Privacy Policy — How 666x Protects Your Personal Data

1 Introduction

Welcome to the 666x Privacy Policy. This document explains how 666x (referred to as "we", "us" or "the platform") handles personal information belonging to players who register and use the 666x gaming and sports betting service in Pakistan.

We understand that privacy matters. When you open an account, deposit in PKR, place a bet on a PSL match or spin a slot game, you are trusting us with your personal information. This policy is written to be plain and readable — not stuffed with legal jargon that no one actually gets through. If something is unclear, the support team is always available to help explain.

By registering an account on 666x, you acknowledge that you have read and understood this Privacy Policy. It should be read together with the Terms and Conditions, which govern your overall use of the platform.

2 What Data We Collect

The data we collect falls into a few clear categories. We only collect what is genuinely needed to operate the platform, verify player identities, process payments and maintain account security. We do not collect data for its own sake.

We do not collect sensitive personal data such as biometric information, religious beliefs or political affiliations. Any identity documents you submit for verification are used solely to confirm your identity and are handled with strict access controls.

3 Why We Collect Your Data

Every piece of data we collect has a specific purpose. The table below maps our key data uses to the legal basis on which we rely. We will never use your data for a purpose that is unrelated to the operation of the 666x platform.

• To create and manage your player account and ensure only you can access it.
• To process deposits and withdrawals in PKR via JazzCash, Easypaisa, Raast, bank transfer and cards.
• To verify your identity and age in accordance with responsible gaming standards — all players must be 18 or above.
• To detect and prevent fraud, money laundering, bonus abuse and multiple account creation.
• To personalise your experience on the platform, including surfacing Cricket and PSL betting markets relevant to your activity.
• To provide customer support — our team needs access to account details and communication history to help you effectively.
• To send you important account notifications such as deposit confirmations, withdrawal updates and security alerts.
• To improve platform performance by analysing anonymised usage patterns — which games are popular, where users drop off, how the interface can be improved.
• To comply with applicable anti-fraud and responsible gaming obligations.

4 Payment Data & Financial Information

Payment data is among the most sensitive information we handle. When you make a deposit or request a withdrawal through JazzCash, Easypaisa, Raast, a bank transfer or a card payment, certain financial reference data is processed to complete that transaction.

Here is how we handle it:

• Full card numbers and mobile wallet PINs are never stored on 666x servers. Payment processing is handled by encrypted third-party payment processors who are bound by strict data security standards.
• We store only transaction reference numbers, amounts, timestamps and the payment method type — enough to verify, reconcile and support queries about a specific transaction.
• Withdrawal requests require identity verification to ensure funds are returned only to the verified account holder. This protects you as much as it protects the platform.
• All financial data is transmitted over SSL-encrypted connections. No payment data is sent in plain text.
• Transaction history is retained for audit and dispute resolution purposes as outlined in the Data Retention section below.

5 Cookies & Tracking Technologies

Like all modern web platforms, 666x uses cookies and similar technologies to make the platform work properly and to understand how it is being used. A cookie is a small text file stored on your device when you visit the site. Cookies themselves do not contain personal information — they contain reference codes that allow us to recognise your session.

We use the following types of cookies:

• Essential Cookies: Required for the platform to function. These handle your login session, account security tokens and basic navigation. You cannot opt out of these without affecting platform access.
• Functional Cookies: Remember your preferences — such as preferred language, last-visited game category or deposit method — to make your next session smoother.
• Analytics Cookies: Help us understand aggregate usage patterns. Which games are most popular? Where do players typically exit? These insights allow us to improve the platform over time. Data used for analytics is anonymised.
• Security Cookies: Used to detect suspicious activity, prevent bot access and protect against fraud. These are active throughout your session.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to log in and play, though some personalisation features may not function as expected.

6 Data Sharing & Third Parties

We do not sell your personal data. Full stop. However, in the course of operating the platform, certain data is shared with carefully selected third parties who provide specific services. All third-party partners are required to handle data in accordance with strict confidentiality and security obligations.

