Privacy Policy – cx666 Online Gaming Platform Pakistan

This Privacy Policy explains how cx666 ("we", "us", "our", "the Platform") collects, uses, stores, protects, and shares the personal information of players who register and use the cx666 platform at cx666.online. It applies to all cx666 players accessing the platform from Pakistan.

At cx666, we take privacy seriously — not because we have to, but because we believe Pakistani players have every right to know exactly what happens to their personal information when they trust us with it. This policy is written in plain language. If anything in it is unclear, our support team is available 24/7 and will be happy to explain.

By registering an account on cx666, you acknowledge that you have read and understood this Privacy Policy. Using the cx666 platform following any update to this policy constitutes acceptance of the revised version. We will notify you of material changes in advance — see Section 14 for details.

cx666 is an online gaming and sports betting platform operating at cx666.online, serving players in Pakistan. The platform offers a range of games including Teen Patti, baccarat, roulette, fishing games, virtual sports, and sports betting, all with PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard.

For the purposes of this Privacy Policy, cx666 is the data controller — meaning we are responsible for determining how and why your personal data is processed. Our contact details for all privacy-related enquiries are set out in Section 15.

cx666 collects only the personal data that is necessary for providing you with a safe, functional, and compliant gaming experience. The categories of data we collect are as follows:

cx666 does not collect sensitive personal data such as biometric identifiers (other than a selfie used solely for identity verification), political opinions, religious beliefs, or health data — except where a player voluntarily discloses health-related information in the context of a responsible gaming request.

cx666 collects your personal data through three primary channels:

• Directly from you: When you register an account, make a deposit, submit identity verification documents, contact support, or activate a responsible gaming tool, you provide information to cx666 directly.
• Automatically through your use of the platform: When you visit cx666.online or play games, our systems automatically collect technical data such as your IP address, device identifiers, browser type, operating system, pages visited, and session timing. This data is collected through server logs and cookies — see Section 8 for details.
• From payment processors: When you complete a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or Visa/Mastercard, cx666 receives confirmation data from the payment provider, including transaction references and the masked payment instrument details used. cx666 does not receive or store your full card number or mobile banking PIN.

cx666 uses the personal data we collect for the following purposes. For each purpose, we have identified the category of data used and the lawful basis for processing (explained in Section 6):

• Account creation and management: We use your identity and contact data to create your cx666 account, verify your login, and keep your profile accurate and up to date.
• Age and identity verification: We use identity data and verification documents to confirm that you are at least 18 years old and that your account is genuine, as required by anti-money-laundering and responsible gaming obligations.
• Processing deposits and withdrawals: We use financial data and identity data to process your PKR payments, match incoming deposits to your account, and release withdrawals to your registered payment method.
• Providing games and the gaming experience: Gaming activity data is used to deliver the games you play, record outcomes accurately, calculate and award winnings, and apply bonus mechanics.
• Customer support: Communication data is used to resolve your queries, handle disputes, and improve the support experience.
• Fraud prevention and platform security: Technical data, financial data, and gaming activity data are used to detect and prevent fraudulent accounts, payment fraud, collusion, bot activity, and abuse of bonuses.
• Responsible gaming compliance: Responsible gaming data is used to apply the limits and exclusions you request, and to monitor for patterns that may indicate a problem requiring cx666's proactive intervention.
• Service communications: Contact data is used to send you essential account notifications such as deposit confirmations, withdrawal updates, password reset links, and changes to Terms or this Privacy Policy. cx666 does not send unsolicited marketing messages without your explicit consent.
• Platform improvement: Anonymised and aggregated technical and gaming activity data may be used to analyse platform performance, identify bugs, and improve the user experience.

cx666 processes your personal data on the following legal grounds depending on the purpose:

• Contractual necessity: Most processing — including account management, payment processing, and game delivery — is necessary to perform the contract between you and cx666 when you register and use the platform.
• Legal obligation: Identity verification, age verification, anti-money-laundering checks, and certain reporting obligations require cx666 to process personal data to comply with applicable laws and regulations.
• Legitimate interests: Fraud detection, platform security, and platform improvement are carried out on the basis of cx666's legitimate interest in operating a safe and fair gaming platform, where those interests are not overridden by your privacy rights.
• Consent: Where cx666 sends you optional marketing communications or uses non-essential cookies, we will ask for your explicit consent first and give you a clear and easy way to withdraw it at any time.

cx666 does not sell, rent, or trade your personal data to any third party. We share personal data with third parties only in the following limited and necessary circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, your bank (for IBFT), and Visa/Mastercard acquiring banks receive only the data required to process your specific transaction. They are not permitted to use this data for any other purpose.
• Game and technology providers: Licensed game studios providing live dealer and RNG games to cx666 receive session data necessary to run the game. These providers are contractually bound to data protection standards consistent with this policy.
• Identity verification services: If cx666 uses a third-party KYC provider to verify your CNIC, the relevant document data is shared with that provider under strict contractual data protection terms. Verification data is not stored by the provider beyond the period required to complete the check.
• Fraud prevention services: Anonymised or pseudonymised technical and transactional data may be shared with fraud prevention tools to identify and block suspicious activity.
• Regulatory and legal authorities: cx666 may be required by law to disclose certain player data to regulatory bodies, law enforcement agencies, or courts. We will only do so where legally compelled and will notify you where permitted to do so.

