At 666x, we take the privacy of every Pakistani player seriously. This Privacy Policy explains precisely what personal information we collect, why we collect it, how it is processed, who we share it with, and what rights you hold as the individual it relates to. We encourage you to read this document in full.
666x collects only the personal data it requires for specified, explicit, and legitimate purposes. We do not use data collected for account registration for marketing purposes without your separate consent, and we do not collect data "just in case" it becomes useful.
We collect the minimum amount of personal data necessary to deliver the 666x service. For Pakistani players this means your mobile number, identity documents for KYC, and payment method details — not excessive information that serves no operational purpose.
Your personal data is protected by 256-bit SSL encryption in transit and AES-256 encryption at rest. Access to personal data within 666x is restricted on a strict need-to-know basis. Security protocols are reviewed and updated on a regular audit cycle.
This policy is written in plain, accessible English — not deliberately obscure legal language. We want every 666x player, whether in Karachi, Lahore, or Faisalabad, to clearly understand what happens to their personal information without needing a legal background to interpret it.
You have enforceable rights over your personal data — including the right to access, correct, port, restrict, and in certain circumstances delete the information we hold about you. These rights can be exercised without undue delay by contacting 666x support.
666x retains personal data only for as long as it is necessary for its stated purpose, or as required by applicable anti-money-laundering and regulatory obligations. When data is no longer required it is securely deleted or anonymised in accordance with our documented retention schedule.
Every registered 666x player has enforceable rights over their personal data. These rights can be exercised at any time by contacting 666x support — and we are required to respond without undue delay.
You may request a copy of all personal data 666x holds about you. We will provide this in a commonly used, machine-readable format within 30 days of a verified request.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will act on verified correction requests without unnecessary delay.
In certain circumstances you may request that we delete your personal data. Note that regulatory obligations — including AML record-keeping requirements — may limit our ability to erase all data immediately.
You may request that personal data you have provided to 666x be transferred to you or to another controller in a structured, machine-readable format, where technically feasible.
You may request that 666x restrict the processing of your personal data in specific circumstances — for example, while the accuracy of data you have contested is being verified.
You have the right to object to processing of your personal data for direct marketing purposes at any time. We will cease marketing communications promptly following a verified opt-out request.
For the purposes of this Privacy Policy, 666x (operating at 666x.biz and referred to herein as "666x", "we", "us", or "our") acts as the data controller in respect of personal data collected from Users ("you", "your") of the platform. As data controller, 666x determines the purposes and means of processing your personal data.
666x operates under an international gaming licence and is subject to the data protection and privacy obligations imposed by the regulatory authority under which that licence is held, as well as to internationally recognised data protection principles including those reflected in the General Data Protection Regulation (GDPR) where applicable to our Users.
When you register a 666x Account, complete KYC verification, make a deposit, request a withdrawal, or contact our support team, you provide us with personal data including:
| Data Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, nationality | Registration & KYC |
| Contact Data | Pakistani mobile number, email address | Registration |
| Financial Data | JazzCash / EasyPaisa account reference, bank account details (for transfers), transaction history | Deposit / Withdrawal |
| KYC Documents | CNIC photograph, utility bill or bank statement for address verification | KYC Verification |
| Support Communications | Chat transcripts, email correspondence content | Support interactions |
| Responsible Gaming Data | Self-set deposit limits, session limits, self-exclusion status | Account settings |
When you access and use the 666x platform, we automatically collect certain technical and usage data, including:
666x processes your personal data under one or more of the following legal bases, depending on the specific processing activity:
Your personal data is used to create and manage your 666x Account, process deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, execute withdrawal requests to your verified payment method, and deliver the full suite of 666x gaming and betting services. Without this processing, we cannot provide the 666x service at all.
666x is required under the terms of its international gaming licence to verify the identity of all registered players before processing withdrawals. This involves processing identity documents — typically a CNIC — to confirm your legal name, date of birth, and address. This data is processed strictly for compliance purposes and is never used for marketing or shared with third parties except as described in Section 5.
We process data including your IP address, device fingerprint, login patterns, and transaction history to detect and prevent fraudulent activity, money laundering, account takeover attempts, and other security threats. This processing is a legitimate interest of 666x and protects all Users on the platform.
666x processes your gaming activity data — including session duration, wagering volume, and deposit frequency — to monitor for patterns associated with problem gambling, enforce your self-set responsible gaming limits, and comply with our obligations under our gaming licence to protect players. This data is used solely for player protection and regulatory compliance purposes.
