Privacy Policy – x 666 Pakistan Data Protection Policy

01 Who We Are

x 666 is an online betting and gaming platform operated at x666-win.com and its associated mobile interfaces. References to "x 666," "we," "us," or "our" throughout this Privacy Policy refer to the x 666 platform operator responsible for collecting and processing your personal data.

x 666 acts as the data controller for personal information collected from players, visitors, and prospective registrants who interact with our platform. This Privacy Policy applies to all services offered at x 666, including cricket betting, PSL betting, sports betting, esports, virtual sports, roulette, Andar Bahar, live cricket score, and all account and payment functions.

If you have any questions about how x 666 handles your personal data, you can reach our privacy team at support@x666-win.com at any time. We respond to privacy queries within 48 hours.

02 Data We Collect

x 666 collects personal data through three main channels: information you provide directly, data generated automatically by your use of the platform, and information obtained from trusted third-party partners such as payment processors and KYC verification services.

Information You Provide Directly:

• Full legal name, date of birth, and gender
• Pakistani mobile number and email address registered at x 666
• CNIC, NICOP, or passport number provided for KYC verification
• Easypaisa or JazzCash account number, SadaPay/NayaPay wallet details, IBFT account number, or card details provided for deposits and withdrawals in PKR
• Home address (city and province level, required for accounts processing withdrawals above Rs 50,000)
• Communications sent to the x 666 support team via email, live chat, or WhatsApp

Data Generated Automatically When You Use x 666:

• IP address and approximate geographic location (city level)
• Device type, operating system version, and browser type
• Pages visited on x 666, time spent on each page, and navigation paths
• Betting history — markets selected, stakes placed in PKR, odds accepted, and bet outcomes
• Session start and end times, login frequency, and device identifiers
• Cookies and similar tracking technologies (detailed in Section 7)

Data From Third-Party Partners:

• Identity verification results from our KYC provider (confirmation of CNIC/NICOP validity)
• Transaction confirmation data from Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners
• Fraud risk scores from payment processing partners where applicable

03 How We Use Your Data

x 666 uses your personal data for a limited set of clearly defined purposes, each of which is necessary to either operate the platform, fulfil legal obligations, or — where you have given consent — communicate relevant offers to you.

Account Management. Your name, contact details, and identity data are used to create and manage your x 666 account, verify your age and identity, and communicate with you about your account status, security notifications, and important policy updates.

Betting and Gaming Services. Your betting activity data is used to process bets, settle markets, calculate payouts in PKR, and maintain an accurate record of your balance at x 666. This data is also used to display your betting history within your account.

Payment Processing. Financial data is used solely to process deposits and withdrawals via your chosen PKR payment method — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or Visa/Mastercard. x 666 does not store full card numbers; card payments are processed through a PCI-DSS compliant third-party gateway.

Fraud Prevention and Platform Integrity. Technical data including IP address, device identifiers, and betting patterns are analysed to detect and prevent fraud, money laundering, underage gambling, multi-accounting, and bonus abuse. x 666 has an obligation to protect both individual players and the integrity of the platform as a whole.

Customer Support. Communications data is used to respond to your support queries and to improve the quality and efficiency of our support team's responses over time. Support interactions may be reviewed for training and quality assurance purposes.

Responsible Gaming. Your betting activity, session duration, and deposit patterns may be monitored to identify potential indicators of problematic gambling. Where we identify such indicators, x 666 may proactively contact you with responsible gaming information and tools.

Marketing Communications. Where you have opted in at registration or subsequently, x 666 may send you promotional emails, SMS messages, or in-app notifications about bonuses, PSL offers, and other promotions on the platform. You can unsubscribe from marketing communications at any time via your account settings or by contacting support.

04 Legal Basis for Processing

x 666 processes your personal data on one or more of the following legal bases depending on the purpose:

• Contract Performance: Processing necessary to register your account, process your PKR deposits and withdrawals, and deliver the betting services you have signed up for at x 666.
• Legal Obligation: Processing required to comply with anti-money laundering (AML) regulations, KYC obligations, age verification requirements, and any regulatory requests from our licensing authority.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improving the quality of x 666's services — where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies — only where you have given explicit, informed consent. You can withdraw consent at any time without affecting any prior processing.

05 Data Sharing

x 666 does not sell your personal data to any third party. Your information is shared only in the following specific, limited circumstances:

Payment Processors. Transaction data is shared with the payment service providers needed to complete your PKR deposits and withdrawals — Easypaisa, JazzCash, NayaPay, SadaPay, and our banking and card processing partners. These providers act as data processors under contractual obligations to handle your data securely and only for payment purposes.

KYC and Identity Verification Providers. Identity documents submitted for verification are shared with our licensed KYC partner to confirm the authenticity of your CNIC, NICOP, or passport. This provider processes your data under a strict data processing agreement with x 666.

Fraud Prevention Services. Technical and financial data may be shared with fraud detection service providers to assess transaction risk and detect suspicious account activity patterns. These partners are bound by confidentiality agreements.

Regulatory and Legal Authorities. x 666 will share data with regulatory bodies, law enforcement, or financial intelligence authorities when required by law, by our operating licence conditions, or when there is a reasonable belief that disclosure is necessary to prevent fraud, money laundering, or other criminal activity.

