Data Privacy · Security · Your Rights · Cookies
At 666xxx, your personal data belongs to you. This Privacy Policy explains exactly what information we collect when you use the 666xxx platform, how we use it, who we share it with, and — most importantly — the controls you have over your own data. Please read it before registering, and contact us if any part of it is unclear.
Before you read every clause, here are the six principles that guide how 666xxx handles your data
666xxx does not sell, rent or trade your personal information to any third party for marketing purposes. Your name, mobile number and financial data exist solely to operate your account and process your transactions — nothing else.
All personal and financial data stored by 666xxx is encrypted at rest using AES-256 encryption. Data in transit between your device and 666xxx servers is protected by TLS 1.3. Your Easypaisa and JazzCash account details are never stored in plain text.
We only collect what we genuinely need to operate your 666xxx account and comply with our legal obligations. We do not collect data speculatively or build data profiles beyond what is necessary for account operation and fraud prevention.
You have the right to access, correct and request deletion of your personal data at 666xxx at any time. Submit a request to privacy@666xxx.ws and we will respond within 30 days. Data deletion requests are honoured subject to our legal retention obligations.
Promotional messages from 666xxx — SMS, email, app notifications — require your opt-in and can be withdrawn at any time from your account settings. Withdrawing marketing consent does not affect your ability to use the platform or receive essential account communications.
666xxx keeps your data for as long as your account is active plus five years after closure, as required by applicable regulations. After that, personal data is permanently deleted or anonymised. We do not retain data indefinitely or for purposes beyond those stated in this policy.
This Privacy Policy is published by 666xxx, the operator of the online gaming platform accessible at https://666xxx.ws ("666xxx", "we", "us", "our"). 666xxx is a Pakistan-focused online casino and sports betting platform offering casino games, live dealer tables, crash games, poker and sports betting — all transacted in Pakistani Rupees (PKR).
This policy applies to all personal data collected through:
By registering an account or using any part of the 666xxx platform, you acknowledge that you have read this Privacy Policy and consent to the collection and use of your data as described here. If you do not agree, please do not create an account or use the platform.
Data Controller: 666xxx is the data controller for personal information collected through the platform. For any privacy-related queries, contact the 666xxx Data Privacy team directly at privacy@666xxx.ws. We respond to all privacy queries within 30 days.
666xxx collects personal data through four main channels: information you provide directly during registration and KYC, information generated automatically by your use of the platform, information from payment providers when you transact, and information from third-party verification services used during KYC.
| Data Type | When Collected | Purpose |
|---|---|---|
| Full legal name | Registration | Account identity, KYC verification |
| Date of birth | Registration | Age verification (18+ requirement) |
| Mobile number | Registration | Account login, SMS OTP, payment matching |
| Email address | Registration (optional) | Account communications, password recovery |
| CNIC / Passport number | KYC verification | Identity verification, anti-fraud, AML compliance |
| CNIC / Passport photo | KYC verification | Document authenticity confirmation |
| Selfie photograph | KYC verification | Facial match to identity document |
| Payment account details | Deposit / withdrawal | Transaction processing, withdrawal routing |
When you use the 666xxx platform, certain technical data is collected automatically:
We do not collect: precise GPS location, contacts from your device, camera or microphone access outside of KYC selfie capture (which requires your explicit action), or any biometric data beyond the KYC selfie used for document matching.
Every use of your personal data at 666xxx has a specific, documented purpose. We do not use your data in ways you would not reasonably expect. The primary purposes are:
Your name, mobile number and account credentials are used to operate your 666xxx account — processing logins, displaying your balance, recording your bet history and enabling customer support to assist you.
Your mobile wallet or bank details are used solely to process deposits from you and route withdrawals back to you. These details are shared with the relevant payment processor (Easypaisa, JazzCash, etc.) only for the purpose of completing your transaction.
