x 666 Privacy Policy – How We Protect Your Data in Pakistan

x 666 is operated as a dedicated online gaming and betting platform for Pakistani players. When you use x 666, you share certain information with us — some of it deliberately (like your name when you register), some of it automatically (like your device type when you access the site). This Privacy Policy explains all of that in straightforward terms. We've deliberately avoided legal boilerplate where plain language works better, because we think Pakistani players deserve to know exactly what happens with their data without needing a law degree to understand it.

x 666 operates the gaming and betting platform at x666-vip.com. For purposes of this Privacy Policy, x 666 is the data controller — meaning we are the entity responsible for deciding how and why your personal data is processed.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have concerns about how x 666 has handled your personal information, you can reach our privacy team directly at privacy@x666-vip.com. We aim to acknowledge all privacy-related queries within 48 hours and resolve them within 14 days. Our support team — reachable via live chat on the x 666 platform — can also direct privacy queries to the right team if you're unsure where to send them.

x 666 collects personal data in several categories. Here is a straightforward breakdown of what each category includes:

2.1 Identity Data

This is the information you provide when you create your x 666 account. It includes your full name as it appears on your CNIC, your date of birth (used to verify you are 18 or older), your gender, and your CNIC number if you proceed through full KYC verification.

2.2 Contact Data

Your Pakistani mobile number (used for OTP-based account verification and important account notifications) and your email address (used for account communications and promotional messages, if you've opted in).

2.3 Financial Data

Transaction data associated with deposits and withdrawals on the x 666 platform. This includes the payment method used (Easypaisa account number, JazzCash number, NayaPay account, SadaPay account, bank IBAN for IBFT, or masked card details for Visa/Mastercard), transaction amounts in PKR, timestamps, and transaction reference numbers. x 666 does not store full card numbers — payment card data is tokenised by the payment processor and only the last four digits are visible in your account history.

2.4 Gaming and Betting Activity Data

A full record of your activity on the x 666 platform — every bet placed, every game session, login and logout times, session durations, games accessed, stakes, outcomes, and balance changes. This data is essential for account operation, dispute resolution, responsible gaming monitoring, and regulatory compliance.

2.5 Technical Data

Device type, operating system version, browser type and version, screen resolution, IP address, approximate geographic location derived from IP, and connection type. This data is collected automatically when you access x 666 and is used for security monitoring, platform optimisation, and fraud prevention.

2.6 Communication Data

Records of communications between you and x 666 — live chat transcripts, email correspondence, and support ticket history. These are retained for quality assurance, dispute resolution, and staff training purposes.

x 666 collects personal data through three main channels:

• Directly from you: When you register, complete KYC verification, submit a withdrawal request, contact support, participate in a promotion, or update your account settings.
• Automatically: Through cookies, server logs, and analytics tools when you access the x 666 platform. This happens in the background and does not require any action on your part beyond accessing the site.
• From third parties: Payment processors confirm transaction details to x 666 when you deposit or withdraw. Identity verification providers may confirm whether the documents you submit match official records. Fraud prevention services may flag unusual patterns that x 666 cross-references against your account activity.

Every use of your personal data at x 666 has a specific purpose and a lawful basis. The table below sets this out clearly:

Where x 666 relies on your consent as the lawful basis — specifically for marketing communications — you can withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

x 666 does not sell your personal data to any third party. Full stop. Your data is shared only in the following specific, limited circumstances:

5.1 Payment Processors

When you deposit or withdraw using Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, or Visa/Mastercard, the relevant financial service provider receives the transaction data necessary to execute the payment. x 666 shares only what is required — payment amount, account identifiers, and transaction reference. These processors operate under their own privacy policies and data security obligations.

5.2 Identity Verification Providers

When KYC verification is triggered, x 666 may share your submitted identity documents with a third-party verification service to confirm authenticity against official records. This data is transmitted under strict contractual data protection obligations and is not retained by the verification provider beyond the time required to complete the check.

5.3 Game and Technology Providers

Certain games on the x 666 platform are provided by third-party game studios. When you play these games, your player identifier and gaming session data may be transmitted to the game provider to run the game. Game providers do not receive your financial or identity data unless it is directly necessary for the game's operation, which is rare and would be disclosed in that game's specific terms.

5.4 Fraud Prevention and Security Services

x 666 uses industry-standard fraud detection and security monitoring tools. These services may process technical data (IP addresses, device fingerprints, behavioural patterns) to identify unusual or suspicious activity. Data shared for this purpose is processed under appropriate data processing agreements.

5.5 Legal and Regulatory Disclosure

x 666 will disclose personal data to law enforcement, regulatory authorities, or courts where required to do so by applicable law — including anti-money laundering regulations and orders issued by Pakistani courts or government authorities. We will not disclose your data voluntarily to any government body beyond what is legally required.

All data collected by x 666 is stored on servers located in secure data centres with physical access controls, redundant power, and environmental monitoring. Data at rest is encrypted using industry-standard AES-256 encryption. All data in transit between your device and x 666's servers is encrypted via TLS (Transport Layer Security), which is the technology behind the padlock icon in your browser's address bar.

Access to personal data within x 666 is restricted on a strict need-to-know basis. Customer support agents can access only the account information required to assist with a specific query. Financial data access is limited to the payments team. Full database access is restricted to a small number of senior technical staff and is logged comprehensively for audit purposes.

x 666 conducts regular internal security reviews and engages third-party security professionals to test our systems periodically. When security vulnerabilities are identified — whether internally or reported externally — they are treated as high-priority issues with defined resolution timelines.

