xp666 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how xp666 ("xp666," "we," "us," "our") collects, processes, stores, and protects personal data relating to users ("you," "your") of the online gaming platform operated at xp666.app and its associated pages and subdomains.

By registering an account with xp666 or continuing to use the platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy is incorporated into and must be read alongside the xp666 Terms & Conditions.

xp666 takes the privacy of Pakistani players seriously. Whether you are accessing the platform from Karachi, Lahore, Islamabad, Rawalpindi, or elsewhere, your personal information is handled with the same level of care and in accordance with the data protection principles set out in this Policy.

2. Data Controller

For the purposes of this Policy, xp666 acts as the data controller in respect of personal data collected through the xp666 platform. As data controller, xp666 determines the purposes and means by which personal data is processed.

If you have any questions about how xp666 handles your personal data, or wish to exercise any of your data rights, you may contact our Data Protection contact point at: [email protected] (plain text only – this is not a clickable link).

3. Personal Data We Collect

xp666 collects the following categories of personal data:

xp666 does not collect special category data (such as racial or ethnic origin, religious beliefs, or health data) unless legally required for a specific compliance purpose, in which case you will be informed separately.

4. How We Collect Your Data

xp666 collects personal data through the following channels:

• Direct provision: Data you enter during registration, KYC verification, support contact forms, or account settings updates.
• Automated collection: Technical data collected automatically when you visit or use the xp666 platform, including through cookies and server logs.
• Payment processors: Financial data received from Pakistani payment gateways (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah) when you initiate deposit or withdrawal transactions.
• Third-party game providers: Gaming data generated through interaction with Evolution Gaming, JILI, Pragmatic Play, PG Soft, and other studio integrations on the xp666 platform.
• Verification services: Identity and age verification data obtained through KYC processing services used to confirm account eligibility.

5. How We Use Your Personal Data

xp666 uses collected personal data for the following purposes:

• Account management: To create, maintain, and secure your xp666 account, verify your identity, and process login and authentication.
• Service delivery: To provide access to sports betting markets (including PSL and international cricket), casino games, slot titles, and all other platform features.
• Payment processing: To process deposits and withdrawals in PKR through your chosen payment method and to maintain accurate financial records of your account activity.
• Legal compliance: To fulfil anti-money laundering (AML) obligations, KYC requirements, age verification, and any other applicable regulatory obligations.
• Responsible gaming: To monitor gaming patterns and apply responsible gaming interventions where xp666's systems identify behaviour consistent with problem gambling.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, terms violations, and other prohibited conduct.
• Customer support: To handle your support queries, resolve disputes, and communicate with you about your account.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the xp666 platform, user experience, and product offering.
• Marketing communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and xp666 updates. You may withdraw marketing consent at any time through your account settings or by contacting support.

6. Legal Basis for Processing

xp666 processes your personal data under one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and xp666 – primarily account management, service delivery, and payment processing.
• Legal obligation: Processing required by applicable law, including KYC/AML compliance and age verification obligations.
• Legitimate interests: Processing carried out for xp666's legitimate business interests where those interests are not overridden by your data rights – including fraud prevention, security monitoring, and platform analytics.
• Consent: Processing based on your specific, freely given consent – primarily for marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Third-Party Disclosure

xp666 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients where necessary for the purposes described in this Policy:

• Payment service providers: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah receive transaction-specific data necessary to process deposits and withdrawals.
• Game technology providers: Evolution Gaming, JILI, Pragmatic Play, PG Soft, and similar studio partners receive session and gameplay data required to deliver their games on the xp666 platform.
• Identity verification services: KYC and age verification processors receive identity documentation for the purpose of account verification. These providers are bound by confidentiality obligations.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory direction, xp666 will disclose personal data to competent authorities.
• Fraud prevention services: Shared identifiers and transaction patterns may be shared with fraud prevention databases where xp666 has a legitimate interest in preventing financial crime.

