6xsix Privacy Policy — How We Handle Your Personal Data

1 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "6xsix", "we", "us", "our" — the 6xsix platform operator and its affiliates holding the applicable international gaming license.
• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, mobile number, date of birth, CNIC number, payment account details, and IP address.
• "Processing" — any operation or set of operations performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "User", "you", "your" — any individual who accesses or registers on the 6xsix platform.
• "Platform" — the 6xsix website and all associated services accessible at 6xsix.app.
• "KYC" — Know Your Customer identity verification procedure, required under 6xsix's gaming license obligations.
• "Cookie" — a small data file stored on your device by the 6xsix platform to recognise your browser and session.
• "Third Party" — any entity other than you and 6xsix, including payment processors, identity verification providers, and regulatory authorities.

2 Personal Data We Collect

6xsix collects Personal Data through several channels and processes. The categories of data we collect, and the contexts in which they are collected, are set out in the table below:

3 How We Use Your Personal Data

6xsix processes your Personal Data for the following specific and documented purposes:

3.1 Account Management and Platform Access

We use your registration data to create and maintain your 6xsix account, authenticate your identity at login, process session management, and enable account recovery via SMS OTP. This processing is essential for the basic functioning of the platform — without it, 6xsix cannot provide its services.

3.2 Payment Processing and Financial Operations

Your financial data — including JazzCash or EasyPaisa account numbers, bank account details, and transaction history — is processed to facilitate deposits to and withdrawals from your 6xsix wallet. This data is shared with payment processing partners only to the extent necessary to complete the relevant transaction. 6xsix does not store full payment card numbers or complete banking credentials on its own servers.

3.3 Identity Verification and KYC Compliance

As a condition of our international gaming license, 6xsix is legally required to verify the identity of users prior to processing withdrawals. CNIC data is processed for this purpose through an accredited third-party KYC verification provider. Verification data is retained for the period required under our license obligations, which typically extends for a defined period after account closure.

3.4 Fraud Prevention and Security

6xsix processes device data, IP addresses, login patterns, and transaction histories to detect and prevent fraudulent activity — including account takeover attempts, bonus abuse, money laundering, and multi-accounting. This processing is in the legitimate interests of both 6xsix and its honest user base.

3.5 Responsible Gaming Compliance

Gameplay activity data and responsible gaming tool usage data are processed to monitor for indicators of problem gambling behaviour, to enforce deposit limits and self-exclusion requests, and to comply with the responsible gaming obligations imposed by our gaming license. This processing is both a legal obligation and a genuine platform commitment.

3.6 Customer Support

Communication data from live chat, Telegram support, and email correspondence is processed to resolve support queries, investigate complaints, and improve the quality of support services. Support conversations may be reviewed by quality assurance personnel and are retained for a defined period for audit purposes.

3.7 Platform Improvement and Analytics

Aggregated and anonymised usage data is used to analyse platform performance, identify popular games and features, optimise the mobile experience for Pakistani devices and networks, and plan future platform development. This analytics processing does not involve identifiable Personal Data.

4 Legal Basis for Processing

6xsix processes Personal Data only where a valid legal basis exists under applicable data protection law. The legal bases applicable to our processing activities are as follows:

• Contractual Necessity: Processing required to fulfil our obligations to you under the 6xsix Terms and Conditions — including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with our international gaming license obligations, including KYC identity verification, anti-money laundering (AML) record keeping, and responsible gaming compliance.
• Legitimate Interests: Processing conducted in the legitimate interests of 6xsix and its user base, including fraud detection, security monitoring, and platform analytics — where these interests are not overridden by your privacy rights.
• Consent: Where we seek your explicit consent for specific processing activities — such as direct marketing communications — we will obtain that consent clearly and separately, and you may withdraw it at any time.

5 Data Sharing and Disclosure

6xsix does not sell, rent, or trade your Personal Data to third parties for their own marketing or commercial purposes. We share Personal Data only in the following specific and documented circumstances:

5.1 Payment Processors

Your financial data is shared with authorised payment processing partners — including JazzCash, EasyPaisa, and banking partners — solely for the purpose of processing deposit and withdrawal transactions. These partners are subject to contractual data protection obligations and are prohibited from using your data for any purpose beyond the relevant transaction.

5.2 Identity Verification Providers

CNIC and identity documentation submitted for KYC verification is processed by an accredited third-party KYC verification provider operating under a formal data processing agreement with 6xsix. Verification providers are prohibited from retaining or processing your data beyond the scope of the verification service.

5.3 Regulatory and Legal Authorities

6xsix may be required by law, court order, or the regulatory authority under our gaming license to disclose Personal Data to competent authorities. Such disclosures are made only to the extent strictly required by the applicable legal obligation. Where permitted by law, 6xsix will notify you of any such disclosure request.

5.4 Fraud Prevention Networks

Where 6xsix detects or suspects fraudulent activity on its platform, relevant data — including device fingerprints, IP addresses, and account activity — may be shared with industry fraud prevention networks to protect the broader online gaming ecosystem.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the 6xsix business, Personal Data held by 6xsix may be transferred to the acquiring entity, subject to commitments to maintain the privacy protections described in this Policy. Users will be notified of any such transfer via the contact details registered to their accounts.

