Your personal information and PKR payment details are taken seriously at XC666. This page explains exactly what data we collect, why we collect it, how it is used, and the rights you have as a registered player in Pakistan.
XC666 (accessible at xc666.vin) is an online gaming platform built specifically for players in Pakistan. We operate the platform, manage player accounts, process PKR deposits and withdrawals, and provide gaming services including slots, live casino, sports betting, fish games and the XC666 VIP programme. In doing all of this, we handle personal information belonging to the players who register and use the platform.
This Privacy Policy explains what personal data XC666 collects, the purposes for which it is processed, how long it is retained, who it may be shared with and what rights you have in relation to your own data. This policy applies to all registered players on XC666 and to visitors who browse xc666.vin without registering.
By registering on XC666 or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. This policy should be read alongside the Terms and Conditions, which together form the full agreement governing your relationship with XC666.
Our commitment: XC666 collects only the data that is genuinely necessary to operate the platform safely, process your PKR transactions and deliver a quality gaming experience. We do not sell your personal data to third parties for marketing purposes.
XC666 collects personal data through several channels — information you provide directly during registration and account use, data generated automatically by your use of the platform, and in some cases information we receive from payment providers and game operators. Here is a breakdown of each category:
Note on payment data: When you deposit via JazzCash, Easypaisa or a bank card, the transaction is processed through the payment provider's own infrastructure. XC666 receives a transaction confirmation and reference number — not your full payment credentials. Payment providers operate under their own privacy policies.
XC666 uses the personal data it collects for specific, legitimate purposes directly related to operating the platform and serving registered players in Pakistan. The table below summarises the main purposes and the legal basis for each:
| Purpose | Data Used | Basis |
|---|---|---|
| Account registration & verification | Name, DOB, contact details, CNIC | Contract performance |
| Processing PKR deposits & withdrawals | Payment method details, transaction records | Contract performance |
| Identity & age verification | CNIC copy, DOB, name | Legal obligation / platform integrity |
| Providing gaming services | Account data, usage data, game history | Contract performance |
| Customer support & dispute resolution | Communications, account history | Contract performance / legitimate interest |
| Fraud prevention & security monitoring | IP address, device data, transaction patterns | Legitimate interest / legal obligation |
| Responsible gaming tools & monitoring | Gaming activity, deposit history, set limits | Legitimate interest / legal obligation |
| Platform improvement & analytics | Aggregated usage data, technical data | Legitimate interest |
| Sending account notifications & updates | Email address, mobile number | Contract performance / consent |
| VIP programme management | Wagering history, tier data, account status | Contract performance |
XC666 does not use your personal data for automated decision-making that produces significant legal effects without human review. Fraud prevention flagging may involve automated pattern detection, but account suspensions as a result are reviewed by the XC666 compliance team before action is taken.
Because XC666 processes PKR transactions for Pakistan players via JazzCash, Easypaisa, Raast, bank transfer and card payments, we take payment data security particularly seriously. Here is how payment data is handled at each stage:
When you initiate a deposit through JazzCash or Easypaisa, the transaction is completed within the payment provider's own app or gateway. XC666 does not directly handle your mobile wallet PIN, JazzCash MPIN or Easypaisa credentials. What XC666 receives is a confirmation from the payment provider that a transaction of a specified PKR amount has been authorised, along with a reference number. Your actual authentication credentials never pass through XC666 servers.
Card transactions are processed via a Payment Card Industry Data Security Standard (PCI DSS) compliant payment gateway. Card numbers, CVV codes and full card details are tokenised by the gateway. XC666 stores only a partial card reference (typically the last four digits and card type) to help you identify which card is linked to your account — not the full card data.
Before processing a withdrawal, XC666 may verify that the destination account belongs to the registered player. This verification step protects you from unauthorised withdrawals to third-party accounts. Identity documents submitted for verification are stored securely with access restricted to authorised XC666 staff involved in the verification process.
SSL/TLS Encryption : All data transmitted between your device and xc666.vin is encrypted using SSL/TLS. Look for the padlock icon in your browser address bar — this confirms your connection to XC666 is secure.
XC666 does not sell, rent or trade your personal data to third parties for commercial or marketing purposes. Your data may be shared in the following limited and specific circumstances only:
To process your PKR deposits and withdrawals, we share the minimum necessary information with payment service providers including JazzCash, Easypaisa, Raast and card processing gateways. These providers are bound by their own data protection obligations and are not permitted to use your data for purposes other than completing the transaction.
XC666 integrates games from third-party developers. When you play a slot, join a live casino table or enter a fish game, a session token is shared with the game provider's servers to authenticate your game session. The game provider may record game round data, bets and results for the purpose of game integrity and dispute resolution. Game providers are not provided with your full personal profile or payment details.
Where suspicious account activity is detected — such as patterns consistent with money laundering, bonus abuse or multi-accounting — XC666 may share relevant account data with fraud prevention services or, where legally required, with appropriate authorities. This sharing is conducted only to the extent necessary and in accordance with applicable legal requirements.
XC666 may disclose personal data if required to do so by a valid legal process, court order or regulatory obligation. In such cases, XC666 will share only the data specifically required and will not voluntarily disclose more than necessary.
In the event of a merger, acquisition or transfer of all or part of XC666's business operations, player account data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer that materially affects the handling of their personal data.
All third parties who receive XC666 player data are required to handle it in a manner consistent with this Privacy Policy and are not permitted to use it for purposes beyond those for which it was shared.
