x666 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how x666 ("x666", "we", "us", "our") collects, uses, stores, and discloses personal data relating to individuals ("you", "your", "Player") who access or use the x666 online gaming platform available at x666.run.

x666 is committed to protecting the privacy and personal data of all players in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission ("NPC").

By registering an account on x666 or by continuing to use the x666 platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the x666 platform.

This Policy should be read together with the x666 Terms & Conditions, which govern your use of the platform and are incorporated herein by reference.

2. Data Controller

x666 is the data controller responsible for the personal data collected through the x666 platform. As data controller, x666 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with applicable data protection laws.

For all data privacy enquiries, requests, and complaints, you may contact the x666 Data Protection Officer (DPO) at the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

x666 collects the following categories of personal data:

3.1 Identity & Registration Data

• Full legal name as it appears on a government-issued ID;
• Date of birth (to verify that you are at least 21 years of age);
• Gender;
• Nationality and country of residence;
• Government-issued identification number (e.g., Philippine passport number, driver's licence number, SSS/UMID number).

3.2 Contact Data

• Email address;
• Mobile phone number;
• Residential address (province, city/municipality, barangay, postal code).

3.3 Financial & Payment Data

• GCash or PayMaya account number (mobile number);
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) where applicable;
• Credit or debit card details (card number, expiry, and CVV are processed by our PCI-DSS compliant payment processor — x666 does not store full card numbers);
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment methods used.

3.4 Gaming & Activity Data

• Game history, bet amounts, win/loss records, and session durations;
• Bonus and promotion usage history;
• Responsible gaming settings and self-exclusion records;
• Customer support interaction records.

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser type;
• Cookies and similar tracking technologies (see Section 9);
• Login timestamps and session activity logs.

4. How We Collect Your Data

x666 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account settings;
• Automatically — through cookies, web beacons, and server logs when you access and use the x666 platform;
• From third parties — from identity verification service providers, payment processors (such as GCash and PayMaya), fraud prevention services, and, where applicable, from gaming regulators.

5. Purposes & Legal Basis for Processing

x666 processes your personal data for the following purposes and on the following legal bases:

6. Sharing Your Personal Data

x666 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. x666 may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and card payment processors, for the purpose of processing deposits and withdrawals;
• Identity verification providers: Third-party KYC and AML service providers engaged to verify your identity and comply with regulatory requirements;
• Game providers: Licensed game software providers whose games are available on the x666 platform, to the extent necessary to deliver the gaming service;
• Regulatory authorities: Philippine gaming regulators, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other government authorities, where disclosure is required by law;
• IT and security service providers: Cloud hosting, cybersecurity, and platform infrastructure providers engaged by x666 under data processing agreements;
• Professional advisers: Legal, accounting, and auditing firms, subject to professional confidentiality obligations.

All third-party service providers engaged by x666 are required to process personal data only in accordance with x666's instructions and applicable data protection laws.

7. Data Retention

x666 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

As a general rule:

• Account and identity data is retained for a minimum of five (5) years from the date of account closure, in accordance with applicable AML and gaming regulatory requirements;
• Transaction and financial records are retained for a minimum of five (5) years from the date of the transaction;
• Customer support records are retained for three (3) years from the date of the interaction;
• Technical and device data (logs) are retained for up to twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with x666's data disposal procedures.

8. Data Security

x666 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the x666 platform;
• Encryption of sensitive data at rest, including financial and identity data;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing of the x666 platform;
• Two-factor authentication (2FA) available for all player accounts;
• PCI-DSS compliant payment processing for card transactions.

While x666 takes all reasonable steps to protect your personal data, no method of transmission over the internet or method of electronic storage is completely secure. x666 cannot guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, x666 will notify you and the National Privacy Commission in accordance with applicable law.

9. Cookies & Tracking Technologies

x666 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit x666.run.

9.1 Types of Cookies Used

• Strictly necessary cookies: Required for the platform to function, including session management and login authentication. These cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings and responsible gaming limits.
• Analytics cookies: Collect anonymised data about how players use the x666 platform, helping us improve performance and user experience.
• Security cookies: Used for fraud detection and to protect the integrity of player accounts.

9.2 Managing Cookies

You may control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies may affect the functionality of the x666 platform. x666 does not use cookies to serve third-party advertising.

10. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by x666:

• Right to be informed: You have the right to be informed of how your personal data is being collected and processed, as set out in this Policy;
• Right of access: You have the right to request a copy of the personal data x666 holds about you;
• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data;
• Right to erasure: You have the right to request deletion of your personal data, subject to x666's legal retention obligations;
• Right to object: You have the right to object to the processing of your personal data on grounds relating to your particular situation, where processing is based on legitimate interest;
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal;
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact the x666 Data Protection Officer using the contact details in Section 15. x666 will respond to all verified requests within thirty (30) days.

11. Minors

The x666 platform is strictly intended for individuals who are at least 21 years of age. x666 does not knowingly collect personal data from individuals under the age of 21. If x666 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, the data will be deleted, and any deposits will be returned.

If you are a parent or guardian and believe that a minor has registered an account on x666, please contact x666 support immediately at [email protected] so that appropriate action can be taken.

12. International Data Transfers

x666 primarily processes and stores personal data within the Philippines. Where personal data is transferred to service providers or partners located outside the Philippines (for example, cloud infrastructure providers or game software providers), x666 ensures that such transfers are made in compliance with the Philippine Data Privacy Act, including by implementing appropriate safeguards such as data processing agreements that require the recipient to provide a level of data protection equivalent to that required under Philippine law.

13. Third-Party Services

The x666 platform integrates with third-party services including payment gateways (GCash, PayMaya, BPI, BDO, Metrobank), game software providers, and identity verification services. When you interact with these third-party services, their own privacy policies apply to the data they collect. x666 is not responsible for the privacy practices of third-party service providers, though x666 takes reasonable steps to ensure that all third-party providers engaged by x666 maintain appropriate data protection standards.

14. Changes to This Privacy Policy

x666 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, x666 will notify registered players by email and/or by posting a prominent notice on the x 666 platform. The updated Policy will take effect from the date of publication. Your continued use of the x666 platform after the effective date constitutes your acceptance of the revised Policy.

15. Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by x666, please contact the x666 Data Protection Officer:

Email: [email protected]

x666 aims to respond to all data privacy enquiries and requests within thirty (30) days of receipt. If you are not satisfied with x666's response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.