Privacy Policy

MC666 ("MC666", "we", "us", "our") is committed to protecting the personal data of all individuals who access or use the MC666 platform at https://mc666.cam (the "Platform"). This Privacy Policy sets out the basis on which we collect, process, store, share and protect personal data in connection with your use of the Platform.

This Policy applies to all users of the Platform regardless of their location, including users accessing the Platform from Pakistan and other permitted regions. It applies to data collected through the website, support channels, communications and any related services.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.

The following terms carry the meanings set out below throughout this Privacy Policy:

MC666 is the Data Controller for all personal data collected through the Platform. As Data Controller, MC666 is responsible for determining the purposes and means of data processing and for ensuring that all processing activities comply with applicable data protection standards.

For all privacy-related enquiries, data subject requests or complaints regarding the handling of your personal data, you may contact our designated privacy point of contact using the details provided in Section 17 of this Policy.

MC666 engages certain third-party service providers as Data Processors who process personal data on our behalf under contractual data-processing terms. A summary of the categories of Data Processors we engage is provided in Section 8.

MC666 collects the following categories of personal data, depending on your level of interaction with the Platform:

MC666 collects personal data through the following methods:

• Direct submission: Data you provide voluntarily when creating an Account, completing the KYC process, making a deposit or withdrawal, contacting support, submitting feedback, or participating in promotions.
• Automated collection: Technical and usage data collected automatically through server logs, cookies, session tracking technologies and analytics tools when you access the Platform. See Section 9 for cookie-specific details.
• Third-party sources: Data received from identity verification service providers (for KYC purposes), fraud prevention agencies, and analytics partners, where permitted by applicable law and disclosed to you at the point of collection.
• Payment processors: Transaction confirmation and status data from payment intermediaries involved in processing your deposits and withdrawals. MC666 does not receive or store full card numbers or bank account credentials.

MC666 processes personal data on the following legal bases, applied on a context-specific basis:

• Contractual necessity: Processing required to provide the Platform services you have requested, including Account management, KYC verification and transaction processing.
• Legal obligation: Processing required to comply with applicable legal obligations, including Anti-Money Laundering (AML) regulations, age verification requirements and regulatory reporting duties.
• Legitimate interests: Processing necessary for the pursuit of MC666's legitimate business interests — such as fraud detection, security monitoring, Platform improvement and responsible-gambling controls — where such interests are not overridden by your data protection rights.
• Consent: Where we rely on your consent as the legal basis for processing — for example, in connection with non-essential cookies or optional marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

MC666 uses collected personal data for the following purposes:

• Account creation and management: Setting up and maintaining your registered Account, authenticating your identity and managing your Account preferences.
• Identity verification (KYC): Verifying your identity and age to comply with applicable legal and regulatory requirements, including AML controls. This process may involve sharing your documents with a third-party identity verification provider.
• Transaction processing: Facilitating deposits, withdrawals and payment routing in connection with the Operator's cashier services.
• Customer support: Responding to enquiries, resolving complaints, processing refund requests and maintaining support records.
• Fraud prevention and security: Detecting, investigating and preventing fraudulent activity, unauthorised Account access, bonus abuse and other security threats.
• Responsible gambling: Monitoring account activity to identify signs of problem gambling behaviour, applying self-exclusion or deposit limit restrictions where applicable, and fulfilling responsible-gambling obligations.
• Platform improvement: Analysing usage patterns, testing new features, diagnosing technical issues and optimising Platform performance for Pakistani users and others.
• Legal compliance and reporting: Meeting regulatory requirements, responding to lawful requests from competent authorities, and maintaining required records retention schedules.
• Marketing communications (where consent has been given): Sending promotional offers, platform updates and relevant information via email or other channels you have opted into. You may opt out at any time.

MC666 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We share data only in the limited circumstances described below:

• Identity verification providers: Third-party KYC service providers who verify the authenticity of identity documents and perform age and fraud checks on our behalf, under strict data-processing agreements.
• Payment processors: Financial intermediaries involved in processing deposit and withdrawal transactions. These processors receive only the minimum data necessary to complete the transaction and are contractually prohibited from using it for independent purposes.
• Fraud prevention agencies: Where we have reasonable grounds to suspect fraudulent activity, data may be shared with fraud prevention agencies to protect the integrity of the Platform and other users.
• Analytics and performance providers: Anonymised or aggregated usage data may be shared with analytics service providers to help improve Platform performance and user experience. No personally identifiable information is shared in this context.
• Legal and regulatory authorities: Where MC666 is required by law, regulation or court order to disclose personal data to a competent authority, we will do so. Where legally permissible, we will notify you of such disclosure.
• Business succession: In the event of a merger, acquisition or asset transfer, personal data may be transferred to a successor entity under terms that maintain equivalent data protection standards.

