xx666 Privacy Policy – How We Protect Your Personal Data in Pakistan

1 Who We Are and What This Policy Covers

This Privacy Policy is issued by xx666, the online casino and sports betting platform operated at xx666.run. When we say "xx666", "we", "us" or "our" in this document, we mean the operator of the xx666 platform. When we say "you" or "your", we mean any person who visits, browses, registers on, or uses any feature of the xx666 platform.

This Policy covers all personal data that xx666 collects, processes, stores and shares in connection with your use of our platform — including account registration, deposits and withdrawals, gameplay activity, customer support interactions and marketing communications. It applies specifically to users accessing xx666 from Pakistan and is written with Pakistani players in mind.

This Privacy Policy should be read alongside the xx666 Terms and Conditions and the Responsible Gaming Policy, both of which form part of your agreement with us. By registering and using xx666, you confirm that you have read and accepted this Privacy Policy.

2 Personal Data We Collect

xx666 collects only the data we genuinely need to provide our services, verify your identity, process your payments and meet our legal obligations. We do not collect data for the sake of it. The categories below cover everything we hold about registered players:

xx666 does not collect full card numbers. Payment card transactions are processed by our PCI-DSS certified payment partners, who handle card data directly and do not pass it to us. We receive only a masked reference.

3 How We Collect Your Data

Data about you reaches xx666 through several channels. Understanding each one helps you see the full picture of what we know about you and why:

4 Why We Use Your Personal Data

Every piece of data xx666 holds about you has a specific, legitimate reason behind it. We do not use your data for purposes beyond those listed below:

• Account management: Creating and maintaining your xx666 account, processing logins, managing your preferences and settings, and enabling all platform features.
• Payment processing: Crediting deposits to your PKR balance, verifying payment sources, processing withdrawal requests to your Easypaisa, JazzCash or bank account.
• Identity verification (KYC): Confirming you are who you say you are, that you are at least 18 years of age, and that your payment method is registered in your name. This is a legal and operational requirement, not optional.
• Fraud prevention and security: Detecting and preventing duplicate accounts, bonus abuse, money laundering, chargebacks and unauthorised account access. This includes cross-referencing device fingerprints, IP addresses and payment patterns.
• Game delivery and fairness monitoring: Logging your gameplay activity allows xx666 to confirm game results, settle disputes and investigate any technical issues that affected your session.
• Customer support: Accessing your account history, gameplay records and communication history allows support agents to resolve queries quickly and accurately.
• Marketing communications: Where you have opted in, we use your contact details to send promotions, bonus notifications and platform updates. You can opt out at any time from account settings or by emailing support.
• Responsible gaming: Your deposit history, session frequency and gameplay patterns may be monitored to identify signs of problem gambling, in line with our Responsible Gaming obligations.

5 Who We Share Your Data With

xx666 does not sell, rent or trade your personal data to any third party for commercial purposes. Data is shared with third parties only where strictly necessary to deliver the service or to comply with a legal obligation. Below is a complete list of the categories of third parties who may receive limited personal data from xx666:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank payment gateway operators and card processors receive transaction-specific data to process deposits and withdrawals. They do not receive your gameplay data, gaming history or full identity documents.
• Identity verification providers: Third-party KYC services receive the identity documents you submit for verification. These providers operate under strict data processing agreements and may not use your data for any purpose beyond the verification check.
• Game content providers: The companies that supply live dealer and RNG games to xx666 may receive your player ID (a pseudonymous identifier, not your name) and bet/result data in order to deliver the game and settle outcomes. They do not receive your full identity or financial details.
• Cloud and hosting infrastructure: The servers and databases that store xx666's data operate on commercial cloud infrastructure. Data is stored with security controls, access restrictions and encryption in place.
• Legal authorities: xx666 will share personal data with law enforcement, regulatory bodies or courts if required to do so by a valid legal process. We do not volunteer data to authorities but will comply with valid legal obligations.

All third parties who process data on behalf of xx666 are bound by data processing agreements that restrict how they can use that data. They may only use it for the purpose for which it was shared.

6 Payments, KYC and Financial Data

Because xx666 is a real-money platform operating in Pakistani Rupees (PKR), payment and identity verification processes involve a higher level of data handling than a typical website. Here is exactly how financial data is managed:

• Deposit data: When you deposit via Easypaisa or JazzCash, we log the mobile number used, the transaction amount, the transaction reference number and the timestamp. This data is held in your account transaction history and used to confirm the deposit was received from a payment method registered in your name.
• Withdrawal data: Your withdrawal requests are logged with the destination mobile number or bank account name, the amount requested and the processing timestamp. This forms part of your account transaction record.
• KYC documents: CNIC or passport copies submitted for identity verification are stored in an encrypted document management system with restricted access. Only staff authorised to conduct identity verification may access these documents. They are not visible to general support agents.
• AML monitoring: xx666 monitors transaction patterns for signs of money laundering in line with anti-money-laundering (AML) obligations. This analysis is automated and human-reviewed only where an alert is triggered. Results are not shared with third parties unless legally required.

