Last Updated: January 2026

Privacy Policy – How 666xp Handles Your Personal Data

Your privacy matters to us. This page explains exactly what data we collect when you use 666xp, how we use it, who we share it with and what rights you have over your own information. If anything here is unclear, reach out to our support team before you proceed.

Privacy at a Glance

These cards give you the highlights. The full policy below is the complete and binding version – it's worth reading through in full.

Your Data Is Stored Securely

All personal data on 666xp is stored using encrypted storage with restricted internal access. Payment details go through certified payment processors and are never stored in plain text on our servers.

Data Collected Only When Needed

We only collect data that's necessary to run your account, process your PKR transactions and keep the platform secure. We don't collect data we have no use for, and we don't sell your personal information to third parties.

Limited Third-Party Sharing

Data is shared only with payment processors like JazzCash and Easypaisa, identity verification providers and fraud prevention services – strictly to the extent needed to deliver platform services.

No Data Selling

666xp does not sell, rent or trade your personal data to advertisers, data brokers or any other commercial third parties. Your information is used to operate your account, nothing else.

You Control Your Data

You have the right to access, correct and request deletion of your personal data at any time. Submit a request to our support team and we will respond within the timeframes set out in this policy.

Cookies Used for Platform Function

We use cookies and similar tracking technologies to keep your session active, remember your preferences and understand how players use the platform. You can manage cookie settings from your browser.

01 Overview

This Privacy Policy applies to the 666xp platform accessible at 666xp.onl and covers all services offered through the platform including sports betting, casino games, live casino, fish games, the VIP programme and all related account management features. It explains how we collect personal data, why we collect it, how long we keep it and what we do to protect it.

By creating a 666xp account or using any of the platform's services, you confirm that you have read and understood this Privacy Policy. This policy should be read alongside the Terms and Conditions, which govern your overall use of the platform.

This policy is written in plain language on purpose. We want every player on 666xp – including players who may not have dealt with formal privacy documents before – to understand exactly how their information is handled. If anything here is unclear, contact our support team for a straightforward explanation.

02 Data Controller

For the purposes of this Privacy Policy, 666xp is the data controller responsible for the personal data you provide when using the platform. As the data controller, 666xp determines the purposes and means of processing your personal data and is accountable for handling it in accordance with this policy.

If you have questions about how your data is managed, want to exercise any of your data rights, or need to escalate a privacy concern, you can reach the 666xp data team via the contact details in Section 14 of this policy.

03 Data We Collect

666xp collects personal data in two ways: data you provide directly, and data collected automatically when you use the platform.

Data You Provide Directly

When you register and use 666xp, you provide us with:

  • Identity information: Full legal name, date of birth, gender.
  • Contact details: Mobile number and email address.
  • Account credentials: Username and encrypted password.
  • Payment information: JazzCash number, Easypaisa number, Raast ID, bank account details or card details as applicable to the payment method you use.
  • Identity documents: Government-issued ID or other verification documents submitted during identity verification.
  • Support communications: Any information you share when contacting 666xp support via live chat or email.

Data Collected Automatically

When you use the platform, the following data is collected automatically:

  • Device data: Device type, operating system, browser type and version.
  • Usage data: Pages visited, games played, bet history, session duration and navigation patterns.
  • Technical data: IP address, connection timestamps, referring URL.
  • Cookie data: Session identifiers and preference cookies as described in Section 9.
  • Transaction data: Deposit amounts, withdrawal requests, bonus claims and VIP point accumulation history.
Data Category Examples When Collected
Identity Name, date of birth, government ID Registration & KYC verification
Contact Mobile number, email address Registration
Payment JazzCash / Easypaisa number, bank account First deposit & withdrawal setup
Transaction Deposit amounts, bet history, withdrawals Every financial interaction
Technical IP address, device type, browser Every platform visit
Usage Games played, session duration, clicks During active sessions

04 How We Use Your Data

666xp uses your personal data for the following purposes:

