mm666 Privacy
Policy

mm666 is committed to protecting the privacy of all players who use our platform. We recognise that Pakistani players entrust us with sensitive personal and financial information, and we take that responsibility seriously. This Policy describes our practices with respect to personal data in clear, accessible terms.

mm666 processes personal data only for lawful purposes, in a fair and transparent manner, and in accordance with the principles set out in internationally recognised data protection frameworks including the General Data Protection Regulation (GDPR) and applicable Pakistani data protection legislation. While our primary user base is located in Pakistan, our data processing practices are designed to meet the highest international standards.

If you have any questions about this Privacy Policy or about how mm666 handles your personal data, you may contact our Data Protection team at any time using the contact details provided in Section 16 of this Policy.

For the purposes of this Privacy Policy, the data controller responsible for your personal data is mm666, operating the platform at mm666.today. As data controller, mm666 determines the purposes and means by which your personal data is processed.

mm666 operates under an international gaming licence and is subject to the data protection and anti-money laundering obligations imposed by that licence. Certain data processing activities — in particular KYC and AML procedures — are mandatory conditions of holding that licence and cannot be waived by individual player consent or request.

mm666 collects the following categories of personal data from registered players and platform visitors:

mm666 collects personal data through the following means:

• Direct provision by you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in any promotional activity on the mm666 platform, you directly provide us with personal data;
• Automated technical collection: When you visit and use the mm666 platform, technical data including your IP address, device identifiers, browser type, and session behaviour is automatically collected by our servers and analytics infrastructure;
• Payment processors: When you make a deposit or withdrawal, our payment processing partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard) share transaction confirmation data with mm666 as necessary to complete and record the transaction;
• Identity verification services: During KYC procedures, mm666 may use licensed third-party identity verification services to authenticate documents you submit. These services process your data under strict confidentiality obligations;
• Fraud prevention services: mm666 employs third-party fraud detection and AML screening tools that process account and transaction data to identify suspicious activity patterns.

mm666 processes your personal data on the following legal bases:

• Contractual necessity: The majority of data processing at mm666 is necessary to provide you with the services you have contracted for — specifically, the operation of your account, processing of deposits and withdrawals, and provision of gaming services;
• Legal obligation: mm666 is required by its international gaming licence to conduct KYC and AML procedures. This processing is mandatory and cannot be refused or restricted by the Player;
• Legitimate interests: Certain data processing activities — such as fraud prevention, platform security monitoring, and aggregated analytics — are conducted on the basis of mm666's legitimate interests in operating a secure and compliant gaming platform;
• Consent: Where mm666 processes your data for optional purposes such as marketing communications, we will request your explicit consent. You may withdraw consent for optional processing at any time without affecting the operation of your account.

mm666 uses the personal data we collect for the following purposes:

• Account management: Creating, maintaining, and securing your mm666 player account, including password management, login verification, and account recovery;
• Payment processing: Processing your deposits and withdrawals through your chosen payment method, and reconciling transaction records;
• Identity verification (KYC): Verifying your identity and age in accordance with our licensing obligations and responsible gaming commitments;
• AML compliance: Screening your account and transaction activity against anti-money laundering and counter-terrorism financing requirements as mandated by our gaming licence;
• Customer support: Responding to your queries, complaints, and support requests via live chat and email;
• Responsible gaming: Monitoring your gaming activity to identify potential problem gambling indicators and, where appropriate, prompting you to use available responsible gaming tools;
• Fraud prevention and platform security: Detecting and preventing fraudulent activity, cheating, collusion, and unauthorised account access;
• Platform improvement: Analysing aggregated, anonymised usage data to improve the mm666 platform interface, game lobby, and overall player experience;
• Marketing communications (with consent): Sending you relevant promotional offers and platform updates where you have opted in to receive such communications.

mm666 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following limited circumstances and only to the extent necessary:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard receive the transaction data necessary to process your deposits and withdrawals. These entities operate under their own privacy policies and applicable financial regulations;
• Identity verification providers: Licensed KYC and document verification services receive the identity documents you submit for verification purposes. These providers are contractually bound to process your data only for the specific verification purpose and not to retain it beyond the verification window;
• Fraud prevention and AML screening services: Third-party fraud detection and AML compliance tools receive account and transaction data as necessary to fulfil mm666's compliance obligations;
• Game software providers: Game providers whose titles appear on the mm666 platform may receive anonymised session data (game identifier, wager amount, game outcome) for audit and certification purposes. No personally identifiable information is shared with game providers;
• Regulatory and law enforcement authorities: mm666 will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where we are legally obligated to do so, including in response to lawful requests, court orders, or as required by our gaming licence;
• Professional advisors: Legal, accounting, and auditing professionals who are subject to professional confidentiality obligations may access player data on a strictly need-to-know basis where required for legal, compliance, or financial audit purposes.

As an internationally licensed platform serving Pakistani players, mm666 may process and store personal data on servers located outside of Pakistan. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection, mm666 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses approved by recognised data protection authorities;
• Data processing agreements imposing equivalent data protection standards on data recipients;
• Technical and organisational security measures including end-to-end encryption for data in transit.

