Your privacy matters at x66666. This Privacy Policy explains exactly what personal data we collect when you use our online casino and sports betting platform, why we collect it, how we use and protect it, and what rights you hold over your own information. We encourage every Pakistani player to read this document before registering.
These cards highlight the most important privacy commitments x66666 makes to you. They are not a substitute for the full policy below — please read the complete document.
All personal data held by x66666 is protected with 256-bit SSL encryption in transit and AES-256 encryption at rest. Your account credentials, payment details, and KYC documents are stored in isolated, access-controlled environments.
x66666 does not sell, rent, or trade your personal information to third-party marketing organisations. Your data is shared only with service providers directly necessary to operate the platform — under strict contractual obligations.
x66666 understands the Pakistani regulatory and cultural context. Payment data for JazzCash, EasyPaisa, HBL, and UBL transactions is handled with the same rigour as any bank-level financial data — confidentially and securely.
You have the right to access, correct, export, or request deletion of your personal data at any time, subject to legal retention obligations. All data subject requests are handled by x66666's compliance team within 30 days.
x66666 uses cookies and similar technologies strictly for platform functionality, session management, fraud prevention, and analytics. We do not use third-party advertising cookies or cross-site tracking technologies.
As a licensed gaming platform, x66666 is required to retain certain financial records for AML compliance purposes. This retention is a legal obligation — not a commercial choice — and is subject to strict internal access controls.
x66666 ("we," "us," "our," or "the Company") operates the online casino and sports betting platform available at x66666.app, including all associated mobile and web interfaces. x66666 is the data controller responsible for personal data collected through the platform.
For the purposes of this Privacy Policy, "personal data" means any information relating to an identified or identifiable natural person — including but not limited to your name, CNIC number, email address, phone number, device identifiers, and financial account details.
If you have questions about how your data is handled, or wish to exercise any of your privacy rights, please contact our compliance team at: [email protected].
x66666 collects personal data through several channels: directly from you during registration and use of the platform, automatically through your device and browser when you access x66666, and from third parties such as payment processors and identity verification services where required for compliance.
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC/passport number, nationality | Registration & KYC verification |
| Contact Data | Email address, phone number, city of residence (e.g. Karachi, Lahore, Islamabad) | Registration |
| Financial Data | JazzCash/EasyPaisa account numbers, bank account details (HBL, UBL, Meezan), crypto wallet addresses, transaction history | Deposit & withdrawal processing |
| KYC Documents | Scanned CNIC, utility bills, bank statements, selfie verification images | Identity verification |
| Communications Data | Live chat transcripts, support emails, feedback submissions | When you contact support |
| Category | Examples | Purpose |
|---|---|---|
| Technical Data | IP address, browser type and version, operating system, device fingerprint | Security, fraud prevention, geolocation compliance |
| Usage Data | Pages visited, games played, bets placed, session duration, click patterns | Platform improvement, responsible gaming monitoring |
| Cookie Data | Session tokens, preference cookies, analytics identifiers | Session management, functionality, analytics |
| Transaction Logs | Bet history, game round IDs, deposit and withdrawal records, timestamps | AML compliance, dispute resolution, audit trails |
Where required to meet our anti-money laundering ("AML") and know-your-customer ("KYC") obligations, x66666 may receive supplementary identity or fraud-risk data from accredited third-party identity verification providers. x66666 may also receive transaction-level data from payment processors including JazzCash, EasyPaisa, and cryptocurrency network providers to confirm deposit and withdrawal status.
x66666 uses your personal data only for clearly defined, legitimate purposes. We do not use your data for purposes that are incompatible with those stated at the time of collection.
Where you have given explicit consent at registration or subsequently, x66666 may send you personalised promotional communications about new games, bonus offers, and cricket betting markets. You may withdraw this consent at any time by updating your communication preferences in your account settings, or by contacting support at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any processing that occurred prior to withdrawal.
x66666 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:
x66666 does not sell, rent, or share your personal data with third parties for their own commercial purposes. We share data only in the following limited circumstances:
x66666 engages carefully selected third-party service providers to assist in operating the platform. These include: identity verification and KYC providers, payment processors (including JazzCash, EasyPaisa, and crypto network infrastructure), cloud hosting providers, fraud detection services, and customer support tooling providers. All service providers operate under contractual data processing agreements that prohibit them from using your data for any purpose other than providing the contracted service to x66666.
