01Introduction
This Privacy Policy applies to all services offered at x666com (https://x666com.bet), including the online casino, sports betting, poker room, Ludo games, slot machines, VIP programme, and all promotional features. It explains how x666com collects, processes, stores, and protects the personal information of Pakistani players and website visitors.
x666com is committed to handling your data responsibly. We collect only what we genuinely need, we protect it with serious technical measures, and we never sell it to third-party advertisers. This document is written in plain, straightforward English so every player can understand it without needing a legal background.
By registering an account at x666com or continuing to use the platform after any update to this Policy, you confirm that you have read and understood the practices described here. If you do not agree with any part of this Privacy Policy, you should not use x666com and should contact support to close your account.
Scope: This Privacy Policy covers x666com's own data practices. It does not cover the practices of third-party payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, etc.) or game software providers. Those parties operate under their own privacy policies, which x666com has no control over.
02Data We Collect
x666com collects personal data in two ways: information you provide directly, and information gathered automatically as you use the platform. Here is a full breakdown of both categories:
| Data Category | Specific Examples | Provided By |
|---|
| Identity Data | Full legal name, date of birth, gender, CNIC number (where verified) | You, at registration or KYC |
| Contact Data | Pakistani mobile number, email address, city of residence | You, at registration |
| Financial Data | Easypaisa / JazzCash / NayaPay account reference, bank IBFT details, transaction amounts and timestamps in PKR | You, at deposit/withdrawal |
| Account Activity Data | Login history, game sessions played, bets placed, bonuses claimed, chat messages | Automatically generated |
| Device & Technical Data | IP address, browser type and version, operating system, device model, screen resolution | Automatically collected |
| Usage & Behaviour Data | Pages visited, time on page, clicks, search queries, features used | Automatically via cookies/analytics |
| Communications Data | Messages sent to x666com support via live chat or email, and our responses | You, when contacting support |
| Verification Documents | CNIC copy, utility bill or bank statement for KYC, selfie for identity confirmation where required | You, during verification |
x666com does not collect sensitive categories of personal data such as biometric data, racial or ethnic origin, political opinions, religious beliefs, or health information, except where required by law or anti-money-laundering regulations in a specific circumstance.
03How We Collect Your Data
x666com collects data through the following channels:
- Direct input: When you register at x666com, complete your profile, deposit funds, make a withdrawal, contact support, or claim a bonus, you provide data directly to us.
- Automated technical collection: As you browse and play on x666com, our servers automatically log IP addresses, session data, device information, and platform usage patterns. This happens on every visit, whether you are logged in or not.
- Cookies and similar technologies: x666com uses first-party cookies and analytics tools to track user behaviour on the platform, remember login sessions, and improve performance. See Section 8 for full details.
- Payment processors: When you deposit or withdraw through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card providers, those services confirm transaction completion and pass a transaction reference to x666com. x666com does not receive your full payment account credentials — only confirmation data.
- Identity verification services: For KYC purposes, x666com may use a third-party verification service to confirm identity documents. These services process the document, confirm its validity, and return a pass/fail result. x666com stores only the outcome and reference, not the full processed data from those services.
- Fraud prevention tools: x666com uses automated systems that analyse behavioural patterns, device fingerprints, and account activity to detect potentially fraudulent or prohibited conduct.
04Why We Use Your Data
Every piece of data x666com holds has a specific, documented purpose. We do not collect data speculatively or without a clear reason. Here is why we use each category:
- Account management: To create, maintain, and secure your x666com account — including login authentication, password resets, and account settings.
- Identity and age verification: To confirm you are at least 18 years old and that the identity you registered with is accurate. This is a legal requirement and a commitment x666com takes seriously.
- Processing transactions: To receive PKR deposits, issue withdrawals to your Easypaisa, JazzCash, or other registered payment method, and maintain accurate financial records.
- Anti-money-laundering (AML) compliance: To monitor transactions for patterns consistent with financial crime. Unusual deposit or withdrawal patterns may trigger additional verification or reporting obligations under applicable law.
- Delivering games and platform features: Your account data is needed for x666com to track game outcomes, apply winnings and losses, award bonuses, and maintain your transaction history.
- Customer support: When you contact x666com support, we access your account history to provide accurate, contextual help. Support conversations are stored for quality and dispute-resolution purposes.
- Responsible gaming enforcement: x666com uses account activity and spending data to enforce deposit limits, loss limits, self-exclusion requests, and to identify players who may be exhibiting signs of problem gambling.
- Fraud prevention and platform security: Technical and behavioural data helps x666com detect bot activity, account takeover attempts, collusion between players, and bonus abuse.
- Platform improvement: Aggregated and anonymised usage data helps x666com understand how players navigate the site and identify areas for improvement.
- Marketing communications: Where you have opted in, x666com may send promotional messages via email or SMS about new games, tournaments, and offers. You can opt out at any time. See Section 11.
Legal basis: x666com processes your data on the basis of contractual necessity (to deliver the service you signed up for), legal obligation (AML, KYC), legitimate interests (fraud prevention, platform security), and consent (marketing).
05Who Can Access Your Data
x666com does not sell personal data to third parties. Your data may be shared only in the following circumstances and only with parties bound by appropriate data protection obligations:
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card networks receive only the data required to process your specific transaction. They do not receive your full x666com account history.
- Identity verification providers: Where KYC is required, a certified third-party verification service may process your submitted documents. This provider operates under strict confidentiality obligations to x666com.
- Game software providers: Providers whose games are hosted on x666com receive session-level data to operate the game. They do not receive personally identifiable information beyond a randomised session token.
- Fraud and security vendors: Specialist security vendors may process device and behavioural data to support x666com's anti-fraud systems. All such vendors are bound by data processing agreements.
- Regulatory and law enforcement bodies: x666com will disclose personal data to competent authorities in Pakistan or internationally when legally required to do so — for example in response to a court order or AML reporting obligation. x666com does not proactively share data with government bodies beyond what is required by law.
- Internal teams: Within x666com, data is accessible only to staff and contractors who need it to perform their role — support agents, fraud analysts, finance staff, and technical engineers. Access is role-based and logged.
x666com does not share data with advertising networks, data brokers, or social media platforms for targeting purposes. This is an absolute commitment, not subject to internal exceptions.
06How Long We Keep Your Data
x666com retains personal data for as long as necessary to deliver the service and meet legal obligations. The table below summarises our standard retention periods:
| Data Type | Retention Period | Reason |
|---|
| Account & identity data | Duration of account + 5 years after closure | AML and legal obligation |
| Financial transaction records | 7 years from transaction date | Financial regulations and audit requirements |
| KYC documents | 5 years after account closure | Regulatory compliance |
| Support communications | 3 years from last interaction | Dispute resolution and quality assurance |
| Game session logs | 2 years from session date | Dispute resolution |
| Marketing preferences | Until opt-out or account deletion + 1 year | Compliance with opt-out requests |
| Cookies and analytics data | 13 months maximum (session cookies expire at session end) | Platform analytics and improvement |
After the applicable retention period expires, x666com permanently deletes or irreversibly anonymises the data. Anonymised aggregate data may be retained indefinitely for statistical purposes, but at that point it contains nothing that can identify you as an individual.
07Security Measures
x666com takes data security seriously and implements multiple layers of technical and organisational measures to protect player information:
- 256-bit SSL encryption: All data transmitted between your device and x666com is encrypted in transit using TLS 1.2 or higher. The padlock you see in your browser is real and current.
- Encrypted data at rest: Sensitive data including financial records and identity documents is encrypted in storage using AES-256 encryption.
- Two-Factor Authentication (2FA): x666com strongly encourages all players to enable 2FA via SMS OTP. This adds a second verification step to your login that protects against unauthorised access even if your password is compromised.
- Role-based access controls: Internal access to player data at x666com is restricted by role. Support staff see only what is needed to assist you. No single employee has unrestricted access to the full database.
- Regular security audits: x666com conducts periodic internal security reviews and engages third-party penetration testing to identify vulnerabilities before they can be exploited.
- Incident response plan: In the event of a data breach, x666com has a documented incident response procedure. Affected players will be notified as soon as practically possible, with guidance on protective steps they can take.
Your role in security: x666com's security measures protect data on our side. You can further protect yourself by using a strong, unique password for your x666com account, enabling 2FA, not sharing your login credentials, and logging out of shared devices. If you suspect your account has been accessed without your permission, contact x666com support immediately.
