At 666cx, your privacy is taken seriously. This Privacy Policy explains exactly what personal data we collect when you use the 666cx platform, why we collect it, how it is stored and protected, who it may be shared with, and what rights you have over your own information. We encourage all users to read this document in full before registering an account.
Six core commitments that define how 666cx handles your personal information. The complete legal text follows in the sections below.
666cx collects only the personal data that is strictly necessary for operating a licensed gaming platform — including identity verification, payment processing, and regulatory compliance. We do not harvest data for unrelated commercial purposes.
All personal data stored by 666cx is encrypted at rest using industry-standard AES-256 encryption. Data in transit between your device and 666cx servers is protected by TLS 1.3. Passwords are hashed using bcrypt and are never stored in plain text.
666cx does not sell, rent, or trade your personal information to third-party marketers. Data sharing with external parties is limited to what is required by our operating license, payment processing obligations, and applicable law.
You have the right to access, correct, export, and request deletion of your personal data held by 666cx. These rights can be exercised by contacting our data team at [email protected]. We respond to all data requests within 30 days.
666cx uses cookies and similar tracking technologies only for session management, security, and platform analytics. No advertising trackers or cross-site behavioural profiling cookies are placed without your consent. Cookie preferences can be managed in your browser settings.
As an internationally licensed gaming operator, 666cx is obligated to maintain KYC and AML data records for defined periods. This data is held securely, accessed only by authorised compliance personnel, and shared with regulators only when legally required.
This Privacy Policy ("Policy") is issued by 666cx ("we", "us", "our", "666cx"), the operator of the online gaming platform accessible at 666cx.club (the "Platform"). This Policy applies to all personal data we process in connection with your registration, use of the Platform, customer support interactions, promotional activity, and any other interaction you have with 666cx services.
By registering a 666cx account or continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood how 666cx processes your personal data as described herein. If you disagree with any part of this Policy, you should discontinue use of the Platform immediately.
This Policy forms part of the broader agreement between you and 666cx, alongside the Terms and Conditions and Responsible Gaming Policy. Defined terms used but not defined in this Policy carry the same meaning as in the Terms and Conditions.
The following table summarises the categories of personal data that 666cx may collect and process in connection with your use of the Platform:
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, passport number, nationality | Account registration, KYC verification, age confirmation |
| Contact Data | Mobile number, email address, city of residence | Account communications, support, two-factor authentication |
| Financial Data | JazzCash wallet number, EasyPaisa number, bank account details, transaction history | Deposits, withdrawals, AML compliance, fraud prevention |
| KYC Documentation | Scanned CNIC/passport copies, proof of address, selfie verification images | Regulatory identity verification obligation under gaming license |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Security monitoring, fraud detection, platform performance |
| Usage Data | Games played, bets placed, session duration, navigation paths within Platform | Platform improvement, responsible gaming monitoring, personalisation |
| Communications Data | Support chat transcripts, email correspondence content, feedback submissions | Quality assurance, dispute resolution, compliance record-keeping |
| Marketing Preferences | Opt-in/opt-out choices for promotional emails, SMS, and platform notifications | Sending relevant promotional content where consent has been given |
We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data beyond the facial image matching that may be part of CNIC-based KYC verification. Where such data is incidentally included in documents submitted for KYC, it is processed only to the extent required to complete verification.
The majority of the personal data 666cx holds about you is provided directly by you during account registration, KYC submission, deposit or withdrawal requests, customer support interactions, and when you voluntarily update your account profile. You are responsible for ensuring that information you provide to 666cx is accurate and up to date.
When you access the 666cx Platform, we automatically collect technical and usage data through server logs, cookies, and similar tracking technologies. This includes your IP address, device identifiers, browser characteristics, and records of your in-session activity on the Platform. This data is collected whether you are a registered user or a visitor browsing the Platform without an account.
We may receive data about you from third-party identity verification services used to conduct KYC checks, payment processors who confirm transaction details, and fraud prevention partners who flag suspicious activity patterns. Any data received from third parties is processed in accordance with this Policy and the applicable data sharing agreements with those parties.
666cx processes your personal data on the following legal bases:
666cx uses the personal data we collect for the following purposes:
666cx does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties strictly for the purposes described in this Policy:
To process deposits and withdrawals, 666cx shares necessary transaction data with payment service providers including JazzCash, EasyPaisa, and partner banks. These providers process data solely for the purpose of executing the requested transaction and are bound by their own privacy and data security obligations.
Third-party KYC and identity verification services may process your identity documents and personal data on our behalf to complete the verification required by our gaming license. These providers operate under strict data processing agreements with 666cx.
