This Privacy Policy explains how 666xp collects, uses, stores, shares and protects your personal information. We are committed to handling your data with care and transparency, in accordance with applicable data protection principles.
These cards summarise our core data handling principles. The full binding policy follows below — please read it in its entirety.
666xp collects personal data only where it is necessary for account operations, legal compliance, fraud prevention and service improvement. We do not collect data speculatively.
All data in transit is protected by TLS/SSL encryption. Access controls, KYC verification and AML monitoring are applied to safeguard your Account and financial information.
You can request access to, correction of, or deletion of your personal data. You may also withdraw consent for certain processing activities where consent is the lawful basis.
We do not sell your personal data to third parties. Sharing is limited to service providers, regulators and law enforcement where legally required — never for unsolicited commercial purposes.
Personal data is retained only as long as necessary for the purposes it was collected, or as required by applicable law. Retention periods vary by data category.
When material changes are made to this Privacy Policy, we will update the effective date and endeavour to notify registered users through in-platform communication where reasonably practicable.
This Privacy Policy ("Policy") is issued by the entity operating the 666xp platform (the "Operator", "we", "us", "our"), accessible at https://666xp.cam. It describes how we collect, process, store, share and protect personal information submitted to or collected by us through the 666xp website, related applications and associated services (collectively, the "Platform").
By registering an Account on 666xp, accessing the Platform or submitting personal information through any channel, you ("User", "you", "your") acknowledge that you have read and understood this Policy and consent to the processing of your personal information as described herein.
This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, each of which forms part of your agreement with 666xp.
If you are a user based in Pakistan, please note that Pakistani data protection law continues to develop. The Operator processes your data in accordance with the principles set out in this Policy and applicable international data protection standards. This Policy does not constitute legal advice.
The following key terms carry the meanings assigned below throughout this Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, email address, financial details, device identifiers and location data. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer or deletion. |
| "Data Controller" | The Operator, who determines the purposes and means of processing Personal Data collected via the Platform. |
| "Data Processor" | A third-party entity that processes Personal Data on behalf of the Operator, under contractual obligation and data processing agreements. |
| "Consent" | A freely given, specific, informed and unambiguous indication of agreement to the processing of Personal Data for a stated purpose. |
| "Account" | A registered user profile on 666xp linked to a verified individual User. |
| "KYC" | Know Your Customer — the identity verification process required to activate full Account functionality and process withdrawals. |
| "Cookies" | Small data files stored on a User's device by the Platform's web technology for session management, analytics and functionality purposes. |
666xp collects Personal Data through several channels: information you provide directly, data generated by your use of the Platform, and in limited circumstances, data received from third parties (such as payment processors and identity verification services). The categories of data collected include, but are not limited to, the following:
Full legal name, date of birth, gender (where provided), nationality and country of residence. This data is collected during account registration and KYC verification. For Pakistani users, this may include CNIC (Computerised National Identity Card) number, passport details or equivalent government-issued identification.
Email address, mobile phone number and, where provided, residential address. Contact data is used for account communications, security alerts, KYC correspondence and, where consented to, promotional messaging.
Deposit amounts, withdrawal requests, transaction history, payment method identifiers (e.g., masked bank account references, e-wallet identifiers) and currency preferences (including PKR). Full payment card numbers are not stored directly by 666xp — such data is handled by PCI-DSS compliant payment processors.
Sports bets placed (including markets, stakes and outcomes), casino game history, session duration, bonus usage, wager values and responsible gambling tool settings. This data is retained for dispute resolution, compliance audit trails and responsible gambling monitoring.
IP address, device type, browser type and version, operating system, screen resolution, referring URLs, session timestamps and approximate geographic location derived from IP. This data is used for fraud detection, security analysis and Platform performance optimisation.
Records of support interactions via Live Chat, Help Center tickets and email correspondence. Communication logs may be retained for quality assurance, compliance and dispute resolution purposes.
The Operator processes Personal Data on the following lawful bases, consistent with applicable data protection principles:
| Basis | Application |
|---|---|
| Contract Performance | Processing necessary to operate your Account, process deposits and withdrawals, settle bets and deliver the Platform's core services. |
| Legal Obligation | KYC/AML compliance, regulatory reporting, fraud investigation and compliance with orders from competent authorities. |
| Legitimate Interests | Fraud prevention, platform security, responsible gambling monitoring, customer support quality and service analytics — where these interests are not overridden by your fundamental rights. |
| Consent | Marketing communications and non-essential cookies, where you have provided explicit opt-in consent. You may withdraw consent at any time. |
| Vital Interests | In exceptional circumstances involving user safety, we may process data to protect a person's life. |
Personal Data collected by 666xp is used for the following purposes:
We do not use your Personal Data for automated decision-making that produces legal or similarly significant effects on you without providing a meaningful avenue for human review upon request.
666xp does not sell your Personal Data to third parties. We may share your information in the following limited and controlled circumstances:
We engage third-party vendors to provide services including payment processing, identity verification, fraud detection, data hosting, customer support tooling and analytics. These vendors act as Data Processors under contractual obligations that restrict their use of your data to the specific services they provide on our behalf.
When you make a deposit or request a withdrawal, your financial information is shared with the relevant payment processor to complete the transaction. Payment processor names that may be familiar to Pakistani users — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are referenced for contextual awareness only. These entities do not endorse gambling, and data shared with them is governed by their own respective privacy policies and terms of service.
