x6666 Privacy Policy — Your Data, Our Responsibility

1. Introduction

This Privacy Policy ("Policy") describes how x6666 ("x6666", "we", "us", or "our") collects, uses, stores, shares, and protects the personal data of users ("you" or "your") who access or use the x6666 online gaming platform at x6666.pro, including all associated services, games, features, and communications.

x6666 is built for the Pakistani market and serves users across Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Peshawar, and beyond. We understand that Pakistani users place a high value on privacy and the responsible handling of sensitive personal data — including CNIC documentation, mobile wallet credentials, and financial transaction records. This Policy reflects that understanding.

By registering for and using x6666, you confirm that you have read, understood, and agreed to the practices described in this Privacy Policy. If you do not agree with any part of this Policy, you should not use the x6666 platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement between you and x6666.

2. Data Controller

x6666 acts as the data controller in respect of all personal data collected through the x6666.pro platform. As data controller, x6666 determines the purposes for which and the manner in which your personal data is processed.

All data protection enquiries, access requests, and complaints should be directed to the x6666 Data Protection team via the contact details provided in Section 15 of this Policy. x6666 is committed to resolving all data-related queries promptly and transparently.

3. Data We Collect

x6666 collects the following categories of personal data from users:

3.1 Identity Data

• Full legal name (as appears on CNIC)
• Date of birth
• CNIC number and scanned copy of the CNIC document
• Selfie photograph (for biometric identity matching against CNIC)
• Gender

3.2 Contact Data

• Mobile phone number (Pakistani, typically +92 format)
• Email address
• City and province of residence
• Mailing address (required for certain verification tiers)

3.3 Account & Technical Data

• x6666 username and encrypted password hash
• Account registration date and time
• Login timestamps and session durations
• Device type, operating system, and browser/app version
• IP address and approximate geolocation (city-level)

3.4 Financial & Transaction Data

• JazzCash or EasyPaisa mobile wallet number
• Bank account details (HBL, UBL, Meezan Bank, or other approved banks) for withdrawal processing
• Raast ID or 1LINK credentials where applicable
• Deposit amounts, dates, and payment reference numbers
• Withdrawal requests, amounts, and processing records
• Bonus credits, wagering activity, and promotional participation history

3.5 Gaming & Behavioural Data

• Betting history, game participation records, and win/loss data
• Sports markets accessed (cricket, PSL, snooker, etc.)
• Session frequency, duration, and responsible gaming tool usage
• Customer support interaction records (chat transcripts, email correspondence)

3.6 Voluntarily Provided Data

• Feedback, survey responses, and promotional competition entries
• Communication preferences submitted via account settings

4. How We Collect Data

x6666 collects personal data through the following mechanisms:

• Direct submission: Data you actively provide during registration, KYC upload, deposit/withdrawal requests, support interactions, and profile updates.
• Automated collection: Technical data collected automatically when you access x6666.pro via cookies, server logs, and analytics tools (see Section 8 for cookie details).
• Third-party verification: Identity confirmation data received from approved KYC verification partners following document submission.
• Payment processors: Transaction confirmation data returned by JazzCash, EasyPaisa, Raast, 1LINK, and bank payment gateways upon processing deposits and withdrawals.
• Fraud prevention systems: Device fingerprint and behavioural signals collected by x6666's fraud detection layer to protect users and the platform from unauthorised access and collusion.

5. Why We Use Your Data

x6666 uses your personal data for the following specific, legitimate purposes:

6. Legal Basis for Processing

x6666 processes personal data under the following legal bases:

• Contract performance: Processing necessary to deliver the x6666 gaming service under the Terms & Conditions you accepted at registration.
• Legal obligation: Processing required to comply with AML regulations, KYC obligations, and applicable gaming licence conditions.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and service analytics — where these interests are not overridden by your data protection rights.
• Consent: Processing for optional marketing communications, which you may withdraw at any time via your account settings or by contacting x6666 support.

7. Data Sharing & Disclosure

x6666 does not sell or rent your personal data. We share data only under the following controlled circumstances:

• Payment processors: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, and Meezan Bank receive only the transaction data necessary to process your deposits and withdrawals.
• KYC verification partners: Approved identity verification providers receive CNIC and selfie data solely for the purpose of confirming your identity and age.
• Regulatory authorities: x6666 may disclose data to licensing regulators, financial intelligence units, or law enforcement agencies where required by law or a valid legal order.
• Fraud prevention networks: Anonymised or pseudonymised risk signals may be shared with fraud prevention services to protect the x6666 platform and its users.
• Game studios: Third-party game providers (for live casino and slot titles) receive only your session token and bet data — never your identity or payment information directly.
• Professional advisors: Legal counsel, auditors, and compliance consultants acting under strict confidentiality obligations may access data where necessary.

8. Cookies & Tracking

x6666 uses cookies and similar tracking technologies to operate the platform, personalise your experience, and maintain platform security. The following cookie categories are used:

• Strictly necessary cookies: Required for the platform to function — including session management, login authentication, and security tokens. These cannot be disabled.
• Functional cookies: Remember your language preference, game lobby layout, and responsible gaming settings between sessions.
• Analytics cookies: Collect anonymised data about how users navigate x6666 to help us improve platform performance and user experience.
• Fraud prevention cookies: Generate a device fingerprint used to detect unauthorised account access and multi-account behaviour.

x6666 does not use advertising cookies or share cookie data with third-party advertising networks. You may manage non-essential cookie preferences via the cookie settings panel available in your x6666 account. Please note that disabling functional cookies may impact certain personalisation features.

9. Data Retention

x6666 retains personal data for the periods set out below, after which data is securely deleted or anonymised:

• Active account data: Retained for the full duration of your account plus 7 years after account closure (in line with AML and financial record-keeping obligations).
• KYC documents (CNIC, selfie): Retained for a minimum of 5 years from the date of submission, as required under applicable anti-money laundering regulations.
• Transaction records: Retained for 7 years from the date of each transaction.
• Customer support records: Retained for 3 years from the date of the last interaction.
• Marketing consent records: Retained for 3 years from the date of consent or until withdrawn, whichever is earlier.
• Anonymised analytics data: May be retained indefinitely as it cannot be linked back to individual users.

10. Data Security

x6666 implements a layered security architecture to protect your personal data against unauthorised access, loss, destruction, or alteration:

• TLS 1.3 encryption on all data in transit between your device and x6666 servers;
• AES-256 encryption for all sensitive data stored at rest, including CNIC scans and payment credentials;
• Two-factor authentication (2FA) available and recommended for all x6666 accounts;
• Role-based access controls ensuring that x6666 staff can only access the minimum data required for their specific function;
• Regular penetration testing conducted by independent cybersecurity specialists;
• Real-time intrusion detection systems monitoring for anomalous access patterns 24/7.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to affect your rights and freedoms, x6666 will notify affected users as promptly as practicable and take all reasonable steps to contain and mitigate the breach.

11. Your Data Rights

As an x6666 user, you hold the following rights in respect of your personal data:

• Right of access: You may request a copy of all personal data x6666 holds about you at any time.
• Right of rectification: You may request correction of any inaccurate or incomplete personal data in your x6666 account.
• Right of erasure: You may request deletion of your personal data, subject to x6666's legal retention obligations (e.g., AML record-keeping requirements).
• Right to restrict processing: You may request that x6666 limit the processing of your data in certain circumstances while a complaint or correction request is pending.
• Right to data portability: You may request a structured, machine-readable copy of the personal data you have provided to x6666.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing communications.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact x6666 support via live chat or email. We will acknowledge your request within 24 hours and provide a full response within 5 business days. There is no charge for exercising your data rights.

12. Minors & Age Verification

x6666 is strictly an adult platform. Access is permitted only to individuals aged 21 years and above. x6666 does not knowingly collect personal data from any person under the age of 21.

All users are required to complete CNIC-based age verification before any real-money gaming activity is permitted. If x6666 discovers that a user account has been created by or on behalf of an individual under 21 years of age, the account will be immediately suspended, all funds frozen, and the CNIC documentation involved will be reviewed by the x6666 compliance team. The matter may be referred to relevant authorities.

If you believe a minor has accessed x6666 using fraudulent identity documentation, please contact x6666 support immediately at [email protected].

13. International Data Transfers

x6666's core platform infrastructure is hosted within data centres operating under internationally recognised data security standards. Where personal data is transferred to or processed by service providers located outside Pakistan — for example, global KYC verification providers or cloud infrastructure partners — x6666 ensures that such transfers are protected by appropriate safeguards, including contractual data processing agreements that impose data protection standards equivalent to those described in this Policy.

x6666 does not transfer your CNIC documentation or biometric data outside of its approved verification partner network, and never to countries without adequate data protection frameworks.

14. Policy Changes

x6666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. Any material changes to this Policy will be communicated to registered users via an in-platform notification and/or email to the registered address on the account.

The updated Policy will be published on this page with a revised "Last Updated" date. Your continued use of x6666 following publication of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the platform and contact x6666 support to request account closure.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by x6666, please contact our Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the x6666 platform — average response time 3–5 minutes
• Email: [email protected]
• Support Hours: Pakistan Standard Time (PKT, UTC+5) — all responses within 5 business days

x6666 takes all privacy-related concerns seriously. If you are not satisfied with our response to a data protection query, you have the right to escalate your complaint to the relevant regulatory authority under x6666's international gaming licence.