xp666 Privacy Policy

xp666 is Pakistan's premier online gaming platform, serving players across Karachi, Lahore, Islamabad, Faisalabad, and every city and region in between. We are committed to handling all personal data in a responsible, transparent, and lawful manner that is consistent with the requirements of xp666's international gaming license and globally recognised data protection principles.

This Privacy Policy describes how xp666 — as the data controller — collects, uses, stores, shares, and protects personal information belonging to registered players, prospective players who browse xp666.pro, and any other individuals who interact with our platform, live chat, or email support channels.

The xp666 Privacy Policy covers:

• The xp666 website at xp666.pro and all sub-pages.
• xp666 mobile applications where applicable.
• xp666's player support channels, including live chat and email correspondence.
• xp666's promotional and marketing communications, where you have opted in to receive these.

xp666 collects personal data through a number of channels — primarily during account registration, during your ongoing use of the platform, and through your interactions with our support and marketing teams. The categories of personal data xp666 collects are as follows:

xp666 does not collect any special categories of sensitive personal data (such as health information, racial or ethnic origin, or political opinions) except where strictly required for responsible gaming assessments, and only with your explicit consent where that requirement applies.

xp666 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an underage individual, that data will be deleted immediately and the associated account closed.

xp666 uses the personal data we collect only for legitimate, clearly defined purposes. We will never use your data for purposes that are incompatible with those stated in this policy without first notifying you and, where required, obtaining your consent.

The primary purposes for which xp666 processes your personal data are:

• Account Management: To create, maintain, and administer your xp666 player account, including verifying your identity and age as required under our international gaming license.
• Service Delivery: To provide you access to sports betting markets (including PSL cricket), live casino tables, slot games, Teen Patti, wallet services, and all other features of the xp666 platform.
• Payment Processing: To process PKR deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to process withdrawal requests to your verified payment method.
• Regulatory Compliance: To meet xp666's obligations under its international gaming license, including know-your-customer (KYC) checks, anti-money laundering (AML) monitoring, and responsible gaming obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account abuse, money laundering, and other illegal conduct on the xp666 platform.
• Customer Support: To respond to your queries, complaints, and requests submitted via live chat or email to [email protected].
• Responsible Gaming: To monitor player activity for signs of problem gambling and to administer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion.
• Marketing Communications: Where you have opted in, to send you promotional offers, bonus notifications, and xp666 news by email or push notification. You may withdraw your marketing consent at any time from your account settings.
• Platform Improvement: To analyse usage patterns and technical data to improve xp666's website performance, game offerings, and overall player experience.

xp666 does not sell your personal data to third parties. We share personal data only in the specific, limited circumstances set out below, and only to the extent necessary for the stated purpose:

• Payment Processors: Your financial data is shared with the relevant payment provider (JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank) solely for the purpose of processing your deposit or withdrawal transaction.
• Identity Verification Providers: To fulfil KYC and age verification requirements under our gaming license, xp666 uses regulated third-party identity verification services. These providers process your identity documents and return a verification result to xp666.
• Game Software Providers: When you play a game on xp666, limited technical data (such as session identifiers) is shared with the relevant game software provider to facilitate game delivery and fairness auditing. No personally identifiable information beyond what is strictly necessary is shared with game providers.
• Regulatory Authorities: xp666 may be required to share personal data with the regulatory body that issues and oversees our international gaming license, or with law enforcement agencies, in response to a lawful request or legal obligation.
• Fraud Prevention Agencies: In cases of suspected fraud or money laundering, xp666 may share relevant data with fraud prevention bodies and law enforcement authorities.
• Responsible Gaming Bodies: If you register a self-exclusion with xp666, your details may be shared with responsible gaming organisations or multi-operator self-exclusion schemes to prevent you from accessing other gambling platforms during your exclusion period.

All third parties with whom xp666 shares personal data are contractually required to handle that data in accordance with applicable data protection standards and to use it only for the purposes specified by xp666. They are not permitted to use your data for their own independent marketing or commercial purposes.

xp666 uses cookies and similar tracking technologies on xp666.pro to ensure the platform functions correctly, to protect account security, and to improve the overall player experience. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain viruses and cannot access other files on your device.

xp666 uses the following categories of cookies:

• Strictly Necessary Cookies: These are essential for xp666 to function. They maintain your login session, remember your responsible gaming preferences, and keep your account secure. You cannot opt out of strictly necessary cookies without losing access to xp666's services.
• Performance & Analytics Cookies: These cookies help xp666 understand how players interact with the platform — which game categories are most popular, where players encounter errors, and how the site can be improved. Data collected by performance cookies is aggregated and anonymised.
• Functional Cookies: These remember preferences you have set on xp666, such as your preferred language or display settings, to deliver a more personalised experience on your next visit.
• Marketing Cookies: Where you have given consent, marketing cookies allow xp666 to show you relevant promotional content. You can withdraw this consent at any time via the cookie settings on xp666.pro.

