Data Protection

Privacy Policy – How 666x Protects Your Data

666x takes the protection of your personal data seriously. Here you'll find exactly what information we collect, why we collect it, how we store it, and what your rights are as a data subject — all in compliance with the General Data Protection Law (LGPD).

Last updated: January 2026 Language: Brazilian Portuguese Applicable to Brazil
Sections of This Policy
Data Collected Purpose of Use Sharing Security Your Rights Cookies Retention DPO Contact

By creating or continuing to use your 666x account, you confirm that you have read and understood this Privacy Policy.

Your Data in Good Hands at 666x

The principles behind how we handle our users' information in Brazil.

Full LGPD Compliance

666x operates in compliance with Brazil's General Data Protection Law (Lei nº 13.709/2018). Every decision about how we process your data is grounded in the legal bases set out in the LGPD — consent, contract performance, legal obligation, and legitimate interest, as applicable.

256-Bit SSL Encryption

All data transmitted between your device and 666x servers is protected by 256-bit SSL encryption — the same standard used by digital banks such as Nubank, Itaú, and Bradesco. None of your information travels over the internet in plain text.

We Never Sell Your Data

666x does not sell, rent, or share your personal data with third parties for commercial purposes. We only share information with operational partners strictly necessary for the platform to function, and always under confidentiality and data protection agreements.

You Control Your Data

As a data subject, you have the right to access, correct, port, or request the deletion of your data at any time. Simply contact 666x support or our Data Protection Officer (DPO). All requests are handled within 15 business days.

Minimal and Necessary Data Collection

We follow the principle of data minimization: we collect only what is strictly necessary to provide the platform's services, verify your identity (KYC), and meet legal obligations. We don't ask for anything beyond what we need to operate.

Control Over Communications

You decide whether to receive marketing communications from 666x. You can unsubscribe at any time via the opt-out link in our emails, through your account settings, or by contacting support. Transactional communications (deposit confirmations, withdrawals, etc.) will continue to be sent for operational reasons.

About this document: This Privacy Policy describes how 666x collects, uses, stores, shares, and protects the personal data of users on the platform https://666x.express. We recommend reading this policy before creating your account. By using our services, you confirm that you have understood the practices described here.

1Introduction and Controller Identification

The 666x is the controller of personal data collected through the platform https://666x.express and associated domains. This Privacy Policy was drafted in compliance with the General Personal Data Protection Law (LGPD — Law No. 13,709/2018) and applies to all users who access, register for, or use any 666x service in Brazil, including Sports Betting, live casino, crash games, slots, blackjack, and all other available game types.

The purpose of this Policy is to ensure transparency about how your personal data is processed and to help you understand what information is collected, for what purpose, how long it is retained, and what rights you hold as a data subject. 666x is committed to handling all users' personal data in an ethical, secure, and proportionate manner.

This Policy supplements the Terms & Conditions of 666x and should be read in conjunction with them.

2What Personal Data We Collect

666x collects personal data at different points during your interaction with the platform. Below are the main types of data collected and the circumstances in which this occurs:

Data provided directly by you:

  • Registration data: full name, CPF, date of birth, email address, mobile number, and home address;
  • Verification documents (KYC): photo ID (national ID card, driver's license, or passport), proof of address, and, where applicable, documents confirming the payment method used;
  • Financial data: details of the payment methods used (Pix key, bank details for wire transfers, partially masked credit/debit card data), and deposit and withdrawal history;
  • Communications: messages exchanged with 666x support via live chat or email.

Data collected automatically during use:

  • Access data: IP address, browser type and version, operating system, device type (mobile, tablet, desktop), configured language;
  • Browsing data: pages visited, time spent, traffic source (organic search, direct link, etc.);
  • Game session data: betting history, games accessed, amounts wagered, results, session times, and use of features such as auto cashout in crash games;
  • Cookies and similar technologies: as described in Section 9 of this Policy.

Data minimization: 666x does not collect sensitive data beyond what is strictly necessary to meet KYC and fraud prevention legal obligations. We do not collect data on users' racial background, religious beliefs, or sexual orientation.

