x666 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. Who We Are and How to Contact Us

1.1 This Privacy Policy is issued by the operator of x666, an internationally licensed online gaming platform accessible at x666.lol and associated mobile interfaces. References to "x666", "we", "us", or "our" in this Policy refer to this operator in its capacity as the data controller for personal information collected from Players ("you", "your") through the x666 Platform.

1.2 For all privacy-related enquiries, data subject access requests, or complaints regarding x666's handling of your personal information, please contact the x666 Data Protection team using the details below. We aim to acknowledge all privacy enquiries within 3 (three) business days and to resolve them within 30 (thirty) calendar days of receipt.

1.3 This Privacy Policy applies to all personal data collected through the x666 Platform, including data collected during account registration, account use, KYC verification, payment processing, customer support interactions, and marketing activities. It applies to all players registered on x666, including Pakistani players who are the primary audience of the x666 Platform.

2. Categories of Personal Data We Collect

2.1 x666 collects personal data across several categories depending on how you interact with the Platform. The following table sets out the categories of data x666 collects and the primary context in which each category arises:

2.2 x666 does not collect sensitive personal data (such as health information, religious beliefs, or biometric data beyond what is technically produced during the KYC selfie verification process) unless specifically required by applicable legal or regulatory obligations, in which case you will be separately notified of such collection and its purpose.

3. How We Collect Your Personal Data

3.1 Directly from you: The majority of personal data x666 holds about you is provided directly by you during account registration (name, mobile number, date of birth), during KYC verification (CNIC copy, selfie), during payment transactions (JazzCash or EasyPaisa account details, bank details), and during communications with x666 support (support chat content, complaint details).

3.2 Automatically through Platform use: x666 automatically collects certain technical data when you access the Platform — including your IP address, device identifiers, browser information, and login session metadata. This data is collected through server logs, session management systems, and analytics tools deployed by x666.

3.3 Through cookies and similar technologies: x666 uses cookies and similar browser-based tracking technologies to operate the Platform, remember your session state, prevent fraud, and improve the Platform experience. Full details of x666's cookie practices are set out in Section 7 of this Privacy Policy.

3.4 From third-party service providers: x666 may receive data from third-party identity verification providers, payment processors (including JazzCash and EasyPaisa), fraud prevention services, and gaming software providers, where such data is necessary to verify your identity, process your payment, detect fraud, or provide gaming services. x666 requires all third-party service providers to handle your data in accordance with applicable data protection standards.

4. Legal Basis for Processing Your Personal Data

4.1 x666 processes personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contract Performance: Processing is necessary to register your x666 Account, provide Gaming Services, process deposits and withdrawals, and administer your account — all of which are contractual obligations between x666 and you as a registered Player.
• Legal Obligation: Processing is necessary for x666 to comply with its obligations under its international gaming licence, including KYC/AML requirements, responsible gaming obligations, record-keeping requirements, and regulatory reporting.
• Legitimate Interests: x666 processes certain data based on legitimate interests, including fraud prevention, account security monitoring, Platform improvement, and internal analytics. x666 has assessed these legitimate interests and confirmed that they do not override the fundamental privacy rights of Players.
• Consent: Where x666 processes data for marketing communications or optional personalisation features, it does so on the basis of your express consent, which may be withdrawn at any time without affecting the lawfulness of processing that took place before withdrawal.

5. How x666 Uses Your Personal Data

5.1 x666 uses your personal data for the following specific purposes:

• To create, verify, and administer your x666 Player Account.
• To process and confirm deposits made via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or USDT.
• To process and verify withdrawal requests and transfer funds to your registered payment method.
• To verify your identity and age through the KYC process as required by x666's licensing obligations.
• To comply with Anti-Money Laundering (AML) monitoring requirements, including transaction monitoring and suspicious activity reporting.
• To operate, personalise, and improve the x666 gaming experience, including game recommendations and lobby customisation based on your gaming history.
• To manage and apply bonus offers, promotions, and VIP programme rewards to your account.
• To provide customer support and respond to enquiries, complaints, and formal notices.
• To detect, prevent, and investigate fraud, bonus abuse, multi-accounting, and other prohibited conduct.
• To enforce x666's Terms and Conditions and Responsible Gaming Policy, including applying account restrictions requested by you or required by x666's licensing authority.
• To send you transaction notifications, account security alerts, and responsible gaming reminders via SMS or email.
• To send you promotional communications about x666 offers where you have provided consent (see Section 11).
• To analyse Platform usage patterns and improve the technical performance of x666.

6. Sharing and Disclosure of Your Personal Data

6.1 x666 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. Your data is shared with external parties only in the limited circumstances described in this Section.

