663bit Privacy Policy

1. Introduction

This Privacy Policy describes how 663bit ("663bit," "we," "us," or "the Platform") collects, uses, stores, and discloses personal information relating to individuals who register accounts, visit the 663bit website at 663bit.org, or otherwise interact with 663bit's services ("Players" or "you").

663bit is committed to handling your personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. This Policy is intended to give you a clear and honest account of our data practices so you can make informed decisions about using the 663bit platform.

This Privacy Policy should be read alongside the 663bit Terms & Conditions and Responsible Gaming Policy, both of which are available on this website. By accessing the 663bit platform or completing the registration process, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

For the purposes of this Privacy Policy, 663bit acts as the data controller in respect of personal data collected through the 663bit platform. As data controller, 663bit determines the purposes and means by which your personal data is processed. All data processing activities carried out by 663bit are conducted in accordance with the principles set out in this Policy.

Where 663bit engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, and game software suppliers — those parties act as data processors and are bound by contractual obligations to handle your data only as directed by 663bit and in compliance with applicable data protection standards.

3. Data We Collect

3.1 Registration Data

When you create a 663bit account, we collect the personal information you provide during the registration process. This typically includes your full name, date of birth, residential address, email address, and a chosen username. This information is required to open your account and to verify that you meet the minimum age requirement of 21 years.

3.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) and anti-money laundering (AML) obligations, 663bit may request copies of official identity documents from you. These may include your national CNIC, passport, or driving licence. We may also request proof of address and, where required by our payment processing obligations, proof of ownership of the payment method you use to deposit funds.

3.3 Financial Data

663bit collects transaction records in connection with your deposits and withdrawals. This includes the payment method used (for example, JazzCash, EasyPaisa, HBL, or UBL), transaction amounts in PKR, transaction timestamps, and unique transaction reference numbers. We do not store full payment account credentials on our servers; sensitive payment data is tokenised and handled by our regulated payment processing partners.

3.4 Gaming Activity Data

663bit records your gaming activity on the platform, including games played, bet amounts, game outcomes, session durations, and bonus usage. This data is used to operate the platform, detect prohibited conduct, resolve disputes, and generate responsible gaming insights that help identify at-risk play patterns.

3.5 Technical and Device Data

When you access the 663bit platform, our systems automatically collect certain technical information, including your IP address, browser type and version, device type and operating system, referring URL, and session timestamps. This data is used for platform security, fraud detection, and aggregate analytics.

3.6 Communications Data

If you contact 663bit support — whether via live chat, email at [email protected], or any other channel — we retain records of those communications, including the content of your messages and the date and time of contact. These records are maintained for quality assurance, dispute resolution, and audit purposes.

Category	Examples	Primary Purpose
Registration Data	Name, DOB, email, address	Account creation, age verification
KYC / Identity Data	CNIC, passport, proof of address	AML compliance, fraud prevention
Financial Data	PKR transaction records, payment method	Deposit & withdrawal processing
Gaming Activity	Bets, outcomes, session length	Platform operation, dispute resolution
Technical Data	IP address, browser, device info	Security, fraud detection, analytics
Communications	Support chat logs, emails	Quality assurance, audit trail

4. How We Collect Your Data

663bit collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion.
• Automatically — when you browse or use the 663bit platform, our servers and analytics tools collect technical and behavioural data such as IP addresses, session data, and click-path information.
• From third parties — 663bit may receive identity verification results from KYC service providers, fraud signals from payment processors, and geolocation data from IP lookup services. All third-party data sources used by 663bit are contractually bound to handle data in a lawful and secure manner.
• Via cookies and similar technologies — as described in Section 8 below, 663bit uses cookies and session tokens to maintain your login state and improve your experience on the platform.

5. Purpose & Legal Basis for Processing

663bit processes your personal data only where there is a legitimate basis for doing so. The following table outlines the primary purposes for which we process your data and the corresponding legal basis in each case:

Purpose	Legal Basis
Account registration and management	Performance of contract
Processing deposits and withdrawals in PKR	Performance of contract
Identity verification and KYC compliance	Legal obligation
Anti-money laundering monitoring	Legal obligation
Fraud detection and platform security	Legitimate interest
Responsible gaming monitoring and interventions	Legitimate interest / Legal obligation
Customer support and dispute resolution	Performance of contract / Legitimate interest
Platform performance analytics (aggregate)	Legitimate interest
Promotional communications (where consented)	Consent

Where 663bit relies on your consent as the legal basis for processing — for example, in sending you promotional emails about bonuses and new games — you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting 663bit support.

6. Sharing Your Personal Data

6.1 Authorised Third-Party Processors

663bit shares your personal data with carefully selected third-party service providers who assist us in operating the platform. These include payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and cryptocurrency gateway providers), identity verification and KYC service providers, game software licensors, cloud hosting and infrastructure providers, and customer support tooling providers. All such processors are subject to contractual data processing agreements with 663bit and are permitted to use your data only for the specific purposes for which they were engaged.

6.2 Regulatory and Law Enforcement Disclosure

663bit may be required by applicable law, court order, or regulatory directive to disclose personal data to government authorities, financial intelligence units, or law enforcement agencies. In such cases, 663bit will disclose only the minimum data necessary to satisfy the legal obligation. Where legally permissible, 663bit will notify the affected Player of such disclosure.

6.3 No Sale of Personal Data

663bit does not sell, rent, lease, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. Any data shared with third parties is limited to what is necessary for the operational, legal, or compliance purpose described in this Policy.

6.4 Business Transfers

In the event that 663bit undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer via a prominent notice on the 663bit platform prior to the transfer taking effect, and the successor entity will be required to honour the commitments made in this Privacy Policy.

7. Data Retention

663bit retains your personal data for as long as is necessary to fulfil the purposes set out in this Policy, unless a longer retention period is required by applicable law or regulation.

