XP666 Privacy Policy – Your Data, Protected

1 Introduction

Welcome to XP666. We operate an online gaming and betting platform accessible at xp666.win, offering products including Live Casino, Casino Slots, Sports Betting (Cricket, PSL, T20, Football, Esports), Bingo and more. As part of running this platform, we collect and process certain personal information about you.

This Privacy Policy ("Policy") sets out clearly what information we collect, why we collect it, how it is used, who it may be shared with, and how long we keep it. It also explains the rights you have over your personal data and how to exercise those rights.

This Policy applies to all visitors, registered members and players using the XP666 website, mobile site and app. It should be read alongside our Terms and Conditions, which together govern your relationship with XP666. If you have questions about any aspect of this Policy, please contact our support team through the live chat on the platform.

2 Data We Collect

XP666 collects personal data that falls into the following categories:

We do not collect sensitive data such as racial or ethnic origin, religious beliefs, biometric data or health information. We collect only what is necessary and proportionate to provide you with a safe and functional gaming experience.

3 How We Collect Your Data

XP666 collects your personal information through the following means:

• Direct interactions: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in promotions, you provide us with personal data directly.
• Automated technologies: As you navigate our website or app, we automatically collect technical and usage data using cookies, server logs and similar tracking technologies. This includes your IP address, device identifiers, page views and session activity.
• Payment processors: When you transact via JazzCash, Easypaisa, Raast, Bank Transfer, cards or mobile wallets, our payment partners share transaction confirmations and reference data with us to credit or debit your account correctly.
• Third-party verification: In cases where identity verification is required, we may use authorised third-party KYC service providers to confirm the authenticity of the documents you submit.
• Fraud prevention services: We may receive data from fraud screening tools that help us identify suspicious account activity and protect our platform from abuse.

4 How We Use Your Data

XP666 uses the personal data we collect for the following purposes:

• Account management: To create, maintain and manage your player account, including processing your login, tracking your balance and recording your transaction history.
• Identity verification: To confirm that you are who you say you are, that you are aged 18 or above, and that your payment details match your registered identity before processing withdrawals.
• Payment processing: To receive your PKR deposits and send out your withdrawal payments accurately and on time via your chosen payment method.
• Customer support: To respond to your queries, resolve disputes and provide assistance through our support channels.
• Platform security and fraud prevention: To detect, investigate and prevent fraudulent activity, money laundering, bonus abuse and other prohibited conduct on our platform.
• Responsible gaming: To monitor usage patterns that may indicate problem gambling behaviour, and to apply any self-exclusion, deposit limits or cooling-off periods you have requested.
• Service improvement: To analyse how players use XP666 and improve the design, performance and content of our games, betting markets and overall platform.
• Communications: To send you important account notifications, security alerts and, where you have opted in, promotional offers relevant to Cricket, PSL, Casino bonuses and other XP666 products.

XP666 does not use your data for automated decision-making that produces legal or similarly significant effects on you without human review.

5 Data Sharing

XP666 takes data sharing seriously. We do not sell, rent or trade your personal information to any third party for their own marketing purposes. We may, however, share your data in the following limited and strictly controlled circumstances:

• Payment processors: We share the minimum necessary transaction data with our payment partners (including JazzCash, Easypaisa, Raast and bank networks) to execute your deposits and withdrawals in PKR.
• Identity verification providers: Authorised KYC partners may receive your identity documents and personal details solely for the purpose of verifying your account before large withdrawals or as required by our policies.
• Fraud and security services: We may share technical and account data with fraud prevention tools to protect the integrity of our platform and our players.
• Game and software providers: Our Casino, Live Casino, Slots and Bingo game providers may receive limited technical data (such as player session identifiers) to operate their games on our platform. They do not receive your full personal profile.
• Legal obligations: If we are required to disclose information by applicable law, regulation, court order or government authority, we will comply. We will notify you where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition or sale of XP666's business assets, your data may be transferred to the successor entity, subject to equivalent privacy protections.

All third parties with whom we share data are required to handle it confidentially and use it only for the specific purpose for which it was shared.

6 Payment Data & Financial Privacy

XP666 processes all transactions in PKR (Pakistani Rupee). We support JazzCash, Easypaisa, Raast, Bank Transfer, debit/credit cards and major mobile wallets. The security of your financial data is a top priority.

