dua66 Privacy Policy – How We Protect Your Personal Data

dua66 is an online casino and sports betting platform operating at dua66.ws, built specifically for players in Pakistan. In the context of data protection, dua66 is the data controller — meaning we are the entity responsible for determining how and why your personal data is collected and processed when you use our platform.

If you have any questions about how dua66 handles your personal data, or if you wish to exercise any of your privacy rights, you can contact us directly:

This Privacy Policy covers data collected through the dua66 website, mobile browser experience, and all associated services and games offered through the platform. It does not cover the privacy practices of any third-party services that dua66 integrates with, such as payment processors. Those services have their own privacy policies which govern their handling of your data.

dua66 collects personal data from players in several ways — data you provide directly when registering and using your account, data generated automatically as you use the platform, and data provided by third-party service providers such as payment processors and identity verification services. Below is a breakdown of the categories of data we collect:

dua66 does not collect or store full payment card numbers, CVV codes, or similar sensitive payment credentials. When you make a payment via Easypaisa, JazzCash, or card, those details are handled directly by the relevant payment provider. dua66 receives only a transaction confirmation and reference number.

Every piece of personal data dua66 collects is collected for a specific, legitimate purpose. The following explains how your data is used across the different areas of our platform:

• Account operation: Your name, mobile number, and account credentials are used to create, maintain, and secure your dua66 account. Without this data, we cannot provide you with an account.
• Transaction processing: Deposit and withdrawal data is used to process your payments accurately and to maintain the financial records associated with your account. All PKR transactions on dua66 require transaction data to be recorded for both operational and compliance purposes.
• Identity verification: CNIC and related verification documents are used to confirm your identity as required, particularly before processing significant withdrawals or where fraud prevention procedures require verification. This also ensures no one is accessing your account without authorisation.
• Customer support: When you contact dua66 support, the details you provide and the record of our interaction are used to handle your query. These records may be retained to provide context for future interactions and for quality assurance purposes.
• Fraud prevention and security: Device data, IP address information, and gaming patterns are monitored to detect unusual activity that may indicate fraud, account takeover, bonus abuse, or other breaches of our Terms and Conditions. This protects all players on the dua66 platform.
• Platform improvement: Anonymised and aggregated usage data helps dua66 understand how the platform is being used, which features are most valued, where players encounter friction, and how we can improve the experience. This analysis does not identify individual players.
• Responsible gaming: Gaming activity data — session times, bet frequencies, deposit patterns — is monitored to identify players who may be developing harmful gambling patterns. This allows dua66 to proactively reach out and offer support where appropriate, in line with our responsible gaming commitments.
• Legal compliance: Certain data must be retained to comply with applicable laws and regulations, including anti-money laundering (AML) obligations and financial record-keeping requirements.
• Communications: Your contact details are used to send you account-related communications such as transaction confirmations, security alerts, and responses to your support queries.

dua66 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil the agreement between you and dua66 — including operating your account, processing deposits and withdrawals, and providing gaming services.
• Legitimate interests: Processing carried out for dua66's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided these interests do not override your fundamental rights.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including financial record retention and anti-money laundering procedures.
• Consent: Where we process data based on your consent — such as for certain optional communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

dua66 shares your personal data only where it is necessary to deliver the services you've signed up for, where we are required to do so by law, or where you have given us permission to do so. We do not sell your personal data to advertisers or unrelated third parties under any circumstances.

The categories of third parties with whom dua66 may share your data are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer partners, and card payment processors receive the transaction data necessary to process your deposits and withdrawals. They handle this data under their own privacy policies and security standards.
• Identity verification providers: Where dua66 uses third-party services to assist with CNIC verification or anti-fraud checks, these providers receive the data necessary to perform those checks and are contractually bound to use it only for that purpose.
• Fraud prevention and security partners: We work with specialist providers to monitor for unusual activity, bot usage, and potential fraud. These providers process device and behavioural data to assist us in keeping the platform secure.
• Analytics providers: Anonymised and aggregated usage data may be shared with analytics providers to help us understand platform performance. This data does not identify individual players.
• Legal authorities: dua66 will share data with government bodies, law enforcement, or regulatory authorities where required by applicable law or by a lawful legal order. We will not share more than is required and will notify you where permitted by law.

dua66 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your logged-in session, and collect analytical data that helps us improve the experience. Below is an overview of the types of cookies used on dua66:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings and game display preferences. These make the dua66 experience smoother and more personalised without requiring you to re-enter preferences each visit.
• Analytics cookies: Collect anonymised data about how players use the dua66 platform — which pages are visited most, where players navigate from, session duration, and general usage patterns. This data helps us identify what's working and what needs improvement.
• Security cookies: Help dua66 identify and block suspicious activity, automated bots, and potential fraud attempts. These are essential to platform security.

Your browser settings allow you to manage cookie preferences, including blocking or deleting cookies. Note that disabling essential cookies will prevent you from using core dua66 functionality including logging in. Analytics and functional cookies can generally be disabled without affecting your ability to use the platform, though some personalisation features may not work correctly.

dua66 takes data security seriously. We implement a range of technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• Encryption in transit: All data transmitted between your browser and the dua66 platform is encrypted using TLS (Transport Layer Security). This means that data you send to dua66 — including login credentials and payment information — cannot be intercepted and read by third parties.
• Encrypted storage: Sensitive personal data stored on dua66's servers is encrypted at rest. Passwords are stored using one-way hashing algorithms, meaning that even dua66 staff cannot view your password — only verify it during login.
• Access controls: Access to personal data within the dua66 organisation is restricted on a need-to-know basis. Staff members can access only the data necessary for their specific role. Access rights are regularly reviewed and removed promptly when no longer required.
• Security monitoring: dua66 monitors our systems continuously for unusual activity, attempted breaches, and known vulnerability patterns. Our security team responds promptly to any detected issues.
• Payment data isolation: Full payment card details, Easypaisa PINs, and JazzCash credentials are never stored on dua66 servers. Payment processing is handled by certified third-party providers within their own secure environments.

dua66 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including to comply with legal and regulatory obligations. The following general retention periods apply:

• Active account data: While your dua66 account is active, we retain all account and transaction data necessary to operate it.
• Post-closure retention: When your dua66 account is closed — whether by you or by dua66 — we retain your data for a period of at least five years to comply with anti-money laundering regulations, tax requirements, and to handle any post-closure disputes or legal matters.
• Customer support records: Correspondence with dua66 support is retained for up to three years from the date of the interaction. This provides context for any future queries and supports quality assurance processes.
• Analytics data: Anonymised usage analytics data may be retained indefinitely as it does not identify individual players and is used only for aggregate platform improvement analysis.
• Identity documents: Verification documents such as CNIC copies are retained for the duration of your account and for the statutory period following account closure required by applicable law.

When personal data is no longer required for its stated purpose and retention obligations have been met, dua66 securely deletes or anonymises the data.

As a player on dua66, you have specific rights over your personal data. dua66 is committed to honouring these rights promptly and transparently. Your rights are outlined below: