This Privacy Policy explains precisely how xz666 collects, uses, stores, and protects the personal data of every Pakistani player who registers and interacts with the platform. We believe data transparency is a cornerstone of the trust you place in xz666.
Before you read the full policy below, here is a plain-English summary of the six most important privacy commitments xz666 makes to every Pakistani player on the platform.
All personal and financial data transmitted between your device and xz666 is protected by 256-bit TLS encryption — the same standard used by major international banks. Data stored in xz666 servers is encrypted at rest using AES-256. No plain-text personal data is ever written to unprotected storage.
xz666 does not sell, rent, or commercially transfer your personal data to third parties for their own marketing purposes. Your CNIC details, mobile number, email address, and financial information remain within the xz666 platform ecosystem and are shared externally only as described in this Privacy Policy.
Every xz666 member has the right to access the personal data we hold about them, request corrections to inaccurate records, and in certain circumstances request deletion of their data. These rights can be exercised by contacting xz666 support at [email protected] at any time.
xz666 collects only the personal data that is necessary to operate the platform, verify your identity, process PKR payments, and comply with our international gaming licence obligations. We do not collect data for its own sake and do not retain data beyond the periods described in this Privacy Policy.
If you have opted in to receiving xz666 promotional communications — such as PSL betting offers, bonus alerts, or new game notifications — you may opt out at any time by clicking the unsubscribe link in any marketing email or by contacting xz666 support. Opting out of marketing does not affect transactional communications related to your account.
xz666 operates under an international gaming authority licence that includes specific data protection obligations. Our data practices are subject to regulatory review and must meet the standards set by our licensing body. This means xz666's privacy commitments are not merely voluntary — they are legally enforceable conditions of our operating licence.
Important: By registering an account or using any service on the xz666 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, you must not use the xz666 platform.
This Privacy Policy ("Policy") describes how xz666 ("xz666", "we", "us", "our") collects, processes, stores, shares, and protects the personal data of individuals ("Members", "you", "your") who register or interact with the xz666 online gaming platform, accessible at https://xz666.org and any associated subdomains or mobile applications.
xz666 takes the privacy of its Pakistani player base seriously. We understand that you are entrusting us with sensitive personal and financial information, and we are committed to handling that information with the care, transparency, and security it deserves. This Policy is designed to be clear and straightforward, written in plain English that Pakistani players can understand without a legal background.
This Policy should be read alongside the xz666 Terms & Conditions and Responsible Gaming Policy, both of which contain additional provisions relevant to your use of the xz666 platform.
This Policy is effective as of 1 January 2026 and supersedes all prior privacy notices issued by xz666.
For the purposes of applicable data protection law, xz666 is the data controller in respect of the personal data it collects from Members. As data controller, xz666 determines the purposes for which and the manner in which personal data is processed.
xz666 is licensed by an international gaming authority. Our data protection practices are subject to the oversight of that licensing body as a condition of our gaming licence. Where xz666 engages third-party processors to handle personal data on its behalf — such as payment service providers for JazzCash and EasyPaisa transactions — those processors are bound by contractual data processing agreements that impose obligations consistent with the standards required under our international gaming licence.
If you have any questions about how xz666 handles your personal data, or wish to exercise any of the rights described in Section 11 of this Policy, please contact our Data Protection team at [email protected].
When you create a xz666 account, we collect the following information that you provide directly:
In fulfilment of our international gaming licence obligations, xz666 may request the following verification documents at account creation or prior to processing withdrawals above applicable thresholds:
xz666 records all financial transactions associated with your account, including deposit amounts and timestamps, withdrawal requests and settlement records, bonus credits and wagering activity, and PKR balance movements. Transaction records are retained for the period described in Section 9 of this Policy.
xz666 collects data about how you interact with the platform, including games played, bet amounts and outcomes, session duration and frequency, sportsbook markets accessed (including PSL and international cricket fixtures), and responsible gaming tool usage such as deposit limits and session reminders.
When you access xz666, our systems automatically collect certain technical information, including your IP address, device type and operating system, browser type and version, referring URL, and session cookies. This data is used for security monitoring, fraud prevention, and platform optimisation purposes.
