HX666 is committed to protecting the personal data of every user on our platform. This Privacy Policy explains what information we collect, why we collect it, how it is used, who it may be shared with and what rights you have over your own data.
HX666 does not sell, rent or trade your personal data to third-party advertisers or data brokers under any circumstances.
All data exchanged between your device and HX666 servers is transmitted over HTTPS using industry-standard TLS encryption protocols.
You may request access to, correction of or deletion of your personal data at any time, subject to applicable legal retention obligations.
We explain clearly which cookies we use, why each category exists and which are strictly necessary versus optional for your session.
This Privacy Policy (the "Policy") is issued by HX666 (the "Platform", "we", "us" or "our") and applies to all personal data collected from, or generated by, users of the website located at hx666.cam and all associated services (the "Services").
The purpose of this Policy is to provide complete transparency about our data-processing activities — what personal data we collect, the lawful basis on which we process it, how long we retain it, to whom it may be disclosed and the rights that data subjects may exercise at any time.
By registering an Account or using the Services, you confirm that you have read and understood this Policy. If you do not agree to the practices described herein, you must not use the Services. This Policy should be read in conjunction with HX666's Terms & Conditions.
In this Policy, the following terms carry the meanings defined below:
| Term | Meaning |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person — including name, email address, device identifiers and transaction history — regardless of the format in which it is held. |
| Processing | Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, erasure or destruction. |
| Data Subject | The individual to whom the Personal Data relates — in this context, primarily the registered Account holder. |
| Controller | The entity that determines the purposes and means of Processing Personal Data. For the purposes of this Policy, HX666 is the Controller. |
| Processor | A third party that processes Personal Data on behalf of the Controller under a contractual arrangement, such as a KYC verification provider or payment gateway. |
| Consent | A freely given, specific, informed and unambiguous indication of the Data Subject's agreement to the Processing of their Personal Data for a stated purpose. |
| Retention Period | The defined duration for which Personal Data is stored before being securely deleted or anonymised, as described in Section 8 of this Policy. |
HX666 collects Personal Data through several channels. The categories of data we collect are described below.
When you create an Account, we collect the personal information you provide, which typically includes:
As part of our mandatory Know Your Customer (KYC) process — which exists to verify your identity, confirm your age and meet AML compliance obligations — we collect:
In connection with deposits, withdrawals and betting activity, we collect transaction records including deposit amounts (in PKR), payment method references, withdrawal requests and bet history. Payment method references — including contextual references to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are recorded for transaction reconciliation purposes only. These providers do not share data with HX666 and do not endorse the Platform.
We automatically collect certain technical data when you access the Platform, including:
If you contact our support team, we retain records of the correspondence — including live chat transcripts and email exchanges — for quality assurance, training and dispute-resolution purposes.
We rely on the following lawful bases to process your Personal Data, consistent with internationally recognised data-protection principles:
| Legal Basis | When Applied |
|---|---|
| Contractual Necessity | Processing required to perform the Account agreement with you — including registration, KYC, processing deposits and settling bets. |
| Legal Obligation | Processing required to comply with AML regulations, age-verification requirements and any regulatory disclosure obligations imposed on the operator. |
| Legitimate Interests | Processing necessary for fraud detection, platform security, responsible-gambling monitoring and improving the Services — where our interests are not overridden by your data-protection rights. |
| Consent | Processing for optional communications such as promotional emails, where you have explicitly opted in. You may withdraw consent at any time by contacting support. |
HX666 uses the Personal Data it collects for the following purposes:
HX666 does not sell, rent or trade your Personal Data. We may share it only in the following limited circumstances:
We engage third-party Processors to support specific operational functions under binding data-processing agreements that restrict their use of your data to the purpose for which it was shared. These include KYC and identity verification providers, payment processing infrastructure, fraud-detection services and cloud-hosting providers. All Processors are required to implement appropriate technical and organisational security measures.
We may disclose Personal Data to law enforcement agencies, regulatory authorities or courts where required to do so by applicable law, a valid court order or a regulatory direction. We will, where permitted by law, notify you of such a request before complying.
In the event of a merger, acquisition or sale of all or part of HX666's business, Personal Data may form part of the transferred assets. Any successor entity will be required to honour the commitments made in this Policy, or to notify you of any material changes before they take effect.
Where we wish to share your Personal Data for a purpose not described above, we will seek your explicit consent before doing so.
As an online platform serving users across multiple regions, HX666 may process or store your Personal Data on servers located outside Pakistan. Where data is transferred internationally, we take steps to ensure that appropriate safeguards are in place, consistent with internationally recognised data-protection standards.
Such safeguards may include contractual clauses in agreements with Processors, requiring them to protect Personal Data to a standard equivalent to that described in this Policy. If you have questions about the specific safeguards applied to your data in connection with an international transfer, please contact us using the details in Section 15.
We retain Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention principles apply:
| Data Category | Indicative Retention Period |
|---|---|
| Account & Registration Data | Duration of the Account relationship, plus a minimum of five (5) years post-closure to meet AML record-keeping obligations. |
| KYC & Identity Documents | Minimum of five (5) years from the date of verification, or longer if required by the operator's license jurisdiction. |
| Transaction & Betting History | Minimum of five (5) years from the transaction date, consistent with standard financial record-keeping requirements. |
| Support & Communications Records | Up to three (3) years from the date of the interaction, or longer if the communication relates to an unresolved dispute. |
| Technical & Usage Logs | Up to twelve (12) months, unless retained longer for specific fraud-investigation or security purposes. |
Upon expiry of the applicable Retention Period, Personal Data will be securely deleted or irreversibly anonymised so that it can no longer be attributed to any individual.
