Your Privacy Matters
to 666x

01 Information We Collect

666x collects personal information only when there is a clear and lawful basis for doing so. The categories of data we collect, and the circumstances in which they are gathered, are set out below.

Information You Provide Directly

When you register an account, complete KYC verification, contact support, or interact with any feature of the 666x platform, you may provide us with the following types of personal information:

Information Collected Automatically

When you access the 666x platform, our systems automatically collect certain technical and behavioural data. This includes:

• IP address and approximate geographic location derived from IP.
• Device type, operating system version, and browser type and version.
• Session start and end timestamps, pages visited, and navigation paths within the platform.
• Referral source (e.g., the URL of the page from which you navigated to 666x).
• Error logs and performance diagnostics generated during platform use.

This automatically collected data does not directly identify you by name, but it may be combined with account data in fraud-detection and security review processes.

Information From Third Parties

In limited circumstances, 666x may receive personal data about you from third parties. This includes identity verification data returned by KYC service providers in response to document checks, and payment confirmation data returned by mobile banking providers (bKash, Nagad, Rocket, Upay) following a deposit or withdrawal transaction. We do not purchase data lists from third-party data brokers.

02 How We Use Your Data

666x uses personal data only for clearly defined purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we process personal data are:

• Account creation and management: To register your account, verify your identity, maintain your account settings, and communicate important account-related notices to you.
• Service delivery: To enable you to access the games, sports betting markets, live casino, and other products available on the 666x platform.
• Payment processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, and Upay; to match incoming payments to your account; and to investigate disputed transactions.
• Identity and age verification: To confirm that you meet the 18+ age requirement and to comply with anti-money laundering (AML) obligations through KYC verification.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other financial crimes. This includes automated transaction monitoring and device fingerprinting.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour and to apply account-level responsible gaming tools such as deposit limits and self-exclusion where requested or required.
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of our support service based on past interactions.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the platform's performance, stability, and user experience. Individual player data is not used for this purpose in identifiable form.
• Legal compliance: To meet our obligations under applicable laws and regulations, including record-keeping obligations, responding to lawful requests from competent authorities, and enforcing our Terms & Conditions.
• Promotional communications: Where you have not opted out, to send you relevant offers, promotional updates, and platform news by email or SMS. You may withdraw consent for marketing communications at any time by contacting support at [email protected].

666x does not use personal data for automated decision-making that produces significant legal effects on players, except in the context of automated fraud detection, where a human review is always available upon request.

03 Data Sharing & Disclosure

666x does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

Service Providers

We engage trusted third-party service providers to support the delivery of the 666x platform. These include KYC identity-verification providers, payment processing partners (bKash, Nagad, Rocket, Upay), game content providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), and IT infrastructure and hosting services. Each service provider is bound by contractual data-processing obligations that restrict their use of your data to the specific service they are providing to 666x. They are not permitted to use your data for their own purposes.

Legal and Regulatory Disclosure

666x may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so, or where disclosure is necessary to prevent, detect, or investigate fraud, money laundering, or other criminal activity. We will, where legally permitted, notify affected players of such disclosures.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 666x's business assets, personal data held by 666x may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material change to the way their data is handled as a result.

What We Do Not Share

We do not share your gaming activity history, betting preferences, or financial transaction records with third-party advertisers. We do not share your contact details with data brokers, affiliate marketing networks, or any other entity for the purpose of third-party direct marketing.

04 Cookies & Tracking Technologies

The 666x platform uses cookies and similar tracking technologies to ensure the platform functions correctly and securely. This section explains what types of cookies we use and how you can manage them.

Types of Cookies Used by 666x

666x does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking scripts. Our analytics data is anonymised before being processed and cannot be used to identify individual players.

