663but Privacy Policy

1. Who We Are

663but operates the online entertainment platform accessible at 663but.com (the "Platform"), providing casino games, live dealer tables, sports betting including PSL cricket markets, and related services to registered users. In this Privacy Policy, "663but", "we", "us", and "our" refer to the operator of the 663but Platform. "You" and "your" refer to any registered user or visitor to the Platform, including Pakistani players and users accessing the Platform from any other jurisdiction.

663but acts as the data controller in respect of personal data collected through the Platform. As data controller, 663but determines the purposes and means of processing your personal data and is responsible for ensuring that processing activities are carried out in accordance with applicable data protection principles.

2. Personal Data We Collect

663but collects personal data that is necessary for the operation of the Platform, fulfilment of legal obligations, and delivery of a safe experience. The categories of personal data collected include:

We do not collect sensitive personal data such as political opinions, religious beliefs, or biometric data beyond what is required for identity verification as part of the KYC process mandated for online gaming accounts.

3. How We Collect Your Data

663but collects personal data through the following means:

• Direct Submission: Data you provide when registering a 663but account, completing KYC verification, making deposits or withdrawal requests, or contacting 663but support.
• Automated Technical Collection: Data collected automatically when you access the 663but Platform, including IP address, browser type, device identifiers, and session activity via cookies and similar tracking technologies.
• Third-Party Sources: Identity and financial verification data from KYC service providers; fraud screening data from anti-fraud service providers; payment verification data from payment processors including those facilitating JazzCash and Easypaisa transactions.
• Gameplay Activity: Data generated by your interaction with casino games, live dealer tables, sports betting markets, and other Platform features, recorded automatically in 663but's systems.

4. How We Use Your Personal Data

663but uses your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your 663but account, including processing your 663but login, managing your PKR wallet, and processing deposits and withdrawals.
• Identity and Age Verification: Verifying that you are at least 18 years of age and confirming your identity as required under applicable KYC and AML obligations.
• Fraud Prevention and Security: Detecting and preventing fraud, money laundering, collusion, multi-accounting, and other prohibited conduct. Protecting the security and integrity of the 663but Platform.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and making responsible gaming tools available to users. Enforcing self-exclusion and cool-off periods that players have set on their own accounts.
• Customer Support: Responding to queries, complaints, and dispute resolution requests submitted to the 663but support team via live chat or email.
• Legal Compliance: Complying with applicable laws, regulatory requirements, court orders, and obligations to cooperate with relevant authorities.
• Platform Improvement: Analysing aggregated usage data to improve the 663but Platform, optimise mobile performance for Pakistani network conditions, and develop new features.
• Marketing: Sending promotional communications to users who have opted in to receive them, subject to Section 12 of this Policy.

5. Legal Basis for Processing

663but processes your personal data on the following legal bases:

• Contractual Necessity: Processing necessary to perform the contract with you, including operating your 663but account, processing transactions, and delivering Platform services.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations and KYC requirements applicable to online gaming operators.
• Legitimate Interests: Processing carried out for 663but's legitimate business interests, including fraud prevention, Platform security, and responsible gaming monitoring, where these interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — for example, sending marketing communications by email or SMS. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

663but does not sell your personal data to third parties. We may share your personal data with the following categories of recipients where necessary for the purposes set out in this Policy:

• Payment Processors: Third-party payment service providers facilitating JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah transactions, solely to process your deposits and withdrawals.
• KYC and Identity Verification Providers: Third-party identity and document verification services used to complete your 663but KYC verification process.
• Anti-Fraud and AML Providers: Third-party fraud detection and anti-money laundering screening services used to protect the integrity of the Platform.
• Game Providers: Game software providers whose titles are available on the 663but Platform, where such sharing is required to resolve technical disputes or game settlement issues.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory direction, 663but may disclose personal data to relevant public authorities in Pakistan or elsewhere.
• Professional Advisers: Legal, financial, and regulatory advisers engaged by 663but, subject to professional confidentiality obligations.

All third parties with whom 663but shares personal data are required to handle that data securely and only for the specified purpose. 663but does not permit third parties to use your personal data for their own independent marketing purposes.

7. Cookies & Tracking Technologies

663but uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly Necessary Cookies: Required for the Platform to function, including maintaining your 663but login session, remembering your language and currency preferences, and securing your account from session hijacking.
• Performance Cookies: Collecting anonymised data about how users navigate the Platform — which pages are visited most, where errors occur — to improve Platform performance and user experience.
• Functional Cookies: Remembering your preferences across sessions, such as table game layout settings, preferred betting markets, and lobby filters.
• Analytics Cookies: Collecting aggregated data about Platform usage patterns for internal analytics purposes. This data does not identify individual users.

