At 666xp, your personal data is handled with the same care we apply to every aspect of the platform. This Privacy Policy explains precisely what information 666xp collects from Pakistani players, why we collect it, how it is used and protected, and what rights you hold over your own data. Please read this document fully before registering your 666xp account.
Six core principles that govern how 666xp handles your personal information — plain language before the full legal text.
666xp limits personal data collection to information that is genuinely necessary for account registration, identity verification, payment processing, responsible gaming compliance, and customer support. We do not collect data speculatively or for purposes unrelated to platform operation.
All personal data transmitted to and from 666xp is protected by SSL/TLS encryption. Data at rest is stored in encrypted form on access-controlled servers. Only authorised personnel with a legitimate operational need can access your personal records, and all access is logged and audited.
666xp does not sell, rent, or commercially exchange your personal information with third-party marketing companies or data brokers. Your data is used solely for the purposes described in this Privacy Policy, and those purposes alone. You will not receive unsolicited marketing from third parties as a result of using 666xp.
You have the right to access, correct, and request deletion of your personal data held by 666xp, subject to our legal retention obligations. Data subject requests are handled within 30 days. You can also update most personal information directly from your 666xp account settings panel without contacting support.
Where 666xp shares your data with third parties — such as licensed KYC verification providers, payment processors, or regulatory authorities — we disclose this clearly in this Privacy Policy. We do not share data with any third party outside the categories described herein without your explicit consent or a legal obligation to do so.
666xp retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by our international gaming license and applicable anti-money-laundering obligations. Specific retention periods for each data category are set out in Section 7 of this Policy.
666xp ("we", "us", "our") operates the online casino and sports betting platform accessible at 666xp.bet. This Privacy Policy describes how 666xp collects, uses, stores, and protects the personal data of individuals ("you", "your", "the User") who register for or use the 666xp platform, including all associated services such as the sportsbook, casino lobby, live dealer games, payment cashier, customer support, and promotional programmes.
This Policy should be read alongside the 666xp Terms & Conditions, which govern your use of the platform more broadly. Together these documents form the complete contractual and data-processing framework applicable to your 666xp account. By creating an account and using the 666xp platform, you acknowledge that you have read and understood this Privacy Policy.
666xp collects personal data in three primary ways: information you provide directly, information generated automatically through your use of the platform, and information received from licensed third-party verification and payment providers. The table below summarises the principal data categories collected.
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full legal name, CNIC number, date of birth, gender, nationality | Registration form; KYC document upload |
| Contact Data | Mobile number, email address, city of residence (e.g. Karachi, Lahore, Islamabad) | Registration form; account settings updates |
| Financial Data | JazzCash / EasyPaisa account reference, HBL/UBL bank account last four digits, USDT TRC20 wallet address, transaction amounts in PKR | Cashier transactions; payment processor confirmation |
| KYC Document Data | CNIC front and back image, selfie with CNIC, proof of address document | Mandatory KYC verification process |
| Technical Data | IP address, device type and OS, browser type and version, session timestamps, geolocation (city-level) | Automatically collected during platform use |
| Usage Data | Games played, bet history, wagering amounts, session duration, bonus usage, responsible gaming tool activations | Automatically generated by platform activity |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
| Marketing Preferences | Opt-in or opt-out status for promotional SMS and email communications | Account settings; registration preferences |
You are not required to provide sensitive data categories such as racial or ethnic origin, religious beliefs, or health information in order to use 666xp. Where health or vulnerability data is voluntarily shared in the context of a responsible gaming or self-exclusion request, it will be used only for the purpose of that request and handled with enhanced confidentiality safeguards.
666xp uses the personal data it collects for the following defined purposes:
666xp processes personal data on the following legal grounds, depending on the specific processing activity:
666xp does not sell your personal data. We share personal data only in the following defined circumstances and only with the categories of recipient described below:
To fulfil our age and identity verification obligations, 666xp works with licensed third-party KYC providers. These providers receive the minimum personal data necessary — typically your CNIC details, name, and date of birth — and are contractually prohibited from using this data for any purpose other than identity verification on 666xp's behalf.
Transaction data is shared with the relevant payment service — such as JazzCash, EasyPaisa, HBL, UBL, or the USDT TRC20 blockchain network — to the extent necessary to process your deposit or withdrawal. Each payment provider operates under its own privacy and security frameworks, which we encourage you to review.
666xp will disclose personal data to competent regulatory, law enforcement, or judicial authorities where required to do so by law, court order, or the requirements of our international gaming license. Such disclosures may include suspicious transaction reports filed under anti-money-laundering obligations.
666xp uses third-party technology providers for platform infrastructure, game delivery, live chat support, and analytics. These providers act as data processors under contractual terms that restrict their use of your data to services provided exclusively on behalf of 666xp and prohibit independent commercial use of that data.
