x666d Privacy Policy

01 Introduction

This Privacy Policy ("Policy") is issued by x666d ("the Platform", "we", "us", "our") and applies to all personal data collected from individuals ("Players", "you", "your") who access, register on, or use the x666d website at https://x666d.org, including all associated subdomains, mobile interfaces, applications, and promotional channels (collectively, the "Services").

x666d is committed to protecting the privacy and personal data of every player, with particular regard to the Pakistani users who form the heart of our community. This Policy explains in clear, transparent terms what personal information we collect, the purposes for which we process it, the conditions under which it may be shared, how long we retain it, and the rights you hold in relation to it.

By registering an account with x666d or using any of our Services, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. This Policy forms part of the overall agreement between you and x666d, together with the Terms and Conditions and the Responsible Gaming Policy.

02 Data Controller

For the purposes of applicable data protection legislation, x666d acts as the Data Controller in respect of all personal data collected and processed through the Services. As Data Controller, x666d determines the purposes and means by which your personal data is processed and bears responsibility for ensuring that all processing activities comply with applicable data protection principles.

x666d operates the platform under international gaming regulations and its data processing activities are conducted in accordance with globally recognised data protection standards, including principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and accountability.

All enquiries relating to data protection, privacy rights, or this Policy may be directed to the x666d Data Protection team at [email protected].

03 Personal Data We Collect

3.1 Registration Data

When you create an x666d account, we collect the following personal information:

• Full legal name (as it appears on your Pakistani CNIC or passport);
• Date of birth (to verify that you are aged 21 or over);
• Residential address, including city (e.g. Karachi, Lahore, Islamabad, Faisalabad);
• Pakistani mobile telephone number;
• Valid email address;
• Username chosen at registration.

3.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) and anti-money laundering obligations, we may collect:

• Copy of a valid government-issued photo identity document (Pakistani CNIC, Passport, or equivalent);
• Proof of residential address (utility bill, bank statement, or similar document);
• Proof of ownership of the payment method(s) used on the account;
• Source of funds documentation where required by our AML obligations.

3.3 Financial Data

When you make deposits or withdraw funds, we collect transaction-related information including payment method details (JazzCash account reference, EasyPaisa number, HBL/UBL/Meezan Bank account identifiers, Raast ID, or other applicable payment identifiers), transaction amounts in PKR, and timestamps. We do not store full card numbers or payment PINs — all payment processing is handled securely by our regulated payment service providers.

3.4 Gaming Activity Data

We collect records of your gaming activity on x666d, including games played, bet amounts, win/loss history, session durations, bonus usage, and responsible gaming tool activations. This data is used to maintain account integrity, resolve disputes, and identify problematic gambling patterns for responsible gaming interventions.

3.5 Technical and Device Data

We automatically collect certain technical data when you access x666d, including your IP address, browser type and version, operating system, device identifiers, screen resolution, referring URL, and pages visited within the platform. This data is used for security monitoring, fraud prevention, and platform optimisation.

3.6 Communications Data

We retain records of all communications between you and x666d, including support tickets, live chat transcripts, emails, and feedback submissions. This data is used to resolve queries, improve our services, and maintain a complete record of your relationship with the platform.

04 How We Collect Your Data

x666d collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, submit a complaint, or respond to a survey;
• Automatically — through cookies, web beacons, server logs, and similar technologies when you browse or interact with the x666d platform;
• From third parties — including identity verification providers, payment processors (e.g. JazzCash, EasyPaisa), fraud prevention agencies, and publicly available sources, where necessary to verify your identity or assess risk;
• Through responsible gaming tools — when you activate deposit limits, self-exclusion, or cooling-off periods, we record those preferences to honour your instructions across all sessions and devices.

05 How We Use Your Personal Data

x666d processes personal data for the following specific purposes:

• Account Management: To create, maintain, and administer your x666d player account, including processing deposits and withdrawals in PKR via JazzCash, EasyPaisa, and other supported methods;
• Identity Verification: To verify that you are aged 21 or above and to confirm your identity in accordance with our KYC and AML obligations;
• Service Delivery: To provide access to x666d's full suite of casino games, cricket betting, PSL markets, slots, and other gaming products;
• Payment Processing: To process, verify, and record all financial transactions on your account, and to detect and prevent fraudulent payment activity;
• Legal Compliance: To comply with our obligations under international gaming regulations, anti-money laundering requirements, and any applicable legal or regulatory orders;
• Responsible Gaming: To monitor gaming patterns, identify potential signs of problem gambling, deliver responsible gaming tools, and intervene where necessary to protect vulnerable players;
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, multi-accounting, bonus abuse, and other prohibited conduct;
• Customer Support: To respond to your enquiries, resolve complaints, and maintain records of our communications for quality assurance and dispute resolution;
• Platform Improvement: To analyse aggregated usage data and improve the functionality, performance, and content of the x666d platform;
• Marketing Communications: To send you promotional offers, bonus alerts, and updates about x666d products and services — but only where you have provided explicit consent or where we have a legitimate interest to do so. You may opt out of marketing communications at any time.

06 Legal Bases for Processing

x666d processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the x666d Terms and Conditions, including account management, payment processing, and game delivery;
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC verification, AML reporting, and responses to lawful regulatory requests;
• Legitimate Interests: Processing carried out in pursuit of x666d's legitimate business interests where those interests are not overridden by your rights and freedoms, including fraud prevention, platform security, and service improvement;
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including the sending of direct marketing communications. Where consent is the legal basis, you retain the right to withdraw it at any time.