• XP666 does not store your full payment card numbers, JazzCash PINs, Easypaisa mobile wallet credentials or online banking passwords on our servers at any time.
• Payment transactions are processed through PCI-DSS compliant payment gateways. Your payment credentials are encrypted and handled directly by the respective payment processor.
• XP666 retains transaction records (amounts, dates, method type, reference numbers) as part of your account history. This is required for dispute resolution, withdrawal processing and fraud prevention.
• If a chargeback or payment reversal is initiated against your account, XP666 may share relevant transaction records with the payment provider to investigate and resolve the dispute.

For your own protection, we strongly recommend never sharing your payment credentials with anyone — including anyone claiming to be XP666 support staff. Our team will never ask for your PIN, password or full card number.

7 Cookies & Tracking Technologies

XP666 uses cookies and similar technologies to make our platform work properly and to give you a better experience. A cookie is a small text file stored on your device when you visit our site. Here is how we use them:

• Essential cookies: These are necessary for the platform to function. They manage your login session, remember your language preferences and keep your account secure. You cannot disable these without affecting core platform functionality.
• Performance cookies: These help us understand how players use XP666 — which games are most popular, how long sessions last, and where players encounter issues. This data is aggregated and anonymised.
• Functional cookies: These remember your preferences, such as your preferred payment method type or game category filters, to personalise your experience on return visits.
• Security cookies: Used to detect and prevent fraudulent logins and suspicious activity on your account.

XP666 does not use cookies to track your browsing activity outside of our own platform, and we do not serve third-party advertising cookies. You can manage cookie preferences through your browser settings; however, disabling essential cookies may affect your ability to log in or use the platform properly.

8 Data Security

XP666 has put in place a range of technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or disclosure:

• SSL/TLS encryption: All data transferred between your browser or app and our servers is encrypted using up-to-date SSL/TLS protocols.
• Secure servers: Player data is stored on servers with restricted access, protected by firewalls, intrusion detection systems and regular security audits.
• Two-factor authentication: Where available, players are encouraged to enable two-factor authentication (2FA) on their accounts for an additional layer of login security.
• Staff access controls: Access to personal data within XP666 is limited to authorised personnel who need it to perform their role. All staff handling personal data are subject to confidentiality obligations.
• Incident response: In the event of a data breach that affects your rights and freedoms, XP666 will take prompt action to contain the breach and notify affected players as required.

While we take every reasonable precaution, no internet-based service can guarantee absolute security. You also play a role in keeping your account safe — use a strong, unique password and never share your login credentials with anyone.

9 Data Retention

XP666 retains your personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. In practice, this means:

• Active accounts: Your personal data is retained for the full duration that your XP666 account remains open and active.
• Closed accounts: After voluntary account closure, we retain transaction records, identity verification data and correspondence for a period necessary to fulfil legal, regulatory and dispute resolution obligations — typically up to seven years.
• Suspended or terminated accounts: Where an account is closed due to a breach of our Terms and Conditions, fraud or suspected illegal activity, we may retain relevant data for a longer period as required for investigation or legal proceedings.
• Marketing data: If you have opted in to receive promotional communications, we will retain your marketing preferences until you opt out. You can unsubscribe at any time through your account settings or by contacting support.

Once the retention period has elapsed, your personal data is securely deleted or anonymised so it can no longer be linked back to you.

10 Your Rights Over Your Data

XP666 respects your right to control your personal information. You have the following rights in relation to the data we hold about you:

• Right of access: You can request a copy of the personal data XP666 holds about you at any time.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you have the right to ask us to correct it.
• Right to erasure: You may request that we delete your personal data. This right is subject to legal and regulatory retention obligations — for example, we are required to keep certain financial records for a minimum period.
• Right to restrict processing: In certain circumstances, you can ask us to limit how we use your data while a dispute or correction request is being resolved.
• Right to data portability: You may request a structured, commonly used copy of the personal data you provided to us, to transfer to another service if you wish.
• Right to withdraw consent: Where we process data based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact our support team through the live chat on the XP666 platform or visit our FAQ page for guidance. We will respond to all valid requests within a reasonable timeframe.

11 Minors

XP666 is strictly an adult-only platform. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered on our platform or provided us with personal information without your knowledge, please contact us immediately through our support team so we can take prompt action to close the account and delete the associated data.

All players are required to confirm at registration that they are 18 or older. XP666 reserves the right to conduct age verification checks at any time, and accounts found to belong to minors will be closed immediately with any balances forfeited in accordance with our Terms and Conditions. We are committed to protecting young people from harm, and underage gambling is something we take extremely seriously.

12 Changes to This Privacy Policy

XP666 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features or applicable legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered players via the platform or by email.

We encourage you to review this Policy periodically so you are always aware of how your data is being handled. Your continued use of XP666 after any changes to this Policy constitutes your acceptance of the updated terms.