11x666 Privacy Policy

1.1 For the purposes of this Privacy Policy, 11x666 ("we", "us", "our") acts as the data controller in respect of personal information collected from users of the 11x666 platform accessible at https://11x666.app.

1.2 As data controller, 11x666 is responsible for determining the purposes for which and the manner in which personal data is processed. 11x666 processes personal data in accordance with applicable data protection law and the principles set out in this Privacy Policy.

1.3 Queries regarding the processing of personal data or this Privacy Policy should be directed to 11x666's data team via the support contact detailed in Section 12.

2.1 11x666 collects personal information in the following categories:

2.2 11x666 does not collect or process sensitive personal data beyond what is strictly required for identity verification and age confirmation (CNIC). Biometric data is not collected.

3.1 11x666 uses the personal data it collects for the following purposes:

• Account administration: Creating, maintaining, and managing your 11x666 registered account.
• Identity and age verification: Conducting mandatory KYC checks to confirm your identity and that you are aged 18 or over prior to granting real-money access.
• Payment processing: Facilitating PKR deposits and withdrawals via your chosen payment method (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah) and reconciling transaction records.
• Service delivery: Enabling access to the 11x666 sportsbook, casino, slot, and other gaming products available on the platform.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent transactions, account abuse, money laundering, and other prohibited activities.
• Responsible gaming: Monitoring gaming activity to identify potentially problematic patterns and administering responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion.
• Communications: Sending account-related notifications, security alerts, and responses to support queries. Marketing communications are only sent with explicit consent and can be withdrawn at any time.
• Legal and regulatory compliance: Meeting applicable anti-money laundering (AML), counter-terrorism financing (CTF), and other regulatory obligations.
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience.

4.1 11x666 processes your personal data under the following legal bases:

• Contractual necessity: Processing required to fulfil the contract between you and 11x666, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable AML, KYC, age verification, and other regulatory requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where these interests are not overridden by your fundamental rights.
• Consent: Processing for optional communications, marketing, and non-essential cookies, where you have given explicit consent. Consent may be withdrawn at any time.

5.1 11x666 does not sell, rent, or trade personal data. We may share your data with the following categories of third parties solely as required:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah, for the processing of PKR transactions. These providers receive only the information necessary to execute your specific transaction.
• KYC and identity verification providers: Third-party services engaged to assist with CNIC verification and age checking. Such providers are contractually bound to process data only for verification purposes.
• Gaming software providers: Casino game and sportsbook technology providers whose software powers 11x666 products may receive session and game data as required for technical operation. Personal identity data is not shared.
• Regulatory and law enforcement authorities: Where required by applicable law or a valid legal order, 11x666 may disclose personal data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction.
• Professional advisers: Legal, financial, and compliance advisers who are subject to professional confidentiality obligations.

6.1 11x666 retains personal data for as long as is necessary for the purposes for which it was collected and to meet applicable legal and regulatory retention requirements.

6.2 As a general guide, the following retention periods apply:

• Account and identity data: retained for the duration of the account relationship and for a minimum of five (5) years following account closure, as required for AML and regulatory compliance.
• Transaction records: retained for a minimum of five (5) years following the date of the transaction.
• Customer support communications: retained for up to three (3) years from the date of the last communication.
• Technical and access logs: retained for up to twelve (12) months.

6.3 Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised.

7.1 11x666 uses cookies and similar tracking technologies on its platform. Cookies are small text files placed on your device that enable the platform to function correctly and securely.

7.2 The categories of cookies used by 11x666 are as follows:

• Essential cookies: Required for platform login, session management, and security functions. These cannot be disabled without impairing core platform functionality.
• Functional cookies: Used to remember your preferences such as language settings and responsible gaming configurations.
• Analytics cookies: Used to collect anonymised data on how users navigate the platform, enabling 11x666 to improve performance and usability.

7.3 11x666 does not use advertising cookies or third-party behavioural tracking technologies. You may manage non-essential cookie preferences through your browser settings.

8.1 11x666 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and 11x666 servers.
• Encryption at rest for sensitive personal data including CNIC information and payment records.
• Access controls ensuring that employee access to personal data is restricted on a strict need-to-know basis.
• Regular security assessments and penetration testing of the 11x666 platform infrastructure.
• Two-factor authentication (2FA) available to all registered users as an additional account security layer.

8.2 In the event of a personal data breach that is likely to result in a risk to your rights, 11x666 will notify affected individuals without undue delay and take prompt remedial action.

8.3 While 11x666 takes all reasonable precautions, no internet-based platform can guarantee absolute security. Users are responsible for maintaining the confidentiality of their own account credentials.

9.1 Subject to applicable law, registered users of 11x666 have the following rights in relation to their personal data:

• Right of access: The right to request a copy of the personal data 11x666 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to 11x666's legal retention obligations.
• Right to restriction: The right to request that processing of your data be restricted in certain circumstances.
• Right to data portability: The right to receive your personal data in a structured, machine-readable format where technically feasible.
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: The right to object to processing based on legitimate interests, including for direct marketing purposes.

9.2 To exercise any of the above rights, please contact 11x666 via the support channel. We will respond to verified requests within 30 days. Identity verification will be required before processing data access or deletion requests.

10.1 11x666 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under 18 years of age. Mandatory CNIC-based age verification is applied to all accounts prior to granting real-money access.

10.2 If 11x666 discovers that personal data has been collected from a person under 18 without appropriate verification, that account will be immediately closed and the associated data will be securely deleted, except where retention is required for regulatory or legal compliance purposes.

10.3 If you are a parent or guardian and believe a minor has created an account on 11x666, please contact support immediately using the details in Section 12.

11.1 11x666 reserves the right to update or amend this Privacy Policy at any time. Changes will be published on this page with a revised effective date. For material changes, 11x666 will provide notice via your registered email address or a prominent notice on the platform.

11.2 Continued use of the 11x666 platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not accept an amendment, you should discontinue use of the platform and contact support to close your account.

12.1 For any queries, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 11x666, please contact our support team:

12.2 If you are not satisfied with 11x666's response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction.