xx666 Privacy Policy

1. Introduction

xx666 ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of all users of xx666.one. This Privacy Policy ("Policy") describes how xx666 collects, processes, uses, stores, and shares personal information obtained from players and visitors in connection with the operation of our online casino and sports betting services.

This Policy applies to all data processing activities conducted by xx666 in connection with player accounts, transactions, customer support interactions, and platform use. It covers Pakistani players transacting in PKR via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and any other payment channel accepted by the Platform.

By registering an account, accessing xx666.one, or otherwise interacting with our services, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. If you do not agree with any provision herein, you should not use the xx666 Platform.

2. Data Controller

For the purposes of this Policy, xx666 operates as the data controller in respect of personal data collected from players through xx666.one. As data controller, xx666 determines the purposes and means of processing player personal data and bears corresponding obligations for lawful, fair, and transparent data handling.

Where xx666 engages third-party service providers — including payment processors, game software providers, and fraud prevention services — such parties act as data processors acting on xx666's documented instructions. xx666 maintains contractual data processing agreements with all third-party processors.

3. Data We Collect

xx666 collects personal data across three primary categories:

3.1 Registration & Identity Data

• Full legal name as it appears on official identity documents;
• Date of birth (for age verification);
• Pakistani CNIC number or other government-issued identification number;
• Residential address (city, province, postal code);
• Email address;
• Mobile phone number registered with your Pakistani network provider (Jazz, Telenor, Zong, Ufone, or Warid).

3.2 Financial & Transaction Data

• JazzCash account identifier or Easypaisa mobile number used for deposits and withdrawals;
• Bank account details for HBL, UBL, Meezan Bank, or Bank Alfalah transactions;
• Transaction history including deposit amounts, withdrawal requests, and bonus credits in PKR;
• Payment method verification documents submitted during KYC;
• Source-of-funds declarations where requested.

3.3 Technical & Behavioural Data

• IP address and geolocation data at time of login and transaction;
• Device type, operating system, and browser version;
• Session duration, pages visited, and navigation patterns;
• Game history, wagering activity, and betting patterns;
• Customer support interaction logs, chat transcripts, and support tickets;
• Cookies and similar tracking technologies as described in Section 9.

4. How We Use Your Data

xx666 processes personal data for the following purposes:

xx666 does not process personal data for purposes incompatible with those stated above without prior notice and, where required, your explicit consent.

5. Legal Basis for Processing

xx666 processes personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to enter into and perform the player account agreement — including account creation, transaction processing, and bonus administration;
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification obligations, and regulatory reporting requirements;
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where those interests are not overridden by player privacy rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit opt-in consent. Consent may be withdrawn at any time without detriment to your account.

6. Payment Data & PKR Banking

Given that the majority of xx666 players in Pakistan transact via JazzCash, Easypaisa, and local bank accounts, xx666 applies specific handling standards to payment-related personal data:

• Mobile wallet identifiers (JazzCash and Easypaisa account numbers) are stored in encrypted form and used solely for transaction routing and withdrawal processing;
• Bank account details (HBL, UBL, Meezan Bank, Bank Alfalah) provided for withdrawals are stored only for the duration necessary to process the specific transaction, after which they are archived under access restriction for the mandatory AML retention period;
• No full payment card or bank account numbers are displayed in the xx666 interface beyond the minimum digits required for player identification of their own payment method;
• Transaction records in PKR are retained for AML compliance purposes for a minimum of five (5) years from the date of the transaction;
• xx666 does not share payment method credentials with third parties other than the relevant payment processing institution and, where legally required, regulatory authorities.

7. KYC & AML Data Obligations

As a platform accepting real money wagers and processing PKR transactions, xx666 is subject to Know Your Customer ("KYC") and Anti-Money Laundering ("AML") obligations. These create specific data collection and retention requirements that operate independently of player consent:

• Identity verification documents — including copies of CNIC, passport, or other government-issued identification — are collected, stored securely, and retained for the mandated period;
• Transaction monitoring is conducted on an automated and manual basis. Unusual activity patterns may trigger enhanced due diligence, requiring additional documentation from affected players;
• xx666 is legally obligated to report certain transactions and suspicious activity to relevant financial intelligence authorities, without ability to notify the affected player of such reports in advance;
• KYC and AML data is not used for marketing purposes and is held under stricter access controls than general account data.

8. Sharing Your Data

xx666 does not sell, rent, or trade personal data to third parties for their own marketing purposes. Data sharing is limited to the following categories of recipient:

• Payment processors: JazzCash, Easypaisa, and participating Pakistani banks for transaction processing and settlement;
• Game software providers: Licensed game studios and live casino operators (including Evolution Gaming) where game delivery requires transmission of session identifiers;
• Identity verification services: Third-party KYC and document verification providers engaged to support age and identity checks;
• Fraud prevention services: External risk assessment and fraud scoring providers processing technical and behavioural data for platform security;
• Regulatory and law enforcement authorities: Where disclosure is required by applicable law, court order, or regulatory mandate — without prior player notification where legally prohibited;
• Business successors: In the event of a merger, acquisition, or sale of xx666 assets, player data may be transferred to the acquiring entity subject to equivalent privacy protections.

