sbj66 Privacy Policy

This Privacy Policy ("Policy") describes how sbj66 ("sbj66", "we", "us", "our") collects, uses, stores, and discloses personal data obtained from individuals ("you", "Player", "User") who access or use the sbj66 Platform located at sbj66.today.

sbj66 is committed to protecting the privacy of all players on its Platform, including the large and valued community of Pakistani players accessing sbj66 from Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and across Pakistan. We process personal data only where we have a legitimate and lawful basis for doing so, and we handle all data with care, discretion, and respect for your rights.

By creating an account with sbj66 or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy forms part of the sbj66 Terms & Conditions, which are incorporated herein by reference. If you disagree with this Policy, please discontinue use of the sbj66 Platform.

For the purposes of applicable data protection law, sbj66 acts as the data controller in respect of personal data collected from Players through the Platform. As data controller, sbj66 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

sbj66 operates under an international gaming licence that imposes specific data handling, retention, and security obligations. These obligations shape how sbj66 processes personal data and in some cases require sbj66 to retain personal data for defined minimum periods, even where a Player requests deletion.

If you have any questions or concerns regarding this Policy or sbj66's data practices, please contact our Data Protection team using the contact details provided in Section 15 of this Policy.

sbj66 collects personal data in three principal ways: directly from you when you interact with the Platform, automatically as you use the Platform, and from third parties in limited circumstances described below.

sbj66 uses the personal data described in Section 3 for the following purposes:

sbj66 does not use automated decision-making that produces legal or similarly significant effects on Players, except where required by anti-money laundering regulations or fraud prevention systems. Where automated decisions of this nature are made, Players have the right to request human review.

sbj66 processes personal data only where one of the following lawful bases applies:

• Contract Performance: Processing is necessary to perform the contract between sbj66 and the Player — i.e., to operate the Platform, manage accounts, and process transactions.
• Legal Obligation: Processing is required to comply with applicable laws, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and licensing conditions imposed by sbj66's international gaming regulator.
• Legitimate Interest: Processing is necessary for sbj66's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: Where sbj66 relies on consent — for example, to send marketing emails — you have provided freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time by updating your communication preferences in your Account settings or by contacting sbj66 support.

sbj66 does not sell, rent, or trade your personal data. sbj66 may share personal data with third parties only in the following circumstances:

sbj66 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device when you visit a website. sbj66 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in to your sbj66 Account. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Allow sbj66 to remember your preferences — such as your preferred language, currency display, and responsible gaming settings — to personalise your experience.
• Analytical Cookies: Used to collect aggregated, anonymised information about how Players use the Platform. This helps sbj66 identify usage patterns, fix problems, and improve the overall experience. No individual player is identifiable from analytical data.
• Security Cookies: Used for fraud detection and prevention purposes, including identifying unusual login behaviour or session anomalies.

You may control cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to use the sbj66 Platform. Disabling other categories of cookies will not prevent access to the Platform but may affect the quality of your experience.

sbj66 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by applicable law and sbj66's licensing obligations:

• Account and identity data: Retained for a minimum of five (5) years following account closure or the last transaction, in compliance with anti-money laundering regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• KYC documentation: Retained for a minimum of five (5) years following account closure or the most recent KYC refresh.
• Support communications: Retained for three (3) years from the date of the communication, unless a longer period is required in connection with an ongoing dispute or regulatory matter.
• Responsible gaming records: Self-exclusion records and responsible gaming settings are retained for a minimum of five (5) years to prevent circumvention of exclusion periods.
• Marketing preferences: Retained until you withdraw consent or request deletion, subject to suppression list requirements.

