666x Privacy
Policy

This Privacy Policy (the "Policy") describes how 666x ("we", "us", "our", or the "Company") collects, uses, stores, discloses, and protects personal data relating to individuals ("you", "your", or "Player") who access or use the 666x online betting and casino platform available at https://666x.io (the "Platform").

We are committed to protecting the privacy and security of all personal data entrusted to us. This Policy is designed to give you a clear and transparent account of our data practices so that you can make informed decisions about your use of the Platform. Please read this Policy carefully before registering an account or submitting any personal information.

This Policy applies to all personal data collected through the Platform, including data collected via the website, customer support channels, marketing communications, payment processing activities, and identity verification processes. It should be read alongside the 666x Terms and Conditions and Responsible Gaming Policy, which together govern your use of the Platform.

The effective date of this Policy is January 2026. When material changes are made to this Policy, the effective date will be updated and registered users will be notified. The most current version of this Policy will always be accessible at https://666x.io/privacy-policy.

666x collects personal data in the following categories. We collect only the data that is necessary for the purposes described in this Policy and do not collect data excessively or beyond what is proportionate to those purposes.

We do not intentionally collect sensitive categories of personal data such as health information, religious beliefs, or political opinions. If you voluntarily disclose such information to our support team (for example, when requesting a self-exclusion on medical grounds), we will handle that information with additional care and will not use it for any purpose other than processing your request.

666x uses the personal data we collect for the following purposes. Each purpose is linked to a legal basis for processing, which is set out in detail in Section 4 of this Policy.

• Account creation and management: To register your account, verify your identity, manage your account settings, and maintain accurate records of your account status and activity.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, DBBL, BRAC Bank, and other supported payment partners; to maintain transaction records; and to resolve payment disputes.
• Identity verification (KYC): To verify that you meet the minimum age requirement of 21 years and to confirm that you are who you say you are, in accordance with our obligations to prevent fraud and money laundering.
• Service delivery: To provide you with access to cricket betting markets, casino games, live dealer games, crash games, and all other features of the Platform; to process your bets and game rounds; and to credit your account with winnings.
• Customer support: To respond to your queries, complaints, and requests made via live chat, email, or any other support channel; to maintain records of our interactions with you; and to improve our support quality.
• Fraud prevention and AML compliance: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the Platform; to comply with applicable anti-money laundering and counter-terrorism financing obligations.
• Responsible gaming: To monitor your betting and gaming patterns for indicators of problem gambling behaviour; to enforce self-exclusion requests, deposit limits, and cooling-off periods; and to provide you with access to responsible gaming resources.
• Platform improvement: To analyse Platform usage data for the purpose of improving our products, user experience, game selection, and payment options.
• Marketing communications: To send you promotional offers, bonus notifications, BPL/IPL betting previews, Eid promotions, and other marketing content — but only where you have given your explicit consent to receive such communications.
• Legal compliance: To comply with applicable legal obligations, court orders, regulatory requirements, and requests from competent authorities.

Every instance of personal data processing by 666x is grounded in at least one of the following legal bases:

• Contractual necessity: Processing that is required to enter into or perform our contract with you as a registered 666x player. This covers account registration, payment processing, bet settlement, and game delivery. Without this processing, we cannot provide the Platform to you.
• Legal obligation: Processing that is required to comply with legal obligations applicable to 666x, including anti-money laundering verification, record-keeping requirements, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing that is necessary for purposes of our legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. This covers fraud prevention, platform security, internal analytics, and responsible gaming monitoring.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent. This applies primarily to marketing communications. Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

666x does not sell your personal data to any third party. We share personal data only with the categories of recipients listed below, and only to the extent strictly necessary for the stated purpose:

• Payment service providers: We share the minimum necessary transaction data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and other payment partners to process deposits and withdrawals to and from your 666x account.
• Identity verification providers: We may engage third-party KYC and identity verification services to verify your identity documents and date of birth. These providers process your data under strict contractual confidentiality obligations.
• Game providers: When you play casino games or live dealer games on the Platform, the relevant game provider — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — may receive your anonymised session data (player ID, stake, game round outcome) to deliver the game experience and certify fair play. Game providers do not receive your full name, national ID, or payment details.
• Fraud prevention and AML partners: We may share data with fraud detection and anti-money laundering screening services to protect the integrity of the Platform and meet our compliance obligations.
• Legal and regulatory authorities: We may disclose personal data to courts, regulatory agencies, law enforcement bodies, or other competent authorities when required to do so by applicable law, court order, or legal process.
• Corporate transactions: In the event of a merger, acquisition, reorganisation, or sale of all or part of the 666x business, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

The 666x Platform uses cookies and similar tracking technologies to deliver core functionality, improve the user experience, analyse Platform performance, and — where you have given consent — to deliver relevant promotional content. A cookie is a small text file stored on your device by your browser when you visit a website.

We use the following categories of cookies:

• Strictly necessary cookies: These are essential for the Platform to function. They enable core features such as account login session management, security token validation, and load balancing. These cookies cannot be disabled without affecting Platform functionality.
• Performance and analytics cookies: These cookies collect anonymised information about how visitors use the Platform — for example, which pages are visited most frequently, how long sessions last, and where errors occur. This data helps us improve Platform performance and user experience.
• Functionality cookies: These cookies remember your preferences, such as your preferred language, notification settings, and display options, to provide a more personalised experience on return visits.
• Marketing and targeting cookies: These cookies are used to deliver promotional content relevant to your interests, including BPL and IPL betting promotions. They are only set with your prior consent and can be withdrawn through your account notification preferences.

