m66y Privacy Policy

Introduction

This Privacy Policy ("Policy") is published by m66y ("we", "us", "our", "the Platform") and applies to all personal data collected, processed, and stored in connection with your use of the m66y website, mobile interface, and all associated services accessible at m66y.com. It should be read alongside our Terms & Conditions, which govern the broader relationship between m66y and registered players.

By creating an account on m66y, making a deposit, placing a bet, or simply browsing the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree to this Policy, you must refrain from using the m66y platform.

m66y is committed to handling your personal data with the highest standards of care and transparency. We recognise that players across Pakistan — from Karachi and Lahore to Islamabad, Faisalabad, Multan, and Rawalpindi — place their trust in us, and we take that responsibility seriously.

Who We Are

m66y is an online casino and sports betting platform operating under an international gaming licence. The platform provides registered players with access to online casino games, live dealer tables, crash games, video slots, and a sportsbook covering cricket (including PSL and international fixtures), football, UFC, kabaddi, and other sporting events.

For the purposes of this Privacy Policy, m66y is the data controller — meaning we are the entity responsible for determining how and why your personal data is collected and processed. All data-related enquiries, access requests, and complaints should be directed to our support team using the contact details set out in Section 15 of this Policy.

Data We Collect

m66y collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and from third-party verification providers during the KYC process. The categories of data we collect include:

Identity & Contact Data:

• Full legal name as it appears on your national identity card (CNIC).
• Date of birth (for age verification — all players must be 21 years of age or older).
• Pakistani mobile number and email address.
• Residential address (city, postal code, province).
• CNIC number and a copy of your CNIC or other accepted identity document, collected during KYC verification.

Financial Data:

• JazzCash or EasyPaisa mobile wallet number associated with your account.
• Bank account details (account number, bank name — e.g., HBL, UBL, Meezan Bank) provided for withdrawals.
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used.

Technical & Usage Data:

• IP address, device type, operating system, and browser type at the time of login or platform access.
• Session duration, pages visited, games played, bets placed, and in-platform navigation patterns.
• Login timestamps and geolocation data (country/city level) derived from IP address.

Communications Data:

• Records of any correspondence you have with m66y's support team via live chat, email, or any other channel.
• Feedback, complaints, and survey responses where you have voluntarily submitted them.

How We Use Your Data

m66y uses personal data collected from players for the following purposes, each of which is supported by a legitimate legal basis as described in Section 5:

• Account Registration & Management: To create and maintain your player account, authenticate your identity, and provide access to m66y's services.
• Age & Identity Verification (KYC): To confirm that you are at least 21 years of age and to verify your identity as required by our international gaming licence obligations.
• Payment Processing: To process deposits from and withdrawals to your registered JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank account.
• Gameplay & Betting Services: To facilitate access to casino games, live dealer tables, and the sportsbook, and to accurately record all bets, game outcomes, and winnings.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, money laundering, account takeovers, and other security threats to the platform and its players.
• Responsible Gaming: To monitor gaming patterns for signs of problem gambling behaviour and to apply deposit limits, loss limits, session limits, or self-exclusion where requested or required.
• Regulatory Compliance: To meet obligations under our gaming licence, including record-keeping, anti-money laundering (AML) requirements, and cooperation with lawful regulatory enquiries.
• Customer Support: To respond to your queries, complaints, and support requests efficiently and accurately.
• Platform Improvement: To analyse anonymised usage data and improve the functionality, performance, and user experience of the m66y platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have given explicit consent to receive such communications. You may opt out at any time.

Legal Basis for Processing

m66y processes your personal data only where a recognised legal basis exists for doing so. The applicable legal bases for the processing activities described in this Policy are as follows:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted upon registration — including account management, payment processing, and gameplay services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC verification, AML record-keeping, and responses to lawful regulatory requests.
• Legitimate Interests: Processing carried out for m66y's legitimate business interests — such as fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics — where such interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications and non-essential cookies, which is carried out only where you have provided clear and freely given consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing & Disclosure

m66y does not sell, rent, or otherwise commercially transfer your personal data to third parties. Data is shared only in the following strictly defined and controlled circumstances:

• KYC & Identity Verification Providers: Licensed third-party providers that perform identity, age, and document verification as required under our gaming licence. These providers act as data processors under contractual data processing agreements with m66y.
• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processors who require certain transactional data to process deposits and withdrawals on your behalf.
• Gaming Software Providers: Third-party game developers and live dealer studio operators whose certified games are offered on the m66y platform. Data shared is limited to what is strictly necessary to deliver the game service and record game outcomes.
• Regulatory & Law Enforcement Authorities: Where required by law, court order, or our gaming licence obligations, m66y may disclose personal data to relevant regulatory bodies or law enforcement agencies.
• Fraud Prevention Networks: Anonymised or pseudonymised data may be shared with industry fraud prevention organisations to identify and block abusive or illegal patterns of behaviour across the online gaming sector.
• Corporate Transactions: In the event of a merger, acquisition, or transfer of m66y's business assets, player data may be transferred as part of that transaction. Affected players will be notified in advance wherever practicable.

All third parties with whom m66y shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond those specified in their agreement with m66y.

