663bat is committed to protecting your personal data and being fully transparent about how we collect, use and safeguard your information. This Privacy Policy explains your rights and our obligations clearly and in plain English.
This Privacy Policy ("Policy") sets out how 663bat ("663bat", "we", "us", "our", "the Platform") collects, uses, stores, shares and protects the personal data of individuals ("Users", "you", "your") who access or use the 663bat platform at https://663bat.cam and any associated services.
663bat is an English-language online betting and casino information platform designed for Pakistani users. We understand that our users — whether in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar — place significant trust in us when they share their personal information. We take that trust seriously and are committed to handling all personal data with transparency, care and in accordance with our obligations under applicable data protection law.
By accessing the Platform or creating an account, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection, processing and use of your personal data as described herein. If you do not accept this Policy, you should cease using the Platform immediately.
This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated herein by reference. Together these documents form the complete legal framework governing your use of 663bat.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
| Term | Meaning |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person, including name, email address, CNIC number, IP address, payment details and device identifiers. |
| Processing | Any operation performed on personal data, including collection, storage, use, disclosure, transmission, alteration or deletion. |
| Data Controller | The entity that determines the purposes and means of processing personal data — in this context, 663bat. |
| Data Processor | A third party that processes personal data on behalf of the Data Controller under a formal data processing agreement. |
| Consent | Freely given, specific, informed and unambiguous indication of the User's agreement to processing of their personal data for a defined purpose. |
| KYC Data | Identity and verification documents collected during the Know Your Customer process, including CNIC, passport copies, proof of address and liveness check results. |
| Cookie | A small text file placed on a User's device by the Platform to store session information, preferences or analytics data. |
663bat acts as the Data Controller in respect of personal data collected through the Platform. As Data Controller, 663bat determines the purposes for which and the means by which personal data is processed.
663bat does not claim to be licensed or regulated by any Pakistani government authority, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan, or any provincial authority. Data protection practices described in this Policy are implemented pursuant to the Operator's obligations under the data protection frameworks applicable in the jurisdiction(s) in which 663bat is licensed to operate.
For enquiries specifically relating to the exercise of data subject rights or data protection concerns, please contact us at the details provided in Section 17 of this Policy. We aim to respond to all data-related requests within a reasonable timeframe.
663bat collects personal data that is necessary to deliver the Platform's services, comply with legal obligations and improve the user experience. The categories of data we may collect are set out below.
663bat collects personal data through the following means:
We do not purchase personal data from third-party data brokers or any other commercial data sources.
663bat processes personal data for the specific purposes described in the table below. We do not process personal data for any purpose beyond what is necessary and proportionate to the stated purpose.
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration data, communications data |
| Identity verification (KYC) and age verification | KYC data, registration data |
| Processing deposits and withdrawals | Financial data, KYC data, registration data |
| Anti-money laundering (AML) and fraud prevention | Financial data, KYC data, technical data |
| Customer support and dispute resolution | Communications data, account data, transaction data |
| Responsible gambling compliance | Responsible gambling data, account data, transaction data |
| Platform security and fraud detection | Technical data, account data, financial data |
| Legal and regulatory compliance | All categories as required by applicable law |
| Platform analytics and performance improvement | Technical data, anonymised usage data |
| Marketing communications (with consent) | Registration data, communications preferences |
663bat does not use personal data for automated decision-making that produces legal or similarly significant effects, except where such processing is required for AML/fraud prevention under applicable law.
663bat processes personal data on one or more of the following legal bases, depending on the purpose of processing:
Processing is necessary for the performance of the contract between 663bat and the User — including account creation, payment processing and service delivery. Without this processing, 663bat cannot provide the Platform's core services.
Processing is required for compliance with legal obligations applicable to 663bat, including KYC and AML obligations, record-keeping requirements and disclosures required by competent regulatory authorities.
Processing is carried out in furtherance of 663bat's legitimate interests — including fraud prevention, platform security, responsible gambling monitoring, and analytics to improve service quality — where these interests are not overridden by the User's fundamental rights and freedoms.
Where processing is based on consent — particularly for marketing communications — 663bat will obtain explicit consent before processing and will provide a straightforward mechanism for withdrawing that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.