Within the x 666 Group. Your data may be shared between entities within the x 666 corporate group for the purposes of operating the platform, fraud prevention, and regulatory compliance. All such entities are bound by this Privacy Policy.

06 Payments & PKR Financial Data

All financial transactions at x 666 are conducted in Pakistani Rupees (PKR). We treat financial data with the highest level of care and apply specific safeguards beyond our standard data protection practices.

x 666 does not store full debit/credit card numbers on our own servers. Card payment data is tokenised and handled by a PCI-DSS Level 1 compliant payment gateway. We retain only the last four digits of your card number for your account records.

Easypaisa and JazzCash mobile wallet numbers associated with your x 666 account are stored in encrypted form in our database. These numbers are used only to process your withdrawals and are never shared with any third party outside of the transaction processing requirement.

Transaction records — the amounts deposited and withdrawn, dates, and payment method types — are retained for a minimum of 5 years to comply with AML regulations applicable to our operating licence. This retention is a legal requirement and cannot be waived on request.

07 Cookies & Tracking Technologies

x 666 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how players use the site so that we can improve it. Below is a summary of the cookie types in use at x 666.

You can manage your cookie preferences through your browser settings at any time. Disabling essential cookies will affect your ability to use the x 666 platform.

08 Data Retention

x 666 retains your personal data only for as long as it is needed for the purposes described in this policy, or as required by applicable law and our operating licence obligations.

Active Accounts. While your x 666 account is active, all associated personal data is retained in full. This includes your identity data, contact information, betting history, and payment records.

Closed Accounts. After your x 666 account is closed — whether at your request or by us — the following retention periods apply:

• Identity and contact data: retained for 5 years post-closure to comply with AML obligations
• Financial transaction records (PKR deposit and withdrawal history): retained for 5 years
• Betting history: retained for 3 years
• KYC documents: retained for 5 years or as required by the licensing authority
• Support communications: retained for 2 years

After the applicable retention period expires, your data is securely deleted or anonymised from x 666's systems and cannot be recovered.

Dormant Accounts. If your x 666 account has been inactive for 3 years with no login or betting activity, we may archive your data in a restricted-access system. We will notify you by email before doing so and provide the option to reactivate your account or request deletion of non-legally-required data.

09 Your Privacy Rights

As a player at x 666, you have the following rights regarding your personal data. To exercise any of these rights, contact us at support@x666-win.com with the subject line "Privacy Request." We will respond within 30 days.

10 Children's Privacy

x 666 is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. Registration requires you to confirm that you are 18 or older, and x 666 applies age verification checks at registration and at withdrawal processing.

If we discover that personal data has been collected from a user who is under 18, we will immediately close the associated account, void all bets placed, return any deposited funds to the source payment method, and permanently delete all personal data associated with the account from our systems.

If you believe that a minor has registered an account at x 666, please contact us immediately at support@x666-win.com with the subject line "Underage Account Report." We will investigate and act within 24 hours of receiving the report.

11 Data Security

x 666 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data in transit between your device and x 666's servers is encrypted using industry-standard TLS protocols.
• Encrypted Data Storage: Sensitive personal data, including CNIC numbers, payment wallet details, and passwords, are stored in encrypted form in our database. Passwords are hashed using a one-way algorithm — even x 666 staff cannot read your password.
• Access Controls: Internal access to personal data at x 666 is restricted on a strict need-to-know basis. Staff with access to player data undergo background checks and are bound by confidentiality obligations.
• Regular Security Audits: x 666's platform undergoes regular independent security assessments, including penetration testing and vulnerability scanning, to identify and address security gaps before they can be exploited.
• 24/7 Security Monitoring: Our security team monitors platform activity around the clock for unusual access patterns, failed login attempts, and other indicators of unauthorised access.

Despite these measures, no digital system is completely immune to security incidents. In the unlikely event of a data breach that poses a risk to your rights and freedoms, x 666 will notify affected players and the relevant regulatory authority within the timeframe required by our licence conditions.

12 Updates to This Privacy Policy

x 666 may update this Privacy Policy from time to time to reflect changes in our data practices, new services, or updates to applicable law. When material changes are made, we will notify registered players via the email address on file at least 14 days before the updated policy takes effect.

The version number and effective date at the top of this document always reflect the currently active Privacy Policy. If you continue to use the x 666 platform after the effective date of an updated policy, you are deemed to have accepted the changes.

Previous versions of this Privacy Policy are available on request from our support team. We maintain a full version history for transparency.

13 Contact Us

For any questions, concerns, or requests related to this Privacy Policy or your personal data held by x 666, please reach out to us through any of the following channels:

• Email: support@x666-win.com (Subject: "Privacy Request")
• Live Chat: Available 24/7 from your logged-in x 666 account
• Response Time: Privacy requests acknowledged within 48 hours; resolved within 30 days
• Languages: Urdu and English

If you are not satisfied with our response to a privacy request or complaint, you have the right to escalate the matter to the data protection authority or regulator in the jurisdiction under which x 666's operating licence is issued.