x6666 Privacy
Policy

Introduction

This Privacy Policy (the "Policy") describes how x6666 (referred to as "x6666", "we", "us" or "our") collects, uses, stores, shares and protects the personal data of individuals (referred to as "you", "your" or the "User") who access or use the x6666 website at https://x6666.cam, its associated mobile application and related services (collectively, the "Platform" or "Services").

x6666 is committed to handling personal data responsibly, transparently and in accordance with the principles set out in applicable data protection legislation. We apply data protection principles aligned with widely recognised international standards, including the General Data Protection Regulation (GDPR) framework, as a baseline for how we treat user data globally — including users accessing the Platform from Pakistan.

This Policy should be read alongside our Terms & Conditions, which govern the overall use of the x6666 Platform. In the event of any conflict between this Policy and the Terms, the Terms shall prevail to the extent permitted by law.

Definitions

For the purposes of this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, IP address, device identifiers and financial information.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, deletion or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, x6666.
• "Data Processor" means any third party that processes Personal Data on behalf of x6666 under a written data-processing agreement.
• "Consent" means a freely given, specific, informed and unambiguous indication of the User's wishes by which they signify agreement to the processing of their Personal Data.
• "Legitimate Interests" means x6666's business interests in operating, securing and improving the Platform, provided such interests are not overridden by the User's data-protection rights.
• "KYC" means Know Your Customer — the regulatory process of verifying a user's identity to prevent fraud, money laundering and underage access.
• "Cookies" means small text files stored on your device by a website for session management, preference storage and analytics purposes.

Data Controller

x6666 acts as the Data Controller in respect of Personal Data collected through the Platform. x6666 operates under the terms and conditions of its licensing jurisdiction. The Platform is not licensed, regulated or endorsed by any Pakistani government authority, including the Pakistan Telecommunication Authority (PTA) or the State Bank of Pakistan.

If you wish to exercise any of your rights under this Policy or raise a data-related concern, please contact us using the details provided in Section 12. We aim to respond to all data-related requests within 30 calendar days of receipt.

Data We Collect

4.1 Identity and Contact Data

When you register an account with x6666, we collect your full legal name, date of birth, email address, phone number and, where required for KYC purposes, government-issued identification (such as a CNIC, passport or driving licence) and proof of address. This information is mandatory to create and verify your account.

4.2 Financial Data

We collect information relating to your deposits, withdrawals and transaction history on the Platform. This includes payment method identifiers (such as partial card numbers or mobile wallet references associated with methods like Easypaisa or JazzCash, where available in the cashier). We do not store full card numbers or mobile banking PINs. Financial data is used for transaction processing, fraud prevention and compliance with anti-money laundering (AML) obligations.

4.3 Technical and Device Data

When you access the Platform, we automatically collect technical data including your IP address, browser type and version, operating system, device type, screen resolution, time zone and referring URL. This data is used to secure the Platform, detect fraud and optimise performance across devices commonly used in Pakistan, including Android and iOS handsets on 4G networks.

4.4 Behavioural and Usage Data

We collect data about how you interact with the Platform, including pages visited, bets placed, games played, deposit and withdrawal activity, session duration and feature usage. This data supports service delivery, responsible gambling monitoring and platform improvements.

4.5 Communications Data

If you contact us via live chat, email or any other channel, we retain records of those communications for support, training, dispute resolution and compliance purposes.

How Data Is Collected

x6666 collects Personal Data through the following means:

• Direct interactions: Information you provide when registering, completing KYC, making deposits or withdrawals, contacting support or updating your account profile.
• Automated technologies: Cookies, server logs, session tracking and analytics tools that collect technical and usage data when you access the Platform.
• Third-party sources: Identity verification providers, fraud detection services and payment processors may supply us with additional data as part of the KYC or transaction process.

Purposes & Legal Basis for Processing

6.1 Contract Performance

We process identity, contact and financial data to fulfil our contractual obligations to you — specifically, to operate your account, process deposits and withdrawals, settle bets and provide customer support. Without this processing, we cannot deliver the Services.

6.2 Legal and Regulatory Obligations

We are required by our licensing obligations to conduct KYC verification, retain transaction records, and cooperate with anti-money laundering (AML) and counter-terrorist financing (CTF) requirements. This processing is mandatory; users cannot opt out of it and continue to use the Services.

6.3 Legitimate Interests

We process technical and usage data on the basis of our legitimate interests in securing the Platform, preventing fraud, improving performance and monitoring responsible gambling compliance. We have assessed that this processing does not override your fundamental rights.