663bat does not sell personal data to any third party. We may share personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
KYC data is shared with approved identity verification service providers for the purposes of age verification, identity confirmation and fraud prevention. These providers operate under formal data processing agreements and are prohibited from using your data for any other purpose.
Financial transaction data is shared with payment processing infrastructure providers as required to execute deposits and withdrawals. Transaction references involving familiar Pakistani payment methods — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are handled by the relevant payment infrastructure. These providers do not receive unnecessary personal data beyond what is required to complete the transaction.
663bat may disclose personal data to competent regulatory, law enforcement or governmental authorities where required to do so by applicable law, court order, or regulatory directive. Such disclosures are made only to the extent strictly necessary to comply with the legal obligation.
Technical service providers — including hosting infrastructure, analytics platforms, customer support tools and security services — may process limited personal data as Data Processors under formal contractual arrangements with 663bat. These providers are not permitted to use your data for their own purposes.
663bat never sells, rents or trades personal data with third-party data brokers, advertising networks or any commercial data marketplaces. Your personal data is not a commercial product.
663bat retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following general retention principles apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 663bat's data destruction procedures.
663bat implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration or disclosure. These measures include:
All data transmission between your device and the Platform is encrypted using industry-standard TLS/SSL protocols. Passwords are stored in hashed, non-reversible form. Sensitive data at rest is encrypted. Access to personal data within 663bat's systems is restricted on a strict need-to-know basis with role-based access controls.
Staff with access to personal data are subject to confidentiality obligations. Regular security training is conducted. Data processing activities are documented and reviewed periodically.
In the event of a personal data breach that presents a risk to Users' rights and freedoms, 663bat will notify affected Users and, where required by applicable law, the relevant supervisory authority, within the timeframes required by applicable data protection legislation.
While 663bat takes all reasonable technical precautions, no internet-based system is completely impenetrable. You are responsible for keeping your account credentials secure. Never share your password, OTP codes or account access details with anyone — including support staff, who will never ask for your password.
663bat uses cookies and similar tracking technologies to deliver platform functionality, maintain user sessions, and gather anonymised analytics data. The following categories of cookies may be in use:
You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing the Platform, though some features may operate with reduced functionality. Strictly necessary cookies cannot be disabled without preventing core Platform operation.
Subject to applicable data protection law, you have the following rights in respect of your personal data held by 663bat. To exercise any of these rights, please contact us using the details in Section 17.
You have the right to request a copy of the personal data 663bat holds about you, along with information about how it is processed. We will respond to access requests within a reasonable timeframe as required by applicable law.
You have the right to request correction of inaccurate or incomplete personal data held about you. Account details can typically be updated through your account settings, or by submitting a rectification request to support.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or in other circumstances prescribed by applicable law. This right is subject to overriding legal retention obligations.
Where processing is based on consent or contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used machine-readable format, and to request its transfer to another data controller where technically feasible.
You have the right to object to processing based on legitimate interests, including profiling for analytics purposes. You may also object to processing for direct marketing purposes at any time, and we will cease such processing upon receipt of a valid objection.
In certain circumstances — such as where you contest the accuracy of your data or have objected to processing — you have the right to request that we restrict processing of your data pending resolution of the relevant issue.
To exercise any of these rights, please contact us at [email protected] with the subject line "Data Subject Request". We will acknowledge your request promptly and respond within the applicable legal timeframe. Identity verification may be required before we can process your request.
Given the sensitive nature of KYC and identity verification data, the following special provisions apply to the collection and handling of such information by 663bat:
Identity documents — including CNIC copies, passport scans and proof of address — must only be submitted through the Platform's official secure HTTPS verification portal. 663bat will never request identity documents via unsecured messaging services, WhatsApp, standard email or any channel other than the designated secure portal. If you receive such a request through any other channel, it should be treated as suspicious and reported to support immediately.
You must only submit genuine, unaltered identity documents. Submitting cropped, edited, obscured or falsified documents constitutes fraud. 663bat reserves the right to close accounts immediately and report fraudulent document submissions to relevant authorities.
