xx66 Privacy Policy
Your Data, Handled with Care

1. Information We Collect

When you register an account with xx66 or interact with our platform, we collect different categories of personal information. We outline each category below so you know precisely what we hold and why.

1.1 Registration Information

When you create an xx66 account, we collect the information you provide during sign-up. This typically includes your full legal name, date of birth, email address, mobile number and a username of your choice. This information is necessary to create and manage your account.

1.2 Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) process, we may ask you to submit supporting documents to verify your identity and confirm your age. These may include a scanned copy or clear photograph of your national identity card (CNIC), passport or driver's licence, along with a proof of address document. These documents are used solely for verification purposes and are stored securely.

1.3 Financial and Payment Information

To process deposits and withdrawals in PKR, we collect information about your chosen payment method — for example, your JazzCash or Easypaisa mobile number, Raast ID or bank account details. We do not store full card numbers or mobile wallet PINs. Payment transactions are processed through encrypted channels.

1.4 Account Activity Data

We automatically record your activity on the platform including login times, game sessions played, bets placed, deposits made, bonuses claimed and withdrawals requested. This data is used to manage your account, calculate VIP points and ensure the platform is operating fairly for all users.

1.5 Device and Technical Data

When you access xx66 via the website or mobile app, we collect certain technical information about your device and connection. This includes your IP address, browser type and version, operating system, device type, and session duration. This data helps us detect fraud, prevent unauthorised access and improve platform performance.

1.6 Communications

If you contact our support team via live chat or email, we keep a record of the communication including your messages, any attachments you send and the support agent's responses. These records help us resolve disputes and improve our service quality over time.

2. How We Use Your Data

We use the personal information we collect for the following purposes. We do not use your data for any purpose not listed here without first informing you.

Purpose	Data Used
Account creation and management	Registration info, contact details
Identity and age verification	KYC documents, date of birth
Processing PKR deposits and withdrawals	Payment method details, transaction history
Fraud detection and security monitoring	Device data, IP address, account activity
Responsible gaming monitoring	Session data, betting patterns, account limits
Customer support	Communications history, account data
Platform improvement and analytics	Anonymised usage data, session data
Promotional communications (opt-in only)	Email address, mobile number

We process your data on the basis of contractual necessity (to deliver the services you have signed up for), legitimate interests (fraud prevention, platform security), legal obligation (KYC and anti-money-laundering compliance) and, where applicable, your direct consent (marketing communications).

3. Payment Data and PKR Transactions

All deposits and withdrawals on xx66 are conducted in Pakistani Rupees (PKR). We support JazzCash, Easypaisa, Raast, direct bank transfer, PKR debit and credit cards, and other mobile wallets as available. Each payment method has its own privacy and security practices governed by the respective provider.

3.1 What We Store

xx66 stores only the minimum payment information necessary to process transactions and verify payment method ownership. For mobile wallet payments, we store the registered mobile number. For bank transfers, we store account numbers and bank names. We do not store full card numbers, CVV codes, mobile wallet PINs or any authentication credentials for third-party payment apps.

3.2 Payment Provider Data Sharing

To complete a transaction, we share the necessary transaction details with your chosen payment provider — for example, JazzCash or your bank. This sharing is strictly limited to what is required for the transaction. Payment providers are independent data controllers and have their own privacy policies governing how they handle your data.

3.3 Anti-Money Laundering Checks

As a responsible platform, xx66 monitors transaction activity for patterns that may indicate money laundering or financial crime. Where suspicious activity is detected, we may place a temporary hold on withdrawals while an internal review is conducted. In cases where legal obligations require it, information may be shared with relevant authorities.

4. Cookies and Tracking Technologies

xx66 uses cookies and similar tracking technologies on the website and within the mobile app to make the platform work properly, maintain your session, and understand how users interact with our features.

4.1 Types of Cookies We Use

• Strictly Necessary Cookies: These are required for the platform to function. They manage your login session, keep you authenticated between pages, and remember your preferences such as display settings. These cannot be disabled without breaking the platform.
• Analytical Cookies: We use anonymised analytics to understand which pages are visited most, how long users spend on different sections, and where issues occur. This data is aggregated and does not identify you personally.
• Functional Cookies: These remember your preferences — such as language settings or preferred deposit method — so you do not have to re-enter them every time you log in.
• Security Cookies: Used to detect suspicious login activity, manage session timeouts and protect your account from unauthorised access.

4.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may affect your experience on the xx66 platform. For example, blocking all cookies may prevent you from staying logged in between pages or sessions.

5. Data Sharing and Third Parties

xx66 does not sell your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent necessary for the specific purpose.

5.1 Service Providers

We work with a small number of trusted third-party service providers who help us operate the platform. These include hosting and infrastructure providers, game software developers, payment processors and customer support tools. All service providers are bound by data processing agreements that restrict them from using your data for any purpose other than delivering the contracted service to xx66.

