BX666 Privacy Policy

1 Introduction

BX666 ("we", "us", "our", "the Platform") operates the website accessible at https://bx666.cam. We are committed to protecting the privacy and personal data of all individuals ("User", "you", "your") who access or use our Platform.

This Privacy Policy ("Policy") describes in detail what personal data BX666 collects, why we collect it, how we process it, who we may share it with, how long we retain it, and what rights you have in relation to it. This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform.

This Policy was last updated and took effect on 1 January 2026. BX666 reserves the right to update this Policy at any time. Material changes will be notified to registered users prior to the effective date of such changes.

2 Definitions

Throughout this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, email address, phone number, IP address and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, alteration and deletion.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data. For the purposes of this Policy, BX666 acts as the Data Controller.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of BX666 pursuant to a contractual arrangement.
• "Cookies" means small text files placed on your device by the Platform to enable certain functionality and to collect usage data.
• "KYC Data" means identity and age-verification documentation collected for Know Your Customer compliance purposes.
• "Sensitive Data" means categories of Personal Data that warrant enhanced protection, such as financial details, government-issued identification and health-related information provided in the context of responsible gambling self-exclusion requests.
• "Platform" means the BX666 website at https://bx666.cam, including all pages, tools, features and services offered thereon.

3 Data We Collect

BX666 collects the following categories of Personal Data from Users:

• Full legal name, date of birth and nationality
• Email address and contact phone number
• Username and encrypted account password
• Residential address (city, province, country)

• Government-issued photo identification (such as CNIC, passport or driving licence)
• Proof of residential address documentation
• Proof of payment method ownership where required

• Transaction records including deposit amounts, withdrawal requests and account balance history
• Payment method details as required for transaction processing (note: full card or bank account numbers are not stored by BX666 directly — these are handled by payment processors)
• Currency and PKR-equivalent transaction values for reference purposes

• IP address and approximate geolocation
• Device type, operating system, browser type and version
• Session duration, pages visited, game activity logs and betting history
• Cookie identifiers and similar tracking data (see Section 6)

• Content of messages sent to BX666 support via live chat or email
• Records of any complaints, disputes or formal correspondence
• Marketing preference settings and email communication records

• Self-exclusion requests and limit settings
• Problem-gambling assessments or disclosures made voluntarily by the User
• Interaction records with responsible gambling tools

4 How Data Is Collected

BX666 collects Personal Data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC, contacting support or updating your profile.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including via Cookies, server logs and similar technologies.
• Third-party sources: Identity verification and fraud-screening data from KYC service providers; payment processing data from payment processors; geolocation data from IP-resolution services.
• Responsible gambling monitoring: Activity data collected through automated monitoring tools designed to identify patterns associated with problem gambling.

5 Data Processing & Legal Basis

The table below sets out the primary purposes for which BX666 processes Personal Data, together with the lawful basis for each processing activity:

Where BX666 relies on legitimate interests as the basis for processing, those interests are: maintaining platform security and integrity, preventing fraud, improving the user experience, and operating a sustainable gaming platform. These interests are balanced against Users' privacy rights, and BX666 will not process data on this basis where it would cause undue prejudice to your rights.

6 Cookies & Tracking Technologies

BX666 uses cookies and similar tracking technologies to operate the Platform effectively, to analyse usage patterns and to maintain session continuity. The following categories of cookies are used:

• Strictly Necessary — Required for core Platform functionality including login sessions, security tokens and basic navigation. These cannot be disabled without significantly impairing your ability to use the Platform.
• Analytics — Used to collect aggregate, anonymised data about how Users interact with the Platform (pages visited, session duration, errors encountered). This data informs Platform improvements and is not used to identify individual users.
• Functional — Used to remember User preferences such as language settings, display preferences and responsible gambling tool configurations.

You can manage cookie preferences through your browser settings. Please be aware that disabling strictly necessary cookies will affect Platform functionality. Disabling analytics and functional cookies will not prevent you from using the Platform but may reduce the quality of your experience.

7 Data Sharing & Disclosure

BX666 does not sell, rent or trade your Personal Data to third parties. We may share your Personal Data with the following categories of recipients only to the extent necessary for the stated purpose:

• KYC and Identity Verification Providers: To verify your identity and age in compliance with our obligations.
• Payment Processors: To facilitate deposits and withdrawals. Payment method names such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are referenced contextually — actual active payment processors are confirmed in the cashier and subject to change.
• Fraud Prevention and Security Services: To detect and prevent fraudulent account activity, money laundering and other security threats.
• Technology and Hosting Providers: Service providers that host, maintain and support the Platform's infrastructure, under strict data-processing agreements.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order or a legally valid instruction from a competent authority.
• Professional Advisers: Legal, accounting and auditing advisers where necessary for the operation of the business, bound by professional confidentiality obligations.

