Privacy Policy — m66 Platform

1 Introduction

This Privacy Policy applies to all users of m66 — the website at m66.bz and the m66 mobile application. It explains how we collect personal information, why we collect it, how it is used, and the choices you have regarding your data.

When we say "personal data" or "personal information," we mean any information that can identify you as an individual — your name, contact details, payment records, and betting activity, for example. This policy covers all personal data collected through your use of m66, regardless of whether you access the platform via desktop, mobile browser, or the m66 app.

By registering an account on m66 or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle your data, please do not use m66 and contact us to request account closure.

2 Data We Collect

m66 collects personal data in several ways — directly from you when you register or use the platform, automatically through your device and browser, and from third-party payment providers when you make a deposit or withdrawal in PKR.

We do not knowingly collect data from anyone under the age of 18. If we become aware that a minor has registered on m66, the account will be closed and any associated data deleted.

3 How We Use Your Data

The personal data m66 collects is used for specific, legitimate purposes. We do not use your data in ways that go beyond what is reasonably necessary for operating the platform and keeping your account safe. Here is how your data is used:

• Account Management: To create, maintain, and secure your m66 account, and to verify your identity during registration and at key points such as large withdrawal requests.
• Processing Transactions: To process PKR deposits via JazzCash, Easypaisa, Raast, Bank Transfer, and other supported methods, and to process withdrawal payments to your nominated account.
• Sports Betting & Gaming Services: To record, settle, and display your bets — including Cricket, PSL matches, T20 events, Football, Esports, Casino, Slots, and Bingo sessions.
• Customer Support: To respond to your queries, complaints, and requests through live chat and email support channels.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, and other prohibited conduct as described in the Terms and Conditions.
• Responsible Gaming: To monitor betting patterns that may indicate problem gambling behaviour and to apply any self-imposed limits or self-exclusion you have set in your account.
• Legal Obligations: To comply with applicable anti-money laundering (AML) obligations, including record-keeping requirements and suspicious activity reporting where required.
• Platform Improvement: To analyse how players use m66 — which games are most popular, how the platform performs on different devices, and where the user experience can be improved.
• Marketing Communications: With your consent, to send you information about promotions, bonuses, new games, and special events on m66. You can opt out at any time through your account settings.

4 Legal Basis for Processing

m66 processes your personal data on the following legal grounds depending on the purpose of processing:

• Contract Performance: Processing that is necessary to fulfil the Terms and Conditions you agreed to when registering — including operating your account, settling bets, and processing transactions.
• Legal Obligation: Processing required to comply with anti-money laundering requirements, fraud prevention obligations, and identity verification requirements.
• Legitimate Interests: Processing carried out for m66's legitimate business interests, such as fraud detection, security monitoring, and improving the platform — provided these interests are not overridden by your rights.
• Consent: Processing based on your explicit consent, such as sending marketing communications. Where consent is the basis, you have the right to withdraw it at any time without affecting prior processing.

5 Sharing Your Data

m66 does not sell or rent your personal data to third parties. We may share your data with carefully selected third parties in the following circumstances:

• Payment Processors: We share necessary transaction data with JazzCash, Easypaisa, Raast, and bank partners to process your PKR deposits and withdrawals. These providers have their own privacy policies governing how they handle shared data.
• Identity Verification Providers: Where enhanced identity checks are required, we may share documentation with third-party KYC (Know Your Customer) verification services.
• Game Providers: Some games in the m66 Game Lobby are supplied by third-party game studios. These providers may receive technical session data to deliver and support the game. They do not receive your full registration or payment details.
• IT & Security Service Providers: Companies that provide hosting, cloud infrastructure, cybersecurity, and technical support to m66 may have access to personal data as part of delivering those services, under strict data processing agreements.
• Legal & Regulatory Requests: We may disclose personal data where required by law, court order, or other valid legal process. We will make reasonable efforts to notify you of such disclosure unless prohibited from doing so.
• Business Transfers: In the event of a merger, acquisition, or sale of m66's business or assets, personal data may be transferred as part of that transaction. Users will be notified of any such change.

6 Payment Data & Financial Security

When you make a deposit or withdrawal in PKR — whether via JazzCash, Easypaisa, Raast, Bank Transfer, debit card, or mobile wallet — your payment details are transmitted over an encrypted connection (TLS/SSL). m66 does not store your full card numbers or mobile wallet PINs on its own servers.

Transaction records — including deposit amounts, withdrawal requests, and the payment method used — are retained as part of your account history. This is necessary for accounting purposes, dispute resolution, and compliance with anti-money laundering obligations.

