Privacy Policy — x66666

x66666 ("the Platform," "we," "us," or "our") is an English-language online betting and casino information platform. This Privacy Policy ("Policy") sets out how x66666 collects, processes, stores, shares and protects personal data from users ("you," "your") who access or use our website at https://x66666.cam, our mobile applications and associated services (collectively, "the Services").

We are committed to data privacy as a matter of principle, not merely compliance. Our aim is to be fully transparent about the information we hold, why we hold it and your rights in respect of it.

By accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with the practices described here, please discontinue use of the Services. Where specific forms of data processing require your consent, we will request that consent separately and in a clear, affirmative manner.

In this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, email address, CNIC number, IP address, device identifiers and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, x66666.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller under a written contractual arrangement.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the identity and document verification process required before certain platform functions are activated.
• "AML" means Anti-Money Laundering — the regulatory and procedural framework applied to detect and prevent financial crime.
• "Cookies" means small text files placed on your device by a website to store session information, preferences and analytics data.

We collect Personal Data in the following categories, depending on how you interact with the Services:

We do not knowingly collect sensitive categories of Personal Data (such as racial or ethnic origin, political opinions, religious beliefs or health data) unless specifically required for a regulatory purpose and with appropriate safeguards in place.

We process your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations to you under the Terms and Conditions — including operating your account, processing transactions and providing customer support.
• Legal Obligation: Processing required to comply with applicable law — including KYC identity verification, AML transaction monitoring, regulatory reporting and fraud prevention obligations imposed by our licensing jurisdiction.
• Legitimate Interests: Processing carried out for our legitimate business interests — such as fraud detection, platform security, responsible gambling monitoring and improving the Services — where those interests do not override your fundamental rights and freedoms.
• Consent: Processing for purposes such as marketing communications, non-essential cookies and optional profiling, where we have obtained your prior explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

We use your Identity and Contact Data to create and maintain your account, authenticate your logins, enable password recovery and communicate important account-related notifications. Account operational communications — such as deposit confirmations, withdrawal updates and security alerts — are non-optional and will be sent regardless of marketing preferences.

Financial Data and Identity Data are used to process deposits and withdrawals, comply with AML and KYC requirements, and liaise with payment processors. Familiar Pakistani payment references — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — may appear in your transaction records as payment method labels only. These references do not imply endorsement of gambling by any payment provider.

We process Technical Data, Financial Data and Behavioural Data to detect and prevent fraud, money laundering, bonus abuse, underage gambling and other prohibited conduct. This processing is required by our licensing obligations and constitutes a legitimate interest of the Platform.

Behavioural Data is analysed to identify patterns associated with problem gambling — such as rapid deposit sequences, extended play sessions or frequent loss-chasing behaviour. Where such patterns are identified, we may proactively contact you with responsible gambling resources or apply account restrictions in accordance with our duty of care obligations.

Communications Data is retained to handle support queries, investigate complaints, maintain audit trails and improve support quality. Support is available in English. Urdu-language support may be available on request through the live chat channel.

Where you have opted in to marketing, we may use your Contact Data and Behavioural Data to send promotional offers, product updates and event communications relevant to your interests — such as PSL season promotions, ICC tournament betting guides or seasonal bonus offers. You may unsubscribe from marketing communications at any time via the preferences link in any email or by contacting support.

Aggregated and anonymised Technical and Behavioural Data is used to analyse platform usage patterns, improve product features, optimise mobile performance across devices used in cities like Karachi, Lahore and Islamabad, and identify areas requiring additional user guidance.

We do not sell your Personal Data to third parties for commercial purposes. We share Personal Data only in the following circumstances:

• Payment Processors: Financial Data and Identity Data are shared with payment service providers to facilitate deposits and withdrawals. These providers act as Data Processors under contractual data processing agreements.
• Identity Verification Partners: Identity and Verification Data is shared with KYC/AML service providers for age verification, identity authentication and sanctions screening.
• Game Studios & Software Providers: Technical session data may be shared with third-party game studios for the purpose of delivering the game experience and resolving technical disputes. Personal identity data is not shared with game studios.
• Regulatory Authorities: We are required to disclose Personal Data to licensing authorities, financial intelligence units and law enforcement agencies where required by applicable law or regulation.
• Group Entities: Personal Data may be shared with affiliated entities within the x66666 corporate group for the purposes described in this Policy, under equivalent data protection standards.
• Professional Advisers: Legal, accounting and compliance advisers may access Personal Data on a confidential, need-to-know basis where required for professional services.

x66666 operates from a jurisdiction outside Pakistan and may transfer your Personal Data to countries other than your country of residence, including countries that may not offer the same level of data protection as Pakistan or the European Economic Area.