HX666 uses cookies and similar tracking technologies to operate certain platform features, understand how the site is used and support security measures. A cookie is a small text file stored on your device by your browser when you visit a website.
We use the following categories of cookies:
| Category | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Required for the Platform to function — including maintaining your login session, remembering your betting slip and enabling secure navigation between pages. | No — essential for service delivery |
| Functional | Remember your preferences, such as language settings, display options and responsible-gambling tool configurations, so you do not need to reset them each visit. | Yes — where not strictly necessary |
| Analytics | Collect aggregated, anonymised data on how users navigate the Platform — including which pages are visited most frequently and where users exit — to improve the overall experience. | Yes |
| Security | Support fraud-detection measures, such as identifying anomalous login patterns or unusual betting behaviour that may indicate account takeover or abuse. | No — legitimate security interest |
You may control or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform — for example, session cookies are required to maintain your logged-in state. Browser-level cookie management instructions are available through your browser's help documentation.
The HX666 platform is strictly intended for adults aged 18 or older, or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect Personal Data from individuals below the applicable minimum age.
Age verification is a mandatory step in our registration and KYC process. If we become aware that Personal Data has been submitted by or on behalf of a minor, we will immediately close the associated Account, delete the data without retention (unless required for legal reporting purposes) and take appropriate further action.
If you believe that a person under the minimum age has registered an Account on this Platform, please notify us immediately at [email protected] (plain text — not a link).
Subject to applicable law and any overriding legal obligations (such as AML record-keeping requirements), you have the following rights in relation to your Personal Data:
You may request a copy of the Personal Data we hold about you, together with information about how it is processed.
You may request correction of inaccurate or incomplete Personal Data. Certain corrections may require supporting documentation.
You may request deletion of your Personal Data where we no longer have a lawful basis for retaining it, subject to mandatory retention obligations.
You may request that we restrict the processing of your Personal Data in certain circumstances, for example while the accuracy of data is being contested.
You may request that we provide your Personal Data in a structured, machine-readable format where processing is based on consent or contract.
You may object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your rights.
To exercise any of the above rights, please submit a written request to [email protected] (plain text — not a link) with sufficient detail to identify your Account. We will aim to respond within a reasonable timeframe. We may request identity verification before processing a rights request to ensure data security.
HX666 implements technical and organisational measures designed to protect Personal Data against unauthorised access, accidental loss, alteration or disclosure. These measures include, but are not limited to:
While we take reasonable steps to protect your data, no system is entirely immune from security risk. You are responsible for maintaining the security of your Account credentials and for logging out of the Platform after each session, particularly on shared or public devices.
This Policy applies solely to Personal Data processed by HX666 in connection with the hx666.cam platform. References to payment brands (Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah), sports leagues (PSL, ICC) or other third parties are made for contextual familiarity only. HX666 is not responsible for the privacy practices of any third-party entity referenced on this Platform.
HX666 does not include outbound hyperlinks to external websites within its pages. However, users who independently navigate to third-party websites are advised to review those sites' own privacy policies, as this Policy does not extend to them.
HX666 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business operations or data-processing practices. When material changes are made, the updated Policy will be published on this page with a revised "Last Reviewed" date prominently displayed at the top of the document.
Where a change is material — meaning it significantly affects how your Personal Data is used or your rights in relation to it — we will make reasonable efforts to notify active Account holders through the email address registered to their Account prior to the change taking effect.
Your continued use of the Services following publication of a revised Policy constitutes acceptance of the updated terms. If you disagree with any material change, you may request Account closure as described in our Terms & Conditions.
If you have any questions about this Privacy Policy, wish to exercise a data right or wish to raise a formal complaint about how your Personal Data has been handled, please contact us using the details below.
When submitting a privacy-related query or formal complaint, please include your Account username (not your password), a clear description of the issue, the category of Personal Data involved, the right you wish to exercise or the concern you are raising, and your preferred format for the response. We aim to acknowledge all privacy-related communications within a reasonable timeframe and to resolve them within a reasonable period of receipt.
If you are not satisfied with our response, you may have the right to escalate the matter to the relevant data-protection supervisory authority in your jurisdiction. The availability of such a route will depend on the laws applicable in your location.
Your personal data is never sold, rented or bartered to third-party advertisers. Data sharing is limited strictly to licensed operational Processors under binding contractual obligations.
We do not retain data indefinitely. Each category of data has a defined Retention Period aligned with AML, regulatory and operational requirements. Data is securely deleted or anonymised at expiry.
Promotional communications are sent only to users who have explicitly opted in. You can withdraw consent and unsubscribe at any time — there are no barriers to opting out of marketing messages.
You now know exactly how HX666 handles your data. Transparent terms, honest cookie use and genuine user rights — that is the standard we hold ourselves to. Adults 18+ only. Local laws in Pakistan may restrict gambling.
🔞 Adults 18+ only, or the higher minimum required by the operator/license jurisdiction. Gambling involves financial risk. Please play responsibly.