Introduction
bit663 ("we", "us", "our" or "the Platform") operates as an English-language online betting and casino information platform designed for users in Pakistan and other permitted jurisdictions. We are committed to protecting the privacy and personal data of everyone who visits or uses bit663 at https://bit663.cam.
This Privacy Policy describes how bit663 collects, uses, stores, shares and protects personal information in connection with your use of the Platform. It also explains the rights you hold in respect of your personal data and how to exercise them. This Policy applies to all users of the Platform, including visitors who have not registered an account, registered account holders, and any individuals who contact us through our support channels.
This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, all of which together govern your relationship with bit663. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy.
Pakistani Users: bit663 does not claim authorisation from the Government of Pakistan, the Pakistan Telecommunication Authority, the State Bank of Pakistan or any provincial authority. This document is not legal advice. If you have questions about your rights under Pakistani data protection law, you are encouraged to seek independent legal advice.
Definitions
The following terms carry the meanings set out below throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, email address, IP address, device identifiers and financial transaction data. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, erasure or destruction, whether automated or manual. |
| "Data Subject" | The individual whose personal data is being processed — in this context, you as the user of the Platform. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, bit663 acts as Data Controller for data collected through the Platform. |
| "Data Processor" | A third party that processes personal data on behalf of the Data Controller under a written agreement, for example payment processors, KYC providers or cloud storage partners. |
| "Consent" | A freely given, specific, informed and unambiguous indication of your agreement to the processing of your personal data for a stated purpose. |
| "KYC" | Know Your Customer — the identity verification process required prior to processing withdrawals or as required by applicable regulatory obligations. |
| "Cookie" | A small text file stored on your device by your browser when you visit a website, used to retain information about your session or preferences. |
Personal Data We Collect
bit663 collects personal data through several channels: directly from you when you register an account or contact support; automatically through your use of the Platform; and from third parties such as payment processors and KYC verification providers. The categories of data we collect are as follows:
3.1 Account Registration Data
When you create an account, we collect the information you provide, which typically includes:
- Full legal name
- Date of birth
- Residential address (including city — for example Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar)
- Email address
- Phone number
- Preferred currency and payment method details
- Username and encrypted password
3.2 KYC and Identity Verification Data
Prior to processing withdrawals and in compliance with applicable regulatory obligations, we collect documentary evidence to verify your identity and payment methods. This may include:
- Copies of government-issued photo identification (e.g., Pakistani CNIC, passport or national ID card)
- Proof of address documents (e.g., utility bill, bank statement)
- Payment method verification documents (e.g., screenshot of Easypaisa or JazzCash account, or bank card details)
- Selfie or liveness check images where required by the verification provider
Payment provider names such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are referenced as familiar Pakistan payment channels for context only. Their mention does not imply endorsement of gambling by those providers. Always confirm available payment methods in the Operator's live cashier.
3.3 Transaction and Financial Data
We collect records of all financial transactions conducted through your account, including deposit amounts, withdrawal requests, wager history, bonus usage and account balance changes. This data is retained for regulatory compliance, dispute resolution and anti-money-laundering purposes.
3.4 Technical and Device Data
When you access the Platform, we automatically collect technical information through cookies and similar technologies, including:
- IP address and approximate geolocation derived from it
- Device type, operating system and browser version
- Unique device identifiers
- Session timestamps, pages visited and features used
- Referring website or search query that led you to the Platform
3.5 Communications Data
If you contact our support team — by email at [email protected] or through live chat — we retain records of those communications, including the content of your messages, timestamps and the outcome of any queries or complaints raised.
3.6 Responsible Gambling Data
Where you make use of responsible gambling tools — such as setting deposit limits, requesting a cooling-off period or initiating self-exclusion — we record those preferences and the dates on which they were applied. This data is treated with heightened care and is used solely to manage and enforce your responsible gambling restrictions.
How We Use Your Data
bit663 processes your personal data only for the purposes described below. We do not use your data in ways that are incompatible with the purpose for which it was originally collected, and we do not sell personal data to third parties under any circumstances.