Cookies & Tracking Technologies

m66y uses cookies and similar tracking technologies on its platform to ensure proper functionality, maintain session security, and gather anonymised analytics data. The types of cookies used by m66y are as follows:

• Essential Cookies: These are strictly necessary for the operation of the m66y platform. They maintain your logged-in session, remember your currency and language preferences, and ensure platform security. These cookies cannot be disabled without disrupting platform functionality.
• Analytics Cookies: These collect anonymised data about how players interact with the m66y platform — such as pages visited, session duration, and features used. This data is used solely to improve platform performance and user experience. No personally identifiable information is included in analytics data.
• Functional Cookies: These remember your preferences such as game display settings, notification preferences, and recently played games to provide a more personalised experience on return visits.
• Marketing Cookies: Where you have provided consent, these cookies may be used to deliver relevant promotional content within the m66y platform. m66y does not place marketing cookies from external advertising networks.

You can manage and delete cookies through your browser settings at any time. Please be aware that disabling essential cookies will impair your ability to use core m66y platform features including login and payment processing.

Data Retention

m66y retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Active Account Data: Retained for the full duration of your registered account with m66y, plus a minimum of five (5) years following account closure, in order to meet anti-money laundering and gaming licence record-keeping requirements.
• KYC Documents: Identity and age verification documents are retained for a minimum of five (5) years from the date of verification, in line with international AML compliance standards.
• Transaction Records: All deposit and withdrawal transaction records are retained for a minimum of five (5) years for financial and regulatory compliance purposes.
• Support Communications: Records of customer support interactions are retained for three (3) years from the date of the final communication in each support case.
• Marketing Consent Records: Records of your marketing consent preferences are retained for the duration of your account plus one (1) year after closure.
• Analytics Data: Anonymised, aggregated analytics data may be retained indefinitely as it cannot be linked back to any individual player.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with m66y's internal data destruction procedures.

Data Security

m66y employs a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the m66y platform is encrypted in transit using industry-standard 256-bit SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal data including CNIC numbers, payment details, and passwords are stored in encrypted form within m66y's secure server infrastructure.
• Access Controls: Access to personal data within m66y's systems is strictly limited to authorised personnel on a need-to-know basis. All staff with data access are subject to confidentiality obligations.
• Two-Factor Authentication: m66y supports two-factor authentication (2FA) for player account logins, providing an additional layer of protection against unauthorised access.
• Regular Security Audits: m66y's technical infrastructure is subject to periodic security assessments and penetration testing to identify and address vulnerabilities proactively.
• Incident Response: In the event of a data breach that poses a risk to player rights, m66y maintains a documented incident response procedure and will notify affected players promptly in accordance with applicable obligations.

Your Data Rights

As a registered player on m66y, you hold the following rights in respect of the personal data we hold about you. Requests to exercise any of these rights should be submitted to our support team via the contact details in Section 15. m66y will respond to all valid requests within ten (10) business days.

Please note that certain rights, particularly the right to erasure, may be limited where m66y has an overriding legal obligation to retain specific data — such as KYC and transaction records required under gaming licence and AML regulations.

International Data Transfers

m66y operates under an international gaming licence and works with licensed third-party service providers including KYC verification partners, payment processors, and game software developers who may be located outside Pakistan. In the course of providing services to you, your personal data may be transferred to and processed in countries other than Pakistan.

Where such international transfers occur, m66y ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to that described in this Policy. These safeguards include:

• Contractual data processing agreements that impose data protection obligations on all recipient entities.
• Transfers to entities operating within jurisdictions that maintain recognised data protection standards under international gaming regulatory frameworks.
• Internal data transfer policies that restrict the type of data transferred to only what is strictly necessary for the legitimate purpose of the transfer.

If you would like further information about the international transfer safeguards applicable to the processing of your personal data, please contact m66y using the details in Section 15.

Children's Privacy

The m66y platform is strictly intended for individuals aged 21 years and above. m66y does not knowingly collect or process personal data from any person under the age of 21. Age verification is a mandatory step in the m66y account registration process and is enforced through our KYC procedures.

If m66y discovers or has reasonable cause to believe that personal data has been collected from an individual under the age of 21, the following steps will be taken immediately:

• The associated account will be suspended pending review.
• All personal data associated with the account will be securely deleted unless retention is required for legal or regulatory reasons related to the breach.
• Any funds deposited by the underage individual will be returned via the original payment method after appropriate verification.

Third-Party Links

The m66y platform may contain references to third-party services such as licensed payment providers (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) and game software developers. Where links to third-party websites or services are present, please be aware that m66y has no control over the content, privacy practices, or data handling of those third-party sites.

This Privacy Policy applies solely to the m66y platform. m66y accepts no responsibility or liability for the privacy practices of any third-party site or service. We strongly recommend that you review the privacy policy of any external site or service you visit or use in connection with your activity on m66y.

Amendments to This Policy

m66y reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory requirements, our gaming licence conditions, or our internal data practices. When material changes are made to this Policy, m66y will notify registered players via email to the address on record, or via a prominent notice displayed on the platform, prior to the changes taking effect.

The effective date displayed at the top of this page will be updated each time this Policy is revised. Your continued use of the m66y platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you must discontinue use of the platform and may request account closure in accordance with the Terms & Conditions.

We recommend that all m66y players review this Privacy Policy periodically to stay informed of how we are protecting your personal data.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way m66y handles your personal data, please contact our dedicated data support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the m66y platform. This is the fastest way to reach our team.
• Email: [email protected] — please include "Privacy Request" in the subject line along with your registered account name so we can locate your records efficiently.

m66y's support team serves players across all of Pakistan — including Karachi, Lahore, Islamabad, Faisalabad, Multan, Rawalpindi, Peshawar, and Quetta — and will respond to all privacy-related requests within ten (10) business days.