We may disclose Personal Data to regulatory bodies, law enforcement agencies or courts where required by applicable law, court order or regulatory directive. We will notify you of such disclosures to the extent permitted by law.
In the event of a merger, acquisition, restructuring or sale of the Operator's business or assets, Personal Data may be transferred to the successor entity. You will be notified in accordance with applicable law prior to any such transfer becoming effective.
Where none of the above categories apply, we will share your Personal Data with third parties only where you have provided explicit, informed consent to such disclosure.
666xp uses cookies and similar tracking technologies to operate the Platform, analyse usage and improve your experience. Below is a summary of the cookie categories we use:
| Category | Purpose | Type |
|---|---|---|
| Session Cookies | Maintain your login state, Account session and security tokens during your active visit. These expire when you close your browser. | |
| Authentication Cookies | "Remember me" functionality and persistent login tokens where you opt in to remain signed in across sessions. | |
| Analytics Cookies | Collect aggregated data on page views, session duration, navigation flows and feature engagement to help improve the Platform. Data is processed in aggregate or anonymised form where possible. | |
| Preference Cookies | Store your Platform preferences such as language settings, display options and responsible gambling tool states. | |
| Fraud Detection Cookies | Assist in identifying suspicious activity, duplicate accounts and bot behaviour. These are classified as essential for platform integrity. |
Essential cookies are required for the Platform to function and cannot be disabled. Non-essential cookies (analytics and functional) may be controlled through your browser settings. Note that disabling certain cookies may affect Platform functionality.
666xp retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention guidelines apply:
Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised so that it can no longer be associated with an identifiable individual.
The Operator implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:
Your responsibilities matter too. No security system is infallible. You are responsible for maintaining the confidentiality of your Account credentials and for notifying 666xp support immediately if you suspect unauthorised access to your Account. Use a strong, unique password and enable 2FA where available.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, the Operator will notify affected users and relevant authorities in accordance with applicable legal obligations, within the timeframes required by law.
666xp operates internationally and may transfer your Personal Data to servers and service providers located outside of Pakistan. Where Personal Data is transferred to jurisdictions that do not provide an equivalent level of data protection to that applicable in your country of residence, the Operator will implement appropriate safeguards, which may include:
By using the Platform, you acknowledge that your Personal Data may be processed in jurisdictions outside Pakistan, subject to the safeguards described above.
Subject to applicable law and certain exceptions (such as overriding legal obligations or AML compliance requirements), you have the following rights in relation to your Personal Data held by 666xp:
Request a copy of the Personal Data we hold about you and information about how it is processed.
Request correction of inaccurate or incomplete Personal Data associated with your Account.
Request deletion of your Personal Data where there is no longer a legitimate basis for retention, subject to legal retention requirements.
Request that we restrict (but not delete) processing of your data in certain circumstances, such as while a rectification request is pending.
Receive a copy of Personal Data you provided to us in a structured, machine-readable format, where technically feasible.
Object to processing based on legitimate interests, including direct marketing. You may withdraw consent for consent-based processing at any time.
To exercise any of these rights, please contact the 666xp support team via Live Chat or by writing to the support email address stated in Section 15. We will respond to verified requests within a reasonable timeframe consistent with applicable law. We may request identity verification before fulfilling a data rights request.
666xp is strictly an adults-only platform. We do not knowingly collect or process Personal Data from individuals under the age of 18, or the higher minimum age required by the applicable operator or licence jurisdiction.
Age verification is applied as part of the KYC process. If the Operator becomes aware that Personal Data has been collected from a minor, such data will be deleted promptly and any associated Account will be closed. If you believe that a minor has registered an Account on 666xp, please contact us immediately through the support channels set out in Section 15.
18+ only, or the higher minimum required by the operator/licence jurisdiction. Parents and guardians are responsible for monitoring minors' internet activity and ensuring that age-restricted platforms are not accessible to persons below the legal age threshold.
The 666xp Platform does not contain links to external third-party websites within its primary navigational structure. However, in the event that any third-party service, game provider content or embedded functionality is accessible from the Platform, please note the following:
The Operator reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law or Platform functionality. When material changes are made:
We encourage you to review this Policy periodically to stay informed about how we handle your Personal Data. Archived versions of previous policy iterations are available upon request.
For privacy-related enquiries, data rights requests, concerns about data handling or to report a suspected breach, please contact the 666xp Data Protection team through the following channels:
The fastest channel for general support and initial privacy queries. Available directly through the Platform's Help Center. For formal data rights requests, a written channel (email or ticket) is recommended to create a clear record.
For written data rights requests, complaints or privacy-related correspondence, please write to: [email protected] — This is a plain-text address and is not a clickable link. Please include your full name, Account username and a clear description of your request. We will respond within a reasonable timeframe consistent with applicable law.
The Platform's Help Center contains guidance on common privacy questions, including how to update your data, manage marketing preferences and submit a self-exclusion request. It is accessible within the Platform after login.
We take all privacy-related correspondence seriously. If you are not satisfied with our response to a privacy concern, you may have the right to raise a complaint with the relevant data protection supervisory authority in the jurisdiction where you reside or where the alleged infringement occurred.
If you have any questions about how we handle your data or want to understand the platform better, visit our FAQ or head back to the homepage for a full overview of what 666xp offers.
18+ only, or the higher minimum required by the operator/licence jurisdiction. Gambling may not be legal in your location. Check local laws before registering.