6.2 Service Providers and Processors: x666 shares personal data with carefully selected third-party service providers who process data on x666's behalf under contractual data processing agreements. These include payment processors (JazzCash, EasyPaisa, bank partners), KYC verification services, gaming software providers, customer support platform providers, fraud detection services, and cloud infrastructure providers. All service providers are required to implement appropriate technical and organisational security measures and to process data only on x666's documented instructions.

6.3 Regulatory and Licensing Authorities: x666 is legally required to disclose player data to its gaming licensing authority upon request, and to financial intelligence units or law enforcement agencies where required by applicable AML/CTF (counter-terrorism financing) regulations. Such disclosures are made only to the extent required by law and will not be notified to you where notification itself would be prohibited by law.

6.4 Corporate Transactions: In the event that x666's operating business is sold, merged, or restructured, Player personal data may be transferred to a successor entity as part of such a transaction, subject to the acquirer being bound by obligations of confidentiality no less protective than those set out in this Privacy Policy.

6.5 Fraud Prevention Networks: x666 may share data with industry fraud prevention networks where it has reason to believe that a Player has engaged in fraudulent activity, bonus abuse, or multi-accounting, for the purpose of preventing the same individual from exploiting other gaming platforms.

7. Cookies and Tracking Technologies

7.1 x666 uses cookies and similar browser-based technologies (including local storage and session tokens) on the x666 Platform. Cookies are small text files stored on your device by your browser at the instruction of the x666 Platform. They serve several essential and non-essential functions described below.

7.2 Strictly Necessary Cookies: These cookies are required for the x666 Platform to function. They include session authentication cookies that keep you logged in to your x666 Account, CSRF (cross-site request forgery) protection tokens, and game state preservation cookies. These cookies cannot be disabled without preventing core Platform functionality from operating correctly.

7.3 Functional Cookies: These cookies remember your Platform preferences — including language settings, display preferences, and previously played games — to provide a more personalised experience when you log in to x666. These cookies can be disabled, but doing so will result in a less personalised experience.

7.4 Analytics Cookies: x666 uses privacy-focused analytics tools to understand aggregate usage patterns on the Platform — such as which games are most popular, how long sessions typically last, and where Players encounter errors. These analytics tools are configured to anonymise IP addresses and to not use data for cross-site tracking purposes.

7.5 Security Cookies: x666 uses security-specific cookies for fraud detection purposes, including device fingerprinting cookies that help detect when a known fraudulent device or IP address attempts to access the Platform or register a new account.

7.6 You may control cookie settings through your browser's privacy or settings menu. Note that blocking all cookies, including strictly necessary cookies, will prevent you from logging in to or using the x666 Platform. x666 does not use third-party advertising cookies or behavioural tracking technologies for the purpose of targeted advertising on external websites.

8. Data Security Measures

8.1 x666 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or destruction. These measures include, but are not limited to, the following:

• All data transmitted between your device and x666 servers is encrypted using TLS 1.3 (Transport Layer Security) — the current industry-leading encryption standard for web communications.
• Player passwords are stored using bcrypt hashing with unique per-account cryptographic salts. Under no circumstances does x666 store passwords in readable plain text.
• Access to x666 internal systems containing personal data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control and multi-factor authentication requirements for all staff systems.
• x666's server infrastructure undergoes regular independent penetration testing and security audits.
• Financial transaction data is processed exclusively through PCI-DSS (Payment Card Industry Data Security Standard) compliant payment gateways and is not stored on x666's core Platform servers after transaction completion.
• KYC documents (CNIC copies and verification selfies) are stored in encrypted, access-controlled document vaults with audit logging of all access events.
• x666 maintains an incident response plan for data security events, including defined procedures for notifying affected players and relevant regulatory bodies within required timeframes.

9. Data Retention Periods

9.1 x666 retains personal data for as long as is necessary for the purposes described in this Privacy Policy, taking into account legal retention obligations, the duration of the Player's relationship with x666, and any ongoing dispute or investigation that requires data to be retained pending resolution.

9.2 As a general guideline, x666 applies the following retention periods:

• Active Account Data: Retained for the duration of your active x666 Account relationship plus a standard post-closure period of 5 (five) years to comply with AML record-keeping requirements.
• KYC Documents: Retained for a minimum of 5 (five) years following account closure, as required by anti-money laundering regulations applicable under x666's gaming licence.
• Financial Transaction Records: Retained for a minimum of 5 (five) years following each transaction, regardless of account status.
• Support Communications: Retained for 3 (three) years from the date of the interaction, or until resolution of any related dispute if longer.
• Technical / Analytics Data: Anonymised and aggregated after 12 (twelve) months. Identifiable technical data (such as IP logs) retained for 6 (six) months for fraud investigation purposes.
• Self-Exclusion Records: Retained for the duration of the self-exclusion period plus 5 (five) years, to enable x666 to enforce any reapplication exclusion conditions.