08Cookies and Tracking Technologies
x666com uses cookies and similar tracking technologies on its platform. Here is what that means in practice:
- Strictly necessary cookies: These are required for the platform to function. They keep you logged in during a session, remember your basket in the cashier, and maintain security state. These cannot be disabled without breaking core x666com functionality.
- Functional cookies: These remember your preferences — language settings, last visited section, UI preferences. They improve your experience but are not essential.
- Analytics cookies: x666com uses first-party analytics to understand aggregate behaviour on the platform — which pages are most visited, where players drop off, which features are used most. This data is analysed in aggregate and is not used to build individual profiles for advertising.
- Session vs persistent cookies: Session cookies expire when you close your browser. Persistent cookies remain on your device for a set period (maximum 13 months at x666com) unless you delete them earlier.
You can control non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies. Disabling all cookies may affect your ability to use certain x666com features, including automatic login. x666com does not use third-party advertising cookies or share tracking data with external ad networks.
09Your Data Rights
As a player at x666com, you have the following rights regarding your personal data. To exercise any of them, contact x666com at support@x666com.bet with the subject line "Data Rights Request". We will respond within 30 days.
Right of Access
You can request a copy of all personal data x666com holds about you. We will provide it in a readable format free of charge.
Right of Rectification
If any of your information held by x666com is inaccurate or incomplete, you have the right to have it corrected. Contact support or update your profile directly.
Right of Erasure
You can request deletion of your data. This right is subject to x666com's legal retention obligations — we cannot delete records we are required to keep for AML or regulatory compliance.
Right to Object
You can object to x666com processing your data for marketing purposes at any time. You can also object to processing based on legitimate interests where it affects your fundamental rights.
Right to Restrict Processing
In certain circumstances — for example while a rectification request is being assessed — you can ask x666com to temporarily pause processing of your data.
Right to Portability
Where your data was provided directly by you and processed by x666com on the basis of consent or contract, you can request it in a structured, machine-readable format.
10Children's Privacy
x666com is an adult gaming platform. The minimum age to register and play at x666com is 18 years. We do not knowingly collect any personal data from individuals under the age of 18.
If x666com discovers that a player is under 18, the account will be closed immediately, all deposits will be returned to the payment source, and any gameplay data will be permanently deleted in line with applicable law. Age verification is performed during registration and may be requested again at the withdrawal stage.
If you are a parent or guardian and believe your child may have registered at x666com, please contact support immediately at support@x666com.bet. We will investigate and close the account within 24 hours of a confirmed report.
11Marketing Communications
x666com sends marketing emails and SMS messages to players who have opted in to receive them. These communications include information about new games, bonuses, tournaments, and platform updates.
- You can opt out of marketing communications at any time by clicking the unsubscribe link in any x666com email, by replying STOP to any x666com SMS, or by updating your communication preferences in your account settings.
- Opting out of marketing communications does not affect transactional messages — you will still receive deposit confirmations, withdrawal updates, account security alerts, and important platform notices.
- x666com does not share your email address or phone number with third-party advertisers. Marketing is conducted by x666com directly.
- Players who are self-excluded from x666com are automatically removed from all marketing lists immediately upon activation of self-exclusion. This is enforced technically, not manually.
12Changes to This Privacy Policy
x666com reviews and updates this Privacy Policy periodically to reflect changes in platform features, legal requirements, or data practices. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page.
- Notify registered players via email at least 7 days before the new version takes effect, where the changes materially affect how we use your data.
- Display a notice on the x666com homepage for a minimum of 7 days following a significant update.
The current version of this Privacy Policy is always available at https://x666com.bet/privacy-policy. Continuing to use x666com after an updated version takes effect constitutes acceptance of the revised terms. If you disagree with any changes, you should close your account before the effective date.
Version history: x666com maintains an internal version history of this Privacy Policy. Players may request previous versions by contacting support.
13Contact x666com About Privacy
For any queries, concerns, or requests related to this Privacy Policy or your personal data at x666com, please get in touch through one of the following channels:
- Live Chat: Available 24/7 directly on the x666com platform. Use the chat bubble on any page. Response typically within 3 minutes.
- Email: support@x666com.bet — mark the subject line as "Privacy Request" for faster routing to the relevant team. Response within 1 business day for privacy-related matters, and within 30 days for formal data rights requests.
x666com treats all privacy enquiries with discretion. Submitting a data rights request will not affect your account status, access to games, or any pending bonuses or withdrawals.
