six6s6 Privacy Policy

1. Introduction

six6s6 ("we", "us", "our") takes the privacy and security of your personal information seriously. This Privacy Policy describes in detail how six6s6 collects, processes, stores, shares, and protects personal data in connection with the operation of the six6s6 online casino and sports betting platform accessible at six6s6.org.

This Policy applies to all visitors, registered players, and former account holders of the six6s6 platform. It covers all personal data collected through the website, account registration process, customer support interactions, payment transactions, and any other touchpoint through which you interact with six6s6.

This Privacy Policy should be read together with the six6s6 Terms and Conditions, which govern the overall relationship between you and six6s6. Defined terms used in this Policy that are not otherwise defined herein carry the meanings given to them in the Terms and Conditions.

2. Data Controller

six6s6, the operator of the platform at six6s6.org, acts as the data controller for all personal data collected from players and site visitors in connection with the operation of the six6s6 platform. As data controller, six6s6 determines the purposes and means by which your personal data is processed.

six6s6 operates under an international gaming licence. For all data-related enquiries, complaints, or requests, you may contact our Data Protection team using the contact details provided in Section 15 of this Policy.

3. Data We Collect

six6s6 collects only the personal data necessary to operate the platform, comply with regulatory obligations, and provide a safe and personalised gaming experience to Pakistani players. The categories of personal data we collect are set out in the table below.

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, CNIC number, scanned CNIC copy	Account registration, KYC verification, age verification
Contact Data	Email address, Pakistani mobile number	Account communications, support, security alerts
Financial Data	JazzCash / EasyPaisa account numbers, bank account details, transaction history	Payment processing, withdrawal verification, AML compliance
Technical Data	IP address, device type, browser, operating system, session timestamps	Security, fraud prevention, platform optimisation
Usage Data	Pages visited, games played, bet history, session duration	Personalisation, responsible gaming monitoring, analytics
Communications Data	Support chat transcripts, email correspondence, feedback submissions	Support quality, dispute resolution, regulatory record-keeping
Marketing Preferences	Opt-in / opt-out status for promotional communications	Delivering or suppressing marketing messages per your preferences

4. How We Collect Your Data

six6s6 collects personal data through the following methods:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or submitting a feedback form.
• Automated collection: Technical and usage data collected automatically as you browse and interact with the six6s6 platform, via cookies, log files, and session tracking technology. See Section 10 for full details of our cookie use.
• Third-party sources: Identity verification data received from CNIC validation services and payment data received from our payment processing partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK) in the course of processing your transactions.
• Regulatory and fraud prevention sources: In certain circumstances, six6s6 may receive data about you from sanctions screening databases or fraud prevention services as part of our AML and regulatory compliance obligations.

5. How We Use Your Data

six6s6 uses your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity and age, maintain your account records, and facilitate your use of all six6s6 platform features.
• Payment processing: To process deposits and withdrawals in PKR via your chosen payment method and to maintain the financial records required by our licensing authority.
• KYC and regulatory compliance: To fulfil our obligations under anti-money laundering regulations, age verification requirements, and the conditions of our international gaming licence, including the retention of identity and transaction records.
• Fraud and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other security threats to the platform and its players.
• Responsible gaming: To monitor gaming patterns for signs of problem gambling behaviour, to enforce self-exclusion requests, and to deliver responsible gaming communications where required.
• Customer support: To respond to your queries, investigate complaints, and resolve account disputes efficiently and accurately.
• Platform improvement: To analyse usage patterns and platform performance data in aggregate, so that six6s6 can continuously improve the gaming experience for Pakistani players.
• Marketing: To send you promotional offers, bonus notifications, and personalised gaming recommendations, subject to your marketing opt-in preferences. You may withdraw consent at any time as described in Section 11.

6. Legal Basis for Processing

six6s6 processes your personal data on the following legal bases:

• Contractual necessity: Processing that is necessary to perform our contractual obligations to you under the six6s6 Terms and Conditions — including account operation, payment processing, and KYC verification.
• Legal obligation: Processing required to comply with anti-money laundering regulations, age verification requirements, tax obligations, and other legal duties imposed on six6s6 as a licensed gaming operator.
• Legitimate interests: Processing carried out for the purposes of fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics, where those interests are not overridden by your privacy rights.
• Consent: Processing for the purpose of sending you marketing communications, which is carried out only where you have opted in to receive such communications. You may withdraw this consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

7. Sharing Your Data

six6s6 does not sell your personal data. We share your data only in the following limited circumstances, and only to the minimum extent necessary for the stated purpose:

7.1 Payment Service Providers

six6s6 shares financial data with our payment processing partners — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK — solely for the purpose of processing your deposits and withdrawals in PKR. Each of these partners is contractually obligated to handle your data securely and only for the purpose of fulfilling the relevant transaction.

7.2 Identity Verification Services

To fulfil our KYC obligations, six6s6 may share identity documentation with regulated third-party identity verification service providers. These providers are bound by strict data processing agreements and may only use your data for the purpose of verifying your identity on behalf of six6s6.

7.3 Regulatory and Law Enforcement Authorities

six6s6 may be required to disclose personal data — including identity, account, and transaction records — to regulatory authorities, law enforcement bodies, or courts of competent jurisdiction where such disclosure is required by law, court order, or the conditions of our gaming licence. Where permitted, six6s6 will notify affected players of such disclosures.

7.4 Fraud Prevention and AML Services

six6s6 shares data with regulated fraud prevention and anti-money laundering screening services where necessary to protect the platform and its players from financial crime. Information shared for these purposes may be retained by those services and used to assist other regulated entities in preventing fraud and financial crime.