Upon expiry of the applicable retention period, sbj66 will securely delete or anonymise your personal data. Where anonymisation is applied, the resulting data can no longer be attributed to you and is no longer considered personal data.

sbj66 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and sbj66's servers.
• Encryption of sensitive personal data and financial information at rest within sbj66's storage systems.
• Access controls that limit employee access to personal data on a strict need-to-know basis, with all access logged and audited.
• Two-factor authentication (2FA) requirements for all sbj66 staff with access to Player data systems.
• Regular penetration testing and security assessments by independent third-party security firms.
• Segregation of Player funds from operational accounts, ensuring that account balances are ring-fenced from sbj66's business finances.
• Incident response procedures that include prompt notification of affected Players in the event of a data breach that poses a risk to your rights and freedoms.

While sbj66 takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is entirely secure. You are responsible for maintaining the confidentiality of your sbj66 login credentials and for notifying sbj66 support immediately if you suspect any unauthorised access to your Account.

Subject to applicable data protection law and sbj66's legal retention obligations, you have the following rights in respect of your personal data held by sbj66:

To exercise any of the above rights, please contact sbj66's Data Protection team using the details in Section 15. sbj66 will respond to all verified requests within 30 calendar days. In complex cases, sbj66 may extend this period by a further 30 days and will notify you accordingly. There is no charge for exercising your data rights.

The sbj66 Platform is strictly intended for adults aged 21 years and over. sbj66 does not knowingly collect personal data from individuals under the age of 21. The Platform employs age verification mechanisms during registration, and sbj66 reserves the right to request proof of age at any point.

If sbj66 becomes aware that it has inadvertently collected personal data from an individual under the age of 21, sbj66 will take immediate steps to delete that data and close the associated account. If you believe that sbj66 may hold data relating to a minor, please contact support immediately using the details in Section 15.

sbj66 operates as an internationally licensed platform. As a result, personal data collected on the Platform may be processed or stored in countries outside Pakistan. sbj66 takes appropriate steps to ensure that any international transfer of personal data is subject to adequate safeguards, including contractual protections with receiving parties that require them to apply data protection standards equivalent to those described in this Policy.

Payment processing involving JazzCash and EasyPaisa is handled through their respective local infrastructure in Pakistan. Bank transfers involving HBL, UBL, and Meezan Bank are processed within Pakistan's domestic banking network. Card payment processing may involve data transfer to international card network infrastructure.

The sbj66 Platform does not contain links to third-party websites, and sbj66 does not display advertising for external services. sbj66 game titles are provided by third-party software providers who operate under their own privacy policies. When you launch a game on sbj66, the game runs within the sbj66 environment and your gameplay data is captured and processed by sbj66 in accordance with this Policy.

sbj66 is not responsible for the privacy practices of external websites, should you navigate away from sbj66.today. Players are encouraged to review the privacy policies of any third-party website they visit.

sbj66 reserves the right to amend this Privacy Policy from time to time to reflect changes in legal requirements, operational practices, or Platform features. Where amendments are material, sbj66 will provide reasonable advance notice via email to the registered email address on your Account and/or via a prominent notice on the Platform prior to the amended Policy taking effect.

Continued use of the sbj66 Platform following the effective date of an amended Privacy Policy constitutes your acceptance of the changes. If you do not agree with any amendment, you may request voluntary Account closure by contacting sbj66 support.

sbj66 recommends that you review this Privacy Policy periodically. The date of the most recent revision is displayed at the top of this document.

If you have any questions, concerns, or complaints regarding this Privacy Policy or sbj66's handling of your personal data, or if you wish to exercise any of your data rights described in Section 10, please contact sbj66's Data Protection team:

• Email: [email protected] (plain text — not a clickable link) — Please use the subject line "Data Protection Enquiry" to ensure your message is routed to the appropriate team.
• Live Chat: Available 24/7 through the sbj66 Platform. Request to speak with a Data Protection specialist for privacy-related matters.
• Response Time: sbj66 aims to acknowledge all data protection enquiries within 72 hours and to provide a substantive response within 30 calendar days.

For urgent matters relating to suspected unauthorised access to your Account or data breaches, please use the live chat facility or email [email protected] with "URGENT — Security Incident" in the subject line.