1Introduction
XZ666 ("we", "us", "xz666", "the platform") operates the website xz666.win and its associated mobile application. This Privacy Policy describes how xz666 collects, uses, shares, and protects personal data relating to users ("you") of the platform.
By creating an account on xz666, you confirm that you have read this Privacy Policy and accept its terms. If you do not accept this policy, you must not register or use the platform.
This policy should be read alongside the Terms and Conditions, which govern the overall relationship between you and xz666. Where there is any conflict between this Privacy Policy and the Terms and Conditions regarding data handling, this Privacy Policy takes precedence.
This policy applies to all registered users of xz666 regardless of which device or method they use to access the platform. It covers data collected via the website, the Android app, and any communications between you and xz666 support.
2Personal Data We Collect
XZ666 collects personal data in two main ways: information you provide directly when registering and using the platform, and information collected automatically as part of platform operation.
Information you provide:
- Full name and date of birth (required for account registration and age verification)
- Email address and phone number
- Residential address (required for full account verification)
- Username and password (password is stored in encrypted form — we cannot see your password)
- Government-issued ID details submitted during verification (CNIC, passport, or equivalent)
- Payment method details — account numbers, mobile wallet identifiers, or bank account information used for deposits and withdrawals
- Communications you send to xz666 support, including chat logs and email correspondence
Information collected automatically:
- Device information: type, operating system version, browser type, screen resolution
- IP address and approximate geographic location derived from it
- Session data: login timestamps, pages visited, games played, bets placed, amounts staked and won
- App usage data when using the xz666 Android application
- Cookies and similar tracking technologies (see Section 7)
| Data Category | Examples | Collected When |
|---|---|---|
| Identity Data | Name, DOB, CNIC / passport | Registration & verification |
| Contact Data | Email, phone, address | Registration |
| Financial Data | JazzCash/Easypaisa numbers, bank details | First deposit / withdrawal |
| Transaction Data | Deposits, withdrawals, bets, wins in PKR | Ongoing platform use |
| Technical Data | IP address, device type, browser | Every session |
| Usage Data | Games played, pages visited, session length | Every session |
| Communications | Support chat logs, email | When you contact support |
3How We Use Your Data
XZ666 uses the personal data it collects for the following purposes:
- Account management: Creating and maintaining your xz666 account, processing login, and managing account settings.
- Age and identity verification: Confirming that you meet the minimum age requirement of 18 years and that your identity matches the information on file.
- Transaction processing: Processing PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer, and other supported payment methods.
- Fraud prevention and security: Detecting and preventing unauthorised account access, duplicate accounts, money laundering, and other fraudulent activity.
- Customer support: Responding to account queries, withdrawal requests, complaints, and responsible gaming tool activations.
- Platform improvement: Analysing usage patterns to improve platform performance, game selection, and user experience.
- Marketing communications: Sending information about promotions, bonuses, and platform updates — subject to your marketing preferences (see Section 9).
- Responsible gaming monitoring: Identifying patterns of activity that may indicate problem gambling and making responsible gaming tools available.
XZ666 does not use personal data for automated decision-making that produces legal or similarly significant effects without human review. Where automated processes flag an account for review — for example, duplicate account detection — a human reviews the case before any action is taken.
4Legal Basis for Processing
XZ666 processes personal data on the following legal grounds:
- Contract performance: Processing necessary to provide the services described in the Terms and Conditions — account operation, transaction processing, customer support.
- Legitimate interests: Fraud prevention, security monitoring, and platform improvement where these interests are not overridden by your rights.
- Consent: Marketing communications, where consent has been given. Consent can be withdrawn at any time.
- Legal obligation: Compliance with anti-money laundering requirements and age verification obligations.
5Data Sharing with Third Parties
XZ666 does not sell your personal data. Data is shared with third parties only in the following circumstances:
- Payment processors: JazzCash, Easypaisa, Raast, and banking partners receive the financial data necessary to process your transactions. These partners operate their own security infrastructure and privacy policies.
- Game providers: Providers such as Pragmatic Play and Evolution Gaming may receive your account identifier and session data to deliver games and maintain game history. They do not receive your full personal profile.
- Identity verification services: Third-party verification providers may process identity documents during the KYC (Know Your Customer) process. These services are bound by confidentiality obligations.
- IT and hosting infrastructure: Server hosting and content delivery providers who process data on xz666's behalf under data processing agreements.
