x666x Privacy Policy

x666x operates the online casino and sports betting platform accessible at x666x.net (the "Platform"). In this Privacy Policy, references to "x666x", "we", "us", or "our" refer to the operator of the x666x platform acting as the data controller in respect of your personal information.

x666x operates under an international gaming licence. As a licensed gaming operator, we are subject to regulatory obligations that require us to collect and retain certain categories of player data. This Privacy Policy describes how we meet those obligations while respecting your privacy rights.

If you have any questions about this Privacy Policy or how x666x handles your personal data, you can reach our dedicated data protection contact at [email protected] at any time.

x666x collects the following categories of personal data from players and visitors to the platform:

x666x collects personal data through the following means:

• Direct submission — When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey, you provide data to us directly.
• Automated collection — When you visit or use the platform, we automatically collect Technical Data and Usage Data through cookies, server logs, and similar tracking technologies. See Section 7 for details.
• Third-party payment providers — When you transact via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20, your payment provider shares transaction confirmation data with x666x necessary to credit your account.
• Game providers — Third-party game suppliers integrated into the x666x platform may share aggregated game session data with us for settlement and audit purposes.
• Identity verification services — x666x may use third-party KYC and anti-fraud services to cross-reference the identity documents you submit against external databases.

x666x processes your personal data for the following purposes:

• To create and manage your x666x account, including verifying your identity and age as required under our gaming licence (minimum age 21 years).
• To process deposits and withdrawals in Pakistani Rupees and maintain accurate transaction records.
• To detect and prevent fraud, money laundering, account takeover, and other financial crimes in compliance with our anti-money laundering (AML) obligations.
• To operate and deliver the casino and sportsbook services you have requested, including settling bets, awarding bonuses, and resolving disputes.
• To monitor your gaming activity for responsible gaming purposes and to intervene where patterns suggest potential gambling harm, in accordance with our licensing obligations.
• To send you transactional communications — including deposit confirmations, withdrawal notifications, and security alerts — that are necessary for the administration of your account.
• To send you promotional communications about x666x bonuses and offers, where you have not opted out of such communications.
• To improve the x666x platform, identify technical issues, and optimise the user experience for players in Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan.
• To comply with our international gaming licence conditions, applicable law, and any request from a legitimate regulatory authority.

x666x relies on the following legal bases when processing your personal data:

x666x does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances. We share your data only in the following limited situations:

• Payment processors — We share the minimum necessary transaction data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 networks solely to process your deposits and withdrawals.
• KYC and identity verification providers — We may share your identity documents and personal details with accredited third-party KYC service providers who verify this information on our behalf under strict data processing agreements.
• Game software providers — Third-party game suppliers receive a player session identifier to deliver and settle games. They do not receive your full identity or financial data.
• Regulatory and licensing authorities — We are required to disclose player data to our licensing authority, and to relevant law enforcement or financial intelligence bodies, where legally compelled to do so.
• Fraud prevention networks — We may share device fingerprints and behavioural data with industry-standard fraud prevention services to protect the platform against bad actors.
• Professional advisors — Our legal counsel, auditors, and compliance consultants may access personal data on a need-to-know basis and are bound by professional confidentiality obligations.

x666x uses cookies and similar tracking technologies on the platform. Cookies are small text files stored on your device that help us deliver a functional, secure, and personalised experience.

You can manage your cookie preferences through the cookie settings panel available on the platform. You may also configure your browser to refuse cookies, although doing so may prevent certain features of x666x from operating correctly, including maintaining your login session.

x666x retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, subject to the minimum retention periods mandated by our international gaming licence. The following general retention periods apply:

• Account and identity data — Retained for a minimum of 5 years from the date of account closure, as required by our licensing authority for AML audit purposes.
• Transaction records — Retained for a minimum of 5 years from the date of each transaction.
• KYC documents — Retained for a minimum of 5 years from the date of account closure or the last KYC review, whichever is later.
• Support communications — Retained for 2 years from the date of the last interaction, unless the communication relates to an unresolved dispute or regulatory matter.
• Cookies and analytics data — Session cookies are deleted when you close your browser. Analytics data is retained in anonymised form for up to 24 months.
• Self-exclusion records — Retained indefinitely to prevent re-registration during the exclusion period and to maintain a historical record for responsible gaming compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to you as an individual.

