Privacy Policy – 666xp

666xp ("we", "us", "our") operates the online casino and sports betting platform accessible at https://666xp.net and all associated sub-domains and mobile interfaces (collectively, the "Platform"). We are committed to protecting the privacy of every individual who uses 666xp, particularly our Pakistani player base who trust us with personal and financial information when they register, deposit and play.

This Privacy Policy sets out, in clear terms, the types of personal data we collect, the reasons we collect and process that data, how long we retain it, who we may share it with, and the rights you can exercise over your own information. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of your agreement with 666xp.

By creating a 666xp account or by continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read, understood and agreed to the practices described herein. If you do not agree, please discontinue use of the Platform and contact us to close your account.

666xp collects personal data in the following categories:

2.1 Registration Data. When you open a 666xp account, we collect your chosen username, email address, date of birth, country of residence, and the mobile phone number you use with JazzCash, Easypaisa or any other registered payment method.

2.2 Identity Verification Data (KYC). To comply with anti-money laundering requirements and to verify that you are at least 18 years of age, we collect copies of identity documents including your Pakistani CNIC (front and back), proof of address, and where required, proof of payment method ownership. This documentation is processed securely and retained only as long as legally required.

2.3 Financial Data. We collect records of all deposits, withdrawals, and transaction histories on the 666xp platform. We do not store full payment card numbers. JazzCash and Easypaisa transactions are processed via tokenised references only.

2.4 Gaming & Betting Activity. We record all game sessions, bet placements, wager amounts, win/loss outcomes, and bonus usage on 666xp. This data is used for account management, fraud detection and responsible gaming monitoring.

2.5 Device & Technical Data. We collect IP address, device type, operating system, browser type and version, screen resolution, and session timestamps. This data is used for security, fraud prevention and platform optimisation.

2.6 Communications Data. If you contact 666xp support via live chat, email or any other channel, we retain a record of that correspondence including the content of your messages and the resolution provided.

2.7 Voluntary Preferences. Any responsible gaming preferences you set on 666xp – deposit limits, session reminders, self-exclusion elections – are recorded and associated with your account to enforce those settings reliably.

666xp collects personal data through the following means:

• Directly from you – when you register an account, complete KYC, make a deposit, place a bet, contact support, or update your account settings.
• Automatically – through cookies, web beacons, server logs and similar tracking technologies as you navigate the 666xp Platform. See Section 8 (Cookies & Tracking) for full details.
• From third-party identity verification providers – where 666xp uses a third-party KYC service to validate the authenticity of documents you submit, that provider may share the result and relevant data points with 666xp.
• From payment processors – JazzCash, Easypaisa, and bank partners may confirm transaction completion and share reference identifiers with 666xp to reconcile your account balance.
• From fraud prevention and AML databases – 666xp may query third-party databases to screen for politically exposed persons (PEPs), sanctions list matches or known fraudulent patterns associated with your registration data.

666xp processes your personal data for the following purposes and on the following legal grounds:

• Contract performance – to operate your 666xp account, process deposits and withdrawals, settle bets and provide the gaming and betting Services you have signed up for.
• Legal obligation – to conduct KYC and AML checks, verify that you are 18 or older, comply with applicable anti-fraud requirements, and respond to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests – to detect and prevent fraud, investigate suspicious activity, improve the security and stability of the Platform, and analyse aggregate usage patterns to enhance user experience.
• Consent – to send you marketing communications about 666xp promotions, bonuses and new features where you have opted in to receive such messages. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting support.
• Responsible gaming obligations – to monitor your gambling behaviour for signs of problem gambling, enforce self-imposed limits and restrictions, and intervene proactively where the data indicates a player may be at risk.

666xp does not sell your personal data to third parties. We share your data only in the following limited circumstances:

• Service providers – KYC/identity verification providers, payment processors (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Skrill, Neteller), fraud screening services, IT infrastructure providers, and customer support platform operators who process data on our behalf and are contractually bound to handle it securely.
• Game content providers – the studios that supply casino games and betting software integrated into 666xp may receive a session token and aggregated play data necessary to operate the game. They do not receive your full identity information.
• Regulatory and legal authorities – where we are legally required to disclose data to a regulatory body, court, law enforcement agency or government authority, we will do so. We will notify you of such disclosures where legally permitted.
• Business transfers – in the event of a merger, acquisition or sale of 666xp or its assets, your personal data may be transferred to the acquiring entity. We will notify registered players of any such transfer and their options.

