six6x Privacy Policy

Overview & Data Controller Identity

This Privacy Policy ("Policy") describes how six6x ("six6x", "we", "us", "our"), the internationally licensed online casino and sports betting platform accessible at six6x.bio, collects, processes, uses, stores, discloses and protects personal data relating to individuals who visit, register with, or otherwise use the six6x platform and Services.

six6x acts as the data controller in respect of all personal data processed under this Policy — meaning six6x determines the purposes and means of processing. Where six6x engages third-party service providers to process data on its behalf, those providers act as data processors subject to contractual obligations consistent with applicable data protection standards.

This Policy applies to all personal data collected through the six6x website, mobile-optimised platform, customer support channels and any associated communications — including email notifications, SMS messages to registered Pakistani mobile numbers, and in-platform messaging. By using six6x, you confirm that you have read this Policy and consent to the data processing activities described herein.

Categories of Personal Data We Collect

six6x collects the following categories of personal data from Players and platform visitors, to the extent necessary for the purposes described in Section 5 of this Policy:

2.1 Identity & Contact Data

• Full legal name as appearing on government-issued identity documents;
• Pakistani CNIC number, Passport number or other government-issued ID number;
• Date of birth (for age verification — 21+ requirement);
• Pakistani mobile number (primary: used for account OTP, SMS notifications and responsible gaming alerts);
• Email address;
• Residential address (city, province — e.g., Karachi, Lahore, Faisalabad, Islamabad).

2.2 Account & Financial Data

• Username and hashed password;
• Account balance (PKR), transaction history, deposits and withdrawal records;
• Payment method details: JazzCash account number, EasyPaisa number, HBL/UBL/Meezan Bank account details, USDT TRC20 wallet addresses as applicable;
• Bonus balance, wagering history and promotional redemption records.

2.3 Gaming Activity Data

• Bet history across all games — cricket betting, slot games, live casino tables, fishing games;
• Game session durations, win/loss records and stake levels;
• Real-time game state data during active sessions;
• Responsible gaming limit settings and self-exclusion status.

2.4 Technical & Device Data

• IP address and approximate geolocation (city-level);
• Device type, operating system and browser type;
• Session identifiers, login timestamps and access logs;
• Cookie identifiers (see Section 9).

2.5 KYC Verification Documents

• Scanned or photographed copies of Pakistani CNIC or Passport;
• Proof of address documentation;
• Selfie or liveness check images submitted for identity verification;
• Proof of payment method ownership where required.

How We Collect Personal Data

six6x collects personal data through the following channels and mechanisms:

1. Direct Provision — Account Registration: Data you provide when you create a six6x account, including your name, Pakistani mobile number, email address and password.
2. Direct Provision — KYC Verification: Identity documents, address proof and selfie images submitted during the six6x KYC verification process.
3. Direct Provision — Payment Transactions: Payment method details provided when you deposit or request a withdrawal, including JazzCash, EasyPaisa and bank account details.
4. Automated Collection — Platform Usage: Technical data collected automatically when you access the six6x platform, including IP address, device identifiers, session data and interaction logs.
5. Automated Collection — Cookies and Similar Technologies: Data collected through cookies and browser storage mechanisms as described in Section 9 of this Policy.
6. Third-Party Sources — Payment Processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL and other approved payment partners to verify deposit receipt and withdrawal completion.
7. Third-Party Sources — KYC Providers: Identity verification results returned by six6x's third-party KYC verification partners, where applicable.
8. Customer Support Interactions: Records of communications between you and the six6x 24/7 live chat support team, including chat transcripts and any documents submitted in support of a query or complaint.

Legal Basis for Processing

six6x processes personal data on the following legal bases, depending on the category of data and the purpose of processing:

• Contractual Necessity: Processing required to perform the six6x Terms & Conditions contract with you — including account operation, payment processing, game delivery and withdrawal fulfilment;
• Legal Obligation: Processing required for six6x to comply with its international gaming licence obligations — including KYC verification, anti-money laundering (AML) monitoring and responsible gaming tool implementation;
• Legitimate Interests: Processing necessary for six6x's legitimate business interests — including platform security, fraud prevention, system analytics, and internal business reporting — where such interests are not overridden by your privacy rights;
• Consent: Processing for which six6x has obtained your explicit consent — principally the sending of promotional communications and the use of non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

How six6x Uses Your Personal Data

six6x uses the personal data collected from Players and platform visitors for the following specific purposes:

5.1 Account Management

To create, operate and maintain your six6x account — including processing your login credentials, maintaining your PKR balance, recording your bet and transaction history, and enabling account management functions such as deposit limit settings and self-exclusion.

