1
Who We Are
bj666 is an online gaming and sports betting platform operating at bj666.world. We offer real-money casino games, live dealer tables, fishing games and sports betting markets exclusively in Pakistani Rupees (PKR) to players across Pakistan. References to "bj666", "we", "us" or "our" throughout this Privacy Policy mean the bj666 platform and its operating entity.
For the purpose of data protection, bj666 acts as the data controller — meaning we determine the purposes and means of processing your personal data. Where we engage third-party processors such as payment providers or identity verification services, those parties act as data processors under our instruction and are bound by their own data protection obligations.
This Privacy Policy applies to: all registered bj666 players in Pakistan, visitors to bj666.world who have not yet registered, and any individual whose personal data bj666 holds in connection with a support, verification or fraud investigation matter.
2
Personal Data We Collect
bj666 only collects personal data that is genuinely necessary. We do not collect information speculatively or for purposes we cannot clearly justify. The categories of data we collect and when they are collected are set out below.
| Data Category |
Examples |
When Collected |
| Registration Data |
Name, date of birth, mobile number, email, address |
During account registration |
| Identity Verification |
CNIC copy, utility bill, selfie with document |
Before first withdrawal (KYC) |
| Payment Records |
Transaction amounts, dates, wallet IDs, bank references |
Each deposit or withdrawal |
| Gaming Activity |
Bets placed, games played, session durations, win/loss records |
Continuous during account use |
| Device & Technical Data |
IP address, device type, browser version, operating system |
Each platform session |
| Communications |
Support chat transcripts, emails, complaint records |
When you contact bj666 support |
| Responsible Gaming Data |
Deposit limits set, self-exclusion records, cool-off periods |
When tools are activated |
bj666 does not collect sensitive categories of personal data such as health records, political opinions, religious beliefs or biometric data unless a specific regulatory requirement mandates it in a particular circumstance — in which case this policy will be updated to reflect that change.
3
How We Use Your Personal Data
Every use of your personal data at bj666 has a specific, documented purpose. We do not process your data for any purpose that is not covered by this policy or communicated to you at the point of collection.
Account Operation
- Creating and managing your bj666 account.
- Processing deposits and withdrawals in PKR.
- Verifying your identity before payout (KYC).
- Maintaining your gaming history and balance records.
- Delivering bonuses and promotional credits.
Safety & Compliance
- Detecting and preventing fraudulent transactions.
- Identifying and blocking multi-account abuse.
- Age verification to ensure players are 18+.
- Anti-money laundering monitoring as required.
- Maintaining records for legal or regulatory requests.
Customer Support
- Responding to your support queries via chat or email.
- Investigating disputed transactions or game outcomes.
- Processing formal complaints through our review process.
- Training support staff using anonymised interaction data.
Responsible Gaming
- Monitoring gaming patterns for signs of problem gambling.
- Enforcing deposit limits and self-exclusion requests.
- Sending welfare check communications to at-risk players.
- Honouring self-exclusion periods across re-registration attempts.
Where bj666 wishes to use your data for a purpose not listed above — for example a new type of marketing communication or a research study — we will contact you separately to explain the new purpose and ask for your consent before proceeding.
4
Legal Basis for Processing
bj666 processes your personal data under one or more of the following legal bases depending on the specific processing activity. We do not process data without a legitimate legal basis.
| Processing Activity |
Legal Basis |
| Creating and operating your account | Contract performance |
| Processing deposits and withdrawals | Contract performance |
| Identity verification (KYC) | Legal obligation |
| Anti-money laundering monitoring | Legal obligation |
| Fraud detection and prevention | Legitimate interest |
| Responsible gaming monitoring | Legitimate interest / legal obligation |
| Technical platform analytics | Legitimate interest |
| Promotional emails (opted-in players) | Consent |
Where processing is based on your consent — for example opting into promotional email communications — you may withdraw that consent at any time by updating your account preferences or contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
5
Data Sharing & Third Parties
bj666 does not sell, rent or trade your personal data. We share your data only in specific, justified circumstances and always with appropriate data protection safeguards in place.
Circumstances in Which We Share Your Data
- Payment processors — Easypaisa, JazzCash, NayaPay, SadaPay, bank partners and card networks receive transaction data necessary to process your deposits and withdrawals. They receive only what is required for the transaction.
- Identity verification providers — KYC/AML service providers receive identity documents you submit for verification purposes. These providers are vetted and contractually bound to protect your data.
