six6er Privacy Policy

This Privacy Policy ("Policy") describes how six6er ("the Platform", "we", "us", "our") — operating the website at six6er.net — collects, uses, stores, and protects the personal information of users ("you", "User", "Player") who register for an account, access the platform, place bets, play casino games, or interact with any six6er service in any way.

This Policy applies to all personal data collected through six6er.net, its mobile-optimised web interfaces, and any communications between six6er and its registered players, including support channels, promotional emails, and SMS notifications.

This Policy should be read alongside six6er's Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall user agreement.

six6er collects personal data across several categories depending on how you interact with the platform. The following table summarises the categories of personal data we collect and hold:

six6er collects personal data through the following channels:

Directly From You

• When you complete the six6er registration form, providing your name, email, mobile number, and date of birth
• When you submit identity documents or proof of address during KYC verification
• When you make a deposit or withdrawal and provide payment method details
• When you contact the six6er support team via live chat or email
• When you respond to a survey, promotion, or bonus claim form on the platform
• When you update your account settings or responsible gaming preferences

Automatically Through Platform Use

• Technical data including IP address, device identifiers, and browser information collected automatically when you access six6er.net
• Gaming activity logs generated each time you place a bet, spin a slot, or join a live casino table
• Session data including login timestamps, session duration, and navigation patterns within the platform
• Cookie and similar tracking technology data as described in Section 9

From Third Parties

• Identity verification results from our KYC / AML compliance partners where document verification is outsourced
• Fraud screening signals from payment processors such as JazzCash, EasyPaisa, and card scheme networks
• Age verification confirmations where required by our compliance framework

six6er processes your personal data only for defined, legitimate purposes. The primary purposes for which your data is used are set out below:

• Account Creation & Management: To register your account, verify your identity, manage your PKR wallet, and maintain accurate records of your account status.
• Transaction Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, Visa, and Mastercard, and to maintain a complete and auditable transaction history.
• Sports Betting & Casino Operations: To record, settle, and provide a historical record of all bets placed on cricket, PSL, UFC, football, and other markets, as well as casino game sessions.
• KYC & Age Verification: To verify that you are at least 21 years of age and to confirm your identity in compliance with our responsible gaming obligations.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and unauthorised account access.
• Customer Support: To respond to your queries, handle complaints, manage self-exclusion requests, and maintain a record of all support interactions.
• Responsible Gaming: To administer deposit limits, cooling-off periods, session alerts, and self-exclusion tools, and to identify players who may be showing signs of problem gambling.
• Legal Compliance: To comply with applicable legal, regulatory, and financial reporting obligations as they apply to the platform's operations.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the six6er platform, fix technical issues, and optimise the user experience.
• Marketing & Promotions: To send you promotional offers, PSL season bonuses, and personalised recommendations — but only where you have provided explicit consent or where a legitimate interest applies and you have not opted out.

six6er processes your personal data on one or more of the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between you and six6er — i.e., to operate your account, settle bets, and process financial transactions.
• Legal Obligation: Processing required for six6er to comply with applicable laws including anti-money laundering requirements, age verification obligations, and financial record-keeping rules.
• Legitimate Interests: Processing carried out for six6er's legitimate business interests, including fraud prevention, platform security, abuse detection, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

six6er does not sell your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

Payment Processors

Your financial data is shared with payment service providers including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card scheme operators (Visa, Mastercard) solely for the purpose of processing your deposits and withdrawals. These providers are bound by their own strict data protection and financial security obligations.

KYC & Identity Verification Partners

Where identity document verification is carried out by a third-party service, your identity documents and verification results are shared with that provider under a formal data processing agreement that restricts their use of your data to verification purposes only.

Fraud Prevention & Security Services

Anonymised or pseudonymised technical data (such as device fingerprints and IP addresses) may be shared with fraud detection services to protect the platform and its players from fraudulent activity.

Legal and Regulatory Authorities

six6er will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a valid legal order, or to protect the rights, safety, or property of six6er or its players.

Game Providers

Casino and live dealer game providers may receive limited session data (such as player ID and wager amounts) necessary to operate their games within the six6er platform. These providers do not receive your full identity details and are contractually prohibited from using session data for any purpose other than game operation.

six6er retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The general retention periods that apply to each category of data are as follows:

• Account & Identity Data: Retained for the duration of your account and for a period of five (5) years following permanent account closure, in accordance with applicable financial record-keeping requirements.
• KYC Documents: Retained for five (5) years from the date of submission or from account closure, whichever is later.
• Transaction Records: Retained for seven (7) years from the date of each transaction in accordance with financial compliance obligations.
• Gaming Activity Logs: Retained for five (5) years from the date of the relevant session or bet settlement.
• Support Communications: Retained for three (3) years from the date of the last communication in a given thread.
• Marketing Data: Retained until you withdraw consent or opt out, after which it is deleted within 30 days.
• Technical & Log Data: Typically retained for twelve (12) months from the date of collection, unless a longer period is required for an ongoing investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to you as an individual.

six6er takes the security of your personal data seriously and implements a layered set of technical and organisational security measures proportionate to the risks involved. These include:

