Privacy Policy

1Introduction

XP666 ("xp666", "Platform", "we", "us", "our"), operating at https://xp666.cam, is an English-language online casino and sports betting information platform serving Pakistani users, including players in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. We understand that your personal data is important to you, and we are committed to handling it with transparency, care and in accordance with applicable data protection principles.

This Privacy Policy describes the categories of personal data we collect when you visit or use xp666, the purposes for which we process that data, the legal grounds on which we rely, the parties with whom data may be shared, your rights as a data subject and how you can exercise those rights.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not accept the terms of this Policy, please discontinue use of the Platform immediately.

2Definitions

For the purposes of this Privacy Policy, the following definitions apply:

3Data Controller

The Data Controller responsible for your personal data collected through the xp666 Platform is the operator of https://xp666.cam. Queries regarding the identity of the data controller or the applicable data protection registration may be directed to our support team at [email protected].

XP666 does not hold a Pakistan gambling licence and does not claim to be regulated by the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan or any Pakistani provincial authority. Data protection obligations are governed by the applicable laws of the jurisdiction in which the operator is registered and licensed.

4Data We Collect

XP666 collects personal data in the following categories, depending on how you interact with the Platform:

4.1 Registration and Account Data

4.2 Usage and Technical Data

When you browse or use xp666, we automatically collect certain technical data through our servers and analytics systems:

• IP address, approximate geographic location (country, city level)
• Device type, operating system and browser version
• Pages visited, time spent on pages, navigation paths and interaction events
• Referral source (how you arrived at xp666)
• Session timestamps and duration
• Error logs and crash reports

4.3 Communications Data

When you contact our support team via live chat or email at [email protected], we collect and retain a record of the communication including the content of your message, the date and time, and any information you voluntarily provide within the communication.

4.4 Data We Do Not Collect

XP666 does not knowingly collect sensitive special-category personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data or health data unless strictly required for a specific legal compliance purpose and with appropriate legal basis.

5Data Processing

We process personal data collected through xp666 for the following purposes:

• Account Administration: Creating, maintaining and operating your xp666 account, including authentication, profile management and account correspondence.
• Identity Verification (KYC): Verifying your identity and age eligibility in compliance with applicable operator obligations prior to processing withdrawals or activating certain features.
• Transaction Processing: Processing deposits, withdrawals and maintaining accurate financial records of your account activity, including PKR-denominated transaction histories.
• Customer Support: Responding to your queries, resolving disputes and providing account assistance through live chat and email.
• Platform Security and Fraud Prevention: Detecting, investigating and preventing fraudulent, abusive or unlawful activity on the Platform, including multi-account detection and bonus abuse monitoring.
• Legal and Regulatory Compliance: Meeting applicable legal and compliance obligations, including record-keeping, regulatory reporting and responding to lawful authority requests.
• Responsible Gambling: Monitoring account activity for indicators of problem gambling behaviour and administering responsible gambling tools including self-exclusion, deposit limits and loss limits.
• Platform Improvement: Analysing usage patterns, performance metrics and user behaviour to improve the xp666 Platform experience, content quality and technical performance.
• Communications: Sending account-related notifications, security alerts and, where you have consented, promotional communications regarding xp666 offers and updates.

6Legal Basis for Processing

XP666 relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you have accepted, including account management, KYC, transaction processing and customer support.
• Legal Obligation: Processing necessary to comply with applicable legal, regulatory or compliance obligations, including identity verification and financial record-keeping requirements imposed on the operator.
• Legitimate Interests: Processing for the purposes of fraud prevention, Platform security, abuse detection and Platform performance analysis, where these interests are not overridden by your data protection rights.
• Consent: Where processing is based on your consent — for example, for marketing communications — you may withdraw consent at any time by contacting us at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

7Data Sharing & Third Parties

XP666 does not sell, rent or trade your personal data to third parties for their own marketing purposes. We may share personal data only in the following limited and controlled circumstances:

• Service Providers and Data Processors: Trusted third-party vendors engaged to support Platform operations — including payment processors, identity verification services, cloud hosting providers, analytics platforms and customer support tools. These parties operate under written data processing agreements and are permitted to use your data only for the specific services they provide to xp666.
• Payment Channels: When you initiate a deposit or withdrawal, relevant transactional data is shared with the applicable payment channel provider to process the transaction. Payment provider names that may appear as contextual references on xp666 — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah — are mentioned for informational context only. None of these institutions is affiliated with xp666 or endorses gambling activities on this Platform.
• Legal and Regulatory Authorities: Where required by applicable law, court order or lawful authority directive, xp666 may disclose personal data to competent regulatory, governmental or law enforcement bodies.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of all or part of the xp666 business, personal data may be transferred to the acquiring entity subject to equivalent data protection commitments.
• Responsible Gambling Partners: In circumstances where a User's safety or welfare is of concern, limited data may be shared with recognised responsible gambling support organisations solely for the purpose of facilitating support interventions, and only with appropriate authority.

