Privacy Policy – 666cx Online Casino & Betting Platform

1. Overview & Scope

This Privacy Policy ("Policy") is issued by 666cx ("we", "us", "the Company") and applies to all personal data collected through the 666cx website at https://666cx.net, its mobile-optimised interface, customer support channels, and any other service provided under the 666cx brand.

This Policy describes:

• What categories of personal data we collect and why;
• How we use, process, and store that data;
• With whom we share data and under what conditions;
• How long we retain personal data;
• Your rights in relation to your personal data and how to exercise them.

By registering an account on 666cx, making a deposit, or otherwise using the platform, you acknowledge that you have read and understood this Policy. If you do not agree to the terms of this Policy, you should not use the 666cx platform.

2. Personal Data We Collect

666cx collects personal data through several mechanisms: directly from you during registration and account use, automatically through platform interactions, and from verified third-party sources where necessary for compliance purposes.

3. How 666cx Uses Your Personal Data

We use the personal data we collect for the following purposes:

• Account Management: To create, maintain, and secure your 666cx account; to authenticate logins; to process deposits and withdrawals in PKR; to apply bonus offers and VIP tier benefits.
• Identity & Age Verification: To verify that you are 18 years of age or older and to comply with Know Your Customer (KYC) obligations, including CNIC verification for Pakistani users.
• Transaction Processing: To facilitate and record deposits via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa/Mastercard, and USDT TRC20; to process withdrawal requests; to maintain financial records.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, money laundering, bonus abuse, and unauthorised account access; to monitor for suspicious transaction patterns.
• Responsible Gaming Compliance: To enforce deposit limits, session timers, self-exclusion requests, and other responsible gaming measures that you have activated; to monitor gaming behaviour where patterns suggest potential harm.
• Customer Support: To respond to support requests, complaints, and account queries; to maintain records of communications for quality and compliance purposes.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to Users who have opted in to marketing communications. You may withdraw consent at any time.
• Platform Analytics & Improvement: To analyse aggregated, anonymised usage data for the purposes of improving platform performance, game selection, and user experience.
• Legal Compliance: To comply with applicable legal obligations, including record-keeping requirements, responses to lawful regulatory requests, and enforcement of our Terms and Conditions.

4. Legal Basis for Processing

666cx processes personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms and Conditions you accepted on registration – including account management, payment processing, and provision of gaming services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC verification, anti-money laundering (AML) checks, and responsible gaming requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, and the improvement of our services, where such interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and non-essential analytics cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Third Parties

666cx does not sell your personal data. We share personal data only with third parties where strictly necessary, and only under the following circumstances:

• Payment Processors: JazzCash, Easypaisa, and banking partners receive transaction data necessary to process your deposits and withdrawals. They are bound by their own privacy and data security obligations.
• Game Providers: Software providers such as Pragmatic Play, PG Soft, Evolution Gaming, and Ezugi receive session data necessary to deliver their games on the 666cx platform. No identity or financial data is shared beyond what is technically required for game delivery.
• KYC & Identity Verification Services: Third-party identity verification providers may process your CNIC and identity documentation to perform age and identity checks.
• IT & Infrastructure Providers: Hosting, CDN, and cybersecurity service providers who support the technical operation of 666cx. All such providers operate under data processing agreements with appropriate safeguards.
• Regulatory & Legal Authorities: Where required by law, court order, or lawful regulatory request, 666cx may disclose personal data to relevant authorities. We will notify you of such disclosures where legally permitted to do so.

6. Data Retention

666cx retains personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. Our standard retention periods are as follows:

• Account Data: Retained for the duration of your account's active status, plus a minimum of five (5) years following account closure to comply with financial and regulatory record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction in accordance with anti-money laundering legislation.
• KYC Documents: Retained for five (5) years following account closure or the conclusion of the business relationship.
• Customer Support Records: Retained for two (2) years from the date of the interaction, unless the record is relevant to an ongoing legal matter.
• Marketing Data: Retained until you withdraw consent or for a maximum of three (3) years of inactivity, whichever occurs first.

On expiry of the applicable retention period, data will be securely deleted or irreversibly anonymised. Where data is anonymised, it may be retained indefinitely for statistical and analytical purposes.

