Privacy Policy – x6666 Pakistan Betting Platform Data Protection

This Privacy Policy explains how x6666 — the online betting and gaming platform available at x6666.im — handles the personal data of our registered Players and website visitors. It covers what data we collect, the reasons we collect it, how long we keep it, who we may share it with, and the rights you hold over your own information.

By registering an account on x6666 or continuing to use our platform, you confirm that you have read and understood this Privacy Policy. If anything here is unclear, please contact us at support@x6666.im before proceeding. We are happy to explain things in plain language.

This policy should be read alongside the x6666 Terms and Conditions, which govern the overall relationship between you and x6666. In the event of any conflict, the Terms and Conditions take precedence unless this policy expressly states otherwise.

x6666 is the operator of the online betting and gaming platform at x6666.im, along with its affiliated entities responsible for delivering the platform services to Pakistani players. When this policy refers to "x6666", "we", "us", or "our", it means the x6666 platform and its responsible operator.

For all data-related queries, x6666 acts as the data controller — meaning we determine the purposes and means of processing your personal data. Our designated point of contact for privacy matters is our support team, reachable at support@x6666.im.

x6666 collects personal data in several categories depending on how you use our platform. Here is a clear breakdown of the types of information we hold:

We do not collect sensitive categories of personal data such as health records, biometric data beyond CNIC photographs submitted for KYC, racial or ethnic origin, or religious beliefs. If you voluntarily share such information in support conversations, it is treated with additional care but is not actively solicited.

x6666 collects your personal data through several channels:

• Direct Submission: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a promotion, you provide data directly to x6666.
• Automated Collection: When you browse or use the x6666 platform, our servers automatically log technical data including your IP address, device information, and pages visited. This is standard practice for all web services.
• Payment Providers: When you deposit or withdraw via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card, your payment provider shares limited transaction confirmation data with x6666 necessary to credit or debit your account.
• KYC Verification Partners: In some cases, x6666 may use specialist identity verification services to assist with document verification. These services process your CNIC data strictly for the purpose of identity confirmation.
• Cookies and Tracking Technologies: As described in Section 8, x6666 uses cookies and similar technologies to maintain your session, remember preferences, and analyse platform usage.

x6666 uses your personal data only for purposes that are necessary, proportionate, and clearly connected to delivering and improving the platform. Here is what each category of data is used for:

• Account Management: To create, maintain, and secure your x6666 account. This includes password resets, two-factor authentication, and account status updates.
• Identity and Age Verification: To confirm that you are who you say you are, that you are 18 or older, and that your payment methods belong to you. This protects both you and the platform.
• Processing Transactions: To accept your deposits in PKR and send your withdrawals to your Easypaisa, JazzCash, NayaPay, SadaPay, bank account, or card.
• Providing Platform Services: To serve you with sports betting odds, casino games, poker, fishing games, and virtual sports — and to settle your bets and game results accurately.
• Customer Support: To respond to your queries, resolve complaints, and provide assistance through live chat and email.
• Responsible Gaming: To monitor your account for patterns that may indicate problem gambling and to administer your responsible gaming settings (deposit limits, self-exclusion, etc.).
• Security and Fraud Prevention: To detect unauthorised access, money laundering, bonus abuse, multi-accounting, and other fraudulent or harmful activity.
• Platform Improvement: To analyse aggregated usage data and understand how Pakistani players use x6666, helping us improve the platform experience over time.
• Marketing Communications: If you have opted in to marketing, x6666 may send you emails or SMS messages about promotions, new games, and special offers. You can unsubscribe at any time.

x6666 processes your personal data under the following legal bases:

• Contract Performance: Processing necessary to fulfil our obligations to you under the x6666 Terms and Conditions — including operating your account, settling bets, and processing payments.
• Legal Obligation: Processing required to comply with applicable law — particularly anti-money-laundering obligations, age verification requirements, and financial transaction record-keeping.
• Legitimate Interests: Processing necessary for x6666's legitimate business interests that do not override your rights — including fraud prevention, platform security, and aggregate usage analysis.
• Consent: Processing based on your specific consent — primarily for marketing communications. You may withdraw consent at any time without affecting any other processing.

x6666 does not sell, rent, or trade your personal data. We share data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank networks (IBFT), and card payment gateways receive limited data to process your deposits and withdrawals. These providers are bound by their own data security obligations.
• Identity Verification Services: Third-party KYC providers may process your CNIC documents solely for the purpose of identity verification. They are contractually prohibited from using this data for any other purpose.
• Game Content Providers: Licensed game suppliers (e.g., Pragmatic Play, Evolution Gaming) may receive minimal technical data (such as your player ID and session token) to serve game content. They do not receive your name, CNIC, or financial data.
• IT and Infrastructure Providers: Cloud hosting and platform infrastructure providers who store and process data on x6666's behalf, under strict data processing agreements.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or regulatory requirement, x6666 may disclose personal data to law enforcement or regulatory bodies. We will challenge overly broad requests where legally permitted to do so.

