Data Privacy & Security

666x Privacy Policy — How We Protect
Your Personal Data in Pakistan

At 666x we take the privacy of Pakistani members seriously. This policy explains what data we collect, why we collect it, how we protect it and what rights you have over your own information.

Last Updated: January 2025
Data We Collect
Name, mobile number, CNIC, payment method details and platform activity logs.
How We Protect It
256-bit SSL encryption, PCI-DSS compliant payment gateways, segregated data storage.
Your Rights
Access, correction, deletion and data portability rights available to all 666x members.
Who We Share With
Only essential payment processors and identity verification providers, never sold to advertisers.
666x
666x — Trusted by Pakistani Members Across Lahore, Karachi, Islamabad and Beyond
01
Who We Are

666x operates the online sports betting and gaming platform at 666x.cash ("the Platform"), serving registered members primarily based in Pakistan. In the context of this Privacy Policy, "666x", "we", "us" and "our" refer to the operator of the Platform.

This Privacy Policy explains how 666x collects, processes, stores and protects personal data relating to individuals who register an account, visit the Platform or interact with any 666x service. It applies to all members, including those located in Pakistan, and any visitor to 666x.cash regardless of whether they hold a registered account.

By registering a 666x account or using any part of the Platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your data as described here. If you do not agree, please do not register or continue using the Platform.

Plain English summary: We collect personal information to run your account, process your payments and keep the Platform safe. We do not sell your data to advertisers or third parties for marketing purposes. We protect everything with strong encryption and only share data where it is strictly necessary to operate the service for you.


02
What Data We Collect

666x collects personal data in two main ways — information you provide directly when you register and use the Platform, and information collected automatically through your use of the service.

Information you provide directly:

  • Full name as it appears on your CNIC
  • Pakistani mobile phone number (used as your primary identifier and for OTP authentication)
  • Date of birth (to verify you are aged 18 or above)
  • CNIC number and, where verification is required, a copy of your CNIC
  • Email address, if provided during registration or support contact
  • Payment method details — for Easypaisa and JazzCash this is your registered mobile number; for bank transfers this is your IBAN; for cards this is your card's last four digits only (full card details are handled by our PCI-DSS compliant payment gateway)
  • Any information you voluntarily provide to our support team via chat or email

Information collected automatically:

  • Device information including device type, operating system version and browser type
  • IP address and approximate location derived from it
  • Platform activity logs including login times, pages visited, bets placed, games played and deposit and withdrawal history
  • Session duration and click behaviour used to improve the Platform experience
  • Cookies and similar tracking technologies — detailed in Section 5

03
Why We Collect and Use Your Data

Every piece of data 666x collects serves a specific operational purpose. We do not collect data speculatively. The following table outlines the primary reasons your data is used:

Purpose Data Used Legal Basis
Account creation & managementName, mobile, date of birth, CNICContract performance
Age & identity verificationCNIC number and copyLegal obligation
Processing deposits & withdrawalsPayment method details, transaction recordsContract performance
Fraud & AML monitoringTransaction patterns, device data, IPLegal obligation
Responsible gaming toolsActivity logs, deposit history, session dataLegitimate interest
Customer supportAccount details, correspondenceContract performance
Platform improvementAggregated usage data (anonymised)Legitimate interest
OTP authenticationRegistered mobile numberSecurity / contract

We do not use your personal data to build advertising profiles or share it with third parties for marketing purposes. Any promotional communication from 666x about bonuses and offers is sent only to registered members who have not opted out of such communications, and solely from 666x itself.


04
Payments and Financial Data

Financial data requires particular care and 666x applies additional protections to all payment-related information.

  • Card data: 666x does not store your full card number, expiry date or CVV on our servers at any point. Card transactions are processed entirely by our PCI-DSS Level 1 certified payment gateway. We receive and store only a tokenised reference and the last four digits of your card number.
  • Easypaisa and JazzCash: Your mobile wallet number is stored in encrypted form linked to your 666x account. It is used solely for processing deposits and withdrawals and is never shared with any party other than the mobile wallet provider for transaction execution.
  • IBFT bank transfers: Your IBAN is stored in encrypted form and used only for processing withdrawal payments to your registered bank account.
  • Transaction records: Your full deposit and withdrawal history is retained for compliance, anti-money-laundering monitoring and dispute resolution purposes. These records are accessible to you at any time via your account dashboard.

Your payment data is never sold. Financial information linked to your 666x account is used solely to operate your account and comply with legal obligations. It is never monetised, shared with advertisers or used for any purpose beyond what is stated in this policy.


666x
666x — Your Data is Protected Every Step of the Way
05
Cookies and Device Data

666x uses cookies and similar local storage technologies on the Platform for the following purposes:

  • Essential session cookies: Required to keep you logged in and maintain your session state as you navigate between pages. Without these the Platform cannot function.
  • Security cookies: Used to identify your device for fraud prevention and to trigger additional authentication if login is attempted from an unrecognised device.
  • Preference cookies: Store your Platform settings such as language preference, timezone and display options so you do not need to set these again on each visit.
  • Analytics cookies: Collect anonymised data about how pages are used — which sections are most visited, where users encounter errors, how navigation flows work — to help us improve the Platform. This data is aggregated and does not identify you personally.