7. Data Security

666cx implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data at rest in our database infrastructure;
• Strict role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular penetration testing and vulnerability assessments of our platform infrastructure;
• Two-factor authentication (2FA) available to all 666cx account holders as an additional account security measure;
• Incident response procedures for detection, reporting, and remediation of data security incidents.

While 666cx takes all reasonable steps to protect your data, no internet transmission or electronic storage method is 100% secure. We encourage Users to take their own precautions, including enabling 2FA and using strong, unique passwords for their 666cx account.

8. Cookies & Tracking Technologies

The 666cx platform uses cookies and similar technologies to deliver a functional and personalised experience. Cookies are small text files stored on your device by your browser when you visit a website.

We use the following categories of cookies:

• Essential Cookies: Required for core platform functionality including login session management, deposit flow, and responsible gaming tool enforcement. These cannot be disabled without impairing platform use.
• Functional Cookies: Store your preferences such as language settings, preferred payment method, and game lobby filters to personalise your experience.
• Analytics Cookies: Collect anonymised data on how Users interact with the 666cx platform to help us identify performance issues and improve the user experience. Requires consent.
• Marketing Cookies: Used to deliver relevant promotional communications and to track the effectiveness of marketing campaigns. Requires consent and may be withdrawn at any time.

9. Your Rights Regarding Personal Data

Subject to applicable law, you have the following rights in relation to your personal data held by 666cx:

• Right of Access: You may request a copy of the personal data we hold about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data, subject to our legal obligation to retain certain records as described in Section 6;
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances;
• Right to Data Portability: You may request that your data be provided to you in a structured, commonly used machine-readable format;
• Right to Object: You may object to processing based on legitimate interests, and you may withdraw consent for marketing and analytics at any time;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our support team using the contact details in Section 13. We will respond to verified requests within 30 days. We may require proof of identity before fulfilling data requests.

10. Minors & Age Restriction

If 666cx becomes aware that personal data has been collected from an individual under 18 years of age, that data will be deleted immediately and the associated account will be permanently closed without exception.

Parents and guardians who believe that a minor has accessed or registered on the 666cx platform should contact our support team immediately. We will take all reasonable steps to verify and address the situation promptly, including cooperation with responsible gaming authorities where appropriate.

All account holders are required to confirm their age at registration. 666cx reserves the right to request CNIC or passport documentation at any time to verify age.

11. Payment Data & Financial Privacy

Given the nature of the 666cx platform as a real-money gaming service accepting PKR deposits and withdrawals, financial data is necessarily collected and processed as part of the service. The following specific principles apply to payment data:

• 666cx does not store full card numbers, card CVVs, JazzCash MPINs, or Easypaisa PINs. This data is processed exclusively by our certified payment processor partners;
• Deposit and withdrawal transaction records are retained in accordance with the retention periods in Section 6 and in compliance with applicable anti-money laundering requirements;
• All deposits must be made from payment accounts in your own name. Third-party deposits are prohibited. This requirement exists both for financial compliance reasons and to protect Users from fraud;
• Where unusual transaction patterns are identified, 666cx may conduct enhanced due diligence, including requesting source-of-funds documentation, before processing withdrawal requests;
• Financial transaction data may be shared with relevant regulatory or law enforcement authorities where legally required.

12. Changes to This Privacy Policy

666cx reserves the right to update or modify this Privacy Policy at any time. Where changes are material – such as changes to the categories of data we collect or the purposes for which we use it – we will notify registered Users via the email address on file or via a prominent notice on the platform prior to the changes taking effect.

The effective date at the top of this Policy indicates the date of the most recent revision. Your continued use of the 666cx platform following publication of a revised Policy constitutes your acknowledgement of the changes. We recommend reviewing this Policy periodically, particularly if you have concerns about your personal data.

13. Contact – Privacy Enquiries

For all privacy-related enquiries, data access requests, or concerns about how 666cx handles your personal data, please contact us using the following details:

Email: [email protected] — please use the subject line "Privacy Request – [Your Account Username]" for prompt handling.

Live Chat: Available 24/7 via the 666cx platform. For urgent privacy matters, such as suspected unauthorised access to your account data, live chat is the fastest channel.

We will acknowledge all privacy requests within 48 hours and will provide a full response within 30 days. In cases of particular complexity, we may notify you that additional time is required, up to a maximum of 60 days in total.