663win Privacy Policy – How We Protect Your Data

When you register and use your 663win account, we collect several categories of personal data. We only collect information that is genuinely necessary for the purposes described in this policy. Below is a complete breakdown of every category of data we collect.

We do not collect sensitive personal data such as biometric data, health information, religious beliefs, or political views. We collect only what is necessary to operate a secure, compliant gaming platform for Pakistani players.

663win collects personal data for specific, documented purposes. We don't collect data speculatively or "just in case." Every category of data we collect is tied to a defined purpose, and we only retain data for as long as that purpose requires it.

• Account creation and management: Your name, contact details, and identity data are needed to create your account, link it to you as an individual, and ensure that only you can access it.
• Age and identity verification (KYC): Regulatory obligations and our own responsible gaming commitments require us to verify that every 663win player is at least 18 years old. CNIC verification is the primary tool for this.
• Payment processing: Financial data (wallet numbers, bank details) is required to process your deposits and withdrawals accurately and securely. We cannot credit your withdrawal to the correct account without this information.
• Fraud prevention and anti-money-laundering (AML): Transaction data, IP addresses, and device information are used to detect unusual patterns that may indicate fraud, account sharing, bonus abuse, or money laundering activity. This is both a legal requirement and a player protection measure.
• Customer support: Communications data is stored so that support interactions can be tracked, issues can be escalated if needed, and the quality of our support can be reviewed and improved.
• Platform improvement: Anonymised and aggregated usage data helps us understand which features are most used, which game types are most popular, and where the platform experience can be improved. This data does not identify individual players.
• Legal and regulatory compliance: 663win is required to maintain certain records by applicable laws and regulations. Retention of specific data categories for defined periods is a legal obligation, not a choice.

663win does not use your data for unsolicited third-party marketing, does not profile you for advertising purposes, and does not share your data with data brokers or marketing companies of any kind.

Data security is not an afterthought at 663win — it is a core part of how the platform is built and operated. Player data is stored on secure servers with multiple layers of technical and organisational protection in place.

• SSL/TLS Encryption: All data transmitted between your device and 663win servers is encrypted using industry-standard SSL/TLS protocols. This includes login credentials, personal information submitted during registration, and all payment data.
• Encrypted Data Storage: Sensitive data fields — including identity document numbers and payment method identifiers — are encrypted at rest using strong encryption standards.
• Access Controls: Only authorised 663win team members with a specific operational need have access to personal player data. Access is logged and reviewed. No member of our team has unrestricted access to the full player database.
• Payment Data Security: Full card numbers are never stored at 663win. Payment processing is handled by PCI-DSS compliant payment processors. We store only the minimum payment identifiers necessary to process withdrawals.
• Incident Response: 663win has documented procedures for responding to data security incidents. In the unlikely event of a breach that may affect your personal data, we will notify affected players promptly and take all appropriate remedial action.
• Password Security: Account passwords are stored as salted hashes — never as plain text. Not even 663win technical staff can read your password; if you lose it, it must be reset, not retrieved.

You also have a role in securing your own data. Use a strong, unique password for your 663win account, do not share your login credentials with anyone, and contact support immediately if you believe your account has been compromised.

663win does not sell, rent, or trade your personal data. Period. We share personal data only in the specific, limited circumstances described below — and in each case, the data shared is the minimum necessary for the stated purpose.

• Payment Processors: Your payment details are shared with the payment provider you use (Easypaisa, JazzCash, NayaPay, SadaPay, your bank for IBFT, or Visa/Mastercard network) to the extent necessary to complete your transaction. These providers are bound by their own privacy and security obligations.
• Identity Verification Services: When KYC verification is required, your identity documents may be processed by an accredited third-party identity verification service. This service operates under a strict data processing agreement with 663win and cannot use your data for any other purpose.
• Fraud Prevention Services: Anonymised or pseudonymised transaction data may be shared with fraud detection services to help identify unusual activity. These services cannot identify you as an individual from the data we share with them.
• Regulatory and Legal Authorities: 663win will disclose personal data to relevant authorities if required to do so by law, by court order, or as part of a legitimate regulatory investigation. We will notify you of such disclosures where we are legally permitted to do so.
• Business Transfers: In the event that 663win's business is sold or merged with another entity, player data may form part of the transferred assets. You would be notified of any such transfer and your rights would be preserved under the new entity's privacy policy.

663win uses cookies and similar tracking technologies to keep the platform functioning correctly, maintain your session security, and understand how the platform is being used. We do not use cookies to track you across other websites or to serve you targeted advertising on external platforms.

Essential cookies cannot be disabled because the platform cannot function without them — for example, the session cookie that keeps you logged in. Optional cookies can be refused without affecting your ability to play any game at 663win. You can manage cookie preferences through your browser settings at any time.

Most mobile and desktop browsers allow you to view, delete, and block cookies from specific sites. Blocking all cookies from 663win including essential ones will prevent you from logging in, as session management depends on cookies.

As a 663win player, you have meaningful rights over the personal data we hold about you. These rights are not difficult to exercise — you can make a request by emailing our support team at support@663win.ws and we will respond within a reasonable timeframe.

To exercise any of these rights, contact 663win support at support@663win.ws. We will verify your identity before processing any data request to ensure that requests are being made by the account holder themselves. Most requests are fulfilled within 14 calendar days.

663win does not knowingly collect personal data from individuals under the age of 18. The platform is strictly for adults aged 18 and over, and this is enforced through our account registration process, our KYC identity verification requirements, and our ongoing monitoring of accounts.

If a parent or guardian believes that a minor has registered an account at 663win or provided us with personal data without parental consent, please contact us immediately at support@663win.ws. We will promptly investigate, close the account if appropriate, and delete any personal data associated with it.

During any active investigation of a potential underage account, all gameplay and withdrawal activity will be suspended. Any deposits made by a minor will be refunded to the originating payment method once the investigation is concluded and the account is closed.

663win retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as long as is required by applicable law or regulation. The table below summarises our retention approach by data category.

When retention periods expire, data is securely deleted or anonymised so that it can no longer be linked to an individual player. Data that is anonymised beyond re-identification may be retained indefinitely for aggregate statistical analysis, as it no longer constitutes personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 663win handles your personal data, please contact us. We take all privacy enquiries seriously and will respond promptly.

• Email: support@663win.ws — mark the subject line "Privacy Request" to ensure it reaches the right team
• Live Chat: Available through your logged-in 663win account dashboard, 24 hours a day, 7 days a week
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve or substantively respond to them within 14 calendar days

When you contact us about a data request, we will ask you to verify your identity before we action the request. This is to protect you — we need to ensure that data requests are being made by the account holder and not by an unauthorised third party.

663win may update this Privacy Policy from time to time as the platform evolves, as applicable laws change, or as we introduce new features that affect how data is collected or used. When we make material changes, we will let you know.

• Material changes — those that affect your rights, how your data is used, or what data is collected — will be notified to registered players via email or in-platform notification at least 14 days before the changes take effect.
• Minor updates — such as clarifications that don't change the substance of the policy, or corrections of typographical errors — may be made without prior notice, though the "Last Updated" date at the top of this page will always reflect when the most recent change was made.
• The version of the Privacy Policy that applies to you is the one in effect at the time you use the 663win platform. Your continued use of the platform after a policy update takes effect constitutes your acceptance of the updated policy.
• Previous versions of the Privacy Policy are available on request by emailing support@663win.ws.

This Privacy Policy should be read alongside the 663win Terms and Conditions and our Responsible Gaming policy, both of which contain additional information relevant to how we operate the platform and our obligations to players.