Despite these measures, no internet-based service can guarantee absolute security. If x 666 experiences a data breach that is likely to result in risk to your rights and freedoms, we will notify affected players promptly and take all reasonable steps to contain and remediate the incident.

x 666 does not retain your data longer than it needs to. The retention periods for different data categories are:

• Account and identity data: Retained for the duration of your account and for five years after account closure. Anti-money laundering regulations in Pakistan require financial services entities to retain customer identification records for a minimum period; x 666 complies with these requirements.
• Transaction records: Retained for seven years from the date of each transaction. This period is driven by financial record-keeping obligations and the statute of limitations for financial disputes.
• Gaming and activity data: Retained for five years from the date of each activity record. This data is required for dispute resolution, responsible gaming monitoring, and regulatory compliance.
• Support communication records: Retained for three years from the date of the last communication in each support case.
• Technical log data: Retained for 90 days, after which it is deleted. This data is primarily used for short-term security monitoring and platform diagnostics.
• Marketing consent records: Retained until you withdraw consent, plus one year to maintain a suppression list that prevents accidental re-contact.

When data is no longer required and the applicable retention period has elapsed, x 666 deletes or permanently anonymises it in a manner that prevents reconstruction of individual player records.

x 666 uses cookies and similar technologies on the platform. A cookie is a small text file placed on your device by the website that helps the site function correctly, remember your preferences, and analyse how the platform is being used. Here is a breakdown of the cookies x 666 uses:

You can control non-essential cookies through your browser settings. Disabling essential cookies will prevent the x 666 platform from functioning correctly and you will be unable to log in or place bets. x 666 does not use advertising or remarketing cookies — we do not track your activity across other websites.

As a player on the x 666 platform, you have the following rights regarding your personal data. To exercise any of them, contact our privacy team at privacy@x666-vip.com with your account details and a description of what you're requesting. x 666 will respond within 14 days.

• Right to Access: You can request a copy of all personal data x 666 holds about you. We will provide this in a readable format within 14 days of a verified request.
• Right to Correction: If any personal data x 666 holds about you is inaccurate or incomplete, you can ask us to correct it. For basic account information, you can update many details yourself from your account settings.
• Right to Deletion: You can request that x 666 delete your personal data. We will fulfil deletion requests where we are not required by law to retain the data. Financial and identity records required for anti-money laundering compliance cannot be deleted before the applicable retention period expires, but we will confirm exactly what can and cannot be deleted and why.
• Right to Restrict Processing: In certain circumstances, you can ask x 666 to pause processing your data while a query is being resolved — for example, if you have contested the accuracy of data we hold.
• Right to Data Portability: You can request a copy of data you have provided to x 666 in a structured, machine-readable format.
• Right to Object to Marketing: You can opt out of promotional communications at any time by using the unsubscribe link in any marketing email, updating your notification preferences in account settings, or contacting support directly.

x 666 is strictly for adults aged 18 and above. The platform does not knowingly collect personal data from anyone under 18. If x 666 becomes aware that a player is under 18, the account will be closed immediately, all activity records will be reviewed, and any funds will be handled in accordance with our Terms and Conditions.

If you are a parent or guardian and believe your child has created an x 666 account or provided personal data to the platform, please contact our support team immediately at support@x666-vip.com. We will investigate and take appropriate action without delay.

x 666 may send promotional emails, SMS messages, or in-platform notifications about new games, bonuses, PSL season promotions, Eid offers, and other platform news. We send these communications only to players who have explicitly opted in to receive them during registration or through account settings.

If you have opted in and later decide you no longer want to receive marketing from x 666, you can opt out at any time. Opting out of marketing does not affect operational communications — you will still receive account-related notifications such as deposit confirmations, withdrawal status updates, and security alerts regardless of your marketing preferences, because these are necessary for account operation rather than optional promotional content.

x 666 does not share your contact details with third-party advertisers for the purpose of sending you their marketing communications.

x 666 reviews this Privacy Policy regularly and will update it when our data practices change, when legal requirements change, or when we add new services that affect how personal data is processed. The "Last Updated" date at the top of this page reflects when the policy was most recently revised.

When material changes are made, x 666 will notify registered players by email and/or through a notice on the platform before the changes take effect. Continued use of the x 666 platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If a change reduces your privacy rights in a meaningful way and you do not accept it, you should close your account and contact support to arrange withdrawal of your remaining balance.

x 666's privacy team handles all data-related queries, access requests, correction requests, and complaints. Our commitment is to acknowledge every privacy query within 48 hours and to resolve substantive requests within 14 calendar days. More complex requests — such as full data subject access requests — may require up to 30 days, but we will confirm the expected timeline in our acknowledgment response.

You can reach the x 666 privacy team through the following channels:

• Email (preferred): privacy@x666-vip.com — use this for formal privacy requests, access requests, and complaints.
• Live Chat: Available on the x 666 platform 24/7 — use this for general privacy questions or to be directed to the privacy team.
• Support Email: support@x666-vip.com — for general account support including privacy-adjacent queries.

When contacting x 666 about a privacy matter, please include your registered mobile number or email address in your message so we can verify your identity and locate your account. Without this information, we cannot process data requests or complaints linked to a specific account.