Introduction
x666d ("Platform", "we", "us", "our") is an online betting and live casino service accessible at x666d.cam. This Privacy Policy ("Policy") describes how we collect, process, store, share and protect the personal data of users ("you", "your", "User") who register for or access the Platform.
By creating an Account, accessing the Platform or submitting any personal information through x666d, you acknowledge that you have read and understood this Policy and consent to the data processing practices described herein. This Policy forms part of the broader agreement between you and x666d, together with our Terms & Conditions and Responsible Gambling Policy.
x666d takes the privacy of Pakistani users seriously. Whether you are accessing the Platform from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar, your personal information is handled with the same level of care and subject to the same data protection standards outlined in this Policy.
Note for Pakistani Users: Pakistani data protection law is evolving. This Policy has been drafted with reference to internationally recognised data protection principles. x666d does not claim to be regulated by the Government of Pakistan, PTA, State Bank of Pakistan or any Pakistani authority. This Policy does not constitute legal advice. If you have concerns about local privacy law, you are advised to consult a qualified legal professional in Pakistan.
Definitions
The following definitions apply throughout this Privacy Policy:
- "Personal Data" — any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including name, email address, CNIC number, IP address or device identifier.
- "Processing" — any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, erasure or destruction.
- "Data Controller" — x666d, which determines the purposes and means of processing Personal Data collected through the Platform.
- "Data Processor" — a third party that processes Personal Data on behalf of x666d under documented instructions.
- "Consent" — a freely given, specific, informed and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
- "Cookies" — small text files placed on your device by the Platform to enable session functionality, analytics and performance monitoring.
- "KYC" — Know Your Customer verification procedures used to confirm identity, age and source of funds in accordance with applicable anti-money laundering requirements.
- "Account" — a registered user account on the x666d Platform.
Data We Collect
x666d collects Personal Data from you in the following categories, depending on how you interact with the Platform:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC / passport number, nationality | Account registration and KYC verification |
| Contact Data | Email address, mobile number, residential address | Account registration; support interactions |
| Financial Data | Deposit/withdrawal history, transaction amounts in PKR, payment method type (e.g., bank transfer, mobile wallet) | Deposits, withdrawals, KYC/AML review |
| Usage Data | Betting history, game sessions, pages visited, features accessed, session duration | Ongoing Platform use |
| Technical Data | IP address, device type, operating system, browser type, geolocation indicators | Each Platform session |
| Communications Data | Support messages, complaints, feedback, email correspondence | Support and complaint interactions |
| Verification Documents | Scanned CNIC, passport, utility bill, bank statement | KYC and AML compliance review |
Payment Method References: x666d references familiar Pakistani payment services — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — as familiar local payment context. When you use a payment method to deposit or withdraw funds, the processing of payment data is subject to the privacy policy of the relevant payment service provider. x666d does not store full payment card numbers or complete mobile wallet credentials. These references are informational only and do not imply endorsement, affiliation or confirmed support by any payment provider.
Legal Basis for Processing
x666d processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual Necessity: Processing is required to fulfil the agreement between you and x666d — including Account management, transaction processing and customer support.
- Legal Obligation: Processing is necessary to comply with applicable regulatory requirements, including KYC identity verification, anti-money laundering (AML) obligations and responsible gambling mandates.
- Legitimate Interests: Processing serves x666d's legitimate business interests — including fraud prevention, platform security monitoring, service improvement and analytics — provided such interests are not overridden by your rights and freedoms.
- Consent: Where processing is not covered by the above bases, x666d will seek your explicit consent. You may withdraw consent at any time; withdrawal does not affect the lawfulness of prior processing.
How We Use Your Data
x666d uses Personal Data collected from you for the following purposes:
- Account Management: To create, maintain, verify and administer your Account, including processing registrations, password resets and account closure requests.
- Identity & Age Verification: To perform KYC verification and confirm that you meet the Minimum Age requirement (18 years or higher as applicable) and are not a Prohibited User.
- Transaction Processing: To process deposits and withdrawals in PKR, verify payment sources and maintain accurate transaction records.
