666xx Privacy Policy –
How We Protect Your Data

1 Overview

This Privacy Policy applies to all users of the 666xx platform, including the website and the downloadable mobile app. It covers every interaction you have with 666xx – from the moment you first visit the site to the point your account is closed.

By registering an account or continuing to use the platform after this policy has been updated, you confirm that you have read and understood how your data is handled. If you are not comfortable with any part of this policy, you should stop using 666xx and contact support to request account closure.

2 Data We Collect

We collect personal information in two ways: information you give us directly, and information generated automatically when you use the platform.

3 How We Use Your Data

Every piece of data we collect has a specific, justified purpose. We do not collect data speculatively or store it indefinitely. Here is exactly how your information is used:

• Account Management: Creating and maintaining your 666xx account, verifying your identity, and keeping your profile up to date.
• Payment Processing: Handling PKR deposits and withdrawals through JazzCash, Easypaisa, Raast, bank transfer and other supported payment methods.
• Fraud Prevention & Security: Detecting suspicious login attempts, identifying duplicate accounts, monitoring for unusual transaction patterns, and protecting the platform from abuse.
• Platform Improvement: Analysing how players interact with games, the lobby, and promotions so we can improve the experience over time.
• Customer Support: Responding to queries, resolving disputes, and following up on support tickets in an informed and efficient way.
• Responsible Gaming: Monitoring play patterns to identify potential problem gambling behaviour and, where appropriate, proactively reaching out or applying account tools.
• Marketing Communications: Sending you information about promotions, cricket betting offers, PSL specials, and new game releases – but only if you have opted in to receive these. You can opt out at any time from your account settings or by contacting support.
• Legal Compliance: Meeting our obligations under applicable anti-money laundering (AML) and know-your-customer (KYC) requirements.

4 Payment Data

Payment data deserves its own section because it is particularly sensitive. When you deposit or withdraw PKR at 666xx, your payment details pass through certified payment processors – not through 666xx servers in raw form. We do not store full card numbers, mobile wallet PINs, or online banking credentials on our systems.

What we do retain is:

• A tokenised reference to your payment method (e.g. last four digits of a card or a masked JazzCash number) to prevent duplicate account detection and ensure withdrawals go back to the correct source.
• A record of each transaction: amount in PKR, date, direction (deposit or withdrawal), and status.
• Any verification documents you submitted to confirm ownership of the payment method.

All payment data is encrypted at rest using AES-256 and in transit using TLS 1.2 or higher. Our payment processors are individually certified and handle data under their own compliant security frameworks.

5 Cookies & Tracking

666xx uses cookies and similar technologies to make the platform work properly and to understand how players use it. Here is a straightforward breakdown of what we use and why:

• Essential Cookies: These keep you logged in during a session and make sure the platform functions correctly. They cannot be disabled without breaking core features.
• Analytics Cookies: These help us understand which games are popular, how long players spend in different sections, and where players drop off. The data is aggregated and anonymised.
• Preference Cookies: These remember settings you have chosen, such as your preferred language or notification preferences, so you do not have to set them again every visit.
• Security Cookies: These support our fraud detection systems by helping us identify whether a login attempt matches a recognised device.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not stop you from using 666xx, but some features may behave differently.

6 Data Sharing

We do not sell, rent or trade your personal data to any third party for their own marketing purposes. Full stop. Your data may be shared only in the following limited circumstances:

• Payment Processors: JazzCash, Easypaisa, Raast, and other certified payment providers receive only the data they need to process your specific transaction.
• Identity Verification Services: Where KYC checks are performed using a third-party verification provider, your ID documents and personal details are shared with that provider solely for verification purposes.
• Game Providers: Game studios and live casino operators may receive your account identifier and bet history to resolve game disputes or audit game outcomes. They do not receive your full personal profile.
• Legal Obligations: If required by a valid legal process or regulatory authority, we may be obligated to disclose certain account information. We will inform you where legally permitted to do so.
• Fraud Prevention Networks: Anonymised or pseudonymised signals may be shared with industry fraud-prevention networks to protect the broader player community.

Any third party that receives data from 666xx is contractually required to handle it securely, use it only for the stated purpose, and not pass it on to others without our written permission.

7 Data Retention

We keep your data only for as long as it is genuinely needed. The retention periods below reflect practical necessity and standard compliance obligations:

• Active account data is retained for the lifetime of your account plus a minimum of five years after closure, to meet AML record-keeping requirements.
• Transaction records in PKR are retained for a minimum of five years from the date of the transaction.
• Identity verification documents are retained for five years after your account is closed or the documents expire, whichever is later.
• Support communications are retained for three years from the date of the last message in the conversation.
• Analytics and usage data that has been fully anonymised is retained for up to three years for platform improvement purposes.
• Marketing opt-out records are retained indefinitely to ensure we do not contact you again after you have asked us to stop.

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymised in line with our internal data disposal procedures.

8 Security Measures

Keeping your data secure is a core operational priority at 666xx, not an afterthought. The technical and organisational measures we have in place include:

• Encryption in transit: All data exchanged between your browser or app and 666xx servers is encrypted using TLS 1.2 or higher.
• Encryption at rest: Sensitive data stored on our servers – including personal details, payment tokens, and identity documents – is encrypted using AES-256.
• Password hashing: Your account password is never stored in plain text. It is hashed using a modern one-way algorithm, meaning even 666xx staff cannot see it.
• Access controls: Internal access to player data is restricted on a strict need-to-know basis. Staff who handle support queries see only what is necessary to resolve your issue.
• Two-factor authentication: We strongly encourage all players to enable 2FA on their account. It adds a critical extra layer of protection against unauthorised access.
• Regular security audits: Our platform undergoes periodic security assessments to identify and address potential vulnerabilities before they can be exploited.

9 Your Rights

You have a number of rights over the personal data 666xx holds about you. These are not bureaucratic formalities – they are genuine controls you can exercise at any time:

To exercise any of these rights, contact our support team via live chat or email. We aim to respond to all data requests within 30 days. Complex requests may take longer, in which case we will let you know within the initial 30-day window.

10 Minors & Age Policy

666xx is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe a minor has registered an account on 666xx, please contact support immediately with relevant details. We will investigate promptly, close the account, and securely delete the associated data.

Age verification is a standard part of our KYC process. Any account where we are unable to confirm that the player is 18 or over will be suspended until verification is completed. For more information on how we approach player welfare, visit our Responsible Gaming page.

11 Policy Changes

We review and update this Privacy Policy periodically to reflect changes in the platform, our data practices, or applicable requirements. When material changes are made, registered players will be notified by email or through an in-platform notification at least 7 days before the update takes effect.

The "Last Updated" date at the top of this page always reflects the current version. We recommend checking this page occasionally even if you have not received a notification – minor clarifications may be made without a formal announcement.

If you continue to use 666xx after a policy update takes effect, this constitutes your acceptance of the revised policy. If you disagree with any changes, you may close your account before the effective date and withdraw any remaining real-money PKR balance.

12 Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or the way 666xx handles your personal data, our support team is available around the clock. You can reach us through live chat on the platform or by emailing:

[email protected]

For data-specific requests such as access, deletion, or portability, please include your registered email address and a brief description of your request. We aim to acknowledge all privacy-related contacts within 48 hours and resolve them fully within 30 days.