Privacy Policy — x666io Platform

1 Introduction

This Privacy Policy ("Policy") describes how x666io ("x666io", "we", "us", "the Platform") collects, uses, stores, discloses and protects personal data relating to individuals ("Players", "Users", "you") who register for and use the x666io Platform, accessible at https://x666io.cam.

x666io is committed to handling personal data responsibly, transparently and in accordance with applicable data-protection obligations in the jurisdiction in which it operates. This Policy applies to all data collected through the Platform, including data provided during registration, during the course of account use, and through interactions with customer support.

By registering an account on x666io, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you should not use the Platform.

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information that identifies or could reasonably identify a living individual, including name, email address, IP address, device identifiers and financial account details.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, erasure or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. In the context of this Policy, the Data Controller is x666io.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller, under a contractual agreement.
• "KYC" — Know Your Customer verification procedures, comprising identity and address checks required under applicable licensing and anti-money-laundering obligations.
• "Cookies" — small text files placed on a user's device by a website, used to store session information, preferences and analytics data.
• "Platform" — the x666io website and associated services accessible via https://x666io.cam.
• "Special Category Data" — sensitive personal data attracting heightened protection, such as data revealing racial origin, health status or financial vulnerability indicators.

3 Data Controller

x666io acts as the Data Controller in respect of personal data collected through the Platform. x666io operates under applicable international licensing. For data-related enquiries or to exercise your rights as a data subject, please contact us using the details provided in Section 16 of this Policy.

Where x666io engages third-party Data Processors — such as payment technology providers, KYC verification services, analytics platforms or cloud infrastructure providers — such processors operate under written agreements that impose obligations consistent with applicable data-protection standards.

4 Data We Collect

4.1 Data Provided Directly by You

When you register, verify or interact with your x666io account, you may provide the following categories of personal data:

4.2 Data Collected Automatically

When you use the Platform, we may automatically collect the following technical data:

• IP address and approximate geolocation derived from IP;
• Device type, operating system and browser version;
• Session duration, pages visited and navigation patterns;
• Referring URL and search terms used to reach the Platform;
• Betting and gaming activity logs (game played, wager amounts, outcomes);
• Login timestamps and access frequency.

4.3 Data From Third Parties

x666io may receive supplementary identity or fraud-screening data from third-party KYC and AML verification providers in order to fulfil licensing obligations. Such data is used solely for verification purposes and is handled with the same level of protection as data collected directly.

5 Legal Basis for Processing

x666io processes personal data on one or more of the following legal bases, as applicable to each processing activity:

• Contractual necessity: Processing required to register your account, manage your gameplay, process deposits and withdrawals, and fulfil our obligations under the Terms & Conditions you have accepted.
• Legal obligation: Processing required to comply with applicable anti-money-laundering (AML), Know Your Customer (KYC), fraud prevention and licensing requirements.
• Legitimate interests: Processing carried out for Platform security, fraud detection, analytics, system improvement and responsible gambling monitoring, where such interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications where you have provided explicit opt-in consent. Consent may be withdrawn at any time.

6 How We Use Your Data

x666io uses the personal data it collects for the following purposes:

• Creating, maintaining and securing your account;
• Verifying your identity and age as required by KYC obligations;
• Processing deposits, withdrawals and financial transactions;
• Detecting and preventing fraud, money laundering and bonus abuse;
• Monitoring gaming activity for responsible gambling purposes, including identifying at-risk behaviour;
• Providing customer support and handling account-related queries and complaints;
• Sending transactional communications such as account confirmations, security alerts and payment notifications;
• Sending promotional communications where you have provided consent;
• Improving Platform performance, user experience and content quality;
• Complying with applicable legal and regulatory obligations.

7 Data Sharing & Disclosure

x666io does not sell, rent or trade personal data to any third party for their own marketing purposes. Personal data may be shared in the following circumstances:

7.1 Service Providers and Processors

x666io may share personal data with trusted third-party service providers who assist in operating the Platform. These include payment processing technology providers, KYC and AML verification services, cloud infrastructure providers, fraud detection services and customer support platforms. All such providers are bound by contractual data-processing agreements and are prohibited from using your data for purposes other than those specified by x666io.

Where payment methods familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are used for transactions, the relevant transaction data is processed by those providers in accordance with their own terms and privacy policies. None of these providers are affiliated with or endorse x666io. Players should review their chosen payment provider's own privacy documentation independently.

7.2 Legal and Regulatory Disclosure

x666io may disclose personal data to regulatory bodies, law enforcement authorities, licensing authorities or other competent legal bodies where required to do so by applicable law, court order, or regulatory direction. Such disclosure will be made to the minimum extent necessary and, where legally permitted, the affected player will be informed.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of x666io's business or assets, personal data held by x666io may be transferred to the successor entity, subject to equivalent data-protection obligations being maintained. Players will be notified of any material change in data controllership.

7.4 Aggregated and Anonymised Data

x666io may share aggregated, anonymised data (which cannot reasonably be used to identify any individual) with third parties for research, analytics and Platform improvement purposes. Such data does not constitute personal data for the purposes of this Policy.

