xx666 Privacy Policy

This Privacy Policy ("Policy") is issued by xx666 ("the Company", "we", "us", "our") and applies to all personal data collected, processed, and stored in connection with the xx666 online gaming platform accessible at xx666.bid and any associated mobile, web, or application-based services operated under the xx666 brand.

This Policy is addressed to all individuals ("you", "your", "Player", "User") who interact with the xx666 Platform in any capacity — including registered account holders, individuals who browse the Platform without registering, and individuals who contact xx666 support. By accessing or using the xx666 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing practices described herein.

This Policy should be read in conjunction with the xx666 Terms & Conditions, which are available at xx666.bid/terms-conditions, and which are incorporated by reference into this Policy. Capitalised terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

xx666 is the data controller responsible for the personal data collected through the xx666 Platform. As data controller, xx666 determines the purposes for which personal data is processed and the means by which it is processed. xx666 operates under an internationally recognised gaming licence, which imposes binding data protection and security obligations that inform and supplement the commitments made in this Policy.

For the purposes of this Policy, the xx666 Platform includes the website at xx666.bid, the account management portal, the gaming lobby (live casino, sports betting, slots, Mines Grand, Circle), the PKR wallet and payment processing interface, the VIP loyalty programme dashboard, the xx666 Login system, and all customer support communication channels.

Enquiries regarding xx666's data processing activities may be directed to our support team at the contact details provided in Section 16 of this Policy.

xx666 collects personal data across several categories depending on your level of interaction with the Platform. The following table provides a structured overview of the data categories collected and the context in which collection occurs:

xx666 collects personal data through the following primary channels:

• Direct Collection: Data you actively provide when registering an xx666 account, completing the KYC verification process, making a deposit or withdrawal request, contacting our support team, or updating your account profile.
• Automated Technical Collection: Technical and usage data collected automatically when you access the xx666 Platform through cookies, web server logs, and similar tracking technologies. This data is collected regardless of whether you have a registered account.
• Payment Provider Data: Confirmation and reference data received from JazzCash, EasyPaisa, HBL, UBL, SadaPay, Meezan Bank, and cryptocurrency processing services when you initiate a deposit or withdrawal transaction.
• KYC Verification Partners: Identity verification data returned by licensed third-party KYC verification services following document submission, including age and identity confirmation status.
• Third-Party Game Providers: Aggregate and session-level data from certified game studio partners (such as Pragmatic Play and PG Soft) related to game sessions conducted on the xx666 Platform.
• Support Interactions: Data volunteered during live chat sessions, email correspondence, or other support channel interactions with the xx666 team.

xx666 processes your personal data only where a valid legal basis exists for doing so. The primary legal bases on which xx666 relies are as follows:

• Contractual Necessity: Processing required to perform the contract between xx666 and you — specifically the xx666 Terms & Conditions — including operating your account, processing deposits and withdrawals, settling game outcomes, and providing customer support.
• Legal Obligation: Processing required for xx666 to comply with its international gaming licence obligations, anti-money-laundering (AML) regulations, Know Your Customer (KYC) requirements, and any applicable data retention mandates.
• Legitimate Interests: Processing that xx666 considers necessary for legitimate business purposes that do not override your fundamental privacy interests — including fraud prevention, platform security, responsible gaming monitoring, and internal analytics that improve the Platform for Pakistani players.
• Consent: Processing for marketing communications, where xx666 will only send promotional messages through channels you have explicitly opted into during registration or subsequently in your account settings. You may withdraw marketing consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

xx666 uses the personal data described in Section 3 for the following defined purposes:

• Creating and managing your xx666 account, including your PKR wallet balance and transaction history.
• Verifying your identity and age (21+) in compliance with KYC obligations applicable under our gaming licence.
• Processing PKR deposits via JazzCash, EasyPaisa, HBL, UBL, SadaPay, Meezan Bank, and USDT TRC20, and processing withdrawal requests back to your verified payment method.
• Delivering the gaming services you access — live casino, sports betting (including PSL and international cricket), slots, Mines Grand, and Circle — and recording game and bet outcomes.
• Administering the xx666 VIP loyalty programme, calculating cashback entitlements, and tracking tier progression.
• Providing customer support in English and Urdu, including responding to queries, resolving disputes, and processing complaints.
• Detecting, investigating, and preventing fraudulent activity, money laundering, collusion, and other activity that breaches the xx666 Terms & Conditions.
• Monitoring gaming activity for responsible gaming purposes and proactively reaching out to players whose patterns may indicate gambling-related harm.
• Sending account-related communications including deposit confirmations, withdrawal updates, security alerts, and updates to these policies — these communications are transactional and cannot be opted out of while your account is active.
• Sending marketing communications through opted-in channels, including information about promotions, new games, and VIP programme updates — subject to your active marketing consent.
• Analysing aggregate usage data to improve Platform performance, game selection, and the overall experience for Pakistani players.
• Complying with applicable legal and regulatory obligations, including responding to valid law enforcement requests.