x6666 uses cookies and similar technologies to operate the platform. Here is what each type does:

• Essential Cookies: Required for the platform to function. They maintain your login session, remember your odds format preference, and keep your betslip active between pages. These cannot be disabled without breaking core functionality.
• Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access. They work in the background and do not affect your browsing experience.
• Analytics Cookies: Aggregated, anonymised data on how Pakistani players navigate x6666 — which pages are most visited, where users drop off, how long sessions last. This data helps us improve the platform. It is never linked to your individual identity.
• Preference Cookies: Store your language settings, display preferences, and responsible gaming tool configurations so you don't have to set them every time you log in.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent x6666 from functioning correctly. Disabling analytics cookies will not affect your ability to bet or play.

x6666 retains your personal data for as long as necessary to fulfil the purposes described in this policy. The following retention guidelines apply:

• Active Accounts: Personal data is retained for the full duration your x6666 account remains open, plus a reasonable period thereafter to resolve any outstanding transactions or disputes.
• Closed Accounts: Following account closure, x6666 retains core identity and transaction records for a minimum period as required by applicable financial and anti-money-laundering regulations. This is typically five to seven years.
• KYC Documents: CNIC and identity documents are retained for the period required by our verification obligations and applicable law, after which they are securely deleted.
• Support Communications: Chat transcripts and email correspondence are retained for up to three years to assist with dispute resolution and quality assurance.
• Technical Logs: Server and access logs are typically retained for 90 days for security monitoring purposes.
• Marketing Consent Records: Records of your marketing consent or withdrawal of consent are retained indefinitely so we can demonstrate compliance.

When personal data is no longer required and the retention period has expired, x6666 securely deletes or anonymises it so it can no longer be linked to any individual.

x6666 implements multiple layers of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• SSL/TLS Encryption: All data transmitted between your device and x6666 servers is protected by 256-bit SSL/TLS encryption. Look for the padlock icon in your browser's address bar whenever you use x6666.
• Password Hashing: Your account password is never stored in plain text. x6666 stores only a cryptographic hash of your password using industry-standard algorithms. Not even our support staff can see your actual password.
• Access Controls: Internal access to player data is restricted on a strict need-to-know basis. Staff who do not require access to personal data as part of their role cannot view it.
• Two-Factor Authentication: x6666 supports two-factor authentication (2FA) for player accounts. We strongly recommend enabling this in your account settings.
• Regular Security Audits: Our platform infrastructure undergoes regular security reviews and vulnerability testing to identify and remediate risks before they can be exploited.
• Incident Response: In the unlikely event of a data breach affecting your personal information, x6666 will notify you promptly and take all necessary remediation steps.

As a Player on x6666, you have the following rights over your personal data. You can exercise any of these rights by contacting us at support@x6666.im:

To exercise any of these rights, email support@x6666.im with "Data Rights Request" in the subject line. We aim to respond within 30 days. In complex cases we may require an additional 30 days, in which case we will notify you of the extension.

x6666 is strictly for users aged 18 and above. We do not knowingly collect personal data from any person under the age of 18. Our registration process includes age verification, and we verify identity documents during KYC to confirm this.

If x6666 discovers that personal data has been collected from a person under 18, we will immediately close the account, delete the data, and return any deposited funds to the original payment source.

If you are a parent or guardian and believe a minor has registered on x6666 using false information, please contact support@x6666.im immediately so we can take action.

Some of x6666's infrastructure providers and game content suppliers are located outside Pakistan. In operating the platform, your personal data may be transferred to and processed in countries other than Pakistan.

Where such transfers occur, x6666 ensures that appropriate safeguards are in place to protect your personal data to at least the same standard as would apply if the data remained in Pakistan. This may include:

• Standard contractual clauses approved for cross-border data transfers
• Processing by providers certified to recognised data security frameworks
• Transfers to countries that provide an adequate level of data protection as assessed by applicable standards

If you have specific questions about international data transfers and the safeguards in place, please contact support@x6666.im.

x6666 may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When significant changes are made, we will notify you by email to your registered address and/or by posting a prominent notice on the x6666 platform.

The "Last updated" date at the top of this policy indicates when the most recent revision was made. We recommend reviewing this policy periodically. Your continued use of x6666 after a policy update constitutes acceptance of the revised terms.

If a change materially affects how we use data you have already provided and you object to the new use, please contact us at support@x6666.im. In some cases you may request deletion of your data or account closure if you do not accept the revised policy.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data on x6666, please get in touch through the following channels:

• Email (Data Queries): support@x6666.im — use subject line "Privacy Query" or "Data Rights Request"
• Live Chat: Available on x6666 24/7. Suitable for quick questions — complex data requests are better handled via email.
• FAQ: x6666 FAQ Centre includes common answers about data, accounts, and payments.

We take privacy queries seriously and aim to respond to all data-related emails within 2 business days. For formal data rights requests, our response window is up to 30 days as described in Section 11.