At x66y, your privacy is taken seriously. This Privacy Policy explains exactly what personal data x66y collects from Pakistani players, how that data is used, stored, and protected, and what rights you hold over your own information. Please read this document carefully alongside the x66y Terms & Conditions.
Six core principles that define how x66y handles your personal information
All x66y player data is stored on encrypted servers using industry-standard AES-256 encryption. Your PKR transaction records, personal identification details, and account credentials are never stored in plain text. x66y applies strict access controls to limit who within the organisation can view sensitive player data.
x66y will never sell, rent, or trade your personal information to unaffiliated third parties for their independent marketing purposes. Your data is shared only with service providers directly involved in operating the x66y platform — such as KYC verification providers and PKR payment processors — under strict data processing agreements.
x66y collects only the personal data that is genuinely necessary to operate your account, process your PKR deposits and withdrawals, verify your identity, and comply with applicable AML regulations. We do not collect data speculatively or build marketing profiles beyond what is required to personalise your x66y gaming experience.
Every x66y player has the right to request a copy of the personal data held about them at any time. x66y will provide this information within a reasonable timeframe upon receipt of a verified written request. You also have the right to request corrections to any inaccurate personal data held in your x66y account profile.
x66y uses cookies and similar tracking technologies solely to improve platform performance, maintain your login session, and understand aggregate usage patterns. x66y does not deploy third-party advertising cookies that track you across other websites. You can manage your cookie preferences through your browser settings at any time.
Subject to x66y's legal obligations — including AML record-keeping requirements — you may request deletion of your personal data upon closing your x66y account. x66y will honour erasure requests within the limits permitted by applicable international gaming regulations and will confirm the outcome of your request in writing.
x66y ("we", "us", "our", "the Platform") is an internationally licensed online gaming and sports betting platform serving Pakistani players at x66y.org. x66y is deeply committed to protecting the privacy and personal data of every player who registers, deposits, plays, or otherwise interacts with our platform.
This Privacy Policy sets out in clear and plain terms exactly what personal data x66y collects from you, the lawful basis on which we process that data, how we use it to operate our platform and comply with regulatory requirements, and the rights you hold as an individual data subject. This policy applies to all personal data collected through the x66y website, any associated mobile interfaces, and through our customer support channels.
This Privacy Policy should be read together with x66y's Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement between you and x66y. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a data protection matter, this Privacy Policy shall prevail.
x66y acts as the data controller in respect of all personal data collected through the x66y platform. As data controller, x66y determines the purposes for which and the means by which your personal data is processed. Where x66y engages third-party service providers to process personal data on its behalf — for example, KYC verification providers or PKR payment processors — those providers act as data processors and are contractually bound to process data only on x66y's instructions and in accordance with appropriate data protection standards.
For all privacy-related enquiries, data subject requests, or complaints, please contact x66y using the support email address displayed in the footer of this page.
x66y collects personal data in the following categories:
3.1 Registration & Identity Data
When you create an x66y account, we collect your full legal name, date of birth, Pakistani contact number, email address, and the preferred payment method you intend to use for PKR deposits and withdrawals. This information is mandatory for account creation and cannot be substituted with anonymous or fictitious details.
3.2 KYC Verification Data
To comply with our AML obligations and to verify the identity of players before processing withdrawal requests, x66y may request copies of government-issued photo identification (CNIC, passport, or Pakistani driving licence), proof of residential address, and proof of payment method ownership. This data is processed securely and used solely for identity and source-of-funds verification purposes.
3.3 Financial Transaction Data
x66y records all PKR deposit and withdrawal transactions associated with your account, including payment method used, transaction amounts, timestamps, and transaction reference numbers. This data is retained for regulatory compliance and internal audit purposes. x66y does not store full card numbers or mobile banking PINs — payment authentication takes place through the respective payment provider's own secure system.
3.4 Gameplay & Betting Data
x66y records all wagering activity on your account, including cricket betting markets selected, casino game sessions, Teen Patti and Callbreak hands, slot spins, Kalaka Bingo participation, and Andar Bahar rounds. This data is used for account management, responsible gaming monitoring, dispute resolution, and platform improvement purposes.
3.5 Technical & Device Data
When you access x66y, we automatically collect certain technical data including your IP address, browser type and version, device operating system, screen resolution, and session timestamps. This data is used for platform security, fraud detection, and aggregate analytics. It does not personally identify you beyond what is already associated with your registered account.
