Your Privacy Matters at 666 x

Privacy Policy – 666 x Online Casino Pakistan

We handle your personal data with care and transparency. This policy explains exactly what we collect, why we collect it, and how it is protected — in plain language for Pakistani players.

Last updated: 1 January 2025 English (en-PK)
666 x

Our Privacy Commitments to You

Six principles that govern how 666 x handles personal data for every Pakistani player on the platform.

We Never Sell Your Data

666 x does not sell, rent or trade your personal information to any third party for marketing purposes. Your data is used only for the purposes described in this policy — nothing else.

SSL Encryption on Everything

All data transmitted between your browser and 666 x is protected by 256-bit SSL encryption. Your login credentials, payment details and personal information travel securely — never in plain text.

Minimum Data Collection

We only collect personal data that is genuinely necessary to operate your 666 x account, process payments and comply with our legal obligations. We don't collect data just because we can.

You Control Your Data

You have the right to access, correct and request deletion of your personal data held by 666 x. Submit a request to support@666x.world and we will respond within 30 days.

Third-Party Access Is Restricted

We share personal data with third parties only where required — for payment processing, identity verification and fraud prevention. All third-party processors are contractually bound to handle your data securely.

You Are Notified of Changes

If we make material changes to this Privacy Policy, 666 x will notify you by email before the changes take effect. You will never wake up to a surprise policy change without prior notice.

Contents

1. Introduction

This Privacy Policy explains how 666 x ("the Platform", "we", "us", "our"), accessible at 666x.world, collects, uses, stores and protects personal data provided by registered players and website visitors in Pakistan. It applies to all use of the 666 x platform across web browsers and mobile browsers.

By registering an account or continuing to use 666 x, you acknowledge that you have read and understood this Privacy Policy. This policy should be read alongside our Terms and Conditions, which together form the complete agreement between you and 666 x regarding your use of the platform.

We have written this policy in plain, accessible English so that every Pakistani player knows exactly how their data is handled — not buried in legal jargon designed to obscure rather than explain. If anything here is unclear, please contact us at support@666x.world before providing personal information.

Last updated: 1 January 2025. When material changes are made to this policy, registered 666 x players are notified by email at least 7 days before the changes take effect.

2. Data We Collect

666 x collects only the personal data that is necessary to provide our services to Pakistani players. We do not collect data speculatively or for purposes beyond those described in this policy. The categories of data we collect are as follows:

2.1 Account Registration Data

  • Full legal name (as on your CNIC or passport)
  • Date of birth (to verify you are 18 or older)
  • Pakistani mobile number
  • Email address
  • Chosen username and password (password stored in hashed form only)
  • Residential city or region in Pakistan

2.2 Identity Verification (KYC) Data

  • CNIC number and a clear scan or photograph of both sides of your CNIC
  • Passport details (where CNIC is unavailable or additional verification is required)
  • A selfie photograph for identity matching
  • Proof of payment method (screenshot of mobile wallet or bank statement)

2.3 Transaction and Gaming Data

  • Deposit and withdrawal records including amounts in PKR, timestamps and payment method references
  • Game session records: game type, bet amounts, outcomes and session duration
  • Bonus and promotion usage history
  • VIP tier status and loyalty points history

2.4 Technical and Usage Data

  • IP address and general geographic location derived from IP
  • Device type (smartphone, tablet, desktop) and browser type
  • Operating system version
  • Pages visited and time spent on each page
  • Session timestamps and login history
We do not collect full payment card numbers. Card payments on 666 x are processed through certified third-party payment gateways. We receive a tokenised reference and last-four-digits confirmation only — never the full card number, CVV or expiry date in raw form.
666 x

3. How We Collect Your Data

666 x collects personal data through the following channels:

  • Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team or fill in any form on the platform.
  • Automatically during platform use: through server logs, session tracking and cookies when you browse or play on 666 x (see Section 9 for full cookie details).
  • From payment providers: transaction confirmation data from Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT systems and card processing networks. This is limited to confirmation codes, amounts and timing — not payment credentials.
  • From identity verification services: where we use third-party KYC providers to verify document authenticity, those providers may return a verification result and risk score to us. Raw document images remain with the KYC provider under their own data retention policy.