8Data Retention

XP666 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory or compliance obligations. The following general principles apply to our data retention practices:

• Active Account Data: Personal data associated with an active xp666 account is retained for the duration of the account and for a reasonable period following account closure as required for legal, audit or dispute resolution purposes.
• Transaction Records: Financial transaction data, including PKR-denominated deposit and withdrawal records, is retained for a minimum of five (5) years following the date of the transaction in compliance with applicable financial record-keeping obligations.
• KYC and Identity Documents: Identity verification documents are retained for the period required by the applicable operator licence obligations and anti-money laundering regulations, typically a minimum of five (5) years following account closure.
• Support Communications: Records of support interactions are retained for a period of three (3) years following the date of the communication, unless a longer retention period is required for dispute resolution or legal proceedings.
• Technical and Usage Data: Anonymised or aggregated technical and analytics data may be retained indefinitely for Platform performance and improvement purposes, as it no longer constitutes personal data once anonymised.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our internal data destruction procedures.

9Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device when you visit xp666. They enable the Platform to remember your preferences, maintain your session and collect analytical data about Platform usage. Cookies do not contain personally identifiable information on their own but may be associated with your account or IP address.

9.2 Types of Cookies We Use

9.3 Managing Cookies

You may control cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling essential cookies may impair the functionality of the Platform, including your ability to log in and use account features. Detailed instructions for managing cookies are available in your browser's help documentation.

10International Data Transfers

XP666 is operated by an international entity and your personal data may be transferred to, stored in or processed in countries outside of Pakistan. When personal data is transferred internationally, xp666 ensures that appropriate safeguards are in place to protect your data — including contractual protections between xp666 and its data processors, and adherence to applicable data protection requirements.

By using the Platform, you acknowledge that your data may be transferred and processed outside Pakistan. If you have questions about the safeguards applied to international data transfers, please contact us at [email protected].

11Data Security

XP666 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. Our security measures include, but are not limited to:

• Industry-standard SSL/TLS encryption for all data transmitted between your device and xp666 servers
• Encrypted storage of sensitive personal and financial data at rest
• Access controls ensuring that personal data is accessible only to authorised personnel with a legitimate operational need
• Regular security assessments and vulnerability monitoring of Platform infrastructure
• Secure handling and storage protocols for KYC identity documents
• Two-factor authentication options for account access

Despite these measures, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. XP666 cannot warrant absolute security of your data, and users should take reasonable precautions to protect their own account credentials and devices.

12User Rights

Subject to applicable data protection law and the operator's jurisdiction, you may hold the following rights with respect to your personal data processed by xp666. To exercise any of these rights, please submit a written request to [email protected].

We will respond to data rights requests within a reasonable timeframe in accordance with applicable requirements. Some requests may be subject to identity verification before processing. Where a request cannot be fulfilled due to overriding legal obligations — such as mandatory retention periods for financial data — we will advise you accordingly.

13Minors & Age Policy

XP666 does not knowingly collect personal data from persons under the age of 18, or the higher minimum age required in the applicable operator or license jurisdiction. The Platform is strictly for adult use only. Registration and use of xp666 by anyone below the applicable minimum age is prohibited.

Where xp666 becomes aware or has reasonable grounds to believe that personal data has been collected from an underage individual, that account will be immediately suspended, all related data will be reviewed and, where appropriate, erased, and any funds associated with the account may be withheld pending investigation.

If you are a parent or guardian and believe your minor child has registered on xp666, please contact us immediately at [email protected] so that we can take appropriate action without delay.

14Third-Party Links & Services

The xp666 Platform may contain contextual references to third-party services, including familiar Pakistani payment channels such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah. These references are provided for informational context only. XP666 does not control the privacy practices or data handling procedures of any third-party service and accepts no responsibility for their privacy policies or content.

Users who interact with third-party payment processors, support services or other external platforms do so subject to those parties' own privacy policies and terms of service. XP666 strongly encourages users to review the relevant privacy documentation of any third party before providing personal data.

15Amendments to This Policy

XP666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements or Platform functionality. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, provide notice to registered users via the Platform or by email.

We encourage you to review this Privacy Policy periodically. Continued use of xp666 following the posting of an updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms.

16Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or the handling of your personal data by xp666, please contact our Data Protection team using the following details: