666sx Privacy
Policy

666sx is an online gaming and sports betting platform accessible at 666sx.org. For the purposes of this Privacy Policy, 666sx acts as the data controller — the entity that determines the purposes and means of processing your personal data.

666sx operates under an international gaming license. Our platform provides services including sports betting (cricket, PSL, table tennis, and other markets), live casino, slot games, crash games, and related gaming products. We serve players from Pakistan and other permitted territories around the world.

When this policy refers to "666sx", "we", "us", or "our", it refers to the 666sx platform and its operating entity. When it refers to "you" or "your", it refers to the registered or prospective user of the 666sx platform.

666sx collects different categories of personal data depending on your level of interaction with the platform. The following table provides a structured breakdown of data categories, specific data types collected within each category, and the primary purpose of collection.

666sx does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data beyond what is strictly necessary for identity verification (i.e., a selfie photo matched against a government ID).

666sx collects personal data through several distinct channels, each of which is described below:

• Direct collection during registration: When you create a 666sx Account, you actively provide identity data, contact data, and optionally payment preferences. This is the primary source of personal data for all registered players.
• KYC submission: When you initiate your first withdrawal or when triggered by a compliance review, you upload identity documents directly through the 666sx Account dashboard. These are transmitted to our KYC verification partner over an encrypted connection.
• Automatic technical collection: When you browse or interact with 666sx.org, our platform automatically records technical data including your IP address, browser fingerprint, session timestamps, and navigation patterns. This collection begins before registration and continues throughout your use of the platform.
• Payment processing: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or any crypto method, transaction metadata is recorded by 666sx's payment system. Full card or bank account numbers are not stored by 666sx — only tokenised or partial references.
• Support interactions: When you contact 666sx via live chat or email, the content of that communication is recorded and stored as part of your support history and compliance record.
• Cookies and tracking technologies: 666sx uses cookies and similar technologies as described fully in Section 9 of this Privacy Policy.

666sx processes your personal data for the following specific purposes. Each purpose is tied to a legal basis described in Section 5.

• Account creation and management: To register, maintain, and administer your 666sx Account, including processing deposits, recording bets, and managing withdrawals.
• Identity and age verification: To confirm that you are who you say you are and that you are at least 21 years of age, in compliance with our licensing obligations and responsible gaming commitments.
• Payment processing: To facilitate deposits and withdrawals via your selected payment methods, including JazzCash, EasyPaisa, crypto wallets, and bank transfers.
• Anti-money laundering (AML) compliance: To monitor transactions for suspicious patterns, report large or unusual transactions as required by law, and maintain records required by our licensing authority.
• Fraud detection and prevention: To identify and block fraudulent activity including multi-accounting, payment fraud, bonus abuse, and use of prohibited circumvention tools.
• Responsible gaming monitoring: To track gaming activity patterns that may indicate problem gambling, to apply player-set limits, and to enforce self-exclusion decisions.
• Platform operation and improvement: To maintain and improve the 666sx platform, resolve technical issues, and analyse aggregate usage data to enhance the user experience.
• Customer support: To respond to your queries, resolve disputes, and maintain records of support interactions for quality assurance and compliance purposes.
• Legal compliance: To fulfil obligations under our international gaming license and any applicable laws in our operating jurisdiction, including data retention requirements.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates by email — but only where you have given explicit consent or where a legitimate interest applies. You may opt out of marketing at any time via your Account Settings or by contacting support.

Every data processing activity conducted by 666sx is grounded in one or more of the following legal bases:

• Contractual necessity: Processing your identity, contact, financial, and gaming activity data is necessary to perform our contract with you — that is, to provide you with a functioning betting and gaming account. Without this processing, 666sx cannot deliver its services.
• Legal obligation: KYC verification, AML monitoring, transaction record-keeping, and age verification are required by 666sx's gaming license and applicable anti-money laundering regulations. This processing is mandatory and cannot be opted out of while holding an active account.
• Legitimate interests: Fraud detection, platform security monitoring, and aggregate analytics are conducted on the basis of 666sx's legitimate interest in operating a secure, commercially viable platform. These interests have been assessed and are not overridden by your privacy rights.
• Consent: Marketing communications and non-essential cookies are processed only where you have given clear, informed consent. Consent can be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

666sx does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Your personal data is shared only in the specific circumstances described below:

