Privacy Policy – How w667 Protects Your Data

w667 is an online sports betting and casino entertainment platform serving adult players in Pakistan. For the purposes of this Privacy Policy, w667 is the data controller — meaning we determine what personal information is collected, why it is collected and how it is processed.

When you register an account on w667, make a deposit in PKR, place a bet on cricket or PSL, spin a slot game or access any other feature on the platform, you are interacting with w667's data systems. This policy covers all of those interactions and the data they generate.

Our support contact for privacy-related questions is [email protected]. We aim to respond to all privacy-related queries within 72 hours on working days.

w667 collects personal data in several categories depending on how you use the platform. Here is a clear breakdown of what is collected and why each category is necessary:

w667 collects your personal data through the following channels:

• Direct registration: When you fill in the registration form on the website or app, you provide your name, contact details and date of birth directly.
• Verification submissions: When you submit identity documents for KYC verification prior to your first withdrawal, those documents are received and stored securely.
• Payment transactions: Each time you deposit or withdraw in PKR using JazzCash, Easypaisa, Raast, Bank Transfer or other methods, transaction metadata is recorded automatically.
• Platform activity: Your bets, game sessions, login times, pages visited and interactions within the app generate usage logs automatically as you use the platform.
• Technical systems: Your IP address, device fingerprint and browser details are captured automatically by our servers when you connect to the platform.
• Support interactions: Any messages, emails or live chat conversations with w667 support are stored as part of your account record.
• Cookies and tracking: The platform uses cookies for session management, fraud prevention and performance analytics. See Section 10 for full details.

w667 uses your personal data for the following purposes. Each purpose is tied to a specific reason and we do not use data for any purpose not listed here without obtaining your consent first:

• Creating and maintaining your registered account on the platform.
• Verifying your identity and age before processing withdrawals.
• Processing PKR deposits and withdrawals through your chosen payment method.
• Detecting and preventing fraudulent transactions, account abuse and money laundering activity.
• Sending account-related communications — such as withdrawal confirmations, security alerts and bonus notifications — if you have opted in.
• Providing customer support when you contact the team through live chat or email.
• Improving platform performance and user experience based on aggregated usage analytics.
• Applying responsible gaming controls — including deposit limits and self-exclusion — when you set them or when they are triggered by account activity patterns.
• Complying with anti-money laundering (AML) and fraud prevention obligations.

w667 processes your personal data on the following legal grounds, depending on the purpose:

• Contractual necessity: Processing your registration data, verifying your identity and handling payments are all necessary to fulfil the service agreement you entered into when you created a w667 account.
• Legitimate interests: Fraud prevention, security monitoring and platform performance analysis are carried out on the basis of w667's legitimate interest in running a secure and functional platform.
• Legal obligation: KYC verification, AML record-keeping and certain data retention requirements are carried out to comply with applicable legal and regulatory obligations.
• Consent: Optional communications such as promotional emails and push notifications are only sent if you have explicitly opted in. You can withdraw consent at any time through your account settings.

When you deposit or withdraw in PKR using JazzCash, Easypaisa, Raast, Bank Transfer or card payments, the transaction is processed through a certified payment processor. w667 does not handle raw card data directly — card transactions are routed through the payment gateway and w667 receives only a transaction reference and the last four digits of your card.

For mobile wallet transactions via JazzCash and Easypaisa, your registered mobile number is used as the account identifier. This number is stored in your account record and used only to process transactions linked to your w667 account — it is not shared with third parties for marketing purposes.

Transaction records — including deposit and withdrawal amounts, timestamps, payment method type and reference numbers — are retained for a minimum of five years in line with financial record-keeping requirements. This data may be reviewed in the event of a dispute, suspected fraud or account investigation.

w667 does not sell your personal data. Your information may be shared with third parties only in the following limited circumstances:

• Payment processors: Transaction data is shared with the payment gateway and wallet providers (such as JazzCash and Easypaisa) to process your deposits and withdrawals.
• Game providers: Your session token and bet data are shared with certified game providers to deliver the game you are playing. This is a technical requirement and the providers do not receive your identity or contact information.
• Identity verification services: When you submit KYC documents, they may be processed through a third-party verification service to confirm authenticity. These services operate under strict data processing agreements.
• Fraud prevention services: Technical data such as IP addresses and device fingerprints may be checked against fraud and risk databases to protect your account and other players on the platform.
• Legal and regulatory requirements: w667 may disclose your data to relevant authorities if required to do so by a valid legal process, court order or regulatory obligation.