CNIC data, selfie photographs and device fingerprints are used to verify that you are who you say you are, that you meet the 18+ age requirement, and that your account activity is consistent with legitimate play. This protects both you and the integrity of the 666xxx platform.
Transaction data and play patterns are monitored to detect money laundering, match-fixing and problem gambling behaviour, as required by applicable regulations. Where legal obligations require us to report activity to authorities, we do so — this is not discretionary.
Aggregated, anonymised usage data — which pages are visited most, which games are played, which deposit methods are used — is used to improve the 666xxx platform. This data cannot be traced back to individual players.
Your mobile number and email address are used to send you promotional messages from 666xxx — bonus offers, cricket betting tips, new game announcements — only where you have actively opted in. This is always optional and can be withdrawn from your account settings at any time.
666xxx processes your personal data under the following legal bases, depending on the specific processing activity:
666xxx shares your personal data with third parties only in the categories described below. We do not share your data with anyone outside these categories without your explicit consent.
When you deposit or withdraw, your payment account details and transaction amount are shared with the relevant payment processor — Easypaisa, JazzCash, NayaPay, SadaPay, your bank (for IBFT) or your card issuer (Visa/Mastercard). This sharing is strictly limited to what is required to complete the transaction. These processors have their own privacy policies governing their data handling.
During KYC, your CNIC details and photographs may be shared with a third-party identity verification provider to confirm document authenticity. These providers are contractually bound to process your data only for verification purposes and to delete it after the verification is complete.
When you play a game at 666xxx, the game software provider (such as Evolution Gaming, Pragmatic Play or NetEnt) receives the minimum technical data necessary to run the game — typically a session token and stake amounts. Game providers do not receive your name, CNIC details or payment information.
666xxx will share your data with law enforcement or regulatory authorities where legally required to do so — for example, in response to a court order, a money laundering investigation or an age verification audit. We do not proactively share data with authorities outside of mandatory legal requirements.
We never share your data with: advertising networks, data brokers, third-party marketing companies, social media platforms, or any party not described in the categories above. Selling personal data to third parties is strictly prohibited within 666xxx's operations.
Data security at 666xxx is not a marketing claim — it is an operational requirement. Pakistani players trust 666xxx with their CNIC details, mobile wallet information and betting history. That trust comes with real obligations that we take seriously.
The security of your 666xxx account also depends on you. Keep your password private, do not share your account with others, and contact 666xxx support immediately if you suspect unauthorised access. 666xxx cannot be responsible for data exposures caused by your sharing your login credentials with others.
Security incident notification: If 666xxx becomes aware of a data breach affecting your personal data, we will notify you within 72 hours of becoming aware, explaining what happened, what data was affected, and what steps we are taking to address it.
666xxx retains personal data for specific, defined periods determined by the purpose of collection and applicable legal requirements. We do not keep your data longer than necessary.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Account lifetime + 5 years post-closure | Contractual and regulatory compliance |
| KYC documents (CNIC, selfie) | Account lifetime + 5 years post-closure | AML and identity verification legal obligations |
| Transaction records (deposits, withdrawals, bets) | 7 years from transaction date | Financial record-keeping regulations |
| Marketing consent records | Until consent is withdrawn + 2 years | Evidence of consent for compliance purposes |
| Customer support chat logs | 2 years from interaction date | Dispute resolution and quality assurance |
| Session and device logs | 12 months from session date | Fraud prevention and platform security |
| Anonymised analytics data | Indefinitely (no personal identifiers) | Platform improvement — cannot identify individuals |
After the applicable retention period, data is permanently deleted from all 666xxx systems or irreversibly anonymised so that it can no longer be linked to you as an individual. Deletion requests submitted before the end of the mandatory retention period will be actioned to the extent possible — data subject to legal retention requirements will be retained for that period and deleted thereafter.
666xxx uses cookies and similar tracking technologies to operate the platform, maintain your session and understand how players use the site. Here is a plain explanation of each type and whether it is required or optional.
