Your Privacy Matters to 666x

This Privacy Policy ("Policy") is published by 666x ("666x", "we", "us", "our") and applies to all users ("you", "User", "Player") who access or register on the 666x website located at 666x.lat, including all associated services such as casino games, sports betting, live dealer tables, slot games, and payment processing.

This Policy explains in plain, honest terms what personal data 666x collects from you, why we collect it, how we store and protect it, who we may share it with, how long we keep it, and the rights you hold in relation to your own information. We have written this Policy to be as clear and straightforward as possible — legal documents do not need to be unreadable.

By registering a 666x account, making a deposit, or simply continuing to browse the 666x platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy.

666x collects personal data through several channels: directly from you when you register or interact with the platform, automatically as you use the website, and in some cases from third-party verification providers. The categories of personal data we collect are described below.

2.1 Registration & Account Data

When you create a 666x account, we collect your full legal name as it appears on your CNIC, your date of birth, your email address, your mobile phone number, and your chosen username. This data is necessary to create and manage your account.

2.2 Identity Verification (KYC) Data

To comply with our anti-money laundering (AML) obligations and verify that you meet the 21+ age requirement, we collect copies of your government-issued identity documents. This typically includes a clear photograph of the front and back of your Pakistani CNIC, a selfie photograph for liveness verification, and in some cases proof of address or proof of payment method (for example, a screenshot of your registered JazzCash or EasyPaisa account).

2.3 Financial & Transaction Data

When you make deposits or request withdrawals, 666x collects details of the payment method used, transaction amounts, transaction timestamps, and unique transaction reference numbers. We do not store full card numbers or bank account credentials on our servers — payment data is handled by our PCI-DSS compliant payment processors.

2.4 Gaming & Betting Activity Data

666x records your gaming and betting activity on the platform, including games played, bet amounts, wager outcomes, session durations, and bonus usage. This data is used for account management, responsible gaming monitoring, fraud detection, and regulatory reporting where required.

2.5 Technical & Device Data

We automatically collect certain technical data when you access the 666x platform, including your IP address, browser type and version, device type and operating system, pages visited, time and date of visits, referring URLs, and session duration. This data helps us maintain platform security, diagnose technical issues, and understand how users from Karachi, Lahore, Islamabad, Faisalabad, and other cities interact with the platform.

2.6 Communications Data

If you contact 666x support via live chat, email, or any other channel, we retain records of those communications including the content of messages, timestamps, and any attachments provided. This data is used to resolve your query and improve our support service quality.

666x uses the personal data it collects for the following purposes:

• Account creation and management: To register your account, authenticate your identity on login, and maintain your account in good standing.
• Age and identity verification: To confirm that you meet the mandatory 21+ age requirement and to verify your identity in accordance with our KYC obligations.
• Payment processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card payment channels in Pakistani Rupees (PKR).
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, and other prohibited conduct described in our Terms & Conditions.
• Responsible gaming monitoring: To monitor your gaming activity for signs of problem gambling behaviour and to apply responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion where appropriate.
• Customer support: To respond to your queries, resolve disputes, and provide technical assistance.
• Legal and regulatory compliance: To meet our obligations under applicable anti-money laundering (AML) laws, tax reporting requirements, and the conditions of our gaming licence.
• Platform improvement: To analyse usage patterns, test new features, and improve the overall 666x user experience for players across Pakistan.
• Marketing communications (opt-in only): Where you have given explicit consent, to send you information about 666x promotions, PSL cricket betting offers, new game launches, and reload bonuses. You may withdraw this consent at any time.

666x processes your personal data on one or more of the following legal bases, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing is necessary to perform our contract with you — i.e., to operate your gaming account, process your transactions, and deliver the services you have requested.
• Legal obligation: Processing is required to comply with applicable laws, including AML regulations, KYC requirements, and gaming licence conditions.
• Legitimate interests: Processing is carried out for 666x's legitimate business interests, including fraud prevention, platform security, responsible gaming enforcement, and service improvement — provided these interests do not override your fundamental rights.
• Consent: Where processing is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

666x does not sell your personal data to any third party. We may share your data only in the following circumstances and only to the extent strictly necessary:

5.1 Payment Processors

To process deposits and withdrawals, 666x shares relevant financial and identity data with our licensed payment processing partners, including JazzCash, EasyPaisa, and card payment gateways. These processors are contractually bound to handle your data securely and only for payment processing purposes.

5.2 Identity Verification Providers

To complete KYC verification, we may share your submitted identity documents with accredited third-party identity verification providers. These providers are subject to strict data processing agreements and may not use your data for any purpose other than identity verification on behalf of 666x.