7 Cookies and Tracking Technologies

The xx666 platform uses cookies — small text files stored in your browser — to make the platform function correctly, to remember your session and preferences, and to understand how the platform is being used so we can improve it. We do not use third-party advertising cookies or cross-site tracking technologies.

You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent xx666 from functioning correctly. Disabling preference and analytics cookies will not affect gameplay but you may lose saved settings.

8 How xx666 Protects Your Data

Data security at xx666 is implemented in layers. No single protection is foolproof, but the combination of measures below means your data is as well-protected as we can reasonably make it:

• Encryption in transit: All communication between your device and xx666 servers uses TLS 1.2 or higher. The padlock you see in your browser address bar confirms this.
• Encryption at rest: Personal data stored in xx666 databases is encrypted. Even if a database were somehow accessed without authorisation, the data would not be readable without the encryption keys.
• Access controls: Staff access to personal data is role-based and strictly limited. A support agent handling a withdrawal query can see what they need to resolve it — they cannot access your identity documents or the full financial database.
• Two-factor authentication (2FA): All xx666 internal systems that contain personal data require 2FA for staff access. We also offer 2FA to players for their own account security.
• Regular security audits: xx666's platform and infrastructure undergo regular security reviews including penetration testing. Identified vulnerabilities are patched promptly.
• Incident response: In the unlikely event of a data breach that affects your personal data, xx666 will notify affected players and relevant authorities within 72 hours of becoming aware of the breach, where required by applicable obligations.

9 How Long We Keep Your Data

xx666 does not keep your data indefinitely. Retention periods are based on the purpose for which the data was collected and the legal requirements that apply to online gaming platforms:

• Account data and identity documents: Retained for the lifetime of your active account plus 5 years after account closure. This is driven by AML and KYC record-keeping obligations.
• Transaction records: All deposit and withdrawal records in PKR are retained for 7 years from the date of the transaction. This aligns with standard financial record-keeping requirements.
• Gameplay logs: Detailed game logs (bets placed, results, session data) are retained for 2 years, after which they are anonymised and retained only in aggregate form for statistical analysis.
• Support communications: Chat and email correspondence is retained for 2 years from the date of the last message in a conversation thread.
• Marketing preferences: If you unsubscribe from marketing, we retain a record of your opt-out status indefinitely to ensure we do not accidentally contact you again after a system migration or data refresh.
• Cookies and analytics data: Session cookies expire when you close your browser. Analytics data is retained in aggregate form for 18 months.

When data reaches the end of its retention period, it is securely deleted or permanently anonymised. Deletion is not reversible.

10 Your Privacy Rights as an xx666 Player

As a player on xx666, you have the following rights regarding your personal data. To exercise any of these rights, email support@xx666.run with the subject line indicating which right you are exercising. We will respond within 30 days.

11 Children and Minors

xx666 is strictly an adults-only platform. No person under the age of 18 is permitted to register, access or use any feature of the xx666 platform. We do not knowingly collect any personal data from individuals under 18.

If we discover or are informed that an account belongs to a person under 18, that account will be immediately closed, all balances will be forfeited, and any data collected will be deleted as promptly as our legal obligations allow. We may also report the matter to relevant child protection authorities where required.

Parents and guardians concerned about minors accessing online gaming platforms are encouraged to use internet filtering tools available through their mobile network (Jazz, Telenor, Ufone, Zong, Warid) or through their broadband provider to restrict access to gambling websites.

12 Changes to This Privacy Policy

xx666 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements or the services we offer. The "Effective" date at the top of this page will always show when the current version was last updated.

Where changes are material — for example, if we begin collecting a new category of data or sharing data with a new category of third party — we will notify registered players via email or in-platform notification at least 14 days before the change takes effect. Minor clarifications may be updated without advance notice.

Your continued use of xx666 after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to an updated policy, you should contact support to close your account and withdraw any remaining balance before the effective date.

13 Contact xx666 About Privacy

If you have any questions, concerns or requests relating to this Privacy Policy or to your personal data on xx666, please get in touch. We take privacy enquiries seriously and will respond promptly:

For general account or gameplay queries, please contact the same address with a standard support subject line. Our team is available every day of the year, including Eid and public holidays.