666xp Privacy Policy – How We Handle Your Personal Data

1. Introduction

666xp is an online entertainment platform designed for adult players in Pakistan. When you use 666xp — to place a cricket bet, spin a slot, play at a live casino table or request a PKR withdrawal — certain information about you is collected and processed. This Privacy Policy is our commitment to being transparent about all of that.

We understand that Pakistani players care about their personal information, particularly in the context of an online platform that handles financial transactions via JazzCash, Easypaisa, Raast and bank transfers. We take that responsibility seriously. This document explains clearly what we do with your data, who might see it and how long we keep it.

This Privacy Policy should be read alongside our Terms and Conditions and Responsible Gaming Policy. Together, these three documents cover the full relationship between you and 666xp.

2. Data We Collect

We collect personal data in several ways — directly from you when you register or contact us, automatically when you use the platform, and from third parties such as payment processors when you make a deposit or withdrawal.

We only collect data that is necessary for the purposes described in this policy. We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, health data or religious beliefs.

3. How We Use Your Data

The personal data we collect is used for the following purposes:

• Account creation and management: To set up and maintain your 666xp account, verify your identity during registration and keep your account secure.
• Processing transactions: To handle PKR deposits via JazzCash, Easypaisa, Raast or bank transfer, and to process withdrawal requests to your registered payment account.
• Platform operation: To allow you to play casino games, place sports bets on cricket and PSL markets, access fish games and use all other features of the platform.
• Security and fraud prevention: To detect and investigate suspicious activity, prevent multiple account creation, identify bonus abuse and protect the integrity of the platform.
• Customer support: To respond to your queries, resolve disputes and provide assistance with your account.
• Responsible gaming: To monitor play patterns that may indicate problematic behaviour and to enforce self-exclusion or deposit limit requests.
• Legal and compliance obligations: To maintain the records required to operate our platform responsibly and to respond to legitimate requests from relevant authorities.
• Platform improvement: To analyse usage patterns in aggregate (non-personal) form to improve the platform experience, fix bugs and develop new features.
• Communications: To send you important account notifications, security alerts, and — where you have opted in — promotional updates about bonuses and offers.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review.

4. Identity Verification (KYC)

Before processing your first withdrawal, 666xp requires all players to complete a one-time identity verification process, commonly known as KYC (Know Your Customer). This process involves:

• Uploading a clear photo of your CNIC (Computerised National Identity Card) — both front and back.
• Submitting a selfie holding your CNIC so we can confirm it belongs to you.
• In some cases, providing a recent proof of address or additional documentation if our security team flags an anomaly on your account.

KYC documents are handled with the highest level of care. They are stored in encrypted form, accessible only to authorised 666xp compliance staff, and are never shared with third parties for marketing or any non-essential purpose. Once KYC is approved, your account is marked as fully verified and you will not need to repeat the process unless we have a specific security reason to request updated documents.

5. Payment Information

When you make a deposit or request a withdrawal on 666xp, financial data is shared between you, 666xp and our payment processing partners. Here is how that works in practice:

• JazzCash and Easypaisa: Your registered mobile wallet number is recorded against your account to ensure withdrawals are returned to the correct wallet. 666xp does not store your JazzCash or Easypaisa PIN at any point.
• Raast and Bank Transfer: Your bank account number, account title and bank name are collected at the time of the withdrawal request. This information is used solely to execute the transfer and is stored in encrypted form.
• Transaction records: All deposit and withdrawal amounts in PKR, along with timestamps and reference numbers, are retained as part of your account transaction history. You can view this history at any time within your account dashboard.

We do not store full payment card numbers. If card payments are supported, card processing is handled by a PCI-DSS compliant third-party payment gateway that does not share full card data with us. We only receive a partial card reference for your records.

Third-party payment processors have their own privacy policies that apply to data they process on their side. 666xp is not responsible for the data practices of external payment providers, though we only work with providers who meet acceptable data security standards.

6. Cookies & Tracking Technologies

666xp uses cookies and similar technologies to make the platform work properly, keep you logged in between sessions, and understand how players use the site so we can improve it. Here is a breakdown of the types we use:

• Essential cookies: These are necessary for the platform to function. They keep you logged in during a session, remember your language preference and maintain your bet slip state. You cannot opt out of essential cookies without stopping your use of the platform.
• Functional cookies: These remember your preferences — for example, your preferred deposit method or game category — so you do not have to re-select them every time you visit.
• Analytics cookies: We use aggregated, anonymised analytics to understand which pages are most visited, how long players spend on different sections and where technical issues occur. This data does not identify you personally.
• Security cookies: Used to detect and prevent suspicious login attempts, bot activity and session hijacking.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the platform, but some personalisation features may not work as expected. Mobile app users can manage tracking preferences through their device operating system settings.