Managing Your Cookie Preferences

You can control and delete cookies through your web browser settings. Most modern browsers allow you to block all cookies, accept only first-party cookies, or delete existing cookies. Please note that disabling strictly necessary cookies will prevent you from logging into your 666x account. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

05 Data Retention

666x retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply:

• Active account data: Retained for the full duration of your account's active status plus a minimum of 5 years following account closure, in compliance with AML record-keeping requirements.
• KYC verification documents: Retained for a minimum of 5 years from the date of submission, or longer if required by a specific regulatory obligation or ongoing investigation.
• Transaction records (deposits and withdrawals): Retained for a minimum of 5 years from the transaction date.
• Customer support communications: Retained for 2 years from the date of the last interaction, unless the subject matter relates to an unresolved dispute or legal claim, in which case records are retained until resolution plus 1 year.
• Technical/server logs: Retained for 90 days on a rolling basis, unless a specific entry is flagged for security investigation, in which case it is retained for the duration of that investigation.
• Marketing preferences and opt-out records: Retained indefinitely to ensure we respect your communication preferences and can demonstrate compliance with opt-out requests.

When a retention period expires, 666x will securely delete or anonymise the relevant data. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

06 Data Security Measures

Protecting the personal data of 666x players is a core operational priority. We implement a layered security architecture that addresses threats at the network, application, and data levels. Our current security measures include:

• TLS/SSL encryption: All data in transit between your device and 666x servers is encrypted using TLS 1.2 or higher. HTTPS is enforced site-wide with HTTP Strict Transport Security (HSTS) headers.
• Encrypted data storage: Sensitive data fields — including identity document details, financial records, and passwords — are stored using strong, industry-standard encryption algorithms. Passwords are hashed using a salted, adaptive hashing function and are never stored in plain text.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required for their specific role. Access is logged and reviewed regularly.
• Intrusion detection and monitoring: 666x operates continuous network monitoring and anomaly detection to identify and respond to potential security threats in real time.
• Regular security assessments: Our platform undergoes periodic technical security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data security incident that affects your personal data, 666x will notify affected players promptly and take all necessary steps to contain the incident and prevent recurrence.

While 666x takes comprehensive measures to protect your data, no internet-based service can guarantee absolute security. You play an important role in keeping your account secure by maintaining a strong, unique password and not sharing your login credentials with anyone.

07 Your Privacy Rights

As a 666x player, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Request — [Right You Are Exercising]". We will acknowledge your request within 2 business days and aim to fulfil it within 14 business days.

• Right of access: You have the right to request a copy of the personal data that 666x holds about you, along with information about how it is being used and who it has been shared with.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update basic account details (such as your email address or phone number) directly through your account settings.
• Right to erasure: You may request that 666x delete your personal data. We will honour erasure requests where there is no overriding legal obligation to retain the data (such as AML record-keeping requirements). Where full erasure is not possible, we will anonymise your data to the extent permitted.
• Right to restriction of processing: In certain circumstances — for example, where you contest the accuracy of your data or have objected to its processing — you may request that we restrict our use of your data while the matter is under review.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to 666x in a structured, machine-readable format, and to request that this data be transferred directly to another service provider where technically feasible.
• Right to object: You have the right to object at any time to the processing of your personal data for direct marketing purposes. Upon receipt of an objection, we will cease marketing communications immediately. You also have the right to object to processing based on legitimate interests; we will review such objections on a case-by-case basis.
• Right to withdraw consent: Where we process your data based on your consent (e.g., for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

Please note that exercising some of these rights — in particular the right to erasure — may result in the closure of your 666x account, as certain data is essential to the delivery of our services. We will advise you of any such consequences before acting on your request.

08 Updates to This Policy

666x may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this policy, we will notify registered players by email and/or by placing a prominent notice on the 666x platform for a period of at least 14 days following the update.

The "Last Updated" date at the top of this document always reflects the date on which the current version came into effect. We encourage you to review this page periodically so that you remain informed about how your data is being handled. Continued use of the 666x platform following notification of an update constitutes your acceptance of the revised policy.

If you have any questions, concerns, or complaints about this Privacy Policy or the way 666x handles your personal data, please contact our support team by email at [email protected]. We take all privacy enquiries seriously and will respond to your message within 2 business days. Where a concern cannot be resolved directly, you have the right to escalate the matter to an appropriate supervisory authority.