All third-party data processors engaged by xx666 are subject to contractual data processing obligations requiring them to process player data only in accordance with xx666's documented instructions and applicable data protection standards.

9. Cookies & Analytics

xx666 uses cookies and similar technologies on xx666.one for the following purposes:

Essential Cookies

Required for platform operation including session management, authentication state, and security tokens. These cookies cannot be disabled without rendering core platform functionality unavailable. No consent is required for essential cookies.

Analytical Cookies

Used to understand aggregated user behaviour across the platform — page performance, navigation flows, error rates, and device statistics. Data is processed in anonymised or pseudonymised form. Players may opt out of analytical cookies through their browser settings or the xx666 cookie preference panel.

Marketing Cookies

Where players have provided explicit consent, limited marketing cookies may be used to measure campaign effectiveness. xx666 does not permit third-party advertising networks to place tracking cookies on xx666.one without documented player consent. Consent may be withdrawn at any time through the cookie preference centre accessible from the site footer.

Most modern browsers provide controls to manage, block, or delete cookies. Blocking essential cookies will impair your ability to use xx666. For instructions specific to your browser, consult the relevant browser documentation.

10. Data Security

xx666 implements industry-standard technical and organisational security measures to protect player personal data against unauthorised access, accidental loss, alteration, or disclosure:

• 256-bit SSL/TLS encryption for all data transmitted between your device and xx666.one;
• Encryption at rest for all sensitive personal and financial data stored on xx666 servers;
• Role-based access controls limiting staff access to personal data on a strictly need-to-know basis;
• Multi-factor authentication for administrative access to data systems;
• Regular penetration testing and vulnerability assessments by independent security specialists;
• Incident response procedures for timely detection, containment, and notification of data security incidents.

In the event of a data security incident materially affecting player personal data, xx666 will notify affected players without undue delay, together with details of the nature of the incident, the data involved, and the remedial action taken.

11. Data Retention

xx666 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to mandatory minimum retention periods under applicable law:

• Active account data: Retained throughout the account relationship;
• Transaction and KYC records: Minimum 5 years from the date of the relevant transaction, in compliance with AML obligations;
• Customer support records: 3 years from the date of closure of the relevant support interaction;
• Marketing consent records: Retained until consent is withdrawn plus 1 year for compliance audit purposes;
• Technical and analytical data: Anonymised after 24 months; raw logs purged after 12 months unless required for active investigations.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents recovery or re-identification.

12. Your Privacy Rights

Subject to applicable law and specific exceptions (including mandatory retention obligations), you may exercise the following rights in relation to personal data held by xx666:

• Right of access: Request confirmation of whether xx666 holds personal data about you and obtain a copy of that data;
• Right to rectification: Request correction of inaccurate or incomplete personal data held by xx666;
• Right to erasure: Request deletion of personal data where it is no longer necessary for the purposes collected, subject to mandatory retention requirements;
• Right to restriction: Request that xx666 restrict processing of your personal data in certain circumstances pending resolution of an objection or rectification request;
• Right to portability: Request a structured, machine-readable copy of personal data you have provided to xx666 for portability to another service;
• Right to object: Object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Withdraw consent for consent-based processing (e.g., marketing communications) at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact xx666 customer support. Requests will be acknowledged within 5 business days and resolved within 30 calendar days. Where resolution requires additional time, you will be notified of the extended timeline and the reason for the delay.

13. Children's Privacy

xx666 does not knowingly collect personal data from individuals under 18 years of age. Access to xx666.one is strictly prohibited for persons under 18. Age verification is conducted as part of the KYC process, and any account found to be registered by or on behalf of a minor will be closed immediately, with all associated funds handled in accordance with applicable regulatory requirements.

If you believe that a minor may have provided personal data to xx666, please contact our support team immediately so that appropriate action can be taken without delay.

14. Changes to This Policy

xx666 reserves the right to amend this Privacy Policy at any time. Material changes — those that significantly affect player rights or data processing practices — will be communicated via email to registered players and by prominent notice on xx666.one at least 7 days prior to the effective date of the change.

The current version of this Policy is always available at xx666.one/privacy-policy. The "Last Updated" date at the top of this page reflects the date of the most recent revision. Continued use of xx666 following the effective date of any amendment constitutes acceptance of the revised Policy.

15. Contact Us

For enquiries, requests, or complaints relating to the processing of your personal data by xx666, please contact our privacy team through the following channels:

• Live Chat: Available 24/7 on xx666.one — select "Privacy / Data Query" from the support menu;
• Email: [email protected] — include "Privacy Policy" in the subject line for routing to the relevant team.

xx666 takes privacy complaints seriously. Where you believe your data has been processed unlawfully or your rights have not been respected, you may also escalate your concern to the relevant data protection supervisory authority in your jurisdiction.