xz666 Privacy Policy

01 About This Policy

This Policy applies to all personal data collected by xz666 in connection with the registration, operation, and use of the xz666 Platform, including the website at xz666.bet, any associated mobile-optimised interfaces, and all gaming, payment, and support services offered thereunder.

This Policy should be read in conjunction with the xz666 Terms & Conditions and Responsible Gaming Policy. Together, these documents form the complete agreement governing your relationship with xz666 as a registered player. In the event of any conflict between this Policy and any other document, this Privacy Policy shall prevail with respect to matters of personal data processing.

xz666 is committed to processing personal data in accordance with applicable data protection principles, including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

02 Data Controller

For the purposes of applicable data protection legislation, the data controller responsible for your personal data is xz666. As data controller, xz666 determines the purposes and means by which your personal data is processed. If you have any questions about how your data is being handled, or wish to exercise any of your data subject rights as described in this Policy, please contact our Data Protection team using the contact details provided in Section 14.

03 Data We Collect

xz666 collects personal data from you in a number of ways throughout your relationship with the Platform. The categories of personal data we collect include, but are not limited to, the following:

3.1 Registration Data

When you create an xz666 account, we collect the information you provide during the registration process, including:

• Full legal name;
• Date of birth (to verify that you are 21 years of age or older);
• Residential address (including city, province, and postal code);
• Email address;
• Mobile phone number;
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

As part of our regulatory Know Your Customer (KYC) obligations, we may collect copies of identity and address verification documents, including:

• Government-issued photo identification (CNIC, passport, or driving licence);
• Proof of residential address (utility bill, bank statement, or government correspondence dated within three months);
• Proof of payment method ownership (screenshot or front-of-card image where applicable);
• Source of funds documentation where required by our AML compliance programme.

3.3 Financial & Transaction Data

When you make a deposit or withdrawal on xz666, we collect transaction data including payment method type (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20), transaction amounts in PKR or USDT equivalent, transaction timestamps, and relevant payment reference identifiers. xz666 does not store full bank account numbers or card numbers on its servers.

3.4 Gaming & Behavioural Data

We collect data about your activity on the xz666 Platform, including games played, bets placed, wagering amounts, game outcomes, session durations, and betting patterns. This data is used for account management, responsible gaming monitoring, fraud prevention, and service improvement purposes.

3.5 Technical & Device Data

When you access xz666, we automatically collect certain technical data about your device and connection, including:

• IP address and approximate geographic location derived therefrom;
• Device type, operating system, and browser type and version;
• Session timestamps, pages visited, and navigation patterns;
• Referral source (where applicable).

3.6 Communications Data

If you contact xz666 via live chat, email, or any other support channel, we retain records of those communications, including the content of messages, timestamps, and any attachments provided. These records are used to resolve disputes, improve support quality, and maintain compliance records.

04 How We Use Your Data

xz666 uses the personal data it collects for the following purposes:

xz666 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or where otherwise required or permitted by applicable law.

05 Legal Basis for Processing

xz666 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing that is necessary for the performance of the contract between you and xz666, including account registration, payment processing, and the provision of gaming services.
• Legal obligation: Processing that xz666 is required to carry out in order to comply with applicable laws and regulations, including AML obligations, KYC requirements, and regulatory reporting duties.
• Legitimate interests: Processing carried out to pursue xz666's legitimate business interests, including fraud prevention, security monitoring, responsible gaming enforcement, and platform analytics, provided such interests are not overridden by your fundamental rights.
• Consent: Where xz666 relies on your consent as the legal basis for processing — most notably for the sending of marketing communications — you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

06 Data Sharing & Disclosure

xz666 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data may be shared with the following categories of third parties strictly on a need-to-know basis:

6.1 Payment Service Providers

To process your deposits and withdrawals, xz666 shares relevant transaction data with regulated payment processors including JazzCash, EasyPaisa, designated banking partners (HBL, UBL, Allied Bank, Meezan Bank), SadaPay, and USDT blockchain network facilitators. Each of these providers operates under its own data protection obligations.

6.2 Identity Verification Providers

xz666 works with third-party KYC and identity verification service providers to validate the identity documents and information you submit. These providers are contractually bound to process your data only for verification purposes and in accordance with applicable data protection standards.

6.3 Gaming Software Providers

Some xz666 games are powered by third-party certified gaming software providers. These providers may receive anonymised or pseudonymised gameplay data necessary for game operation, RNG certification, and technical support. They do not receive your full personal registration details.

6.4 Regulatory & Law Enforcement Authorities

xz666 may be required to disclose personal data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required by applicable law, court order, or regulatory direction. Such disclosures will always be made in compliance with applicable legal requirements and will be limited to the minimum data necessary.

