Privacy Policy – How m66 Protects Your Data in Pakistan

1 Who We Are

m66 is an online gaming platform offering sports betting, live casino, slot games and related entertainment products to adult players. This Privacy Policy explains how m66 ("we," "us," "the Platform") handles personal data collected from players ("you") who register and use the platform.

This policy applies to all interactions with m66 — through the website, the mobile app, customer support communications and any other channel through which you provide information to us. By creating an account or continuing to use m66 after any update to this policy, you confirm that you have read and accepted the practices described here.

For any privacy-related questions, you can reach our support team at [email protected] at any time.

2 Data We Collect

m66 collects personal data in several ways — directly from you when you register or use the platform, automatically when you interact with the platform, and occasionally from third parties such as payment processors during transaction verification.

m66 does not collect sensitive categories of personal data such as biometric data, health information, religious beliefs or political opinions. We collect only what is needed to operate the platform and provide a reliable, secure experience for Pakistani players.

3 How We Use Your Data

The data collected by m66 is used for specific, legitimate purposes related to operating the platform and serving Pakistani players. The main uses are:

• Account management: Creating and maintaining your m66 account, verifying your identity and age (18+ requirement), and enabling you to log in securely.
• Processing transactions: Facilitating PKR deposits and withdrawals through JazzCash, Easypaisa, Raast, bank transfer and other supported payment methods.
• Platform delivery: Providing you with access to sports betting markets (including cricket and PSL), live casino, slot games and other platform features.
• Fraud prevention and security: Detecting and preventing fraudulent activity, multi-accounting, money laundering and other prohibited conduct described in the Terms and Conditions.
• Customer support: Responding to your queries, complaints and account-related requests efficiently.
• Platform improvement: Analysing usage data to improve the user experience, identify technical issues and develop new features that serve Pakistani players better.
• Communications: Sending you account-related notifications such as deposit confirmations, withdrawal updates, password reset emails and important policy changes. We do not send unsolicited marketing emails without your consent.
• Responsible Gaming: Monitoring account activity to support responsible gaming tools such as deposit limits, loss limits and self-exclusion as described on our Responsible Gaming page.

4 Payment Data & PKR Transactions

All financial transactions on m66 are denominated in PKR. When you make a deposit or request a withdrawal using JazzCash, Easypaisa, Raast, bank transfer, debit card or another supported payment method, certain transaction data is exchanged between m66 and your payment provider to complete the transfer.

Important points about payment data:

• m66 does not store full card numbers or mobile wallet PINs on its systems. Payment credentials are handled directly by the respective payment providers using their own secure infrastructure.
• Transaction reference numbers, amounts in PKR, payment method type and timestamps are stored by m66 for account history, dispute resolution and record-keeping purposes.
• Payment data may be reviewed by m66's fraud and compliance team as part of routine transaction monitoring to protect both the platform and its players.
• In cases where large transactions or unusual activity triggers a review, m66 may request source-of-funds documentation. This is standard practice for financial platforms and is done to protect all users.

5 Sharing Your Data

m66 does not sell, rent or trade your personal data. Data is shared with third parties only in the following limited and necessary circumstances:

• Payment processors: Transaction data is shared with JazzCash, Easypaisa, Raast, banking partners and card processors as required to complete your PKR deposits and withdrawals.
• Identity verification providers: When age or identity verification is required, your identification documents may be processed by a third-party verification service operating under strict data handling obligations.
• Platform infrastructure providers: m66 uses hosting, security and analytics services to operate the platform. These providers access data only to deliver their services to m66 and are bound by confidentiality agreements.
• Legal and regulatory obligations: m66 may disclose data if required to do so by a valid legal process, court order or applicable law. We will only disclose what is legally required and will inform you where permitted to do so.
• Fraud prevention networks: Where fraudulent activity is detected, relevant data may be shared with fraud prevention organisations to protect the wider player community and the integrity of the platform.

In all cases of data sharing, m66 applies appropriate safeguards and shares only the minimum data necessary for the stated purpose. We do not share your data with advertisers, data brokers or social media platforms.