7 Cookies & Tracking Technologies

m66 uses cookies and similar technologies to make the platform work properly, remember your session, and understand how players use the site. Here is a breakdown of the types of cookies we use:

• Essential Cookies: These are necessary for the platform to function. They keep you logged in during your session and ensure your account settings are applied. These cannot be turned off without breaking core platform features.
• Analytics Cookies: These help us understand how players navigate m66 — which pages are visited most, how long sessions last, and where players encounter issues. This data is aggregated and not linked to individual identities.
• Preference Cookies: These remember your settings — such as language preferences and responsible gaming limit configurations — so you do not have to re-enter them every session.
• Marketing Cookies: With your consent, these cookies track interactions with m66 promotions and help us deliver relevant offers. You can opt out of marketing cookies through your browser settings.

You can manage cookie settings through your browser. Note that disabling essential cookies will affect your ability to use m66 properly — including staying logged in and accessing your account balance.

8 Data Retention

m66 retains your personal data for as long as your account is active and for a reasonable period afterwards, as required by our legal and compliance obligations. Specific retention periods vary by data type:

• Account Registration Data: Retained for the lifetime of your account plus a minimum of 5 years after account closure, in line with standard financial record-keeping requirements.
• Transaction & Betting Records: Retained for a minimum of 5 years from the date of each transaction or bet, for accounting, dispute resolution, and AML compliance purposes.
• Identity Verification Documents: Retained for the period required by applicable AML and KYC regulations from the date the document was submitted.
• Support Communications: Live chat and email records are retained for up to 3 years from the date of the last interaction, to allow for dispute resolution.
• Marketing Consent Records: If you withdraw consent to marketing, your opt-out preference is retained indefinitely to prevent accidental re-subscription.

When data is no longer needed and retention obligations are met, it is securely deleted or anonymised so that it can no longer be linked back to you as an individual.

9 Your Privacy Rights

As an m66 player, you have specific rights over the personal data we hold about you. These rights can be exercised by contacting m66 support at [email protected] with your account details and a clear description of your request.

Where a request relates to data that m66 is legally required to retain — for example, transaction records for AML compliance — we may not be able to fulfil an erasure request in full. In such cases, we will explain what data must be retained and why.

10 Security Measures

m66 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:

• TLS/SSL encryption for all data transmitted between your browser or app and m66's servers.
• Encrypted storage for sensitive data fields including passwords (stored as salted hashes — never in plain text) and identity documents.
• Multi-factor authentication options for player accounts to reduce the risk of unauthorised login.
• Role-based access controls ensuring that internal staff can only access the data necessary for their specific job function.
• Regular security audits and vulnerability assessments of platform infrastructure.
• Automated monitoring for unusual login patterns or suspicious activity, with alerts and account lock procedures where a breach is suspected.

Despite these measures, no online platform can guarantee absolute security. If you believe your m66 account has been accessed without your authorisation, contact support immediately at [email protected] and change your password without delay.

11 Children's Privacy

m66 is strictly an adult platform intended for users aged 18 and above. We do not knowingly collect, store, or process personal data from anyone under the age of 18. If you are a parent or guardian and believe a minor has registered on m66 using false age information, please contact us immediately at [email protected] so we can investigate and close the account.

Any account found to belong to a minor will be closed, all associated funds forfeited, and personal data deleted in line with our data retention policy. m66 uses date-of-birth verification at registration and may request identity documentation to confirm age where there is a reasonable concern.

12 Updates to This Policy

m66 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in data protection best practices, or changes required by applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page.

Where a change is significant — for example, if we start collecting a new category of data or change how existing data is used in a meaningful way — we will make reasonable efforts to notify registered users via email to the address on file. However, it remains your responsibility to review this page periodically.

Continued use of m66 following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you disagree with an update, you should stop using the platform and contact support to close your account.

13 Contact & Data Requests

For any questions about this Privacy Policy, to exercise your data rights, or to raise a concern about how m66 handles your personal information, please get in touch with our support team:

• Email: [email protected] (please include your registered username and a clear description of your request)
• Live Chat: Available in your m66 account dashboard — the fastest way to reach the team for urgent privacy concerns.
• Response Time: Data rights requests are handled within 30 days of receipt. We may request identity verification before processing your request to protect your account.

For concerns related to responsible gaming — such as setting deposit limits, requesting a self-exclusion, or managing your playing time — please visit the Responsible Gaming page where self-service tools are available directly in your account.

For general platform questions, account help, or betting queries, the full FAQ section covers the most common topics for m66 players in Pakistan.