xc666 Privacy Policy

xc666 ("we", "us", "our", "the Platform") is the data controller responsible for the personal data of players who register and use the xc666 online casino and sports betting platform, accessible at xc666.vu. xc666 operates under an international gaming license and processes personal data in accordance with the requirements of that license and applicable data protection principles.

As data controller, xc666 determines the purposes for which personal data is collected and the manner in which it is processed. Where xc666 engages third-party service providers to assist in data processing activities — such as payment processors, identity verification services, and game software providers — those parties act as data processors under written agreements that impose data protection obligations consistent with this Privacy Policy.

For all data protection enquiries, you may contact xc666 at the support address provided in Section 16 of this Policy. We aim to respond to all data-related queries within five working days.

xc666 collects several categories of personal data in connection with your account and your use of the Platform. The specific data collected depends on the nature of your interaction with xc666:

• Full legal name as it appears on your government-issued identification;
• Date of birth (used for mandatory age verification — players must be 21 or older);
• Residential address, including city, province, and postal code;
• Pakistani mobile phone number (used for account security and, where opted in, promotions);
• Email address (used for account communications and, where opted in, marketing).

• Copies of government-issued photo identification (e.g., CNIC, passport);
• Proof of residential address documents (e.g., utility bill, bank statement);
• Proof of payment method ownership where required for withdrawal verification.

• JazzCash or EasyPaisa mobile account details (account number only — not PIN or password);
• Bank account details where bank transfer is used;
• Visa/Mastercard details processed securely through our payment provider;
• Full transaction history including deposits, withdrawals, and bonus credits;
• Account balance and wagering history.

• IP address at the time of login and account actions;
• Device type, operating system, and browser type;
• Session duration, pages visited, and features used on the Platform;
• Game history, bet placement data, and in-play betting activity;
• Login timestamps and account access logs.

• Deposit limits, loss limits, and wager limits applied to your account;
• Cool-off and self-exclusion records;
• Session time alerts and responsible gaming tool usage history.

xc666 collects personal data through the following means:

xc666 uses your personal data for the following specific purposes:

• Account Management: To create, maintain, and administer your xc666 player account and to authenticate your identity on each login;
• Age Verification: To confirm that you are 21 years of age or older as required by our licensing obligations — underage access to gambling platforms is strictly prohibited;
• Transaction Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card payments, and to maintain accurate financial records of all account activity;
• KYC & AML Compliance: To fulfil our know-your-customer and anti-money-laundering obligations under our international gaming license, including ongoing monitoring of transaction patterns for suspicious activity;
• Responsible Gaming: To operate responsible gaming tools including deposit limits, self-exclusion, and session monitoring, and to identify players who may be exhibiting signs of problem gambling in line with license obligations;
• Customer Support: To respond to your queries, investigate complaints, and resolve disputes relating to your account or betting activity;
• Platform Security: To detect and prevent fraud, cheating, bonus abuse, and unauthorised account access;
• Legal Compliance: To comply with requests from our licensing authority, law enforcement agencies, or courts where we are legally required to disclose information;
• Service Improvement: To analyse aggregated usage data for the purpose of improving the xc666 platform, its features, and its performance for Pakistani players;
• Marketing: To send you promotional communications about xc666 offers, bonuses, and new features — but only where you have provided explicit consent to receive such communications.

xc666 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil our obligations to you under the xc666 Terms & Conditions — including account management, transaction processing, and customer support;
• Legal Obligation: Processing required to comply with our obligations under our international gaming license — including age verification, KYC, AML monitoring, and responsible gaming requirements;
• Legitimate Interests: Processing carried out for the legitimate interests of xc666 where those interests are not overridden by your rights — including fraud prevention, platform security, and service improvement using aggregated analytics;
• Consent: Processing based on your explicit, freely given consent — used specifically for marketing communications. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

xc666 does not sell your personal data. We share personal data only in the following limited and controlled circumstances:

Transaction data is shared with our licensed payment processing partners — including the operators of the JazzCash and EasyPaisa integrations, and our card payment processor — strictly for the purpose of executing deposit and withdrawal transactions. These partners are bound by their own regulatory compliance frameworks and by contractual data protection obligations with xc666.

Where required for KYC compliance, we share identity data (name, date of birth, document details) with licensed third-party identity verification service providers. These providers process your data solely for the purpose of confirming your identity and are contractually prohibited from using it for any other purpose.

xc666 uses third-party software providers to deliver certain casino games, including live dealer content and slot games. Minimal technical data may be shared with these providers (such as session identifiers) to facilitate game delivery. These providers do not receive your full personal profile.

xc666 will disclose personal data to our licensing authority, law enforcement agencies, courts, or other regulatory bodies where required to do so by law or by a valid legal process. In such cases, we will disclose only the minimum information necessary to satisfy the legal requirement.

