666sx Privacy Policy

This Privacy Policy sets out the data practices of 666sx (hereinafter "666sx", "we", "us", or "our") with respect to personal information collected from players (hereinafter "you", "the player", or "the user") who access or use any service offered through the 666sx platform at 666sx.net and any associated subdomains or mobile applications.

666sx is Pakistan's premier online casino and sports betting destination, serving players across Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and every corner of the country. As a platform operating under an international gaming license and accepting PKR transactions via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, we are required by our licensing obligations and sound ethical practice to maintain robust data protection standards.

This Privacy Policy was last updated in January 2026. Any material changes to how 666sx processes personal data will be communicated to registered players via the email address on their account prior to the changes taking effect.

666sx collects the following categories of personal data from players:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information. We do not collect data from players who have not completed account registration.

666sx collects personal data through the following channels and mechanisms:

• Direct collection: Information you provide when registering your 666sx account, completing identity verification (KYC), making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the 666sx platform — including via cookies, web beacons, and server log files — regardless of whether you are logged in.
• Payment processors: Transaction confirmation data shared with 666sx by JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank when you initiate a deposit or withdrawal in PKR.
• Identity verification partners: Where 666sx engages licensed third-party KYC verification services, those services may return identity confirmation data to us following document verification.
• Fraud prevention services: Risk signals and device fingerprint data returned by fraud prevention and responsible gambling compliance tools integrated into the 666sx platform.

666sx processes your personal data for the following specific and lawful purposes:

• Account creation and management: To register your 666sx account, maintain your account settings, and enable your 666sx login.
• Identity verification (KYC): To verify that you are who you claim to be, that you are aged 21 or above, and that you are legally permitted to use the platform in your jurisdiction.
• Payment processing: To accept PKR deposits and process withdrawal requests to your nominated JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank account.
• Customer support: To respond to your queries, complaints, and account-related requests through our 24/7 live chat and email channels.
• Regulatory compliance: To fulfil Anti-Money Laundering (AML), Counter-Terrorism Financing (CTF), and Know Your Customer (KYC) obligations under our international gaming license.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and unauthorised access to 666sx accounts.
• Platform improvement: To analyse usage patterns and improve the design, performance, and feature set of the 666sx platform for all Pakistani players.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates — only where you have provided explicit consent and have not subsequently withdrawn it.
• Responsible gambling: To monitor account activity for signs of problem gambling behaviour and to apply or enforce responsible gaming tools including deposit limits, cool-off periods, and self-exclusion where requested or required.

666sx does not sell, rent, or commercially transfer your personal data to any third party. Data sharing is strictly limited to the categories of recipients described below, and only to the extent necessary for the specific purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum transaction data required to process your PKR deposits and withdrawals.
• KYC and identity verification providers: Licensed identity verification partners receive your submitted identity documents solely for the purpose of confirming your identity and age.
• Fraud prevention and AML compliance tools: Risk scoring and AML screening services may receive transaction patterns and device signals to flag suspicious activity for review.
• Game software providers: Third-party casino game and sports betting software providers may receive session data necessary for game operation, RNG certification, and RTP auditing — but not your full identity data.
• Regulatory and law enforcement authorities: Where 666sx is legally obliged to disclose information to a competent regulatory authority, court, or law enforcement body, we will comply. We will notify you of such disclosure wherever legally permitted to do so.
• Professional advisors: Lawyers, auditors, and compliance consultants engaged by 666sx under confidentiality obligations may access data where necessary to provide their services.

666sx uses cookies and similar tracking technologies to operate the platform, remember your session state, and understand how players interact with the site. The following types of cookies are used:

You can manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your 666sx account and using platform services. Disabling analytics and marketing cookies will not affect your ability to play.

666sx retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active 666sx account plus a minimum of 5 years following account closure, in compliance with AML and gaming license regulatory requirements.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction, as required under financial services regulations applicable to our license jurisdiction.
• Support communications: Retained for 2 years from the date of the last communication in a given support thread, unless the communication relates to a dispute or compliance matter.
• Technical and usage logs: Retained for up to 13 months for platform performance and security purposes, after which they are anonymised or deleted.
• Marketing consent records: Retained for the duration of your account plus 3 years to evidence compliance with consent obligations, even if consent was later withdrawn.

When data is no longer required and the retention period has elapsed, 666sx securely destroys or permanently anonymises the data so that it can no longer be linked to any individual player.