8 International Data Transfers

BX666 may process or store Personal Data on servers located outside of Pakistan. Where Personal Data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that available in the country from which the data originates, BX666 will implement appropriate safeguards to protect such transfers, including but not limited to contractual data transfer mechanisms, standard contractual clauses or equivalent protections.

By using the BX666 Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Pakistan. Such transfers are made solely to the extent necessary for the operation of the Platform and the fulfilment of our obligations to you.

9 Data Retention

BX666 retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account and for a defined period following account closure, to fulfil legal obligations and allow for dispute resolution.
• KYC & Identity Documents: Retained for a minimum period as required by applicable anti-money laundering and regulatory obligations, typically no less than five years from the date of the last transaction or account closure.
• Financial Transaction Records: Retained in accordance with applicable financial record-keeping obligations.
• Responsible Gambling Records: Self-exclusion and limit records are retained for the duration of the exclusion period and for a reasonable period thereafter, to prevent re-registration during an active exclusion.
• Analytics and Technical Data: Retained in anonymised or aggregated form; individual-level technical data is typically retained for no more than 24 months.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with BX666's data disposal procedures. Requests for early deletion are handled under Section 11 (User Rights) below, subject to any overriding legal retention obligations.

10 Data Security

BX666 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:

• Encryption of data in transit using TLS (Transport Layer Security) protocols
• Encryption of sensitive data at rest
• Access controls restricting Personal Data access to authorised personnel only, on a need-to-know basis
• Regular security reviews, vulnerability assessments and penetration testing
• Multi-factor authentication requirements for administrative access to systems containing Personal Data
• Documented incident response procedures for data-breach scenarios

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. BX666 cannot provide an absolute security guarantee. In the event of a data breach that is likely to result in a significant risk to Users, BX666 will notify affected Users and relevant authorities as required by applicable law.

11 User Rights

Subject to applicable law and the limitations described in this Policy, you have the following rights in relation to your Personal Data held by BX666. To exercise any of these rights, submit a written request to our support team (see Section 15).

BX666 will respond to all data-subject rights requests within a reasonable timeframe and no later than 30 days from receipt of a valid, verified request. Where a request is particularly complex or BX666 receives a high volume of requests, this period may be extended by a further 30 days with notification to you. Identity verification will be required before any rights request is actioned to protect against fraudulent access to personal data.

12 Children & Minors

The BX666 Platform is strictly for adults aged 18 or over, or the higher minimum age required by the applicable operator license jurisdiction. BX666 does not knowingly collect Personal Data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has provided Personal Data to BX666, please contact us immediately at [email protected]. Upon verified notification, BX666 will take prompt steps to delete any such data and close any associated Account.

Age verification is a mandatory step in the KYC process. If age cannot be verified to BX666's satisfaction, the Account will be suspended until satisfactory documentation is provided. Accounts found to have been registered by or on behalf of a minor will be permanently closed and any funds forfeited.

13 Third-Party Links & Services

The BX666 Platform does not include links to third-party websites except within the navigation structure of this Platform. However, some payment processing and identity verification services operate through third-party providers. When you interact with these services, their own privacy policies govern the handling of your data within their systems.

BX666 is not responsible for the privacy practices or content of any third-party service providers. We encourage you to review the privacy policies of any third-party services you interact with in connection with using BX666.

14 Policy Amendments

BX666 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or Platform functionality. Material amendments will be communicated to registered Users via email and/or a prominent notice on the Platform prior to the effective date of the change.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with any amendment, you must cease using the Platform and contact support to request Account closure and the return of any eligible Real-Money Balance.

The date at the top of this Policy ("Last Updated") reflects when the most recent version came into effect. We recommend reviewing this Policy periodically to remain informed of how BX666 handles your Personal Data.

15 Contact & Data Requests

For all privacy-related enquiries, data-subject rights requests, data-breach notifications or general questions about this Policy, please contact the BX666 Data Protection team. All requests will be acknowledged and actioned in accordance with the timelines set out in Section 11.

For questions about your Account, deposits or withdrawals, visit our FAQ page. For responsible gambling support including self-exclusion, please visit our Responsible Gambling page.