global66 Privacy Policy — Your Data, Protected

This Privacy Policy ("Policy") describes how global66 ("global66", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "User", "Player") who access or use the global66 website at global66.games and all related services, including the online casino, sportsbook, account dashboard, and PKR payment channels.

This Policy applies to all global66 users, including registered players who access the platform from Pakistan — whether from Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, or any other city or region. It covers data processed through desktop browsers, mobile browsers, and any future global66 applications.

By creating a global66 account or using any global66 service, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not use global66.

global66 is the data controller responsible for personal data collected through the global66 platform. As data controller, global66 determines the purposes and means of processing your personal data and is accountable for its protection in accordance with applicable data protection laws and standards.

All data protection queries, subject access requests, and privacy-related complaints should be directed to the global66 Data Privacy team via the contact details provided in Section 14 of this Policy.

global66 collects personal data in three ways: data you provide directly, data generated automatically by your use of the platform, and data received from third-party verification and payment providers. The table below summarises the categories of data collected.

global66 does not collect sensitive personal data categories — such as health data, racial or ethnic origin, religious beliefs, or political opinions — unless you voluntarily disclose such information in the course of a responsible gaming self-assessment or support interaction. Such information, if provided, is used solely to deliver the requested service and is not processed for any other purpose.

global66 uses the personal data described in Section 3 for the following specific purposes:

• Account creation and management: To register your global66 account, verify your identity, authenticate your login sessions, and maintain your account profile and PKR balance records.
• Transaction processing: To process Easypaisa deposits, JazzCash withdrawals, Raast transfers, HBL payments, and USDT TRC20 transactions accurately and in PKR.
• Service delivery: To operate live casino tables, RNG slot games, and sports betting markets at global66 and to deliver bet settlement and jackpot prize payments to your account.
• Identity verification and fraud prevention: To verify that you meet global66's 18+ age requirement, to prevent multi-accounting, and to detect and investigate suspicious financial activity in accordance with anti-money laundering obligations.
• Responsible gaming: To maintain your deposit limit, session timer, loss limit, and self-exclusion settings, and to identify patterns of play that may indicate problem gambling behaviour.
• Customer support: To respond to your live chat, WhatsApp, Telegram, and email enquiries and to maintain a record of communications for quality assurance and dispute resolution purposes.
• Legal and regulatory compliance: To fulfil global66's obligations under applicable laws including anti-money laundering regulations, age verification requirements, and data protection obligations.
• Platform improvement: To analyse aggregated, anonymised usage patterns to improve the global66 platform, fix technical issues, and develop new features relevant to Pakistani players.
• Marketing communications (opt-in only): To send you promotional offers, bonus notifications, and platform updates if you have explicitly opted in to receive such communications.

global66 processes your personal data only where a valid lawful basis exists. The primary lawful bases we rely on are:

• Contractual necessity: Processing required to perform the global66 account agreement — including account creation, transaction processing, and service delivery — is carried out on the basis of contractual necessity.
• Legal obligation: Processing required to comply with applicable laws — including identity verification, anti-money laundering checks, and age verification — is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming compliance, and platform improvement is carried out on the basis of global66's legitimate interests, balanced against your privacy rights.
• Consent: Processing for optional marketing communications is carried out only where you have given explicit, informed consent. You may withdraw consent at any time via your global66 account notification settings.

global66 does not sell your personal data. We share personal data only in the following limited circumstances and only to the extent necessary for the stated purpose:

• Payment processors: Easypaisa, JazzCash, Raast, and HBL receive the minimum financial data required to process your PKR deposits and withdrawals. These providers operate under their own privacy policies and are bound by contractual data processing obligations with global66.
• Identity verification providers: Third-party KYC (Know Your Customer) service providers receive identity documents submitted for high-value withdrawal verification. These providers are contractually prohibited from using your data for any purpose other than the verification service they provide to global66.
• Game software studios: Game providers such as Evolution Gaming and Pragmatic Play may receive a session token and anonymised player ID to facilitate live game sessions. No personal contact data or financial data is shared with game studios.
• Legal authorities: global66 will disclose personal data to law enforcement, regulatory authorities, or courts when required to do so by applicable law or valid legal process, including anti-money laundering reporting obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of global66's business assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer via the mobile number or email registered on your account.

