x666w Privacy Policy — How We Protect & Use Your Personal Data

1Data Controller

For the purposes of this Privacy Policy, the data controller responsible for the collection and processing of your personal information is x666w, the operator of the online casino and sportsbook platform accessible at x666w.bio ("x666w", "we", "us", "our"). x666w operates under an international gaming licence and processes personal data in compliance with the data protection obligations imposed by its licensing jurisdiction and in accordance with internationally recognised data privacy standards.

If you have any questions, concerns, or requests relating to the processing of your personal data by x666w, please contact our dedicated data privacy team using the contact details provided in Section 15 of this Policy.

2Personal Data We Collect

x666w collects the following categories of personal data from players on the platform. The scope of data collected depends on the stage of your relationship with x666w — from initial registration through to active gameplay and withdrawal processing.

x666w does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers, except where CNIC document submission implicitly includes such information as part of the KYC verification process required under our licensing obligations. In such cases, CNIC data is used exclusively for age and identity verification and is not processed for any other purpose.

3How We Collect Your Data

x666w collects personal data through the following channels and mechanisms:

• Direct submission by you: Information you provide when creating your x666w account, completing the KYC verification process, submitting payment details for deposits or withdrawals (including JazzCash and EasyPaisa mobile wallet numbers), contacting x666w support via live chat or email, or responding to promotional surveys.
• Automated technical collection: Data collected automatically when you access the x666w platform, including IP address, device identifiers, browser configuration, session start and end times, pages accessed, and interaction events. This data is collected via server logs, session tracking systems, and similar technologies.
• Cookies and tracking technologies: x666w uses cookies and similar technologies on the x666w.bio platform as further described in Section 9 of this Policy.
• Third-party sources: x666w may receive supplementary identity verification information from regulated KYC and AML screening providers used to fulfil our licensing compliance obligations. x666w may also receive technical fraud-detection data from our payment processing partners, including JazzCash, EasyPaisa, HBL, and UBL.
• Gameplay records: Game providers integrated into the x666w platform — including Pragmatic Play, NetEnt, and Play'n GO — transmit game round outcomes, RNG results, bet values, and win/loss outcomes to x666w systems for settlement, auditing, and responsible gaming monitoring purposes.

4Purposes of Processing Your Data

x666w processes your personal data for the following specific, legitimate purposes:

• Account registration and management: Creating and maintaining your x666w player account, processing login credentials, managing PKR wallet balances, recording transaction history, and facilitating communication regarding account status.
• Identity verification and KYC compliance: Verifying that you are who you claim to be, that you meet the 21+ age requirement, and that your account is not being used for fraudulent purposes. KYC verification is mandatory under x666w's international gaming licence prior to the processing of any withdrawal.
• Payment processing: Processing PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and bank transfer; processing withdrawal requests; maintaining financial records; reconciling transaction histories.
• Anti-Money Laundering (AML) and fraud prevention: Screening transactions against AML risk thresholds, detecting unusual or suspicious activity patterns, conducting source of funds assessments where triggered by compliance rules, and reporting to relevant regulatory authorities as required.
• Provision of gaming services: Delivering casino games, live dealer tables, slot titles, sportsbook markets, promotional bonuses, free spins, and VIP loyalty programme benefits to your x666w account.
• Responsible gaming monitoring: Tracking gaming activity patterns to identify indicators of problem gambling, enforcing player-set deposit, loss, and session limits, processing self-exclusion requests, and maintaining exclusion records to prevent re-registration during active exclusion periods.
• Customer support: Responding to live chat queries, processing formal complaints, managing account recovery requests, and maintaining support interaction records for quality assurance.
• Platform improvement and analytics: Analysing aggregated, anonymised platform usage data to improve x666w's interface, game offering, payment flows, and overall player experience. Analytics data used for this purpose does not identify individual players.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have consented to receive marketing communications, as further described in Section 12.
• Legal and regulatory compliance: Complying with obligations under x666w's international gaming licence, responding to lawful requests from regulatory authorities and law enforcement, and maintaining records required for audit purposes.

5Legal Basis for Processing

x666w processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between x666w and you under the x666w Terms & Conditions — including account registration, payment processing, game provision, and bonus administration.
• Legal obligation: Processing required to comply with x666w's obligations under its international gaming licence — including KYC identity verification, AML transaction monitoring, age verification, responsible gaming enforcement, and regulatory reporting.
• Legitimate interests: Processing conducted for x666w's legitimate business interests, including fraud prevention, platform security, multi-account detection, and analytics — where those interests are not overridden by your fundamental privacy rights.
• Consent: Processing of personal data for marketing communications, optional cookies, and certain personalisation features — conducted only where you have provided explicit, freely given, informed consent. Consent may be withdrawn at any time as described in Section 10.

