Privacy Policy

This Privacy Policy (hereinafter "Policy") is issued by XZ666 (hereinafter "XZ666", "we", "us" or "our"), the operator of the online gaming and sports betting platform accessible at https://xz666.cam/ (hereinafter "the Platform" or "the Site").

XZ666 is committed to safeguarding the privacy and personal data of all individuals who interact with the Platform, including registered players, prospective users and visitors (collectively referred to as "you", "your" or "the User"). This Policy describes how we collect, process, store, share and protect personal data in connection with your use of the Platform and its services.

This Policy is incorporated into and must be read in conjunction with XZ666's Terms & Conditions. By registering an account, accessing the Platform or otherwise using any of XZ666's services, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

The following terms are used throughout this Policy:

• "Personal Data" — any information that relates to an identified or identifiable natural person, including name, email address, physical address, date of birth, financial details and device identifiers.
• "Processing" — any operation or set of operations performed on personal data, whether or not by automated means, including collection, recording, storage, use, disclosure or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. XZ666 acts as the Data Controller in respect of User data collected via the Platform.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller under a contractual arrangement.
• "Cookies" — small text files placed on your device by the Platform to store information and improve user experience.
• "KYC" — Know Your Customer: the identity verification process required to comply with anti-money-laundering obligations.
• "AML" — Anti-Money Laundering: legal and procedural controls to prevent the proceeds of crime from being processed through the Platform.
• "GDPR" — General Data Protection Regulation: EU Regulation 2016/679, which may apply to XZ666's data processing activities depending on the licensing jurisdiction.

XZ666, operator of xz666.cam, acts as the Data Controller in respect of all personal data collected and processed through the Platform. For the purposes of this Policy, the Data Controller's contact details are as follows:

Where XZ666 engages third-party Data Processors to process personal data on its behalf, it does so under contractual arrangements that require those processors to implement appropriate technical and organisational measures to protect personal data in a manner consistent with this Policy.

XZ666 collects personal data in the following categories depending on how you interact with the Platform:

4.1 Registration & Account Data

• Full legal name
• Date of birth
• Residential address (including city — Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar or elsewhere)
• Email address
• Mobile phone number
• Username and encrypted password
• Account currency preference (e.g., PKR)

4.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (CNIC, NICOP, passport or equivalent)
• Proof of address documentation
• Proof of payment method where required (e.g., screenshot of Easypaisa or JazzCash account, bank statement from HBL, UBL, Meezan Bank, Bank Alfalah or other institution)
• Selfie or live verification image where required by AML process

4.3 Financial & Transaction Data

• Deposit and withdrawal records, including amounts and timestamps
• Payment method identifiers (wallet numbers, IBAN references — not full card numbers)
• Account balance history and transaction logs

4.4 Gaming & Betting Activity Data

• Bet placement records, including market, stake amount, odds and outcome
• Casino game session data including game title, duration, wagered amounts and results
• Bonus claims, wagering progress and promotion participation records

4.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system and browser version
• Session timestamps and login history
• Cookie identifiers and analytics tracking data

4.6 Communications Data

• Records of Live Chat conversations, email correspondence and Help Center ticket history
• Feedback, complaints and dispute records

XZ666 processes personal data on the following lawful bases, which vary depending on the specific processing activity:

XZ666 uses the personal data described in Section 4 for the following purposes:

• Account creation and management: To register your account, maintain your profile, authenticate your identity on login and deliver the Platform's services.
• Payment processing: To process deposits and withdrawals via your chosen payment method, reconcile transactions and maintain accurate financial records.
• Identity and fraud verification: To verify your identity as required by KYC and AML procedures, detect fraudulent, abusive or suspicious activity, and protect the integrity of the Platform.
• Regulatory compliance: To fulfil our legal obligations under the applicable licensing framework, including record-keeping, transaction reporting and cooperation with lawful regulatory enquiries.
• Responsible gambling: To monitor gaming patterns, identify indicators of problem gambling behaviour, apply player-initiated limits and self-exclusion requests, and provide appropriate support resources.
• Customer support: To respond to your enquiries, resolve complaints and maintain records of support interactions for quality assurance purposes.
• Platform improvement: To analyse user behaviour, identify technical issues and improve the overall functionality, content and design of the Platform.
• Marketing (with consent): To send you promotional communications about bonuses, new games, PSL specials, cricket tournament offers and other features — only where you have opted in to receive such communications.
• Legal proceedings: To establish, exercise or defend legal claims arising from your use of the Platform.

