x666com Privacy Policy – How We Protect Your Data in Pakistan

This Privacy Policy describes how x666com ("the Platform", "we", "us", "our") collects, uses, stores, and protects the personal data of players registered on x666com. It applies to all users who access x666com through any device — including mobile phones, tablets, and desktop computers — and covers all activities conducted through the platform, including account registration, deposits, withdrawals, betting, and participation in promotions.

By creating an account on x666com, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described. This Policy is to be read alongside our Terms and Conditions and Responsible Gaming Policy, which together form the complete framework governing your relationship with x666com.

x666com operates primarily for users in Pakistan. Our platform is designed for Pakistani players, and the data practices described in this Policy are calibrated to the expectations and legal environment of Pakistani users. We handle all personal data with care and operate under a principle of data minimisation — we collect only what is genuinely necessary to provide our services safely and legally.

If you have questions about this Policy at any point, you are welcome to contact our support team before or after registering. We believe transparency is the foundation of a trustworthy platform, and we are happy to explain anything that isn't clear in plain terms.

x666com collects data in several ways: information you provide directly when registering or using the platform, information collected automatically as you use the site, and information obtained from third-party verification services. Here is a complete breakdown:

x666com uses personal data only for legitimate purposes directly related to operating the platform and serving Pakistani players. The following table sets out each purpose and the legal basis on which we rely:

• Account Management: Creating and maintaining your x666com account, verifying your identity at login, and keeping your account information up to date.
• Payment Processing: Initiating and confirming deposits and withdrawals to and from your registered payment methods. Matching payment accounts to your x666com account to comply with anti-money-laundering requirements.
• Identity Verification (KYC): Confirming that you are who you say you are, that you are above 18 years of age, and that you are not on any applicable sanctions list.
• Fraud Detection & Security: Monitoring for unusual account activity, detecting duplicate accounts, identifying bonus abuse, and protecting the integrity of the platform for all users.
• Responsible Gaming: Monitoring betting patterns to identify players who may be exhibiting problem gambling behaviour and proactively offering support tools where appropriate.
• Customer Support: Responding to queries, resolving complaints, and maintaining records of support interactions for quality assurance purposes.
• Platform Improvement: Analysing aggregate, anonymised usage data to identify areas where the platform can be improved — such as loading speeds, navigation flow, and game variety preferences among Pakistani players.
• Promotions & Bonuses: Determining your eligibility for offers, applying bonuses correctly, and ensuring promotions are not being abused in a way that harms other members.
• Legal Compliance: Meeting obligations under applicable Pakistani law and any international requirements that apply to x666com's operations — including record-keeping requirements related to financial transactions.

x666com does not use your personal data for automated decision-making that produces legal effects on you without human review, except in straightforward technical processes such as automated fraud detection flags — which are always reviewed by our compliance team before any action is taken on an account.

Because x666com operates in PKR and processes real-money transactions, financial data is a necessary and significant category of data we handle. The platforms we integrate with — JazzCash, Easypaisa, NayaPay, SadaPay, Pakistani banks via IBFT, and Visa/Mastercard — are independent companies with their own privacy policies. x666com's relationship with your financial data is limited to what is necessary for transaction processing and anti-money-laundering compliance.

When you make a deposit on x666com using JazzCash or Easypaisa, the transaction is processed through that provider's own secure API. x666com receives a confirmation of the transaction amount, the registered mobile number associated with the wallet, and a unique transaction reference. We do not receive your wallet PIN, biometric data, or any other credential used to authorise the payment on your device.

All transaction records are retained by x666com for a minimum of five years from the date of the transaction. This is standard practice for financial record-keeping and is required for anti-money-laundering compliance. These records are stored securely and are only accessible by authorised x666com personnel and, where legally required, by regulatory or law enforcement authorities.

Identity verification — commonly called KYC (Know Your Customer) — is a legal and operational requirement for all online betting platforms processing real-money transactions. x666com takes KYC seriously both because it is legally required and because it protects our members from identity fraud and unauthorised account access.

When KYC Is Required: x666com may request identity verification at any point during your membership, but it is mandatory in the following situations:

• When a withdrawal request exceeds Rs 50,000.
• When our fraud detection systems flag unusual activity on an account.
• When there is a discrepancy between the name on your x666com account and the name on your registered payment method.
• When you request a change to your registered mobile number or withdrawal account.
• When x666com receives a legal or regulatory instruction requiring verification of a specific account.

What Happens to Your KYC Documents: KYC documents submitted to x666com — primarily CNIC copies — are stored in an encrypted document management system with strict access controls. Only members of x666com's compliance team have access to raw KYC documents. Documents are retained for a minimum of five years from the date of account closure.

KYC documents are not shared with third parties except where required by law, or where x666com uses a third-party identity verification service (in which case the provider is bound by a data processing agreement). We do not use your CNIC for any purpose other than verifying your identity in connection with your x666com account.