You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or receive a warning before cookies are set. Please note that disabling certain cookies may affect the functionality of xp666.pro, including your ability to log in and access gaming services.

xp666 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our international gaming license and applicable legal obligations. The general retention periods applied by xp666 are as follows:

• Active Account Data: Retained for the full duration of your xp666 account being open and active.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five years following the date of the transaction, as required under anti-money laundering regulations.
• Identity Verification Documents: KYC documents are retained for a minimum of five years from account closure or the date of last transaction, in accordance with gaming license requirements.
• Support Communications: Live chat transcripts and support emails are retained for three years from the date of the interaction.
• Self-Exclusion Records: Records of self-exclusion requests are retained indefinitely to ensure that any future registration attempts by a self-excluded player can be identified and declined.
• Marketing Data: Marketing preference records and opt-in consents are retained until you withdraw your consent, after which they are deleted within 30 days.

As an xp666 player, you have a number of rights in relation to the personal data we hold about you. xp666 is committed to facilitating the exercise of these rights promptly and without unnecessary barriers. To exercise any of the rights listed below, please contact our support team via live chat or by emailing [email protected].

xp666 will respond to all data rights requests within 30 calendar days. In cases of complexity or high volume, we may extend this period by a further 60 days, in which case we will notify you of the extension within the initial 30-day window.

xp666 takes the security of your personal data seriously and implements a comprehensive range of technical and organisational measures to protect it from unauthorised access, loss, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL Encryption: All data transmitted between your device and xp666 servers is protected by 256-bit SSL/TLS encryption — the same standard used by major Pakistani banks such as HBL and Meezan Bank.
• Segregated Player Funds: Your PKR wallet balance is held in segregated accounts, entirely separate from xp666's own operational funds, in accordance with our gaming license requirements.
• Two-Factor Authentication (2FA): xp666 strongly recommends all players enable 2FA on their account. 2FA adds a second layer of verification beyond your password, significantly reducing the risk of unauthorised account access.
• Access Controls: Access to personal data within xp666's internal systems is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and regular data protection training.
• Penetration Testing: xp666's platform undergoes regular security testing by independent third-party security professionals to identify and remediate vulnerabilities before they can be exploited.
• Fraud Detection Systems: Automated fraud detection tools monitor all transactions and account activity in real time to identify and flag suspicious patterns.

xp666 operates a strict minimum age policy. The xp666 platform is intended exclusively for individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data belonging to individuals under the age of 21.

As part of our account registration process, all new xp666 players are required to confirm that they meet the minimum age requirement. xp666 conducts age verification checks using identity documentation for all accounts and may request additional documentation at any point if there is any reason to doubt the age or identity of an account holder.

If xp666 discovers or reasonably suspects that personal data has been collected from an individual under the age of 21, we will:

• Immediately suspend the relevant account pending investigation.
• Delete all personal data associated with the underage individual from our active systems.
• Return any deposits made to the original payment method, less any bonuses claimed.
• Void any winnings accrued during the period of underage use.

Parents and guardians who believe that a minor in their care may have registered an xp666 account are encouraged to contact us immediately at [email protected]. We will investigate and take action within 24 hours of notification.

xp666 operates under an international gaming license, which means some of the third-party service providers we work with — such as identity verification partners, game software providers, and cloud infrastructure vendors — may be located outside Pakistan. Where your personal data is transferred to a country outside Pakistan, xp666 ensures that appropriate safeguards are in place to protect your data to the same standard that applies within Pakistan.

Safeguards used by xp666 for international data transfers include:

• Contractual clauses with all third-party data processors that impose data protection standards equivalent to those required under xp666's gaming license.
• Transfer of data only to countries or organisations that maintain adequate data protection frameworks as recognised by xp666's license regulatory body.
• Regular audits of third-party data processors to verify continued compliance with the contractual data protection standards imposed by xp666.

If you would like further information about the specific safeguards xp666 has in place for international data transfers, please contact our support team at [email protected].

xp666 may update this Privacy Policy from time to time to reflect changes in our data practices, updates to our gaming license requirements, changes in applicable law, or improvements to our platform. When we make material changes to this policy — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify registered players by email and via an on-platform notification prior to the changes taking effect.

The "Last Updated" date at the top of this page reflects when the most recent revision was published. We encourage all xp666 players to review this Privacy Policy periodically to remain informed of how we are protecting their data. Your continued use of xp666 following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

If you do not agree with any changes made to this Privacy Policy, you may close your account by contacting our support team. Any personal data collected prior to your account closure will continue to be handled in accordance with the version of the Privacy Policy in effect at the time that data was collected, subject to any mandatory legal retention obligations.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data xp666 holds about you, please contact our Data Protection team through any of the following channels:

• Live Chat: Available 24/7 directly from xp666.pro — the fastest way to reach an agent for privacy-related queries.
• Email: [email protected] — for formal written privacy requests. We aim to acknowledge all requests within 24 hours and respond fully within 30 calendar days.
• Coverage: Our support team serves players across Pakistan including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and all other cities.

When submitting a privacy request by email, please include your registered xp666 username and a clear description of your request so our team can identify your account and respond accurately. For identity verification purposes, we may ask you to confirm certain account details before processing access or erasure requests.