  • Account management: Creating and maintaining your account, processing logins and managing your preferences.
  • Payment processing: Processing PKR deposits via JazzCash, Easypaisa, Raast and bank transfer; processing withdrawal requests to your registered payment accounts.
  • Identity verification: Verifying your identity to comply with know-your-customer requirements and prevent underage access.
  • Fraud prevention: Detecting and preventing fraudulent activity, bonus abuse, money laundering and other prohibited conduct described in the Terms and Conditions.
  • Customer support: Responding to your enquiries, resolving disputes and following up on complaints.
  • Platform improvement: Understanding how players use the platform to improve the user experience, game library and promotional offerings.
  • VIP programme administration: Tracking wagering activity to award VIP points, calculate tier status and apply tier benefits including cashback and withdrawal priority.
  • Responsible gaming: Monitoring for patterns that may indicate problem gambling and facilitating the use of responsible gaming tools including deposit limits and self-exclusion.
  • Communications: Sending transactional messages such as deposit confirmations, withdrawal notifications, bonus credits and account security alerts. Promotional communications are sent only where you have opted in.

06 Data Sharing

666xp does not sell, rent or trade your personal data. We share data only in the following circumstances and only to the extent strictly necessary:

  • Payment processors: JazzCash, Easypaisa, Raast network participants and banking partners receive the payment details required to process your PKR deposits and withdrawals.
  • Identity verification providers: Third-party services used to verify government-issued ID documents receive the identity data necessary for the verification check.
  • Fraud prevention services: Technical data including device fingerprints, IP addresses and transaction patterns may be shared with fraud detection partners to protect the platform and all its users.
  • Game providers: Your account identifier and relevant session data are shared with third-party game studios to enable game functionality. Game providers do not receive your payment or identity details.
  • Legal requirements: We may disclose personal data to law enforcement or regulatory authorities if required to do so by applicable law, court order or to protect the legal rights of 666xp or its users.

Third-party processors: All third parties who receive data from 666xp are bound by data processing agreements that restrict their use of the data to the specific purpose for which it was shared. They are not permitted to use 666xp user data for their own marketing or commercial purposes.

07 Payment Data

Because 666xp handles PKR transactions through multiple local payment channels, payment data is treated with additional care beyond the general data handling described above. Here is specifically how payment data is managed:

  • JazzCash and Easypaisa mobile wallet numbers are stored in encrypted form and used exclusively for processing transactions on your behalf.
  • Full card numbers are never stored on 666xp servers. Card transactions are processed through a certified payment gateway that handles card data under applicable payment security standards.
  • Bank account details submitted for Raast or bank transfer withdrawals are stored in encrypted form and used only to route your withdrawal to the correct destination.
  • Payment data is accessible only by the payments team and authorised fraud review staff with a specific operational need.
  • All payment data is transmitted over encrypted connections. Plain-text transmission of payment details is not used at any point in 666xp's payment processing pipeline.

Withdrawals from 666xp go only to payment accounts registered in your own name. We verify this match as part of the withdrawal process. This protects you from unauthorised access to your funds.

08 Data Retention

We keep your personal data for as long as your account is active and for a reasonable period thereafter. The specific retention periods for different data categories are as follows:

  • Account data: Retained for the duration of your account and for a period of five years after account closure to comply with legal and regulatory record-keeping requirements.
  • Transaction data: Deposit, withdrawal and wagering records are retained for a minimum of five years from the date of the transaction.
  • Identity documents: Retained for five years from the date of verification or account closure, whichever is later.
  • Support communications: Live chat and email logs are retained for two years from the date of the conversation.
  • Technical and usage data: Anonymised or aggregated after 12 months. Raw logs with identifiable information are retained for up to 12 months.

After the applicable retention period, data is securely deleted or anonymised. If you request deletion of your data before the end of the standard retention period, we will delete everything we are not legally required to keep and inform you of anything we must retain and the reason.

09 Cookies & Tracking Technologies

666xp uses cookies and similar technologies including local storage to make the platform function properly and to understand how players interact with it. Cookies are small data files stored on your device by your browser.