5.3 Regulatory & Law Enforcement Authorities

Where required by applicable law, court order, or regulatory directive, 666x will disclose personal data to relevant authorities, including financial regulators, tax authorities, and law enforcement bodies. We will notify you of such disclosures where we are legally permitted to do so.

5.4 Gaming Licence Authorities

As part of our obligations under our applicable gaming licence, 666x may be required to submit player data — including account details, transaction records, and gaming activity — to the relevant gaming regulatory body upon request.

5.5 Group Companies & Service Providers

666x may share data with affiliated group companies or contracted service providers (for example, cloud hosting providers, IT security firms, and customer support platform vendors) where such sharing is necessary to operate the platform. All such providers are bound by data processing agreements consistent with this Privacy Policy.

The 666x platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain your login session, remember your preferences, and gather analytics data about how the platform is used.

6.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function correctly. These include session cookies that keep you logged in during your visit. You cannot opt out of these cookies without ceasing to use the platform.
• Analytics cookies: Used to collect aggregated, anonymised information about how users navigate the 666x platform. This data helps us identify popular games, diagnose technical issues, and improve the overall experience.
• Preference cookies: Store your personalisation choices, such as your preferred language and display settings, so they persist between sessions.
• Security cookies: Help 666x detect and prevent fraudulent account access, including cookies used for bot detection and login verification.

6.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, accept or reject specific cookies, and delete existing cookies. Please be aware that disabling certain cookies — particularly strictly necessary ones — may impair the functionality of the 666x platform and prevent you from accessing your account or completing transactions.

666x retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal, regulatory, and contractual obligations. The following retention guidelines apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data has been anonymised, it may be retained indefinitely for statistical and analytical purposes as it no longer constitutes personal data.

As a 666x player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within thirty (30) calendar days.

• Right of access: You have the right to request a copy of the personal data 666x holds about you, along with information about how it is being used.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by 666x is corrected or updated.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that KYC and transaction data required for AML compliance cannot be deleted before the applicable retention period expires.
• Right to restriction of processing: You may request that 666x restricts the processing of your personal data in certain circumstances, such as while a dispute about accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal date.

666x implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser or mobile device and the 666x platform.
• Encrypted storage of sensitive personal data, including identity documents and financial records, on secure servers with restricted access controls.
• Two-factor authentication (2FA) available to all registered users as an additional layer of account security.
• Regular penetration testing and security audits conducted by independent third-party cybersecurity specialists.
• Access controls ensuring that 666x staff can only access personal data on a strict need-to-know basis relevant to their role.
• Incident response procedures designed to detect, contain, and notify affected users of any personal data breach in accordance with applicable regulatory timelines.

While 666x takes every reasonable precaution to protect your data, no internet transmission or electronic storage system is completely infallible. You also play an important role in keeping your account secure — please use a strong, unique password for your 666x account and never share your login credentials with anyone.

The 666x platform is strictly intended for adults aged 21 years and above. 666x does not knowingly collect, process, or store personal data relating to individuals under the age of 21. This age threshold reflects the responsible gaming standards applied to casino-style gaming on our platform.

If you are a parent or guardian and you believe that a person under the age of 21 has registered an account on the 666x platform or provided their personal data to us, please contact us immediately at [email protected]. Upon verification, 666x will promptly close the account, void any associated transactions and balances, and securely delete the relevant personal data.

666x operates as an international online gaming platform. As a result, your personal data may be transferred to and processed in countries outside of Pakistan, including countries where our server infrastructure, payment processors, or identity verification providers are located.

Where personal data is transferred internationally, 666x ensures that appropriate safeguards are in place to protect your data to a standard consistent with this Privacy Policy and internationally recognised data protection principles. These safeguards may include contractual clauses, data processing agreements, or transfers to jurisdictions that maintain adequate data protection frameworks.

By registering an account with 666x, you acknowledge and consent to the transfer of your personal data to other countries as described in this section, subject to the protections described above.

666x reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made — such as new categories of data being collected or changes to third-party sharing arrangements — we will notify registered users via email and/or a prominent notice on the 666x platform at least fourteen (14) days before the changes take effect.

The "Last Updated" date displayed at the top of this page will always reflect the most recent revision. We encourage you to review this Policy periodically so that you remain fully informed about how your personal data is being handled. Continued use of the 666x platform following the effective date of an updated Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or formal complaints regarding this Privacy Policy or the way 666x handles your personal data, please reach out to us through the following channel:

Email: [email protected]

Please use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate so our team can route your message to the right person quickly. We aim to acknowledge all privacy-related enquiries within two (2) business days and to provide a full response within thirty (30) calendar days. Our support team is available around the clock, seven days a week.