cx666 uses cookies and similar tracking technologies on cx666.online. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies allow the site to recognise your device across sessions and remember certain preferences.

cx666 uses the following types of cookies:

• Strictly necessary cookies: These are required for the platform to function. They manage your login session, keep you authenticated during a game, and maintain your shopping basket when depositing. You cannot opt out of these without ceasing to use cx666.
• Functional cookies: These remember your preferences — such as your preferred game lobby view or language setting — so you do not have to reset them each visit.
• Analytics cookies: These collect anonymised data about how pages are used, which games are most popular, and where performance issues occur. This data helps cx666 improve the platform. Analytics cookies are only set with your consent.
• Security cookies: These help cx666 detect and prevent fraudulent login attempts and suspicious activity by storing a session fingerprint that is compared on each request.

cx666 does not use advertising or cross-site tracking cookies. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in or playing games at cx666.

cx666 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, and for as long as required by applicable legal, regulatory, and anti-money-laundering obligations. The general retention periods applied by cx666 are as follows:

• Active account data (identity, contact, financial, gaming activity): Retained for the duration of your account and for a minimum of 5 years after account closure, as required by anti-money-laundering regulations.
• Verification documents (CNIC, selfie, utility bill): Retained for 5 years after the date of verification or account closure, whichever is later.
• Support communications: Retained for 3 years from the date of the interaction.
• Technical and server logs: Retained for 12 months and then deleted or fully anonymised.
• Responsible gaming records: Retained for 5 years after account closure to support ongoing compliance and any future reactivation requests.

Where you request deletion of your personal data and there is no overriding legal obligation to retain it, cx666 will action the deletion request within 30 days and confirm completion.

cx666 applies a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, loss, or destruction. These include:

• TLS encryption: All data transmitted between your browser or app and cx666 servers is encrypted using TLS (Transport Layer Security). This means that even if data were intercepted in transit, it would be unreadable.
• Encrypted storage: Sensitive data fields — including payment references and identity document data — are encrypted at rest in cx666 databases using industry-standard encryption.
• Access controls: Only cx666 staff who require access to your personal data to perform their specific job function are granted access. Access is logged and reviewed regularly.
• Two-factor authentication: cx666 internal systems require two-factor authentication for staff accessing player data.
• Regular security testing: cx666 conducts periodic security assessments of its platform, including vulnerability scanning and penetration testing, to identify and remediate weaknesses before they can be exploited.
• Incident response: In the event of a data security incident that affects your personal data, cx666 will notify you as soon as practicably possible, describe what occurred, explain what data was involved, and outline the steps taken to address the incident and prevent recurrence.

As a cx666 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact cx666 support — details are in Section 15.

cx666 is strictly an 18+ platform and does not knowingly collect personal data from any person under the age of 18. Registration requires you to confirm your age, and cx666 conducts age verification checks on accounts where there is any reason to question whether the account holder meets the minimum age requirement.

If cx666 discovers that a player account has been opened by a person under 18, the account will be closed immediately, all game activity will be voided, and any deposited funds will be returned to the source payment method. Any personal data collected for the underage account will be deleted in accordance with our retention policy.

If you believe that a minor may have opened a cx666 account, please contact our support team immediately with relevant details so that we can investigate and act without delay.

When you use cx666's responsible gaming tools — such as setting deposit limits, activating a cool-off period, or requesting self-exclusion — the preferences and requests you make are stored as part of your player record. This data is used exclusively for the following purposes:

• Enforcing the limits and restrictions you have requested, including preventing deposits, wagers, or logins that would breach the terms of an active self-exclusion.
• Monitoring gaming patterns to identify players who may be exhibiting signs of problem gambling, allowing cx666 to reach out proactively with support information.
• Maintaining a record of responsible gaming history to inform decisions if you later request reactivation of a self-excluded account.
• Aggregated and anonymised analysis to improve cx666's responsible gaming tools and policies.

Responsible gaming data is among the most sensitive data we hold and is subject to strict access controls. It is never used for marketing purposes or shared with third parties outside the legal obligations described in Section 7. For more information on the responsible gaming tools available to you, please visit our Responsible Gaming page.

cx666 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, changes in applicable law, or improvements in our security and privacy standards. The date at the top of this policy indicates when it was last updated.

Where an update to this Privacy Policy is material — meaning it significantly changes how we handle your data or reduces your rights — cx666 will provide advance notice. This notice will be sent to your registered mobile number via SMS, to your registered email address if one is provided, and will be displayed as a prominent notice on cx666.online.

If you do not agree with an updated Privacy Policy, you may close your cx666 account before the changes take effect. Your continued use of cx666 after the effective date constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how cx666 has handled your personal information, you can reach us through the following channels. Our support team is available 24/7:

• Email: support@cx666.online — mark your subject line with "Privacy Request" for fastest routing to the right team.
• Live Chat: Available directly on cx666.online at any hour. Type "privacy" to be connected to a specialist agent.
• WhatsApp & Telegram: Contact details are available in your cx666 account dashboard after login.

cx666 will acknowledge your privacy request within 24 hours and aim to resolve all requests within 30 days. For complex requests — such as full data exports — we will keep you updated on progress if the 30-day window needs to be extended.