Your cookie preferences are saved to your browser. You can update them at any time by clearing your browser cookies or adjusting settings in your account. Disabling essential cookies will prevent you from logging into 666xxx.
You have meaningful rights over your personal data at 666xxx. These are not token statements — they are actionable rights that 666xxx is committed to honouring within the timeframes stated below.
Request a copy of all personal data 666xxx holds about you. We will provide it in a readable format within 30 days. Submit to privacy@666xxx.ws.
If any personal data we hold is inaccurate or incomplete, you have the right to have it corrected. Contact support and we will update it within 7 days of verification.
Request deletion of your personal data. We will honour this subject to legal retention obligations. Data that must be kept for compliance cannot be deleted until the legal retention period ends.
Ask us to stop processing your data while a dispute or correction request is in progress. Your account will remain accessible but certain automated processes will be paused.
Request your personal data in a structured, machine-readable format (CSV or JSON) so that you can transfer it to another service if you choose. Available for data you provided directly.
Object to processing based on legitimate interests — including profiling for marketing purposes. We will stop that specific processing unless we can demonstrate a compelling legal reason to continue.
To exercise any of these rights, email privacy@666xxx.ws with the subject line "Data Rights Request" and the specific right you wish to exercise. Include your registered mobile number so we can verify your identity before processing the request. We respond within 30 days and will not charge a fee for reasonable requests.
666xxx sends promotional communications — bonus announcements, cricket betting tips, new game launches, weekly cashback reminders — via SMS to your registered mobile number and, if provided, via email. We only send these communications where you have actively opted in during registration or at any point thereafter from your account settings.
You can withdraw your marketing consent at any time in one of the following ways:
Opting out of marketing communications takes effect within 24 hours for SMS and within 72 hours for email (due to scheduled send batches). Withdrawing marketing consent does not affect your ability to use the 666xxx platform, and you will continue to receive essential account communications — deposit confirmations, withdrawal notifications, security alerts, and KYC requests — regardless of your marketing preference.
No third-party marketing: 666xxx does not share your contact details with other companies for their own marketing purposes. Promotional messages you receive from 666xxx will always come from 666xxx — never from a third party marketing on our behalf.
The 666xxx platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. Age is verified during registration through date of birth entry and confirmed during KYC via CNIC or passport, both of which carry date of birth information.
If 666xxx discovers that a player is under 18, the account will be suspended immediately, all deposits will be returned to the originating payment method, all winnings and bonuses will be forfeited, and all personal data associated with that account will be deleted without the standard retention period applying.
If you believe that a person under 18 has registered at 666xxx, contact us immediately at privacy@666xxx.ws with as much detail as you can provide. We will investigate within 24 hours and act accordingly.
666xxx may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law or changes in the platform's functionality. When material changes are made — changes that could meaningfully affect your privacy rights or how your data is used — we will notify you via SMS to your registered mobile number at least 14 days before the changes take effect.
For minor changes — corrections to language, updates to contact details, clarifications that do not change the substance of the policy — we will update the "Last Updated" date at the top of this page without advance individual notification.
The current, binding version of the 666xxx Privacy Policy is always the version published at https://666xxx.ws/privacy-policy. Continued use of the platform after a material policy change takes effect constitutes your acceptance of the revised policy. If you do not accept a material change, you have the right to request account closure and return of your real-money balance without penalty during the 14-day notice period.
Version history: Previous versions of this Privacy Policy are available on request from privacy@666xxx.ws. We retain version history for five years.
If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, please use the following contact details:
When contacting us about a privacy matter, please include your registered mobile number (do not include your full CNIC number in the email body) so we can verify your identity and locate your account records. We will never ask you to provide your password, full payment details or full CNIC number via email or live chat.
Register your 666xxx account knowing your CNIC, mobile number and PKR transactions are secured by AES-256 encryption, never sold to third parties, and fully under your control. Cricket betting, live casino and 500+ games — all in one safe place.