X666 takes the privacy of your data seriously. This Policy clearly explains what we collect, how we use it, who we share it with, and what your rights are as a data subject under the Brazilian General Data Protection Law (LGPD).
Six pillars of our privacy policy explained in plain language
Every page, every transaction, and every piece of data sent to x666's servers is transmitted with 256-bit SSL encryption — the same standard used by Brazil's largest banks, including Itaú, Bradesco, and Banco do Brasil. None of your information travels in plain text.
X666 operates in compliance with the General Data Protection Law (Lei nº 13.709/2018). We have a dedicated Data Protection Officer (DPO), internally reviewed processes, and contracts with vendors that require the same level of protection.
X666 does not sell, rent, or share your personal data with third parties for commercial, marketing, or advertising purposes. Full stop. Your information exists so you can use the platform — not to generate additional revenue for any other company.
We collect only the data strictly necessary to operate your account and process your transactions via Pix, boleto, or card. Data that is no longer needed is disposed of in accordance with legal retention periods. No data is kept beyond what is necessary.
Within x666 itself, access to users' personal data is restricted to personnel strictly necessary to operate the service. All staff with access to personal data undergo data protection training and sign confidentiality agreements.
At any time, you may request access to, correction of, portability of, or deletion of your personal data. You may also withdraw previously given consent for marketing communications. All requests are responded to within 24 hours by our Portuguese-language support team.
This Privacy Policy describes how x666 collects, uses, stores, and protects the personal data of its users, in compliance with the General Data Protection Law (Lei nº 13.709/2018 — LGPD). By creating an account or using any service provided by x666, you confirm that you have read and understood this Policy.
The x666, operated at https://x666.express, is the controller of the personal data processed under this Policy. The term "controller" means we are the company responsible for defining the purposes and means of processing your data.
This Policy applies to all users who:
If you have questions about this Policy or wish to exercise your rights as a data subject, please contact our Data Protection Officer (DPO) by email at privacidade@x666.express or via the live chat available 24 hours a day on the platform.
The x666 collects only the data necessary to operate the services you have contracted. Below is a structured overview of the data collected by category:
| Category | Data Collected | How it is collected |
|---|---|---|
| Identification | Full name, date of birth, CPF, government-issued ID (when required) | Provided by the user during registration or KYC verification |
| Contact | Email address, mobile number, residential address | Provided by the user during registration |
| Financial | Pix key, bank details for wire transfers, deposit and withdrawal history | Provided by the user during transactions |
| Platform usage | Betting history, gaming sessions, preferences, support interactions | Automatically generated through use of the services |
| Technical | IP address, device type, operating system, browser, session cookies | Automatically collected when you access the platform |
The x666 does not collect sensitive data such as race, ethnicity, religious belief, political opinion, health information, or sexual orientation, except where required by a specific legal obligation and with explicit consent where applicable.
Every piece of data collected by x666 has a specific and legitimate purpose. We do not process data for purposes incompatible with those originally stated. The main purposes are:
All data processing carried out by x666 has a legal basis under the LGPD. The primary bases used are:
The x666 does not sell or rent your personal data to any company. Data sharing only occurs in the situations below, always with the purpose of operating the contracted services or fulfilling legal obligations:
All third parties with whom x666 shares data are contractually required to handle that information with the same level of protection demanded by this Policy and by the LGPD.
The x666 retains your personal data for as long as necessary to fulfill the purposes described in this Policy, in compliance with all mandatory legal retention periods:
Once the retention periods above have expired, data is anonymized or securely disposed of, making it impossible to identify the data subject.
The x666 implements technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure:
The x666 uses cookies and similar technologies to ensure the platform functions correctly, personalize the user experience, and analyze aggregate service usage. See the types of cookies used below:
You can manage your cookie preferences at any time in your account settings or through the consent banner displayed on your first visit. Disabling non-essential cookies may limit certain platform features but will not prevent you from using the core services of x666.
The LGPD grants you, as the data subject whose information is processed by x666, the following rights, which may be exercised at any time at no cost:
Request confirmation that your data is being processed and receive a copy of the personal data x666 holds about you.
Request the correction of incomplete, inaccurate, or outdated information — such as your email, phone number, address, or registered Pix key.
Request the deletion of data processed on the basis of consent. Data required to fulfill a legal obligation cannot be deleted before the applicable legal retention period.
Receive your personal data in a structured, machine-readable format for transfer to another data controller, where technically feasible.
Withdraw consent for marketing communications at any time. Withdrawal does not affect prior processing or processing based on other legal grounds.
Be informed about the public and private entities with whom x666 has shared your data, and about the option to withhold consent and the consequences of doing so.
To exercise any of the rights above, please contact the DPO at x666 by email privacidade@x666.express or via live chat. Response time is up to 15 business days as required by the LGPD. In practice, we typically respond within 24 hours. If you are not satisfied with the response, you may file a complaint directly with the ANPD (National Data Protection Authority).
