Privacy Policy

Last Updated: 1 January 2026

1. Introduction

This Privacy Policy ("Policy") explains how xc666 ("we", "us", "our", "the Platform") collects, uses, stores, and discloses personal data when you access or use our website at xc666.im and all associated services, including cricket betting, live casino games, online slots, bingo, and promotional features.

We understand that sharing personal information requires trust, and we take that responsibility seriously. This Policy is designed to give every player in Pakistan — whether you are logging in from Karachi, Lahore, Islamabad, Rawalpindi, or Peshawar — a clear and honest picture of our data practices. Please read it carefully before creating an account or submitting any personal information to xc666.

By registering with xc666 or continuing to use our platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue use of the platform immediately.

2. Data Controller

xc666 is the data controller responsible for the personal data you provide when using our platform. For all privacy-related enquiries, data access requests, or complaints, you may contact our dedicated privacy team at:

Email: [email protected]

We aim to acknowledge all data-related requests within 5 business days and resolve them within 30 calendar days. Complex requests may take up to 60 days, in which case we will notify you of the extended timeline.

3. Data We Collect

xc666 collects personal data through various touchpoints across the platform. The categories of data we may hold about you include:

Category	Examples	Purpose
Identity Data	Full name, date of birth, CNIC / passport number	Account registration & KYC verification
Contact Data	Email address, phone number, city of residence	Account communication & support
Financial Data	Payment method details, transaction history, PKR amounts	Payment processing & fraud prevention
Technical Data	IP address, device type, browser, operating system	Security, fraud detection & platform optimisation
Usage Data	Pages visited, games played, bet history, session duration	Service improvement & responsible gaming monitoring
Marketing Data	Communication preferences, bonus uptake, campaign responses	Personalised promotions (with consent only)

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data unless explicitly required by applicable law or regulatory obligation.

4. How We Collect It

Personal data is gathered through the following channels:

• Direct interactions: When you register an account, complete identity verification, make deposits or withdrawals, contact our support team, or respond to surveys and promotions.
• Automated technologies: As you navigate the xc666 platform, we automatically collect technical and usage data via cookies, server logs, and similar tracking technologies.
• Third-party providers: We may receive data from payment processors (such as JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank), identity verification services, and fraud prevention partners who assist us in operating the platform securely.
• Publicly available sources: In limited circumstances related to anti-money laundering (AML) checks, we may consult publicly available databases or sanctions lists as required by applicable regulations.

5. Purpose & Legal Basis for Processing

xc666 processes your personal data only when there is a lawful basis for doing so. The table below outlines our primary processing activities and the legal grounds on which each rests:

• Contract performance: Processing your registration, managing your account, and facilitating deposits and withdrawals are necessary to fulfil our contractual obligations to you as a player.
• Legal obligation: Identity verification (KYC), anti-money laundering checks, and age verification are required by our operating licence and applicable international gaming regulations.
• Legitimate interests: Fraud detection, platform security, improving our services, and responsible gaming monitoring are pursued on the basis of our legitimate business interests, balanced against your rights.
• Consent: Sending you marketing communications, personalised promotions, and non-essential cookies is done only with your explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

xc666 does not sell, rent, or trade your personal information. We share your data only in the following limited circumstances, and only to the minimum extent necessary:

• Payment processors: Your financial data is shared with payment service providers — including JazzCash, EasyPaisa, Meezan Bank, HBL, UBL, Visa, and Mastercard — solely to facilitate transactions. These providers operate under their own privacy policies and are bound by strict confidentiality obligations.
• Identity verification services: To comply with KYC and AML requirements, we may share identity documents with regulated third-party verification providers.
• Fraud prevention and security: We may disclose technical and identity data to fraud prevention agencies and cybersecurity partners to protect the integrity of the platform.
• Regulatory authorities: Where required by our operating licence conditions or applicable law, we may be obligated to disclose certain data to regulatory bodies, law enforcement agencies, or courts.
• Corporate transactions: In the event of a merger, acquisition, or sale of business assets, player data may be transferred to a successor entity, subject to equivalent privacy protections.

Any third party receiving data from xc666 is contractually required to maintain appropriate security standards and use the data only for the specified, agreed purpose.