Where such transfers occur, we apply appropriate safeguards, which may include:

• Standard Contractual Clauses or equivalent data transfer mechanisms approved by relevant regulatory bodies
• Transfers to countries with adequacy determinations or equivalent protections
• Binding Corporate Rules within the x66666 corporate group

By using the Services, you acknowledge that your Personal Data may be processed outside of Pakistan. If you have questions about the safeguards applied to any specific transfer, please contact our support team.

x66666 uses cookies and similar tracking technologies on the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication, security tokens and load-balancing cookies. They cannot be disabled without breaking core functionality.
• Functional Cookies: Store your preferences such as language settings, responsible gambling tool selections and display configurations. Disabling these may reduce personalisation.
• Analytical Cookies: Collect aggregated usage data — page views, session duration, feature engagement and error logs — to help us improve the Platform. Data is processed in anonymised or pseudonymised form where possible.
• Marketing Cookies: Used where you have consented, to deliver relevant promotional content based on your interests and behaviour. These may be placed by third-party advertising partners.

You may manage cookie preferences through your browser settings or via our cookie consent interface. Please note that disabling strictly necessary cookies will prevent you from logging into or using the Platform. Our cookie settings do not override your browser's "Do Not Track" signals where technically feasible.

We retain Personal Data for as long as necessary to fulfil the purposes for which it was collected and to comply with legal retention obligations. Specific retention periods include:

• Account Data: Retained for the duration of your Account's active status, plus a minimum period after account closure as required by AML and licensing regulations (typically five to seven years).
• Transaction Records: Retained for a minimum of five years from the date of the transaction, in compliance with financial crime prevention requirements.
• KYC Documents: Retained for the period required by the applicable regulatory framework, typically five years from the conclusion of the business relationship.
• Support Communications: Retained for up to three years from the date of the last interaction, or longer where required for an ongoing dispute or regulatory matter.
• Marketing Opt-In Records: Retained for as long as you remain opted in to marketing, plus a record of consent withdrawal for compliance purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents identification.

We implement technical and organisational measures appropriate to the nature and sensitivity of the Personal Data we hold. These include:

• TLS/HTTPS encryption for all data in transit between your browser or device and our servers
• Encryption of sensitive data at rest (including financial account numbers and identity document references)
• Role-based access controls — staff access to Personal Data is limited to those with a documented operational need
• Two-factor authentication for administrative system access
• Regular internal security reviews and penetration testing
• Incident response procedures covering detection, containment, notification and post-incident review

Notwithstanding these measures, no data transmission over the internet or electronic storage system is completely secure. We cannot guarantee absolute security of Personal Data but commit to using best efforts and industry-standard practices.

Subject to applicable law and the limitations described below, you have the following rights with respect to your Personal Data held by x66666:

To exercise any of the above rights, please contact our support team using the contact details in Section 15. We will respond within 30 days of receiving a valid request. We may ask you to verify your identity before processing any rights request. Some rights are subject to limitations under applicable law — for example, we cannot delete records required for AML compliance purposes before their mandatory retention period has expired.

The Services are strictly intended for adults aged 18 years and above — or the higher minimum age required by the applicable operator/license jurisdiction. We do not knowingly collect Personal Data from any person under the applicable minimum age.

Age verification checks are conducted during registration and periodically thereafter. If we discover or are notified that Personal Data has been collected from a person below the minimum age threshold, we will immediately suspend the Account and delete all associated Personal Data, subject to any mandatory retention obligations.

If you believe that a minor has registered on the Platform or has had their Personal Data collected without appropriate consent, please contact our support team immediately.

The Platform may reference or link to third-party websites, game studios, payment providers or other external resources. This Privacy Policy applies solely to the x66666 platform and does not govern the data practices of any third-party website or service.

We are not responsible for the privacy practices, data collection methods or content of third-party services. References to payment providers — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are provided as familiar Pakistani payment context only. If you choose to interact with these services, you do so under their own respective privacy policies.

We encourage you to review the privacy policies of any third-party services you use in connection with the x66666 platform.

We reserve the right to update or revise this Privacy Policy at any time. Where a material change is made to how we collect or process your Personal Data, we will provide reasonable advance notice — for example, through a platform notification upon next login or by email to the address registered on your Account.

The "Last Reviewed" date at the top of this page indicates when the most recent update was made. Your continued use of the Services following the effective date of any revised Policy constitutes your acknowledgement of the updated terms.

We recommend reviewing this Policy periodically. If you object to material changes, you should discontinue use of the Services and request Account closure before the revised Policy takes effect.

If you have questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact our Data Privacy team through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 directly within the Platform interface
• Help Centre: Self-service articles available at all times

Please include "Privacy Request" or "Data Rights Request" in the subject of your message. We will acknowledge receipt within 5 business days and aim to resolve all requests within 30 days. Complex requests may require additional time, of which you will be notified.

Our support team covers users across Pakistan — including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — with English-language support and Urdu-speaking agent availability on request through live chat.