07 Data Sharing and Disclosure

7.1 Service Providers

x666d shares personal data with carefully selected third-party service providers who assist us in delivering the Services. These include payment processors (including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and GrabPay integrators), identity verification providers, fraud detection services, cloud hosting providers, and customer support platform operators. All third-party service providers are bound by contractual data processing agreements that restrict them to processing your data only on x666d's instructions and for the purposes specified.

7.2 Regulatory and Legal Disclosure

x666d may disclose personal data to competent regulatory authorities, law enforcement agencies, courts, or other public bodies where required to do so by law, court order, or in response to a lawful regulatory request. x666d will, where legally permissible, notify affected players of such disclosures.

7.3 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of all or part of x666d's business, personal data held by x666d may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material changes to data processing practices that result from it.

7.4 No Sale of Personal Data

x666d does not sell, rent, or lease your personal data to any third party for their own independent marketing or commercial purposes. Any sharing of data is strictly limited to what is necessary for the purposes set out in this Policy.

08 Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. x666d uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage objects) to deliver, maintain, secure, and improve the platform experience for Pakistani players.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of the x666d platform, including session management, security functions, and login state. These cannot be disabled.
• Performance and Analytics Cookies: Collect anonymised data about how players use x666d to help us improve platform performance, navigation, and game loading times.
• Functional Cookies: Remember your preferences such as language, currency (PKR), and responsible gaming settings to personalise your experience.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of x666d's marketing activities. These are only placed with your consent.

8.3 Managing Cookies

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may impair the functionality of the x666d platform. A full cookie preference centre is available within your x666d account settings.

09 Your Data Protection Rights

As a player whose personal data is processed by x666d, you hold the following rights. To exercise any of these rights, please submit a written request to [email protected] from your registered email address. We will respond within 30 calendar days of receiving your request.

• Right of Access (Subject Access Request): You may request a copy of all personal data x666d holds about you, together with information about how it is processed.
• Right to Rectification: You may request that we correct any personal data that is inaccurate or incomplete.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: You may ask us to suspend the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Rights Related to Automated Decision-Making: Where x666d uses automated processes to make decisions that significantly affect you, you have the right to request human review of such decisions.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

10 Data Retention

x666d retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law or regulation. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or rendered permanently anonymous in a manner that prevents re-identification.

11 Data Security

x666d implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• End-to-end 256-bit SSL/TLS encryption for all data in transit;
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records;
• Multi-factor authentication requirements for all administrative access to player data systems;
• Role-based access controls ensuring that x666d staff can only access the minimum personal data necessary for their role;
• Regular penetration testing, vulnerability assessments, and security audits conducted by independent third parties;
• Continuous monitoring of all systems for unusual access patterns, intrusion attempts, and data exfiltration activity;
• Secure, geographically redundant data centres with physical access controls and 24/7 on-site security personnel.

While x666d takes every reasonable measure to protect your personal data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, x666d will notify you without undue delay in accordance with applicable data protection obligations.

12 Children's Privacy and Age Restriction

x666d is strictly an adult platform. Our Services are intended exclusively for individuals who are aged 21 years or above. We do not knowingly collect, process, or retain personal data from any person under the age of 21. Age verification is a mandatory step in the x666d registration process, and we reserve the right to request documentary proof of age at any time.

If x666d becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data, close the associated account, and reverse any transactions made by the underage individual. Any funds deposited by an underage player will be returned to the original payment source.

If you are a parent or guardian and you believe that a minor in your care has registered on x666d without authorisation, please contact us immediately at [email protected]. We will investigate and act without delay.

13 International Data Transfers

As an internationally operated gaming platform serving Pakistani players, x666d may transfer personal data to servers, service providers, or partners located outside of Pakistan. Where such transfers occur, x666d ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Policy.

Safeguards used for international data transfers may include:

• Standard contractual clauses approved by applicable regulatory authorities;
• Data processing agreements with service providers that impose equivalent data protection obligations;
• Transfers only to countries or organisations that provide an adequate level of data protection as determined by relevant supervisory authorities.

If you would like further information about the specific safeguards applied to international transfers of your personal data, please contact us at [email protected].

14 Third-Party Links and Services

The x666d platform may contain references to or integrations with third-party payment services (such as JazzCash and EasyPaisa). While x666d selects its payment and service partners carefully, we do not control the privacy practices of third-party providers. Once you navigate away from x666d or interact directly with a third-party service interface, their own privacy policy governs the processing of your data.

x666d is not responsible for the privacy practices, data security standards, or content of any third-party services. We encourage you to review the privacy policies of any third-party providers you interact with in connection with your use of x666d's Services.

15 Updates to This Privacy Policy

x666d reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform functionality. The effective date at the top of this Policy will be updated whenever a material change is made.

Where changes are material — meaning they significantly affect how your personal data is processed or your rights in relation to it — x666d will notify all registered players by email at least 14 days before the changes take effect. Continued use of the x666d platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how x666d protects your data. The current version of the Policy is always available at https://x666d.org/privacy-policy.

16 Contact Us

If you have any questions, concerns, or requests in relation to this Privacy Policy or the way in which x666d processes your personal data, please do not hesitate to get in touch with our Data Protection team:

• Email: [email protected]
• Response Time: We aim to respond to all data protection enquiries within 5 business days and to all formal rights requests within 30 calendar days.
• Language: You may contact us in English. Our support team is familiar with the needs of Pakistani players and will assist you accordingly.

When submitting a data rights request, please include your full name, registered x666d username, and a clear description of the right you wish to exercise or the concern you wish to raise. This will help us to locate your account and respond to your request efficiently.