If you contact xz666 support via live chat or email, we retain records of those communications including your queries, our responses, and any documentation exchanged. These records help xz666 maintain quality of service and provide a documented audit trail for dispute resolution.
What we do not collect: xz666 does not collect full payment card numbers through the xz666 website. All card-based transactions are processed via PCI-DSS compliant third-party payment gateways. xz666 receives only masked card data (e.g., last four digits) for reference purposes.
xz666 uses the personal data it collects for the following purposes:
| Purpose | Data Used |
|---|---|
| Account registration and management | Registration data, device data |
| Identity verification and KYC compliance | KYC documents, registration data |
| Processing PKR deposits and withdrawals | Transaction data, KYC data, payment method data |
| Delivering gaming and sportsbook services | Gameplay data, account data |
| Fraud detection and prevention | Technical data, transaction data, behavioural data |
| Responsible gaming monitoring and interventions | Gameplay data, behavioural data, account data |
| Customer support and dispute resolution | Communications data, account data, transaction data |
| Regulatory reporting and licence compliance | All categories as required by licensing authority |
| Marketing communications (where opted in) | Registration data, gameplay preferences |
| Platform improvement and analytics | Anonymised gameplay and behavioural data |
xz666 does not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.
xz666 processes your personal data on the following legal grounds:
The majority of the personal data xz666 collects is processed because it is necessary to perform the contract between xz666 and you as a registered Member. Without this data, xz666 cannot create or maintain your account, process PKR transactions, or deliver the gaming services you have requested.
xz666 is required by the conditions of its international gaming licence to collect and retain certain categories of personal data, including KYC documentation, transaction records, and responsible gaming monitoring data. Processing this data is a legal obligation that xz666 cannot waive at a Member's request.
xz666 processes certain technical and behavioural data on the basis of its legitimate interests in operating a secure, fair, and commercially viable gaming platform. This includes fraud detection, security monitoring, and platform analytics. Where legitimate interests are relied upon as the legal basis, xz666 has carried out a balancing assessment to confirm that its interests do not override the fundamental rights and freedoms of Members.
Where xz666 sends you marketing communications about promotions, PSL betting offers, new games, or other xz666 services, this processing is based on your explicit consent provided at registration or subsequently. You may withdraw this consent at any time as described in Section 11.
xz666 does not sell your personal data. We share your personal data only in the following limited circumstances:
To process your PKR deposits and withdrawals, xz666 shares the minimum necessary payment and identity data with our integrated Pakistani payment partners, including JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, and SadaPay. These providers are contractually obligated to process your data solely for the purpose of executing transactions on your behalf and in accordance with their own regulatory obligations.
As a licensed gaming operator, xz666 is obligated to provide personal data, transaction records, and account activity information to its licensing authority upon request, and to cooperate with regulatory investigations. xz666 may also be required to disclose personal data to law enforcement agencies or financial intelligence units where required by applicable law.
xz666 uses third-party technology providers for services including cloud hosting, game software provision, fraud detection systems, and customer support platforms. These providers act as data processors on behalf of xz666 and are bound by contractual data processing agreements that prohibit them from using your data for any purpose other than delivering the service to xz666.
In the event that xz666's business or relevant assets are acquired by or merged with another entity, your personal data may be transferred to the successor entity as part of that transaction. xz666 will notify Members of any such transfer via registered email prior to your data being transferred and subject to any new privacy policy of the successor entity.
We do not share your data with advertisers. xz666 does not share identifiable personal data with advertising networks, data brokers, or social media platforms for targeted advertising purposes.
Given xz666's focus on serving Pakistani players, we apply particular care to the handling of payment data associated with local payment methods. When you transact via JazzCash or EasyPaisa, xz666 receives confirmation of transaction completion and a masked reference but does not store your full mobile wallet credentials or PIN at any point.
For bank transfer transactions via HBL, UBL, Allied Bank, or Meezan Bank, xz666 records the bank account reference and transaction ID for reconciliation purposes. Full bank account numbers are masked in xz666's internal records after the transaction is settled. SadaPay and USDT TRC20 transactions are handled with equivalent masking protocols.
xz666 will never ask you to share your JazzCash PIN, EasyPaisa mPIN, online banking password, or any other payment credential via live chat, email, or any other communication channel. Any communication requesting such credentials should be treated as fraudulent and reported to xz666 support immediately.