7. Data Sharing

666xp does not sell your personal data to third parties. We share data only in the following limited circumstances:

• Payment processors: Your financial information is shared with payment partners (such as JazzCash, Easypaisa and banking partners) solely to execute your deposit or withdrawal.
• Game software providers: When you play a casino game or fish game, the game provider's server processes the outcome. Depending on the provider, a session identifier or player alias may be shared. Full identity data is not passed to game providers.
• Security and fraud prevention partners: We may use third-party services that help detect fraudulent accounts, suspicious IP addresses or multiple account creation. These partners process limited technical data under strict data processing agreements.
• Legal obligations: We may disclose personal data when required to do so by a valid legal process or legitimate authority request. We will only comply with requests that meet appropriate legal standards, and we will inform the player where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition or sale of the platform, player data may be transferred to the successor entity. Players will be notified of any such change and given the opportunity to close their account if they do not wish their data to be transferred.

All third parties with whom we share data are required to handle it securely and only for the specific purpose for which it was shared.

8. Data Retention

We keep your personal data only for as long as it is necessary for the purposes described in this policy. The general retention periods we apply are:

• Active account data: Retained for the full duration of your account being open, plus a period after closure.
• Transaction records (deposits, withdrawals, bet history): Retained for a minimum of five years from the date of each transaction to support our operational and security obligations.
• KYC documents: Retained for a minimum of five years from account closure.
• Support communications: Retained for up to three years from the date of the last interaction.
• Technical and usage logs: Typically retained for 12 months, after which they are either deleted or anonymised.

When data is no longer required and its retention period has passed, it is securely deleted or irreversibly anonymised so it can no longer be linked to you as an individual.

9. Security Measures

Protecting your data is a core responsibility at 666xp. We have implemented a range of technical and organisational security measures to prevent unauthorised access, loss or misuse of your personal information:

• SSL/TLS encryption: All data transmitted between your device and the 666xp platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar — that is your confirmation that the connection is secure.
• Encrypted storage: Personal data and KYC documents stored on our servers are encrypted at rest. Even in the unlikely event of a server breach, raw personal data cannot be read without the encryption keys.
• Access controls: Only authorised 666xp staff with a specific operational need can access personal data, and all such access is logged and audited.
• Two-factor authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts via the security settings section of their dashboard. This adds a second layer of protection beyond your password.
• Fraud monitoring: Automated systems continuously monitor account activity for unusual patterns — such as logins from new locations, multiple failed password attempts or unusual withdrawal requests — and may trigger additional verification steps.

While we apply strong security measures, no online platform can guarantee absolute security. If you suspect any unauthorised activity on your account, change your password immediately and contact our support team.

10. Your Rights Over Your Data

As a 666xp player, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting our support team:

We will respond to all data rights requests within a reasonable timeframe. In most cases this will be within 30 days. Where a request is particularly complex, we may take up to 60 days and will inform you of the extension. There is no fee for exercising your rights unless a request is clearly unfounded or excessive.

11. Minors

666xp is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Registration requires confirmation that the player is 18 or older, and KYC verification includes date of birth checks against official identity documents.

If we discover that personal data has been collected from a person under 18, we will immediately close the relevant account, delete all associated personal data to the extent possible, void any transactions and — where deposits were made — work to return funds to the source payment method.

If you are a parent or guardian and believe your child has registered on 666xp, please contact our support team immediately with the account details and we will take swift action.

12. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in how we operate, changes in technology, or updates to our data processing practices. When we make changes, we will update the "Last Updated" date at the top of this page.

For material changes that significantly affect how your personal data is used, we will notify you by email to your registered address, or by a prominent notice on the platform, at least seven days before the change takes effect. For minor or clarificatory changes, the update will simply be posted on this page.

Your continued use of 666xp after a policy update takes effect constitutes your acceptance of the revised privacy terms. If you do not agree with the changes, you should stop using the platform and contact support to close your account.

13. Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or want to report a privacy concern, please get in touch with our support team:

• Live Chat: Available 24/7 inside your 666xp account dashboard. This is the fastest way to get a response.
• Email: [email protected] — for privacy-specific requests, please include "Privacy Request" in the subject line along with your registered username.
• FAQ: Common questions are answered on our FAQ page.

We take all privacy concerns seriously. If you contact us with a data rights request, we will acknowledge receipt within two business days and provide a full response within the timeframes described in Section 10 above.