5.2 Legal and Regulatory Obligations

We may disclose personal data where required by law or where we have a good-faith belief that disclosure is necessary to protect the rights, property or safety of xx66, its users or the public. This includes sharing information with law enforcement agencies in response to valid legal requests.

5.3 Business Transfers

In the event that xx66 undergoes a business merger, acquisition or transfer of assets, user account data may be transferred as part of that transaction. In such a scenario, we will notify registered users in advance and the new entity will be bound by this Privacy Policy or an equivalent standard of protection.

5.4 With Your Explicit Consent

Outside of the categories above, we will only share your personal data with a third party if you have explicitly given your consent for that specific sharing. You can withdraw any such consent at any time by contacting support.

6. Data Security

Protecting your personal data is a core priority for xx66. We implement a range of technical and organisational measures to keep your information safe.

6.1 Technical Safeguards

• All data transmitted between your device and xx66 servers is encrypted using TLS (Transport Layer Security).
• Sensitive stored data — including identity documents and payment details — is encrypted at rest.
• Access to user data within xx66 is restricted on a need-to-know basis. Only personnel with a legitimate operational reason can access specific categories of user data.
• Our platform infrastructure is monitored continuously for intrusion attempts, unusual access patterns and security vulnerabilities.

6.2 Password and Account Security

Your account password is hashed before storage — we cannot see your password in plain text. We strongly recommend using a unique password for your xx66 account and enabling any available two-factor authentication options. You are responsible for keeping your login credentials confidential.

6.3 Data Breach Response

In the unlikely event of a data breach that affects your personal information, we will notify affected users as promptly as possible via your registered email address. We will explain what data was affected, what steps we have taken to contain the breach and what actions we recommend you take to protect yourself.

7. Data Retention

We retain your personal data only for as long as is necessary for the purposes outlined in this policy, or as required by applicable law.

• Active accounts: Data is retained for the lifetime of your account and for a minimum period after account closure, as required for anti-money-laundering and fraud prevention compliance.
• KYC documents: Identity verification documents are retained for the period required by relevant financial regulations after an account is closed.
• Transaction records: Financial transaction records including deposits and withdrawals are retained for the period required under applicable financial record-keeping obligations.
• Support communications: Chat and email support records are retained for up to two years after the final communication, to assist with any follow-up queries or disputes.
• Anonymised analytics data: Aggregated, anonymised usage data may be retained indefinitely as it cannot be linked to any individual user.

When retention periods expire, data is securely deleted or anonymised. If you request deletion of your account before the end of a retention period, we will delete all data that we are not legally obliged to retain and will inform you of what, if anything, must be kept and for how long.

8. Your Rights Over Your Data

As a user of the xx66 platform, you have meaningful rights over the personal data we hold about you. These rights are set out below. To exercise any of them, contact our support team via live chat or the email address in the footer of this page.

9. Third-Party Links and External Services

The xx66 platform may contain links to third-party resources in limited circumstances — for example, links to payment provider support pages. Once you leave the xx66 platform and access a third-party website or app, this Privacy Policy no longer applies. Those third parties have their own privacy policies and practices, which xx66 has no control over.

We encourage you to read the privacy policy of any third-party service you use in connection with your xx66 account — particularly your chosen payment provider such as JazzCash or Easypaisa — so you understand how they handle your data independently of xx66.

The game software visible on xx66 is provided by third-party game developers. These developers receive only the anonymised, session-level data necessary to run the game engine. They do not receive your name, contact details, payment information or any other directly identifying information.

10. Updates to This Privacy Policy

xx66 may update this Privacy Policy from time to time to reflect changes in our practices, technology, platform features or applicable obligations. When we make material changes, we will notify registered users via their registered email address and display a prominent notice on the platform for a reasonable period before the changes take effect.

The updated policy will always be available on this page with the most recent review date clearly shown at the top. We recommend checking this page periodically even if you have not received a notification. Your continued use of the xx66 platform after any update constitutes your acceptance of the revised Privacy Policy.

If you disagree with any updated version of this Privacy Policy, please stop using the platform and contact support to request account closure and data deletion in accordance with Section 8 above.

11. Contact Us

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have concerns about how your personal information is being handled, please get in touch with the xx66 support team. We are available 24 hours a day, 7 days a week via live chat on the platform.

You can also contact us by email — our support address is displayed in the footer of every page on this site. When reaching out about a data-related matter, please include your registered username and a brief description of your query so we can direct it to the right team and respond as efficiently as possible.

For responsible gaming-related data queries — such as self-exclusion records or session history — please visit our Responsible Gaming page for full details of the tools and records involved.

For general questions about your account, the platform or our services, visit the About Us page or the FAQ.