-related queries within 48 hours and to provide a substantive response within 30 calendar days. For complex requests — such as data subject access requests involving large volumes of data — we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

14.2 Escalation

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the data protection authority or supervisory body in the jurisdiction in which me666 holds its gaming licence. Details of the relevant authority will be provided in our response to your initial complaint, or are available from the me666 support team upon request.