six6s Privacy Policy

1 Who We Are

The six6s platform, accessible at https://six6s.cam, is operated by the legal entity holding the applicable gaming licence under which six6s conducts its online betting and casino operations. For the purposes of this Privacy Policy, references to "six6s," "we," "us," or "our" refer to this operating entity.

six6s is a platform designed and operated primarily for English-speaking Pakistani users, offering online cricket betting, PSL markets, live casino, slots, roulette, and arcade game products denominated in Pakistani Rupees (PKR). Our registered user base includes players from Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan.

For all privacy-related queries, data access requests, or complaints, you may contact us using the details provided in Section 14 of this Privacy Policy.

2 Personal Data We Collect

six6s collects personal data that is necessary to provide a safe, compliant, and functional online betting and casino service. The categories of data we collect include the following:

3 How We Collect Your Data

six6s collects personal data through the following channels:

• Direct registration: When you complete the six6s account registration form, you voluntarily provide your name, date of birth, mobile number, and email address.
• Identity verification (KYC): When you submit identity documents such as your CNIC or passport to verify your age and identity in accordance with our licensing requirements.
• Payment transactions: When you make a deposit or withdrawal via JazzCash, EasyPaisa, Raast, 1LINK, or bank transfer, payment details are captured by our payment processor.
• Platform usage: Automatically, through server logs, session tracking, and cookies as you navigate and interact with the six6s website and games.
• Customer support: When you contact the six6s support team by email or live chat, the content and metadata of that communication is recorded.
• Third-party game providers: Game providers who supply casino, slot, live dealer, and arcade products to six6s may share aggregated game session data with us for account management and responsible gaming purposes.

4 How We Use Your Personal Data

six6s uses the personal data we collect for the following specific purposes:

• Account creation and management: To open, maintain, and administer your six6s account, including processing deposits and withdrawals in PKR.
• Identity and age verification: To confirm that you meet the six6s minimum age requirement of 21 years and to comply with our KYC and anti-money laundering (AML) obligations under our gaming licence.
• Service delivery: To provide you with access to six6s betting markets, casino games, slots, live dealer tables, and arcade products.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other prohibited conduct on the six6s platform.
• Responsible gaming: To monitor betting and gaming patterns for signs of problem gambling and to apply responsible gaming tools — including deposit limits, self-exclusion, and cooling-off periods — in accordance with six6s's Responsible Gaming policy.
• Customer support: To respond to your enquiries, resolve disputes, and process complaints submitted to the six6s support team.
• Marketing communications: To send promotional offers, bonus notifications, and PSL-related betting promotions to users who have opted in to receive marketing from six6s. You may withdraw this consent at any time.
• Legal and regulatory compliance: To meet our obligations under our gaming licence, applicable data protection law, and requests from competent regulatory or law enforcement authorities.
• Platform improvement: To analyse usage patterns and improve the performance, security, and user experience of the six6s platform.

5 Legal Basis for Processing

six6s processes your personal data on one or more of the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing that is necessary to perform our contractual obligations to you under the six6s Terms & Conditions — including account management, payment processing, and service delivery.
• Legal obligation: Processing that is required to comply with applicable laws and our gaming licence obligations — including KYC verification, AML record-keeping, and responses to lawful regulatory requests.
• Legitimate interests: Processing carried out to pursue six6s's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided these interests are not overridden by your fundamental privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Personal Data

six6s does not sell, rent, or trade your personal data to any third party. We share your personal data only in the following limited and controlled circumstances:

• Payment processors: Your financial data is shared with our approved payment gateway providers — including the operators of JazzCash, EasyPaisa, Raast, and 1LINK integrations, and relevant banking partners — solely to process your PKR deposits and withdrawals.
• Game providers: Your account identifier and relevant session data may be shared with third-party game providers (casino, slot, live dealer, and arcade) for the purpose of delivering their games within the six6s platform.
• Identity verification providers: Your identity documents may be shared with our licensed KYC and identity verification partners to facilitate age and identity verification in compliance with our licensing requirements.
• Licensing authority: Our applicable gaming licence authority may require access to account data, transaction records, and audit logs for regulatory oversight purposes. six6s complies fully with all such requests.
• Law enforcement and regulators: Where required by applicable law, court order, or competent governmental authority, six6s will disclose user data to the relevant authority.
• IT and platform service providers: Trusted technology partners who provide hosting, security, analytics, and platform infrastructure services to six6s under strict contractual data protection obligations.