Casino games available on x66666 are supplied by licensed third-party game studios. These providers receive anonymised session and game-round data for the purpose of RNG certification, technical support, and game performance auditing. They do not receive your identity or payment data.
x66666 may disclose personal data to regulators, licensing authorities, financial intelligence units, or law enforcement agencies where required to do so by law, court order, or regulatory directive. x66666 will notify you of such disclosure where legally permitted to do so.
In the event of a merger, acquisition, restructuring, or sale of all or part of x66666's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.
x66666 operates under an international gaming licence and may process or store data on servers located outside Pakistan. Where personal data is transferred internationally, x66666 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that which would apply within a jurisdiction with comprehensive data protection law. These safeguards include contractual data protection clauses, data processing agreements with service providers, and technical security controls applied consistently regardless of server location.
By registering and using x66666, you acknowledge that your data may be processed in these international environments under the safeguards described above.
x66666 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guideline:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of account + 5 years post-closure | AML legal obligation |
| Financial transaction records | 7 years from transaction date | AML and licensing obligation |
| KYC documents | Duration of account + 5 years post-closure | Regulatory requirement |
| Support communications | 3 years from last interaction | Legitimate interest / dispute resolution |
| Marketing consent records | Until consent withdrawn + 3 years | Legal obligation (proof of consent) |
| Technical and usage logs | 13 months from collection | Security and analytics |
Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymised.
x66666 uses cookies and similar client-side technologies (including local storage and session storage) for the following purposes:
x66666 does not use third-party advertising cookies, cross-site tracking pixels, social media retargeting tags, or any tracking technology that shares your browsing behaviour with external advertising networks.
You may configure your browser to reject or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your x66666 account and using core platform features. Analytics and functional cookies can be disabled without affecting your ability to play.
You hold the following rights over your personal data held by x66666. To exercise any of these rights, please contact our compliance team at [email protected] with the subject line "Data Subject Request." We will respond within 30 days of receiving a complete request.
You have the right to request a copy of all personal data x66666 holds about you, along with information about how it is used, where it is stored, and with whom it has been shared.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For identity data changes, supporting documentation may be required.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Note that legal retention obligations (e.g. AML records) may prevent full erasure of certain data categories.
You may request that x66666 restricts processing of your data while a dispute about its accuracy or the lawfulness of its processing is under investigation.
Where processing is based on your consent or on contract performance, you may request that your personal data be provided to you in a structured, machine-readable format (e.g. JSON or CSV).
You may object to processing of your personal data carried out on the basis of x66666's legitimate interests — including profiling for responsible gaming monitoring — unless x66666 can demonstrate compelling grounds that override your interests.
Where processing is based solely on your consent (e.g. marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
x66666 is strictly an adults-only platform for players aged 21 and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is conducted as part of the registration and KYC process for all new accounts.
If x66666 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the personal data to the extent permitted by law, and notify relevant authorities where required. If you believe a minor has created an account on x66666, please report this immediately to [email protected].
For guidance on parental controls and tools to prevent underage access to online gaming platforms, please visit our Responsible Gaming page.
x66666 implements a layered security architecture to protect your personal data against unauthorised access, loss, destruction, or alteration. Our security measures include:
While x66666 implements robust technical and organisational measures, no system is completely immune to all threats. You also play a role in protecting your account — please use a strong, unique password, enable two-factor authentication, and never share your login credentials with anyone.
The x66666 platform does not contain links to external websites or third-party services that would cause your personal data to be transmitted to outside parties without your knowledge. All game content is loaded within the x66666 platform environment; game provider APIs receive only anonymised session tokens — not your identity or payment data.
x66666 is not responsible for the privacy practices of any third-party service you access independently of the x66666 platform. This Privacy Policy applies exclusively to data processed by x66666 through the x66666.app platform and associated services.
x66666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Where changes are material — meaning they significantly affect how we use your personal data or the rights available to you — x66666 will provide advance notice through a prominent platform notification and, where feasible, by email to your registered address.
The "Last Updated" date at the top of this page reflects when the most recent revision was made. Your continued use of x66666 after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree to the revised policy, you should cease using the platform and may request account closure in accordance with the x66666 Terms & Conditions.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how x66666 has handled your personal data, please contact our Data Protection team:
If you are not satisfied with x66666's response to your privacy concern, you have the right to escalate the matter to the relevant data protection supervisory authority or gaming regulator in accordance with the dispute resolution procedures set out in the x66666 Terms & Conditions.
x66666 protects your privacy with bank-grade encryption and zero data selling — so you can focus on cricket betting, live casino, and slots with full confidence. Deposits via JazzCash, EasyPaisa & USDT. Strictly 21+.