Privacy Policy – six6x6

1. Who We Are

For the purposes of this Privacy Policy, "six6x6", "we", "us" and "our" refer to the operator of the online betting and casino platform accessible at six6x6.net ("the Platform"). six6x6 acts as the data controller in respect of the personal data of registered users and visitors to the Platform. We are responsible for determining the purposes and means of processing your personal data in connection with the Services.

This Privacy Policy applies to all users of the six6x6 Platform, including registered account holders and visitors who access the Platform without registering. By creating an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy.

2. Data We Collect

six6x6 collects personal data from you in several ways. The categories of data we collect are described in the table below:

We do not knowingly collect data from individuals under the age of 18. Where we suspect an account holder may be underage, we will suspend the account pending age verification.

3. How We Use Your Data

six6x6 uses the personal data we collect for the following purposes:

• Account management — creating, maintaining, verifying and, where necessary, closing your six6x6 account;
• Service delivery — processing bets, casino game sessions, deposits, withdrawals and promotional participation in accordance with our Terms & Conditions;
• KYC and AML compliance — verifying your identity and the source of your funds as required under anti-money laundering and counter-terrorist financing obligations;
• Fraud prevention and security — detecting, investigating and preventing fraudulent activity, account takeovers, bonus abuse and other prohibited conduct;
• Responsible gaming — monitoring for signs of problem gambling behaviour, enforcing self-exclusion and deposit limits, and operating our responsible gaming tools;
• Customer support — responding to your queries, complaints and requests in a timely and effective manner;
• Platform improvement — analysing aggregated usage patterns to improve the design, performance and content of the six6x6 Platform;
• Legal obligations — complying with applicable laws, regulations and orders from competent authorities.

4. Legal Bases for Processing

Where data protection law requires a legal basis for processing personal data, six6x6 relies on the following:

• Contract performance — processing necessary to provide the Services in accordance with our Terms and Conditions, including account management, bet processing and payment handling;
• Legal obligation — processing required to comply with KYC, AML/CFT, taxation and other applicable legal and regulatory requirements;
• Legitimate interests — fraud prevention, platform security, responsible gaming monitoring and improving the quality of our Services, where these interests are not overridden by your privacy rights;
• Consent — where we send marketing communications or use non-essential cookies, we rely on your affirmative consent, which you may withdraw at any time.

5. KYC & Identity Verification

As an online gambling operator, six6x6 is required to verify the identity of users before processing withdrawals and, in certain circumstances, before granting full platform access. This process, commonly referred to as Know Your Customer ("KYC"), involves collecting and processing identity documents — most commonly a Pakistani CNIC or passport.

KYC documents submitted to six6x6 are processed by our compliance team and, where applicable, by approved third-party identity verification providers. These providers are contractually obligated to process your documents solely for the purpose of identity verification on behalf of six6x6 and may not use your data for any other purpose.

KYC data is stored on encrypted, access-controlled infrastructure. All access by compliance personnel is logged. KYC documentation is retained for the minimum period required by applicable AML regulations following account closure, and is then securely deleted.

6. Cookies & Tracking Technologies

six6x6 uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that help the Platform function correctly and allow us to understand how users interact with the Service.

6.1 Essential Cookies

These cookies are strictly necessary for the Platform to operate. They manage your login session, maintain your wallet state, remember your language preferences and support the security of your account. Essential cookies cannot be disabled without impeding your ability to use the Services.

6.2 Analytics Cookies

With your consent, six6x6 uses analytics cookies to understand aggregate user behaviour on the Platform — which pages are visited, how long sessions last, and where users exit the platform. This data is used in aggregated, anonymised form to improve the Platform. Analytics cookies are not used to build individual advertising profiles.

6.3 Managing Cookies

You can control non-essential cookies through your browser settings or through the cookie preference panel on the Platform. Note that disabling certain cookies may affect the functionality of some Platform features.

