xx666 Privacy Policy — How We Protect Your Data

When you register an account with xx666 or complete KYC verification, we collect: your full legal name, date of birth, residential address in Bangladesh, mobile phone number, email address, and copies of identity documents (such as National ID, passport or driving licence) where required for verification purposes. If you contact our support team, we may also retain records of that communication.

When you access and use the Platform, xx666 automatically collects technical information including: your IP address, device type and operating system, browser type and version, session duration and timestamps, pages viewed and games played, and deposit and withdrawal transaction metadata (amounts, timestamps, payment method type — not PINs or OTPs). This data is used to maintain platform security, detect fraud and improve the user experience.

xx666 may receive information about you from third-party payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) to confirm the status of transactions. We may also receive identity verification signals from KYC service providers where required. We do not receive marketing data or behavioural profiles from third parties for advertising targeting. Any third-party data received is used exclusively for the operational purpose for which it was obtained.

We use your registration information and KYC documentation to create and maintain your account, verify your identity and age (21+ requirement), confirm your eligibility to use the Platform, and process your deposits and withdrawals through your chosen payment method. This is the primary lawful basis for our collection and use of personal data — it is necessary for the performance of our contract with you.

Automatically collected technical data (IP address, device fingerprint, session metadata) is used to detect and prevent fraud, identify suspicious account activity, enforce responsible gaming restrictions and comply with our anti-money laundering obligations. Where we are legally required to report suspicious activity to the appropriate authorities, we will do so using the data held on your account. This is a legitimate interest and legal obligation basis for data processing.

Aggregated and anonymised usage data may be used to analyse player behaviour patterns and improve the Platform's features, performance and game offerings. Where you have opted in to receive promotional communications, we may use your email address or mobile number to send you relevant offers and updates from xx666. You may opt out of marketing communications at any time by contacting support or updating your preferences in account settings.

To process your deposits and withdrawals, xx666 must share limited transaction data with payment processors including bKash, Nagad, Rocket, Upay, Visa and Mastercard. We may also share technical data with Platform infrastructure providers (such as hosting, security and game content providers like Pragmatic Play, Evolution Gaming and Ezugi) who process data on our behalf under confidentiality agreements. These service providers are not permitted to use your data for any purpose other than providing services to xx666.

xx666 may disclose personal data to law enforcement agencies, financial intelligence units or other regulatory authorities where we are legally required to do so, or where we have a good faith belief that disclosure is necessary to: (a) comply with a legal obligation; (b) protect the rights or safety of xx666, our players or the public; or (c) investigate, prevent or address fraud, security breaches or other illegal activity detected on the Platform.

In the event of a merger, acquisition, restructuring or sale of all or part of xx666's business operations, personal data held by xx666 may be transferred to the successor entity as part of that transaction. In such an event, xx666 will take reasonable steps to ensure that the successor entity honours the commitments made in this Policy with respect to your personal data. Players will be notified of any such transfer in advance where reasonably practicable.

xx666 does not store your full bKash, Nagad, Rocket or Upay account PINs, card numbers or OTP codes on our servers at any time. Payment transactions are processed directly through the respective payment provider's secure gateway. xx666 retains only the transaction reference number, amount, timestamp, payment method type and outcome (success or failure) for record-keeping and dispute resolution purposes. All payment-related data in transit is protected by SSL encryption.

In accordance with anti-money laundering obligations, xx666 is required to maintain records of financial transactions conducted through the Platform for a minimum retention period. These records include transaction amounts, dates, payment method identifiers and the associated player account reference. These records are held securely and are not used for any commercial purpose. They may be disclosed to relevant financial authorities if xx666 receives a lawful request to do so.

Essential cookies are strictly necessary for the Platform to function. They maintain your login session, remember your language preference and ensure the security of your account during your visit. Essential cookies cannot be disabled without preventing the Platform from working correctly. These cookies do not collect personal information beyond what is required for session management and security.

xx666 may use analytics cookies to collect anonymised data about how players navigate and use the Platform. This data helps us understand which features are most used, where players encounter difficulties and how the Platform can be improved. Analytics cookie data is aggregated and cannot be used to identify individual players. You may opt out of analytics cookies by adjusting your browser settings; doing so will not affect your ability to use the Platform.

xx666 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or alteration. These measures include SSL encryption for all data in transit, access controls limiting data access to authorised personnel only, regular security audits and vulnerability assessments of the Platform, and secure server infrastructure with firewall protection. While we take all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. Players are encouraged to use strong, unique passwords and to enable any available two-factor authentication options on their account.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, xx666 will take immediate steps to contain the breach, assess its scope and severity, and notify affected players without undue delay. Notifications will be sent to the email address or mobile number registered on the affected account and will include a description of the breach, the categories of data affected and the steps players should take to protect themselves.

xx666 retains your personal data for as long as your account remains active and for such additional period as is necessary to comply with applicable legal obligations. While your account is open, we retain registration data, KYC documentation, transaction history and communication records to enable continuous provision of the Platform's services, manage responsible gaming obligations and respond to any regulatory enquiries.

Following closure of a player account, xx666 will retain certain personal data for a minimum period required by applicable anti-money laundering and financial record-keeping regulations. After this mandatory retention period has elapsed, personal data that is no longer required will be securely deleted or anonymised. You may request information about the specific retention period applicable to your data by contacting [email protected].

You have the right to request a copy of the personal data xx666 holds about you. Upon a verified request, we will provide you with a summary of the personal data we hold, the purposes for which it is processed and any third parties to whom it has been disclosed. This right is subject to identity verification before disclosure.

You have the right to request correction of any inaccurate personal data held about you, or completion of any incomplete data. You may update certain account details directly in the account settings section of the Platform. For corrections that cannot be made self-service (for example, corrections to KYC documentation), please contact our support team.

Subject to our mandatory legal retention obligations (including anti-money laundering record-keeping requirements which may require us to retain certain financial records for a defined period after account closure), you have the right to request deletion of your personal data. Requests should be submitted after closing your xx666 account by contacting [email protected]. We will confirm the extent to which your data can be deleted and the timeline for doing so.

The xx666 Platform is strictly restricted to individuals aged 21 and above. xx666 does not knowingly collect or process the personal data of anyone under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the data collected from the underage individual and void any transactions conducted through that account. Parents or guardians who believe their child has registered on xx666 should contact [email protected] immediately so that the account can be closed and the data removed.

xx666 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will post the updated Policy on this page with a revised "Last updated" date. Where the changes materially affect how we handle your personal data, we will notify you via the email address or mobile number registered on your account. Continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns or requests relating to this Privacy Policy or the way xx666 handles your personal data, please contact our support team. You may reach us at [email protected]. Support is available 24 hours a day, 7 days a week. Please include your registered account email or mobile number in your communication so that we can locate your account and respond to your query efficiently.