• Account and registration data is retained for the duration of your active account plus a minimum period following account closure, as required by our AML and KYC obligations.
• Financial transaction records (deposits, withdrawals, bet history) are retained for a minimum period as required by applicable financial record-keeping obligations. These records form part of our AML audit trail and cannot be deleted on request.
• KYC identity documents are retained in accordance with applicable AML regulations. Copies of CNIC and passport documents submitted to 663bit are stored securely for the duration required by law following the date of submission or account closure, whichever is later.
• Support communications are retained for a defined period following the closure of the relevant support case for quality assurance and dispute resolution purposes.
• Technical and device data (logs, IP records) is retained for a shorter period sufficient for security monitoring and fraud investigation purposes.

Where personal data is no longer required for any legitimate purpose, 663bit will securely delete or anonymise it in a manner that prevents recovery or reconstruction.

8. Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device by the 663bit platform when you visit the site. They are widely used to make websites function correctly, improve user experience, and provide basic analytics. 663bit uses only first-party cookies and does not deploy cross-site tracking technologies.

8.2 Types of Cookies Used by 663bit

• Strictly Necessary Cookies: These are essential for the 663bit platform to function. They maintain your logged-in session, remember your security settings, and ensure page-to-page consistency during your visit. You cannot opt out of strictly necessary cookies while using the platform.
• Functional Cookies: These remember your preferences — such as your preferred language, display settings, and notification preferences — so that you do not need to re-configure them on each visit.
• Analytics Cookies: 663bit uses aggregated, anonymised analytics data to understand how Players navigate the platform, which features are most used, and where technical issues may occur. This data is used solely to improve the platform and is never linked back to individual Player identities.

8.3 Managing Cookies

You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will affect the functionality of the 663bit platform and may prevent you from logging in or accessing certain features. Disabling functional or analytics cookies will not prevent you from using the platform but may reduce the quality of your experience.

9. Security Measures

663bit takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser or mobile device and the 663bit platform is encrypted using industry-standard SSL/TLS protocols.
• Data Tokenisation: Sensitive payment credentials are tokenised at the point of entry and are never stored in plain text. Our payment processing partners manage payment data under their own PCI-compliant security environments.
• Access Controls: Access to personal data within 663bit's internal systems is restricted on a strict need-to-know basis. All staff with access to Player data are subject to confidentiality obligations.
• Two-Factor Authentication: 663bit offers two-factor authentication (2FA) to all registered Players as an additional safeguard against unauthorised account access. We strongly recommend that all Players enable 2FA.
• Incident Response: In the event of a data breach that poses a risk to Players' rights and freedoms, 663bit will take immediate remedial action and will notify affected Players as soon as practicable.

While 663bit takes all reasonable precautions, no data transmission over the internet or storage system can be guaranteed to be 100% secure. You use the 663bit platform and transmit personal data at your own risk. If you believe your account security has been compromised, please contact 663bit support immediately via live chat.

10. Your Data Rights

As a 663bit Player, you hold a number of rights in relation to the personal data we hold about you. These rights are set out below. To exercise any of these rights, please contact 663bit support via live chat or by writing to [email protected] (email address displayed as plain text only — not a clickable link).

• Right of Access: You have the right to request a copy of the personal data that 663bit holds about you. 663bit will provide this information within a reasonable timeframe following verification of your identity.
• Right to Rectification: If you believe that personal data held by 663bit is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections — such as updating your address — can often be made directly within your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you believe the data is being processed unlawfully. Please note that certain data categories are subject to mandatory retention obligations and cannot be deleted (see Section 7).
• Right to Restriction: You may request that 663bit restrict the processing of your data in certain circumstances — for example, while a dispute regarding the accuracy of the data is pending resolution.
• Right to Object: Where 663bit processes your personal data on the basis of legitimate interest, you have the right to object to that processing. 663bit will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — for example, for promotional communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

663bit will respond to data rights requests within a reasonable timeframe. In order to protect the security of Player data, 663bit may require identity verification before processing a data rights request. There is no fee for making a rights request in ordinary circumstances.

11. Children's Privacy

The 663bit platform is strictly intended for adults aged 21 and above. 663bit does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account or use the 663bit platform in any capacity.

If 663bit becomes aware that personal data has been collected from an individual who is under the minimum age of 21, that data will be deleted without delay and the associated account will be permanently closed. Any funds held within such an account will be returned net of any bonuses claimed, subject to verification.

If you believe that a minor may be using a 663bit account — including your own account — please contact 663bit support immediately via live chat so that appropriate action can be taken.

12. Changes to This Privacy Policy

663bit reserves the right to update or amend this Privacy Policy at any time. Any material changes to the Policy will be communicated to registered Players via the email address associated with their account or via a prominent notice displayed on the 663bit platform prior to the changes taking effect.

The "Last Updated" date at the top of this page will be revised each time the Policy is amended. Your continued use of the 663bit platform following notification of a Policy change constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you should cease using the platform and may request account closure.

663bit encourages all Players to review this Privacy Policy periodically to stay informed about how their personal data is being handled. The most current version of the Policy will always be accessible at 663bit.org/privacy-policy.

13. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which 663bit handles your personal data, please contact us. Our preferred channel for all privacy-related queries is our 24/7 live chat support, available directly on the 663bit platform.

You may also reach our support team by email at: [email protected] — please note this email address is displayed as plain text only and is not a clickable link. When writing to us regarding a privacy matter, please include your registered username and a clear description of your query so that we can respond efficiently.

663bit aims to acknowledge all privacy-related correspondence within 48 hours and to resolve complaints or data rights requests within 14 business days of receipt. Where a request is particularly complex, we will notify you of any extension to this timeframe and the reasons for it.