In the event of a merger, acquisition, or sale of all or a portion of xc666's business assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such change in controller via your registered email address.

As an internationally licensed platform, xc666 operates server infrastructure and engages service providers across multiple jurisdictions. As a result, your personal data may be processed in countries outside Pakistan. Where such transfers occur, xc666 ensures that appropriate safeguards are in place to protect your data to a standard consistent with the principles set out in this Privacy Policy.

Safeguards for international transfers may include contractual clauses requiring the recipient to maintain data protection standards equivalent to those applied by xc666, or transfers to jurisdictions that maintain adequate data protection frameworks under the assessment of our licensing authority.

xc666 retains personal data for the period necessary to fulfil the purposes described in this Privacy Policy, or as required by our legal and regulatory obligations. The following retention principles apply:

Following the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised data may be retained for statistical and analytical purposes without limitation.

xc666 uses cookies and similar tracking technologies on the Platform to provide a functional, secure, and personalised user experience. Cookies are small text files stored on your device when you visit a website.

• Essential Cookies: Required for the Platform to function. These include session management cookies that keep you logged in and security cookies that detect fraudulent login attempts. These cannot be disabled without impairing your ability to use xc666;
• Functional Cookies: Used to remember your preferences, such as language settings, preferred bet stake, and display options. These improve your experience but are not essential to core platform functionality;
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the xc666 platform — which pages are visited most frequently, where players exit, and how features are used. This data is used for platform improvement only;
• Security Cookies: Used to identify and flag suspicious access patterns, including unusual login locations or device fingerprints that may indicate account compromise attempts.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the xc666 Platform. Essential security and session cookies cannot be disabled without preventing Platform access. Your browser's help section contains instructions for managing cookie settings on specific browsers.

xc666 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and xc666 servers;
• Encryption of sensitive personal data at rest within our database infrastructure;
• Access controls ensuring that personal data is accessible only to xc666 staff whose role requires it, under a strict need-to-know principle;
• Regular security assessments and penetration testing of the xc666 platform and infrastructure;
• Multi-factor authentication requirements for administrative access to data systems;
• Continuous monitoring of platform access logs for anomalous activity;
• Regular staff training on data protection obligations and security procedures.

Despite these measures, no data transmission over the internet or electronic storage system is completely secure. xc666 cannot guarantee absolute security but is committed to employing industry-standard practices to minimise risk and to responding to incidents promptly where they occur.

As a player whose personal data is processed by xc666, you have the following rights in relation to your data. These rights are subject to certain limitations where data processing is required to fulfil legal obligations — for example, we cannot delete transaction records that we are required to retain under our licensing obligations.

To exercise any of these rights, please contact xc666 support using the details in Section 16. We will respond to all data rights requests within 30 days. Requests may be subject to identity verification before we can action them.

xc666 may send you marketing communications about bonuses, promotions, new games, and platform features via email and SMS — but only where you have explicitly opted in to receive such communications during registration or through your account settings.

You may withdraw your marketing consent at any time by:

• Updating your communication preferences in your xc666 account settings;
• Clicking the unsubscribe link included in any xc666 marketing email;
• Contacting xc666 support and requesting removal from marketing lists.

Withdrawal of marketing consent does not affect your ability to use the xc666 platform or access your account. You will continue to receive essential account communications (such as transaction confirmations, security alerts, and policy updates) regardless of your marketing preference, as these are not marketing in nature.

The xc666 platform is strictly for adults aged 21 years and above. xc666 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the xc666 registration process and we apply additional checks where account activity suggests potential underage access.

If xc666 discovers that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be closed. Any funds deposited by or on behalf of a minor will be returned to the deposit source following the closure of the account.

If you believe that a minor has registered an account with xc666, please report this to our support team immediately using the contact details in Section 16. We take all such reports seriously and will investigate and act promptly.

The xc666 platform may contain references or links to third-party services — such as payment processors or software providers — whose own privacy practices are governed by their own privacy policies. xc666 is not responsible for the privacy practices of third-party websites or services and this Privacy Policy applies only to data collected and processed by xc666 directly.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your xc666 account, including your payment method provider.

xc666 may update this Privacy Policy from time to time to reflect changes in our data practices, our platform operations, or applicable regulatory requirements. Where changes are material, we will notify registered players via email to their registered address and by displaying a prominent notice on the Platform before the changes take effect.

The effective date at the top of this document indicates when the current version came into effect. We encourage you to review this Privacy Policy periodically. Your continued use of the xc666 platform following the effective date of a revised Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way xc666 handles your personal data, please contact our support team. All data-related enquiries are handled with priority and in confidence.

Support email (plain text — not a clickable link): [email protected]

Support is available 24 hours a day, 7 days a week, in both Urdu and English. For data rights requests specifically, please include your full name, registered email address, and a clear description of the request so that we can process it efficiently. We may require identity verification before actioning data rights requests.