666x does not use third-party advertising cookies or tracking pixels that report your 666x activity to external advertising networks. You can manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to log in and use core Platform features.


06
Who We Share Your Data With

666x shares your personal data only where strictly necessary for operation of the Platform, and only with carefully selected partners bound by confidentiality obligations. We do not sell your data.

  • Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, the IBFT network and our card processing gateway receive the minimum data required to execute each transaction. These providers have their own privacy policies governing their handling of your data.
  • Identity verification providers: Where KYC verification is required, a certified third-party identity verification service may process your CNIC details. This occurs only when verification is triggered and the data is not retained by the provider beyond the verification process.
  • Anti-fraud and AML services: Transaction monitoring systems may process anonymised behavioural data to identify suspicious patterns. No personally identifying information is shared with these systems beyond what is operationally necessary.
  • Legal authorities: 666x will disclose member data to law enforcement, regulatory bodies or courts when legally required to do so. We do not disclose data in response to informal requests without formal legal process.
  • Platform infrastructure providers: Hosting, database and CDN providers who support the technical operation of 666x.cash are bound by contractual data processing agreements and are only permitted to process data as directed by 666x.

No advertising networks, no data brokers. 666x does not share member data with marketing agencies, data brokers, social media platforms or any organisation that would use your information for advertising or profiling purposes unrelated to your 666x account.


666x
666x — Mobile-First Payments Secured at Every Layer
07
How Long We Keep Your Data

666x retains personal data only for as long as necessary to fulfil the purpose for which it was collected, subject to any legal obligations that require longer retention.

  • Active account data: Retained for the lifetime of your account. If your account is closed at your request, account data is retained for a minimum of five years for anti-money-laundering compliance purposes.
  • Transaction records: Financial transaction records are retained for a minimum of five years from the date of each transaction.
  • Identity verification documents: CNIC copies submitted for verification are retained for five years from the date of submission in compliance with applicable regulatory requirements.
  • Support correspondence: Records of support communications are retained for two years from the date of the interaction.
  • Analytics data: Aggregated and anonymised usage data may be retained indefinitely as it does not constitute personal data once anonymised.

When data no longer needs to be retained, 666x securely deletes or anonymises it in accordance with our internal data deletion procedures.


08
Security Measures

666x employs multiple layers of security to protect member data from unauthorised access, disclosure, alteration or destruction.

  • Transport encryption: All data transmitted between your device and 666x servers is encrypted using TLS 1.2 or higher (256-bit encryption), the same standard used by Pakistani banks and major financial institutions.
  • Storage encryption: Sensitive fields in our databases, including CNIC numbers, payment method identifiers and authentication credentials, are encrypted at rest.
  • Access controls: Internal access to member data is restricted on a strict need-to-know basis. Support staff see only the minimum data required to resolve your specific query. Database access requires multi-factor authentication.
  • PCI-DSS compliance: Our card payment infrastructure is maintained by a PCI-DSS Level 1 certified provider. Card data never passes through 666x servers.
  • OTP verification: Withdrawals and sensitive account changes require OTP confirmation to your registered mobile number, preventing unauthorised transactions even if your login credentials are compromised.
  • Intrusion detection: Automated monitoring systems flag unusual access patterns and suspicious activity in real time for immediate investigation.

While 666x implements extensive security measures, no system is entirely immune to breaches. In the event of a data security incident that poses a risk to your rights, we will notify affected members promptly and take immediate steps to contain and remediate the issue.


09
Your Rights Over Your Personal Data

As a 666x member you have the following rights regarding the personal data we hold about you. To exercise any of these rights, contact us at support@666x.cash.

You may request a copy of all personal data 666x holds about you at any time. We will provide this within 30 days of your verified request. Transaction history is also accessible directly in your account dashboard at any time without needing to submit a formal request.

If any personal data 666x holds about you is inaccurate, you have the right to request correction. Some fields — such as your registered name or CNIC — can only be corrected after submitting supporting documentation to verify the correct information, to protect against fraud.

You may request deletion of your personal data when it is no longer necessary for the purposes it was collected. Note that 666x is required to retain certain financial and identity data for a minimum period under applicable regulations — deletion requests for data subject to these retention obligations will be carried out at the end of the applicable retention period rather than immediately.

You may request a copy of your data in a structured, machine-readable format. This allows you to take your data to another service provider if you wish. We will provide this within 30 days of a verified request.

Where processing is based on legitimate interest rather than legal obligation or contract performance, you may object to that processing. If you object to receiving promotional communications from 666x, you can opt out at any time by contacting support@666x.cash or using the unsubscribe option in any marketing message.

10
Minors and Data Protection

666x does not knowingly collect personal data from any person under the age of 18. The Platform is strictly for adults. Age verification is part of the registration and withdrawal process at 666x specifically to prevent underage users from accessing or using the service.

If 666x becomes aware that personal data has been collected from a minor, that account will be closed immediately and all collected data will be deleted from our systems as promptly as technically possible, subject to any legal obligations to report the matter to relevant authorities.