Types of Cookies We Use

  • Essential cookies: Required for the platform to function. These keep your session active, maintain your login state and store your language and currency preferences. The platform cannot work without these.
  • Analytics cookies: Used to understand how players navigate the platform, which games are most popular and where players typically drop off in multi-step processes. Data collected by analytics cookies is aggregated and not linked to individual identities.
  • Security cookies: Used to detect suspicious activity patterns, enforce rate limits and identify devices associated with fraudulent behaviour.
  • Preference cookies: Store your optional settings such as game display preferences and notification choices.

You can manage or disable cookies through your browser settings. Disabling essential cookies will affect the functionality of the platform and may prevent you from logging in or placing bets. Analytics and preference cookies can be disabled without affecting core platform function.

10 Your Rights Over Your Data

You have a set of rights over your personal data held by 666xp. These rights can be exercised by contacting our support team at any time.

1
Right of Access

Request a copy of the personal data we hold about you. We will provide this within 30 days of receiving a valid request.

2
Right to Rectification

Request correction of inaccurate or incomplete personal data. Most account data can be updated directly through your account settings.

3
Right to Erasure

Request deletion of your personal data. We will delete what we are not legally required to retain and tell you what we must keep and why.

4
Right to Restrict Processing

Request that we limit how we use your data in certain circumstances, for example while a correction request is being assessed.

5
Right to Object

Object to processing carried out on the basis of legitimate interests. We will assess whether our interests are overridden by your rights in each case.

6
Right to Withdraw Consent

Where processing is based on your consent, you can withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, contact 666xp support via live chat or email at . We aim to respond within 5 working days and will complete most requests within 30 calendar days. Complex requests may take longer, in which case we'll keep you informed of the timeline.

11 Data Security

666xp implements technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. Key security measures include:

  • Encrypted data storage for all personal and payment data at rest.
  • SSL/TLS encrypted connections for all data transmitted between your device and the platform.
  • Role-based internal access controls that restrict which team members can access personal data and for what purposes.
  • Regular internal security reviews of systems that process personal data.
  • Two-factor authentication options for player accounts to protect against unauthorised login.
  • Monitoring for unusual account activity patterns that may indicate a security compromise.

While we take security seriously and implement measures consistent with industry standards, no system can guarantee absolute security. If you believe your 666xp account has been compromised, contact support immediately and change your password. We will investigate all reported security incidents promptly.

In the unlikely event of a data breach that affects your personal data, we will notify you as quickly as practically possible with details of what happened, what data was affected and what steps we have taken in response.

12 Minors

666xp is strictly for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory step in the registration process and is periodically reinforced through document-based identity checks.

If we discover that personal data has been collected from a user who is under 18, we will immediately close the associated account, delete the personal data in question and withhold any associated balances pending review in accordance with our Terms and Conditions.

If you are a parent or guardian and believe that a person under 18 in your household has created a 666xp account, please contact support immediately so we can take action.

13 Changes to This Privacy Policy

666xp may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable laws or improvements to our data practices. The date of the most recent update is displayed at the top of this page.

When we make material changes to this policy, we will notify registered users via the email address linked to their account and display a notice on the platform. Continued use of 666xp after the effective date of an updated policy constitutes acceptance of the new version.

We recommend reviewing this policy periodically. If you disagree with changes to this policy, you have the right to close your account before the changes take effect. Contact support to initiate the account closure process and to arrange the return of your real-money balance.

14 Contact Us About Privacy

If you have a question about this Privacy Policy, want to exercise any of your data rights or need to raise a privacy concern, you can reach the 666xp team through the following channels:

  • Live Chat: Available 24/7 from within the platform. This is the fastest way to get a response for straightforward queries.
  • Email: – for detailed privacy requests, data access requests and formal complaints. We aim to acknowledge within 24 hours and respond fully within 5 working days.
  • VIP Account Manager: Platinum and Diamond tier members may raise privacy concerns directly with their dedicated account manager via the platform's internal messaging system.

If you submit a data access or erasure request, we may need to verify your identity before acting on the request. This is to protect your data and ensure we are not disclosing or deleting information in response to a fraudulent request made by a third party.

Related Legal Pages

These documents work together to define your relationship with 666xp and your rights on the platform.

Happy with How We Handle Your Data?

Join 666xp and enjoy cricket betting, casino games, fish games and more – all in PKR, with your data handled responsibly every step of the way.