- Legal authorities: Where required by law, regulation, court order, or to prevent serious harm, xz666 may disclose data to relevant authorities without your consent.
All third-party partners engaged by xz666 are required under contract to handle your personal data securely, use it only for the purposes specified, and not share it further without authorisation.
6Payment Data and Security
All data transmitted between your device and xz666.win is protected by SSL (Secure Sockets Layer) encryption. This applies to login, registration, deposits, withdrawals, and all account activity on both the website and the mobile app.
XZ666 does not store full payment credentials on its own servers. When you deposit via JazzCash or Easypaisa, the payment authentication occurs through the respective mobile wallet provider's own infrastructure. XZ666 receives confirmation of the transaction and the associated amount — it does not retain your mobile wallet PIN or full account credentials.
For bank transfers and card transactions, payment data is handled by PCI-DSS compliant payment processors. The same principle applies — xz666 stores a transaction reference and amount, not your full card number or bank account credentials.
Passwords are stored using one-way cryptographic hashing. XZ666 staff cannot see your password in plaintext. If you forget your password, it is reset — not retrieved — through the account recovery process.
Two-factor authentication (2FA) is available on xz666 accounts and is strongly recommended. Enabling 2FA means that even if someone obtains your password, they cannot log in without access to your registered phone or authenticator app.
7Cookies and Tracking Technologies
XZ666 uses cookies and similar technologies (local storage, session tokens) on the website and in the mobile app. These serve the following functions:
- Essential cookies: Required for the platform to function. These maintain your logged-in session, remember your preferences, and ensure secure transactions. They cannot be disabled without preventing the platform from working.
- Analytics cookies: Collect aggregated data about how users navigate the platform — which pages are visited, how long sessions last, which games are most popular. This data helps us improve the platform. Individual users are not identified in analytics reports.
- Functional cookies: Remember choices you have made — such as language preference or responsible gaming settings — so you do not have to set them again each visit.
You can manage cookie preferences through your browser settings. Disabling essential cookies will affect platform functionality. Analytics and functional cookies can be disabled without preventing you from accessing the platform, though some preferences may not be saved between sessions.
8Data Retention
XZ666 retains personal data for as long as your account is active and for a period after account closure as required by anti-money laundering and fraud prevention obligations. The specific retention periods are:
- Account and identity data: Retained for the duration of your account plus a minimum of five years after closure, in line with standard financial record-keeping requirements.
- Transaction records: Deposits, withdrawals, bets, and casino game history are retained for a minimum of five years after each transaction.
- Support communications: Chat logs and email correspondence are retained for three years after the case is closed.
- Technical and usage data: Anonymised and retained for platform analytics. Identifiable session data is retained for twelve months.
After the applicable retention period, data is securely deleted or anonymised. Anonymised data — where individual users cannot be identified — may be retained indefinitely for statistical and platform improvement purposes.
9Your Rights Over Your Personal Data
You have the following rights regarding the personal data xz666 holds about you. To exercise any of these rights, contact xz666 support. Requests are typically processed within 30 days.
10Children and Minors
XZ666 is strictly for adults aged 18 and above. We do not knowingly collect personal data from persons under 18. If we become aware that an account has been registered by or on behalf of a minor, that account will be immediately closed and any data collected will be deleted, except where retention is required for legal or fraud investigation purposes.
If you are a parent or guardian and believe a minor has registered on xz666 using your details or their own, please contact support immediately. We will investigate and act promptly.
Parents concerned about minors accessing online gambling platforms should consider using parental control software at the device or network level, which can block access to gambling sites independently of account-level controls.
11Changes to This Privacy Policy
XZ666 may update this Privacy Policy from time to time to reflect changes in how we handle data, new features on the platform, or changes in applicable requirements. When material changes are made, registered users will be notified via email to their registered address. The updated policy will be published on this page with a revised "Last updated" date.
Continued use of xz666 after an updated Privacy Policy has been published constitutes your acceptance of the revised terms. If you do not accept the changes, you should stop using the platform and contact support to close your account.
12Contact for Privacy Queries
If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how your personal data has been handled, please contact the xz666 support team:
When submitting a data rights request by email, please include your registered email address and a brief description of the request so it can be handled efficiently. Identity verification may be required before certain requests are processed to ensure data is only disclosed to the correct account holder.