7. Data Sharing & Third Parties

six6x6 does not sell your personal data. We share personal data only in the circumstances described below:

• Payment processors — JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah and USDT payment networks receive the minimum data necessary to process your transaction (e.g., your registered mobile number for wallet services, or account reference for bank transfers);
• Game providers — casino and sports betting providers (e.g., Evolution Gaming, Pragmatic Play, JILI) receive a pseudonymised player identifier and bet data necessary to operate the game session. These providers do not receive your full name or CNIC;
• KYC and fraud screening providers — approved identity verification and fraud detection partners process identity documents and risk signals on our behalf under strict data processing agreements;
• Regulatory and law enforcement authorities — where required by applicable law, court order or regulatory directive, six6x6 will disclose data to competent authorities. We will notify you of such disclosures where legally permitted to do so;
• Professional advisors — legal, audit and compliance advisors may access data where strictly necessary for the provision of professional services to six6x6, subject to confidentiality obligations.

All third-party data processors engaged by six6x6 are contractually bound to process personal data only on our instructions, implement adequate security measures and not to use your data for any purpose beyond what we have authorised.

8. Data Retention

six6x6 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory and audit obligations. General retention guidelines are as follows:

• Active account data is retained for the lifetime of your account plus a minimum post-closure retention period as required by AML regulations;
• Transaction records and betting history are retained for a minimum of five years following the relevant transaction, in accordance with financial record-keeping obligations;
• KYC documentation is retained for the minimum period specified by applicable AML legislation following account closure;
• Support communications are retained for two years following resolution of the relevant query;
• Technical and log data (IP addresses, session logs) is retained for up to twelve months unless a security investigation or legal proceeding requires longer retention;
• Responsible gaming records, including self-exclusion status, are retained for the full duration of the exclusion period plus a regulatory minimum period following its end.

After applicable retention periods expire, personal data is securely deleted or irreversibly anonymised.

9. Security Measures

six6x6 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration or destruction:

• SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption at rest for sensitive data categories including identity documents and payment method details;
• Industry-standard one-way hashing of account passwords — plaintext passwords are never stored;
• Role-based access controls ensuring that employees may only access data categories necessary for their specific job function;
• Access logging and audit trails for all access to KYC documentation and sensitive account records;
• Regular security reviews and vulnerability assessments of our infrastructure;
• Two-factor authentication available to all account holders and mandated for internal staff access to administrative systems.

10. Your Rights

Subject to applicable data protection law, you have the following rights in relation to the personal data six6x6 holds about you:

• Right of access — request a copy of the personal data we hold about you;
• Right to rectification — request correction of inaccurate or incomplete personal data;
• Right to erasure — request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations that may require us to retain certain data;
• Right to restriction — request that we restrict processing of your data in certain circumstances (e.g., while the accuracy of data is contested);
• Right to data portability — receive a copy of data you have provided to us in a structured, commonly used, machine-readable format;
• Right to object — object to processing based on legitimate interests, including profiling for responsible gaming purposes, subject to our overriding legitimate interests or legal obligations;
• Right to withdraw consent — where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the six6x6 Data Privacy team at [email protected]. We will respond to all verifiable requests within 30 calendar days. We may require you to verify your identity before processing a data rights request.

11. Children & Minors

The six6x6 Platform is strictly intended for adults aged 18 and over. We do not knowingly collect, process or retain personal data from any person under the age of 18. If we become aware that personal data has been collected from a minor, we will immediately close the relevant account, delete the data (subject to any mandatory legal retention obligations) and, where appropriate, report the matter to relevant authorities.

If you are the parent or guardian of a minor who you believe has registered with six6x6, please contact us immediately at [email protected] so we can take immediate action.

12. Policy Updates

six6x6 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or the Services we offer. When we make material changes to this Policy, we will notify registered users via the mobile number on file or via a prominent notice on the Platform prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically. The "Last updated" date at the top of the Policy reflects the most recent revision. Continued use of the Platform following notification of an updated Privacy Policy constitutes your acceptance of the revised terms.

13. Contact & Complaints

For any questions, requests or complaints regarding this Privacy Policy or the processing of your personal data by six6x6, please contact our Data Privacy team:

Email: [email protected] (plain text — not a clickable link)

We take privacy complaints seriously and will acknowledge your contact within 48 hours, providing a substantive response within 30 calendar days. Where you are not satisfied with our response, you may have the right to escalate a complaint to the applicable data protection supervisory authority in your jurisdiction.