666xp operates infrastructure across multiple jurisdictions. This means your personal data may be transferred to, stored and processed in countries outside Pakistan. Where such transfers occur, 666xp implements appropriate safeguards – including contractual data protection clauses with all data processors – to ensure your data receives a level of protection equivalent to the standards described in this Policy. By using the 666xp Platform, you acknowledge and consent to such international transfers.

666xp retains your personal data for as long as your account is active and for a period thereafter as required by applicable legal, regulatory and AML obligations. In general:

• Account and registration data is retained for a minimum of five (5) years following account closure, in line with standard AML record-keeping requirements.
• KYC documents are retained for the same five-year period following account closure.
• Transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Support communications are retained for two (2) years from the date of the last interaction unless a longer period is required for an unresolved dispute.
• Marketing preference data is deleted within thirty (30) days of consent withdrawal or account closure, whichever is earlier.

After applicable retention periods expire, personal data is securely deleted or anonymised such that it can no longer be associated with any individual.

666xp uses cookies and similar technologies (local storage, session storage, web beacons) to operate the Platform and improve your experience. The categories of cookies we use include:

• Essential cookies – strictly necessary for the Platform to function. These include session authentication tokens that keep you logged in to your 666xp account during an active session. These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies – remember your preferences such as language, game history display settings, and responsible gaming reminder intervals.
• Analytics cookies – collect anonymised or pseudonymised data about how players navigate the 666xp Platform – which pages are most visited, how long sessions last, and where players encounter friction. This data is used to improve the Platform. We use aggregated analytics only and do not share raw session data with third-party advertising platforms.
• Security cookies – assist in fraud detection by identifying unusual login patterns or device switching behaviour associated with your account.

You may manage non-essential cookies through your browser settings. Note that disabling certain cookies may affect the performance or functionality of specific 666xp features.

666xp applies industry-standard security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction. These measures include:

• SSL / TLS encryption for all data transmitted between your device and 666xp servers.
• Encrypted storage of passwords using one-way hashing algorithms. 666xp staff cannot view your password.
• Two-factor authentication (2FA) available to all account holders and strongly recommended.
• Role-based access controls limiting internal 666xp staff access to personal data on a need-to-know basis.
• Regular security assessments and penetration testing of the 666xp Platform infrastructure.
• Anomaly detection systems that flag unusual login behaviour or account activity for review.

Notwithstanding these measures, no data transmission or storage system can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in risk to your rights and freedoms, 666xp will notify affected players promptly and take all reasonable remediation steps.

Subject to applicable law, you have the following rights regarding personal data that 666xp holds about you:

• Right of access – to request a copy of the personal data 666xp holds about you.
• Right to rectification – to request correction of inaccurate or incomplete data.
• Right to erasure – to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restriction – to request that processing of your data be restricted in certain circumstances, for example while a correction request is being evaluated.
• Right to data portability – to receive your personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to withdraw consent – where processing is based on consent (e.g. marketing communications), to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond to all verifiable requests within thirty (30) days.

666xp does not knowingly collect personal data from individuals under the age of 18. All registration submissions are subject to age verification via CNIC. If 666xp discovers that personal data belonging to a minor has been collected, that account will be immediately closed, all associated real-money balances returned after AML review, and the minor's personal data permanently deleted from all active systems. If you have reason to believe a minor has registered a 666xp account, please contact us immediately at [email protected].

666xp uses your gaming activity data to support responsible gambling objectives. Specifically, we analyse deposit frequency, session duration, betting patterns and loss chasing indicators to identify players who may be exhibiting signs of problem gambling. Where such patterns are detected, 666xp may proactively contact you, display responsible gaming reminders, or in serious cases impose precautionary account restrictions. This processing is carried out in your interest and in fulfilment of our responsible gaming obligations. For more information on the tools available to you, visit the Responsible Gaming page. You must be 18 or older to hold an active 666xp account.

666xp may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations or Platform features. Material changes will be communicated to registered players via email or a prominent notice on the 666xp Platform at least seven (7) days before the change takes effect. The "Last updated" date at the top of this Policy will always reflect the most recent revision. We encourage you to review this Policy periodically. Continued use of 666xp after the effective date of any revision constitutes your acceptance of the updated Policy.

For all privacy-related enquiries, data subject access requests, or concerns about how 666xp handles your personal data, please contact our support team:

• Email: [email protected]
• Response time: We aim to respond to all privacy enquiries within five (5) business days and to fulfil formal data subject requests within thirty (30) days.

Please include your registered 666xp username and a description of your request or concern when contacting us so we can handle your enquiry efficiently.