XZ666 does not sell personal data to third parties. We may share personal data with third parties only in the circumstances described below:

• Payment processors and financial institutions: To process deposits and withdrawals. This may include payment gateway providers, digital wallet services and banking partners. The names of specific payment services referenced on this Site (such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah) are mentioned for contextual reference only; inclusion does not imply that any named provider endorses or facilitates gambling activity.
• Identity verification providers: Third-party KYC and AML service providers who assist in verifying user identity documents and conducting risk assessments.
• Game and software providers: Licensed game studios and technology providers who supply casino games, sportsbook data feeds and platform infrastructure.
• Analytics and technology service providers: Service providers who assist with platform analytics, fraud detection, security monitoring and customer support tooling, operating as Data Processors under contract.
• Regulatory and law enforcement authorities: Where we are required by law, court order, regulatory instruction or legal process to disclose personal data to competent authorities.
• Business transfers: In the event of a merger, acquisition, restructuring or sale of business assets, personal data may be transferred to the acquiring entity subject to equivalent privacy protections.

XZ666 uses cookies and similar tracking technologies (including pixel tags and local storage objects) on the Platform for the purposes described below. By continuing to use the Platform, you consent to the use of cookies as described in this section, subject to any preferences you have set in your account settings or browser.

You may disable non-essential cookies via your browser settings. Please note that disabling essential cookies will impair your ability to use the Platform's core features including account login and cashier access.

XZ666 retains personal data for only as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by applicable law or regulation.

• Account and transaction data: Retained for a minimum period following account closure as required by the operator's licensing obligations and applicable AML regulations. This typically ranges from five to ten years depending on the applicable framework.
• KYC documents: Retained in accordance with AML record-keeping requirements for the applicable regulatory period.
• Communication records: Retained for a reasonable period to enable complaint resolution, quality assurance and legal defence, and then securely deleted.
• Marketing preferences: Retained until you withdraw consent or the account is permanently closed.
• Analytics data: Typically retained in anonymised or aggregated form indefinitely for statistical purposes.

On expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that ensures it can no longer be attributed to an identifiable individual.

XZ666 implements technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, disclosure, alteration and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the Platform.
• Encryption of sensitive data at rest using industry-standard algorithms.
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need.
• Regular security assessments and penetration testing of the Platform's infrastructure.
• Two-factor authentication (2FA) available to all registered users and required for staff with access to personal data systems.
• Incident response procedures, including breach notification protocols in accordance with applicable regulatory requirements.

Notwithstanding these measures, no method of transmission over the internet is entirely secure. XZ666 cannot guarantee the absolute security of data transmitted to the Platform. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately in the event of suspected unauthorised access.

Depending on the applicable data protection laws of the operator's licensing jurisdiction and your own country of residence, you may be entitled to exercise the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data XZ666 holds about you. We will respond within the timeframe required by applicable law, typically within 30 days.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held about you. Some corrections can be made directly via your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data in certain circumstances. This right is subject to overriding obligations under AML legislation and other applicable law, which may require us to retain certain records regardless of your request.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances, for example while a dispute is being resolved.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact XZ666 via Live Chat or email at [email protected]. We may require you to verify your identity before processing any data subject request.

The XZ666 Platform is strictly intended for adults aged 18 years or above, or the higher minimum age required by the applicable operator/license jurisdiction. XZ666 does not knowingly collect personal data from individuals under the applicable minimum age. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the relevant account.

If you are a parent or guardian and believe that a minor in your care has registered on XZ666 or provided personal data to us, please contact our support team immediately via Live Chat or email at [email protected].

XZ666 operates internationally and your personal data may be transferred to, stored or processed in countries outside your country of residence, including countries that may not have data protection laws equivalent to those in your home jurisdiction.

Where such transfers occur, XZ666 takes appropriate steps to ensure that your personal data remains subject to adequate levels of protection, including the use of contractual safeguards such as standard contractual clauses, data processing agreements and other recognised transfer mechanisms as appropriate to the applicable regulatory framework.

With your consent, XZ666 may send you promotional communications by email or other electronic means relating to bonuses, new game launches, cricket and PSL special promotions, esports events, and other features of the Platform.

You may withdraw consent for marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email you receive from XZ666.
• Updating your communication preferences in your account settings.
• Contacting our support team via Live Chat or email at [email protected].

Withdrawal of consent for marketing communications does not affect the lawfulness of processing that occurred prior to withdrawal, nor does it affect the processing of transactional and account-related communications which are necessary for service delivery.

XZ666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements or platform functionality. We will notify registered users of material changes through appropriate means, which may include an email notification, an in-platform announcement or a prominent notice on this page.

The date of the most recent review is displayed at the top of this Policy and at the top of this page. Your continued use of the Platform following any update to this Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with any changes, you should discontinue use of the Platform and may request account closure.

If you have any questions, concerns or requests relating to this Privacy Policy or our handling of your personal data, please contact the XZ666 Data Protection team using the channels below. We take all privacy enquiries seriously and aim to respond within the timeframes required by applicable law.

• Live Chat: Available 24/7 from within the XZ666 Platform — the fastest route for urgent queries.
• Help Center: Accessible from your account dashboard for self-service privacy and account management guidance.
• Email: [email protected] — responses within one business day for standard enquiries; data subject requests processed within the applicable statutory timeframe.

Support is available in English. Urdu-language support is available on request during designated hours. We serve players from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and across Pakistan.