Privacy Policy —
How 666cx Protects Your Data

This Privacy Policy (hereinafter "the Policy," "this Policy," or "Privacy Notice") is issued by 666cx (hereinafter "666cx," "we," "us," or "our"), the operator of the online gaming and sports betting platform accessible at 666cx.org. It applies to all personal data collected from individuals (hereinafter "you," "the Player," or "the User") who access or use the 666cx platform in any capacity, including account registration, depositing of funds, participation in games or sports betting, and use of customer support or communication channels.

This Policy is incorporated by reference into the 666cx Terms and Conditions and forms an integral part of the contractual relationship between you and 666cx. By registering an account or otherwise using the 666cx platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection, processing, and use of your personal data in the manner described herein, where consent is the applicable legal basis for processing.

For the purposes of applicable data protection legislation, 666cx acts as the data controller in respect of the personal data collected through and in connection with the 666cx platform. As data controller, 666cx determines the purposes for which and the means by which your personal data is processed.

Where 666cx engages third-party service providers to process personal data on its behalf (for example, payment processing partners, game software providers, fraud detection services, and hosting infrastructure providers), those parties act as data processors under contractual data processing agreements that bind them to process personal data only in accordance with 666cx's documented instructions and to maintain appropriate technical and organisational security measures.

666cx collects personal data through a variety of means in connection with the provision of its services. The categories of personal data we collect are described below:

666cx uses the personal data it collects for the following purposes, each of which is described alongside the legal basis on which the processing is conducted (see also Section 5):

• Account creation and management: Processing your registration information to create and maintain your 666cx player account, authenticating your identity at login, and managing account security settings.
• Identity verification (KYC): Verifying your identity in accordance with our international gaming licence obligations and anti-money laundering regulatory requirements, using your CNIC documentation and selfie photograph.
• Payment processing: Processing your deposits via JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT, and processing withdrawal requests to your registered payment methods.
• Fraud prevention and AML compliance: Monitoring transaction activity and account behaviour for indicators of money laundering, fraud, bonus abuse, or other prohibited activities, and reporting suspicious activity to relevant authorities as required by law.
• Responsible gaming obligations: Monitoring gaming patterns for indicators of problem gambling behaviour and implementing responsible gaming measures, including player-imposed limits, cooling-off periods, and self-exclusion, in accordance with our licence conditions.
• Customer support: Responding to your enquiries, complaints, and requests submitted via live chat, email, or other support channels.
• Marketing communications: Sending you information about 666cx promotions, bonuses, and new features where you have provided your consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time by contacting support.
• Platform improvement: Analysing aggregate, anonymised usage data to improve platform performance, game selection, user experience, and the overall quality of the 666cx service.
• Legal compliance: Retaining records as required by applicable regulatory, legal, and audit obligations, and cooperating with requests from competent authorities where lawfully required.

666cx processes your personal data on one or more of the following legal bases, depending on the nature and purpose of the specific processing activity:

666cx does not sell, rent, or commercially distribute your personal data to third parties. We may share your personal data with the following categories of recipients, strictly for the purposes described:

• Payment processing partners: JazzCash, EasyPaisa, SadaPay, HBL, UBL, and cryptocurrency processing services, for the purpose of executing deposit and withdrawal transactions. These partners receive only the financial data necessary to execute the transaction.
• Game software providers: Pragmatic Play, PG Soft, Hacksaw Gaming, and other licensed game studios whose games are hosted on the 666cx platform. Game studios may receive technical session data necessary for game delivery but do not receive your full account profile.
• Identity verification and KYC service providers: Third-party providers engaged to assist with electronic identity document verification processes. These providers act as data processors under contractual data processing agreements.
• Fraud prevention and AML monitoring services: Specialist service providers engaged to assist 666cx with the detection and prevention of fraudulent activity and money laundering, as required by our regulatory licence obligations.
• Hosting and infrastructure providers: Cloud and server infrastructure providers on whose systems the 666cx platform and associated data are hosted. These providers act as data processors under contractual agreements.
• Regulatory authorities and law enforcement: Competent gaming regulatory authorities, financial intelligence units, and law enforcement agencies, where 666cx is required by law to make disclosures or where such disclosure is necessary to prevent or detect criminal activity.
• Legal and professional advisors: Lawyers, auditors, accountants, and other professional advisors engaged by 666cx in connection with the operation of its business, subject to applicable professional confidentiality obligations.