If you are a parent or guardian and believe your child has registered an account at 666x, please contact us immediately at support@666x.cash with details. We will investigate and take action within 24 hours of receiving your report.


11
Changes to This Privacy Policy

666x may update this Privacy Policy from time to time to reflect changes in our operations, legal requirements or the services we offer. When material changes are made, we will notify registered members via their registered mobile number or email address at least 7 days before the changes take effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this policy periodically to stay informed about how 666x protects your personal data. Continued use of the Platform after changes take effect constitutes acceptance of the revised policy.


12
Contact Us About Privacy

For any questions about this Privacy Policy, to exercise your data rights or to report a privacy concern, please contact the 666x privacy team.

Email: support@666x.cash
Subject line: Privacy Request — [your account username]
Response time: Within 2 business days for privacy requests; within 30 days for formal data access requests.

Please include your registered mobile number or username in any privacy-related correspondence so we can locate your account and respond accurately. We will never ask for your password in any communication about privacy matters.

Six Ways 666x Protects Your Privacy Every Day

No Card Data Stored
When you deposit at 666x via Visa or Mastercard, your full card details go directly to our PCI-DSS certified payment gateway. They never pass through or sit on 666x servers. We see only your card's last four digits and a transaction reference — nothing that could be used to make charges on your behalf.
Never Sold to Advertisers
Your name, mobile number, betting history and transaction data are never sold or licensed to advertising networks, data brokers or marketing agencies. We generate revenue through platform activity, not by monetising member data. This is a hard rule at 666x, not a marketing claim.
OTP Protection on Every Withdrawal
Every withdrawal request from your 666x account requires an OTP to your registered Pakistani mobile number. Even if someone knows your password, they cannot move your money without access to your registered SIM card. This single layer stops the vast majority of account takeover attempts.
Minimal Internal Access
666x operates a strict need-to-know data access policy internally. A support agent helping you with a deposit query sees your account balance and recent transactions. They do not see your CNIC number, full payment details or any data irrelevant to your support issue. Access requires MFA at all levels.
Anonymous Analytics Only
We use platform usage data to improve 666x — understanding which pages load slowly, where navigation confuses users, how live in-play betting performs during PSL matches. All of this is processed in aggregated, anonymised form. Individual member identities are never linked to analytics data.
Your Data Rights, Always Active
Access, correction, deletion and portability rights are available to every 666x member at any time. You do not need to justify your request. Contact support@666x.cash with your username and the type of request — we will handle it within 30 days and confirm completion in writing.

Privacy at 666x — What It Means for Pakistani Members

Privacy is not a legal checkbox for 666x. It is a practical commitment that shapes how the platform is built and how it handles your information. For Pakistani users specifically, where data security concerns are very real and where trust in online platforms has to be earned, we understand that a clear, honest privacy policy matters as much as competitive odds or fast withdrawal times.

The most common concern we hear from Pakistani members is about payment data — specifically, what happens to Easypaisa or JazzCash account information after it is submitted to 666x. The answer is direct: your wallet number is stored in encrypted form in your 666x account profile and is used for nothing beyond processing your deposits and withdrawals. It is not shared with third parties except the wallet provider itself to execute transactions. It is not used to analyse your behaviour for advertising purposes. And it is never combined with other information to build a marketing profile. Your mobile wallet number is a payment tool at 666x, nothing more.

The situation with card data is even more locked down. When you pay by Visa or Mastercard on 666x, the actual card transaction does not flow through 666x infrastructure at all. It goes directly to our payment gateway, which is certified to the highest standard in the card payment industry — PCI-DSS Level 1. We receive a tokenised transaction reference and your card's last four digits. That is all. There is nothing on 666x servers that could be used to make an unauthorised charge to your card even in the hypothetical scenario of a breach on our side.

The OTP requirement on withdrawals deserves emphasis because it is the most effective protection available to your account. Every single withdrawal from your 666x balance, regardless of amount or method, requires confirmation via a one-time code sent to your registered Pakistani mobile number. This means that account access through stolen credentials alone is not sufficient to move your money. Without the OTP, the withdrawal cannot proceed. This design choice was deliberate and reflects how seriously 666x takes the protection of member funds — not just member data.

Your data rights under this policy are genuine and unconditional. If you want to know what data 666x holds about you, email support@666x.cash with your username and a request for a data access summary. We will compile and send everything within 30 days. If you want specific data corrected, updated or deleted, the same process applies. The only limitation is on data we are legally required to retain — financial records and identity verification documents linked to anti-money-laundering obligations — and we will tell you clearly if a deletion request falls into that category and what the retention timeline is. No runaround, no vague policy language to hide behind.

If you have any question about your privacy at 666x that this policy does not answer, support@666x.cash is the right place to send it. Privacy queries are handled by team members with actual knowledge of our data processes, not forwarded to a generic inbox. We respond within two business days for privacy questions and within the legally required timeframe for formal data access requests.

Your Data is Safe at 666x — Register with Confidence

Open your account in under 2 minutes. Deposit from Rs 500 via Easypaisa or JazzCash. Your data, your privacy, protected at every step.