3How We Use Your Personal Data

The personal data collected by 666x is used exclusively for the following purposes:

  • Account creation and management: identity verification, access authentication, and user profile management on the platform;
  • Service delivery: processing of Sports Betting (Brasileirão, Copa do Brasil, Libertadores, UFC, and other sports), enabling Live Casino games, crash games, slots, and blackjack;
  • Financial transaction processing: processing of deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED, as well as withdrawal processing;
  • KYC verification and anti-money laundering: compliance with legal obligations related to user identification and the prevention of unlawful activities;
  • Customer support: answering questions, resolving complaints, and providing technical support via live chat and email;
  • Platform security: detection and prevention of fraud, unauthorized access, bot usage, and other behaviors that violate 666x's Terms and Conditions;
  • Responsible gambling: monitoring of behavioral patterns to identify signs of problem gambling and apply self-control tools;
  • Marketing communications: sending information about promotions, new games, and bonuses — exclusively to users who have consented to this type of communication and only for as long as that consent remains in effect;
  • Platform improvement: aggregated and anonymized analysis of usage patterns to improve the user experience, fix issues, and develop new features;
  • Compliance with legal obligations: compliance with judicial, administrative, or regulatory authority orders.

4Legal Bases for Processing (LGPD)

All personal data processing carried out by 666x is based on at least one of the legal grounds set out in Article 7 of the LGPD. The table below shows the legal basis used for each primary purpose:

Purpose Legal Basis (LGPD)
Account creation and management Contract performance (art. 7, V)
Processing of financial transactions Contract performance (art. 7, V)
KYC verification and anti-money laundering Legal obligation (art. 7, II)
Security and fraud prevention Legitimate interest (art. 7, IX)
Responsible gambling and monitoring Legal obligation / Legitimate interest
Marketing communications Consent (art. 7, I)
Compliance with legal orders Legal obligation (art. 7, II)

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal. Consent can be withdrawn through your account settings or by contacting 666x support.

5Data Sharing with Third Parties

666x does not sell, rent, or transfer your personal data to third parties for commercial purposes. Information is only shared in the following situations, all of which are necessary for the platform to operate or to meet legal obligations:

  • Game providers: Evolution, Pragmatic Play, Spribe, BGaming, and other certified providers receive only the minimum data required for authentication and game operation (session identifier, available balance). These providers operate under data processing agreements compliant with the LGPD;
  • Payment processors: financial institutions and payment gateways that process transactions via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago receive only the data strictly necessary to complete those transactions;
  • KYC and fraud prevention services: specialized partners in identity verification and fraudulent behavior detection, operating under confidentiality and data protection agreements;
  • Technology infrastructure services: cloud hosting providers, CDN services, and analytics tools that support platform operations — all engaged under appropriate data protection clauses;
  • Legal authorities: when required by court order, administrative ruling, or request from competent authorities in the regular exercise of their functions.

All third parties that receive user data from 666x are bound by contractual agreements requiring responsible and secure handling of that information, in compliance with the LGPD and other applicable regulations.

6International Data Transfers

Some of the service providers and game suppliers used by 666x may process data on servers located outside Brazil. When this occurs, 666x applies the safeguards set out in the LGPD to ensure your data remains protected abroad:

  • Execution of standard contractual clauses for data protection with the relevant service providers;
  • Preference for partners operating in countries whose data protection laws are recognized as adequate by the National Data Protection Authority (ANPD);
  • Verification that game providers such as Evolution and Pragmatic Play maintain robust compliance programs aligned with international data protection regulations (GDPR, LGPD, and equivalents).

666x does not carry out international data transfers for commercial or advertising purposes unrelated to the platform's operation.

7Data Security

666x applies appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or accidental or unlawful destruction. The main security measures in place include:

  • Encryption in transit: all communications between your device (phone, computer, or tablet) and 666x servers are protected by TLS/SSL with a 256-bit key;
  • Encryption at rest: sensitive data stored in our systems is encrypted, including passwords (stored as irreversible hashes) and financial information;
  • Access control: internal access to user data is restricted to personnel who require it to perform their duties, with access log tracking;
  • Continuous monitoring: intrusion detection systems and 24-hour monitoring identify suspicious activity on the platform's servers;
  • Two-factor authentication (2FA): available to users in account security settings as an additional layer of protection;
  • Security audits: 666x conducts periodic security assessments to identify and address potential vulnerabilities before they can be exploited.