7. Data Retention

xc666 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are as follows:

• Active account data: Retained for the full duration of your registered relationship with xc666.
• Closed account data: Identity and transaction records are retained for a minimum of 5 years following account closure, in line with standard AML and financial record-keeping obligations under international gaming regulations.
• Marketing data: Retained until you withdraw consent or for a maximum of 2 years from the date of last interaction, whichever comes first.
• Technical logs: Server and security logs are typically retained for 12 months before being securely deleted or anonymised.

Once a retention period expires, data is securely and irreversibly deleted or anonymised so that it can no longer be associated with you as an individual.

8. Security Measures

xc666 implements a multi-layered security framework to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored in our databases, including financial records and identity documents.
• Role-based access controls ensuring that only authorised personnel can access personal data, on a strict need-to-know basis.
• Regular third-party security audits and penetration testing of our platform infrastructure.
• Two-factor authentication (2FA) options available to all registered players to secure account access.
• Continuous monitoring systems for suspicious activity, unusual login attempts, and potential data breaches.

In the event of a data breach that poses a risk to your rights and freedoms, xc666 will notify affected players without undue delay and take immediate corrective action as required by applicable regulations.

9. Cookies Policy

xc666 uses cookies and similar tracking technologies to operate core platform functions, enhance usability, and gather analytical insights. The types of cookies we use are:

• Strictly necessary cookies: Essential for basic platform functions such as maintaining your login session and managing your account preferences. These cannot be disabled without impairing core functionality.
• Analytical cookies: Used to understand how players navigate our platform, which pages are most visited, and where usability improvements can be made. Data collected is aggregated and anonymised.
• Functional cookies: Remember your preferences such as language settings, game preferences, and responsible gaming tool configurations.
• Marketing cookies: Used — only with your consent — to deliver relevant promotions and measure the effectiveness of our campaigns. You may opt out at any time through your browser settings.

You can manage or delete cookies through your web browser settings at any time. Note that disabling certain cookies may affect the functionality of the xc666 platform. For detailed guidance, consult your browser's help documentation.

10. Your Rights

As a data subject, you hold the following rights in relation to your personal data held by xc666. To exercise any of these rights, contact us at [email protected]:

• Right of access: Request a copy of all personal data we hold about you, free of charge, within 30 days.
• Right to rectification: Ask us to correct any inaccurate or incomplete personal data without undue delay.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to our legal retention obligations.
• Right to restriction: Ask us to pause processing of your data in specific circumstances, such as while an accuracy dispute is being resolved.
• Right to data portability: Receive your data in a structured, machine-readable format so that you can transfer it to another service provider where technically feasible.
• Right to object: Object to processing based on legitimate interests, including direct marketing. We will honour objections to marketing immediately upon receipt.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

11. Minors & Age Verification

xc666 is strictly an adults-only platform. Access is limited to individuals who are 21 years of age or older. We do not knowingly collect or process personal data from anyone under this age threshold.

Age verification is conducted as part of our standard Know Your Customer (KYC) process upon registration and may be repeated at any time during the account lifecycle. Acceptable documents include a valid Pakistani CNIC, passport, or other government-issued photo identification. Any account found to belong to an individual under 21 will be immediately suspended and all associated funds will be handled in accordance with our Terms & Conditions and applicable regulatory requirements.

If you believe a minor has accessed or registered on the xc666 platform, please notify us immediately at [email protected]. We will investigate and act promptly.

12. International Data Transfers

Given the international nature of online gaming operations, your personal data may be processed or stored on servers located outside of Pakistan. Where such transfers occur, xc666 takes appropriate measures to ensure your data remains protected to a standard equivalent to the protections described in this Policy.

These measures may include contractual clauses with data processors, adherence to recognised international data transfer frameworks, and selecting service providers that maintain certified data security standards. We do not transfer personal data to jurisdictions that lack adequate data protection safeguards without implementing appropriate compensating controls.

13. Changes to This Policy

xc666 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal obligations, or platform features. When material changes are made, we will notify registered players via their registered email address and post a prominent notice on the platform at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this Policy periodically. Continued use of the xc666 platform after any amendment constitutes your acknowledgement of the updated Policy.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how xc666 has handled your personal information, please get in touch with our privacy team. We are committed to addressing all privacy matters promptly and transparently.

Email: [email protected]

Our team is available in English and can assist players across Pakistan including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, Peshawar, and Quetta. We aim to respond to all privacy enquiries within 48 hours.