• Payment Processors: JazzCash, Easypaisa, Raast and bank partners receive transaction data necessary to complete deposits and withdrawals. They operate under their own privacy and security frameworks.
• Game Providers: Slot and casino game studios may receive anonymised session data to support game performance and RTP verification. No personally identifiable data is shared with game providers.
• Identity Verification Services: Third-party KYC providers may process your identity documents to validate authenticity. These providers are bound by confidentiality agreements and may not use your data for any other purpose.
• Fraud Prevention Platforms: Anonymised behavioural and technical data may be shared with fraud detection services to help protect the platform and its players.
• Cloud Infrastructure Providers: Our platform is hosted on secure cloud infrastructure. The infrastructure provider has access to servers but operates under strict data processor agreements.
• Legal Obligations: We may be required to disclose information in response to a lawful request from a competent authority. Such disclosures are made only when legally required and only to the extent necessary.

7 How We Protect Your Data

Security is not an afterthought at 666x — it is built into the infrastructure from the ground up. We employ multiple layers of technical and procedural controls to protect your data from unauthorised access, loss, alteration or disclosure.

• All data transmitted between your device and the 666x platform is protected by SSL/TLS encryption. The padlock in your browser confirms this is active during every session.
• Account passwords are stored using industry-standard one-way hashing. Even internally, no one can read your password in plain text.
• Access to personal data within the organisation is strictly role-based. Only team members who genuinely need access for their function can see specific data types.
• Payment data is handled through PCI-compliant payment processors and is never stored in raw form on 666x servers.
• Our systems are monitored continuously for unusual activity. Automated alerts flag anomalies such as login attempts from unexpected locations or unusual transaction patterns.
• Regular security audits and penetration testing are conducted to identify and address potential vulnerabilities before they can be exploited.
• In the event of a data breach that could affect your personal information, you will be notified as promptly as practical and given clear guidance on steps to take to protect your account.

8 Data Retention

We retain personal data only for as long as it is needed for the purpose for which it was collected, or as required by applicable obligations. The following guidelines apply:

• Active Account Data: Retained for the full duration your account remains open and active on the platform.
• Closed Account Data: Following account closure, core identity and transaction records are retained for a minimum period to support dispute resolution and audit requirements. After this period, data is securely deleted or anonymised.
• Transaction Records: Financial transaction data including deposits, withdrawals and bet history is retained for an extended period to support fraud investigation and reconciliation.
• Support Communications: Chat logs and email records related to support queries are retained for a reasonable period to provide continuity of service and reference for ongoing issues.
• Anonymised Analytics Data: Aggregated, anonymised usage data that cannot be linked to an individual may be retained indefinitely for platform improvement purposes.

When data is no longer required and the retention period has passed, it is deleted using secure data destruction methods or irreversibly anonymised so it can no longer be associated with any individual.

9 Your Rights as a Player

You have meaningful rights regarding the personal data 666x holds about you. These rights are important and we take them seriously. To exercise any of the rights below, contact the support team through live chat or at the email address listed in the footer.

10 Minors & Age Verification

666x is strictly an adult platform. No person under the age of 18 is permitted to register an account, make a deposit or participate in any game or betting activity on the platform. This is non-negotiable and is enforced through our identity verification process.

• During registration, you confirm that you are 18 years of age or older. Providing a false date of birth constitutes a breach of the Terms and Conditions and will result in account closure.
• Identity verification — which includes review of your CNIC or other valid government-issued ID — confirms your age and identity. Accounts that cannot pass age verification will not be permitted to withdraw funds.
• If you suspect that a minor is accessing the platform using your device or your account credentials, contact support immediately and take steps to secure your account.
• Parents and guardians are encouraged to use parental control tools on shared devices to prevent access to online gaming platforms.

11 Updates to This Policy

This Privacy Policy may be updated from time to time as the platform evolves, as data handling practices change or as applicable standards develop. When significant changes are made, the "Last Updated" date at the top of this page will be revised.

Where a change materially affects how we use your personal data, we will make reasonable efforts to notify you — either through a platform notification when you next log in or via your registered contact details. For minor updates such as wording clarifications that do not affect the substance of the policy, a silent update to the date is sufficient.

• It is your responsibility to review this policy periodically. Continued use of the 666x platform following any update constitutes acceptance of the revised policy.
• Previous versions of this policy are not archived publicly, but can be provided on request to the support team.
• If you disagree with any change to this policy, you should stop using the platform and contact support to arrange account closure.