- Platform Delivery: To provide sports betting markets (including PSL cricket, ICC tournaments, international football and UFC), live casino games, live dealer services and associated Platform features.
- Responsible Gambling: To monitor betting patterns, implement responsible gambling controls (including deposit limits, session limits, cooling-off periods and self-exclusion), and comply with applicable responsible gambling obligations.
- Fraud Prevention & Security: To detect and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting and other prohibited conduct as defined in our Terms & Conditions.
- Customer Support: To respond to enquiries, process complaints and provide technical assistance via email and live chat.
- Legal Compliance: To fulfil applicable legal, regulatory and audit obligations, and to cooperate with lawful requests from competent authorities.
- Platform Improvement: To analyse usage patterns, conduct technical testing, troubleshoot errors and improve Platform performance, features and user experience.
- Communications: To send transactional notifications (account activity, verification updates, withdrawal confirmations) and, where consent has been provided, promotional communications. You may opt out of marketing communications at any time.
Data Sharing & Disclosure
6.1 No Sale of Data. x666d does not sell, rent or trade your Personal Data to third parties for their own marketing purposes. Full stop.
6.2 Service Providers. We may share Personal Data with trusted third-party service providers who assist in operating the Platform, including: identity verification and KYC providers; payment processing partners; IT infrastructure and hosting providers; fraud detection and security services; customer support software providers; and analytics platforms. All service providers are required to process Personal Data only for the purposes for which it was shared, under documented contractual obligations.
6.3 Legal Authorities. x666d may disclose Personal Data to government authorities, regulators, law enforcement or courts where required to do so by applicable law, court order or lawful regulatory request. We will notify you of such disclosure where permitted by law.
6.4 Business Transfers. In the event of a merger, acquisition, restructuring or sale of all or part of x666d's business, Personal Data may be transferred to the successor entity, subject to equivalent privacy protections.
6.5 AML & Compliance Obligations. x666d may share transaction and identity data with anti-money laundering compliance partners and reporting bodies as required by applicable financial crime prevention obligations.
Cookies & Tracking Technologies
x666d uses cookies and similar tracking technologies to enable Platform functionality, maintain session security, analyse usage patterns and improve performance. The following categories of cookies are used:
- Essential Cookies: Required for the Platform to function. These include session authentication cookies, security tokens and load-balancing identifiers. They cannot be disabled without breaking Platform functionality.
- Functional Cookies: Remember your preferences and settings (such as language and display preferences) across sessions to improve your experience.
- Analytics Cookies: Collect aggregated, anonymised data about how users navigate the Platform — pages visited, session duration and feature usage — to help us understand and improve the user experience.
- Security Cookies: Support fraud detection, bot identification and account security monitoring.
Managing Cookies: You may manage or disable non-essential cookies through your browser settings. Please note that disabling essential cookies will impair your ability to log in to and use the Platform. Cookie settings can typically be managed through your browser's privacy or settings menu. Refer to your browser's documentation for specific instructions.
x666d does not use cookies to serve third-party advertising or behavioural targeting on external websites. Analytics data collected through cookies is used solely for internal Platform improvement purposes.
Data Retention
x666d retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:
- Account Data: Retained for the duration of your Account and for a further period as required by applicable legal, tax or regulatory obligations following Account closure.
- Transaction Records: Financial transaction records are retained in accordance with applicable anti-money laundering and financial record-keeping requirements, which typically require retention for a minimum of five (5) years following the transaction date.
- KYC Documents: Identity and verification documents are retained for the period required by applicable AML regulations, typically a minimum of five (5) years from the date of submission or Account closure, whichever is later.
- Support Communications: Customer service records are retained for a reasonable period sufficient to resolve disputes and maintain service continuity, typically up to three (3) years.
- Analytics Data: Aggregated, anonymised analytics data may be retained indefinitely as it cannot be attributed to any identifiable individual.
Once retention obligations are satisfied, Personal Data is securely deleted or anonymised in accordance with x666d's data disposal procedures.