• KYC verification providers: Identity documents and biometric data (selfie photos) are transmitted to 666sx's licensed KYC verification partner for automated identity matching. This partner is bound by strict data processing agreements and may not use your data for any purpose other than identity verification on behalf of 666sx.
• Payment processors: Transaction data is shared with JazzCash, EasyPaisa, banking partners, and cryptocurrency payment processors as necessary to execute your deposits and withdrawals. Each payment provider operates under its own privacy policy and is subject to applicable financial regulations.
• Game software providers: Your player ID and bet data may be transmitted to third-party game providers (slot, live casino, crash game providers) to operate the game you are playing. These providers act as data processors under 666sx's instructions and cannot independently access or use your full personal profile.
• Regulatory and law enforcement authorities: 666sx will disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, or courts when required by law, court order, or regulatory mandate. Such disclosures are made only to the extent required and logged in our compliance records.
• Fraud prevention networks: Fraud-related data (device fingerprints, flagged account data) may be shared with industry-standard fraud prevention services to protect 666sx and its player community from organised fraud and multi-accounting.
• Professional advisors: Lawyers, auditors, and compliance consultants engaged by 666sx may access limited personal data in the course of providing professional services. These parties are bound by professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of 666sx's business assets, your personal data may be transferred to the acquirer as part of the transaction. You will be notified of any such transfer and your rights thereunder.

666sx accepts cryptocurrency deposits and withdrawals including Bitcoin (BTC), USDT (TRC-20 and ERC-20), and Ethereum (ETH). Players who prefer crypto payments for privacy reasons should be aware of the following important considerations regarding how 666sx handles crypto transaction data:

• Wallet address recording: All crypto wallet addresses used for deposits and withdrawals on 666sx are recorded as part of your account's financial history. This is required for AML compliance, withdrawal matching, and dispute resolution purposes.
• Blockchain transparency: Cryptocurrency transactions are recorded on public blockchains. While 666sx does not publish your wallet address, the transaction itself is publicly visible on the blockchain to anyone with the relevant wallet address. 666sx is not responsible for blockchain-level transaction visibility.
• AML screening: Crypto wallet addresses may be screened through blockchain analytics tools to check for associations with sanctioned entities, known illicit wallets, or other risk indicators. This is a mandatory compliance requirement under our gaming license.
• No crypto mixing or tumbling: The use of cryptocurrency mixing, tumbling, or other obfuscation services in connection with 666sx deposits or withdrawals is prohibited and will result in account suspension and regulatory reporting.

For Pakistani players using USDT via JazzCash or EasyPaisa integration channels, the same payment data handling principles apply as for all other payment methods — data is used only for transaction processing and compliance, and is not shared beyond the processors involved in executing your transaction.

Know Your Customer (KYC) verification is a mandatory process for all 666sx Account holders prior to processing a first withdrawal or upon request by our compliance team. The KYC process involves collecting, transmitting, and retaining identity documents and biometric confirmation.

The documents typically required for 666sx KYC verification include:

• A clear photograph or scan of a government-issued photo ID (Pakistani National Identity Card / CNIC, passport, or driving licence)
• A recent selfie or live photo holding the ID document, for biometric matching purposes
• Proof of residential address (utility bill, bank statement, or similar document issued within the past 3 months)
• Proof of payment method ownership (where requested, e.g., a screenshot of your JazzCash wallet showing your registered name)

KYC documents are transmitted over encrypted connections to 666sx's licensed verification partner. Copies are retained in accordance with the data retention schedule described in Section 10. 666sx employees do not have unrestricted access to raw KYC document images — access is limited to specifically authorised compliance personnel on a need-to-know basis.

666sx uses cookies and similar technologies to operate the platform and improve your experience. The following categories of cookies are used on 666sx.org:

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent core platform functionality from working correctly, including the ability to log in. Analytics and functional cookies can be disabled without affecting basic platform access.

666sx does not use third-party advertising cookies or allow advertising networks to place tracking cookies on 666sx.org. The analytics data collected is used solely for internal platform improvement purposes and is not shared with external analytics platforms in a way that identifies individual users.

