How b66 Handles Your Personal Information
At b66, your privacy is a core part of how we operate. This policy explains exactly what data we collect when you open an account, how we use...
What This Privacy Policy Covers and Why
This policy applies to every interaction you have with b66, including account registration, deposits via JazzCash, Easypaisa, SadaPay, or Raast, gameplay activity, and any communication you send our support team. We collect your name, contact details, payment-method identifiers, and session data only to operate your account, process transactions, and meet our legal obligations in supported regions where local law permits. We do
not sell your personal information to third parties. Data shared with payment processors like JazzCash and Easypaisa is limited strictly to what those processors need to clear your transaction. All stored records are encrypted at rest, and access is restricted to authorised personnel only.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Reach Us About Your Privacy Rights
If you have a question about this policy, want to request a copy of your data, or need to correct information on your account, our team is available through the channels below. We aim to respond to all data-related requests within 72 hours of receipt.
Live Chat
Start a live chat session directly from your b66 account dashboard. Our agents handle data queries, account corrections, and deletion requests around the clock, seven days a week.
Email Support
Send your privacy request to our dedicated data team by email. Include your registered account name so we can locate your records and respond accurately within the stated timeframe.
Help Centre
Our help centre carries detailed articles on data rights, how to download your account history, and what to expect when you submit a deletion or correction request.
Six Pillars Behind Our Privacy Commitment
We built our data practices around a single principle: you should always know what we hold and why. Every measure below is active on your account from the moment you register with...
TLS Encryption in Transit
Every byte of data moving between your device and b66 servers travels over TLS 1.3. This covers account logins, payment submissions via JazzCash or Easypaisa, and all chat communications with our support team.
Encrypted Storage at Rest
Your personal records, payment-method tokens, and session logs are encrypted in our databases. Encryption keys are rotated on a scheduled cycle and managed separately from the data they protect.
Access Controls
Only personnel with a specific operational need can query your personal data. Every internal access is logged with a timestamp, role identifier, and reason so we can audit who looked at what and when.
Payment Data Minimisation
When you deposit through SadaPay or Raast, we store only the tokenised reference returned by the payment rail — never your full account credentials or PIN. Raw payment details never touch our servers.
Regular Policy Reviews
We review this privacy policy at least once per calendar quarter. When material changes occur — such as a new data category or an updated retention period — we notify you by email before the change takes effect.
Data Retention Limits
We keep your account data for as long as your account is active and for the period required under applicable law in supported regions. Once that window closes, records are permanently deleted from our systems.
How This Policy Sits Alongside Our Other Terms
Our privacy policy does not stand alone — it connects with every other document governing your b66 account. The table below shows how each related document relates to...
What You Find Inside This Privacy Policy
We structured this document so you can locate the section you need without reading the full text. Each part addresses a specific aspect of how b66...
Data Collection Summary
A concise list of every category of personal data we collect, grouped by the activity that generates it — account creation, deposits, gameplay, and support contact — so nothing is hidden in dense paragraphs.
Legal Basis Statements
For each data category we name the legal basis under which we process it: contract performance, legal obligation, or legitimate interest. You will never find a vague catch-all justification for how we use your information.
Your Rights Section
A dedicated section outlines your right to access, correct, export, or request deletion of your data. It also explains how to withdraw consent where consent is the stated legal basis for processing.
Third-Party Disclosure Table
We list every category of third party that receives your data — payment processors, fraud-detection services, and infrastructure providers — alongside the specific data each one receives and why.
Retention Schedule
A clear schedule maps each data category to its retention period, so you know exactly how long we hold transaction logs, identity documents, or chat transcripts before permanent deletion.
Change Notification Process
We explain our process for alerting you to policy updates before they take effect, including how we contact you, how much notice we give, and what happens if you disagree with a material change.