In the event that 666xp undergoes a merger, acquisition, or sale of its business or assets, personal data held by 666xp may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to data processing arrangements that results from it.
666xp uses cookies and similar tracking technologies to operate the platform, maintain your login session, detect fraud, and analyse platform usage. The following categories of cookies are in use:
You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your 666xp account. 666xp does not use third-party advertising or cross-site tracking cookies.
666xp retains personal data for the minimum period necessary to fulfil the purposes described in this Policy, subject to the overriding requirements of our gaming license and applicable law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration and identity data | 5 years from account closure | Gaming license & AML obligations |
| KYC documents (CNIC, selfie) | 5 years from account closure | Regulatory compliance |
| Financial transaction records | 7 years from transaction date | AML & financial record-keeping |
| Bet and gaming activity history | 5 years from account closure | Gaming license conditions |
| Customer support records | 3 years from resolution | Dispute resolution & quality assurance |
| Marketing preference records | Until opt-out plus 1 year | Consent management compliance |
| Technical and session logs | 12 months from collection | Security and fraud monitoring |
| Self-exclusion records | Duration of exclusion plus 5 years | Responsible gaming obligations |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.
666xp implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:
Subject to applicable data protection law and our obligations under international gaming regulations, you hold the following rights in relation to your personal data held by 666xp. To exercise any of these rights, contact us at [email protected]. We will respond to all valid requests within 30 calendar days.
You may request a copy of the personal data 666xp holds about you, along with information about how it is used, who it is shared with, and how long it will be retained.
You may request correction of any inaccurate personal data held by 666xp. Many data fields — such as contact details and communication preferences — can be updated directly in your account settings without contacting support.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and no legal obligation requires its retention. Note that gaming license and AML retention requirements will in many cases prevent immediate erasure of core account and transaction records.
You may request that 666xp restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or have objected to processing pending verification of our legitimate grounds.
Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, machine-readable format suitable for transfer to another service provider.
Where processing is based on your consent — specifically, direct marketing communications — you may withdraw that consent at any time via your 666xp account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
666xp is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process is designed to prevent underage access, and identity verification is conducted to confirm that all account holders meet the minimum age requirement.
If 666xp becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended and all associated personal data will be deleted to the extent not required to be retained under applicable gaming license or AML obligations. Any Real Money Balance held in such an account will be returned to the depositing payment method after verification.
If you believe that a minor has registered an account on 666xp using false information, please contact us immediately at [email protected] so that we can investigate and take appropriate action.
666xp processes account activity data as part of our commitment to responsible gaming. This includes monitoring for behavioural patterns that may indicate problem gambling — such as rapid increases in bet frequency, chasing losses, or repeated cancellation of withdrawal requests. Where such indicators are identified, 666xp may use this data to:
Data processed in connection with responsible gaming tools — including self-exclusion status, deposit and loss limits, and reality check settings — is treated with enhanced confidentiality. This data is not used for marketing profiling and is not shared with any third party other than the gaming license authority where required by our license conditions.
For more information about the responsible gaming tools available on 666xp, visit our Responsible Gaming page.
666xp operates under an international gaming license, and some of our technology infrastructure and third-party service providers are located outside of Pakistan. As a result, your personal data may be transferred to and processed in jurisdictions other than Pakistan.
Where personal data is transferred internationally, 666xp ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this Privacy Policy. These safeguards may include contractual clauses with service providers, certification of providers under recognised data protection frameworks, or reliance on adequacy decisions where applicable.
By using the 666xp platform, you consent to the international transfer of your personal data on the basis and subject to the safeguards described in this section.
The 666xp platform does not include links to third-party websites for commercial or affiliate purposes. However, to the extent that any reference to an external resource appears in a support or informational context, 666xp is not responsible for the privacy practices of those external sites and encourages you to review their privacy policies independently before providing any personal information.
This Privacy Policy applies solely to personal data processed by 666xp in connection with the 666xp.bet platform and does not extend to any third-party service, payment provider's own customer portal, or any other external site that you may access from or in connection with 666xp.
666xp reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, platform features, legal obligations, or applicable data protection standards. Where amendments are material — meaning they affect the nature of data collected, the purposes for which it is used, or your rights in respect of that data — 666xp will notify registered users by email and/or by a prominent notice within the platform at least seven (7) days before the changes take effect.
The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the 666xp platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree with the amended Policy, you should cease using 666xp and request account closure before the effective date.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 666xp, please contact our support team. We aim to acknowledge all written data-related enquiries within 24 hours and to provide a substantive response within 30 calendar days.
Data Enquiries Email: [email protected]
When submitting a data subject request, please include your registered 666xp username and the email address associated with your account so that we can locate your records and respond efficiently. For security purposes, we may ask you to verify your identity before processing your request.
666xp is built on transparency and trust. PKR payments via JazzCash and EasyPaisa, certified fair games, and a team committed to keeping your data secure — every session, every day. 21+ only. Play responsibly.