MC666 uses cookies and similar tracking technologies to operate the Platform effectively, analyse user behaviour and personalise your experience. The following categories of cookies are used:

You can manage your cookie preferences through your browser settings or the cookie consent interface on the Platform. Please note that disabling strictly necessary cookies will impair the Platform's ability to function correctly.

MC666 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations, whichever is longer.

• Active Account data: Retained for the duration of the Account's active period plus a minimum of five (5) years following Account closure, to meet AML and regulatory record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years from the date of last transaction, in accordance with applicable AML legislation.
• Transaction records: Retained for a minimum of five (5) years from the transaction date for audit and legal compliance purposes.
• Support communications: Retained for three (3) years from the date of the last communication, or longer where the matter involves an ongoing dispute or regulatory inquiry.
• Technical / access logs: Retained for twelve (12) months, unless a longer period is required for security investigation or legal proceedings.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, at which point your data will be suppressed from future marketing lists.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard data destruction methods.

MC666 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and MC666 servers;
• Encryption at rest for all sensitive personal data stored on MC666 infrastructure;
• Role-based access controls ensuring that only authorised personnel can access personal data relevant to their specific function;
• Regular security assessments and penetration testing of Platform infrastructure;
• Two-factor authentication (2FA) for internal systems access by MC666 staff;
• Documented incident response procedures for detecting, containing and reporting data security incidents.

While MC666 takes data security seriously and applies industry-standard practices, no internet transmission or digital storage system can be guaranteed to be completely secure. You acknowledge this inherent risk and agree to use a strong, unique password for your MC666 Account and to notify us immediately if you suspect any security compromise.

MC666 may transfer personal data to third-party service providers or infrastructure providers located outside Pakistan. Where such transfers occur, MC666 ensures that appropriate safeguards are in place to protect your data, including:

• Transfers to jurisdictions that provide an adequate level of data protection as recognised by applicable international standards;
• Standard contractual clauses or equivalent contractual protections with recipient entities where transfers occur to less-protected jurisdictions;
• Binding corporate rules or certification-based frameworks where applicable.

By using the Platform, you acknowledge that your data may be transferred, stored and processed in countries outside Pakistan, including countries whose data protection laws may differ from those in your home jurisdiction.

Subject to applicable law, you have the following rights in relation to your personal data held by MC666. You may exercise these rights by submitting a written request to our support team using the contact details in Section 17.

MC666 will respond to data subject requests within 30 days of receipt. Complex or multiple requests may require up to a further 60-day extension, of which you will be notified. Identity verification may be required before we process a request to safeguard against unauthorised access to another person's data.

The MC666 Platform is strictly intended for adults aged 18 years and over — or the higher minimum age required by the applicable operator licensing jurisdiction. MC666 does not knowingly collect, process or retain personal data from individuals under the required minimum age.

If we become aware that personal data has been collected from a minor without parental consent or in violation of applicable age restrictions, we will take immediate steps to delete that data and close the associated Account. Any funds associated with an under-age Account will be withheld pending investigation in accordance with our Terms and Conditions.

If you believe that MC666 may have inadvertently collected data from a minor, please notify us immediately at the contact details provided in Section 17.

The MC666 Platform may contain references to or descriptions of third-party services, including referenced gambling Operators, payment method providers and sports organisations. These references are provided for informational context only.

MC666 does not control the privacy practices of third-party websites or services and is not responsible for their content, data collection practices or privacy policies. If you navigate to a third-party site, you do so at your own risk and under the terms and privacy policies of that third party.

References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah and other payment providers or sports organisations (including PSL, ICC or PCB) are made for contextual relevance only and do not create a data-processing relationship between MC666 and those entities on your behalf.

MC666 reviews this Privacy Policy periodically to ensure it remains accurate, current and compliant with applicable law and best practice. We reserve the right to amend this Policy at any time.

Material changes to this Policy — for example, changes to the categories of data collected, the purposes for which data is used, or the data rights available to you — will be communicated to registered users via email or a prominent Platform notification, with a minimum of 14 days' notice before the changes take effect where practical.

Non-material updates — such as typographical corrections or clarifications that do not change the substance of the Policy — may be made without individual notification, though the "Last Updated" date at the top of this page will always reflect the most recent revision date.

Your continued use of the Platform after a revised Policy has been published constitutes your acceptance of the updated terms. If you object to any change, you should discontinue use of the Platform and, if applicable, request Account closure and data deletion.

For all privacy-related enquiries, data subject access requests or complaints regarding MC666's handling of your personal data, please use the contact details below:

If you are not satisfied with our response to a privacy complaint, you may have the right to lodge a complaint with a relevant data protection supervisory authority in your jurisdiction.