• TLS 1.2+ Encryption in Transit: All data transmitted between your device and six6er.net is encrypted using industry-standard TLS protocols, preventing interception by third parties.
• Encryption at Rest: Sensitive data fields including identity document scans and financial records are encrypted when stored in our database infrastructure.
• Two-Factor Authentication (2FA): Optional 2FA via OTP is available to all registered players and is strongly recommended. New device logins automatically trigger OTP verification regardless of 2FA activation status.
• Access Controls: Access to personal data within six6er's operational systems is restricted to authorised personnel on a strict need-to-know basis. Access logs are maintained and reviewed.
• PCI-DSS Compliant Payment Processing: Payment card data and mobile wallet credentials are processed through PCI-DSS certified gateways. six6er does not store full card numbers or mobile wallet PINs on its own servers.
• Regular Security Audits: six6er's platform infrastructure undergoes periodic security assessments and vulnerability testing to identify and remediate potential weaknesses.

six6er uses cookies and similar tracking technologies on six6er.net to ensure the platform functions correctly, to remember your preferences, and to analyse how players use the site. A cookie is a small text file placed on your device when you visit a website.

Types of Cookies Used

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in, security tokens, and cookies that manage your PKR wallet state. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, odds format, and responsible gaming tool configurations.
• Analytics Cookies: Used to collect anonymised data about how players navigate six6er.net, which pages are most visited, and where technical errors occur — helping us improve the platform. These are set only with your consent.
• Marketing Cookies: Track whether you arrived at six6er.net from a specific referral source. These are set only with your consent and are used solely in the context of six6er's own promotional tracking — not for third-party ad profiling.

You can manage or withdraw consent for non-essential cookies via the cookie preference panel available in your account settings or through your browser settings. Note that disabling strictly necessary cookies will impair the functionality of the platform.

Given the financial nature of the six6er platform, payment data receives additional protections over and above our general personal data handling practices.

• six6er does not store full Visa or Mastercard numbers, CVV codes, or expiry dates on our own servers. These details are tokenised by our PCI-DSS certified payment gateway at the point of entry.
• JazzCash and EasyPaisa mobile numbers registered to your account are stored in encrypted form and are used exclusively for transaction processing and verification. They are never used for unsolicited SMS outreach without your consent.
• Bank account details provided for withdrawal to HBL, UBL, or Meezan Bank are stored encrypted and are accessible only to authorised finance team members for the purpose of processing your withdrawal request.
• All payment method details on your account must correspond to accounts or instruments registered in your own legal name. Third-party payment methods are not accepted and will trigger an account review.

If you are a parent or guardian and believe that someone under the age of 21 in your household has registered a six6er account, please contact our support team immediately at the email address in Section 15. We will investigate and act on all such reports as a priority matter.

Age verification is conducted as part of our KYC process. Users who cannot provide satisfactory proof that they are 21 or older will have their accounts suspended and any pending withdrawals held pending resolution.

As a six6er user, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us using the details in Section 15. We will respond to all verified requests within 30 days.

• Right of Access: You have the right to request a copy of all personal data that six6er holds about you, along with information about how and why it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating your mobile number) can be made directly within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where you object to processing and there is no overriding legitimate interest. Note that certain data must be retained to comply with legal obligations (see Section 7) and cannot be deleted on request during the mandatory retention period.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: You have the right to receive a structured, machine-readable copy of the personal data you have provided to six6er, and to have it transmitted to another controller where technically feasible.
• Right to Object: You have the right to object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, though such objections will be assessed on a case-by-case basis.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

six6er primarily operates its data infrastructure within secure, established hosting environments. Where personal data is transferred to or accessed from jurisdictions outside of Pakistan — for example, in connection with game providers, KYC verification partners, or infrastructure providers — such transfers are carried out only under appropriate safeguards.

These safeguards include contractual arrangements that require the receiving party to protect your data to a standard equivalent to the protections described in this Policy. Where possible, six6er prefers service providers with established data centres in jurisdictions with robust data protection frameworks.

You may request details of any specific international data transfers applicable to your account by contacting us using the details in Section 15.

six6er reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, new features on the platform, or updates to applicable legal requirements. The effective date at the top of this Policy will be updated whenever a material change is made.

Where changes are significant — for example, where we introduce a new purpose for processing your data or change the categories of third parties with whom data is shared — we will notify you by email to your registered address or via a notice displayed upon login, prior to the changes taking effect.

Continued use of six6er following notification of a Policy update constitutes your acceptance of the revised Policy. The current version is always available at six6er.net/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way six6er handles your personal data, please reach out to our support team. All privacy-related requests are handled with priority.

• Live Chat: Available from within your logged-in six6er account — the fastest channel for account-specific privacy queries.
• Email: [email protected] — for written privacy requests, data access requests, or erasure requests. Please include "Privacy Request" in the subject line along with your registered username.
• Response Time: We aim to acknowledge all privacy requests within 48 hours and to fully respond within 30 days. Complex requests involving large volumes of data may take up to 60 days, in which case we will notify you of the extension.