Privacy Policy

§1Introduction

This Privacy Policy ("Policy") sets out how cm666 ("cm666", "we", "us", "our"), the operator of the online gambling and entertainment platform at https://cm666.cam ("Platform"), collects, uses, stores, discloses and protects the personal data of users ("you", "your") who access or use the Platform.

This Policy applies to all personal data we process in connection with your use of the Platform, including data collected during account registration, identity verification (KYC), deposits and withdrawals, customer support interactions, and general browsing of the Platform. It should be read alongside our Terms & Conditions and Responsible Gambling Policy.

By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any aspect of this Policy, please do not use the Platform.

§2Definitions

• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, cm666.
• "Data Processor" means any third party that processes personal data on behalf of the Data Controller under a contractual arrangement.
• "Personal Data" means any information relating to an identified or identifiable natural person, including name, contact details, financial data, identification documents and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure or deletion.
• "KYC" (Know Your Customer) means the identity and document verification process required to comply with anti-money laundering (AML) and regulatory obligations.
• "Sensitive Data" means personal data revealing racial or ethnic origin, political opinions, religious beliefs, health data, or data relating to criminal convictions, which is subject to enhanced protection.

§3Data Controller

cm666 acts as Data Controller in respect of all personal data collected directly from users of the Platform. cm666 operates under an internationally recognised licensing framework. The operator's registered details are available through the Platform's official licensing documentation.

cm666 does not claim to be regulated by the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan or any Pakistani provincial authority. This Policy does not constitute legal advice. Pakistani users are encouraged to understand the privacy laws applicable in their jurisdiction, including any provisions of the Pakistan Electronic Crimes Act, 2016 (PECA) and related regulations, before using the Platform.

§4Data We Collect

4.1 Identity and Registration Data

When you create an account on cm666, we collect: full name, date of birth, nationality, and a valid email address. During KYC verification, we additionally collect government-issued identity document details (e.g., CNIC number, passport number), a scanned or photographed copy of that document, and proof of residential address.

4.2 Contact and Communication Data

We collect your email address and, where provided, your mobile phone number. We retain records of your communications with our support team, including live chat transcripts and email correspondence, for quality assurance and dispute resolution purposes.

4.3 Financial and Transaction Data

We collect records of all deposits, withdrawals and wagers placed through the Platform, including amounts, timestamps, payment method references and transaction statuses. We do not store complete card numbers — only references needed for verification and regulatory record-keeping. Where users reference Pakistani payment channels such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah, the reference data (account identifiers or transaction references) is stored solely for transactional and compliance purposes and does not imply those providers endorse or support gambling.

4.4 Technical and Usage Data

We automatically collect certain technical data when you access the Platform, including: IP address, device type, operating system, browser type and version, session duration, pages visited, click behaviour, and referring URL. This data is used to maintain Platform security and improve user experience.

4.5 Responsible Gambling Data

Where you set deposit limits, loss limits, self-exclusion periods or other responsible gambling controls, we record those preferences and apply them to your account. This data is treated with particular care and is used only to enforce your stated restrictions.

§5How We Collect Data

We collect personal data through the following means:

• Direct collection: Information you provide when registering, completing KYC, making deposits or withdrawals, contacting support, or setting account preferences.
• Automated collection: Technical data collected automatically through cookies, log files and similar tracking technologies when you browse or use the Platform.
• Third-party sources: Identity verification data may be validated against third-party databases as part of KYC and AML compliance. Fraud prevention and risk-scoring data may be received from specialised service providers.
• Payment processors: Transaction confirmation data received from payment gateway providers when you deposit or withdraw funds.

§6Legal Basis for Processing

We process your personal data on the following legal bases, as applicable under the laws of the operator's licensing jurisdiction:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions, including account management, transaction processing and bonus administration.
• Legal obligation: Processing required to comply with applicable law, including AML regulations, KYC requirements and regulatory reporting obligations.
• Legitimate interests: Processing carried out to pursue our legitimate business interests — including fraud prevention, Platform security, product improvement and responsible gambling monitoring — where those interests are not overridden by your privacy rights.
• Consent: Where we rely on consent as the legal basis (e.g., for non-essential cookies or optional marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

§7How We Use Your Data

cm666 uses collected personal data for the following purposes:

• To create, manage and maintain your Account
• To verify your identity and age in compliance with KYC requirements
• To process deposits, withdrawals and in-game transactions
• To administer bonuses and promotions in accordance with applicable terms
• To provide customer support and resolve disputes
• To detect, investigate and prevent fraud, money laundering and prohibited conduct
• To enforce the Terms & Conditions and other platform policies
• To operate responsible gambling monitoring and apply player-requested restrictions
• To send transactional communications (e.g., deposit confirmations, withdrawal notifications, security alerts)
• To improve Platform functionality, performance and user experience
• To comply with applicable regulatory, legal and audit requirements