All third-party providers who handle your data are required to process it only for the specific purpose for which it was shared and are bound by appropriate data protection obligations.

w667 retains your personal data for as long as your account is active and for a reasonable period afterwards depending on the type of data:

• Account and identity data: Retained for the duration of your account and for a minimum of five years after closure, in line with financial and AML record-keeping obligations.
• Transaction records: PKR deposit and withdrawal records are retained for a minimum of five years from the date of each transaction.
• KYC documents: Identity documents submitted for verification are retained for as long as required by applicable laws and for a minimum of five years following account closure.
• Support communications: Live chat transcripts and emails are retained for two years from the date of the last interaction in a conversation thread.
• Usage logs: Platform activity logs (game sessions, bet history, login records) are retained for two years from the date generated.
• Cookie data: Session cookies are deleted when you close your browser. Persistent analytics cookies have a lifespan of up to 12 months.

w667 uses a range of technical and procedural measures to protect your personal data from unauthorised access, disclosure, alteration or deletion:

• All data in transit between your device and w667 servers is encrypted with TLS 1.2 or higher.
• Passwords are stored using one-way cryptographic hashing — w667 staff cannot read your password and will never ask you for it.
• Two-factor authentication (2FA) is available on all accounts and strongly recommended.
• Access to personal data within w667's systems is limited to staff who require it for specific operational purposes, and is controlled through role-based access permissions.
• Platform infrastructure is monitored continuously for unusual access patterns, with automated alerts for suspicious activity.
• Penetration testing and security reviews are conducted periodically on the platform's core systems.

Despite these measures, no online platform can guarantee absolute security. If you suspect your account has been accessed by someone else, change your password immediately using the account settings and contact support at once.

w667 uses cookies and similar tracking technologies to operate the platform and improve your experience. Here is how we use them:

• Essential cookies: Required to keep you logged in and maintain your session while you navigate the platform. Without these, the platform cannot function correctly. These cannot be disabled.
• Security cookies: Used to detect fraudulent logins and unusual account activity by tracking device and browser consistency across sessions.
• Performance cookies: Collect anonymised data about page load times and error rates to help the team identify and fix technical issues. No personally identifiable data is included in these analytics.
• Preference cookies: Remember settings you have chosen — such as your last-used deposit method or responsible gaming limit values — so you do not have to re-enter them each session.

You can manage or clear cookies through your browser settings at any time. Note that disabling essential cookies will prevent you from logging in to the platform.

As a registered w667 user, you have the following rights regarding your personal data. To exercise any of these rights, contact the privacy team at [email protected] with your registered account username and a description of your request:

w667 is strictly for adults aged 18 and above. The platform does not knowingly collect personal data from anyone under 18 years of age. If during identity verification it is discovered that an account holder is under 18, the account will be closed immediately and any remaining balance refunded to the deposit source, minus any bonus funds.

If you believe a minor has registered on w667 using false information, contact the support team immediately at [email protected] so that the account can be reviewed and appropriate action taken without delay.

w667 may update this Privacy Policy from time to time to reflect changes in how the platform operates or in applicable data protection requirements. When changes are material — meaning they affect how your data is used in a way you would not reasonably expect — registered users will be notified by email or through an in-app notification before the update takes effect.

Minor clarifications and non-material updates may be made without prior notice. The "Last Updated" date at the top of this page reflects the date of the most recent revision. If you continue using w667 after a policy update takes effect, you are considered to have accepted the updated terms.

If you have any questions about this Privacy Policy, want to exercise any of your data rights or have a concern about how your personal information has been handled, contact the w667 privacy team:

• Privacy enquiries: [email protected]
• General support: [email protected]
• Live chat: Available 24/7 through the app or website

We aim to respond to all data rights requests within 30 days. For complex requests, we may extend this to 60 days and will notify you if that extension is needed.