6 Cookies & Tracking Technologies

m66 uses cookies and similar technologies to make the platform work properly, remember your preferences and understand how players use the site so we can keep improving it. Here is a breakdown of the types of cookies used:

• Essential cookies: These are required for the platform to function. They keep you logged in during your session, maintain your account state and enable secure transactions. These cannot be disabled without breaking core functionality.
• Functional cookies: These remember your preferences such as language settings and display options, so you do not have to reconfigure them each time you visit.
• Analytics cookies: These collect anonymised data about how you navigate m66 — which pages you visit, how long you spend on different sections, and where you encounter issues. This data helps us identify problems and improve the experience for Pakistani players.
• Security cookies: These help detect suspicious login attempts, protect against cross-site request forgery (CSRF) attacks and support the overall security of your account.

m66 does not use cookies to track your activity across other websites or to serve you personalised advertisements outside the platform. You can manage cookie preferences through your browser settings, though disabling essential cookies will affect your ability to use the platform.

7 Data Security

Keeping your personal data and PKR transaction information secure is a core responsibility that m66 takes seriously. The following technical and organisational measures are in place to protect your data:

• SSL/TLS encryption: All data transmitted between your device and the m66 platform is encrypted in transit using industry-standard SSL/TLS protocols.
• Secure data storage: Account data and transaction records are stored in secured environments with restricted access, firewalls and regular security audits.
• Access controls: Access to personal data within m66's systems is limited to authorised personnel who require it for their specific roles. Access is logged and reviewed.
• Account security: Your m66 account is protected by your password. You are responsible for choosing a strong, unique password and keeping it confidential. m66 staff will never ask for your password.
• Incident response: In the event of a data security incident that affects your personal data, m66 will take immediate steps to contain the incident and notify affected users as appropriate.

8 Data Retention

m66 retains your personal data for as long as your account remains active and for a reasonable period after account closure. The specific retention periods depend on the type of data:

• Account data (name, contact details, login history) is retained for the duration of your account and for up to 5 years after account closure for dispute resolution and record-keeping purposes.
• Transaction records related to PKR deposits and withdrawals are retained for up to 7 years in line with standard financial record-keeping practices.
• Support communications are retained for up to 3 years after the issue is resolved, so that the context of any disputes can be reviewed if needed.
• Technical and usage data such as IP logs and session data is typically retained for shorter periods — generally 90 days to 12 months — unless it forms part of an active fraud or security investigation.

When data is no longer required for the stated purpose and the applicable retention period has expired, it is securely deleted or anonymised so that it can no longer be linked to your identity.

9 Your Rights Over Your Data

As an m66 player, you have rights regarding the personal data we hold about you. You can exercise any of the following rights by contacting our support team at [email protected]:

• Right of access: You can request a copy of the personal data m66 holds about you. We will respond within a reasonable timeframe.
• Right to rectification: If any of your personal data held by m66 is inaccurate or incomplete, you can request that it be corrected.
• Right to erasure: In certain circumstances, you can request that m66 delete your personal data. This right may be limited where we are required to retain data for legal, fraud prevention or financial record-keeping purposes.
• Right to restrict processing: You can request that m66 limit how your data is used while a correction or objection request is being considered.
• Right to data portability: You can request that m66 provide your personal data in a structured, machine-readable format where technically feasible.
• Right to object: You can object to certain uses of your data. Where processing is based on legitimate interests, we will review your objection and respond accordingly.

10 Children & Minors

m66 is strictly an adult platform. Players must be 18 years of age or older to register an account, make PKR deposits, place bets or access any product on the platform. m66 does not knowingly collect personal data from anyone under the age of 18.

If you believe a minor has accessed or registered an account on m66, please contact our support team immediately at [email protected]. We will investigate promptly and take appropriate action, including account closure and deletion of any data collected in connection with a minor's account.

Adults are encouraged to use parental controls available on their devices and through their internet service provider to prevent minors from accessing online gaming platforms including m66. More guidance is available on our Responsible Gaming page.

11 Updates to This Privacy Policy

m66 may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or applicable legal requirements. When we make material changes, we will notify registered players via the email address associated with their account or via a notice displayed upon login.

The "Last Updated" date at the top of this page reflects when the most recent changes were made. We encourage you to review this policy periodically so you remain informed about how your data is handled.

Continued use of m66 after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you may request account closure by contacting our support team.

12 Contact Us

If you have any questions, concerns or requests related to this Privacy Policy or the way m66 handles your personal data, please contact our support team:

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week
• Response Language: English (Pakistan)

When submitting a data-related request, please include your registered username and a clear description of your request so we can handle it as efficiently as possible.

For information about how we govern your use of the platform, see the Terms and Conditions. For information about managing your play, visit the Responsible Gaming page.