- Game software providers — Where bj666 uses third-party game software, anonymised session data (bet amounts, outcomes) may be shared for game integrity auditing. Personal identifiers are not shared with game providers.
- Legal and regulatory authorities — bj666 will disclose data to law enforcement or regulatory bodies where required by applicable law, court order or legitimate regulatory request. We will not disclose more than is legally required.
- Business transfers — In the event of a merger, acquisition or asset sale, player data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights will be preserved.
No foreign data transfers without protection: Where data is processed by a third party located outside Pakistan, bj666 ensures contractual data protection obligations at least equivalent to those in this policy are in place before any transfer occurs.
6
Payment Data & Financial Information
bj666 handles payment data with particular care given its sensitivity. All financial transactions on bj666 are denominated in Pakistani Rupees (PKR). Payment methods available on bj666 — Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT and Visa/Mastercard — each have their own privacy and security frameworks that apply to the portions of the transaction they process.
How bj666 Handles Payment Information
- bj666 stores transaction records (amounts, dates, reference numbers, wallet IDs) but does not store full card numbers, CVV codes or mobile banking PINs.
- Payment processing for card transactions uses tokenisation — your actual card number is replaced with a secure token that cannot be used outside the specific processing relationship.
- Easypaisa and JazzCash transaction references are stored to enable dispute resolution but the full wallet credentials are processed by the respective payment providers, not retained by bj666.
- All payment data in transit uses TLS 1.3 encryption minimum.
- Payment records are retained for the period required by financial regulations applicable to the transaction (typically seven years).
If you believe an unauthorised transaction has occurred on your bj666 account, contact support immediately via live chat. The support team will initiate a transaction investigation and work with the relevant payment provider to establish the facts and, where appropriate, initiate a reversal or adjustment.
7
Cookies & Tracking Technologies
bj666 uses cookies and similar tracking technologies on the platform. Cookies are small text files stored on your device that help bj666 provide a functional, secure and personalised experience. You can manage cookie preferences through your browser settings.
| Cookie Type |
Purpose |
Can Be Disabled? |
| Strictly Necessary |
Session management, login state, security tokens, fraud detection |
No — platform will not function without these |
| Functional |
Remembering your language, game preferences and display settings |
Yes — disabling reduces personalisation |
| Analytics |
Understanding how players navigate the platform, identifying usability issues |
Yes — does not affect functionality |
bj666 does not use third-party advertising cookies or sell cookie data to advertising networks. Analytics cookies used by bj666 are configured to anonymise IP addresses and are not linked to individual player identities in reporting outputs.
To manage cookies, use your browser's settings menu. Most major browsers — Chrome, Firefox, Safari, Samsung Internet — provide granular cookie controls. Blocking strictly necessary cookies will prevent the bj666 platform from functioning correctly and you will not be able to log in or place bets.
8
Data Retention Periods
bj666 does not retain personal data indefinitely. Each category of data has a defined retention period based on the purpose for which it was collected and any applicable legal requirements. When the retention period expires, data is securely deleted or anonymised.
| Data Category |
Retention Period |
Reason |
| Account registration data | Account lifetime + 3 years | Regulatory and dispute resolution requirements |
| Identity verification documents | 5 years from submission | AML compliance obligations |
| Payment transaction records | 7 years | Financial record-keeping requirements |
| Gaming activity logs | Account lifetime + 3 years | Dispute resolution and integrity auditing |
| Support communications | 2 years from interaction | Quality assurance and dispute reference |
| Self-exclusion records | Permanent | To prevent re-registration by excluded players |
Where you request deletion of your account and personal data (see Section 10 below), bj666 will delete or anonymise data that is not subject to a legal retention obligation. Data covered by financial record-keeping or AML obligations will be retained for the required period even after account deletion, but will not be used for any purpose other than compliance.
9
Security Measures
Protecting your personal data is something bj666 invests in consistently and takes seriously. The following security measures are maintained across the platform at all times.
256-bit SSL Encryption
All data transmitted between your device and bj666 servers is encrypted using TLS 1.3. This protects your personal and payment data in transit.
Encrypted Data at Rest
Personal data stored in bj666 databases is encrypted at rest. Database access requires multi-factor authentication and is restricted to authorised personnel.
Intrusion Detection
bj666 infrastructure is monitored continuously for suspicious access patterns, unauthorised login attempts and anomalous data activity.
Staff Access Controls
Only authorised bj666 staff with a specific operational need can access personal player data. All access is logged and reviewed regularly.
Breach Response Plan
bj666 maintains a documented data breach response plan. Where a breach affecting player data occurs, affected players will be notified promptly with clear information about what happened and what to do.