The 666cx platform operates internationally, and your personal data may be transferred to and stored on servers or processed by service providers located in countries outside your home jurisdiction, including countries that may not provide the same level of data protection as your home country.

Where such international transfers of personal data occur, 666cx takes appropriate measures to ensure that your data receives an adequate level of protection, including through the execution of appropriate contractual clauses with receiving parties, the implementation of technical security measures, and the selection of processors that maintain recognised information security certifications.

The 666cx platform uses cookies and similar web tracking technologies to enhance your experience, maintain your login session, and collect aggregate usage data. A cookie is a small text file placed on your device by the 666cx website when you visit it.

You may adjust your cookie preferences through your browser settings. Please note that disabling certain cookies may impair the functionality of the 666cx platform. For detailed information on managing cookies in specific browsers, refer to your browser's official help documentation.

666cx implements comprehensive technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. Our security framework includes the following:

• Transport Layer Security: All data transmitted between your browser or device and the 666cx platform is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to login pages, the cashier, account settings, game loading, and all other platform interactions.
• Data Encryption at Rest: Sensitive personal data — including identity documents, CNIC data, payment method identifiers, and authentication credentials — is stored in encrypted form using industry-standard encryption algorithms.
• Access Controls: Access to 666cx systems that hold personal data is restricted to authorised personnel with a genuine operational need for such access. Access permissions are regularly reviewed and revoked promptly upon staff role changes or departures.
• Two-Factor Authentication: 666cx offers SMS-based two-factor authentication for player accounts and enforces multi-factor authentication for all staff with administrative platform access.
• Penetration Testing and Security Audits: 666cx conducts regular penetration tests and security audits of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: 666cx maintains a documented data breach incident response plan and a dedicated team responsible for identifying, containing, and remediating security incidents. In the event of a breach affecting your personal data, you will be notified in accordance with applicable regulatory requirements.

666cx retains personal data for the period necessary to fulfil the purposes for which it was collected, as described in this Policy, and to comply with applicable legal and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised in accordance with our data deletion procedures. Where anonymisation is applied, the anonymised data may be retained indefinitely for aggregate analytics purposes.

Depending on the legal framework applicable to your situation, you may have the following rights in relation to the personal data that 666cx holds about you. To exercise any of these rights, please contact the 666cx support team using the details in Section 15:

If 666cx becomes aware that it has inadvertently collected personal data from a minor — that is, any individual under the age of 21 — the relevant account will be immediately suspended, any deposits will be returned via the original payment method where technically feasible, and all personal data associated with the account will be securely deleted in accordance with our data deletion procedures.

Parents and guardians who believe that a minor has accessed the 666cx platform using their account credentials or payment methods should contact 666cx support immediately so that appropriate account security measures can be taken and any minors' data can be removed promptly.

The 666cx platform may contain references to third-party services, including the payment processors through which deposits and withdrawals are conducted. When you interact with third-party services — for example, when you authorise a JazzCash or EasyPaisa payment — you are subject to the privacy policies and terms of those third-party services, which are separate from and independent of this Policy.

666cx is not responsible for the data practices, security measures, or privacy policies of any third-party services or platforms. We encourage you to review the privacy policies of any third-party service providers before sharing personal data with them. The inclusion of a third-party payment processor or game studio on the 666cx platform does not constitute an endorsement of that party's data practices.

666cx reserves the right to update, amend, or replace this Privacy Policy at any time, in response to changes in applicable law, regulatory requirements, technological developments, or changes in our data processing practices. The "Effective" date displayed in the version box at the top of the legal section will be updated whenever material changes are made.

Where changes are material — meaning they significantly affect your rights or the way in which we process your personal data — you will be notified via your registered email address with a minimum of fourteen (14) days' advance notice before the changes take effect. For minor or administrative changes, the updated Policy will be published on the 666cx website without advance notice, and the "last updated" date will be amended accordingly.

We encourage you to review this Privacy Policy periodically to remain informed about how 666cx collects, uses, and protects your personal data. Your continued use of the 666cx platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes, where consent is the applicable legal basis.

For any questions, concerns, or formal requests relating to this Privacy Policy or the personal data that 666cx holds about you, please contact the 666cx data team through the following channels:

If you are not satisfied with 666cx's response to your privacy concern or data rights request, you have the right to lodge a complaint with the relevant supervisory authority or data protection regulator applicable in your jurisdiction. 666cx will cooperate fully with any such regulatory investigation and will work to resolve data protection complaints promptly and in good faith.