666cx may be required to disclose personal data to the licensing authority that issued our gaming license, anti-money laundering authorities, or other regulatory bodies where disclosure is legally mandated. We will only provide the minimum data required to fulfil such obligations.
We may share technical and transaction data with fraud detection and cybersecurity service providers to protect the integrity of the Platform and all users on it. These providers do not use the data for any purpose other than the service they provide to 666cx.
In the event of a merger, acquisition, restructuring, or sale of all or part of 666cx's business, personal data may be transferred to the acquiring entity as part of the transaction. Users will be notified of any such transfer and of any material changes to how their data is processed as a result.
666cx operates as an internationally licensed platform. Some of the third-party service providers with whom we share data may be located outside Pakistan. Where personal data is transferred internationally, 666cx ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.
Safeguards for international data transfers may include data processing agreements containing standard contractual clauses, adequacy decisions, or other legally recognised transfer mechanisms. If you would like more information about the safeguards applicable to a specific international transfer, please contact [email protected]
666cx retains personal data for the period necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, and licensing retention requirements. The following general retention periods apply:
When personal data is no longer required for its original purpose and no legal obligation requires its retention, 666cx will securely delete or anonymise it in accordance with our internal data lifecycle procedures.
The 666cx Platform uses cookies and similar technologies including local storage and session tokens to operate key platform functions, maintain your login session, detect fraud, and collect analytics data that helps us improve the Platform experience.
You can control and delete cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your 666cx account and using real-money Platform features. 666cx does not use third-party advertising cookies or behavioural targeting technologies that track you across websites other than 666cx.club.
Subject to applicable data protection law and the limitations imposed by our regulatory obligations, you have the following rights in relation to your personal data held by 666cx:
Request a copy of the personal data 666cx holds about you, along with information about how it is used and shared.
Request correction of inaccurate personal data or completion of incomplete data held on your 666cx account.
Request deletion of your personal data where there is no compelling reason for its continued processing. Note that regulatory retention obligations may prevent full erasure in some cases.
Request that 666cx restricts the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested.
Receive a structured, machine-readable copy of the personal data you provided to 666cx, where technically feasible and where processing is based on consent or contract.
Object to processing of your personal data where 666cx relies on legitimate interests as the legal basis, including objecting to direct marketing at any time.
To exercise any of these rights, please contact 666cx by emailing [email protected] with the subject line "Data Rights Request" and your registered account details. We will respond within thirty (30) calendar days. Where a request is complex or numerous, we may extend this period by a further two months and will inform you of the extension.
666cx implements a comprehensive range of technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include:
Despite these measures, no digital system can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 666cx will notify affected users without undue delay and will take all reasonable steps to contain and mitigate the breach.
The 666cx Platform is strictly for individuals aged 21 years and older. 666cx does not knowingly collect personal data from persons under the age of 21. If 666cx becomes aware that it has collected personal data from a person under 21, that account will be immediately suspended and the personal data will be deleted from our systems, subject to any overriding legal obligation to retain evidence of the breach.
If you believe that a person under 21 has registered an account with 666cx, please contact us immediately at [email protected] so that appropriate action can be taken promptly.
With your consent, 666cx may send you promotional communications about bonuses, new games, PSL cricket betting promotions, deposit offers, and other 666cx services via email, SMS, or in-platform notification. Marketing communications are sent only where you have opted in to receive them during registration or via your account notification settings.
You may withdraw your consent to marketing communications at any time by:
Withdrawal of marketing consent does not affect the delivery of transactional communications that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, and security alerts.
666cx reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect how your personal data is used or your rights in relation to it — we will notify you in advance via the email address registered to your account or via a prominent in-Platform notification. Non-material updates, such as clarifications that do not change the substance of our processing activities, may be made without individual notification.
The version of the Privacy Policy published on the Platform at any given time is the current, operative version. The effective date at the top of this document reflects when the current version came into force. We recommend reviewing this Policy periodically.
For all privacy-related inquiries, data rights requests, or complaints about how 666cx handles your personal data, please contact us using the following details:
If you are unsatisfied with 666cx's response to a privacy complaint, you may have the right to escalate the matter to the data protection authority in your jurisdiction or to the dispute resolution body specified under our gaming license. Details of applicable escalation routes are available from the 666cx support team upon request.
Our support team is available 24/7 to handle privacy inquiries, data requests, and any account questions. You can also review our full Terms and Conditions or Responsible Gaming page.
21+ only. Please gamble responsibly. 666cx is operated under an international gaming license.