7.5 Corporate Transfers

In the event of a merger, acquisition, or sale of all or substantially all of six6s6's assets, your personal data may be transferred to the acquiring entity. In such circumstances, six6s6 will ensure that the acquiring entity is bound by data protection obligations at least equivalent to those set out in this Privacy Policy, and affected players will be notified of the transfer in advance.

8. Data Retention

six6s6 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law and our regulatory obligations. The general retention periods applied by six6s6 are as follows:

• Account and identity data: Retained for the duration of the active account relationship and for a minimum period of five (5) years following account closure, as required by our AML and KYC record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five (5) years following the date of each transaction, in compliance with financial record-keeping requirements imposed by our licensing authority.
• Support communications: Retained for three (3) years from the date of the interaction, to support dispute resolution and quality assurance processes.
• Technical and usage data: Retained in identifiable form for up to thirteen (13) months, after which it is anonymised and retained in aggregate form for platform analytics purposes.
• Marketing preferences: Retained for the duration of the account relationship and for two (2) years following account closure, to document your consent history and opt-out instructions.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with six6s6's data destruction procedures.

9. Security Measures

six6s6 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• TLS 1.3 encryption for all data in transit between your device and the six6s6 platform;
• AES-256 encryption for all personal and financial data stored at rest on six6s6 servers;
• Multi-factor authentication requirements for all privileged administrative access to production systems containing player data;
• Regular independent penetration testing and vulnerability assessments of the six6s6 platform infrastructure;
• Strict role-based access controls ensuring that only authorised personnel with a legitimate operational need can access player personal data;
• Comprehensive security incident response procedures, including notification protocols for data breaches that meet the threshold for regulatory reporting.

While six6s6 takes all reasonable steps to protect your personal data, no data transmission over the internet or electronic storage system is entirely immune from risk. Players are responsible for maintaining the security of their own account credentials and should contact six6s6 support immediately upon suspecting any unauthorised access to their account.

10. Cookies & Tracking Technologies

six6s6 uses cookies and similar tracking technologies on the platform to ensure proper functionality, maintain your session, prevent fraud, and improve the overall player experience. The categories of cookies used by six6s6 are as follows:

• Strictly necessary cookies: Essential to the operation of the platform — for example, session authentication cookies that keep you logged in while navigating the site. These cannot be disabled without impairing the function of the platform.
• Functional cookies: Used to remember your preferences, such as language settings, display preferences, and responsible gaming tool configurations. Disabling these cookies may affect your experience on the platform.
• Analytics cookies: Used in aggregate form to help six6s6 understand how players navigate and use the platform, enabling us to improve its design and functionality. No personally identifiable information is associated with analytics data after processing.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and account takeover attempts. These cookies are strictly necessary for the security of the platform and cannot be disabled.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the availability of some platform features. six6s6 does not use third-party advertising or tracking cookies for the purpose of serving targeted advertising on external websites.

11. Your Data Rights

As a six6s6 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact the six6s6 Data Protection team using the details in Section 15. We will respond to all valid requests within thirty (30) days of receipt.

• Right of access: You have the right to request a copy of the personal data that six6s6 holds about you, together with information about how it is being used.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal and regulatory retention obligations. Where retention is required by law, six6s6 will inform you accordingly.
• Right to restrict processing: In certain circumstances, you may request that six6s6 restrict the processing of your personal data — for example, while a rectification request is being assessed.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to six6s6 in a structured, commonly used, machine-readable format, and to request that it be transferred to another data controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where six6s6 relies on legitimate interests as the legal basis for that processing, unless six6s6 can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent — specifically, marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

12. Minors & Age Policy

The six6s6 platform is strictly for adults aged 21 years and over. six6s6 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory component of the six6s6 KYC process, and any account found to be registered by or used by a person under the age of 21 will be immediately closed.

If you believe that a person under the age of 21 has registered an account on the six6s6 platform or submitted personal data to six6s6, please notify us immediately at the contact details set out in Section 15. Upon verification, six6s6 will promptly delete the relevant data and close the associated account.

13. International Data Transfers

As an internationally licensed gaming operator, six6s6 may transfer your personal data to servers and processing facilities located outside Pakistan. Where such transfers occur, six6s6 ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to that provided under this Privacy Policy, including through the use of contractual data transfer agreements with relevant third-party processors.

six6s6 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate transfer mechanisms. If you would like more information about the safeguards in place for any specific international data transfer, please contact our Data Protection team.

14. Changes to This Privacy Policy

six6s6 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform operations. Where changes are material, six6s6 will notify registered players by email to their registered address at least seven (7) days before the changes take effect.

The most current version of this Privacy Policy will always be accessible at six6s6.org/privacy-policy. The effective date shown at the top of this document indicates the version currently in force. Your continued use of the six6s6 platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

15. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a data protection complaint, please contact the six6s6 Data Protection team through the following channels:

• Live Chat: Available 24/7 on the six6s6 platform. Please specify that your query relates to a data protection matter so it can be routed to the appropriate team.
• Email: [email protected] — please include your registered username and a clear description of your data request or complaint.

six6s6 aims to acknowledge all data rights requests and privacy complaints within 48 hours and to provide a substantive response within thirty (30) calendar days. Where a request is complex or involves a high volume of data, six6s6 may extend this period by a further thirty (30) days, in which case you will be notified of the extension and the reason for it.

If you are not satisfied with the outcome of a data protection complaint submitted to six6s6, you have the right to escalate the matter to the relevant supervisory authority or to the dispute resolution body designated by six6s6's licensing authority.