Privacy Policy — six6e

1 Introduction

six6e ("we", "us", "our", "the Platform") is committed to protecting the personal data of all individuals who interact with our platform at six6e.cam. This Privacy Policy ("Policy") describes how six6e collects, uses, stores, shares and protects personal information belonging to registered users, visitors and any other individual whose data we process in connection with operating the Platform.

This Policy applies to all personal data processed by six6e in connection with the operation of the Platform, regardless of the jurisdiction in which the data subject is located. By registering an Account on six6e, or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy. In the event of any conflict between this Policy and those documents on the specific subject of personal data, this Privacy Policy shall prevail.

2 Definitions

The following definitions apply throughout this Privacy Policy:

• Data Controller — six6e, as the entity that determines the purposes and means of processing your personal data.
• Data Processor — A third party that processes personal data on behalf of six6e under documented instructions (e.g., KYC verification providers, payment processors).
• Data Subject — Any identified or identifiable natural person whose personal data is processed by six6e, including registered users and Platform visitors.
• Personal Data — Any information relating to an identified or identifiable natural person, including names, email addresses, device identifiers, IP addresses, financial transaction records and identity documents.
• Processing — Any operation performed on personal data, whether automated or manual, including collection, storage, retrieval, use, disclosure, erasure or destruction.
• Sensitive Personal Data — A subset of personal data warranting heightened protection, including government-issued identity documents (such as CNIC), financial account information and data revealing health or biometric characteristics.
• Consent — A freely given, specific, informed and unambiguous indication by the Data Subject agreeing to the processing of their personal data for a stated purpose.

3 Personal Data We Collect

six6e collects personal data through several means, including direct submission by users during registration and KYC, automated technical collection during Platform use, and in limited cases through third-party verification partners. The categories of data we collect are set out below:

3.1 Registration & Account Data

• Full legal name
• Date of birth (to verify minimum age eligibility)
• Email address and/or mobile phone number
• Username and encrypted password
• Country of residence and city (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar)
• Preferred language and currency settings

3.2 Identity Verification (KYC) Data

• Government-issued photo identification documents, such as a National Identity Card (CNIC), passport or driving licence
• Proof of address documentation (e.g., utility bills or bank statements)
• Proof of payment method ownership where required by AML procedures
• Selfie or liveness check images, where required by our KYC partner's verification process

3.3 Financial & Transaction Data

• Deposit amounts, transaction timestamps and payment method references (e.g., mobile wallet identifiers associated with channels such as Easypaisa, JazzCash or Raast, or bank account references for HBL, UBL, Meezan Bank or Bank Alfalah transfers — as context identifiers only)
• Withdrawal requests, amounts and destination payment method references
• Bet history, wagering records and game participation logs
• Bonus redemption history

3.4 Technical & Usage Data

• IP address and approximate geographic location derived from IP
• Device type, operating system and browser information
• Session duration, pages viewed and features used
• Referring URL and Platform navigation paths
• Crash reports and error logs

3.5 Communications Data

• Support chat transcripts and email correspondence
• Feedback, complaints and survey responses submitted through the Platform

4 How We Use Your Data (Data Processing)

six6e processes your personal data only for specific, documented purposes. The table below summarises the primary processing activities, the data categories involved and the purposes served:

We do not use personal data for automated decision-making that produces legal or similarly significant effects on Data Subjects, unless specifically disclosed and the applicable legal basis is confirmed.

5 Legal Basis for Processing

Where applicable data protection legislation requires a legal basis for processing personal data, six6e relies on the following grounds:

• Contractual Necessity: Processing required to fulfil our obligations to you under the Terms & Conditions, including account management, payment processing and bet settlement.
• Legal Obligation: Processing required to comply with applicable AML, KYC, tax and other regulatory obligations.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring and service improvement — where such interests are not overridden by your data protection rights.
• Consent: Processing activities for which we have obtained your explicit consent, such as sending promotional communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6 Third-Party Data Sharing

six6e does not sell, rent or trade your personal data to third parties for their own marketing purposes. We share personal data with third parties only in the following circumstances:

• KYC and Identity Verification Providers: We engage specialist third-party services to verify identity documents and conduct liveness checks as part of our KYC process. These providers act as Data Processors under documented data processing agreements.
• Payment Processors: Transaction data is shared with payment processing partners to facilitate deposits and withdrawals. These processors handle payment data in accordance with their own PCI-DSS and applicable regulatory obligations.
• Fraud and Risk Management Services: Technical data, IP addresses and transaction patterns may be shared with fraud detection services to identify and prevent abuse of the Platform.
• Responsible Gambling Tools: Where self-exclusion or responsible gambling systems require cross-operator data sharing, we may participate in applicable schemes in the operator license jurisdiction.
• Legal and Regulatory Authorities: We will disclose personal data to law enforcement, regulatory authorities or courts where required to do so by applicable law, court order or in connection with an investigation of suspected illegal activity.
• Corporate Transactions: In the event of a merger, acquisition or business restructuring, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

All third-party Data Processors engaged by six6e are required to process personal data solely on our documented instructions and to implement appropriate technical and organisational security measures.