xx666 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Data sharing is strictly limited to the categories of recipients and circumstances described below:

• KYC Verification Providers: Licensed identity verification services that process identity document data to confirm your age (21+) and identity on behalf of xx666. These providers are contractually bound to use your data solely for xx666's verification requests.
• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, SadaPay, Meezan Bank, and cryptocurrency payment processors receive the minimum data necessary to execute deposit and withdrawal transactions. Each processor operates under its own published privacy policy and applicable Pakistani financial regulation.
• Game Studio Partners: Certified studios including Pragmatic Play, PG Soft, and Habanero receive session-level data necessary to deliver their games within the xx666 Platform. Studio partners hold their own gaming licences and are subject to data security obligations equivalent to those applicable to xx666.
• Regulatory and Licensing Authorities: xx666's gaming licensing authority and any competent regulatory body may require disclosure of account, transaction, or gaming activity data as part of licence compliance audits or regulatory investigations.
• Law Enforcement Agencies: xx666 will disclose personal data to law enforcement, courts, or government authorities where required by a valid legal order, warrant, or regulatory directive.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by xx666 may access personal data to the extent strictly necessary for the professional service being provided, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of the xx666 business or assets, personal data held may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer in advance where legally permissible.

All third parties to whom xx666 discloses personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose beyond the specific service they provide to xx666.

xx666 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

Following the expiry of the applicable retention period, xx666 will securely delete or anonymise your personal data in accordance with applicable data protection standards. Anonymised data — from which it is not reasonably possible to identify you — may be retained indefinitely for aggregate statistical purposes.

Subject to applicable legal limitations and regulatory retention obligations, you hold the following rights with respect to the personal data xx666 processes about you:

• Right of Access: You may request a copy of the personal data xx666 holds about you, the purposes for which it is processed, the categories of recipients with whom it is shared, and the applicable retention period. Requests are typically fulfilled within 30 days of receipt.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held about you. Minor updates — such as your registered email address or city of residence — can be made directly in your account settings. Changes to identity or financial data require verification.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where (i) the data is no longer necessary for the purpose for which it was collected; (ii) you have withdrawn consent and no other legal basis applies; or (iii) the processing was unlawful. This right is subject to xx666's legal obligations to retain certain data categories (see Section 8) and cannot override regulatory record-keeping requirements.
• Right to Restriction of Processing: You may request that xx666 restrict the processing of your data while you contest its accuracy or the lawfulness of processing, pending resolution of a dispute.
• Right to Data Portability: Where technically feasible, you may request that personal data you have provided to xx666 be delivered to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to xx666's processing of your data where processing is based on legitimate interests, including profiling for responsible gaming monitoring purposes. xx666 will cease such processing unless compelling legitimate grounds exist that override your interests.
• Right to Withdraw Marketing Consent: Where you have consented to receive marketing communications from xx666, you may withdraw that consent at any time by updating your preferences in the account settings panel or by contacting xx666 support. Withdrawal of marketing consent does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of the rights described above, please contact xx666 via live chat or email as described in Section 16. xx666 will not charge a fee for exercising data rights in standard circumstances. If a request is manifestly unfounded or excessive, xx666 reserves the right to either charge a reasonable administrative fee or decline the request with written explanation.

xx666 uses cookies and similar browser storage technologies on the Platform for the purposes described below. A cookie is a small text file placed on your device when you access a website; it allows the website to recognise your device on subsequent visits and to maintain session state across page loads.

• Strictly Necessary Cookies: Required for the Platform to function — including maintaining your xx666 login session, preserving your account state across pages, enabling the game lobby to load correctly, and processing PKR wallet transactions securely. These cookies cannot be disabled without breaking core Platform functionality.
• Preference Cookies: Store your Platform preferences such as language selection (English or Urdu), display settings, and game lobby filters. Disabling these cookies means your preferences will not be saved between sessions.
• Analytics Cookies: Collect anonymised aggregate data about how Pakistani players use the Platform — which games are most accessed, how long sessions last, which pages generate the most navigation errors — to improve the Platform. Individual user identities are not visible in analytics reports.
• Security Cookies: Used for fraud prevention and login security purposes, including detecting unusual login patterns or suspicious activity on your Account.

xx666 does not deploy behavioural advertising cookies, cross-site tracking pixels, or any technologies that monitor your activity on third-party websites outside the xx666 Platform. You may manage cookie settings through your browser's privacy controls. Disabling cookies other than strictly necessary cookies may affect some Platform features but will not prevent basic access to the xx666 login and game lobby.