§8Data Sharing & Disclosure

cm666 does not sell or rent your personal data to third parties. We share data only in the following limited circumstances:

• Service Providers: Third-party processors engaged to provide services on our behalf (e.g., payment processors, identity verification providers, fraud prevention services, cloud infrastructure providers) under strict data processing agreements that prohibit them from using your data for their own purposes.
• Regulatory and Legal Authorities: Where required by law, court order or regulatory requirement, we may disclose your personal data to competent authorities. This includes AML reporting obligations to the operator's licensing authority.
• Business Transfers: In the event of a merger, acquisition or sale of all or part of the business, personal data may be transferred as part of that transaction, subject to equivalent privacy protections.
• Fraud Prevention Networks: Information may be shared with recognised fraud prevention and responsible gambling databases where we have reasonable grounds to suspect fraudulent activity or regulatory non-compliance.

In all cases, data sharing is limited to what is strictly necessary for the stated purpose and is subject to appropriate contractual protections.

§9International Data Transfers

As an internationally operating platform, cm666 may transfer personal data to countries outside your home jurisdiction as part of normal business operations (for example, where our servers or service providers are located in different jurisdictions). Where such transfers occur, we take appropriate measures to ensure that your data is protected to a standard equivalent to the protections afforded in the operator's licensing jurisdiction, including through the use of standard contractual clauses or equivalent transfer mechanisms.

§10Data Retention

We retain personal data for as long as your Account is active and for a defined period thereafter, in order to comply with our legal and regulatory obligations. Specifically:

• Account and identity data is retained for the duration of the Account plus a minimum of five (5) years following account closure, as required by AML regulations.
• Transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Support communications are retained for up to two (2) years from the date of the interaction, unless required for ongoing dispute resolution.
• Technical and usage data is retained for up to twelve (12) months, after which it is anonymised or deleted.
• Responsible gambling restriction records are retained for the duration of the restriction plus a period sufficient to prevent circumvention.

Where data is no longer required for any lawful purpose, it is securely deleted or anonymised.

§11Cookies & Tracking Technologies

11.1 What Cookies We Use

cm666 uses the following categories of cookies and similar technologies:

• Essential Cookies: Required for the Platform to function. These include session authentication cookies, security tokens and load-balancing cookies. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences (e.g., language, deposit currency, responsible gambling settings) to personalise your experience.
• Analytics Cookies: Used in aggregate, anonymised form to understand how users interact with the Platform — including which pages are most visited and where errors occur. This data is used solely to improve the Platform and cannot be linked back to individual users.

11.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform. Essential cookies cannot be disabled as they are strictly necessary for the operation of the Platform.

§12Security Measures

cm666 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• TLS encryption for all data transmitted between your device and the Platform
• Encrypted storage of sensitive data at rest
• Strict access controls limiting data access to authorised personnel on a need-to-know basis
• Regular security assessments and penetration testing
• Two-factor authentication (2FA) options for user accounts
• Automated session timeout to reduce the risk of unauthorised access from shared devices
• Continuous fraud monitoring and anomaly detection

While we apply rigorous security controls, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying cm666 immediately if you suspect any unauthorised access to your account.

§13User Rights

Subject to applicable law, you have the following rights in relation to your personal data held by cm666:

To exercise any of the above rights, please contact us via the support channels listed in Section 16. We will respond to all verified requests within a reasonable timeframe, and in any event within the period required by applicable law. We may need to verify your identity before processing a rights request.

§14Children's Privacy

cm666 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18 — or the higher minimum age required by the operator's license jurisdiction. If we become aware that a minor has created an account or provided personal data, we will take immediate steps to close the account, delete the associated data and return any deposits in accordance with our underage gambling policy.

If you believe that a minor may be using the Platform, please contact us immediately at the details provided in Section 16.

§15Policy Amendments

cm666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements or other factors. Where material changes are made, we will provide reasonable notice through the Platform or by email to the address registered on your account. The updated Policy will carry a revised "Last Updated" date at the top of the page.

Your continued use of the Platform following notification of any amendment constitutes acceptance of the revised Policy. If you do not accept any amendment, you should cease using the Platform and may request account closure.

§16Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy, your personal data, or the exercise of your data rights, please contact the cm666 data team through the following channels:

• Support Email: [email protected] — plain text only; do not click — copy and paste into your email client
• Live Chat: Available 24/7 via your account dashboard, as provided by the operator
• FAQ: Common privacy questions are addressed on our FAQ page

We aim to acknowledge all data-related requests within 72 hours and to resolve them within the period required by applicable law. Where requests are complex or numerous, we may require additional time and will inform you accordingly.