You may disable non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair the functionality of the 663but Platform, including the ability to remain logged in. Continued use of the Platform without disabling cookies constitutes acceptance of 663but's cookie use as described above.

8. Data Retention

663but retains personal data for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, and resolve disputes. Specific retention periods include:

• Active Account Data: Retained for the lifetime of your 663but account and for a minimum of five (5) years after account closure, as required by applicable AML and financial record-keeping obligations.
• KYC Documentation: Retained for a minimum of five (5) years from the date of collection or from the date of account closure, whichever is later, in accordance with anti-money laundering regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Retained for three (3) years from the date of the communication unless a longer retention period is required for ongoing dispute resolution.
• Technical and Usage Data: Aggregated usage data may be retained indefinitely for Platform analytics purposes. Individual-level technical data is retained for twelve (12) months from collection.

When personal data is no longer required, 663but will securely delete or anonymise it in accordance with applicable data protection standards.

9. Data Security

663but implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Security measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the 663but Platform, including the 663but login page and all cashier transactions.
• Encrypted storage of sensitive data including payment information and identity documents.
• Access controls ensuring that 663but staff access personal data only on a need-to-know basis for legitimate operational purposes.
• Regular security assessments and monitoring of Platform infrastructure for vulnerabilities and intrusion attempts.
• OTP-based verification for sensitive account actions including mobile number confirmation, withdrawals, and account changes.

While 663but takes reasonable measures to protect your data, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your 663but login credentials as described in the 663but Terms and Conditions. In the event of a data security incident affecting your personal data, 663but will notify you in accordance with applicable legal obligations.

10. Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by 663but:

• Right of Access: You may request a copy of the personal data 663but holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held in your 663but account.
• Right to Erasure: You may request deletion of your personal data where 663but no longer has a legitimate basis to retain it, subject to our legal retention obligations (see Section 8).
• Right to Restriction: You may request that 663but restrict processing of your personal data in certain circumstances.
• Right to Object: You may object to processing of your personal data based on 663but's legitimate interests, including profiling for responsible gaming purposes.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to Data Portability: Where technically feasible, you may request a machine-readable copy of personal data you have provided to 663but.

To exercise any of these rights, please contact the 663but support team using the contact details in Section 14. 663but will respond to requests within a reasonable timeframe. Please note that some requests may be subject to identity verification before they can be processed.

11. Children's Privacy

The 663but Platform is strictly for adults aged 18 and over. 663but does not knowingly collect personal data from persons under the age of 18. If you are under 18, you must not register a 663but account, access the Platform, or provide any personal data to 663but. If 663but becomes aware that personal data has been collected from a person under 18, that data will be deleted and the associated account will be closed immediately. If you believe a person under 18 has provided personal data to 663but, please contact our support team promptly.

12. Marketing Communications

663but may send promotional communications — including information about bonuses, new game launches, PSL cricket betting promotions, and other offers — to registered users who have opted in to receive such communications. The following applies to all marketing activity by 663but:

• Marketing communications will only be sent where you have given your clear, affirmative consent at the time of registration or through your account communications preferences.
• You may opt out of marketing communications at any time by updating your account preferences, clicking the unsubscribe link in any marketing email, or contacting 663but support.
• Opting out of marketing does not affect transactional communications necessary for operating your 663but account, such as OTP messages, withdrawal confirmations, and security alerts.
• 663but does not share your personal data with third parties for the purpose of those third parties sending you marketing communications.

13. Changes to This Privacy Policy

663but reserves the right to update or amend this Privacy Policy at any time. When material changes are made, 663but will notify registered users by email to their registered address and will display a prominent notice on the Platform. The effective date of any revision will be stated at the top of this document. Your continued use of the 663but Platform after the effective date of any revision constitutes acceptance of the updated Privacy Policy. You are encouraged to review this Privacy Policy periodically to stay informed about how 663but protects your personal data.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how 663but handles your personal data, please contact the 663but support team:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the 663but Platform
• Service Area: Serving players across Pakistan — Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, and beyond

For full terms governing your use of the Platform, please read the 663but Terms & Conditions. For information about responsible gaming tools and self-exclusion, visit the 663but Responsible Gaming page.