Overview
This Privacy Policy explains how 666i collects, uses, stores and protects personal data in connection with its online gambling services, including games, accounts, payments and related products. It applies to all interactions with 666i through its platforms and services and covers data you provide directly as well as data generated through use of the Services. It also sets out your rights and how to exercise them.
Data we collect
- Account information — name, date of birth, residential address, email and telephone number, and the account username. This data is necessary to establish and verify your identity, administer the account and comply with regulatory requirements. Retention: six years after account closure; certain records may be retained longer to satisfy tax and accounting obligations.
- Financial and transactional data — deposits, withdrawals, winnings, payment methods, confirmations and related transactional metadata. Used to process payments, settle bets and monitor for fraud or money laundering. Retention: at least five years as required by applicable AML and financial regulations; longer where required by local law or regulatory obligation.
- Gaming data — game selections, wager history, session times, outcomes and bet sizing. Used to operate the Services, ensure fair play and tailor the user experience. Retention: for the period required by contract and applicable law, typically up to six years after you cease active use of the Services.
- Technical and usage data — IP address, device type, browser, operating system, language, geolocation (where applicable), referring pages and cookie identifiers. Collected automatically to enable service functionality, security, analytics and troubleshooting. Retention: two years after collection, unless a longer period is mandated by law or regulatory requirements.
- Self-exclusion and safeguarding data — records of self-exclusion requests and related protective measures. Retained as long as necessary to fulfill the request and comply with regulatory expectations.
- Information you provide — correspondence with support, participation in surveys or contests, and any messages or feedback. Retention: two years after collection, or longer if required by law or regulatory obligations.
Use of personal data
- To provide, operate and maintain the 666i Services, including account management, identity verification and payment processing.
- To secure the platform, detect and prevent fraud, and protect against illicit activity.
- To comply with legal and regulatory obligations applicable to gambling, financial transactions and consumer protection.
- To communicate about service changes, respond to inquiries and, where you have consented, to deliver marketing communications.
- To analyze and improve the Services, including performance, reliability and user experience enhancements.
Legal bases for processing
- Contractual necessity — processing required to perform the service you requested and manage your account.
- Legal obligation — processing necessary to comply with applicable laws and regulatory requirements related to gambling, AML, taxation and consumer protection.
- Legitimate interests — processing for security, fraud prevention, system improvement, analytics and risk management, provided your privacy interests do not override these interests.
- Consent — processing for marketing or other optional activities where you have provided explicit consent.
Retention of personal data
We retain personal data for as long as necessary to fulfil the purposes described and to comply with legal, regulatory and business requirements. Example timelines include: account and identity data retained for six years after account closure; financial and transactional data retained for a minimum of five years; regulatory records may be retained longer in accordance with applicable laws (up to ten years in some jurisdictions). Technical data and non-critical analytics data are retained for up to two years unless a longer period is required by law. Where longer retention is mandated, we apply the minimum period necessary to satisfy legal obligations.
Security of data
666i implements appropriate technical and organizational safeguards to protect personal data, including TLS/SSL encryption for data in transit, encryption of stored data where feasible, access controls restricting data access to personnel with a legitimate need, and formal incident response procedures. We conduct regular security reviews and staff training. In the event of a data breach, we will notify affected individuals and the competent authorities as required by applicable law.
Cookies and tracking technologies
We use cookies and similar technologies to operate the Services, remember preferences, analyze usage and enable certain features. Essential cookies are necessary for service delivery; analytics and marketing cookies may require consent. You may adjust cookie preferences in your browser; note that disabling cookies may impact some functionality.
Sharing and disclosure of data
We may disclose personal data to the following categories of recipients:
- Service providers that perform activities on our behalf (eg, IT, data storage, payments, security, analytics) under strict contractual obligations and confidentiality.
- Regulators and law enforcement authorities when legally required or permitted.
- Affiliates and corporate entities in connection with business operations, restructurings or mergers, subject to safeguards.
- Third parties with your consent or as necessary to provide requested services.
Where data is transferred to recipients in other jurisdictions, we implement appropriate safeguards to protect the data and maintain equivalent privacy protections.
International transfers
Personal data may be transferred to jurisdictions outside your location. When transfers occur, 666i relies on lawful transfer mechanisms, such as contractual safeguards and data processing agreements, designed to protect your data in line with applicable privacy laws.
Your rights
- Right to access — request a copy of the personal data we hold about you.
- Right to rectification — correct inaccurate or incomplete data.
- Right to erasure — request deletion where no legal basis to retain data remains.
- Right to restriction — limit processing in appropriate circumstances.
- Right to data portability — receive data in a structured, commonly used format.
- Right to object — oppose processing in certain circumstances, including direct marketing.
- Right to not be subject to solely automated decisions — request human review where automated processing significantly affects you.
To exercise these rights, contact the 666i privacy team at [email protected]. You may be asked to verify your identity and provide details to enable us to locate the relevant data. In some cases a reasonable administrative fee may apply in accordance with applicable law.
Minors
Our Services are intended for users aged 18 and over. If we become aware of data collection from a minor, we will delete the data promptly and take reasonable steps to verify age requirements before any continued processing.
Marketing and communications
You may opt out of marketing communications at any time by using the unsubscribe option or by contacting [email protected]. Transactional messages related to your account will still be sent as necessary.
Monitoring and automated decision making
666i may monitor user activity and communications for security, risk management and compliance. Automated processing may be used for identity verification and risk scoring; you may request human review and an explanation of the logic involved where automated decisions have a material effect on you.
Exercising rights and contacting us
Requests regarding your personal data should be submitted to the contact above. We will verify your identity and respond within the timelines required by applicable law.
Policy updates
We update this Privacy Policy as needed to reflect changes in our processing activities or legal requirements. Material changes will be communicated, and the updated policy governs future data processing. The policy includes the date of the last update.
