663 Bit Privacy Policy – How We Protect Your Data in Pakistan

663 Bit operates the online gaming platform accessible at 663bit.app. We are the data controller for all personal information collected through this website and its associated services. When this Privacy Policy refers to "663 Bit", "we", "us" or "our", it means the platform and its operating entity responsible for your data.

This Privacy Policy applies to all users of the 663 Bit platform — registered account holders, visitors who browse the website without registering, and anyone who contacts us through our support channels. It covers all data collection points across the platform including registration forms, deposit and withdrawal flows, betting interfaces, VIP programme participation and customer support interactions.

For questions about this policy or to make a data-related request, contact us at support@663bit.app. Our support team is available 24 hours a day, 7 days a week, and privacy requests are handled by a dedicated team member within 72 hours.

663 Bit collects personal data through several channels — registration, account usage, payment processing, customer support and standard website interaction. The categories of data we collect are described below.

Every use of your data by 663 Bit has a specific, documented purpose. We do not use your data for undisclosed purposes and we do not engage in data mining or profiling for commercial sale. The purposes for which we use your personal data are:

• Account operation: Creating and maintaining your 663 Bit account, processing deposits and withdrawals, crediting VIP rewards and maintaining your transaction history.
• Identity verification (KYC): Confirming your age, identity and payment method ownership as required by our responsible gaming obligations and anti-money laundering compliance.
• Customer support: Responding to your queries, resolving disputes, investigating reported technical issues and processing responsible gaming requests.
• Security and fraud prevention: Detecting unusual account activity, verifying that no duplicate accounts exist and identifying patterns consistent with fraud, money laundering or bonus abuse.
• Responsible gaming: Monitoring gaming patterns to identify players who may be showing signs of problem gambling and offering appropriate support, tools or outreach.
• Platform improvement: Using aggregated, anonymised usage data to understand how players use the platform and to make improvements to the user experience.
• Legal and regulatory compliance: Maintaining records as required by applicable law and responding to lawful requests from regulatory or law enforcement bodies.
• Marketing communications: Sending promotional emails, SMS or in-app messages about bonuses, VIP events and platform updates — only to players who have consented and only through channels they have not opted out of.

663 Bit processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the player agreement — operating your account, processing payments and delivering the services you registered for.
• Legal obligation: Processing required to comply with applicable laws — including identity verification, anti-money laundering requirements and retention of financial records.
• Legitimate interests: Processing that serves 663 Bit's legitimate operational interests — fraud detection, platform security, abuse prevention — where those interests are not overridden by your rights.
• Consent: Processing for marketing communications and optional data uses where you have provided explicit, informed consent. You can withdraw consent at any time without affecting the lawfulness of prior processing.

663 Bit does not sell your personal data to any third party. We share data only in the specific and limited circumstances described below:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer IBFT providers and Visa/Mastercard acquiring banks receive the minimum data required to process your transaction. Each processor is bound by data processing agreements and maintains their own security certifications.
• Identity verification providers: Where KYC verification is required, your identity documents may be processed by a third-party verification service operating under a strict data processing agreement with 663 Bit. Verified results are returned to us; document images are not retained beyond the verification process.
• Regulatory and law enforcement bodies: 663 Bit will disclose personal data to relevant authorities when legally required to do so — for example, in response to a valid court order or a request from a financial regulatory body. We will not voluntarily disclose data beyond what is legally required.
• Platform service providers: Certain technical services that support platform operation — such as cloud infrastructure providers and analytics tools — may process anonymised or pseudonymised data as part of providing those services. These providers operate under data processing agreements and are not permitted to use your data for their own purposes.

No marketing companies, data brokers, insurance companies or other commercial entities have access to your personal data from 663 Bit. We have never monetised player data and have no plans to do so.

663 Bit uses cookies and similar tracking technologies to make the platform work properly, remember your session, detect fraud and understand how players use the site. The types of cookies we use are described below.

We do not use third-party advertising cookies or tracking pixels that allow other companies to follow your activity across websites. Our analytics tools operate on data that is anonymised before processing — individual player behaviour is not shared with analytics providers.