6.4 Consent

Where we send direct marketing communications (such as promotional emails or push notifications about bonuses or sports events including PSL, T20 internationals or ICC tournaments), we do so only where you have provided explicit opt-in consent. You may withdraw consent at any time by updating your marketing preferences in your account settings or by contacting us directly.

Data Sharing

7.1 Service Providers

x6666 shares Personal Data with carefully selected service providers who assist in delivering the Services. These include identity verification and KYC providers, payment processing partners, fraud and risk management systems, cloud hosting and IT infrastructure providers, and customer support platform operators. All service providers are bound by data-processing agreements that restrict their use of your data to the purposes specified by x6666.

7.2 Legal and Regulatory Disclosure

We may disclose Personal Data to relevant regulatory authorities, law enforcement agencies, courts or other governmental bodies where we are required to do so by applicable law, court order or regulatory obligation. x6666 will take reasonable steps to inform you of any such disclosure where legally permitted to do so.

7.3 Business Transfers

In the event that x6666 undergoes a merger, acquisition, restructuring or sale of assets, Personal Data held by x6666 may be transferred to the relevant successor entity. Users will be notified of any such transfer and the applicable privacy terms of the acquiring entity prior to the transfer taking effect.

7.4 No Sale of Personal Data

x6666 does not sell, rent or trade your Personal Data to third parties for advertising or marketing purposes. Any sharing of data with third parties is conducted solely for the purposes described in this Policy.

Data Retention

x6666 retains Personal Data for as long as your account remains active and for a period thereafter as required by applicable law and our licensing obligations. In practice, this means:

• Account and identity data is retained for the duration of your account and for a minimum of five (5) years after account closure, in accordance with standard AML record-keeping requirements.
• Transaction and financial data is retained for the same minimum five-year period to meet regulatory obligations.
• Support communications are retained for up to three (3) years from the date of the interaction, unless required for longer in connection with a dispute or legal process.
• Marketing preferences and consent records are retained for the period of your account and for a reasonable time thereafter to demonstrate compliance with consent obligations.
• Technical and log data is generally retained for up to twelve (12) months for security and fraud detection purposes, then deleted or anonymised.

When the applicable retention period expires, Personal Data is securely deleted or anonymised so that it can no longer be linked to an individual.

Security Measures

x6666 implements a range of technical and organisational measures to protect your Personal Data against unauthorised access, loss, alteration or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and the x6666 servers.
• Encrypted storage of sensitive data, including identity documents and financial information.
• Role-based access controls, ensuring only authorised personnel can access Personal Data relevant to their function.
• Two-factor authentication (2FA) available for user accounts, recommended for all users.
• Regular penetration testing and vulnerability assessments of the Platform.
• Monitoring for anomalous access patterns and security incidents.

While we apply industry-standard security practices, no method of electronic transmission or storage is entirely immune from risk. In the event of a data breach that poses a risk to your rights, x6666 will notify affected users and relevant authorities in accordance with our legal obligations.

Cookies & Tracking Technologies

10.1 What Cookies We Use

x6666 uses the following categories of cookies on its Platform:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without impairing your ability to use the Services.
• Functional Cookies: Remember your preferences such as language, currency (PKR) and display settings across sessions.
• Analytics Cookies: Collect anonymised data about how users interact with the Platform to help us improve usability and performance. Used only with your consent.
• Fraud Detection Cookies: Used to identify unusual or potentially fraudulent access patterns. These operate on the basis of our legitimate security interests.

10.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to block or delete cookies. Please note that disabling certain cookies may affect the functionality of the Platform. Instructions for managing cookies are available through your browser's help documentation.

Your Rights

Depending on applicable data protection law and the circumstances of the processing, you may have the following rights in relation to your Personal Data held by x6666:

To exercise any of the above rights, please contact us using the details in Section 12. We will respond within 30 calendar days. We may need to verify your identity before processing a request. Please note that some rights are subject to exceptions — for example, we may not be able to delete data that we are legally required to retain.

Contact Us

If you have questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact x6666 using the following channels:

x6666 reserves the right to update this Privacy Policy from time to time. Material changes will be communicated via the email address registered to your account and/or through a prominent notice on the Platform. Continued use of the Services after the effective date of any updated Policy constitutes acceptance of the revised terms.

For general platform questions, please visit our FAQ page or review our Terms & Conditions.