LEGAL REFERENCE

How bb666 Handles Your Personal Data

At bb666, we want you to know exactly what happens to your information from the moment you open an account. This policy explains what we collect, why we...

Transparent Data UseAccount Data ControlPakistan Region CoverageSecure Storage PracticesClear Opt-Out Paths
Explore the Lobby Read FAQ
bb666 How bb666 Handles Your Personal Data

What We Collect and Why It Matters

When you register with bb666, we collect the information needed to operate your account: your name, contact details, date of birth for age verification, and payment identifiers tied to JazzCash, Easypaisa, SadaPay, or Raast transactions. We log session activity and device data to protect your account from unauthorised access and to meet the requirements of the jurisdictions in which we operate. All

payment data passed through JazzCash and Easypaisa channels is handled under their respective privacy frameworks in addition to ours. We do not sell your personal data to third parties. We retain records only as long as required by applicable regulation or for the duration your account remains active in supported regions, whichever is longer. You may request a copy of your data

or ask us to erase it where local law permits.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

REACH OUR PRIVACY TEAM

How to Contact Us About Your Data

If you have a question about this policy, want to exercise a data right, or need to report a concern, our privacy team is reachable through the channels below. We aim to respond to all data-related requests within five working days.

Team online

Email Privacy Team

Send a written request to our dedicated privacy address and we will confirm receipt within 24 hours and provide a full response within five working days for any account in a supported region.

Live Chat Support

Open the chat widget inside your bb666 account dashboard to speak with a support agent who can route your data query to the privacy team immediately during staffed hours.

Account Settings Panel

Many data preferences — including marketing consent and data-download requests — can be managed directly inside your account settings without needing to contact us at all.

POLICY TRUST SIGNALS

Why You Can Rely on This Policy

Our privacy commitments are not marketing copy. They are operational processes reviewed regularly to stay aligned with applicable data-protection standards and the needs of our Pakistan account base.

Regular Policy Audits

We review this privacy policy at least once per year and after any significant change to our data practices, publishing...

Encryption at Rest

Personal data stored on bb666 servers is encrypted at rest using current industry standards, so that even in the event...

Transport Layer Security

All data transmitted between your device and bb666 — including JazzCash and Easypaisa payment flows — travels over TLS-encrypted connections...

Access Controls

Only staff with a documented operational need can access identifiable account data, and all access events are logged and available...

No Third-Party Data Sales

We do not sell, lease, or broker your personal information to advertisers, data aggregators, or any other third party outside...

Pakistan Region Alignment

Our data-handling practices are shaped around the requirements of Pakistani account holders, including how local payment rail identifiers such as...

How This Policy Aligns Across Our Site

Our privacy commitments apply uniformly across all pages and account types on bb666. The table below shows how this policy connects to related areas of our platform so...

Account Registration
Data collected at sign-up is governed by this policy from the first field you fill in.
Payment Processing
JazzCash, Easypaisa, SadaPay, and Raast transactions follow the payment-data terms described in the Details section above.
Login and Sessions
Session tokens and device data collected at login are subject to the retention limits stated in this policy.
Customer Support
Records of your support conversations are stored and handled under the same data-retention rules as account data.
Marketing Preferences
Email and notification consent is recorded against your account and can be withdrawn at any time from the settings panel.
Third-Party Integrations
Where we use third-party tools to operate the platform, those providers are contractually bound to handle your data consistently with this policy.
Account Closure
When you close your account, we follow the deletion and retention schedule set out in this policy for each data category.
POLICY LAYOUT FEATURES

Key Elements of Our Privacy Framework

Our privacy framework is built around clear accountability and your ability to act on your rights without friction. Here is what makes our approach straightforward to navigate.

Plain-Language Writing This policy is written in clear English without legal jargon...
Layered Data Categories We separate account data, payment data, and behavioural data into...
Downloadable Data Copy You can request a structured copy of your personal data...
Erasure Request Path If you want certain data removed, your account settings panel...
Consent Withdrawal Marketing and analytics consent can be withdrawn independently — switching...
Effective Date Tracking Every published version of this policy carries an effective date...

Answers to Common Privacy Questions

We collect your name, contact details, date of birth, and the payment identifiers associated with the JazzCash, Easypaisa, SadaPay, or Raast account you link. We also log device and session data to secure your account.

We do not sell your data. We share it only with service providers who operate parts of our platform under contractual data-protection terms, and with regulators where the law in supported regions requires us to do so.

Retention periods depend on the data category and applicable regulation. Payment records may be kept longer than account profile data. We detail each category's retention window in the policy and apply it consistently.

Yes. Log into your account, go to the settings panel, and submit a data-download request. We will prepare a structured copy and notify you when it is ready, within the timeframe applicable in your region.

Use the erasure request path in your account settings. Once submitted, our privacy team reviews the request, applies any mandatory retention holds required by law, and confirms what has been removed and what must be kept.

Payment identifiers are encrypted at rest and transmitted over TLS-secured connections. Access to payment records is restricted to authorised staff only, and all access events are logged for internal audit review.

Contact our privacy team immediately via the email address or live chat channel listed in the support section of this policy. We will open an investigation and respond with findings within five working days.