When you contact 666x support via live chat or email, the content of your communication and associated account data is processed to resolve your query, maintain a record of interactions for quality assurance, and improve our support service. Support communications in both English and Urdu are retained for a period of 3 years.
With your separately given consent, we may send you promotional communications about 666x bonuses, new game releases, PSL cricket betting offers, and platform updates via SMS to your registered Pakistani mobile number or email. You may withdraw marketing consent at any time by contacting support or adjusting your Account notification preferences.
666x does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited circumstances:
Under no circumstances does 666x share your personal data with third parties for the purpose of those third parties marketing their own products or services to you without your prior explicit consent.
666x operates internationally and certain aspects of our data processing infrastructure — including our gaming licence regulatory reporting obligations and some technology providers — involve data being processed outside of Pakistan. Where personal data is transferred internationally, 666x ensures that appropriate safeguards are in place to protect the security and integrity of that data, including:
666x retains personal data for defined periods based on the purpose for which it was collected and applicable regulatory requirements:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | AML regulatory requirement |
| Transaction Records (PKR) | 7 years from transaction date | Financial compliance obligation |
| KYC Documents (CNIC, etc.) | 5 years post-account closure | AML / licensing requirement |
| Support Communications | 3 years from last interaction | Legitimate interest / dispute resolution |
| Marketing Consent Records | 3 years from consent or withdrawal | Compliance with consent obligations |
| Technical / Security Logs | 12 months rolling | Security monitoring legitimate interest |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any identifiable individual.
The 666x platform uses cookies and similar tracking technologies to deliver and improve the gaming experience. The categories of cookies we use are as follows:
You may manage cookie preferences through your browser settings. Disabling essential cookies will prevent the 666x platform from functioning correctly — you will not be able to maintain a login session or access your PKR account. Functional and analytics cookies may be disabled without affecting core platform access. Note that 666x does not support third-party advertising cookies and does not serve behavioural advertising based on your platform activity.
666x will only send you direct marketing communications — including SMS notifications to your registered Pakistani mobile number or email messages about bonuses, free spins, PSL cricket betting offers, and new game launches — where you have given your explicit consent to receive such communications at the point of registration or subsequently through your Account settings.
You may withdraw your marketing consent at any time by:
Withdrawal of marketing consent does not affect the lawfulness of marketing communications sent prior to withdrawal, nor does it affect our ability to send you transactional communications — such as deposit confirmations, withdrawal processing notifications, or security alerts — which are necessary for the operation of your Account.
666x implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:
The 666x platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under 21 years of age. Age verification is a mandatory component of the 666x registration and KYC process.
If 666x becomes aware that personal data has been collected from an individual under the age of 21, that account is immediately suspended, all associated personal data is deleted or returned as appropriate, and any deposited funds are refunded. We reserve the right to report instances of attempted underage registration to relevant authorities.
If you are a parent or guardian and believe that a person under the age of 21 has registered a 666x Account, please contact us immediately at [email protected]. We will investigate and act promptly.
You may exercise any of the data rights described in this policy by submitting a request to 666x through one of the following channels:
We will acknowledge your request within 5 business days and complete our response within 30 calendar days. In complex cases we may extend this period by a further 60 days where necessary, and will notify you of any extension within the initial 30-day period.
We will require verification of your identity before processing any data rights request. This is to protect your personal data from being accessed or altered by third parties purporting to be you.
666x may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform services. Material changes — particularly those that affect how your personal data is processed or that expand our use of your data beyond what is described in this version — will be communicated to all registered Users via:
The most current version of this policy is always available at 666x.biz/privacy-policy and is identified by its version number and effective date at the top of the document. Continued use of 666x following the effective date of any update constitutes your acceptance of the revised policy.
For any privacy-related enquiries, data rights requests, or concerns about how 666x handles your personal data, please contact us:
If you are unsatisfied with our response to a privacy complaint, you have the right to escalate the matter to the data protection supervisory authority in the jurisdiction relevant to your complaint, or to the regulatory authority overseeing 666x's gaming licence, as appropriate to the nature of your concern.
Live casino, 500+ certified slots, PSL cricket betting, Teen Patti, and Super Bingo — all in PKR, all on a platform that takes your privacy and security as seriously as your entertainment. 21+ only. Play responsibly.