6666j Privacy Policy

1. Introduction

6666j is committed to safeguarding the privacy and personal data of every Member who registers and plays on our Platform. We operate primarily for players based in Indonesia, and we understand that the trust of our Members — especially regarding the handling of sensitive financial and identity information — is the foundation of our business.

This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. "Personal data" means any information that identifies you or could reasonably be used to identify you, including your name, contact details, Indonesian national identity number (NIK), financial account information, device identifiers, and behavioral data generated through your use of the Platform.

We encourage you to read this Policy carefully and in full. It is designed to be transparent and readable, written in clear English so that you can make an informed decision about sharing your data with us.

2. Data Controller

2.1 The data controller responsible for the processing of your personal data in connection with the Platform is 6666j, the operator of https://6666j.pro. As data controller, 6666j determines the purposes and means by which your personal data is processed.

2.2 Where 6666j engages third-party service providers (such as KYC verification partners, payment processors, and game content studios) to process personal data on its behalf, those providers act as data processors under 6666j's instruction and are bound by contractual obligations that meet internationally recognized data protection standards.

2.3 If you have any questions about the identity of the data controller or wish to exercise a data right, please contact us using the details in Section 16 of this Policy.

3. Data We Collect

Depending on how you interact with the Platform, we may collect the following categories of personal data:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify that you are 21 years of age or older).
• Indonesian National Identity Card number (NIK) or passport number, submitted during KYC verification.
• Residential address in Indonesia (city, province — e.g., Jakarta, Surabaya, Bandung, Bali, Medan).
• Mobile phone number and email address used to register your Account.

3.2 Financial Data

• Bank account details for deposit and withdrawal — including the account holder name, bank name (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata), and account number.
• E-wallet identifiers for payment methods including OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method references (in IDR).
• Bonus credit history and wagering activity for the purpose of bonus integrity monitoring.

3.3 Account & Gameplay Data

• Username, hashed password, and Account registration date.
• Game session records: games played, wager amounts, win/loss outcomes, session durations, and timestamps (all recorded in WIB, UTC+7).
• Responsible gaming tool settings: deposit limits, session time limits, cooling-off periods, and self-exclusion status.
• Customer support interactions: chat transcripts, email correspondence, and any complaints or dispute records.

3.4 Technical & Device Data

• IP address at the time of registration, login, and key account events.
• Device type, operating system, and browser version.
• Device fingerprint data used for fraud detection and multi-account identification.
• Geolocation data derived from IP address (country and city level only — we do not use GPS-level location tracking).
• Session and activity logs for security monitoring and debugging.

3.5 KYC Verification Documents

• Scanned or photographed copies of government-issued identity documents (KTP or Indonesian passport).
• Proof-of-payment-method documents (e.g., screenshot of bank app showing account holder name).
• Selfie verification images submitted to confirm identity document ownership.
• Source-of-funds documentation, where requested under enhanced due diligence procedures.

4. How We Collect Data

We collect your personal data through the following means:

• Direct submission: Data you provide when registering an Account, completing KYC, making a deposit or withdrawal request, contacting customer support, or participating in promotions.
• Automated collection: Data collected automatically when you visit or use the Platform, including IP addresses, device identifiers, cookies, and session logs (see Section 9 on Cookies).
• Third-party providers: Identity verification data received from our KYC partner when processing your document submission; transaction confirmation data from payment processors; and fraud-signal data from our security partners.
• Game providers: Game session records and round outcomes provided by our certified game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) to populate your Account history and settle wagers correctly.

5. Purpose & Legal Basis for Processing

The table below summarizes the primary purposes for which we process your personal data, together with the legal basis that justifies each processing activity:

6. Data Sharing

6.1 Service Providers. We share personal data with trusted third-party service providers who process data on our behalf as data processors. These include: identity verification and KYC platform providers; payment processing gateways that facilitate transfers via BCA, BRI, BNI, Mandiri, and e-wallets such as OVO, DANA, and GoPay; certified RNG testing laboratories; and cloud hosting and cybersecurity infrastructure providers. All such providers are bound by data processing agreements that prohibit them from using your data for any purpose beyond the specific service they provide to 6666j.

