666xp Casino – Privacy Policy

1. Who We Are

666xp ("we", "us", "our") operates the online casino and sports betting platform accessible at 666xp.app and related subdomains. 666xp is the data controller responsible for the personal information collected from users who register, deposit, wager, or otherwise interact with the 666xp platform. References to "you" or "your" in this Privacy Policy refer to any individual who accesses or uses 666xp, including registered and unregistered visitors.

This Privacy Policy applies to all personal data processed by 666xp in connection with the platform, including data collected through the website, via communications with 666xp support, and through transactions processed via Pakistani payment channels such as JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah.

2. Data We Collect

666xp collects the following categories of personal data from its users:

• Identity Data: Full name, date of birth, nationality, copies of government-issued identification documents (e.g., CNIC for Pakistani users);
• Contact Data: Mobile number (including Pakistani mobile numbers registered with JazzCash or Easypaisa), email address, and city of residence;
• Financial Data: Payment method details, transaction history, deposit and withdrawal records, account balances, and PKR transaction amounts;
• Account Data: Username, encrypted password, login history, session data, device identifiers, and IP addresses;
• Usage Data: Game history, betting activity, sport and casino preferences, pages visited, session duration, and interaction logs;
• Communications Data: Records of correspondence with 666xp support, including chat transcripts, emails, and any documents submitted during the support process;
• Technical Data: Browser type, operating system, device type, and referral source data collected through standard web analytics mechanisms.

666xp does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where specifically required by applicable law or where you have provided such information voluntarily in the context of a responsible gaming self-assessment.

3. How We Collect Data

666xp collects personal data through the following means:

• Direct submission: Information you provide during account registration, identity verification, deposit and withdrawal requests, or when contacting 666xp support;
• Automated collection: Technical and usage data collected automatically when you visit or use the 666xp platform, including through cookies, server logs, and analytics tools;
• Third-party processors: Financial and identity data received from payment processors (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah) and identity verification service providers in connection with KYC (Know Your Customer) obligations;
• Game providers: Aggregated game session data shared by licensed game providers (PG Soft, Pragmatic Play, Evolution Gaming, etc.) for platform performance and responsible gaming monitoring purposes.

4. How We Use Your Data

666xp uses the personal data it collects for the following purposes:

• To create and manage your 666xp account and verify your identity in compliance with KYC requirements;
• To process deposits, withdrawals, and other financial transactions in PKR through supported payment channels;
• To operate, maintain, and improve the 666xp platform, including personalising your experience on the site;
• To administer bonuses, promotions, and the 666xp VIP programme;
• To monitor for fraud, money laundering, match manipulation, and other prohibited conduct;
• To fulfil responsible gaming obligations, including monitoring account activity and facilitating deposit limits, cooling-off periods, and self-exclusion requests;
• To communicate with you regarding your account, transactions, platform updates, and where you have opted in, promotional offers;
• To comply with applicable legal obligations including anti-money laundering record-keeping requirements under 666xp's operating licence.

5. Legal Basis for Processing

666xp processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the 666xp platform services you have contracted for, including account management, payment processing, and gameplay;
• Legal obligation: Processing required to comply with applicable legal obligations, including KYC, anti-money laundering, and record-keeping requirements under 666xp's operating licence;
• Legitimate interests: Processing necessary for 666xp's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your privacy rights;
• Consent: Processing of data for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time by contacting 666xp support or using the opt-out mechanisms within the platform.

6. Sharing Your Data

666xp does not sell, rent, or trade your personal information to third parties for their own commercial purposes. 666xp may share your data with the following categories of third parties only to the extent necessary for the purposes described in this Privacy Policy:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other supported payment providers, to process your PKR transactions;
• Identity verification providers: Third-party KYC service providers used to verify your identity and comply with anti-money laundering obligations;
• Game providers: Licensed game software providers (PG Soft, Pragmatic Play, Evolution Gaming, etc.) receive session data necessary to operate the games you play on 666xp;
• Technology and infrastructure providers: Cloud hosting, cybersecurity, and analytics service providers who process data on 666xp's behalf under data processing agreements;
• Regulatory and law enforcement bodies: Where 666xp is legally required to disclose information to regulators, licensing authorities, or law enforcement agencies.

