six6x Privacy Policy

1. Definitions

• "six6x," "we," "us," "our" — the operator of the six6x Platform at six6x.co.
• "Platform" — the six6x website, mobile site, and all associated services.
• "User," "you," "your" — any individual who accesses or registers on the Platform.
• "Personal Data" — any information relating to an identified or identifiable natural person.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "KYC" — Know Your Customer verification, including identity and age verification.
• "Cookies" — small text files placed on your device by the Platform to store session and preference data.

2. Scope & Data Controller

This Privacy Policy applies to all Personal Data processed by six6x in connection with your use of the six6x Platform, including during registration, account management, deposits, withdrawals, gaming activity, customer support interactions, and marketing communications where you have consented.

six6x acts as the Data Controller for Personal Data collected through the Platform. This means six6x determines the purposes and means of processing your data. Where six6x engages third-party service providers to process data on its behalf, those providers act as Data Processors under contractual obligations that require them to protect your data in accordance with applicable law.

3. Personal Data We Collect

six6x collects the minimum Personal Data necessary to operate the Platform, comply with legal obligations, and deliver a safe gaming environment. The categories of data we collect include:

4. How We Collect Your Data

4.1 Directly from You

The majority of Personal Data six6x holds is provided directly by you during registration, KYC verification, payment transactions, customer support interactions, and when you update your account profile. You are not required to provide data beyond what is necessary for the services you use, but certain data (such as KYC documents) is mandatory before withdrawal functionality is enabled.

4.2 Automatically

When you access the six6x Platform, technical data including your IP address, device identifiers, browser type, and session activity is collected automatically. This data is used for security monitoring, fraud prevention, and Platform performance analysis. It does not identify you individually unless combined with other data held in your Account.

4.3 From Third Parties

six6x may receive data about you from third-party payment processors (such as JazzCash or Easypaisa) to confirm transaction status, from identity verification service providers during KYC, and from fraud prevention and anti-money laundering screening services. six6x does not purchase marketing data lists or obtain personal data from social media platforms without your consent.

5. Purposes & Legal Basis for Processing

six6x processes Personal Data only where a valid legal basis exists. The main purposes and corresponding legal bases are as follows:

• Account creation and management — necessary for the performance of the contract between you and six6x.
• Payment processing (deposits and PKR withdrawals) — necessary for the performance of the contract.
• KYC and age verification — necessary for compliance with legal and regulatory obligations applicable to the operation of a gaming platform.
• Fraud detection and anti-money laundering (AML) screening — necessary for compliance with legal obligations and for the legitimate interests of six6x in protecting the Platform and its users.
• Responsible gaming monitoring — legitimate interest in protecting users from gambling-related harm; mandated by applicable gaming regulatory frameworks.
• Customer support — necessary for the performance of the contract and for the legitimate interest of resolving disputes fairly.
• Marketing communications — based on your explicit consent at the time of opt-in. You may withdraw marketing consent at any time by contacting support.
• Platform analytics and improvement — legitimate interest in improving the quality and security of the six6x service.

6. Data Sharing & Disclosure

six6x does not sell, rent, or trade your Personal Data to any third party. We may share your data with third parties only in the following circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah — for the purpose of processing your financial transactions.
• Identity verification providers: Third-party KYC service providers used to verify identity documents and screen against sanctions and PEP (politically exposed persons) lists.
• Gaming software providers: Third-party game studios and live dealer operators who may receive session data necessary to operate their games within the six6x Platform.
• IT and infrastructure providers: Cloud hosting, content delivery, and platform security vendors operating as Data Processors under binding data processing agreements.
• Legal and regulatory authorities: Where disclosure is required by law, court order, or legitimate regulatory demand, including anti-money laundering reporting obligations.
• Business transfers: In the event of a merger, acquisition, or asset sale involving six6x, your data may form part of the transferred assets. You will be notified in advance via your registered email address.

All third-party Data Processors engaged by six6x are subject to contractual obligations requiring them to implement appropriate technical and organisational measures to protect your data and to process it only in accordance with six6x's instructions.