For Pakistani users, CNIC (Computerised National Identity Card) data is treated as a special category of sensitive personal data and is handled with additional care. CNIC data is used solely for the purpose of age and identity verification. It is not shared with any third party for commercial purposes and is retained only for the period required by applicable AML and compliance obligations.
Where liveness checks or facial comparison processes are used as part of KYC, biometric data is processed by an approved third-party identity verification provider under a formal data processing agreement. 663bat does not store raw biometric data beyond what is required to complete the verification process.
663bat is specifically designed for Pakistani users and the following provisions apply in the context of Pakistani data subjects:
If you are accessing 663bat from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar, or any other Pakistani city, the same data protection standards apply uniformly regardless of your location within Pakistan. There is no geographic differentiation in how personal data is handled for domestic Pakistani users.
663bat's Platform is strictly intended for adults aged 18 years or older, or the higher minimum age required by the Operator's licensing jurisdiction. We do not knowingly collect, process or retain personal data relating to individuals under the applicable minimum age.
If we become aware that personal data has been collected from a minor — whether through age misrepresentation during registration or any other means — we will take immediate steps to delete that data and close the associated account. Where the collection of such data implicates any legal reporting obligation, we will comply accordingly.
Parents and guardians who believe that a minor has registered on or used 663bat should contact our support team immediately at the contact details in Section 17.
Being of legal age (18+) does not make gambling lawful in Pakistan. Local laws including the Prevention of Gambling Act, 1977 may restrict or prohibit online gambling participation regardless of age. This is not legal advice — users are responsible for understanding applicable local law.
663bat reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. Material changes to this Policy will be communicated to Users via a prominent notice on the Platform, an email notification to the registered address, or both, with reasonable advance notice where practicable.
The "Last Reviewed" date displayed at the top of this page will be updated each time a material revision is made. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.
If you do not agree to the revised Privacy Policy, you should cease using the Platform and may request account closure. Exercising your right to erasure following a policy change is subject to the overriding legal retention obligations described in Section 9.
We recommend bookmarking this page and reviewing it periodically. All historical versions of the Privacy Policy are available upon written request to our support team.
For any enquiry, concern or request relating to this Privacy Policy — including the exercise of your data subject rights under Section 12 — please contact 663bat through the following official channels:
Available 24/7 directly through the Platform interface. Recommended for urgent queries including suspected unauthorized account access, data breach concerns or immediate account security issues.
For formal data subject requests, please email us at [email protected] with the subject line "Data Subject Request". Include your full name, registered email address and a description of your request. Identity verification will be required.
We aim to acknowledge all data-related requests within 72 hours and to respond substantively within the timeframe required by applicable data protection law. For complex requests, we will notify you if additional time is required and provide a reason for any delay.
Six core principles that underpin how 663bat handles your personal data
663bat does not sell, rent or trade personal data to third-party data brokers, advertising networks or any commercial data marketplace. Your information is used only to deliver our services and meet legal obligations — never as a product.
All data in transit between your device and 663bat is TLS/SSL encrypted. Sensitive data at rest is stored in encrypted form. Access to personal data is restricted by role-based controls. We never ask for your password through any channel.
Access, rectification, erasure, portability, objection and restriction rights are real and exercisable. Submit a data subject request via email and we will respond within the legally required timeframe. No unnecessary barriers.
663bat retains personal data only as long as necessary. Account data, transaction records and KYC documents are deleted or anonymised once retention obligations are fulfilled. We do not hold data indefinitely without justification.
For Pakistani users, CNIC data is treated as sensitive personal information with elevated security controls. It is used solely for KYC compliance — never shared for commercial purposes — and is submitted only through the official secure HTTPS verification portal.
All privacy communications with Pakistani users are in clear, professional English. Urdu-language support is available via Live Chat for users who prefer it. We never use deliberately complex language to obscure our data practices.
Now that you understand how 663bat handles your data, explore cricket betting markets, live casino guides and responsible gambling information — all tailored for Pakistani users.
🔞 18+ only, or the higher minimum required by the operator/license jurisdiction. Local laws in Pakistan may restrict gambling. Play responsibly.