XC666 uses cookies and similar local storage technologies on xc666.vin to ensure the platform functions correctly, to remember your preferences and to help us understand how players use the site so we can improve it. Here is a breakdown of the cookie types used:
These cookies are required for the platform to work. They maintain your login session so you do not have to log in again every time you navigate between pages, and they store temporary session state during active game rounds. Without these cookies, core platform functions would not work correctly. These cookies cannot be disabled without breaking platform functionality.
These cookies remember choices you have made — such as your preferred language setting, notification preferences and responsible gaming tool configurations. They make your experience more consistent across visits. You can clear these by clearing your browser's cookies, though your saved preferences will need to be re-entered.
XC666 uses analytics tools to understand aggregate platform usage — which sections are most visited, how players navigate between games and where common drop-off points occur. This data is used in anonymised, aggregated form to improve the platform experience. Analytics cookies do not identify you personally.
You can control cookie settings through your browser's privacy settings. Most browsers allow you to block or delete cookies. Please note that blocking essential cookies will prevent you from logging in and using core platform features. Blocking analytics or preference cookies will not affect your ability to play games or make PKR transactions.
XC666 retains personal data only for as long as it is necessary for the purposes described in this policy. The following general retention guidelines apply:
When data is no longer required and the applicable retention period has passed, it is securely deleted from XC666 systems or anonymised so that it can no longer be linked to your identity.
As a registered player on XC666 you have rights in relation to your personal data. The following rights are available to you and can be exercised by contacting the XC666 support team via live chat or written email:
You can request a copy of the personal data XC666 holds about you. We will provide this in a readable format within a reasonable timeframe following identity verification.
If any of your personal data held by XC666 is inaccurate or incomplete, you can request that it be corrected. Account details can be updated directly in your account settings or by contacting support.
You can request deletion of your personal data in certain circumstances — for example, after your account is closed and the applicable retention period has passed. Some data must be retained for legal and fraud prevention reasons and cannot be deleted on request.
You can object to the processing of your data where XC666 relies on legitimate interest as the legal basis. Where a valid objection is raised, XC666 will review the processing and cease it unless there are compelling legitimate grounds that override your objection.
Where technically feasible, you can request your personal data in a structured, commonly used format so that it can be transferred to another service. This right applies to data you have provided directly to XC666.
In certain circumstances you can request that XC666 restricts the processing of your data — for example, while a rectification request is being reviewed. Restricted data will be stored but not actively processed beyond what is necessary.
To exercise any of the rights above, contact XC666 support via live chat or in writing at the email address displayed in the footer. XC666 will verify your identity before processing any data rights request. Requests will be handled within a reasonable timeframe. There is no charge for submitting a data rights request.
XC666 is strictly an adult platform. The minimum age to register and use XC666 is 18 years. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and you believe that a person under 18 has registered on XC666, please contact our support team immediately via live chat. Upon verification, the account will be closed and any data collected will be deleted in accordance with our data retention obligations.
XC666 takes age verification seriously. During the registration and account verification process, date of birth is collected and, where required, CNIC verification is used to confirm that the account holder is a Pakistani adult aged 18 or above. If any account is found to belong to a minor, it will be closed promptly and any real-money balance handled appropriately.
XC666 implements a range of technical and organisational security measures to protect player data against unauthorised access, alteration, disclosure or destruction. Key measures include:
While XC666 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You also play an important role in protecting your account by keeping your login credentials private, enabling two-step verification and logging out of your account when using shared devices.
Report a security concern: If you believe your XC666 account has been accessed without your permission, or if you notice any suspicious activity on your account, contact XC666 support via live chat immediately so the team can take action to secure your account.
XC666 may update this Privacy Policy from time to time to reflect changes in platform operations, data handling practices or applicable legal requirements. When changes are made, the updated policy will be published on this page with a revised effective date at the top of the document.
For significant changes — particularly those that affect how your data is used or shared — XC666 will notify registered players via the email address associated with their account or through an in-platform notification. It remains your responsibility to review this page periodically to stay informed of the current policy.
Continued use of the XC666 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you disagree with any change, you may request account closure by contacting the support team.
If you have any questions about this Privacy Policy, want to understand how your specific data is handled, or wish to exercise any of the privacy rights described in Section 8, the XC666 support team is available to help. You can reach us through the following channels:
XC666 will acknowledge all formal privacy requests within a reasonable timeframe and aim to provide a full response as quickly as possible. Identity verification will be required before any personal data is disclosed or any data rights action is taken on your account, to ensure your data is protected from unauthorised access.
For questions about responsible gaming tools, deposit limits or self-exclusion, please also see the Responsible Gaming page, where all self-management tools available to Pakistan players are described in full.
Six ways XC666 keeps your personal data and PKR payment details safe from the moment you register.
Every connection between your device and xc666.vin is secured with SSL/TLS encryption. Data in transit — including login credentials and PKR transaction details — cannot be intercepted by third parties.
Your JazzCash, Easypaisa and card details are tokenised — full credentials are never stored on XC666 servers. PKR deposits and withdrawals are processed securely through compliant payment gateways.
CNIC-based verification ensures your account belongs to you and prevents unauthorised withdrawals. Verification documents are stored securely with restricted internal access.
XC666 does not sell, rent or trade your personal information to third-party marketers. Your data is used only for platform operation, payment processing and improving the player experience.
Access, correct or request deletion of your personal data at any time by contacting support. Responsible gaming limits and notification preferences are adjustable directly from your account settings.
XC666 is for adults aged 18 and above only. Age verification during registration and CNIC checks prevent under-age access, protecting younger users and keeping the platform adult-only.