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining and managing your user account, including authentication, password resets and profile updates. |
| Transaction Processing | Processing deposits, withdrawals and wagers, verifying payment method ownership and managing your account balance. |
| KYC Compliance | Verifying your identity and age in accordance with our regulatory obligations and anti-money-laundering requirements. |
| Customer Support | Responding to your support queries, complaints and feedback. Maintaining records of communications for quality assurance. |
| Responsible Gambling | Recording and enforcing deposit limits, loss limits, session time restrictions, cooling-off periods and self-exclusion requests. |
| Security & Fraud Prevention | Detecting and preventing fraud, multi-accounting, bonus abuse, money laundering and other prohibited conduct in accordance with our Terms. |
| Platform Improvement | Analysing anonymised or aggregated usage data to understand how users interact with the Platform and to improve content, features and navigation. |
| Marketing Communications | Sending promotional emails, bonus notifications and platform updates where you have given explicit consent. You may withdraw consent at any time. |
| Legal Compliance | Meeting obligations under applicable law, responding to lawful requests from regulatory or law enforcement authorities, and enforcing our Terms. |
Legal Basis for Processing
Where applicable data protection law requires a legal basis for processing personal data, bit663 relies on the following bases depending on the specific processing activity:
- Contractual Necessity: Processing required to perform our contract with you — for example, creating your account, processing deposits and withdrawals, and providing access to the Platform's features.
- Legal Obligation: Processing required to comply with applicable law, including KYC verification, anti-money-laundering obligations and responses to lawful regulatory requests.
- Legitimate Interests: Processing necessary for our legitimate business interests — including fraud prevention, Platform security, abuse detection and internal analytics — provided those interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing for which you have given specific, informed and freely withdrawable consent — primarily marketing communications and optional analytics cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
- Vital Interests: In limited circumstances, processing may be necessary to protect the vital interests of a data subject, for example in connection with responsible gambling interventions.
Data Sharing & Third Parties
bit663 does not sell, rent or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:
6.1 Service Providers and Data Processors
We engage trusted third-party service providers to assist in delivering the Platform's services. These providers act as Data Processors under our instruction and are contractually bound to process your data only as directed and to maintain appropriate security standards. Categories of processors include:
- Payment Processors: Financial institutions and payment gateway providers that facilitate deposits and withdrawals through channels including bank transfers, mobile wallets and cryptocurrency networks.
- KYC and Identity Verification Providers: Specialised verification services that process identity documents and conduct liveness checks on our behalf.
- Cloud Infrastructure Providers: Providers of server, storage and database infrastructure used to host the Platform and store user data securely.
- Analytics Providers: Services that help us understand aggregated usage patterns on the Platform. Where analytics involve personal data, it is handled on a pseudonymous basis where possible.
- Customer Support Platforms: Tools that facilitate live chat and email support, subject to appropriate data processing agreements.
6.2 Regulatory and Law Enforcement Disclosure
bit663 may disclose personal data to competent regulatory, law enforcement or judicial authorities where required or permitted by applicable law — for example in response to a valid court order, regulatory investigation, or where disclosure is necessary to prevent, detect or prosecute fraud or criminal activity.
6.3 Business Transfers
In the event of a merger, acquisition, restructuring or sale of all or part of bit663's business or assets, your personal data may be transferred to the acquiring entity. We will notify you of any such transfer and any changes to the applicable privacy arrangements in advance, where practicable.
No Sale of Data: bit663 will never sell your personal data to third-party advertisers, data brokers or marketing agencies. Your information is shared only to operate the Platform, comply with legal obligations or enforce our Terms.
International Data Transfers
bit663 operates as a platform with infrastructure and service providers located in multiple jurisdictions. As a result, your personal data may be transferred to, stored in and processed in countries outside Pakistan. Where such transfers occur, we take appropriate measures to ensure that your data receives a level of protection consistent with applicable data protection standards.
These measures may include: standard contractual clauses approved by relevant data protection authorities; binding corporate rules where applicable; adherence to recognised international data transfer frameworks; and contractual obligations requiring recipient parties to implement equivalent security and privacy safeguards.
By using the Platform and providing your personal data, you acknowledge that your information may be processed in jurisdictions outside Pakistan. If you have concerns about international data transfers in connection with your specific situation, please contact us at [email protected].
Data Retention
bit663 retains personal data only for as long as is necessary for the purposes described in this Privacy Policy, or as required by applicable law, whichever is longer. The following general retention periods apply:
- Active Account Data: Retained for the duration of your account's existence and for a period of at least five (5) years following account closure, in accordance with standard anti-money-laundering record-keeping requirements.
- KYC Documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by applicable regulatory obligations in the licensing jurisdiction.
- Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, for audit, compliance and dispute-resolution purposes.