663 Bit retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. Our retention periods are as follows:

• Active account data: Retained for the duration of your account registration and for a period of 5 years following account closure, in compliance with financial record-keeping requirements.
• Transaction records: Deposit, withdrawal and betting records are retained for 7 years following the transaction date, as required by financial compliance obligations.
• KYC documents: Identity verification documents are retained for the duration of account activity and for 5 years after account closure. Where legally required, this period may be extended.
• Customer support records: Support chat and email records are retained for 3 years after the last interaction to allow for dispute resolution and regulatory review.
• Marketing consent records: Records of your consent to or withdrawal from marketing communications are retained indefinitely to demonstrate compliance with your expressed preferences.
• Technical and session logs: Server logs and session data are retained for 90 days for security monitoring and then deleted.

When data is no longer required and its retention period has passed, 663 Bit securely deletes or anonymises it. Anonymised data — from which you cannot be identified — may be retained indefinitely for statistical analysis and platform improvement purposes.

663 Bit implements a layered approach to data security. No system can guarantee absolute protection, but we take every reasonable technical and organisational step to keep your data safe.

• Transport security: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to every page load, login, transaction and support interaction on the 663 Bit platform.
• Storage encryption: Sensitive personal data — including identity documents and financial information — is encrypted at rest in our database infrastructure.
• Access controls: Internal access to personal data is restricted on a need-to-know basis. Staff who access player data must have a documented operational justification, and all access is logged and auditable.
• Security monitoring: Continuous monitoring of platform infrastructure for unauthorised access attempts, anomalous behaviour and technical vulnerabilities. Our security team responds to detected threats around the clock.
• Password security: Account passwords are stored as salted hashes — not in readable form. Even our own staff cannot see your password. If you forget your password, it must be reset rather than retrieved.
• Third-party security standards: All third-party partners who process your data are required to demonstrate equivalent or stronger security standards as a condition of our data processing agreements with them.

As a player on the 663 Bit platform, you have specific rights over your personal data. These rights can be exercised at any time by contacting our support team. We respond to all rights requests within 72 hours.

663 Bit may send you promotional messages about bonuses, VIP events, new game launches and platform updates via email or SMS. These communications are sent only if you have opted in to receive them during registration or subsequently through your account settings.

You can opt out of marketing communications at any time in the following ways:

• Click the unsubscribe link in any marketing email from 663 Bit — this takes effect within 24 hours.
• Update your communication preferences directly in the notifications section of your account settings.
• Contact our support team via live chat or email and request removal from marketing communications.

Opting out of marketing has no effect on your account, your VIP status or your access to any game or service on 663 Bit. You will continue to receive essential account communications — such as withdrawal confirmations, deposit receipts and security alerts — regardless of your marketing preference, as these are required for account operation.

The 663 Bit platform is strictly intended for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Age verification is a mandatory part of the account registration process and is repeated as part of KYC verification before withdrawals are processed.

If we become aware that an account is held by a person under 18, that account will be immediately suspended, all outstanding balances assessed and any winnings forfeited in accordance with our Terms and Conditions. If you believe a minor has registered on 663 Bit, please contact our support team immediately.

We strongly encourage parents and guardians to use parental control tools and monitoring software to prevent underage access to online gaming platforms. For more information on responsible gaming tools available on 663 Bit, visit our Responsible Gaming page.

663 Bit may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or platform services. The "Last Updated" date at the top of this page shows when the most recent revision was made.

When material changes are made — changes that significantly affect how we collect, use or share your data — we will notify registered players via their registered email address at least 14 days before the changes take effect. Minor updates, such as formatting corrections or clarifications that do not change the substance of any section, may be made without proactive notification.

Continued use of the 663 Bit platform following the effective date of any update constitutes acceptance of the revised policy. The current version is always available at 663bit.app/privacy-policy.

For any privacy-related enquiry, data rights request or concern about how 663 Bit handles your personal information, please contact us through one of the following channels. All privacy requests are acknowledged within 24 hours and resolved within 72 hours where possible.

• Live Chat: Available 24/7 directly within the 663 Bit platform — the fastest way to reach us for urgent matters.
• Email: support@663bit.app — use this for formal data access, correction or deletion requests where you need a written record of the exchange.
• FAQ: Visit /faq for answers to common questions about account data, privacy settings and responsible gaming tools.

When submitting a data rights request, please include your registered account email address and a brief description of the request so we can locate your data quickly. For identity-sensitive requests such as data deletion or access, we may need to verify your identity before proceeding — this is to protect you, not to obstruct your rights.