In the event of a security incident: If 666x identifies an incident that may materially affect your personal data, you will be notified within a reasonable timeframe and the ANPD will be informed as required by the LGPD. The notification will include the nature of the incident, the data affected, and the measures taken to mitigate the risks.

8Data Retention & Deletion

666x retains your personal data for as long as necessary for the purposes described in this Policy, based on the following criteria:

  • Active account data: retained for the full duration of the contractual relationship — that is, for as long as your account remains active on the platform;
  • Financial and transaction data: retained for a minimum of 5 (five) years after account closure, as required by tax and anti-money laundering legislation;
  • KYC documents: retained for a minimum of 5 (five) years after account closure, or for the period required by applicable regulatory standards;
  • Support communication records: retained for up to 2 (two) years for quality assurance and dispute resolution purposes;
  • Anonymized browsing and session data: may be retained indefinitely for aggregated analysis and platform improvement purposes, provided they are properly anonymized.

Once the applicable retention period has expired, your data is securely and irreversibly deleted or anonymized so it can no longer be linked to your identity. Early deletion requests can be submitted through 666x support but may be limited where retention is required by law.

9Cookies and Tracking Technologies

666x uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and — with your consent — for analytics and personalization purposes. The types of cookies used are:

  • Strictly necessary cookies: essential for the platform to function — they keep your session active, remember your language preferences, and ensure secure login. These cannot be disabled;
  • Performance and analytics cookies: collect information about how you use the platform (pages visited, session time, errors encountered) in aggregated and, where possible, anonymized form. Used to improve site performance;
  • Functional cookies: remember your configuration preferences, such as your preferred payment method or layout, to make your experience smoother and faster;
  • Marketing cookies: used only with your explicit consent to personalize communications and measure campaign effectiveness. You may withdraw this consent at any time.

You can manage cookie preferences in your browser settings or through the 666x privacy preference center. Disabling strictly necessary cookies may affect platform functionality. On mobile devices (phone or tablet), cookie settings follow the controls of the browser being used.

10Data of Minors

666x is an online betting and casino platform intended exclusively for individuals aged 18 (eighteen) years of age or older. We do not intentionally collect personal data from minors.

If we become aware that we have collected data from a person under 18, we will immediately delete that data and close the associated account. If you believe a minor's data was inadvertently collected by 666x, please contact our DPO at the email address provided in Section 12 of this Policy so that the necessary steps can be taken urgently.

Legal guardians of minors who accessed the platform without authorization are encouraged to contact 666x to resolve the situation.

11Your Rights as a Data Subject

The LGPD grants you, as the data subject whose personal data is processed by 666x, the following rights, all of which can be exercised free of charge:

Right What it means
Access Know what personal data 666x holds about you and how it is processed.
Correction Request the update or correction of incomplete, inaccurate, or outdated data.
Anonymization Request the anonymization of data that is unnecessary or processed in violation of the LGPD.
Blocking Request the temporary blocking of unnecessary or excessive data.
Deletion Request the deletion of data processed on the basis of consent, except where retention is required by law.
Portability Receive your data in a structured, interoperable format so you can transfer it to another service provider.
Withdrawal of consent Withdraw consent given for processing activities based on that legal basis, such as marketing communications.
Sharing information Know which public and private entities your data is shared with.
Complaint to the ANPD File a complaint with the National Data Protection Authority if you are not satisfied with how your data has been handled.

To exercise any of these rights, contact 666x via live chat, by email at contato@666x.express, or directly through our DPO. Requests are answered within 15 (fifteen) business days. In more complex cases, this deadline may be extended by an equal period, with prior notice to the data subject.

12Data Protection Officer (DPO)

666x has appointed a Data Protection Officer (DPO), responsible for serving as the communication channel between the company, data subjects, and the National Data Protection Authority (ANPD), as required by the LGPD.

The 666x DPO can be contacted for:

  • Exercise of rights under the LGPD (access, correction, deletion, portability, etc.);
  • Questions about how 666x handles your personal data;
  • Data protection complaints and reports;
  • Matters related to security incidents that may have affected your data.