666sx retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law and our licensing obligations. The following retention guidelines apply:

• Active Account data: Retained for the full duration of your 666sx Account, plus a minimum of five (5) years after account closure, in accordance with standard AML and gaming regulation requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of verification or date of account closure, whichever is later. In some jurisdictions, longer retention may be required.
• Financial transaction records: Retained for a minimum of five (5) years for AML compliance purposes, consistent with international financial record-keeping standards.
• Support and communication records: Retained for three (3) years from the date of the interaction, except where a dispute or legal claim necessitates longer retention.
• Technical / log data: Retained for up to twelve (12) months for security and fraud monitoring purposes, after which it is anonymised or deleted.
• Marketing consent records: Retained for as long as your consent is active, plus three (3) years thereafter as evidence of consent, in accordance with applicable regulations.

When personal data is no longer required, 666sx applies secure deletion or anonymisation procedures, ensuring that data cannot be reconstructed or re-identified after the retention period has expired.

666sx takes the security of your personal data very seriously and implements technical and organisational measures appropriate to the risk level of the data concerned. These measures include:

• TLS encryption in transit: All data transmitted between your browser and 666sx servers is encrypted using TLS 1.2 or higher. This applies to login credentials, KYC document uploads, payment transactions, and all other data exchanges.
• Encryption at rest: Sensitive personal data stored in 666sx's databases — including KYC document references, payment method data, and account credentials — is encrypted at rest using AES-256 or equivalent standards.
• Access controls: Access to personal data systems is restricted to specifically authorised 666sx personnel and contractors. All access is logged and audited. Employees receive mandatory data protection training.
• Two-factor authentication: 666sx offers 2FA to all players to protect account access. Internal administrative systems require 2FA for all staff.
• Penetration testing and security audits: 666sx's platform undergoes regular security assessments by independent third-party security firms. Critical vulnerabilities are patched within defined remediation timelines.
• Incident response: 666sx maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights, 666sx will notify affected players promptly and report to the relevant regulatory authority as required.

As a 666sx user, you hold the following rights with respect to your personal data. To exercise any of these rights, contact 666sx support at [email protected] with the subject line "Data Rights Request". We will respond within 30 days and may request identity verification before processing your request.

666sx's services are strictly for adults aged 21 and over. We do not knowingly collect personal data from any person under the age of 21. If we discover that personal data belonging to a minor has been submitted to 666sx — whether through deliberate misrepresentation or otherwise — that account will be immediately closed, all associated funds returned to the originating payment method, and all collected data permanently deleted.

If you are a parent or guardian and believe that a minor may have created a 666sx Account using false age information, please contact us immediately at [email protected]. We will investigate and act within 24 hours of receiving a verified report. 666sx cooperates fully with any regulatory inquiry into suspected underage gambling.

666sx operates internationally. Your personal data may be transferred to, stored in, and processed in countries outside of Pakistan, including the country in which our servers are hosted and the countries in which our KYC verification, payment processing, and game software partners operate.

Where personal data is transferred outside of Pakistan or a user's home jurisdiction, 666sx takes steps to ensure that appropriate safeguards are in place, including:

• Standard contractual clauses incorporated into agreements with data processors in third countries.
• Transfers to recipients in countries that have been assessed as providing an adequate level of data protection.
• Binding corporate rules where applicable to transfers within the 666sx corporate group.

By registering a 666sx Account and accepting this Privacy Policy, you acknowledge and consent to the international transfer of your personal data as described in this section. If you have concerns about cross-border data transfers, contact our support team before registering.

666sx reserves the right to update or revise this Privacy Policy at any time. The most current version will always be published at 666sx.org/privacy-policy, and the "Last Updated" date at the top of this page will reflect the date of the most recent revision.

For material changes — those that significantly affect how we collect, use, or share your personal data — 666sx will notify registered users via email to the address on file, or through a prominent in-platform notice visible upon your next login. It is your responsibility to keep your registered email address current so that you receive these notifications.

Your continued use of the 666sx platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any change to this policy, you must close your account before the effective date of the revision.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 666sx handles your personal data, please reach out through the following channels. All privacy-related queries are handled by our compliance and support team:

• Live Chat: Available 24/7 in English and Urdu via the support widget on 666sx.org. For privacy-sensitive matters, please request to speak with a compliance team member.
• Email: [email protected] — please use the subject line "Privacy Policy Query" or "Data Rights Request" so your message is routed to the correct team.

We aim to acknowledge all privacy-related correspondence within 24 hours and to provide a substantive response within five (5) business days. For formal data subject access requests, the response window is up to thirty (30) days from receipt of a verified request.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction, or to the dispute resolution body affiliated with 666sx's gaming license as described in our Terms & Conditions.