All third-party processors engaged by 666xp are contractually obligated to handle your data securely and only for the specific purposes for which it was shared.

7. Cookies & Tracking Technologies

666xp uses cookies and similar tracking technologies to operate the platform, improve user experience, and gather analytics data. The categories of cookies used by 666xp include:

• Essential cookies: Required for the platform to function correctly, including session management, authentication, and security. These cannot be disabled without affecting your ability to use 666xp;
• Analytics cookies: Used to collect aggregated information about how users interact with the platform, which pages are visited most frequently, and where errors occur. This data helps 666xp improve platform performance;
• Preference cookies: Store your language and display preferences so the platform remembers your settings between sessions;
• Marketing cookies: Used where you have consented to receive personalised promotions and offers. You may withdraw this consent at any time.

You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the 666xp platform.

8. Data Retention

666xp retains personal data for no longer than is necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable law. Specific retention periods include:

• Account and identity verification data: Retained for a minimum of five (5) years following account closure, as required by anti-money laundering obligations under 666xp's operating licence;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Communications with support: Retained for three (3) years from the date of the communication;
• Game history and usage data: Retained for two (2) years from the date of the session, unless required to be retained longer for legal or dispute resolution purposes.

Following the applicable retention period, 666xp will securely delete or anonymise your personal data in a manner that prevents recovery or reconstruction.

9. Security Measures

666xp implements a comprehensive set of technical and organisational measures to protect your personal data from unauthorised access, loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 666xp's servers;
• Encryption of sensitive data at rest, including financial and identity information;
• Access controls limiting employee access to personal data to those with a specific operational need;
• Regular security audits, penetration testing, and vulnerability assessments;
• Two-factor authentication available to all 666xp account holders;
• Automated detection systems for suspicious login activity and potential account compromise.

Despite these measures, no data transmission over the internet can be guaranteed to be entirely secure. If 666xp becomes aware of a data breach affecting your personal information, we will notify you in accordance with applicable legal requirements.

10. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by 666xp:

• Right of access: You may request a copy of the personal data 666xp holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to restriction: You may request that 666xp restrict processing of your data in certain circumstances;
• Right to data portability: Where processing is based on consent or contract, you may request your data in a structured, commonly used format;
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact 666xp support at the details provided in Section 14. 666xp will respond to verified requests within 30 days. In some cases, particularly where requests are complex or numerous, this period may be extended by a further 60 days with notice to you.

11. Children's Privacy

The 666xp platform is strictly for adults aged 18 years and above. 666xp does not knowingly collect personal data from individuals under the age of 18. If 666xp becomes aware that it has collected data from a person under 18, it will immediately suspend the associated account, delete the data, and report the matter as required by applicable law.

Parents and guardians who believe a minor may have accessed 666xp are encouraged to contact the support team immediately. 666xp takes underage access to gambling platforms seriously and will cooperate fully with any investigation or regulatory requirement arising from such an incident.

12. Third-Party Links

The 666xp platform may contain references to or information about game providers and payment processors. This Privacy Policy applies solely to data processed by 666xp and does not extend to any third-party websites, services, or applications. 666xp is not responsible for the privacy practices of third parties, and users are encouraged to review the relevant privacy policies of any third-party services they use in connection with 666xp.

13. Policy Updates

666xp may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, 666xp will provide reasonable advance notice to registered users via platform notification or email to the address associated with your account.

The effective date of the current version of this Privacy Policy is displayed at the top of this page. Your continued use of 666xp following notification of any material change constitutes your acceptance of the revised policy. If you do not accept the updated policy, you must discontinue use of 666xp and may request account closure by contacting support.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 666xp handles your personal data, please contact our support team. Our team is available 24/7 and can assist in English with Urdu-friendly support available for Pakistani users.

General Support: [email protected]

VIP & Accounts: [email protected]

We aim to respond to all privacy-related requests within 30 days of receipt. Where a request relates to data held under AML or licensing obligations that cannot be deleted, 666xp will explain the legal basis for retention clearly.