DPO Contact: email contato@666x.express (subject: "DPO — Data Protection"). Requests are reviewed and forwarded to the DPO within 2 (two) business days.

13Changes to this Privacy Policy

666x may periodically update this Privacy Policy to reflect changes in data processing practices, regulatory updates, or new services offered by the platform.

When changes are significant — especially those that expand data collection or affect the rights of data subjects — you will be notified at least 7 (seven) calendar days by email and via in-platform notification. The most current version of this Policy will always be available on this page, with the date of the last revision indicated at the top of the document.

Continued use of the platform after changes take effect constitutes acceptance of the updated terms. If you do not agree with the changes, you may request account closure before they come into effect.

14Contact

For any questions, requests, or complaints related to this Privacy Policy or to how 666x processes your personal data, you may reach us through the channels below:

  • Live chat: available 24 hours a day, 7 days a week, directly on the 666x platform — the preferred channel for urgent requests;
  • General email: contato@666x.express — responses within 24 hours on business days;
  • DPO email (data protection): contato@666x.express with the subject line "DPO — Data Protection" for specific questions about your personal data and rights under the LGPD;
  • Help center: visit our Frequently Asked Questions for quick responses on privacy and data security.

If, after contacting 666x, you feel your request was not properly addressed, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the government body responsible for overseeing LGPD compliance in Brazil.

Privacy Questions at 666x

The most common questions our users ask about data protection — answered directly.

No. 666x does not share your data with other betting platforms, online casinos, or any company unrelated to the direct operation of our services. Sharing is limited to game providers (such as Evolution and Spribe, for session authentication), payment processors (for transactions via Pix, boleto, and card), and technology infrastructure providers — all bound by confidentiality and data protection agreements. We never sell or transfer your profile to third parties for marketing or behavioral analysis purposes outside of 666x.

To request account closure and deletion of your data, contact 666x support via live chat or at contato@666x.express. Any available balance will be paid out via Pix before the account is closed. After closure, your data will be deleted or anonymized, except for information we are legally required to retain — such as financial records and KYC documents, which are kept for a minimum of 5 years under tax and anti-money laundering legislation. After that period, deletion is carried out securely and irreversibly.

Yes. 666x monitors gaming behavior patterns — such as betting frequency, amounts, session times, and platform feature usage — for two main purposes: security (detecting bot activity, fraud, and Terms & Conditions violations) and responsible gaming (identifying signs of problem gambling to trigger protection tools). This monitoring is both a legal obligation and an ethical commitment of 666x. Gaming behavior data is never sold or used for marketing purposes outside the platform.

Yes, at any time. You can unsubscribe from 666x marketing communications by clicking the "unsubscribe" link in the footer of any promotional email, by going to the notification settings in your account, or by requesting it through the live chat support. Unsubscriptions are processed within 48 hours. After that, you will no longer receive promotional emails or bonus offers. Mandatory transactional communications — such as deposit confirmations, withdrawal notifications, or security alerts — will continue to be sent as they are directly related to the execution of the service agreement.

In the event of a merger, acquisition, or corporate restructuring of 666x, your personal data may be transferred to the successor entity as part of its operational assets. In such a case, you will be notified in advance about the change and how it may affect the processing of your data. The acquiring entity will be bound by the obligations set out in this Privacy Policy and the LGPD. You will have the right to request the deletion of your data before the transfer, should you not agree with the new processing terms.
Your Privacy Is a Priority at 666x

At 666x, protecting your data is a genuine commitment — not just a compliance checkbox. We operate in accordance with the LGPD (Law No. 13.709/2018), we use 256-bit SSL encryption on all connections and never sell your data to third parties. You have full control over your information and can exercise your rights as a data subject at any time.

For questions related to personal data or to exercise your rights under the LGPD, please contact our support team or reach our DPO directly at contato@666x.express.

Play on 666x with Full Security and Privacy

Your data protected under the LGPD, hassle-free Pix transactions, and 24-hour support in Portuguese. Sign up for free and get a 100% bonus up to R$ 1,000.00 on your first deposit.

LGPD Compliant 256-bit SSL Instant Pix 24/7 PT-BR Support 18+ Only

+18 only. Please gamble responsibly. Terms and conditions apply.

Português