6Data Sharing & Disclosure

x666w does not sell your personal data to third parties for commercial advertising or marketing purposes. x666w shares personal data with third parties only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum personal and financial data necessary to process PKR deposit and withdrawal transactions. These processors are contractually bound to handle your data in accordance with their own privacy policies and applicable financial services regulations.
• Game providers: Pragmatic Play, NetEnt, BTG, Play'n GO, Push Gaming, Evolution Gaming, and other licensed providers integrated into x666w receive technical session data (player ID, bet value, game round ID) required to deliver game services and settle outcomes. Game providers do not receive your CNIC, full name, or Pakistani mobile number.
• KYC and AML service providers: Regulated third-party identity verification and AML screening services receive identity document data submitted during KYC verification. These providers are licensed and regulated in their own right and operate under strict confidentiality obligations.
• Regulatory authorities and law enforcement: x666w will disclose personal data to licensing regulatory bodies and law enforcement agencies where required by a lawful order, court direction, or our licensing obligations. x666w will notify affected players of such disclosures where legally permissible.
• Corporate transactions: In the event of a merger, acquisition, restructuring, or sale of x666w's business operations, player data may be transferred to the successor entity, subject to that entity maintaining equivalent data protection standards. Players will be notified of any such transfer.

7Data Retention

x666w retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting obligations. The following retention periods apply:

• Active account data (identity, contact, financial, gaming): Retained for the duration of your active account and for a minimum of five (5) years following account closure, in accordance with x666w's international gaming licence requirements for audit and regulatory review.
• KYC identity documents (CNIC copies, verification records): Retained for a minimum of five (5) years from the date of document submission or the date of account closure, whichever is later.
• Financial transaction records (deposits, withdrawals, PKR transaction logs): Retained for a minimum of five (5) years from the date of the transaction, consistent with anti-money laundering record-keeping requirements.
• Self-exclusion records: Retained for the duration of the exclusion period and for a minimum of five (5) years thereafter to prevent re-registration in contravention of the exclusion.
• Support communications (live chat transcripts, email correspondence): Retained for two (2) years from the date of the interaction, unless the communication relates to a formal complaint or legal matter, in which case retention may be extended to five (5) years.
• Marketing consent records: Retained for the duration of active consent and for one (1) year following withdrawal of consent.
• Technical and usage data (IP logs, session data): Retained for a maximum of twelve (12) months from the date of collection unless required for an active fraud investigation or legal proceedings.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data set. Where anonymisation is technically infeasible within a reasonable timeframe, data may be archived in an encrypted, access-restricted state pending scheduled deletion.

8Security Measures

x666w implements a multi-layered information security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the x666w platform — including login credentials, account information, and PKR financial transactions — is protected by 256-bit SSL/TLS encryption, the same standard used by Pakistan's major commercial banks including HBL, UBL, and Meezan Bank.
• Encrypted password storage: x666w stores passwords in hashed form using industry-standard bcrypt encryption. Passwords are never stored or transmitted in plain text. Even x666w's internal technical personnel cannot view your account password.
• Two-factor authentication (2FA): x666w offers OTP-based two-factor authentication linked to your registered Pakistani mobile number, providing an additional layer of account access security beyond your login password.
• Access controls: Access to systems containing player personal data is restricted to authorised x666w personnel who require that access to perform their specific role. Access rights are reviewed periodically and revoked immediately upon role change or employment termination.
• Intrusion detection and monitoring: x666w's infrastructure is monitored continuously for anomalous access patterns, attempted breaches, and suspicious activity. Automated alerting systems notify the security team of potential incidents in real time.
• Data breach response: In the event of a confirmed personal data breach that poses a risk to player rights and freedoms, x666w will notify affected players and, where required under applicable regulations, relevant supervisory authorities, within 72 hours of becoming aware of the breach.

9Cookies & Tracking Technologies

x666w uses cookies and similar tracking technologies on the x666w.bio platform. A cookie is a small text file placed on your device by the x666w platform when you access the site. Cookies allow x666w to recognise your browser across sessions and provide core platform functionality. The following cookie categories are used by x666w:

• Strictly necessary cookies: Required for the x666w platform to function correctly — including session authentication, maintaining your logged-in state across page navigations, and storing your PKR balance display preference. These cookies cannot be disabled without rendering core platform features inoperable.
• Performance and analytics cookies: Used to collect aggregated, anonymised information about how players use the x666w platform — including which sections are visited most frequently, where players encounter navigation difficulties, and how quickly pages load on Pakistani mobile connections. This data is used exclusively to improve platform performance and user experience.
• Functionality cookies: Store your platform preferences — such as your default sportsbook sport view, your preferred language setting, and your last-selected payment method — to provide a more personalised experience on your next visit.
• Marketing and tracking cookies: Used only where you have provided explicit consent to receive personalised promotional communications. These cookies allow x666w to measure the effectiveness of promotional campaigns and personalise bonus offers to your gaming preferences.

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to refuse, delete, or control cookies. Please note that disabling strictly necessary cookies may prevent you from accessing core x666w features including account login. For detailed guidance on cookie management in Pakistani mobile browsers (Chrome, Firefox, Samsung Internet), please consult your browser's help documentation.

