xp666 Privacy Policy —
How We Handle Your Personal Data

1. Introduction

This Privacy Policy applies to xp666, accessible at xp666.onl, including the xp666 Android mobile app and all associated platform features — casino games, slots, live casino, bingo, sports betting, and the player account system.

When you register an account, make a deposit, place a bet, or contact support, xp666 collects and processes certain personal information. This policy explains what data is collected, why it is collected, how it is used, and how long it is kept. It also sets out your rights in relation to your personal data.

By using xp666 and registering a player account, you confirm that you have read and understood this Privacy Policy. If you do not agree with how your data is handled as described here, you should not use the platform.

2. Data We Collect

xp666 collects personal information in several ways — directly from you during registration and account use, automatically through your interaction with the platform, and from payment providers as part of transaction processing.

2.1 Information You Provide

• Full name and date of birth (used for identity verification and age checks)
• Email address and phone number (used for account communication and security)
• Account username and password (stored in hashed form — never in plain text)
• Payment account references — JazzCash number, Easypaisa number, bank account or card details provided during deposit or withdrawal
• Copies of identity documents where verification is requested
• Correspondence with xp666 support, including live chat transcripts and email history
• Responsible gaming preferences — deposit limits, session time settings, self-exclusion requests

2.2 Information Collected Automatically

• IP address and approximate location derived from it
• Device type, operating system version, and browser or app version
• Session data — login times, session duration, pages or game sections visited
• Gameplay data — games played, bet amounts, game outcomes, bonus activity
• Transaction history — deposit amounts, withdrawal requests, timestamps
• Cookie and local storage data (see the Cookies section below)

3. How We Use Your Data

xp666 uses the personal data collected for the following purposes:

• Account operation: Creating and managing your player account, processing logins, and maintaining your account history and balance.
• Transaction processing: Handling deposits and withdrawals through JazzCash, Easypaisa, Raast, and bank transfer; verifying that payment methods belong to the account holder.
• Identity and age verification: Confirming that players meet the 18+ age requirement and that identity documents match registration details when verification is requested.
• Fraud prevention and security: Detecting unusual account activity, preventing multiple account creation, identifying patterns consistent with fraudulent payment behaviour, and protecting the platform from abuse.
• Responsible gaming: Honouring deposit limits, session controls, and self-exclusion requests; monitoring gaming patterns to identify potential problem gambling indicators in line with responsible gaming commitments.
• Customer support: Responding to support queries, resolving account issues, processing withdrawal follow-ups, and maintaining records of support interactions.
• Platform improvement: Analysing aggregated usage data to understand how players navigate the platform, which games and sports markets are most popular, and where the user experience can be improved.
• Communications: Sending transactional messages (deposit confirmations, withdrawal notifications, account security alerts) and, where you have opted in, promotional communications about bonuses and platform updates.

4. Legal Basis for Processing

xp666 processes personal data on the following legal bases:

• Contractual necessity: Processing that is required to perform the player account agreement — operating your account, processing transactions, delivering games and sports betting services.
• Legitimate interests: Fraud detection and prevention, platform security, abuse monitoring, and aggregated analytics for service improvement — where these interests do not override player privacy rights.
• Legal obligation: Compliance with applicable identity verification, anti-money laundering, and financial record-keeping requirements.
• Consent: For marketing communications and any processing activities specifically described as consent-based at the point of data collection.

5. Payment Data

Payment processing at xp666 is handled through third-party payment service providers, including the gateways that support JazzCash, Easypaisa, Raast, and bank transfer transactions. xp666 does not store full card numbers or mobile wallet PINs on its own servers.

When you make a deposit or request a withdrawal, the relevant payment reference (such as your JazzCash account number or bank account details) is transmitted to the payment processor over an encrypted connection. The processor confirms the transaction outcome and returns a reference number that is logged against your account.

Payment data is retained for the period required by applicable financial record-keeping obligations. Payment service providers are contractually required to process xp666 player data only for the purposes of completing transactions and fraud prevention, and may not use it for their own commercial purposes.

