Privacy Policy

This Privacy Policy ("Policy") sets out how sixes6 ("we", "us", "our", "the Platform") collects, uses, stores, discloses and otherwise processes personal data relating to registered users and visitors of the website at https://sixes6.cam ("Platform").

sixes6 is an English-language online gaming information and wagering platform serving users in Pakistan and other jurisdictions where access is lawful. We take our data protection obligations seriously and are committed to processing personal data transparently, lawfully and in accordance with applicable data protection legislation.

By accessing or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with how we process your personal data as described here, you should not use the Platform.

The following terms, when used in this Policy, have the meanings defined below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, device identifiers, IP address, payment details and identity documents.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For this Platform, the Data Controller is the sixes6 operator entity.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller under a written data processing agreement.
• "KYC" — Know Your Customer, the identity verification process used to confirm user identity before enabling full platform functionality, including withdrawals.
• "Cookies" — small text files placed on your device by the Platform to store session information, preferences and analytical data.

The Data Controller for personal data processed through the sixes6 Platform is the licensed operator entity responsible for the Platform. Full operator details, including registered name, jurisdiction and licensing information, are available upon request through our support channels and are published within our Terms & Conditions.

sixes6 does not operate under any licence issued by the Government of Pakistan, the Pakistan Telecommunication Authority (PTA) or the State Bank of Pakistan, and makes no claim of such approval. The Data Controller operates under applicable data protection obligations of the licensing jurisdiction.

We collect the following categories of personal data, depending on how you interact with the sixes6 Platform:

We do not collect special categories of sensitive personal data (such as biometric, health or political data) except where strictly required for identity verification purposes and with appropriate safeguards in place.

sixes6 collects personal data through the following methods:

• Directly from you: When you register an account, complete KYC, make deposits or withdrawals, contact our support team or update your profile settings.
• Automatically: When you access the Platform, we automatically collect technical data including IP addresses, device information and session data via cookies and server logs.
• From third-party verification services: KYC and AML screening services may supplement registration data with identity verification results from authorised sources.
• From payment processors: Transaction confirmation data is received from payment intermediaries. Full payment credentials are never stored directly by sixes6 — these are handled by certified payment processors under their own privacy regimes.

We process your personal data for the following purposes, each resting on a specific legal basis under applicable data protection law:

• Account administration and platform provision — Necessary for the performance of our contract with you. This includes registration, login, deposit processing, withdrawal processing and customer support.
• Identity verification and KYC compliance — Required by legal obligation under applicable AML and gaming regulations. We cannot provide full platform access without completing verification.
• Fraud prevention and security monitoring — Legitimate interests of the operator and users to detect, prevent and investigate fraudulent activity, abuse and financial crime.
• Responsible gambling compliance — Legal obligation and legitimate interests to monitor gambling patterns, apply limits and enforce self-exclusion requests in accordance with our Responsible Gambling Policy.
• Platform analytics and improvement — Legitimate interests to analyse usage patterns, improve user experience and optimise Platform performance.
• Marketing communications — Where you have provided explicit consent, we may send promotional communications about bonuses, new games and offers. You may withdraw consent at any time.
• Legal and regulatory compliance — Legal obligation to retain records as required by applicable gaming, financial and tax regulations in the operator's licensing jurisdiction.

sixes6 does not sell, rent or trade your personal data. We may share personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment processors: To facilitate deposits and withdrawals. Payment method references — including familiar Pakistani payment channels such as Easypaisa, JazzCash, Raast and bank transfers — do not constitute endorsement by those providers. Your data is shared with processors only as necessary to complete transactions.
• KYC and AML service providers: To verify identity and screen against sanctions, PEP and fraud databases as required under applicable compliance obligations.
• Technology and infrastructure providers: Cloud hosting, analytics platforms, customer support systems and cybersecurity providers operating under contractual data processing agreements.
• Regulatory and law enforcement authorities: Where required by applicable law, court order or lawful regulatory request, we may disclose personal data to competent authorities.
• Game and sports content providers: Limited session and wagering data may be shared with licensed game studios and sports data providers to deliver platform functionality. No unnecessary personal data is shared beyond what is required.

