Privacy Policy — x666w Platform

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, email address, phone number, residential address, payment details, IP address and device identifiers.
• "Processing" — any operation or set of operations performed on Personal Data, including collection, recording, storage, use, disclosure or deletion.
• "Data Controller" — the Operator of x666w, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — a third party that processes Personal Data on behalf of x666w under contractual instruction, such as a KYC verification provider or payment processor.
• "Consent" — a freely given, specific, informed and unambiguous indication of agreement by the User to the processing of their Personal Data for a stated purpose.
• "Cookies" — small data files placed on a User's device by the Platform to store session information, preferences and usage data.
• "KYC" — Know Your Customer: the identity verification process required for regulatory and AML compliance purposes.
• "AML" — Anti-Money Laundering: legal obligations requiring financial service operators to monitor and report suspicious financial activity.

4.1 — Directly from You

We collect Personal Data directly from you when you: (a) complete account registration; (b) submit KYC documents; (c) make a deposit or withdrawal; (d) contact our support team via live chat or email; (e) participate in surveys or promotional activities; or (f) update your account profile or preferences.

4.2 — Automatically via the Platform

When you access the Platform, certain technical data is collected automatically through cookies, log files, web beacons and similar tracking technologies. This includes IP address, device and browser information, session timestamps, pages visited and interaction patterns. This data helps us maintain security, prevent fraud and understand how the Platform is used.

4.3 — From Third Parties

We may receive data about you from third-party service providers, including: (a) identity verification and KYC providers who confirm the authenticity of documents you submit; (b) payment processors who provide transaction references and fraud signals; (c) responsible gambling databases that identify self-excluded individuals; and (d) analytics and fraud detection partners. All third-party data sources are subject to data sharing agreements that align with the standards described in this Policy.

• Contractual Necessity: Processing required to provide the services you have requested — including account registration, payment processing and withdrawal handling.
• Legal Obligation: Processing necessary to comply with AML regulations, KYC requirements, self-exclusion obligations, tax reporting and other legally mandated obligations applicable under the Operator's licence jurisdiction.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gambling monitoring and improving service quality, where our legitimate interests are not overridden by your rights.
• Consent: Processing carried out for marketing communications and non-essential cookies, where you have provided explicit, revocable consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6.1 — Account Management

To create, maintain and administer your account, verify your identity, process your deposits and withdrawals, and communicate account-related information to you, including security alerts and account status notifications.

6.2 — Regulatory Compliance

To meet obligations under the Operator's licence, including KYC verification, AML transaction monitoring, reporting to regulatory authorities where legally required and maintaining records for the minimum retention periods specified by applicable law.

6.3 — Fraud Prevention & Security

To detect, investigate and prevent fraudulent account activity, payment fraud, multi-accounting, identity theft, bonus abuse and any other conduct that poses a risk to Users or the Platform's integrity. Technical and behavioural data is analysed for anomalies that may indicate security threats.

6.4 — Responsible Gambling

To monitor betting and gaming patterns in the context of responsible gambling obligations, honour self-exclusion requests, enforce deposit and loss limits, and communicate welfare-related information to Users who may be at risk. Self-exclusion data is processed under both legal obligation and User-initiated consent.

6.5 — Customer Support

To handle your queries, complaints and technical support requests efficiently. Support communications are recorded for quality assurance and dispute resolution purposes and retained for the applicable period described in Section 9.

6.6 — Marketing Communications

To send you promotional offers, bonus notifications and platform updates by email or in-platform message, where you have provided consent or where we have a legitimate interest in communicating relevant offers to active account holders. You may opt out of marketing communications at any time by using the unsubscribe mechanism in any email we send or by contacting support. Opting out of marketing does not affect operational communications.

6.7 — Platform Improvement & Analytics

To analyse aggregated, anonymised usage data to understand how the Platform is used, identify technical issues, improve features and inform product decisions. Individual-level data used for analytics is de-identified where practicable.

7.1 — Service Providers (Data Processors)

We engage third-party vendors who process data strictly on our behalf under contractual data processing agreements. These include: KYC and identity verification providers; payment processors and gateway operators (which may include services familiar to Pakistani users such as references to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — see note below); fraud detection and AML screening services; cloud hosting and infrastructure providers; and customer support software vendors. These processors may not use your data for any purpose other than the specific service they provide to x666w.

7.2 — Regulatory & Legal Disclosure

We may disclose Personal Data to governmental, regulatory, law enforcement or judicial authorities where required by applicable law, court order or where we have a good-faith belief that such disclosure is necessary to protect the safety of persons, prevent fraud or comply with legal process.

7.3 — Business Transfers

In the event of a merger, acquisition, asset sale or restructuring of the Operator's business, your Personal Data may be transferred to the relevant successor entity, subject to the same privacy protections described in this Policy. Users will be notified of any such transfer in advance where practicable.

x666w operates internationally, and your Personal Data may be processed and stored in jurisdictions other than Pakistan. Where data is transferred outside the jurisdiction in which it was collected, x666w takes steps to ensure that appropriate safeguards are in place — including contractual clauses with service providers and adherence to internationally recognised data transfer standards. By using the Platform, you acknowledge that your data may be transferred, stored and processed internationally in accordance with this Policy.

x666w's Platform is strictly intended for adults aged 18 or older, or the higher minimum age required by the operator's licence jurisdiction. We do not knowingly collect, store or process Personal Data from individuals below the applicable minimum age. If we become aware that Personal Data has been collected from an underage individual, we will take immediate steps to delete that data and close the associated account. If you believe an underage individual has registered on x666w, please contact us at [email protected] immediately.

• TLS/SSL Encryption: All data transmitted between your device and x666w's servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Access Controls: Personal Data is accessible only to authorised staff and contractors on a need-to-know basis. Access is governed by role-based permissions and audit logging.
• Secure Storage: Data at rest is stored in encrypted environments with physical and logical access controls.
• KYC Document Handling: Identity documents are stored in isolated, access-controlled repositories separate from general account data.
• Fraud & Anomaly Detection: Automated systems monitor for suspicious access patterns, unusual transaction behaviour and potential account compromise in real time.
• Third-Party Vetting: All Data Processors are subject to security assessment and contractual obligations before being granted access to any x666w User data.

The Platform may reference or integrate third-party services — including payment providers, game studios and verification services — that operate under their own privacy policies. x666w is not responsible for the data practices of third-party providers. Each provider's data processing activities are governed by its own terms and privacy documentation. We encourage you to review the privacy policies of any third-party services you interact with in connection with your x666w account.

x666w reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered Users via email notification and/or a prominent notice on the Platform at least seven (7) days prior to the change taking effect, where practicable. The "Last Updated" date at the top of this page will reflect the most recent revision. Continued use of the Platform following the effective date of an updated Policy constitutes acceptance of the revised terms. Users who do not agree with the amended Policy should cease using the Platform and contact support to close their account.

Complaints

If you are not satisfied with how we have handled a data-related concern, you have the right to lodge a complaint with the relevant supervisory authority in the jurisdiction where you reside or where you believe a breach of applicable data protection law has occurred. x666w encourages Users to contact us in the first instance so we have the opportunity to address concerns directly and promptly.