6 Cookies & Tracking Technologies

6.1 What Cookies We Use

6xsix uses the following categories of cookies and similar technologies on its platform:

• Strictly Necessary Cookies: Essential for platform operation — session authentication tokens, login state persistence, and security cookies. These cannot be disabled without breaking the platform.
• Functional Cookies: Remember your preferences such as odds format, game lobby filter settings, and notification preferences across sessions.
• Performance and Analytics Cookies: Collect aggregated, anonymised data about how users navigate the platform to identify performance issues and improve the mobile experience. No personally identifiable data is collected through these cookies.

6.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern mobile browsers — including Chrome, Safari, and Samsung Internet — allow you to view, block, and delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your 6xsix account. 6xsix does not currently use third-party advertising or cross-site tracking cookies.

7 Data Retention

6xsix retains Personal Data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or our gaming license obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

8 Data Security

6xsix implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, destruction, or alteration:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and 6xsix servers is encrypted in transit using 256-bit SSL/TLS — the same encryption standard applied by major international banks.
• Password Hashing: Account passwords are stored using a one-way cryptographic hash function. 6xsix employees cannot view your password in plain text under any circumstances.
• Access Controls: Personal Data is accessible only to 6xsix personnel who require it to perform their specific job function, under a strict role-based access control (RBAC) system.
• Server Security: 6xsix servers are hosted in data centres with physical access controls, 24/7 monitoring, and redundant infrastructure. Regular vulnerability assessments and penetration tests are conducted.
• Two-Factor Authentication: 6xsix offers 2FA on all user accounts, providing an additional layer of authentication security against unauthorised account access.
• Incident Response: 6xsix maintains a documented data breach response procedure. In the event of a breach affecting your Personal Data, we will notify you and the relevant regulatory authority within the timeframes required by applicable law.

9 Your Data Rights

Subject to applicable law and the gaming license obligations under which 6xsix operates, you have the following rights in relation to your Personal Data held by 6xsix. To exercise any of these rights, contact our support team via live chat or at the email address displayed in Section 15.

10 Children and Minors

The 6xsix platform is strictly intended for users aged 21 years and above. 6xsix does not knowingly collect, process, or store Personal Data from individuals under the age of 21. Age verification via CNIC is required before any withdrawal is processed, specifically to identify and close any accounts registered by underage individuals.

If 6xsix becomes aware that Personal Data has been collected from an individual under the age of 21, that data will be immediately and permanently deleted, the account will be closed, and any deposits will be returned. If you have reason to believe that a minor has registered a 6xsix account, please notify our support team immediately.

11 International Data Transfers

6xsix operates under an international gaming license and uses service providers — including KYC verification providers, payment processors, and infrastructure providers — who may be located in jurisdictions outside Pakistan. Where Personal Data is transferred to a jurisdiction that does not provide an equivalent level of data protection to Pakistan, 6xsix ensures that appropriate safeguards are in place, including:

• Standard contractual clauses (SCCs) approved by a recognised data protection authority, incorporated into service provider agreements;
• Data processing agreements that require service providers to implement security measures equivalent to those applied by 6xsix;
• Transfers limited to the minimum data necessary for the specific service being provided.

By registering on the 6xsix platform, you acknowledge and consent to the transfer of your Personal Data to the jurisdictions in which our service providers operate, subject to the safeguards described above.

12 Marketing Communications

6xsix may send promotional communications — including information about new games, bonuses, and platform features — to users who have consented to receive such communications at the time of registration or at a subsequent point in time. All marketing communications will be sent to your registered mobile number via SMS or to your Telegram handle if provided.

You may opt out of marketing communications at any time by:

• Adjusting your notification preferences in your 6xsix account settings;
• Contacting 6xsix support via live chat and requesting removal from all marketing communications;
• Replying STOP to any SMS marketing message received from 6xsix.

Please note that opting out of marketing communications does not affect transactional notifications — including deposit confirmations, withdrawal processing updates, OTP messages for login and security, and critical account alerts. These will continue to be sent as they are essential to the security and functioning of your account.

13 Third-Party Links

The 6xsix platform may contain references to third-party services — such as payment processors and game providers — whose own privacy policies govern the handling of any data you provide directly to those services. 6xsix is not responsible for the privacy practices of third parties and recommends that you review the privacy policy of any third-party service before providing your personal information. This Privacy Policy applies exclusively to the 6xsix platform.

14 Amendments to This Policy

6xsix reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our gaming license obligations. Where material changes are made, 6xsix will notify registered users via SMS to their registered Pakistani mobile number and will publish the updated Policy on the platform with a revised effective date.

We encourage you to review this Privacy Policy periodically. Your continued use of the 6xsix platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with a material change to this Policy, you may request account closure as described in the 6xsix Terms and Conditions.

15 Contact Us

For any questions, requests, or complaints relating to this Privacy Policy or the processing of your Personal Data by 6xsix, you may contact us through the following channels. Email and contact addresses are displayed as plain text only and are not clickable links.

6xsix aims to respond to all data rights requests and privacy complaints within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days — and will notify you if an extension is required.