- Support Communications: Retained for up to three (3) years from the date of your most recent contact, or longer if the communication relates to an unresolved dispute or regulatory matter.
- Marketing Consent Records: Retained for the duration of your consent and for a reasonable period afterwards as evidence of that consent, or until you withdraw consent.
- Technical and Device Data: Session logs and raw access data are typically retained for up to twelve (12) months, after which they are deleted or anonymised.
When data is no longer required and no legal obligation requires its further retention, bit663 will securely delete or irreversibly anonymise it. If you request deletion of your personal data under Section 10 of this Policy, we will assess the request against applicable legal retention obligations before acting on it.
Your Data Protection Rights
Depending on the data protection laws applicable to your situation, you may hold some or all of the following rights in respect of your personal data. bit663 will make reasonable efforts to accommodate these rights, subject to applicable legal limitations and our own compliance obligations.
Right of Access
You have the right to request a copy of the personal data we hold about you, along with information about how it is processed. We will respond to verified access requests within a reasonable timeframe.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly through your account settings.
Right to Erasure
You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. This right may be subject to legal retention obligations.
Right to Restriction
In certain circumstances, you may request that we restrict the processing of your personal data — for example, while we verify the accuracy of data you have disputed.
Right to Data Portability
Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your data in a structured, machine-readable format to transfer to another service.
Right to Object
You have the right to object to processing based on legitimate interests, including profiling, and to processing for direct marketing purposes. Objections to marketing are always honoured without question.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing that took place before withdrawal.
Right to Lodge a Complaint
If you believe your data rights have been violated, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.
To exercise any of the rights listed above, please contact us at [email protected]. We may need to verify your identity before acting on a request, to prevent unauthorised access to another person's data.
Data Security
bit663 takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include, but are not limited to:
- Encryption in Transit: All data transmitted between your device and the Platform is protected by TLS (Transport Layer Security) encryption.
- Encryption at Rest: Sensitive personal data, including identity documents and financial records, is stored in encrypted form on our infrastructure.
- Access Controls: Access to personal data is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational requirement may access personal data, and all access is logged and audited.
- Password Security: User passwords are stored using one-way cryptographic hashing. We never store passwords in plain text.
- Infrastructure Security: Our hosting infrastructure is maintained with regular security patching, vulnerability scanning and penetration testing.
- Incident Response: We maintain a documented data breach response procedure. In the event of a breach that poses a risk to affected individuals, we will notify them and the relevant authorities as required by applicable law.
While we apply robust security measures, no transmission over the internet and no system of data storage can be guaranteed to be completely secure. You accept that some inherent risk exists when using online services and that bit663 cannot be held liable for security incidents that are beyond our reasonable control. You are responsible for keeping your own account credentials secure and for notifying us promptly if you suspect any unauthorised activity on your account.
Minors
The Platform is strictly intended for adults aged 18 or older — or the higher minimum age required by the Operator or applicable licence jurisdiction. bit663 does not knowingly collect or process personal data from individuals under the minimum eligible age.
If we become aware that personal data has been collected from a minor without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account or provided personal data through the Platform, please contact us at [email protected] so we can investigate and act promptly.
Parental Advisory: We strongly encourage parents and guardians to monitor their children's internet activity and to use parental-control tools to prevent minors from accessing gambling-related content. If you share a device with minors, ensure you log out of your bit663 account after each session.
Changes to This Privacy Policy
bit663 reserves the right to update or modify this Privacy Policy at any time. The most current version will always be accessible on this page, with the "Last Updated" date revised accordingly. For material changes that significantly affect how we handle your personal data, we will make reasonable efforts to notify registered users by email or through an in-platform notification before the change takes effect.
Your continued use of the Platform following the posting of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you should stop using the Platform and request closure of your account in accordance with our Terms & Conditions.
We recommend reviewing this Privacy Policy periodically to stay informed about how bit663 protects your personal data. If you have questions about any changes, please contact us at [email protected].
Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data, please reach out to the bit663 support team. We are committed to responding to all privacy-related enquiries promptly and transparently.
Privacy & Data Requests
For data access, deletion, rectification or other rights requests:
[email protected]Response Time
We aim to acknowledge all privacy requests within 48 hours and resolve them within 30 days.
Within 30 days for complex requestsFor questions about responsible gambling tools including self-exclusion, deposit limits and cooling-off periods, please visit our dedicated Responsible Gambling page. For questions about account rules and permitted conduct, see our Terms & Conditions.