The services of x666 are intended exclusively for users aged 18 and over. The platform does not intentionally collect personal data from minors. If we become aware that we have collected data from a minor, that data will be deleted immediately and the account will be closed.
If you are the parent or guardian of a child or teenager and believe they may have accessed the platform or provided personal data, please contact us immediately via live chat or at privacidade@x666.express. We will handle your case with priority and confidentiality.
The personal data of users of the x666 are stored preferably on servers located in Brazil. In some cases, data may be processed by service providers in other countries — such as cloud infrastructure providers — exclusively for operational purposes.
When international data transfers occur, the x666 ensures that it takes place only with countries whose level of data protection is deemed adequate by the ANPD, or through specific contractual clauses that guarantee data subjects rights equivalent to those provided under the LGPD.
The x666 never transfers data to countries or entities that do not offer adequate protection guarantees, and does not allow international partners to use your data for purposes other than those agreed upon.
The x666 may update this Privacy Policy periodically to reflect changes in the services offered, applicable legislation, or internal data protection practices. Significant changes will be communicated to users at least 15 days in advance by email and through a prominent notice on the platform.
The date of the last update is always shown at the top of this page. Continued use of the platform after changes take effect constitutes acceptance of the updated Policy. If you do not agree with the changes, you may close your account before the effective date and request the portability or deletion of your data.
The version history of previous versions of this Policy is available upon request to the DPO at privacidade@x666.express.
For any questions related to this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, please contact the Data Protection Officer (DPO) at x666:
All communications with the DPO are treated with strict confidentiality. Exercising your privacy rights will have no impact on your use of the platform. The data protection team at x666 speaks Brazilian Portuguese and is ready to answer any question clearly, without unnecessary legal jargon.
The most common questions about how we handle your data
Many platforms publish a long, detailed Privacy Policy without it making any real difference to how data is handled day to day. At x666, LGPD compliance isn't a PDF document buried in some corner of the site — it's a living process that involves ongoing team training, regular reviews of vendor contracts, routine security testing, and a dedicated DPO with a direct line to handle your requests.
When you deposit R$ 50.00 via Pix at x666 to bet on Flamengo in the Brasileirão, the only data transmitted is what is needed to process the transaction: your name, Pix key, and the amount. That data is never added to any marketing list, never cross-referenced with your purchase history on other platforms, and never sold to anyone. It is used to credit R$ 50.00 to your account, and that's it.
Pix has become Brazilians' preferred payment method thanks to its speed and simplicity. At x666, Pix deposits are processed in under 2 minutes and withdrawals arrive within 15 minutes, any day of the week. From a privacy standpoint, Pix is also one of the most secure methods available: the transaction is processed directly between financial institutions, with minimal data traveling outside the banking system regulated by the Banco Central.
For withdrawals via TED — available for users who prefer traditional bank transfers through Nubank, Itaú, Bradesco, Banco do Brasil, or other institutions —, the x666 requires the bank branch, account number, and CPF to process the transfer. This information is used solely for the requested withdrawal and stored with encryption. Similarly, for credit and debit cards, we use tokenization — the actual card number is never stored on our servers.
Identity verification — also known as KYC (Know Your Customer) — is a legal requirement for financial platforms in Brazil. It ensures that an account truly belongs to the person claiming it and helps prevent fraud, money laundering, and use by minors. When x666 requests documents during the verification process, those documents are stored in encrypted form, accessible only to a minimal verification team, and disposed of in accordance with legally mandated retention periods.
For most users who deposit and withdraw within the platform's standard limits, verification is straightforward and can be completed entirely online in under 24 hours. We understand that submitting documents can feel intrusive — which is why we clearly explain the reason for each request and ensure that this data exists solely to meet our legal obligations and protect you from unauthorized use of your account.
The x666 believes privacy is a right — not a privilege. If you have any questions about how your data is handled, want to exercise your rights as a data subject, or need help understanding any part of this Policy, our team is available 24/7 via live chat, always in plain language, without legal jargon or runaround. Just reach out.
You have the right to access, correct, port, or delete your personal data processed by x666 at any time. To exercise any right provided under the LGPD, please contact our DPO at privacidade@x666.express or via live chat. We respond within 24 hours.
If you are not satisfied with x666's response, you may file a complaint directly with the ANPD (Autoridade Nacional de Proteção de Dados) through the official Brazilian government portal.
View full Terms and ConditionsYour data protected by LGPD, 256-bit SSL encryption, and a team dedicated to your privacy. Create your account now — free, in under 2 minutes — and get a 100% bonus up to R$ 500.00 on your first deposit via Pix.
Bonus subject to 10x rollover. See the Terms and Conditions complete. Prohibited for users under 18 years of age.