5.2 Identity Verification & Regulatory Compliance

To fulfil KYC obligations required by six6x's international gaming licence — verifying your identity, confirming you meet the 21+ age requirement, and satisfying anti-money laundering checks prior to processing withdrawals or at such other times as required by our compliance programme.

5.3 Payment Processing

To process your deposits from and withdrawals to JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, Raast, 1LINK, USDT TRC20, and other approved payment methods — including verifying transaction status with payment partners and resolving payment disputes.

5.4 Game Delivery & Platform Operations

To deliver the six6x games and betting markets you access — including transmitting bet data, receiving game results, calculating winnings in PKR, and maintaining game session integrity.

5.5 Security & Fraud Prevention

To protect the six6x platform and its Players from fraud, unauthorised access, multi-accounting, bonus abuse and other prohibited conduct — including monitoring login patterns, flagging suspicious IP addresses, and investigating anomalous account activity.

5.6 Responsible Gaming

To monitor gaming activity for signs of problem gambling behaviour, to enforce player-set deposit and session limits, to implement self-exclusion and cooling-off periods, and to fulfil the responsible gaming obligations imposed by six6x's international gaming licence.

5.7 Marketing Communications

With your consent, to send promotional communications regarding six6x bonuses, new game releases, PSL cricket betting offers and other promotions — via email and SMS to your registered Pakistani mobile number. You may withdraw consent and opt out of marketing at any time.

5.8 Customer Support

To respond to your queries, complaints and data subject requests submitted through the six6x 24/7 live chat, email or other support channels — and to maintain records of support interactions for quality assurance and dispute resolution purposes.

5.9 Legal Proceedings & Regulatory Reporting

To cooperate with regulatory authorities, law enforcement and judicial proceedings where required by applicable law — including reporting suspicious financial activity under AML obligations and responding to lawful requests for account information.

Disclosure & Sharing of Personal Data

six6x does not sell your personal data. six6x shares personal data with third parties only in the following limited and controlled circumstances:

1. Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, Raast, 1LINK, USDT TRC20 processors and other approved payment partners — for the sole purpose of processing your deposits and withdrawals in PKR;
2. KYC Verification Providers: Third-party identity verification partners engaged by six6x to process CNIC, Passport and document verification under contractual data processing agreements;
3. Game Studios & Technology Providers: Certified game studio partners (including providers of slot games, live casino platforms and fishing games) who require session data to deliver games — limited strictly to data necessary for game operation;
4. Regulatory Authorities: International gaming licensing authorities, financial intelligence units and law enforcement agencies — where disclosure is required by six6x's licence conditions or applicable law;
5. Professional Advisers: Legal, accounting and audit professionals engaged by six6x — subject to professional confidentiality obligations;
6. Business Transfers: In the event of a merger, acquisition, restructuring or sale of all or part of six6x's business, personal data held by six6x may be transferred to the acquiring entity subject to equivalent privacy protections.

Data Retention

six6x retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to the following retention standards:

At the expiry of the applicable retention period, six6x will securely delete or irreversibly anonymise the relevant personal data, unless a longer retention period is required by specific legal proceedings or regulatory directive.

Data Security Measures

six6x implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:

• Transport Encryption: 256-bit SSL/TLS encryption applied to all data transmitted between your device and six6x servers — identical to the standard used by HBL and UBL internet banking portals;
• Data-at-Rest Encryption: Personal data stored on six6x database servers is encrypted at rest using AES-256 or equivalent;
• Password Security: Account passwords are stored as salted cryptographic hashes using industry-standard algorithms — they cannot be reversed or read by six6x staff;
• Two-Factor Authentication: SMS OTP-based 2FA available for all Player accounts, providing a second layer of login security beyond the password;
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with access to Player data are subject to confidentiality obligations and undergo security training;
• Intrusion Detection: Automated monitoring systems detect and alert on unusual access patterns, login anomalies and potential data exfiltration attempts in real time;
• Security Testing: six6x conducts periodic penetration testing and vulnerability assessments of its platform infrastructure.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, six6x will notify affected Players and the relevant regulatory authority within the timelines required by applicable law — and in any case within 72 hours of becoming aware of the breach where notification is required.

Cookies & Similar Technologies

six6x uses cookies and similar browser storage technologies on its platform. Cookies are small data files stored on your device that allow the six6x platform to recognise your browser, remember your preferences and maintain your login session. six6x uses the following categories of cookies:

You may manage or disable non-essential cookies through your browser settings. Note that disabling strictly necessary or functional cookies may impair the operation of the six6x platform — including your ability to remain logged in to your account or access the responsible gaming tools in your dashboard.