6.2 Game Content Studios. When you play a game on the Platform, game session data (wager amounts, outcomes, timestamps) is shared with the relevant game studio (e.g., Pragmatic Play, Evolution Gaming, Spribe) to the extent necessary to run the game, settle the round, and provide RTP audit trails. Game studios do not receive your full identity or financial data.

6.3 Legal and Regulatory Disclosure. We may disclose personal data to law enforcement authorities, regulatory bodies, or courts where required by applicable law or where we have a good-faith belief that such disclosure is necessary to protect the rights, property, or safety of 6666j, our Members, or the public.

6.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of 6666j's business, personal data may be transferred to the acquiring entity, subject to that entity assuming the same privacy obligations as set out in this Policy. You will be notified of any such transfer by email prior to its completion.

6.5 No Sale of Personal Data. 6666j does not sell, rent, or license your personal data to unaffiliated third parties for their own marketing or commercial purposes. Full stop.

7. International Data Transfers

7.1 6666j's infrastructure and some of its service providers are located outside Indonesia. Your personal data may therefore be transferred to, and stored or processed in, countries other than Indonesia — including countries where data protection laws may differ from those in Indonesia.

7.2 Wherever your data is transferred internationally, 6666j implements appropriate safeguards to ensure that it continues to receive a level of protection consistent with this Privacy Policy and with internationally recognized data protection standards. These safeguards include contractual data transfer clauses binding the recipient to treat your data in accordance with applicable standards.

7.3 By registering an Account and using the Platform, you acknowledge that your personal data may be transferred internationally in accordance with this Section.

8. Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following considerations:

• Active Account data: Retained for the lifetime of your Account plus a minimum of five (5) years following Account closure, to satisfy anti-money-laundering record-keeping obligations and to resolve any retrospective disputes.
• KYC documents: Retained for a minimum of five (5) years from the date of submission or from the date of Account closure, whichever is later, in accordance with applicable regulatory requirements.
• Transaction records: Retained for a minimum of five (5) years from the transaction date.
• Customer support records: Retained for two (2) years from the date of the interaction, unless the record relates to an ongoing dispute, complaint, or legal matter.
• Marketing preferences: Retained until you withdraw your consent or unsubscribe. Upon unsubscription, we retain a minimal suppression record to ensure we do not re-add you to marketing lists inadvertently.
• Technical logs: Retained for ninety (90) days for real-time security monitoring; aggregated and anonymized data may be retained indefinitely for statistical analysis.

9. Cookies & Tracking Technologies

9.1 6666j uses cookies and similar tracking technologies (including local storage and session storage) to operate and improve the Platform. The table below describes the categories of cookies we use:

9.2 You can manage or delete cookies through your browser settings. Most modern browsers allow you to block third-party cookies, clear stored cookies on exit, or prompt you before accepting cookies. Note that disabling strictly necessary cookies will prevent you from logging in to the Platform.

9.3 6666j does not use advertising or behavioral retargeting cookies. We do not participate in cross-site tracking networks for commercial profiling purposes.

10. Security Measures

10.1 6666j invests substantially in technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our security infrastructure includes:

• TLS 1.3 encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data fields stored at rest, including passwords (hashed with bcrypt), payment account details, and KYC document images.
• Multi-factor authentication (MFA) available for all Member Accounts and mandatory for all internal staff access to systems holding personal data.
• Role-based access controls (RBAC) ensuring that staff members access only the personal data necessary for their specific job functions.
• Intrusion detection and prevention systems (IDPS) monitoring network traffic in real time for anomalous activity.
• Regular penetration testing conducted by independent third-party security firms on at least an annual basis.
• Secure data center facilities with physical access controls, CCTV, and 24/7 on-site security.

10.2 Data Breach Response. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, 6666j will notify affected Members without undue delay — and in any event within 72 hours of becoming aware of the breach — providing details of the nature of the breach, the data affected, and the steps we are taking to mitigate harm.

11. Your Data Rights

As a Member, you have the following rights with respect to the personal data that 6666j holds about you. To exercise any of these rights, contact our privacy team using the details in Section 16. We will respond within 30 days of receiving your request, free of charge.