4. How We Use Your Data

All personal data collected by 666 x is used for specific, legitimate purposes. We do not use your data in ways that are unrelated to operating your account or meeting our legal obligations. The primary purposes for which we use your data are:

Purpose Data Used Legal Basis
Account creation & management Registration data, contact details Contract
Age & identity verification DOB, CNIC/passport, selfie Legal Obligation
Payment processing Payment method refs, transaction amounts Contract
Fraud prevention & security IP, device, session data, transaction patterns Legitimate Interest
Responsible gaming monitoring Gaming session data, deposit frequency Legal Obligation
Customer support Account data, transaction history, communications Contract
Promotional communications (opt-in) Email, mobile number Consent
Platform analytics & improvement Usage data, technical data (anonymised) Legitimate Interest

Where our legal basis for processing is Consent (e.g. marketing communications), you may withdraw that consent at any time without affecting the lawfulness of any processing carried out before the withdrawal. To withdraw marketing consent, visit your account settings or contact support@666x.world.

5. Who We Share Your Data With

666 x does not sell, trade or rent your personal information to any third party. We share personal data with third parties only in the following limited circumstances, and only to the extent necessary for the stated purpose:

  • Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT partners and card payment gateways receive the minimum data required to process your transactions.
  • KYC/identity verification providers: Certified third-party identity verification services receive your identity documents to perform age and identity checks.
  • Fraud prevention services: We use third-party fraud detection systems that analyse technical and behavioural signals. These systems do not receive your full identity data — they receive anonymised or pseudonymised identifiers.
  • Legal and regulatory authorities: Where required by Pakistani law, court order or regulatory request, we may be required to disclose personal data. We will notify you of any such disclosure where legally permitted to do so.
  • Business transfers: In the event that 666 x is acquired by or merges with another entity, personal data held by the platform may be transferred to the acquiring entity. You will be notified of any such transfer in advance.
All third-party processors that handle personal data on behalf of 666 x are bound by contractual data processing agreements that require them to protect your data to the same standard as we do and prohibit them from using it for any purpose beyond the contracted service.
666 x

6. Payment Data

666 x accepts payments via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT and Visa/Mastercard. The handling of payment data is a priority security area for us, and we apply the following specific protections:

All card transactions are processed through PCI-DSS compliant payment gateways. We never store full card numbers, CVV codes or card expiry dates on 666 x servers. We store only a tokenised reference provided by the payment gateway — sufficient to process future transactions and verify ownership, without exposing the underlying payment credentials.

Mobile wallet transactions (Easypaisa, JazzCash, NayaPay, SadaPay) are processed via the mobile network operators' own encrypted APIs. We store your registered mobile wallet number and transaction reference codes for record-keeping and dispute resolution purposes. We do not store your mobile wallet PIN or access credentials under any circumstances.

Bank IBFT transaction data received from your bank includes your bank account number and IBAN for the purpose of processing and verifying the transfer. This data is stored securely and used only for payment verification, refund processing and KYC cross-referencing.

Important: 666 x will never contact you by phone, email or message asking for your full payment credentials, PIN, or one-time password (OTP). Any communication claiming to be from 666 x and requesting these details is fraudulent. Report it immediately to support@666x.world.

7. Data Retention

666 x retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following standard retention periods apply:

  • Account registration data: Retained for the duration of your active account plus 5 years after account closure, to comply with anti-money laundering record-keeping obligations.
  • KYC/identity verification documents: Retained for 5 years from the date of verification or from the date of account closure, whichever is later.
  • Transaction records: Retained for 7 years from the transaction date in line with financial record-keeping requirements.
  • Customer support communications: Retained for 2 years from the date of the last communication in a given thread.
  • Technical/usage data: Server logs are retained for 90 days. Anonymised analytics data may be retained indefinitely as it cannot be linked back to an individual.
  • Marketing preferences: Retained until you withdraw consent, at which point your marketing data is deleted within 30 days.

When the applicable retention period expires, data is securely deleted or irreversibly anonymised. You may request early deletion of your personal data under the right to erasure (see Section 10), subject to any overriding legal retention obligations.

8. Security Measures

Protecting your personal data is a genuine operational priority at 666 x, not just a legal checkbox. The technical and organisational security measures we have in place include:

  • 256-bit SSL/TLS encryption on all data transmitted between your device and 666 x servers
  • All passwords stored using one-way cryptographic hashing (bcrypt) — we cannot retrieve your password, only reset it
  • All 666 x servers and databases are hosted in secured, access-controlled data centre environments
  • Access to personal data within the 666 x team is restricted on a strict need-to-know basis
  • Regular automated and manual security assessments of the platform
  • Real-time fraud and intrusion monitoring systems
  • Two-factor authentication (2FA) available and recommended for all 666 x accounts

Despite these measures, no online platform can guarantee absolute security against all threats. If you have reason to believe your 666 x account has been accessed without authorisation, contact support@666x.world immediately. We can freeze your account within minutes of receiving a credible report.

In the event of a data breach that affects your personal data, 666 x will notify you promptly — in most cases within 72 hours of becoming aware of the breach — explaining what data was affected, the likely consequences and the steps we are taking to address it.

