Terms and Conditions
The main terms set out the contractual relationship; this privacy policy specifies how personal data collected under that contract is handled, stored, and protected.
LEGAL REFERENCE
How 99x666 Handles Your Personal Data
At 99x666, we take the privacy of every account holder seriously. This page sets out exactly what personal data we collect when you use our platform in Pakistan...
Data encrypted in transitAccount data stored securelyYour rights, clearly statedPakistan-region policyAccessible any time
What This Privacy Policy Covers at 99x666
This policy applies to all personal information gathered through the 99x666 website, account registration flow, and payment processing steps. When you deposit via JazzCash, Easypaisa, SadaPay, or Raast, your transaction reference and amount are logged for account reconciliation and fraud prevention — we do not store your full payment credentials. Your name, email address, date of birth, and device identifiers are collected
at registration and used solely for account management, identity verification, and communication. We do not sell, rent, or transfer your personal data to third parties for marketing purposes. Data is retained for as long as your account remains active and for the period required by applicable law in supported regions. Where local law permits, you may request a full export or deletion
of your personal data by contacting our support team directly.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
HOW WE EARN YOUR TRUST
Privacy Practices You Can Verify at 99x666
We have built our data handling practices around clear, auditable steps rather than vague promises. Below are the concrete measures we apply to every account on the 99x666 platform in Pakistan and...
TLS Encryption in Transit
All data exchanged between your device and 99x666 servers travels over TLS 1.2 or higher. This covers login sessions, account updates, and every payment step involving JazzCash, Easypaisa, SadaPay, or Raast.
Hashed Password Storage
We never store your password in plain text. Passwords are hashed using a one-way algorithm before they reach our database, meaning even internal staff cannot read your credential — only a reset can change it.
Role-Based Data Access
Access to personal account data inside 99x666 is restricted by staff role. Support agents see only the fields needed to resolve your query; billing teams see payment references, not game history or personal correspondence.
Third-Party Audit Trail
Payment references from JazzCash, Easypaisa, SadaPay, and Raast transactions are logged with timestamps and stored in an append-only audit trail. This record supports dispute resolution and is never used for profiling.
Minimal Data Collection
We collect only what is necessary for account operation and legal compliance. If a data point is not required for identity verification, payment processing, or regulatory reporting, we do not request or retain it.
Data Portability on Request
You may request a structured export of your personal data at any time by contacting support. We prepare this export within the timeframe required by applicable rules in your supported region.
POLICY CONSISTENCY ACROSS PAGES
How This Policy Aligns With Our Other Terms
Our privacy commitments run consistently across every section of the 99x666 platform. The table below shows how this privacy policy connects with related policy areas you may want to read alongside it.
Cookie Policy
Our cookie policy details the trackers placed on your device when you browse 99x666, and this privacy policy governs what happens to any personal data those cookies feed back to us.
Account Verification
Identity checks at registration are governed by both our verification procedures and this policy, which explains what ID data we store, for how long, and who can access it.
Payment Processing
When you transact via JazzCash, Easypaisa, SadaPay, or Raast, payment reference data flows under the rules described in this privacy policy, not the payment-method terms of those providers alone.
Marketing Communications
If you opt into promotional emails or SMS alerts, this policy explains what contact data is used, how consent is recorded, and how you can withdraw that consent at any time.
Account Closure
On account closure, this policy defines the data-retention schedule we follow, which data is deleted immediately, and which must be held for the period required by law in supported regions.
Security Incidents
In the event of a data breach affecting your account, our incident response process and your right to notification are governed by this privacy policy and applicable data-protection rules.
Key Elements of the 99x666 Privacy Framework
Our privacy framework is built around a small number of clear principles that shape how every part of the 99x666 platform handles your information. These six...
Lawful Basis for Processing
Every data-processing activity on 99x666 rests on a defined lawful basis — contractual necessity, legal obligation, or your explicit consent — so you always know why a particular piece of information is being used.
Consent Management
Where processing relies on consent, we record exactly when and how you gave it. You can withdraw consent for non-essential processing at any time through your account settings without affecting core account function.
Data Minimisation
Our account registration form requests only the fields required to open and verify your account. Optional fields are labelled clearly, and declining to complete them does not block access to core platform features.
Retention Schedule
Each category of personal data has a defined retention period tied to operational need or legal requirement. Once that period ends, data is deleted or anonymised according to a documented schedule.
Cross-Border Transfers
Where your data is processed or stored outside Pakistan, we apply contractual safeguards equivalent to local data-protection standards and disclose the transfer in the relevant section of this policy.
Your Rights Mechanism
Your rights — access, correction, deletion, restriction, and portability — are exercised through the support channels listed on this page. We log each request and confirm completion in writing to your registered email.
Common Questions About the 99x666 Privacy Policy
We collect your name, email address, date of birth, and country of residence at registration. During identity verification we may request a government-issued ID image, which is used solely for that check and then securely stored under the retention schedule described in this policy.
When you transact via JazzCash, Easypaisa, SadaPay, or Raast, we log the transaction reference number, amount, and timestamp for account reconciliation. We do not store your mobile wallet PIN, card number, or any credential that could enable a transaction outside our platform.
Yes. You may submit a deletion request through live chat, email, or the on-site contact form. We will action it within the timeframe required in your supported region, except for data we must retain under legal or regulatory obligations that apply to your account.
We share data only with processors directly needed to operate the platform — payment gateways, identity-verification services, and infrastructure providers. We do not sell or transfer your data to advertisers or unrelated third parties, and all processors are bound by data-protection agreements.
Certain records must be retained after closure to meet legal obligations in supported regions. The retention period depends on the data category. Once the applicable period expires, records are deleted or fully anonymised and removed from active systems.
You can correct most account details directly in your profile settings. For fields that require verification — such as your registered name or date of birth — contact support with the relevant documentation and we will process the update, confirming completion by email.
If a breach affects your personal data, we will notify you at your registered email address within the timeframe required by applicable rules in your supported region. The notification will describe what data was involved, what steps we have taken, and what you should do next.