Protecting your personal data from unauthorised access, disclosure, alteration, or destruction is a core operational priority at 666sx. We implement the following security measures across all platform systems:

• Transport Layer Security (TLS): All data transmitted between your device and the 666sx platform is encrypted in transit using TLS 1.2 or higher.
• AES-256 encryption at rest: All personal and financial data stored in 666sx databases is encrypted using AES-256, the same encryption standard used by major international financial institutions.
• Password hashing: Account passwords are never stored in plain text. They are irreversibly hashed using a modern salted hashing algorithm.
• Two-factor authentication (2FA): Players are strongly encouraged to enable 2FA on their 666sx account for an additional layer of login security.
• Access controls: Internal access to personal data is strictly limited to 666sx staff members who require it for their specific job function, governed by a least-privilege access policy.
• Regular security audits: 666sx platform systems are subject to regular independent penetration testing and security vulnerability assessments.
• Data breach response: 666sx maintains a formal data breach response procedure. In the event of a breach affecting your personal data, we will notify affected players and relevant regulatory authorities within the timeframes required by applicable law.

As a 666sx player, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] from the email address registered on your account:

• Right of Access: You have the right to receive a copy of all personal data 666sx holds about you. We will respond within 30 calendar days.
• Right to Rectification: If any personal data held by 666sx is inaccurate or incomplete, you have the right to request that it be corrected. Supporting documentation may be required for identity-related corrections.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data following account closure, subject to our legal data retention obligations as described in Section 07.
• Right to Restriction of Processing: You may request that 666sx restrict the processing of your data in certain circumstances — for example, if you contest the accuracy of the data while we verify it.
• Right to Data Portability: You may request that your account data be provided to you in a structured, machine-readable format for transfer to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time. You also have the right to object to processing based on legitimate interests, subject to our legal obligations.
• Right to Withdraw Consent: Where processing is based on your consent — for example, marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

666sx will not charge a fee for exercising any of these rights unless a request is manifestly unfounded or excessive. We will acknowledge all data rights requests within 5 business days and provide a substantive response within 30 calendar days.

666sx is a strictly 21+ platform. We do not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in the 666sx account registration and KYC process, and accounts that cannot be verified as belonging to an adult aged 21 or above will be immediately closed.

If 666sx becomes aware that personal data has been collected from a person under the age of 21 — whether through a false age declaration at registration or any other means — we will take the following immediate steps:

• Permanently close the account and suspend all associated balances pending investigation.
• Delete all personal data associated with the minor's account from our active systems as soon as legally permissible.
• Return any real-money deposits made to the originating payment method following investigation, in line with our AML obligations.
• Report the incident to the relevant regulatory authority in accordance with our license obligations.

As an internationally licensed online gaming platform serving Pakistani players, 666sx may process and store personal data in server infrastructure located outside of Pakistan. Where personal data is transferred to countries that may not have equivalent data protection laws to those in your jurisdiction, 666sx ensures appropriate safeguards are in place, including:

• Data Processing Agreements with standard contractual clauses requiring the recipient to provide a level of protection equivalent to that described in this Privacy Policy.
• Engagement of third-party service providers that maintain internationally recognised data security certifications such as ISO 27001.
• Regular review of the data protection adequacy of countries and services used in 666sx's supply chain.

By registering a 666sx account, you acknowledge and accept that your personal data may be transferred to and processed in jurisdictions outside Pakistan as described in this section, subject always to the safeguards outlined above.

666sx reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our platform services. All updates will be published on this page at 666sx.net/privacy-policy with a revised "Last Updated" date.

Where changes are material — meaning they significantly affect how we process your data or the rights available to you — 666sx will notify registered players via email at least 14 days before the changes take effect. Your continued use of the 666sx platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

We recommend reviewing this Privacy Policy periodically to stay informed of how 666sx protects your data. If you have any questions about a specific change, our support team at [email protected] is available 24 hours a day, 7 days a week.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 666sx handles your personal data, please reach out to our dedicated privacy support team through the following channels:

• Email: [email protected]
• Subject Line: Include "Privacy Request" or "Data Rights Request" in your subject line to ensure your message is routed to the correct team.
• Live Chat: Available 24 hours a day, 7 days a week from the 666sx platform after completing your 666sx login.
• Response Time: Privacy and data rights requests are acknowledged within 5 business days and resolved within 30 calendar days.
• Service Coverage: Serving players across Pakistan — Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and all major cities (PST timezone).