666x Privacy Policy — How We Protect Your Data

This Privacy Policy applies to all personal data processed by 666x in connection with the operation of the 666x online gaming and sports betting platform accessible at 666x.games. It applies to all registered Players, prospective Players who have commenced registration, and visitors to the 666x platform, regardless of the device or network through which the platform is accessed.

In this Privacy Policy, references to "666x", "we", "us", or "our" refer to the entity operating the 666x platform under its international gaming license. References to "you", "Player", or "user" refer to any natural person whose personal data is processed by 666x in the context described above.

By registering a 666x account, making a deposit, or using any feature of the 666x platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you must refrain from registering or continuing to use the 666x platform.

666x collects the following categories of personal data in connection with the registration, verification, and ongoing use of a 666x account:

666x collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide directly when completing the 666x registration form, submitting KYC verification documents, making deposits or withdrawals, contacting support, or updating your account profile.
• Automated collection: Technical and behavioural data automatically recorded by the 666x platform during your access sessions, including IP address, device identifiers, and gaming activity logs.
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, and banking partners (HBL, UBL, Meezan Bank) in connection with deposit and withdrawal processing. 666x does not store full payment credentials — only the masked identifiers needed for transaction matching and dispute resolution.
• Cookies and similar technologies: As described in Section 8 of this Privacy Policy, 666x uses cookies and local storage to maintain session continuity, remember platform preferences, and analyse platform performance.
• Third-party identity verification services: Where 666x uses an authorised third-party KYC service to verify identity documents, data provided to that service is shared with 666x only to the extent necessary for identity confirmation and fraud prevention.

666x processes your personal data for the following specific, documented purposes:

• Account registration and management: Creating and maintaining your 666x account, verifying your identity, and managing account settings including responsible gaming configurations.
• Service delivery: Enabling access to casino games, sports betting markets, live dealer tables, crash games, bingo, and all other 666x gaming services.
• Financial transaction processing: Processing PKR deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank; maintaining accurate transaction records; resolving payment disputes.
• Regulatory compliance: Fulfilling Know Your Customer (KYC) obligations, anti-money laundering (AML) checks, age verification (21+), and all other compliance obligations under the 666x international gaming license.
• Fraud detection and prevention: Monitoring account activity to detect and prevent fraud, bonus abuse, account takeover, and other forms of financial crime.
• Customer support: Responding to support queries submitted by Players in English or Urdu, resolving disputes, and improving the support experience based on communication records.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviours, enforcing self-exclusion and deposit limit settings, and proactively offering responsible gaming resources where appropriate.
• Platform improvement: Analysing aggregated and anonymised usage data to improve 666x platform performance, game selection, and user experience.
• Marketing communications (with consent): Sending promotional materials, bonus offers, and platform updates to Players who have explicitly opted in to receive such communications. You may withdraw marketing consent at any time via your account settings.

666x processes personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to perform the contract between 666x and the Player — including account management, game access, and PKR transaction processing.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements under the 666x international gaming license, including KYC, AML, and age verification obligations.
• Legitimate interests: Processing carried out to pursue the legitimate business interests of 666x, such as fraud prevention, platform security, and responsible gaming monitoring, where those interests do not override your fundamental privacy rights.
• Consent: Processing based on your explicit, freely given consent — primarily for marketing communications. You may withdraw consent at any time without affecting the legality of prior processing.

666x does not sell or commercially transfer personal data to third parties. Your data may be shared only in the following limited and controlled circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive only the data strictly necessary to process PKR deposit and withdrawal transactions initiated by you. 666x has data processing agreements in place with all payment partners.
• KYC and identity verification providers: Authorised third-party identity verification services receive identity document data solely for the purpose of completing regulatory KYC checks. These providers are contractually prohibited from using your data for any other purpose.
• Game software providers: Third-party casino game providers (live dealer studios, slot developers) may receive anonymised session data for game performance and fairness auditing. No personally identifiable information is shared with game providers without your explicit consent.
• Regulatory authorities: 666x may be legally required to disclose personal data to the gaming regulatory authority under whose license it operates, or to law enforcement agencies in connection with investigations into financial crime, fraud, or match fixing.
• Corporate transactions: In the event of a merger, acquisition, or sale of the 666x business, personal data held by 666x may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

666x retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

The 666x platform uses cookies and similar client-side storage technologies to deliver core platform functionality, maintain session security, and analyse usage patterns. The following categories of cookies are used:

• Essential cookies: Required for core platform functions including login session management, security token validation, and language preference storage. These cookies cannot be disabled without impairing platform functionality.
• Performance cookies: Collect anonymised data about how Players use the 666x platform — including which pages are visited most frequently and where errors occur — to help us improve platform performance. No personally identifiable information is collected through performance cookies.
• Functional cookies: Remember your platform preferences such as display language, game lobby filter settings, and notification preferences across sessions.
• Security cookies: Used for fraud detection purposes, including identifying anomalous login patterns and brute-force attempts against your 666x account.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging into your 666x account. 666x does not use third-party advertising cookies or behavioural tracking technologies for commercial advertising purposes.