7. International Data Transfers

six6x operates internationally and your Personal Data may be transferred to and processed in countries other than the country in which you are located, including countries whose data protection laws may differ from those of Pakistan. Where such transfers occur, six6x implements appropriate safeguards including standard contractual clauses, data processing agreements, and technical security measures to ensure your data receives an equivalent level of protection regardless of where it is processed.

8. Data Retention

six6x retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, and to resolve disputes. General retention guidelines are as follows:

• Account data and transaction records: Retained for a minimum of five (5) years from Account closure, in accordance with standard AML and financial record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of verification or Account closure, whichever is later.
• Support communications: Retained for three (3) years from the date of the interaction.
• Technical/session logs: Retained for up to twelve (12) months for security and fraud analysis purposes.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period for legal compliance purposes.

Upon expiry of applicable retention periods, Personal Data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual.

9. Cookies & Tracking Technologies

The six6x Platform uses cookies and similar tracking technologies to operate correctly, improve performance, and deliver a personalised experience. The types of cookies used include:

• Strictly necessary cookies: Required for the Platform to function — including session management, login authentication, and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options to improve your experience on return visits.
• Analytics cookies: Collect aggregated, anonymised data about how users interact with the Platform to help us improve performance and navigation. No personal identifiers are used in analytics reporting.
• Security cookies: Detect and prevent fraudulent activity, multiple Account creation from the same device, and suspicious access patterns.

You may manage non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the six6x Platform. six6x does not use third-party advertising cookies or share cookie data with advertising networks.

10. Your Data Rights

Subject to applicable law, you have the following rights in relation to your Personal Data held by six6x:

• Right of Access: You may request a copy of the Personal Data six6x holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data.
• Right to Erasure: You may request deletion of your Personal Data where there is no lawful reason for its continued processing. This right may be limited where legal retention obligations apply.
• Right to Restriction: You may request that six6x restrict processing of your data in certain circumstances, such as where accuracy is contested.
• Right to Data Portability: You may request a structured, machine-readable copy of Personal Data you have provided to six6x, where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, subject to overriding legal grounds.

To exercise any of these rights, please contact the six6x privacy team via live chat or the email address in Section 15. Requests will be responded to within 30 days. six6x may need to verify your identity before processing a data rights request.

11. Children's Privacy

The six6x Platform is strictly intended for adults aged 18 and over. six6x does not knowingly collect Personal Data from individuals under 18 years of age. Age verification is conducted as part of the KYC process for all Accounts. If six6x becomes aware that Personal Data has been collected from a person under 18, that data will be deleted immediately and the Account will be closed.

12. Security Measures

six6x implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. These include:

• TLS/SSL encryption for all data transmitted between your device and the six6x Platform.
• Encryption at rest for sensitive Personal Data including KYC documents and financial records.
• Access controls limiting internal access to Personal Data on a strict need-to-know basis.
• Two-factor authentication options for user Accounts and for internal staff systems.
• Regular security assessments and penetration testing of Platform infrastructure.
• Fraud detection and anomaly monitoring systems operating continuously on all Account activity.

No security system is entirely impenetrable. In the event of a data breach that poses a risk to your rights, six6x will notify affected users without undue delay and will take all reasonable steps to contain and remediate the breach.

13. Third-Party Links

The six6x Platform may contain links to third-party websites or services for informational purposes. six6x is not responsible for the privacy practices of any third-party website and this Privacy Policy does not apply to any site outside of the six6x Platform. You are encouraged to review the privacy policies of any third-party site you visit independently.

14. Changes to This Privacy Policy

six6x reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered Users via the registered email address before the revised Policy takes effect. The "Last Updated" date at the top of this page will reflect the most recent revision. Continued use of the six6x Platform after the effective date of any changes constitutes acceptance of the revised Policy.

15. Contact & Data Protection

For any questions, concerns, or data rights requests relating to this Privacy Policy or the way six6x handles your Personal Data, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the six6x Platform — look for the chat icon on any page. Average response time under 2 minutes.
• Email (plain text — not a clickable link): [email protected]

When submitting a data rights request, please include your registered email address and a brief description of your request. We may need to verify your identity before processing the request. All privacy-related requests are handled with priority and responded to within 30 calendar days.

For responsible gaming-related queries including self-exclusion, please visit the Responsible Gaming page or raise the matter directly with the support team via live chat.