global66 uses cookies and similar tracking technologies to operate the platform, maintain your authenticated session, and analyse aggregate usage patterns. The following cookie categories are used:

• Strictly necessary cookies: Required for core platform functionality including login session management, security tokens, and PKR balance display. These cookies cannot be disabled without breaking core global66 functionality.
• Analytics cookies: Used to collect anonymised, aggregated data about how Pakistani players navigate the global66 platform. This data is used to improve site performance and user experience. No individual player is identified in analytics reports.
• Preference cookies: Store your language, notification, and responsible gaming settings so that they persist between sessions.

global66 does not use third-party advertising cookies or cross-site tracking technologies. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the global66 platform.

global66 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following indicative retention periods apply:

After the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual.

global66 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption on all data transmitted between your device and global66 servers.
• Encrypted storage of sensitive data fields including passwords and payment account identifiers.
• Role-based access controls that limit internal access to personal data to authorised personnel only.
• Multi-factor authentication requirements for global66 staff systems that process player data.
• Automated anomaly detection systems that flag unusual login patterns or transaction behaviour for review.
• Regular internal security reviews and periodic third-party security assessments of the global66 platform.

In the event of a personal data breach that poses a risk to your rights, global66 will notify affected players via the mobile number or email address registered on their account within 72 hours of becoming aware of the breach, and will take immediate steps to mitigate the impact.

As a global66 account holder, you hold the following rights in relation to your personal data. These rights may be exercised by contacting global66 via the details in Section 14:

• Right of Access: You may request a copy of all personal data global66 holds about you. global66 will respond within 30 calendar days of a verified request.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. You may also update basic profile information directly from your global66 account dashboard.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose collected, where you have withdrawn consent, or where processing is unlawful. Note that data subject to legal retention obligations (such as AML records) cannot be deleted before the retention period expires.
• Right to Restriction: You may request that global66 restrict processing of your data while a rectification or objection request is under review.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes. global66 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — such as marketing communications — you may withdraw that consent at any time via your global66 account notification settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
• Right to Data Portability: You may request that global66 provide your personal data in a commonly used, machine-readable format so that it can be transferred to another service provider.

To exercise any of the above rights, submit a written request to global66 via the contact details in Section 14 of this Policy. We may ask you to verify your identity before processing your request to ensure that personal data is not disclosed to an unauthorised party.

The global66 platform is strictly for adults aged 18 years and over. global66 does not knowingly collect personal data from individuals under the age of 18. We actively use age verification processes during account registration and withdrawal to confirm that all account holders meet the minimum age requirement.

If global66 becomes aware that personal data has been collected from an individual under 18 — whether through a registration error, a fraudulent age declaration, or any other means — that account will be immediately closed, all activity voided, and any collected data deleted in accordance with our data minimisation obligations, except where retention is required for legal or investigation purposes.

The global66 platform may display content from or references to third-party services — such as live game studios, payment processor interfaces, and identity verification portals — that are technically operated by external providers. When you interact with these third-party interfaces, their own privacy policies govern the data they collect independently.

global66 is not responsible for the privacy practices of third-party providers whose services are integrated into the platform. We recommend reviewing the privacy policies of Easypaisa, JazzCash, HBL, and any other payment provider you use to transact with global66, in addition to this Privacy Policy.

global66 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer to Pakistani players. When material changes are made, global66 will notify registered account holders via the mobile number or email address on file at least 7 days before the revised Policy takes effect.

The effective date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of global66 after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

Archived versions of previous Privacy Policies are available on request from the global66 Data Privacy team.

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or wish to raise a privacy complaint, please contact the global66 Data Privacy team through the following channels:

• Live chat: Available 24/7 inside your authenticated global66 account dashboard. This is the fastest channel for urgent privacy queries, with average response times of 2–5 minutes.
• WhatsApp & Telegram: Available 24/7 for English-language privacy and data support queries.
• Support email: [email protected] — mark your message "Attention: Data Privacy Team" for priority routing. Standard response time for privacy matters is within one business day.

global66 will acknowledge all privacy requests within 48 hours and will provide a substantive response within 30 calendar days, or within a shorter period where required by applicable law.