7 Data Retention

six6s retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by our gaming licence, applicable law, or legitimate business need. Our standard retention practices are as follows:

• Active account data: Retained for the duration of your registered six6s account and for a minimum of five (5) years following account closure, in compliance with our anti-money laundering record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, in accordance with licensing requirements.
• Transaction records: PKR deposit, withdrawal, and wager records are retained for a minimum of five (5) years following the date of each transaction.
• Marketing data: Retained until you withdraw your marketing consent, following which your details will be suppressed from future marketing communications.
• Support communications: Retained for three (3) years from the date of the communication, unless the communication relates to an ongoing dispute or regulatory matter.
• Technical and usage logs: Retained for up to twelve (12) months for security and fraud prevention purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, six6s will securely delete or anonymise your personal data so that it can no longer be associated with your identity.

8 Cookies and Tracking Technologies

The six6s platform uses cookies and similar local storage technologies to deliver, maintain, and improve your user experience. The cookies deployed on six6s serve the following purposes:

• Essential cookies: These cookies are strictly necessary for the six6s platform to function. They maintain your login session, remember your language preference, and enable core features such as the betting slip and deposit flow. These cookies cannot be disabled without impairing your use of the platform.
• Performance cookies: These cookies collect anonymised data about how users interact with the six6s website — for example, which pages are visited most frequently and where error messages appear — to help us improve platform performance.
• Functional cookies: These cookies remember your six6s preferences — such as your preferred game category or table limit — to provide a more personalised experience on return visits.
• Security cookies: These cookies assist in detecting and preventing fraudulent or automated access to the six6s platform.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will affect your ability to use the six6s platform, including logging in and completing transactions.

9 Security Measures

six6s implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your browser and the six6s platform is encrypted using industry-standard SSL/TLS protocols.
• Password hashing: User account passwords are stored as salted cryptographic hashes. six6s staff cannot view or retrieve your password in plain text.
• Two-factor authentication (2FA): six6s offers optional two-factor authentication via OTP to your registered Pakistani mobile number to provide an additional layer of account security.
• Access controls: Access to personal data within six6s is restricted to authorised personnel who require it to perform their specific job functions. All such access is logged and audited.
• Incident response: six6s maintains a data breach response procedure. In the event of a data breach that poses a risk to users, affected users will be notified in accordance with our licensing obligations.
• Regular security testing: The six6s platform undergoes regular security assessments, penetration testing, and vulnerability scanning.

While six6s takes all reasonable precautions to protect your personal data, no internet-based service can guarantee absolute security. You are responsible for keeping your own login credentials confidential and for logging out of your six6s account when using shared devices.

10 Your Data Rights

Subject to applicable law and our licensing obligations, you have the following rights with respect to your personal data held by six6s:

11 Children's Privacy and the 21+ Rule

The six6s platform is strictly for adults aged 21 years and above. six6s does not knowingly collect or process personal data belonging to individuals under the age of 21. The six6s platform is not directed at, designed for, or intended to be used by minors.

If six6s becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the relevant account, delete the personal data in question (subject to any mandatory legal retention obligations), and, where applicable, report the matter to our licensing authority.

12 International Data Transfers

six6s operates a platform that is primarily targeted at Pakistani users. However, certain of our service providers — including game providers, payment processors, and cloud infrastructure providers — may be located outside Pakistan or the user's country of residence. Where personal data is transferred to a third country, six6s takes appropriate measures to ensure the transfer is conducted lawfully and with adequate protections in place, including:

• Entering into data processing agreements with all recipient third parties that impose binding data protection obligations equivalent to those applicable to six6s.
• Ensuring that any game providers receiving user data operate under reputable gaming licence frameworks with established data protection standards.
• Using encrypted transmission channels for all cross-border data transfers involving personal data.

If you have questions about specific data transfer arrangements, please contact the six6s support team using the details in Section 14.

13 Updates to This Privacy Policy

six6s reviews and, where necessary, updates this Privacy Policy on a periodic basis to reflect changes in our data processing practices, regulatory requirements, or platform features. The date at the top of this Privacy Policy indicates when it was last reviewed.

Where we make material changes to this Privacy Policy — for example, changes that significantly affect how we use your personal data or your rights as a user — we will notify registered six6s users via their registered email address prior to the change taking effect. For non-material changes (such as clarifications, formatting corrections, or minor updates to reflect changes in our service providers), we may update the Privacy Policy without prior notification.

Your continued use of the six6s platform following notification of material changes constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Privacy Policy, you must cease using the six6s platform and may request account closure in accordance with the six6s Terms & Conditions.

14 Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by six6s, please contact our team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please include "Privacy Request" or "Data Request" in your subject line to ensure your query is directed to the appropriate team.
• Response Time: six6s aims to acknowledge all privacy-related requests within 5 business days and to provide a substantive response within 30 calendar days of receipt.
• Identity Verification: For data access, rectification, or erasure requests, six6s may require you to verify your identity before processing the request, to ensure that personal data is not disclosed to, or deleted at the request of, an unauthorised party.