The security of your PKR financial data is a top priority at 666x. The following security measures are applied specifically to payment-related personal data:

• JazzCash and EasyPaisa wallet identifiers are stored in an encrypted format using AES-256 encryption. Full wallet numbers are masked in all account interfaces — only the last four digits are displayed.
• Bank account details provided for HBL, UBL, and Meezan Bank withdrawals are used solely for the specific withdrawal transaction and are not retained on the 666x platform after the transaction is completed, unless you explicitly save them as a preferred withdrawal method.
• All payment data is transmitted over TLS 1.3 encrypted connections. 666x does not transmit payment credentials over unencrypted channels under any circumstances.
• The 666x payment infrastructure is isolated from other platform systems and accessible only to authorised finance and compliance personnel with documented access justification.
• Regular independent security audits are conducted on the 666x payment infrastructure as a condition of the platform's international gaming license.

As a 666x Player, you have the following rights in relation to your personal data held by 666x. To exercise any of these rights, contact the 666x data team at [email protected] with the subject line "Data Rights Request":

• Right of Access: You may request a copy of all personal data held by 666x about you. 666x will provide a structured data export within 30 days of receiving a verified request.
• Right of Rectification: You may request correction of any inaccurate or incomplete personal data held in your 666x account. Corrections to identity-verified data (CNIC, name) require re-submission of supporting documentation.
• Right of Erasure: You may request deletion of your personal data, subject to 666x's legal obligation to retain certain records (financial transaction data, KYC records) for the periods specified in Section 7. Erasure requests will be fulfilled for all data not subject to mandatory retention.
• Right to Restrict Processing: You may request that 666x restrict the processing of your personal data in specific circumstances, such as while the accuracy of the data is being contested.
• Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time through your account settings or by contacting support. Withdrawal of consent does not affect the legality of processing carried out prior to withdrawal.
• Right to Data Portability: You may request that your personal data be provided to you in a structured, commonly used, and machine-readable format (such as JSON or CSV) for transfer to another service provider.

All data rights requests will be acknowledged within 48 hours and fulfilled within 30 calendar days. Where a request cannot be fulfilled due to conflicting legal obligations, 666x will provide a written explanation specifying the legal basis for the limitation.

The 666x platform is strictly intended for adults aged 21 years and above. 666x does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. If 666x discovers that personal data of an underage individual has been submitted during registration, that account will be immediately closed, the data will be securely deleted, and any deposited funds will be returned to the originating payment method after completion of required compliance procedures.

Parents and guardians who have reason to believe that a minor has registered on the 666x platform using false information are urged to contact 666x support immediately at [email protected]. 666x will treat all such reports as priority matters and take immediate action upon receipt of a verified report.

In the event that 666x becomes aware of a personal data breach that poses a risk to the rights and freedoms of affected Players, 666x will take the following steps:

• Immediately contain the breach and prevent further unauthorised access to affected data.
• Notify the relevant gaming regulatory authority within 72 hours of becoming aware of the breach, in accordance with the reporting obligations under the 666x international gaming license.
• Notify affected Players directly via the email address or Pakistani mobile number registered on their 666x account, providing a clear description of: the nature of the breach, the categories and approximate number of records affected, the likely consequences of the breach, and the steps taken or proposed to mitigate the breach.
• Conduct a full root cause analysis and implement remediation measures to prevent recurrence.

666x reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, regulatory requirements, or platform functionality. Material changes to this Privacy Policy will be communicated to all registered Players via email notification to the address on their 666x account at least fourteen (14) days before the updated policy takes effect.

The current version of the Privacy Policy is always available at 666x.games/privacy-policy. The effective date displayed at the top of this page indicates when the current version was last updated. Your continued use of the 666x platform after the stated effective date of any updated Privacy Policy constitutes your acceptance of the updated terms.

For all privacy-related enquiries, data rights requests, or concerns about how 666x handles your personal data, please contact the 666x data and compliance team using the details below:

666x is committed to resolving all privacy concerns raised by Pakistani Players fairly and transparently. If you are not satisfied with 666x's response to a privacy complaint, you may escalate your concern to the relevant regulatory authority under whose jurisdiction the 666x international gaming license operates.

// document_version: v2.4 | last_updated: 2026-01-01 | controller: 666x.games | data_contact: [email protected] | min_age: 21+