9. Cookies & Tracking

666 x uses cookies and similar browser technologies to operate the platform correctly, remember your preferences and analyse how Pakistani players use the site so we can improve it. A cookie is a small text file stored on your device by your browser. The following types of cookies are used on 666 x:

Required
Session & Authentication Cookies

These keep you logged in securely between pages. Without them, you would need to log in on every page. These cannot be disabled without breaking basic platform functionality.

Required
Security Cookies

Used for CSRF (cross-site request forgery) protection and fraud detection. These protect your account from unauthorised actions and are required for platform security.

Functional
Preference Cookies

Remember your language preference, game display settings and notification preferences so you don't have to set them each visit. Can be cleared via your browser without affecting core functionality.

Analytics
Analytics Cookies

Used to understand how players use 666 x — which pages are visited, how long sessions last, which devices are common. Data collected is anonymised and aggregated. Used to improve the platform experience.

You can control cookies through your browser settings. Disabling required cookies will affect your ability to use the 666 x platform. Disabling functional and analytics cookies does not affect your ability to play or make transactions.

10. Your Data Rights

As a 666 x player, you have the following rights regarding your personal data. To exercise any of these rights, contact support@666x.world with the subject line "Data Rights Request – [your username]". We will respond within 30 days.

You have the right to request a copy of all personal data that 666 x holds about you. We will provide this in a structured, readable format within 30 days of your request. There is no charge for a first access request; subsequent requests within a 12-month period may incur a reasonable administrative fee.

If any personal data 666 x holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For most account data, you can update information directly in your account settings. For identity data (name, date of birth) that requires KYC document updates, contact support.

You may request deletion of your personal data held by 666 x. Where no overriding legal retention obligation applies (e.g. the 5-year AML retention requirement), we will delete the relevant data within 30 days. Data subject to mandatory retention will be deleted at the earliest possible date permitted by law.

You may object to processing of your personal data where our legal basis for that processing is "Legitimate Interest". On receipt of an objection, we will cease the relevant processing unless we can demonstrate compelling grounds that override your objection. You can always object to direct marketing without giving a reason.

For data you have provided to 666 x and that we process on the basis of contract or consent, you may request a copy in a structured, machine-readable format (CSV or JSON). This allows you to take your data to another service if you wish.

11. Children's Privacy

666 x is strictly an adult platform. We do not knowingly collect personal data from any person under the age of 18. Our registration process includes a date-of-birth field specifically to prevent underage registration, and we may carry out additional age verification checks via KYC processes.

If a parent or guardian becomes aware that their child has registered on 666 x without consent, they should contact support@666x.world immediately. We will close the account, delete the associated personal data and return any deposited funds to the registered payment method within five business days. Any winnings accrued during underage use are forfeited in accordance with our Terms and Conditions.

12. Marketing Communications

666 x sends promotional emails and SMS messages only to players who have explicitly opted in to marketing communications during registration or via their account settings. These communications may include information about bonuses, promotions, new game launches and platform updates that are relevant to your account and activity.

You may withdraw your marketing consent at any time by:

  • Clicking the "Unsubscribe" link at the bottom of any 666 x marketing email
  • Updating your communication preferences in your account settings
  • Contacting support@666x.world and requesting removal from the marketing list

Withdrawal of marketing consent takes effect within 30 days and will not affect your ability to use the 666 x platform. Note that we will still send you transactional messages (such as deposit confirmations, withdrawal notifications and account security alerts) regardless of your marketing preference, as these are necessary for platform operation.

13. Changes to This Policy

666 x may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or the services we offer. When material changes are made, we will notify all registered players by email at the address registered to their account at least 7 days before the changes take effect.

The updated policy will be published on this page with a revised "Last updated" date. We encourage you to review this page periodically. Your continued use of 666 x following any changes to the Privacy Policy constitutes your acceptance of the updated policy.

14. Contact & Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how 666 x handles your personal information, please contact our support team:

Email: support@666x.world
Subject line for data requests: "Data Rights Request – [your 666 x username]"
Live Chat: Available 24/7 from your logged-in 666 x account
Response time: Within 30 days for formal data rights requests; within 4 hours for general privacy queries

We are committed to resolving privacy concerns promptly and fairly. If you are not satisfied with our response to a data rights request, you have the right to escalate the matter through appropriate legal channels in your jurisdiction.

Your Data Is Safe with 666 x

Ready to Play at Pakistan's Most Trusted Online Casino?

Now you know exactly how your data is protected. Join over 850,000 Pakistani players already on 666 x — register free, deposit from Rs 200 and start playing today.

Create Your Free Account Read Terms & Conditions