6.5 Business Transfers

In the event of a merger, acquisition, asset sale, or other business transfer involving xz666, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change in data controller via a prominent notice on the Platform.

07 Data Retention

xz666 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Active account data: Retained for the full duration of your registered account plus a mandatory post-closure retention period required by our regulatory obligations.
• KYC and identity verification documents: Retained for a minimum of five years following account closure, in accordance with applicable AML legislation.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction.
• Customer support communications: Retained for a minimum of three years from the date of the communication.
• Marketing consent records: Retained for the duration of your consent and for a reasonable period thereafter to demonstrate compliance.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any identifiable individual.

08 Data Security

xz666 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes, but is not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and xz666 servers;
• Encrypted storage of passwords using industry-standard hashing algorithms;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing by qualified third-party security professionals;
• Automated fraud detection and anomaly monitoring systems operating across all accounts;
• Secure, access-controlled data centres with physical security protocols.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, xz666 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

09 Cookies Policy

xz666 uses cookies and similar tracking technologies on the Platform to ensure its proper functioning, enhance your user experience, and gather analytical insights. The categories of cookies we use are as follows:

9.1 Strictly Necessary Cookies

These cookies are essential for the operation of the xz666 Platform and cannot be disabled. They include session management cookies that keep you logged in during your gaming session, security tokens, and load-balancing cookies. Without these cookies, core platform functionality cannot be delivered.

9.2 Analytical & Performance Cookies

These cookies help xz666 understand how players interact with the Platform, including which pages are visited most frequently, where players encounter errors, and how navigation flows are used. The data collected is aggregated and anonymised and is used solely to improve the Platform's performance and user experience.

9.3 Functional Cookies

Functional cookies allow xz666 to remember your preferences, such as language settings, preferred game categories, and display options. These cookies enhance personalisation without collecting personally identifiable information for marketing purposes.

9.4 Managing Cookies

You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies will impair your ability to use the xz666 Platform and may prevent you from logging in or completing transactions. Guidance on managing cookie settings is available in the help documentation for your specific browser.

10 Your Data Subject Rights

Subject to applicable law, you hold the following rights in relation to the personal data xz666 holds about you. To exercise any of these rights, please contact our support team using the contact details in Section 14:

• Right of access: You have the right to request a copy of the personal data xz666 holds about you, along with information about how it is being processed. xz666 will respond to access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account information directly from within your account dashboard.
• Right to erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to our legal and regulatory obligations to retain certain data for prescribed periods, as described in Section 7.
• Right to restriction of processing: You may request that xz666 restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to data portability: You have the right to receive the personal data you have provided to xz666 in a structured, commonly used, machine-readable format, and to request that this data be transmitted to another controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where xz666 relies on legitimate interests as the legal basis, including for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

xz666 will respond to all valid data subject requests within 30 calendar days. In cases of complexity or volume, this period may be extended by a further two months, in which case you will be informed of the extension and the reasons for it.

11 Children's Privacy

The xz666 Platform is strictly intended for individuals who are 21 years of age or older. xz666 does not knowingly collect personal data from any person under the age of 21. Registration on the Platform requires an affirmative confirmation that the applicant meets the minimum age requirement, and all accounts are subject to age verification as part of the KYC process.

12 International Data Transfers

xz666 operates under an internationally recognised gaming regulatory framework, and some of the third-party service providers we work with may be located in jurisdictions outside of Pakistan. Where personal data is transferred to a recipient in a jurisdiction that does not provide an equivalent level of data protection, xz666 will implement appropriate safeguards to ensure that your data continues to be protected in accordance with the standards described in this Policy.

Such safeguards may include standard contractual clauses approved by relevant data protection authorities, binding corporate rules, or other legally recognised transfer mechanisms. By using the xz666 Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions other than Pakistan as part of xz666's operational infrastructure.

13 Amendments to This Policy

xz666 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, business practices, or Platform functionality. The date of the most recent revision is displayed at the top of this page.

Where material changes are made to this Policy, xz666 will notify registered players via email or via a prominent notice on the Platform prior to the changes taking effect. Your continued use of the xz666 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using the Platform and request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically so that you remain informed about how xz666 handles your personal data. Prior versions of this Policy are available from our support team upon written request.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way xz666 processes your personal data, please get in touch with our team using the details below. We take all privacy-related queries seriously and aim to provide a substantive response within 14 calendar days of receipt.

For formal data subject rights requests, please contact us via email with "Data Subject Request" in the subject line, and include your registered account username and a brief description of your request. We may ask for additional identity verification before processing your request to ensure the security of your account data.