7 International Data Transfers

As an online platform serving users across multiple countries, six6e may transfer personal data to servers, processors or service providers located in jurisdictions outside the country in which the Data Subject resides. This includes users accessing the Platform from Pakistan, where applicable data may be processed in the jurisdiction in which the Platform's infrastructure or licensed operations are based.

Where personal data is transferred internationally, six6e takes steps to ensure that appropriate safeguards are in place, which may include standard contractual clauses, adequacy decisions, or other mechanisms recognized under applicable data protection law. If you wish to obtain further information about the safeguards applied to international transfers of your data, please contact us using the details in Section 14.

8 Data Retention

six6e retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable legal, regulatory or operator obligations. The following general retention principles apply:

• Active Accounts: Personal data is retained for the duration of the Account relationship and thereafter for the minimum period required by applicable AML and regulatory obligations (typically five to seven years following account closure, as required by standard AML regimes).
• KYC Documents: Identity documents are retained for the period required by the applicable AML framework, typically a minimum of five years following the end of the business relationship.
• Transaction Records: Financial and wagering records are retained as required by applicable AML, tax and operator license obligations.
• Communications: Support correspondence is retained for a period of three years from the date of the last interaction, unless a longer period is required for an unresolved dispute.
• Technical Logs: Server and access logs are retained for up to twelve months for security and fraud prevention purposes and are then deleted or anonymised.
• Marketing Data: Where consent-based marketing data is no longer required (e.g., following withdrawal of consent), it is deleted promptly unless retention is required for a separate legal purpose.

When data is no longer required, it is securely deleted or rendered permanently anonymous in accordance with our data disposal procedures.

9 Cookies & Tracking Technologies

six6e uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. Cookies do not directly identify you as an individual but may be linked to your Account or browser where you are logged in.

9.1 Types of Cookies We Use

• Essential Cookies: Necessary for the Platform to function correctly — including session management, login authentication, security tokens and load balancing. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences, such as language settings, display currency (PKR) and responsible gambling limit settings, to provide a more consistent experience across sessions.
• Analytics Cookies: Collect aggregated and pseudonymised usage data to help us understand how users navigate the Platform and where improvements can be made. We do not use analytics data to profile individual users for commercial targeting.
• Third-Party Advertising Cookies: We do not place third-party advertising cookies on the Platform without your prior knowledge and appropriate consent where required.

9.2 Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling essential cookies may prevent you from logging in or using core Platform features. Browser documentation for managing cookies is available for all major browsers.

10 Your Data Protection Rights

Depending on the applicable data protection laws in your jurisdiction, you may have some or all of the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details in Section 14.

We will respond to data rights requests within a reasonable timeframe — typically within 30 days of receipt, subject to verification of identity. In complex cases, we may extend this period by a further 30 days and will notify you accordingly.

11 Data Security

six6e implements appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include:

• Encryption of personal data in transit using TLS (Transport Layer Security) protocols;
• Encryption of sensitive personal data at rest using industry-standard cryptographic methods;
• Role-based access controls ensuring that personal data is accessible only to staff with a documented business need;
• Regular security assessments and penetration testing of Platform infrastructure;
• Staff training on data protection obligations and security awareness;
• Incident response procedures for identifying, reporting and managing personal data breaches.

While we implement robust security measures, no transmission over the internet or electronic storage system is completely secure. Users are responsible for maintaining the confidentiality of their Account credentials and for notifying us promptly if they suspect unauthorized access to their Account.

12 Minors

six6e is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18, or the higher minimum age required by the operator's license jurisdiction. Age verification is a mandatory step during the Account registration process.

If we become aware that personal data has been collected from a person below the minimum eligible age, we will take prompt steps to delete that data and close the associated Account. If you have reason to believe that a minor has registered an Account on six6e, please contact us immediately via the support channel provided in Section 14.

13 Changes to This Privacy Policy

six6e reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered users via the email address associated with their Account or through a prominent notice on the Platform, prior to the changes taking effect where practicable.

The "Last Updated" date at the top of this Policy reflects the most recent revision date. We encourage you to review this Policy periodically to stay informed about how we protect your personal data. Your continued use of the Platform after any update constitutes acceptance of the revised Policy.

14 Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data protection right, or want to raise a concern about how your personal data is handled, please contact us:

When submitting a data rights request, please provide your registered email address, Account username (if applicable), and a clear description of the request or concern. Identity verification may be required before we action certain requests to ensure we are responding to the correct Data Subject.