8 Data Retention

x666io retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The key retention principles are as follows:

• Active accounts: Personal data is retained for the duration of the account relationship and for a period thereafter as required by applicable AML, KYC and licensing regulations, typically a minimum of five years following account closure.
• Closed accounts: Transaction and identity records may be retained for a period mandated by applicable financial and regulatory law even after account closure, to satisfy audit and compliance obligations.
• Support records: Customer support correspondence is retained for a reasonable period to enable resolution of follow-up queries and to defend against potential disputes.
• Marketing data: Data used for marketing communications is retained until consent is withdrawn, after which it will be removed from active marketing lists within a reasonable operational timeframe.

Once the applicable retention period has expired, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures.

9 Data Security

x666io implements technical and organisational security measures appropriate to the risk of processing personal data. These include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data at rest using industry-standard protocols;
• Access controls limiting personal data access to authorised personnel on a need-to-know basis;
• Regular review of security practices in line with applicable licensing requirements;
• Procedures for detecting, investigating and reporting personal data breaches where required by law.

10 Cookies & Tracking Technologies

x666io uses cookies and similar technologies (such as web beacons and local storage) to operate and improve the Platform. The categories of cookies we use are as follows:

• Strictly necessary cookies: Essential for basic Platform functionality, including session management, authentication and security. These cannot be disabled without impairing Platform operation.
• Functional cookies: Remember your preferences such as language settings, display options and session continuity to improve your experience.
• Analytics cookies: Collect aggregated information about how users interact with the Platform to help us understand usage patterns and improve performance. This data is anonymised where possible.
• Responsible gambling cookies: May be used to track session duration and frequency to support responsible gambling monitoring and reality-check features.

You can manage cookie preferences through your browser settings. Please note that disabling cookies may impair some Platform functionality. x666io does not use cookies to serve third-party advertising or to track you across unrelated websites.

11 International Data Transfers

As an internationally operating platform, x666io may transfer personal data to servers or service providers located outside your country of residence, including outside of Pakistan. Where such transfers occur, x666io ensures that appropriate safeguards are in place to protect your data, including contractual protections with data processors that require equivalent levels of data security and privacy.

By using the Platform, you acknowledge that your data may be processed in jurisdictions with differing data-protection standards from those in Pakistan or your home jurisdiction. x666io takes reasonable steps to ensure that international transfers are conducted with appropriate protections in place.

12 Minors & Age Verification

The x666io Platform is strictly for adults aged 18 years or older, or the higher minimum required by the operator's licence jurisdiction. x666io does not knowingly collect personal data from persons below the minimum age threshold.

Where x666io becomes aware that a minor has registered an account or provided personal data, the account will be immediately closed, all data associated with the account will be deleted as soon as reasonably practicable, and any funds deposited will be returned through the relevant payment channel where technically feasible.

If you believe a minor has registered on our Platform, please contact our support team immediately at [email protected].

13 User Rights

Subject to applicable data-protection law and, in some cases, to regulatory obligations that may limit or delay our ability to comply, you have the following rights in relation to your personal data:

• Right of access: You may request confirmation of whether x666io processes personal data about you and, if so, a copy of that data together with information about how it is used.
• Right to rectification: You may request correction of inaccurate personal data or completion of incomplete data held on your account.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where there is no longer a lawful basis for its retention. This right may be limited where retention is required by AML, KYC or other regulatory obligations.
• Right to restriction of processing: You may request that we limit processing of your data in certain circumstances, such as where you contest its accuracy or where processing is unlawful but you do not wish the data deleted.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request receipt of your data in a structured, commonly used and machine-readable format.
• Right to object: You may object to processing of your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to our demonstrating compelling grounds to continue.

To exercise any of the above rights, please contact our support team using the details in Section 16. We will respond to verified requests within a reasonable period, typically within 30 days, subject to the complexity of the request and applicable legal constraints.

14 Marketing Communications

Where you have given explicit consent during registration or at any subsequent point, x666io may send you promotional communications about offers, bonuses, new games, PSL and cricket betting promotions, and other Platform features. These communications will be sent to the email address or contact number registered on your account.

You may withdraw your consent to marketing communications at any time by contacting our support team at [email protected] or by using the opt-out mechanism included in each marketing email. Withdrawal of consent to marketing communications does not affect the lawfulness of processing carried out prior to withdrawal, nor does it affect the sending of essential transactional communications relating to your account.

15 Changes to This Privacy Policy

x666io reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or Platform functionality. Where changes are material, we will notify registered players via email or a prominent notice on the Platform.

The date of the most recent revision is displayed at the top of this page. Continued use of the Platform following publication of an updated Privacy Policy constitutes your acknowledgment of the revised terms. If you do not agree with the updated Policy, you should stop using the Platform and may close your account in accordance with the procedure described in our Terms & Conditions.

16 Contact Us

For any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data, please contact the x666io Data Team through the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line.
• Live Chat: Available via the Platform chat widget. Operator-advised availability: 24/7. Actual availability may vary.
• Response timeframe: Data rights requests are typically acknowledged within 5 business days and resolved within 30 days, subject to request complexity and applicable regulatory constraints.

Where a data request requires identity verification before we can respond, we may ask you to provide sufficient information to confirm your identity. This is to protect against unauthorised access to personal data.