6. Data Sharing

xp666 does not sell personal data. Sharing is limited to the following categories of recipients, each bound by confidentiality and data processing obligations:

• Payment processors: JazzCash, Easypaisa, Raast, and banking partners receive the transaction data necessary to process your deposits and withdrawals.
• Identity verification providers: Where document verification is required, identity documents may be shared with a third-party KYC (Know Your Customer) service for verification purposes only.
• Game providers: Technical session data may be passed to game software providers to load and run the games you play. This is limited to session tokens and does not include your full profile or payment history.
• Fraud and security services: IP addresses and device fingerprint data may be shared with fraud detection services to identify suspicious activity.
• Legal and regulatory disclosure: Where required by applicable law, court order, or lawful authority, xp666 may disclose personal data. Such disclosure is made only to the extent required and after legal review where possible.

No personal data is transferred to marketing companies, advertising networks, or data brokers at any time.

7. Data Retention

xp666 retains personal data for as long as is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The following general guidelines apply:

• Active account data is retained for the full duration of the account relationship plus a reasonable period after account closure.
• Financial transaction records are retained for the period required under applicable financial record-keeping regulations, typically a minimum of five years from the date of the transaction.
• Identity verification documents are retained for the period required by applicable anti-money laundering obligations from the date of the last transaction.
• Support correspondence is retained for a period sufficient to resolve any follow-up queries and provide a service history.
• Marketing consent records are retained for the duration of the opt-in plus a reasonable period to demonstrate compliance.

When data is no longer required and there is no legal obligation to retain it, xp666 deletes or anonymises it in a secure manner.

8. Security Measures

xp666 implements a range of technical and organisational measures to protect player data against unauthorised access, loss, alteration, or disclosure. These include:

• SSL/TLS encryption for all data transmitted between player devices and xp666 servers
• Password storage using secure one-way hashing — plain text passwords are never stored
• Access controls limiting internal data access to staff with a legitimate need
• Regular security reviews of platform components
• Monitoring for unusual login patterns and account access anomalies
• Secure deletion procedures for data that is no longer required

While xp666 takes these steps to protect your data, no online platform can guarantee absolute security against all threats. Players are strongly encouraged to use a strong, unique password for their xp666 account, to enable any available account security options, and to contact support immediately if they suspect unauthorised access to their account.

9. Cookies & Tracking

xp666 uses cookies and similar tracking technologies on the platform website and within the web-based version of the mobile experience. Cookies are small data files stored on your device that help the platform remember your session, preferences, and usage patterns.

9.1 Types of Cookies Used

• Essential cookies: Required for the platform to function — maintaining your login session, remembering your language and display preferences, and enabling secure transactions. These cannot be disabled without affecting basic functionality.
• Analytics cookies: Used to understand how players navigate the platform — which pages are visited most, where users encounter friction, and how different sections perform. This data is aggregated and anonymised.
• Security cookies: Used to detect suspicious login patterns and protect against session hijacking and cross-site request forgery.

9.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Note that disabling essential cookies may prevent you from logging in or using core platform features. The xp666 Android app uses local storage rather than browser cookies for session management.

10. Your Rights

As a registered xp666 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with your request and account details.

xp666 will respond to data rights requests within a reasonable period. In cases where a request is complex or large in scope, this may take longer and we will keep you informed of progress.

11. Minors

xp666 is strictly an adult platform for players aged 18 and over. The platform does not knowingly collect personal data from anyone under the age of 18. If you believe that a minor has registered an account or provided personal data on xp666, please contact [email protected] immediately. Upon confirmation, the account will be closed and personal data associated with it deleted, subject to any legal retention obligations.

It is the responsibility of the account holder to ensure that no minor has access to their xp666 account or uses their device while xp666 is active.

12. Policy Updates

xp666 may update this Privacy Policy from time to time to reflect changes in how the platform operates, updates to legal requirements, or feedback from players. When changes are made, the updated policy will be posted on this page with a revised effective date at the top.

For significant changes that materially affect how player data is used, xp666 will notify registered players via the email address or contact number associated with their account where reasonably practicable. Continued use of xp666 after a policy update constitutes acceptance of the revised Privacy Policy.

13. Contact

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how your personal data has been handled, please contact xp666 through the following channels:

• Email: [email protected]
• Support hours: 24 hours a day, 7 days a week
• FAQ: Visit the FAQ page for common account and data questions

Please include your registered account email address or phone number in any data rights request so that we can locate your records and respond accurately. Identity verification may be required before certain data is disclosed or deleted.