xx666 implements comprehensive technical and organisational measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the xx666 Platform.
• Encryption of stored personal data, including identity documents and financial account references, using industry-standard encryption protocols.
• Role-based access controls ensuring that xx666 staff members can access only the categories of personal data strictly necessary for their defined job functions.
• Multi-factor authentication requirements for administrative access to xx666 systems that store or process personal data.
• Regular penetration testing and vulnerability assessments of the xx666 Platform infrastructure.
• Automated login anomaly detection that flags and challenges unusual login attempts — for example, login attempts from a new device or from a geographic location inconsistent with your typical login pattern.
• Incident response procedures that require xx666 to assess and respond to any personal data security incident within defined timeframes and to notify affected players and relevant authorities as required by applicable law.

While xx666 takes all reasonable steps to protect your personal data, no system of data transmission or storage can be guaranteed to be entirely secure. You are responsible for maintaining the security of your own xx666 account credentials and for notifying xx666 immediately if you suspect that your account has been accessed without your authorisation.

The xx666 Platform is strictly restricted to individuals who are aged 21 years or older. xx666 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory step in the xx666 account registration process, and full account access — including access to all gaming services and the PKR wallet — is withheld until age has been confirmed through a valid CNIC, passport, or equivalent government-issued document.

If xx666 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a fraudulent registration or any other means — the relevant Account will be immediately closed, any associated balance will be handled in accordance with the Terms & Conditions and applicable licensing obligations, and all personal data associated with the underage individual will be securely deleted or otherwise dealt with in accordance with legal requirements.

If you believe that a minor under your care may have accessed or registered on the xx666 Platform, please contact xx666 support immediately via live chat or at the email address in Section 16.

xx666 operates as an internationally licensed gaming platform and, in the course of providing its services, may transfer personal data to recipients located outside of Pakistan — including to KYC verification providers, game studio partners, and infrastructure hosting services located in jurisdictions such as Malta, Cyprus, the Isle of Man, or other locations where international gaming operations are commonly based.

Where personal data is transferred internationally, xx666 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within the xx666 Platform itself. Such safeguards may include standard contractual clauses, data processing agreements with equivalent security requirements, or transfers to recipients in jurisdictions that maintain adequacy determinations applicable to the receiving country.

Where you have provided explicit consent during xx666 account registration or subsequently in your account settings, xx666 may send you marketing communications about promotions, bonus offers, new game launches, VIP programme updates, and other xx666 services. Marketing communications are sent via SMS to your registered Pakistani mobile number, to your registered email address, or through in-platform notifications, depending on your stated channel preferences.

You may withdraw consent for marketing communications at any time by:

• Updating your communication preferences in the xx666 account settings panel under "Notifications & Marketing."
• Clicking the unsubscribe link included in any xx666 marketing email.
• Contacting xx666 support via live chat or email and requesting removal from marketing communications.

Withdrawal of marketing consent will be processed within 5 business days. Following consent withdrawal, you will continue to receive transactional communications — including deposit confirmations, withdrawal updates, security alerts, and policy change notifications — as these are essential account communications rather than marketing messages and do not require separate consent.

xx666 reserves the right to update or amend this Privacy Policy at any time. Material changes — defined as changes that significantly affect your privacy rights or the way xx666 uses your personal data — will be communicated to registered Players via the email address on file and/or through a prominent notice on the Platform at least seven (7) days before the changes take effect.

Minor clarificatory or administrative changes — such as formatting updates, correction of typographical errors, or addition of examples — may be made without advance notice. The "Last Reviewed" date at the top of this Policy will be updated whenever any amendment is made, regardless of materiality.

Continued use of the xx666 Platform following the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not accept an amendment to this Policy, you should cease using the Platform and request Account closure prior to the effective date of the amendment.

For any questions, concerns, or formal complaints relating to this Privacy Policy or xx666's data processing practices, Pakistani players may contact the xx666 data team through the following channels:

• Live Chat: Available 24/7 on the xx666 Platform in English and Urdu. For privacy enquiries, please state "Privacy Enquiry" at the start of the conversation for routing to an appropriate team member.
• Email: [email protected] — for formal privacy complaints, data rights requests, or detailed enquiries about data processing practices. Please use the subject line "Privacy — [Your Username]" to ensure prompt routing.

xx666 commits to acknowledging privacy enquiries within 24 hours of receipt and providing a substantive response within 30 calendar days. For complex data rights requests, xx666 may extend this period by a further 30 days, in which case you will be notified of the extension and the reason for it.

If you are not satisfied with xx666's response to a privacy complaint, you have the right to escalate the matter to the data protection authority applicable to xx666's licensing jurisdiction or to seek resolution through the dispute mechanism described in the xx666 Terms & Conditions at xx666.bid/terms-conditions.