If your KYC submission is declined, x666com will inform you of the reason and give you an opportunity to resubmit with clearer documentation. Accounts that cannot be successfully verified may have withdrawal access restricted until the verification issue is resolved.

x666com does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. This is a firm commitment — not a conditional one. The following are the limited circumstances in which x666com shares data with third parties, all of which are necessary for the platform to function:

• Payment Processors: JazzCash, Easypaisa, NayaPay, SadaPay, IBFT banking partners, and Visa/Mastercard acquiring banks receive the transaction data necessary to process your deposits and withdrawals. This is your payment account details and the transaction amount — nothing more.
• KYC / Identity Verification Providers: Where x666com uses a third-party service to assist with identity verification, that provider receives the documents you submit for verification purposes only. They are contractually prohibited from using your data for any other purpose.
• Live Casino Studio Providers: The third-party studios that power x666com's live casino tables may receive a player ID and session token to authenticate your gaming session. They do not receive your full name, CNIC, or payment details.
• Fraud Detection Services: x666com may share limited device and behavioural data with fraud detection partners to identify and prevent fraudulent activity. This data is anonymised or pseudonymised wherever possible.
• Legal Authorities: x666com will disclose personal data to regulatory bodies, law enforcement, or courts where required by applicable Pakistani law or a valid legal order. We do not voluntarily share data with government agencies beyond our legal obligations.

All third-party providers who receive data from x666com are required to sign a data processing agreement confirming they will handle your data securely, use it only for the purposes for which it was shared, and delete it when it is no longer required for those purposes.

x666com takes the security of your personal data seriously. Our platform uses industry-standard security measures to protect data at rest and in transit. The following measures are in place across x666com's infrastructure:

• TLS/SSL Encryption in Transit: All data transferred between your device and x666com servers is encrypted using TLS 1.2 or higher. The padlock icon in your browser confirms this when you are using x666com.
• Encryption at Rest: Sensitive personal data — including KYC documents, financial records, and account credentials — is stored in encrypted form on x666com's servers. Encryption keys are managed separately from the encrypted data.
• Access Controls: x666com employee access to personal data is governed by a least-privilege policy — staff can only access the data necessary for their specific role. All access to sensitive data is logged.
• Password Security: Account passwords on x666com are stored as salted cryptographic hashes — not in plain text. This means even x666com staff cannot see your password.
• Two-Factor Authentication: x666com offers optional 2FA for account login and withdrawal confirmation. We strongly encourage all members to enable 2FA as an additional layer of account protection.
• Regular Security Testing: x666com conducts regular security assessments to identify and remediate potential vulnerabilities before they can be exploited.

x666com uses cookies — small text files stored on your device — to make the platform work correctly and to improve your experience. Here is a breakdown of the cookies we use and why:

x666com does not use third-party advertising cookies or tracking pixels that follow you across other websites. We do not participate in cookie-based behavioural advertising networks. Our analytics cookies are used solely for understanding how x666com itself is used — not for profiling you across the broader internet.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored by specific websites. Note that blocking essential cookies will prevent x666com from functioning correctly — you will be unable to log in or complete transactions without them.

x666com retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. The following are our standard retention periods:

• Active Account Data: Retained for the duration of your account plus a minimum of 5 years after account closure. This includes registration information, KYC documents, and transaction history.
• Betting & Gaming History: Retained for a minimum of 5 years from the date of each transaction for legal and financial record-keeping purposes.
• Support Communications: Chat transcripts and email correspondence retained for 2 years from the date of the interaction unless the communication relates to an ongoing dispute, in which case it is retained until the dispute is fully resolved plus 1 year.
• Fraud Investigation Data: Data collected or retained as part of a fraud investigation may be held for up to 7 years to support legal proceedings if they arise.
• Cookies and Analytics Data: Anonymised analytics data is retained for up to 2 years. Session cookies expire when you close your browser; persistent preference cookies typically expire within 12 months.

When data reaches the end of its retention period, x666com deletes or permanently anonymises it in a secure manner. Personal data is not retained "just in case" — each retention period reflects a genuine operational or legal need.

As an x666com member you have specific rights over the personal data we hold about you. These rights can be exercised by contacting our support team at any time:

To exercise any of these rights, contact x666com support via live chat or email at support@x666com.app. We will acknowledge your request within 48 hours and respond fully within 30 days. We may ask you to verify your identity before processing certain requests to prevent unauthorised access to another person's data.

x666com is strictly an 18+ platform and is not directed at or intended for use by anyone under 18 years of age. x666com does not knowingly collect personal data from children under the age of 18. If you are a parent or guardian and believe that a minor has created an account on x666com or submitted personal data through the platform, please contact us immediately at support@x666com.app.

Upon receiving such a notification, x666com will promptly investigate, close the account if the user is confirmed to be under 18, and securely delete any personal data associated with that account. Any deposits made by an underage user will be returned to the source payment method; any winnings or bonuses will be forfeited.

x666com uses age verification at registration and applies additional checks for large withdrawals specifically to reduce the risk of underage access. We take this responsibility seriously and continue to improve our verification processes over time.

x666com may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, legal requirements, or payment methods. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered members by email or in-platform notification.

We encourage you to review this Privacy Policy periodically — particularly after changes are announced. The most current version of this Policy is always available at x666com.app/privacy-policy. Continued use of x666com after a Policy update constitutes acceptance of the revised terms. If you disagree with any change, please stop using the platform and contact support to close your account and withdraw your available balance.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data on x666com, please reach out to our team using any of the following channels:

• Live Chat: Available 24/7 directly on the x666com platform. This is the fastest way to get a response for general queries.
• Email: support@x666com.app — for formal data access requests, complaints, or detailed privacy queries. We aim to respond within 24 hours and resolve data requests within 30 days.

When submitting a data-related request by email, please include your registered mobile number or account username so we can locate your account and verify your identity before processing the request. Do not include your full CNIC number or bank account details in the email body — we will never ask for these in an unsecured communication.