All third-party processors engaged by sixes6 are bound by written data processing agreements that restrict their use of personal data to the stated purpose only and require appropriate security measures.

As an internationally operated platform, personal data collected from users in Pakistan may be transferred to, processed in, or stored in countries outside of Pakistan, including the operator's licensing jurisdiction and the locations of our third-party service providers.

Where data is transferred internationally, we take steps to ensure that appropriate safeguards are in place, including standard contractual clauses or equivalent transfer mechanisms recognised by applicable data protection frameworks.

sixes6 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. The following general retention principles apply:

• Active account data: Retained for the duration of the account relationship and for a period thereafter as required by applicable gaming, AML and financial recordkeeping obligations.
• KYC and identity documents: Retained for the period required by applicable AML regulations, typically five years from the end of the account relationship or last transaction, whichever is later.
• Transaction records: Financial transaction records are retained for a minimum period as required by applicable financial recordkeeping obligations.
• Responsible gambling records: Self-exclusion records and responsible gambling interaction logs are retained for the duration of any active exclusion period and for a reasonable period thereafter for compliance purposes.
• Marketing data: Retained until consent is withdrawn. Upon withdrawal of consent, marketing data is deleted or anonymised within a reasonable processing period.

Upon expiry of the applicable retention period, personal data is securely deleted, anonymised or otherwise rendered non-identifiable.

Subject to applicable law and the operator's licensing jurisdiction, you may have the following rights in relation to your personal data:

sixes6 uses cookies and similar tracking technologies to deliver, maintain and improve the Platform experience. Cookies are small text files placed on your device when you access the Platform.

• Strictly Necessary Cookies: Required for the Platform to function. These enable session management, login persistence and security features. They cannot be disabled without impairing Platform functionality.
• Analytics Cookies: Used to understand how users interact with the Platform — pages visited, session duration, feature usage. This data is aggregated and not used to identify individuals.
• Functional Cookies: Remember your preferences, such as language settings, odds format and display preferences, to personalise your Platform experience.
• Marketing Cookies: Used, with your consent, to deliver relevant promotional content. You may withdraw consent via your browser settings or our cookie management tool.

You can manage or disable non-essential cookies through your browser settings. Disabling strictly necessary cookies may affect Platform functionality. For more detailed information about specific cookies in use, refer to our cookie management settings within the Platform.

The sixes6 Platform is strictly intended for adults aged 18 or above — or the higher minimum age required by the operator's licence jurisdiction. We do not knowingly collect personal data from individuals under the minimum age threshold.

If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. If you believe a minor has provided personal data to sixes6, please contact us promptly using the details in Section 15.

sixes6 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures are reviewed and updated regularly in response to evolving security threats.

• Encryption of personal data in transit using TLS/SSL protocols.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Role-based access controls restricting staff access to personal data on a need-to-know basis.
• Regular security testing, penetration testing and vulnerability assessments.
• Incident response procedures for timely detection, containment and notification of data security breaches.

While we take reasonable steps to protect your data, no system is entirely impenetrable. You are also responsible for maintaining the security of your account credentials. If you suspect a security incident involving your account, contact us immediately.

sixes6 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or Platform features. The effective date at the top of this document indicates the date of the most recent revision.

When material changes are made to this Policy, we will notify registered users via email to the registered address and/or through an in-platform notification prior to the changes taking effect. Minor changes — such as clarifications or corrections — may take effect without specific notification.

Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the changes. If you do not accept the updated Policy, you should stop using the Platform and may request account closure.

For any queries, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact the sixes6 data team through the following channels. All contact details are provided as plain text only — there are no clickable links or mailto addresses below.

When submitting a data rights request, please include your registered email address and a description of your request. We may ask you to verify your identity before processing the request. This is to ensure the security of your data and to prevent unauthorised access.