All third-party service providers engaged by xp666 are subject to contractual data protection obligations consistent with this Policy and are not permitted to use your data for purposes beyond those specified by xp666.

8. Data Retention

xp666 retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following general retention principles:

• Account data is retained for the duration of your active xp666 account and for a period following account closure as required by applicable law and our internal compliance policies.
• Financial transaction records are retained for a minimum of five years following the relevant transaction to satisfy anti-money laundering record-keeping requirements.
• KYC documentation is retained for a period consistent with regulatory requirements applicable to xp666's operations.
• Support communications are retained for a minimum of two years to facilitate dispute resolution and quality assurance.
• Technical and analytics data in aggregated, anonymised form may be retained indefinitely as it no longer constitutes personal data.

When personal data is no longer required and no legal retention obligation applies, xp666 will securely delete or anonymise such data.

9. Data Security

xp666 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• SSL/TLS encryption across all pages of the xp666 platform, including the login page and payment flows.
• Encrypted storage of sensitive account and financial data within secured database environments.
• Access controls that limit internal access to personal data to authorised staff on a need-to-know basis.
• Two-factor authentication options for user accounts to reduce the risk of unauthorised access.
• Regular security reviews and updates to xp666's technical infrastructure.

While xp666 maintains robust security practices, no internet-based system is entirely immune to risk. You are responsible for maintaining the security of your own login credentials and for notifying xp666 immediately if you suspect unauthorised access to your account.

10. Cookies & Tracking Technologies

xp666 uses cookies and similar tracking technologies on its platform for the following purposes:

• Essential cookies: Required for the platform to function, including session management, login state, and security tokens. These cannot be disabled without preventing core platform functionality.
• Analytics cookies: Used to understand how users interact with the xp666 platform in aggregate – which games are played most, how users navigate the site, and where technical errors occur. Data is processed in anonymised or pseudonymised form.
• Preference cookies: Store user preferences such as language and display settings to improve the xp666 experience on return visits.

You may control non-essential cookies through your browser settings. Disabling cookies may affect the functionality of certain parts of the xp666 platform. xp666 does not use third-party advertising cookies or share cookie data with advertising networks.

11. Your Data Rights

Subject to applicable law, you hold the following rights in relation to your personal data held by xp666:

• Right of access: You may request a copy of the personal data xp666 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data in your xp666 account.
• Right to erasure: In certain circumstances, you may request deletion of your personal data. Note that legal retention obligations (e.g., AML record-keeping) may prevent full erasure of financial records.
• Right to restrict processing: You may request that xp666 temporarily restrict processing of your data in certain defined circumstances.
• Right to data portability: Where processing is based on consent or contract, you may request your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time through your account settings or by contacting support.
• Right to object: You may object to processing based on legitimate interests, including any direct marketing activities.

To exercise any of these rights, contact xp666 support at [email protected]. xp666 will respond to verified requests within a reasonable timeframe consistent with applicable data protection obligations.

12. Minors

The xp666 platform is strictly intended for users aged 18 years and above. xp666 does not knowingly collect personal data from individuals under 18. If xp666 discovers that a minor has registered an account or provided personal data, that account will be immediately closed, all data will be deleted, and any funds returned to the verified payment source.

If you believe a minor has accessed or registered on the xp666 platform, please notify xp666 support immediately so that appropriate action can be taken.

13. Changes to This Privacy Policy

xp666 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Material changes will be communicated to registered users via the contact details on file or through a notice displayed on the platform. The "Last Updated" date at the top of this page reflects the current version.

Continued use of the xp666 platform following notification of changes to this Policy constitutes your acceptance of the revised terms. If you do not agree with the revised Policy, you should cease using xp666 and request account closure.

14. Contact & Privacy Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way xp666 handles your personal data, please contact our support team through the 24/7 live chat available on the platform, or in writing at: [email protected]

Please include your account username or registered mobile number in any privacy-related correspondence to help us locate your records and respond efficiently.