Regular Security Reviews
The bj666 technical team conducts regular security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.
Your role in security: Use a strong, unique password for your bj666 account. Do not share your login credentials with anyone. bj666 support will never ask for your password. If you suspect your account has been compromised, change your password immediately and contact support.
10
Your Data Rights
You have a number of rights regarding your personal data held by bj666. These are genuine rights that bj666 will action upon valid request — they are not just compliance language. To exercise any of these rights, contact bj666 support via live chat or email at support@bj666.world.
You can request a copy of all personal data bj666 holds about you at any time. This is called a Subject Access Request. bj666 will respond within 30 days and provide the data in a readable format. There is no charge for a Subject Access Request unless it is manifestly unfounded or excessive, in which case a reasonable fee may apply. The data provided will cover registration information, KYC documents held, transaction history, gaming records and support communications.
If any personal data bj666 holds about you is inaccurate or incomplete, you have the right to request a correction. For example, if your name is misspelled in our records or your address has changed, contact support with the correct information and supporting evidence. bj666 will update the record within a reasonable timeframe and confirm the correction to you.
You can request that bj666 delete your personal data. bj666 will honour this request for data that is not subject to a legal retention obligation. Data covered by financial regulations (payment records), AML obligations (KYC documents) or ongoing legal proceedings cannot be deleted ahead of the required retention period. Where partial deletion is possible, bj666 will delete what it can and explain why specific records must be retained.
In certain circumstances — for example where you have contested the accuracy of your data and bj666 is verifying the position — you can request that processing of your data be restricted while the matter is resolved. During a restriction period, bj666 will only process the restricted data for the specific purpose of resolving the dispute that triggered the restriction.
Where bj666 processes your data on the basis of contract performance or consent, you can request that the data be provided to you in a structured, machine-readable format (for example CSV or JSON). This right allows you to take your data to another service provider if you wish. Contact support to make a portability request and specify which categories of data you require.
bj666 will respond to all data rights requests within 30 calendar days. Where a request is complex or high in volume, a 30-day extension may be required — in that case bj666 will inform you of the extension within the initial 30-day window.
11
Children's Privacy
bj666 is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. Age verification is a mandatory step in the registration process and again before processing the first withdrawal.
If you believe a minor has registered on bj666: Please contact us immediately at support@bj666.world. Upon receiving a verified report, bj666 will suspend the account, refund any real-money deposits, delete the minor's personal data from our systems and take steps to prevent re-registration from the same device.
bj666 uses technical and procedural controls to prevent underage access. These include date of birth verification at registration, CNIC verification (which establishes age for adult document holders), device fingerprinting to detect attempts to bypass age controls, and monitoring of accounts for behavioural signals inconsistent with adult gaming patterns.
12
Policy Updates & Amendments
bj666 reviews this Privacy Policy regularly and will update it when our data processing practices change, when we add new payment methods or game providers, or when applicable regulations require changes. The "Last Updated" date at the top of this page reflects the most recent revision.
Where changes to this policy are material — meaning they meaningfully affect your privacy rights or how your data is processed — bj666 will notify registered players by email at least 7 days before the changes take effect. Where changes are minor corrections or clarifications, they may take effect immediately.
Continued use of bj666 after the effective date of a policy update constitutes acknowledgement of the updated policy. If you disagree with any updated provisions, you may close your account before the changes take effect — your real-money balance will be returned to you in accordance with the Terms and Conditions.
13
Contact & Privacy Complaints
If you have any questions about this Privacy Policy, want to exercise a data right, or wish to raise a privacy concern, the bj666 team is ready to help. We take privacy complaints seriously and will investigate every concern raised.
Live Chat Support
Available 24/7. The fastest way to raise a privacy question or exercise a data right — our support team can initiate the process immediately.
Email: support@bj666.world
For Subject Access Requests, deletion requests, formal privacy complaints and any query requiring a written response or record.
bj666 aims to resolve all privacy queries within 5 working days. Formal Subject Access Requests and data deletion requests will be acknowledged within 3 working days and completed within 30 days. If you are not satisfied with bj666's response to a privacy complaint, you have the right to escalate the matter through the formal complaints process described in the Terms and Conditions.
Related Documents
This Privacy Policy works alongside the bj666 Terms and Conditions and Responsible Gaming page. Together these documents form the complete framework for your relationship with bj666. Reading all three gives you a full picture of your rights and obligations as a bj666 player in Pakistan.