By using the mm666 platform, you acknowledge that your personal data may be processed internationally and consent to such transfers taking place subject to the safeguards described above.

mm666 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or our gaming licence obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents its reconstruction. Where data is anonymised rather than deleted, the anonymised records may be retained indefinitely for statistical and analytical purposes.

mm666 applies a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Transport Layer Security: All data transmitted between your device and mm666 servers is encrypted using TLS 1.2 or higher (256-bit encryption), indicated by the padlock icon in your browser address bar;
• Encryption at Rest: Sensitive data stored on mm666 infrastructure — including KYC documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption;
• Password Security: Player passwords are stored as salted cryptographic hashes. mm666 employees cannot access your plaintext password, and neither can external parties;
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. All staff with data access authorisation undergo background screening and regular security training;
• Intrusion Detection: mm666 operates continuous network monitoring and intrusion detection systems to identify and respond to security incidents in real time;
• Penetration Testing: The mm666 platform undergoes regular independent security testing to identify and remediate vulnerabilities before they can be exploited.

The mm666 platform uses cookies and similar tracking technologies to operate core platform functionality and to understand how players interact with the platform. mm666 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable secure login sessions, maintain your account state, and prevent fraudulent session hijacking. These cookies cannot be disabled without compromising the operation of your account;
• Functional Cookies: These cookies remember your preferences — such as language settings, preferred game lobby view, and responsible gaming notification dismissals — to personalise your experience across sessions;
• Analytics Cookies: mm666 uses first-party analytics cookies to understand aggregate platform usage patterns, including which game categories are most popular and where players encounter technical difficulties. This data is used only in anonymised, aggregated form to improve the platform.

mm666 does not use third-party advertising cookies, tracking pixels from external ad networks, or any technology designed to track your browsing activity outside of the mm666 platform. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent platform access.

As a data subject, you have the following rights with respect to the personal data mm666 holds about you. These rights may be exercised by contacting mm666 support at [email protected]:

• Right of Access: You have the right to request a copy of the personal data mm666 holds about you, together with information about how it is being processed;
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by mm666 be corrected or completed;
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to mm666's legal retention obligations under our gaming licence and AML requirements;
• Right to Restriction: You have the right to request that mm666 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing;
• Right to Data Portability: You have the right to receive a copy of the personal data you provided to mm666 in a structured, machine-readable format, and to request that we transmit it to another data controller where technically feasible;
• Right to Object: You have the right to object to the processing of your personal data on the basis of legitimate interests or for direct marketing purposes. Where you object to marketing processing, mm666 will cease that processing immediately;
• Rights Related to Automated Decision-Making: Where mm666 uses automated systems to make decisions that significantly affect you (such as fraud detection algorithms), you have the right to request human review of any such decision.

mm666 will only send you promotional marketing communications if you have explicitly opted in to receive them during account registration or at a later point through your account settings. Marketing communications may include:

• Promotional bonus offers and free bet credits;
• Announcements of new games, features, or platform improvements;
• Invitations to exclusive tournaments or VIP events;
• Seasonal campaigns aligned with Pakistani sporting events such as the PSL.

You may opt out of receiving marketing communications at any time by clicking the "Unsubscribe" link included at the bottom of every marketing email, or by contacting support and requesting removal from marketing lists. Note that opting out of marketing communications does not affect essential transactional communications such as deposit confirmations, withdrawal notifications, security alerts, or account policy updates.

mm666 does not knowingly collect or process personal data from any individual under the age of 21. The mm666 platform is strictly prohibited to persons under 21, and registration requires explicit confirmation that you are 21 or older.

If mm666 becomes aware that an individual under 21 has registered an account or provided personal data to the platform, we will immediately suspend the account, void any wagers or winnings, and delete all personal data associated with that account subject to any retention obligations imposed by our gaming licence.

If you believe that an individual under 21 has accessed the mm666 platform, please contact our support team immediately at [email protected].

mm666 may amend this Privacy Policy from time to time to reflect changes in data protection law, regulatory requirements, or platform functionality. Where amendments materially change how mm666 processes your personal data, you will be notified via the email address registered to your account at least 30 days prior to the effective date of the amendment.

The current version of this Privacy Policy is always available on the mm666 platform at mm666.today/privacy-policy. The effective date of the current version is displayed at the top of this document. Your continued use of the mm666 platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way mm666 processes your personal data, you may contact our Data Protection team through the following channels:

• Email: [email protected] (mark your message "Attn: Data Protection")
• Live Chat: Available 24/7 via the mm666 platform — request escalation to the Data Protection team;
• Response Time: Data protection enquiries are responded to within 72 hours; data rights requests are processed within 30 days.

If you are not satisfied with mm666's response to a data protection complaint, you have the right to lodge a complaint with a recognised data protection supervisory authority in your jurisdiction or in the jurisdiction where mm666 holds its gaming licence.