Cookies are small text files stored on your device when you visit a website. xz666 uses cookies and similar tracking technologies to maintain your login session, remember your platform preferences, detect fraudulent activity, and analyse aggregate platform usage patterns.
You may configure your browser to block or delete cookies at any time. Note that disabling essential cookies will prevent you from logging into your xz666 account. Analytics and functional cookies can be disabled without affecting core platform access. Please refer to your browser's help documentation for instructions on managing cookie preferences.
xz666 retains personal data for the periods set out below, after which data is securely deleted or anonymised:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Licensing obligation, dispute resolution |
| KYC verification documents | Duration of account + 5 years after closure | Regulatory and anti-money-laundering obligation |
| Transaction records | Duration of account + 7 years after closure | Financial record-keeping and licensing obligation |
| Gameplay and betting data | Duration of account + 2 years after closure | Responsible gaming monitoring, dispute resolution |
| Customer support communications | 3 years from date of communication | Quality assurance, dispute resolution |
| Marketing preferences | Until opt-out or account closure | Consent management |
| Technical and device logs | 13 months from collection | Security monitoring, fraud detection |
Where retention is required beyond these periods by a specific legal order or regulatory investigation, xz666 will retain the relevant data until the matter is resolved.
xz666 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected Members, xz666 will notify affected Members without undue delay and will take all reasonable steps to contain and remediate the breach.
Your role in security: xz666's security measures are most effective when complemented by good security practices on your end. We strongly recommend using a unique, strong password for your xz666 account, enabling two-factor authentication, and never sharing your login credentials with anyone.
As a xz666 Member, you have the following rights in relation to your personal data. To exercise any of these rights, please contact xz666 at [email protected] with your registered email address and a clear description of your request.
xz666 will respond to all data rights requests within 30 calendar days. Where requests are complex or numerous, this period may be extended by a further 60 days, in which case xz666 will notify you of the extension and the reason for it within the initial 30-day period.
The xz666 platform is strictly for individuals who are 21 years of age or older. xz666 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the registration process and reinforced through KYC document checks prior to withdrawal processing.
If xz666 discovers that personal data has been collected from an individual under the age of 21, the relevant account will be immediately closed, any deposits will be returned to the originating payment method, and all associated personal data will be deleted from xz666 systems as promptly as reasonably practicable, subject to any retention obligations arising from the investigation of the underage account.
If you are aware of any individual under the age of 21 who has registered or attempted to register a xz666 account, please notify us immediately at [email protected].
xz666 operates under an international gaming licence and may use server infrastructure or technology partners located outside Pakistan. As a result, your personal data may be transferred to and processed in jurisdictions other than Pakistan. Where such transfers occur, xz666 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Policy.
Safeguards for international transfers include contractual data processing agreements with standard data protection clauses, transfers only to jurisdictions that maintain adequate data protection frameworks as recognised by xz666's licensing authority, and technical encryption measures that protect data regardless of the jurisdiction in which it is stored or processed.
By registering a xz666 account, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Pakistan for the purposes described in this Privacy Policy.
xz666 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory obligations, or the services we offer. Where changes are material — meaning they significantly affect the rights of Members or the ways in which we use personal data — xz666 will provide advance notice to registered Members via the email address held on file before the changes take effect.
Non-material changes, such as typographical corrections or clarifications that do not alter the substantive content of this Policy, may be made without advance notice. The "Last updated" date at the top of this Policy will always reflect the most recent revision.
Your continued use of the xz666 platform following notification of a revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you must cease using xz666 and contact support to arrange account closure.
If you have any questions, concerns, or requests relating to this Privacy Policy or xz666's data practices, please reach out to us through the following channels:
For formal data rights requests — including access, erasure, rectification, or portability requests — xz666 requires submission via email to maintain a documented audit trail. Live chat is available for general privacy enquiries and guidance.
For further information about xz666's licensing, responsible gaming programme, and platform terms, please visit our About Us and Terms & Conditions pages.
Your data is protected, your privacy is respected, and your PKR transactions are secured. Join Pakistani players already enjoying cricket betting, live casino, and slots at xz666. Players must be 21 or older.
Create Your xz666 Account Read Terms & Conditions