DUA66 Privacy Policy — How We Handle Your Data

1.Introduction

DUA66, accessible at dua66.net, operates an online gaming and entertainment platform for users in Pakistan. As part of running that platform, we collect and process certain personal information about the people who use it. This Privacy Policy is here to make that process transparent — to tell you plainly what we collect, why we collect it and what happens to it.

This policy applies to all users of DUA66, whether you are a registered account holder, a visitor browsing the site or someone using the DUA66 Android app. By accessing or using DUA66, you confirm that you have read this policy and understood how your personal information is handled.

2.Information We Collect

The information DUA66 collects falls into three broad categories: information you provide directly, information generated by your use of the platform, and information received from third parties as part of payment processing or verification.

Information you provide directly:

• Full name and date of birth provided during registration.
• Email address and Pakistani mobile number.
• Username and password (password is stored in hashed form and is not accessible to DUA66 staff).
• Identity documents submitted for account verification — typically a copy of a CNIC or passport.
• Payment account details used for deposits and withdrawals, such as a JazzCash or Easypaisa account number.

Information generated by platform use:

• Betting and gaming activity — bets placed, games played, amounts staked and results.
• Deposit and withdrawal transaction history, amounts and timestamps.
• Login history including timestamps and approximate location based on IP address.
• Device type, operating system version and app version when using the DUA66 Android app.
• Customer support conversations and queries submitted through the platform.

Information from third parties:

• Transaction confirmation and status data from JazzCash, Easypaisa, Raast and banking partners when you make a deposit or withdrawal.
• Identity verification results from verification service providers if you are asked to complete enhanced verification.

3.How We Use Your Data

DUA66 uses the information collected for the following purposes. We do not use your personal data for any purpose that is incompatible with the reasons listed here.

4.Payment Data

DUA66 handles payment data carefully given its sensitive nature. When you make a deposit via JazzCash, Easypaisa or bank transfer, the transaction is processed through the relevant payment provider's systems. DUA66 receives confirmation of the transaction's status — amount, timestamp and reference number — but does not receive or store your full JazzCash PIN, Easypaisa wallet password or bank login credentials.

For bank transfers processed via IBFT or Raast, DUA66 receives the sender's account name and the last few digits of the account number as part of the transaction record. This is used solely to match incoming payments to the correct DUA66 account and verify that the payment source matches the registered account holder.

Payment records are retained as part of your account transaction history for record-keeping and dispute resolution purposes. If you close your DUA66 account, transaction records may be retained for a period consistent with standard financial record-keeping requirements.

5.Sharing Your Data

DUA66 does not sell, rent or trade your personal data. We share your information only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: JazzCash, Easypaisa, Raast and banking partners receive the information necessary to process your transactions — typically your account identifier and transaction amount.
• Identity verification providers: If enhanced verification is requested, your submitted ID documents and personal details may be shared with a third-party verification service. This is a one-time process and the data is used solely for identity confirmation.
• Technology and infrastructure providers: DUA66 uses third-party hosting, analytics and platform technology providers. These partners operate under data processing agreements that restrict how they may use data provided to them.
• Fraud prevention and security: Where we reasonably suspect fraudulent activity, DUA66 may share relevant account data with appropriate parties to prevent or investigate the fraud.
• Legal requirements: DUA66 will disclose personal data when required to do so by a valid legal process or in response to a legitimate request from an authority with jurisdiction over the platform.

In all cases of third-party data sharing, DUA66 takes reasonable steps to ensure that the recipient handles the data securely and uses it only for the purpose for which it was shared.

6.Cookies & Device Data

The DUA66 website uses cookies — small text files stored on your browser — to support platform functionality and improve your experience. The DUA66 Android app collects device-level data including device model, Android version and app version to support performance monitoring and bug fixes.

Cookies used on DUA66 fall into the following categories:

• Essential cookies: Required for basic platform operation — keeping you logged in during a session, remembering your language preference and ensuring secure page transitions.
• Analytics cookies: Used to understand how users navigate the platform — which sections are visited most, where users encounter difficulty and how long sessions last. This data is aggregated and not linked to individual accounts.
• Preference cookies: Store your settings such as preferred game categories or notification preferences so they persist between sessions.

You can manage or clear cookies through your browser settings at any time. Disabling essential cookies may affect your ability to log in or use certain platform features correctly.

7.Data Security

DUA66 takes the security of your personal data seriously and has implemented technical and organisational measures to protect it. These include:

• Encrypted connections (HTTPS) for all data transmitted between your device and DUA66's servers.
• Hashed password storage — your password is never stored in a readable form and DUA66 staff cannot view it.
• Access controls that limit which DUA66 staff can access personal data, restricted to those with a legitimate operational need.
• Regular security reviews of the platform infrastructure.
• Biometric login support in the DUA66 Android app for additional account access security on compatible devices.

No system is completely invulnerable and DUA66 cannot guarantee that your data will never be accessed without authorisation. However, we maintain reasonable and up-to-date security practices to minimise that risk. You play an important role in your own account security — using a strong, unique password for your DUA66 account and not sharing it with anyone significantly reduces your exposure.

If DUA66 becomes aware of a security incident that may have compromised user data, we will take prompt steps to investigate, contain the issue and notify affected users as appropriate.

8.Data Retention

DUA66 retains your personal data for as long as your account is active and for a reasonable period after account closure. The specific retention period depends on the type of data:

• Account registration data (name, email, mobile number) is retained for the lifetime of the account and for a standard period after closure.
• Transaction records are retained for a period necessary to support dispute resolution, financial record-keeping and audit requirements.
• Identity verification documents are retained for the period required to support the verification decision and any related account review process.
• Session and activity logs are retained for a shorter period, primarily for security monitoring and fraud detection purposes.

When data is no longer needed for any of the above purposes, DUA66 takes reasonable steps to delete or anonymise it. If you request account closure, the deletion of your personal data will be carried out subject to the retention periods described above and any legal obligations that require us to keep certain records.

9.Your Rights

As a DUA66 account holder, you have the following rights regarding your personal data. To exercise any of these rights, contact DUA66 support through the in-app chat or by email.

10.Minors

DUA66 is strictly an adult platform. Registration and use of the platform is not permitted for anyone under the age of 18. DUA66 does not knowingly collect personal data from minors. If we become aware that a registered account belongs to a person under 18, the account will be closed immediately and any balance will be subject to review.

If you believe that a minor has registered an account on DUA66 using incorrect information, please contact support immediately so the account can be investigated and closed.

11.Policy Updates

DUA66 may update this Privacy Policy from time to time to reflect changes in how the platform operates or in applicable data handling practices. When updates are made, the "last updated" date at the top of this page will be revised. For material changes that significantly affect how your data is used, DUA66 will make reasonable efforts to notify registered account holders through an in-app notification or by email.

Continued use of DUA66 after an updated Privacy Policy has been published constitutes your acceptance of the changes. If you disagree with an update, you should stop using the platform and contact support if you wish to request account closure and deletion of your data.

12.Contact Us

If you have questions about this Privacy Policy, want to exercise any of your data rights, or have concerns about how your personal information is being handled, you can reach DUA66 through the following channels:

• In-app live chat, available through your DUA66 account dashboard.
• Email support at the address displayed within the platform's contact section.

When submitting a data-related request, please include your registered account username and a brief description of your query. For deletion or access requests, identity verification will be required before the request is processed.