Your Data Subject Rights

Subject to the conditions and limitations of applicable data protection law and six6x's regulatory obligations, you have the following rights in respect of your personal data held by six6x:

1. Right of Access: To receive a copy of the personal data six6x holds about you and information about how it is processed;
2. Right to Rectification: To have inaccurate personal data corrected and incomplete data completed — including updating your Pakistani mobile number or address in your account profile;
3. Right to Erasure: To request deletion of your personal data where it is no longer necessary for the purpose for which it was collected — subject to six6x's legal obligation to retain certain data for regulatory compliance periods;
4. Right to Restriction: To request that six6x restricts the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed;
5. Right to Data Portability: To receive your personal data in a structured, commonly used and machine-readable format, where processing is based on consent or contract and carried out by automated means;
6. Right to Object: To object to processing based on legitimate interests — including objecting to the use of your gaming data for aggregate platform analytics;
7. Right to Withdraw Consent: To withdraw consent for processing activities based on consent at any time — including opting out of marketing communications and non-essential cookies;
8. Right to Lodge a Complaint: To lodge a complaint with the competent data protection supervisory authority in the jurisdiction of six6x's licensing authority if you believe your rights have been violated.

To exercise any of these rights, please contact six6x via the 24/7 live chat support channel or by email at [email protected]. six6x will respond to verifiable data subject requests within 30 days of receipt. We may require identity verification before processing access or deletion requests to protect the security of your account.

Minors & the 21+ Age Requirement

If six6x discovers that personal data has been collected from an individual who did not meet the 21-year minimum age requirement at the time of registration, six6x will immediately suspend the relevant account, delete the personal data of the underage individual (subject to any mandatory regulatory retention obligations), return any deposited Real Money Balance to the original payment source, and report the matter to the relevant regulatory authority where required.

If you are a parent or guardian and have reason to believe that a person under 21 years of age has registered an account on six6x using false age information, please contact six6x immediately via the live chat support channel or by email at [email protected]. We will investigate and act on confirmed reports promptly.

International Data Transfers

six6x operates under international gaming licensing authority oversight and engages service providers located in multiple countries — including payment processors, KYC verification providers and game studio technology partners. As a result, personal data collected from Pakistani Players may be transferred to and processed in countries outside Pakistan.

Where six6x transfers personal data internationally, it does so subject to appropriate safeguards designed to ensure that the transferred data receives a standard of protection equivalent to that provided under this Policy. These safeguards include:

• Contractual data processing agreements imposing data protection obligations on the recipient;
• Transfers only to recipients located in jurisdictions that maintain data protection standards recognised as adequate by the relevant supervisory authority;
• Technical measures including encryption of data in transit and access controls applied at the recipient end.

Further information on the international transfer safeguards applicable to specific categories of data processing is available on request by contacting six6x's data protection contact via the details in Section 14 of this Policy.

Changes to This Privacy Policy

six6x reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, changes to six6x's data processing activities, or changes required by regulatory or licensing authority direction. The effective date of the current version of this Policy is displayed at the top of this page and in the hero section above.

Where a proposed change is material — meaning it significantly alters how six6x processes your personal data or materially affects your rights — six6x will notify registered Players by email to the address registered on their account and/or via a prominent notice displayed within the six6x platform, at least 14 days before the change takes effect.

For non-material updates — such as clarifications of existing language, corrections of typographical errors, or administrative changes — six6x will update the effective date without prior notification. Your continued use of the six6x platform following an update to this Policy constitutes your acknowledgement of the amended terms. If you do not accept an updated Policy, you should close your six6x account before the changes take effect.

We recommend bookmarking this page and reviewing it periodically. The version history of this Policy is available on request.

Contact, Data Subject Requests & Data Protection

For all privacy-related queries, data subject access requests, consent withdrawal requests, marketing opt-outs and data protection complaints, please contact six6x using the following details:

• 24/7 Live Chat: Available within your six6x account dashboard — the fastest channel for account-specific privacy queries and consent management requests. Live chat agents can process marketing opt-outs and direct data subject requests to the compliance team immediately.
• Email: [email protected] — for formal written data subject requests, data protection complaints, and queries regarding this Privacy Policy. Please mark the subject line "Privacy Policy Query" or "Data Subject Request" to ensure prompt routing to the relevant team. Responses are provided within 30 days of receipt of a verifiable request.

When submitting a data subject request, please include your registered Pakistani mobile number and username to enable six6x to identify your account and respond accurately. six6x may request additional identity verification before processing access, portability or deletion requests — this is to protect your account from fraudulent data requests by third parties.

All data subject requests are handled by the six6x compliance and data protection team, who operate independently from customer-facing support and have the authority to act on legitimate privacy requests without commercial consideration.

If you are dissatisfied with six6x's response to a data protection complaint, you have the right to escalate your complaint to the competent supervisory authority in the jurisdiction of six6x's international gaming licence.