xx66 Privacy Policy

xx66 (referred to as "we", "us", "our", or "the Platform") operates the online cricket betting and casino website accessible at xx66.games. xx66 is the data controller responsible for the personal information collected from users who register, deposit, wager, or otherwise interact with the xx66 platform.

This Privacy Policy applies to all personal data collected through xx66.games, including data submitted during account registration, KYC verification, payment processing, customer support interactions, and general platform usage. It applies to all registered users of xx66, with particular relevance to players based in Pakistan who access the platform via desktop or mobile browser.

By creating an xx66 account or using the platform in any capacity, you acknowledge that you have read and understood this Privacy Policy in full. If you do not agree with any aspect of this policy, you should not use the xx66 platform. Questions regarding this policy may be directed to the xx66 support team at the contact details provided in Section 13.

xx66 collects personal data through several channels and at various points during your interaction with the platform. The categories of data we collect are described below:

When you open an xx66 account, we collect your full legal name, date of birth, residential address (including city — Karachi, Lahore, Islamabad, Faisalabad, or elsewhere in Pakistan), email address, and a Pakistani mobile number. This information is required to create and maintain your account.

As part of our mandatory Know Your Customer (KYC) process, we collect copies of government-issued identity documents. Accepted documents include your Pakistani National Identity Card (CNIC), passport, or other valid government-issued photo identification. This data is used exclusively for age verification (21+ requirement), identity confirmation, and anti-fraud compliance.

We collect transaction data related to your deposits and withdrawals, including the payment method used (JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank), transaction amounts in PKR, transaction reference numbers, and timestamps. We do not store full bank account credentials or wallet PINs — payment authentication is handled directly by your bank or mobile wallet provider.

We record your complete wagering and casino gaming history on the platform, including bet amounts, selected markets, odds accepted, game sessions, win/loss outcomes, and bonus activity. This data is used for account management, dispute resolution, fraud detection, and responsible gaming monitoring.

When you access xx66.games, we automatically collect certain technical data including your IP address, browser type and version, operating system, device identifiers, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud prevention, and platform optimisation.

If you contact xx66 customer support via live chat or email, we retain records of that correspondence, including the content of messages, support ticket identifiers, and resolution outcomes. This data is used for quality assurance and to maintain a history of account-related communications.

xx66 uses the personal data described in Section 2 for the following specific and legitimate purposes:

• Account Registration & Management: Creating your account, maintaining accurate account records, processing login requests, and handling password resets and account changes.
• Identity Verification: Confirming that you are aged 21 or above and that your identity matches the account details provided, in line with our KYC obligations.
• Payment Processing: Facilitating deposits and withdrawals in PKR through JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank; reconciling transaction records; and addressing payment disputes.
• Bet Settlement & Casino Game Resolution: Recording wagers, calculating and crediting winnings, settling disputes, and applying bonus wagering requirements.
• Fraud Prevention & Security: Detecting and preventing unauthorised access, duplicate accounts, money laundering, match-fixing involvement, and other forms of platform abuse.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and enforcing self-exclusion, deposit limits, and session controls requested by users.
• Legal & Regulatory Compliance: Meeting anti-money laundering (AML) obligations, responding to lawful requests from regulatory authorities, and maintaining records required under our international gaming licence.
• Customer Support: Responding to your queries, resolving complaints, and maintaining a record of support interactions for quality assurance.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve site performance, fix technical issues, and develop new features relevant to Pakistani players.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates via email or SMS — only where you have opted in to receive such communications and in accordance with your stated preferences.

xx66 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing your registration data, payment information, and betting activity is necessary to perform the contract between you and xx66 — that is, to operate your account and provide the betting and casino services you have signed up for.
• Legal Obligation: KYC identity verification, AML transaction monitoring, and retention of certain financial records are required by the regulatory and compliance framework under which xx66 operates. We have no discretion to opt out of these obligations.
• Legitimate Interests: Fraud detection, security monitoring, responsible gaming oversight, and platform analytics are conducted on the basis of xx66's legitimate interest in operating a safe, secure, and legally compliant platform. Where we rely on legitimate interests, we have assessed that our interests are not overridden by your privacy rights.
• Consent: Marketing communications and optional cookies are processed on the basis of your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

xx66 does not sell, rent, or trade your personal data. We share data with third parties only where strictly necessary for operational purposes, and only under binding agreements that require those parties to handle your data securely and solely for the specified purpose. Categories of third-party recipients include:

• KYC Verification Providers: We use third-party identity verification services to process CNIC and passport checks. These providers receive only the minimum data necessary to complete the verification check and are contractually prohibited from using it for any other purpose.
• Payment Processing Partners: Transaction data is shared with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank as required to process your deposits and withdrawals. Each of these institutions operates under its own regulatory framework and privacy policy.
• Game Studio Providers: Your gaming session data (game ID, session duration, wager amounts) is shared with licensed game studios to facilitate game delivery, RNG certification, and technical support. Game studios do not receive your full personal profile.
• Fraud Prevention Services: We may share device fingerprint data, IP addresses, and behavioural signals with anti-fraud technology providers to detect and prevent platform abuse.
• Regulatory Authorities: xx66 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, a valid legal order, or our licensing obligations. We will notify affected users of such disclosures where legally permitted to do so.

xx66 uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your login session, and to collect aggregate analytics data that helps us improve the user experience for Pakistani players.