9.3 When personal data is no longer required for any retention purpose, x666 will securely delete or anonymise it using industry-standard data destruction methods.

10. Your Data Subject Rights

10.1 Subject to applicable law and the limitations described in this Section, you have the following rights in relation to your personal data held by x666:

11. Marketing Communications

11.1 x666 may send you promotional communications about x666 bonuses, new games, sports betting promotions, and VIP programme rewards via SMS to your registered Pakistani mobile number and/or by email, where you have provided express consent to receive such communications during or after account registration.

11.2 Consent to receive marketing communications is entirely optional. Declining or withdrawing consent does not affect your ability to register or use your x666 Account or to access any Gaming Services.

11.3 You may withdraw consent to marketing communications at any time by updating your communication preferences in Account Settings, or by responding to any x666 marketing message with an opt-out request, or by contacting x666 support at [email protected]. x666 will process opt-out requests within 5 (five) business days, after which no further marketing messages will be sent via the channels you have opted out from.

11.4 Note that withdrawal of marketing consent does not prevent x666 from sending operational communications that are necessary for the administration of your account — including deposit confirmations, withdrawal notifications, account security alerts, responsible gaming reminders, and mandatory notifications required by x666's licensing obligations. These communications are not marketing and cannot be opted out of while your account remains active.

12. Children and Minors

12.1 x666 enforces a strict 21+ minimum age requirement for all Platform users. The x666 Platform and all associated content are not directed at, intended for, or designed to be used by persons under the age of 21. x666 does not knowingly collect personal data from any person under 21 years of age.

12.2 If x666 discovers, through KYC verification or otherwise, that personal data has been provided by or in respect of a person under 21 years of age, x666 will immediately suspend the relevant account, delete the data to the extent not required for compliance purposes, and decline to process any associated withdrawal requests.

12.3 Parents and legal guardians in Pakistan are encouraged to take proactive steps to prevent persons under 21 years of age from accessing the x666 Platform, including using device-level parental control software, monitoring internet usage on shared household devices, and ensuring that x666 account credentials are not accessible to minors in the household.

12.4 If you have reason to believe that a person under 21 has registered an x666 Account, please contact x666 immediately at [email protected]. x666 takes all reports of potential underage access seriously and will investigate and act on all credible reports within 24 hours of receipt.

13. International Data Transfers

13.1 The x666 Platform is operated with server infrastructure and service providers that may be located in jurisdictions outside Pakistan. The processing of your personal data may therefore involve transfers of data across international borders, including transfers to jurisdictions that do not have data protection laws equivalent to those of the country in which you are located.

13.2 Where personal data is transferred to a third country (outside Pakistan), x666 ensures that appropriate safeguards are in place to protect the transferred data. These safeguards include contractual data protection clauses with service providers that impose data protection obligations equivalent to those applied by x666 under this Privacy Policy.

13.3 x666 requires all international data processors — including cloud infrastructure providers, payment processors, and KYC verification services — to certify that they maintain technical and organisational security measures that meet or exceed the standards described in Section 8 of this Privacy Policy.

14. Updates to This Privacy Policy

14.1 x666 may update this Privacy Policy from time to time to reflect changes in applicable law, changes in x666's data processing practices, or changes in the technology or services used by x666. The "Last Updated" date at the top of this page reflects the date on which the current version of this Privacy Policy became effective.

14.2 Where changes to this Privacy Policy are material — meaning they significantly affect how x666 collects or uses your personal data — x666 will notify you of the updated Policy via SMS to your registered mobile number and/or by a prominent notice on the x666 Platform at least 7 (seven) calendar days before the updated Policy takes effect.

14.3 Your continued use of the x666 Platform following the effective date of an updated Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the updated Privacy Policy, you must cease using the Platform and contact support to request account closure prior to the update's effective date.

14.4 The most current version of the x666 Privacy Policy is always accessible at x666.lol/privacy-policy. x666 does not retroactively apply updated privacy terms to historical data processing that was lawful under the version of the Privacy Policy in effect at the time of collection.

15. How to Contact Us About Privacy

15.1 For all matters relating to this Privacy Policy, your personal data, or your data subject rights, x666 can be contacted as follows:

• Email: [email protected] — Subject line: "Privacy / Data Request"
• Live Chat: Available 24/7 from within your logged-in x666 Account dashboard
• Response Target: 3 business days for acknowledgement; 30 calendar days for full response
• Escalation: If x666's response to a privacy complaint does not satisfy you, you may escalate the complaint to x666's licensing authority's player protection body — contact x666 support for current escalation contact details.

15.2 x666 is committed to resolving all privacy complaints promptly and fairly. Players in Pakistan who wish to raise privacy-related concerns are encouraged to use x666's internal resolution process in the first instance, as this typically achieves the fastest resolution of the issue.