x666x implements a multi-layered security framework to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• All data transmitted between your device and the x666x platform is encrypted using TLS 1.3, the current industry standard for transport-layer security.
• Passwords are stored using bcrypt hashing with an appropriate cost factor. x666x never stores passwords in plaintext form.
• Access to player data within x666x's internal systems is restricted to authorised personnel on a need-to-know basis, enforced through role-based access controls and multi-factor authentication for all internal accounts.
• KYC documents are stored in an encrypted document vault with access logging enabled. All document access events are audited.
• x666x conducts regular penetration testing and vulnerability assessments on the platform infrastructure.
• In the event of a data breach that is likely to result in a risk to your rights and freedoms, x666x will notify affected players without undue delay and in accordance with its obligations under applicable data protection law.

As a player whose personal data is processed by x666x, you have the following rights. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request":

• Right of Access — You may request a copy of the personal data x666x holds about you. We will respond within 30 days of receiving a valid request.
• Right to Rectification — If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Note that identity data verified through KYC cannot be changed unilaterally — an amended KYC submission will be required.
• Right to Erasure — You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. This right does not apply to data we are required to retain under our gaming licence.
• Right to Restrict Processing — You may request that we pause processing of your data in certain circumstances, for example where you contest its accuracy or have objected to our use of it pending a review.
• Right to Data Portability — You may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another controller.
• Right to Object — You may object to processing based on legitimate interests, including profiling, and to the use of your data for direct marketing at any time.
• Right to Withdraw Consent — Where processing is based on your consent (e.g., promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

x666x will not discriminate against you for exercising any of these rights. We will not restrict your access to the platform or treat your account differently because you have exercised a data rights request, provided that the request does not conflict with our legal obligations as a licensed gaming operator.

If you believe that a minor may have registered or attempted to register on x666x, please notify us immediately at [email protected]. x666x takes age-related data protection obligations seriously and will act on all such reports as a matter of priority.

Parents and guardians are encouraged to use parental control software to restrict access to online gambling platforms for minors in their household. x666x supports and endorses the responsible use of such tools.

As x666x operates under an international gaming licence, some of your personal data may be processed, stored, or accessed by our servers, processors, or authorised personnel located outside of Pakistan. Where such international transfers occur, x666x ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Safeguards used for international transfers include contractual clauses in data processing agreements with all sub-processors, requiring them to protect personal data to equivalent standards, and the selection of service providers operating in jurisdictions with recognised data protection frameworks.

Your personal data will never be transferred to a jurisdiction or organisation that cannot provide adequate data protection guarantees as assessed by x666x's compliance team.

The x666x platform integrates third-party game providers, payment gateways, and technical infrastructure providers. These integrations are necessary to deliver the full range of casino and sportsbook services offered on x666x. Each of these third parties operates under its own privacy policy and data processing practices.

x666x is not responsible for the privacy practices of third-party game providers whose titles are embedded within the platform. Players are encouraged to review the privacy notices of individual game providers if they have concerns about how those providers handle gaming session data.

x666x does not embed third-party advertising networks, social media tracking pixels, or cross-site tracking technologies on the platform. Any analytics tools used are configured to anonymise IP addresses and are not shared with advertising platforms.

x666x may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or our licensing obligations. When material changes are made to this Privacy Policy, we will notify registered players by email to the address on record and display a prominent notice on the platform for at least seven (7) days prior to the changes taking effect.

The "Last Reviewed" date at the top of this document will be updated with every revision. We encourage you to review this Privacy Policy periodically so that you remain informed about how x666x protects your personal data.

Continued use of the x666x platform following notification of changes to this Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes, you should cease using the platform and may request account closure by contacting support.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way x666x handles your personal data, please contact us using the details below. All privacy-related enquiries are handled by our compliance team and are acknowledged within 24 hours.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction applicable to your situation, or to the regulatory body overseeing x666x's gaming licence.