10Your Privacy Rights

x666w respects your rights as a data subject under internationally recognised privacy frameworks. The following rights are available to x666w players in connection with their personal data:

• Right of access: You have the right to request a copy of the personal data x666w holds about you. x666w will provide a structured data export in response to a verified subject access request within 30 days of receipt.
• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data held by x666w. Where data accuracy affects your account balance, transaction history, or KYC status, please contact x666w support via live chat for expedited correction.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and no other legal basis applies; or (c) your data has been unlawfully processed. This right is subject to x666w's obligations to retain data under our gaming licence and AML regulations — erasure requests cannot override mandatory minimum retention periods.
• Right to restriction of processing: You may request that x666w restricts the processing of your data in specific circumstances — for example, while a data accuracy dispute is under investigation.
• Right to data portability: Where processing is based on consent or contractual necessity, you have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to withdraw consent: Where x666w processes your data on the basis of consent (e.g., marketing communications, optional analytics cookies), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal. To withdraw marketing consent, contact x666w support or update your account communication preferences.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on x666w's legitimate interests, subject to x666w demonstrating compelling legitimate grounds for continued processing.

To exercise any of the above rights, submit a written request to x666w via live chat or email ([email protected]). x666w will verify your identity before processing any privacy rights request and will respond within 30 calendar days. Complex or high-volume requests may require up to 60 days with prior notice to you.

11Minors — Strict 21+ Policy

x666w strictly prohibits the registration, access, and use of the platform by any person under the age of 21 years. x666w does not knowingly collect, process, or store personal data belonging to individuals under 21. All x666w registrations require CNIC-based KYC verification confirming the account holder is aged 21 or over before any withdrawal is processed.

If x666w identifies or is notified that an account has been created by or on behalf of a person under 21 years of age, the following actions will be taken immediately: (a) the account will be permanently closed; (b) any funds held in the account will be forfeited and, where appropriate, returned to the verified payment source; (c) all personal data collected in connection with the underage account will be securely deleted except where retention is required for regulatory reporting purposes; (d) the matter may be reported to relevant authorities in accordance with our licensing obligations.

12Marketing Communications

x666w sends promotional communications — including bonus offers, free spin notifications, tournament announcements, deposit match promotions, and platform update emails — only to players who have provided explicit consent to receive such communications during or after the account registration process.

Promotional communications may be delivered via: SMS to your registered Pakistani mobile number (+92); email to your registered email address; and in-platform notifications within your x666w account dashboard.

You may opt out of marketing communications at any time by: (a) updating your communication preferences in the x666w account settings section; (b) requesting opt-out via x666w live chat support; or (c) writing to [email protected] with a clear opt-out request.

Opt-out requests are processed within 5 business days. Please note that opting out of marketing communications does not affect transactional communications relating to your x666w account — including deposit confirmations, withdrawal notifications, KYC verification updates, responsible gaming alerts, and security notifications. These communications are necessary for account management and cannot be disabled.

13Third-Party Links & Services

The x666w platform integrates third-party services — including game providers, payment processors, and analytics tools — necessary for the delivery of x666w's casino, sportsbook, and payment infrastructure. While x666w selects third-party partners carefully and requires compliance with appropriate data protection standards contractually, x666w does not control the privacy practices of third-party services and accepts no responsibility for their data handling.

Each third-party service provider integrated into x666w operates under its own privacy policy. Where a data processing agreement exists between x666w and a third-party provider (as required for providers who process personal data on x666w's behalf), that agreement governs the provider's obligations regarding your data.

x666w does not link to external third-party websites for marketing or referral purposes. Any link to an external website that you encounter on the x666w platform will be clearly indicated and will be subject to that website's own privacy policy, for which x666w accepts no responsibility.

14Changes to This Privacy Policy

x666w reserves the right to update, amend, or replace this Privacy Policy at any time. The revised Policy will be published on this page with an updated Effective Date. Where changes are material — for example, a change to the categories of data collected, the purposes of processing, or the third parties with whom data is shared — x666w will notify registered players via SMS to their registered Pakistani mobile number or via in-platform notification prior to the change taking effect.

Your continued use of the x666w platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should discontinue use of x666w and request account closure, following which your data will be handled in accordance with the retention obligations described in Section 7.

15Contact Us — Privacy Queries

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by x666w, please contact us through the following channels:

• Live Chat: Available 24/7 via the x666w platform. This is the fastest method for privacy-related queries, including access requests and data correction requests.
• Email: [email protected] — for formal data subject access requests, erasure requests, portability requests, or complaints regarding x666w's data processing practices. Please include "Privacy Request" in your subject line and your registered Pakistani mobile number for identity verification. Response time: within 30 calendar days.

x666w is committed to resolving all privacy-related concerns internally in the first instance. If you are not satisfied with x666w's response to your privacy complaint, you may escalate the matter to the data protection supervisory authority in x666w's licensing jurisdiction or to any other competent supervisory authority with jurisdiction over your complaint.