The categories of cookies used on xx66.games are as follows:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your authenticated session, remember your cookie consent choice, and support core security functions. These cannot be disabled without breaking platform functionality.
• Analytics Cookies: We use anonymised, aggregated analytics tools to understand how users navigate xx66.games — which pages are most visited, where users encounter errors, and how load times vary. This data cannot be used to identify individual users.
• Preference Cookies: These remember your platform preferences, such as your chosen language or notification settings, so you do not need to reconfigure them each visit.
• Marketing Cookies: Only placed with your explicit consent. These track whether you arrived at xx66.games via a specific promotional link, which helps us measure the effectiveness of our campaigns. You may opt out at any time via your browser settings or the xx66 cookie preference panel.

xx66 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The general retention periods for each data category are outlined below:

Upon expiry of the relevant retention period, data is securely deleted or irreversibly anonymised. Where anonymised data is retained for statistical purposes, it can no longer be linked to any individual user.

xx66 implements a comprehensive set of technical and organisational security measures designed to protect your personal data from unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:

• Transport Layer Security: All data transmitted between your device and xx66 servers is encrypted using 256-bit TLS (HTTPS). Unencrypted HTTP connections are automatically redirected.
• Password Hashing: Account passwords are stored using a strong, salted cryptographic hashing algorithm. xx66 staff cannot retrieve your password — only reset it through a verified process.
• Access Controls: Access to personal data within xx66 systems is restricted on a strict need-to-know basis. Staff with access to sensitive data undergo background checks and are subject to confidentiality obligations.
• OTP Authentication: High-risk account actions — including password changes, withdrawal requests, and account closure — require one-time password (OTP) verification sent to your registered Pakistani mobile number.
• Intrusion Detection: xx66 operates continuous network monitoring and intrusion detection systems. Suspicious activity patterns trigger automatic alerts and account security holds pending investigation.
• Regular Security Audits: The xx66 platform undergoes periodic security assessments and penetration testing by independent third parties to identify and remediate vulnerabilities.

As an xx66 user, you hold the following rights with respect to the personal data we hold about you. These rights can be exercised by contacting xx66 support through the channels listed in Section 13:

• Right of Access: You may request a copy of all personal data xx66 holds about you. We will provide this in a clear, structured format within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Basic account details such as your email address and mobile number can be updated directly through the account dashboard.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where the data has been processed unlawfully. Note that this right is subject to xx66's legal retention obligations — for example, AML regulations require us to retain certain financial records regardless of an erasure request.
• Right to Restrict Processing: In certain circumstances, you may request that we restrict the processing of your data — for example, while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your data in a machine-readable format suitable for transfer to another service.
• Right to Object: You may object to processing carried out on the basis of legitimate interests — including profiling for fraud detection purposes — where you believe your privacy rights outweigh those interests. xx66 will assess each objection on its merits.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails, optional cookies), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

xx66 operates a strict 21+ age policy. The xx66 platform is not intended for, and must not be used by, any individual under the age of 21. This is a hard minimum — no exceptions are made regardless of local laws that may permit gambling at a younger age. We apply the 21+ standard uniformly across all Pakistani users.

xx66 does not knowingly collect personal data from individuals under the age of 21. All accounts are subject to mandatory KYC verification which includes date-of-birth confirmation via a valid Pakistani identity document. Any account found to belong to an individual under the age of 21 will be immediately suspended, the KYC and registration data securely destroyed, and any deposited funds returned to the originating payment method. Winnings generated by underage accounts will not be paid out.

xx66 operates under an international gaming licence, and some of our service providers — including game studios, KYC verification partners, and cloud infrastructure providers — may be located in jurisdictions outside Pakistan. Where your personal data is transferred internationally, xx66 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that described in this Privacy Policy.

Safeguards for international transfers include:

• Contractual data processing agreements requiring recipient parties to implement security measures consistent with those applied by xx66.
• Transfers only to service providers operating in jurisdictions with recognised data protection frameworks or under standard contractual clauses.
• Strict limitations on the categories of data transferred — only the minimum data necessary for the specific service is shared internationally.

Your payment data processed through JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank is handled within their respective Pakistani operational environments and is subject to Pakistani financial regulation. xx66 does not transfer Pakistani payment credentials to international third parties.

xx66 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, we will notify registered users through one or more of the following channels:

• An email notification sent to the address associated with your xx66 account.
• A prominent notice displayed on xx66.games or within your account dashboard upon next login.
• An update to the "Last Updated" date shown at the top of this page.

Minor clarifications or non-material edits may be made without formal notification. It is your responsibility to review this Privacy Policy periodically. Continued use of the xx66 platform following any update constitutes your acceptance of the revised policy. If you do not accept the revised Privacy Policy, please cease using the platform and contact our support team to close your account.

For any questions, concerns , or formal data rights requests related to this Privacy Policy, please contact the xx66 data protection team using the details below:

Support Email:
[email protected]
(Plain text — not a clickable link. Please copy and paste into your email client.)

Support Hours: 24 hours a day, 7 days a week — in both English and Urdu. Average live chat response time is 3–5 minutes. For formal data rights requests submitted by email, our target response time is 30 calendar days from the date of receipt of a verified request.

When submitting a data rights request, please include your registered xx66 username, the email address associated with your account, a clear description of the right you wish to exercise (e.g., access, rectification, erasure), and a copy of a valid identity document for verification purposes. xx66 cannot process data rights requests that cannot be matched to a verified account holder.