You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled via browser settings without preventing access to secure areas of the Platform.

666x retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. When your data is no longer required, we will securely delete or anonymise it.

The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your account and for a period of five (5) years following permanent account closure. This retention period reflects our AML record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in line with standard financial record-keeping requirements applicable to payment processing activities.
• Betting and game history: Retained for five (5) years from the date of each transaction, to allow for dispute resolution, audit, and regulatory review if required.
• Customer support records: Retained for three (3) years from the date of the last interaction, to allow us to reference prior support history and manage recurring issues effectively.
• Marketing preference data: Retained until you withdraw consent or request deletion. If you opt out of all marketing, your opt-out preference will be retained indefinitely to ensure we do not inadvertently contact you again.
• Technical and log data: Typically retained for twelve (12) months from the date of generation, after which it is anonymised or deleted unless required for an ongoing security investigation.

Where we are required by law to retain data for a longer period than stated above, the legal retention period will take precedence. In such cases we will restrict processing of the data to only those activities necessary to satisfy the legal requirement.

666x takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information from unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the 666x Platform is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser confirms that your connection is secure.
• Password hashing: Account passwords are stored using one-way cryptographic hashing algorithms. We do not store your password in plain text and cannot retrieve it. If you forget your password, a reset link will be sent to your registered email address.
• Access controls: Access to personal data held by 666x is restricted to authorised personnel who have a legitimate operational need. All staff with access to personal data are subject to confidentiality obligations.
• Two-factor authentication: We encourage all players to enable two-factor authentication (2FA) on their accounts. 2FA adds a second layer of protection by requiring a one-time code in addition to your password at login.
• Fraud monitoring: Our platform operates continuous automated fraud detection systems that flag unusual account activity, including login attempts from unrecognised devices or locations, unusual withdrawal requests, and suspicious betting patterns.
• Regular security reviews: We conduct periodic internal security reviews and engage independent security assessments to identify and remediate vulnerabilities in our systems and processes.

Subject to applicable law, you hold the following rights in respect of your personal data held by 666x. To exercise any of these rights, please contact our support team at [email protected]. We will respond to verified rights requests within 30 calendar days.

Please note that certain rights are subject to limitations. For example, we may be required by law to retain certain data even after an erasure request, in which case we will explain the specific legal basis for retaining it. We will never discriminate against you for exercising any of your data rights.

If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a minor has registered a 666x account using false date-of-birth information, please contact us immediately at [email protected] with relevant details and we will act promptly.

We take our responsibility to protect minors extremely seriously. Our age verification procedures are designed to prevent underage access to the Platform, and we continuously review and strengthen these controls. Players found to have provided false age information during registration will have their accounts permanently closed and any winnings forfeited in accordance with our Terms and Conditions.

The 666x Platform may from time to time contain references to third-party services, game providers, or payment partners. While we take care to work only with reputable partners, we are not responsible for the privacy practices or content of any third-party websites or services that are accessed outside the 666x Platform.

If you follow a link to any third-party website or service, please note that those sites have their own privacy policies and that we have no control over how they collect or use your personal data. We encourage you to review the privacy policy of any third-party service before submitting personal information to it. This Privacy Policy applies solely to data collected and processed by 666x through the Platform at https://666x.io.

666x sends promotional communications — including welcome bonuses, deposit match offers, free bet promotions, BPL and IPL season campaigns, Eid special offers, and Pohela Boishakh promotions — only to players who have given their explicit consent to receive such communications during account registration or through their account notification preferences.

You may opt out of marketing communications at any time using any of the following methods:

• Updating your notification preferences within your 666x account settings.
• Clicking the unsubscribe link included in any promotional email sent by 666x.
• Contacting our customer support team at [email protected] with a clear request to be removed from all marketing communications.

Please allow up to five (5) business days for your opt-out preference to take effect across all communication channels. Note that even after opting out of marketing, you will continue to receive essential transactional communications such as deposit confirmations, withdrawal notifications, account security alerts, and updates to our terms and policies. These operational messages are not marketing communications and cannot be disabled without closing your account.

666x reserves the right to update, modify, or replace this Privacy Policy at any time. We will notify registered players of material changes by posting a prominent notice on the Platform and, where the changes are significant, by sending a notification to your registered email address at least fourteen (14) days before the updated Policy takes effect.

Minor amendments — such as corrections to typographical errors, clarifications that do not affect your rights, or updates to reflect changes in applicable law — may be made without advance notice. The effective date shown at the top of this Policy will always reflect the date of the most recent revision.

Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should stop using the Platform and contact us to request closure of your account and deletion of your personal data where applicable.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 666x handles your personal data, please contact our Data Support team using the details below. We are committed to resolving all privacy-related queries promptly and transparently.

• Email: [email protected] (plain text — not a clickable link)
• Response time: We aim to acknowledge all privacy-related enquiries within 3 business days and to resolve them within 30 calendar days of receipt.
• Support hours: 24/7 live chat support is available through the Platform for urgent account-related issues. Email responses are handled during standard business hours, Bangladesh Standard Time (BST, UTC+6).
• Postal correspondence: For formal data rights requests requiring documentary evidence, please contact us first by email so that we can guide you through the verification process.

When submitting a data rights request, please include your registered username and the email address associated with your 666x account so that we can verify your identity before processing your request. We will not action data rights requests from unverified sources in order to protect your account security.