• Right of Access: You have the right to request a copy of the personal data we hold about you, together with information about how it is processed. We will provide this in a structured, commonly used format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For identity data, correction may require re-submission of supporting KYC documents.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing is unlawful. Note that we may be unable to comply fully where retention is required by a legal obligation (e.g., AML record-keeping).
• Right to Restriction of Processing: You may request that we restrict processing of your data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a machine-readable format and to transmit it to another controller.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling, at any time. You may also withdraw consent for marketing communications at any time via the unsubscribe link in any marketing email or by contacting support.
• Rights Related to Automated Decision-Making: 6666j uses automated systems for fraud detection and bonus abuse monitoring. Where an automated decision produces a significant effect on your Account (e.g., Account suspension), you have the right to request human review of that decision.

12. Minors & Age Verification

12.1 The Platform is strictly intended for adults aged 21 and over. We do not knowingly collect personal data from individuals under the age of 21. During registration, every prospective Member is required to confirm that they are at least 21 years of age, and this declaration is verified by our KYC process prior to the first withdrawal.

12.2 If 6666j becomes aware that personal data has been collected from an individual under the age of 21 — for example, through a false declaration during registration — the Account will be immediately suspended, all Bonus Credits forfeited, any winnings voided, and any deposited funds returned to the source payment method. The personal data of the minor will be deleted as promptly as our legal obligations permit.

12.3 Parents and guardians who believe that a minor has registered an Account on the Platform should contact our support team immediately via live chat or by email at the address listed in Section 16.

13. Marketing Communications

13.1 6666j sends promotional communications — including bonus offers, seasonal promotions (such as Idul Fitri, Ramadhan, and Indonesian Independence Day campaigns), and new feature announcements — only to Members who have explicitly opted in to receive such communications during registration or via their Account settings.

13.2 You may withdraw your consent to marketing communications at any time by: (a) clicking the unsubscribe link included in every marketing email; (b) updating your communication preferences in your Account settings; or (c) contacting our support team directly. Unsubscription requests are processed within 48 hours, after which you will receive no further marketing emails. Note that you will continue to receive transactional emails (e.g., deposit confirmations, withdrawal notifications, security alerts) regardless of your marketing preference, as these are necessary for account management.

13.3 We do not use third-party advertising networks or social media pixel tracking to deliver retargeted advertisements to you on external websites based on your 6666j activity.

14. Third-Party Links & Services

The Platform may reference third-party services such as payment providers (BCA, OVO, DANA) or game studios, but does not contain outbound hyperlinks to external websites. To the extent that any third-party service or product is involved in delivering the Platform's features (e.g., payment gateway interfaces embedded within the deposit flow), those third parties operate under their own privacy policies. 6666j is not responsible for the privacy practices of third-party services. We encourage you to review the privacy notices of any payment provider or e-wallet service you use in connection with the Platform.

15. Amendments to This Privacy Policy

15.1 6666j reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform features. When we make material changes — meaning changes that affect your rights or the way we process your personal data in a meaningful way — we will notify you by email to the address registered to your Account at least 14 days before the amended Policy takes effect.

15.2 Non-material changes (such as typographical corrections, clarifications that do not alter your rights, or updates to contact details) take effect immediately upon publication of the revised Policy on the Platform.

15.3 Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. The current version is always accessible at https://6666j.pro/privacy-policy. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

16. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a privacy complaint, please contact the 6666j privacy team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly through the Platform. This is the fastest way to reach us for urgent privacy matters.
• Email: [email protected] (plain text — not a clickable link). Privacy requests are typically acknowledged within 24 hours and resolved within 30 days.

When submitting a data rights request or privacy complaint, please include your registered username, a description of your request or complaint, and — for identity verification purposes — the mobile phone number or email address associated with your Account. We will not process data rights requests that we cannot verify as originating from the Account holder.

If you are dissatisfied with our handling of your privacy complaint after raising it with us directly, you have the right to escalate the matter to the relevant data protection authority or, where applicable, to seek resolution through the dispute mechanism described in our Terms & Conditions.