3.6 Communications Data
If you contact x66y customer support by email or through any on-platform messaging tool, we retain records of those communications, including the content of your messages and any attachments, for quality assurance, training, and dispute resolution purposes.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity & Registration | Full name, DOB, CNIC, email, phone | Account creation, KYC, AML |
| Financial | JazzCash/EasyPaisa records, PKR amounts, transaction IDs | Payment processing, AML compliance |
| Gameplay | Bet history, session durations, game types | Account management, responsible gaming |
| Technical | IP address, browser, device type | Security, fraud detection, analytics |
| Communications | Support email content, chat logs | Customer service, dispute resolution |
x66y uses the personal data we collect for the following purposes:
x66y processes your personal data on the following legal bases:
x66y does not sell, rent, or trade your personal data. We share your personal data only in the following limited circumstances:
x66y retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any applicable legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account registration & KYC documents | 5 years after account closure | AML regulatory obligation |
| Financial transaction records | 5 years after transaction date | AML regulatory obligation |
| Gameplay & betting history | 3 years after account closure | Dispute resolution, responsible gaming |
| Customer support communications | 3 years after closure of query | Dispute resolution, quality assurance |
| Technical & device logs | 12 months from collection | Security monitoring, fraud detection |
| Marketing consent records | Until consent withdrawn + 1 year | Proof of lawful marketing basis |
Once the applicable retention period has expired and there is no longer any legal basis for continued retention, x66y will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual.
x66y implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
While x66y takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your own x66y login credentials confidential and for maintaining appropriate security on your personal devices when accessing x66y. In the event of a security breach that poses a material risk to your personal data, x66y will notify affected players without undue delay.
x66y uses cookies and similar tracking technologies on its website. A cookie is a small text file placed on your device when you visit x66y that allows the platform to recognise your browser and remember certain information about your session. x66y uses the following categories of cookies:
x66y does not use third-party advertising cookies or cross-site tracking technologies. You can manage or delete cookies through your browser's settings at any time. Disabling strictly necessary cookies may impair your ability to access x66y, as the session management system relies on them.
As an x66y player, you have the following rights in respect of your personal data:
To exercise any of the above rights, please contact x66y support using the email address displayed in the footer of this page. x66y will respond to all data subject requests within a reasonable timeframe. x66y reserves the right to verify your identity before acting on any data subject request to ensure your data is not disclosed to an unauthorised third party.
As an internationally licensed gaming platform, x66y may process or store some of your personal data outside of Pakistan — for example, on cloud servers located in the jurisdiction of x66y's licensing authority, or through KYC and payment processing partners who operate internationally. Where such transfers occur, x66y ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to that described in this Privacy Policy.
These safeguards may include contractual data processing agreements, standard contractual clauses, or other legally recognised transfer mechanisms as appropriate to the specific service provider and jurisdiction involved. By using the x66y platform, you acknowledge and consent to the international transfer of your personal data in the manner described in this section.
x66y's platform is strictly restricted to individuals who are 21 years of age or older. x66y does not knowingly collect personal data from individuals under 21 years of age. If x66y becomes aware that personal data has been collected from a player who was under the minimum age at the time of registration, x66y will immediately close that account and delete all associated personal data, subject only to any retention obligations that may apply under AML regulations in respect of any transactions processed before the age discrepancy was identified.
x66y reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or x66y's data processing practices. When material changes are made to this policy, x66y will update the "Last Updated" date at the top of this page and will, where practicable, notify registered players of the changes via their registered contact details or via a prominent notice on the x66y platform.
Your continued use of the x66y platform after the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Privacy Policy, you should stop using the x66y platform and may request account closure in accordance with the x66y Terms & Conditions.
If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or wish to raise a privacy-related complaint, please contact the x66y privacy team using the support email address displayed in the footer of this page. Please include your registered x66y username, a clear description of your query or request, and any relevant reference numbers where applicable.
x66y aims to respond to all privacy enquiries within 14 business days of receipt. For complaints that cannot be resolved through x66y's internal support process, you may refer your complaint to the relevant dispute resolution mechanism under x66y's international gaming licence, as described in the x66y Terms & Conditions.
x66y is strictly for players aged 21 and above. If gaming is affecting your finances or wellbeing, please visit our Responsible Gaming page for self-exclusion tools, deposit limit options, and support resources available to players in Pakistan.
Now that you understand exactly how x66y handles your data, explore our platform with full confidence. Cricket betting, Teen Patti, Andar Bahar, live casino, and slots — all in PKR, all securely protected.