Data Security
x666d employs appropriate technical and organisational measures to protect Personal Data against unauthorised access, disclosure, alteration, loss or destruction. Security measures in place include:
- Transport Layer Security (TLS/SSL): All data transmitted between your device and x666d servers is encrypted using industry-standard 256-bit SSL/TLS encryption.
- Access Controls: Access to Personal Data is restricted to authorised personnel who require it for their specific job function. Access rights are reviewed regularly and revoked when no longer required.
- Password Security: Passwords are stored in hashed, salted form using current industry-standard cryptographic algorithms. Plain-text passwords are never stored.
- Infrastructure Security: Platform infrastructure is hosted in secured data centres with physical access controls, firewalls, intrusion detection systems and regular security assessments.
- Incident Response: x666d maintains documented procedures for detecting, assessing and responding to data security incidents. In the event of a breach affecting your rights, you will be notified in accordance with applicable obligations.
No security system is completely impenetrable. x666d takes reasonable steps to protect your data but cannot guarantee absolute security. You are responsible for keeping your login credentials confidential and for notifying us immediately at [email protected] if you suspect any unauthorised access to your Account.
Your Rights
Subject to applicable law and any overriding legal or compliance obligations, you have the following rights in relation to your Personal Data held by x666d:
You have the right to request a copy of the Personal Data we hold about you and to receive information about how it is being processed.
You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you. Please ensure your Account information remains current at all times.
You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. This right is subject to any overriding legal retention obligations (e.g., AML record-keeping requirements).
You may request that we limit the processing of your Personal Data in certain circumstances — for example, while the accuracy of data is being verified or while a complaint is being investigated.
Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your Personal Data in a structured, machine-readable format.
You may object to processing based on legitimate interests or carried out for direct marketing purposes. Marketing opt-out requests will be actioned promptly.
Where processing is based on your consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
To exercise any of the above rights, please contact us at [email protected]. We will respond to verified requests within a reasonable timeframe, and in any event within thirty (30) days. We may need to verify your identity before processing rights requests.
Minors
The x666d Platform is strictly intended for adults aged 18 years or older, or the higher minimum age required by the operator or the applicable license jurisdiction. x666d does not knowingly collect Personal Data from persons under the Minimum Age.
If x666d becomes aware that Personal Data has been collected from a minor — through KYC review, age verification failure or any other means — the Account will be immediately closed, all associated Wagers voided and the Personal Data deleted or anonymised in accordance with applicable legal obligations.
If you believe a minor has registered on the Platform using false information, please notify us immediately at [email protected]. We take underage access to gambling services extremely seriously.
International Data Transfers
x666d operates an international platform and may transfer Personal Data to service providers, infrastructure partners or other entities located outside Pakistan, including in jurisdictions where the operator is incorporated or licensed to operate. Such transfers are conducted under appropriate safeguards — including contractual data processing agreements based on internationally recognised standard clauses — to ensure your Personal Data receives an adequate level of protection regardless of where it is processed.
By using the x666d Platform, you acknowledge that your Personal Data may be processed in jurisdictions outside Pakistan. x666d ensures that any such transfers are carried out in compliance with applicable data protection standards and that receiving parties are contractually bound to maintain appropriate security and confidentiality measures.
Changes to This Policy
x666d reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered users via the Platform or by email notification where practical. The "Last Updated" date at the top of this page will always reflect the most recent revision.
Continued use of the Platform following notification of a revised Policy constitutes acceptance of the updated terms. Users who do not agree with material changes should discontinue use of the Platform and may request Account closure as described in our Terms & Conditions.
We recommend reviewing this Policy periodically — particularly ahead of depositing funds, submitting KYC documents or engaging with any new Platform feature.
Contact Us
For any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the x666d privacy team using the details below:
Data Enquiries Email: [email protected]
Subject Line: "Privacy Request — [Your Account Username]"
Languages Supported: English (primary); Urdu available on request
Response Time: Typically within 30 days of verified request receipt
When submitting a privacy request, please include your registered email address and the specific right you wish to exercise or the concern you wish to raise. We may need to verify your identity before processing the request.