Privacy Policy – six6e Pakistan Data Protection & Security

This Privacy Policy applies to all users of the six6e platform, accessible at https://six6e.ws, including anyone who visits the site, creates an account, deposits funds, places bets, or plays any casino or gaming product on six6e. It describes how six6e collects, uses, stores and protects the personal information you provide to us, and what rights you have in relation to that information.

Privacy at six6e is not an afterthought. Given the nature of online gaming and financial transactions, the data we handle is sensitive and we treat it accordingly. This policy is written to be understood clearly by Pakistani users without a legal background. If any section is unclear, please contact our support team before registering and we will explain it in plain terms.

This Privacy Policy should be read alongside the six6e Terms and Conditions and Responsible Gaming page. Together, these documents govern your relationship with six6e. By registering and using six6e, you confirm that you have read and understood this Privacy Policy and consent to data handling as described.

six6e may update this Privacy Policy from time to time. Updated versions will be posted at https://six6e.ws/privacy-policy with a revised "Last Updated" date. Material changes will be communicated to registered account holders via email or platform notification before taking effect.

1What Information six6e Collects

six6e collects information in several ways: information you provide directly when registering or using the platform, information generated automatically by your use of the platform, and in limited cases, information from third parties involved in processing your payments or verifying your identity. Here is a breakdown of each category.

Information You Provide Directly

• Registration details: Your name, date of birth, email address and mobile number when you create a six6e account. These are required to create and operate your account.
• Identity verification documents: Government-issued ID (such as a CNIC or passport) when six6e requests identity verification for age confirmation or anti-money-laundering compliance. These are stored securely and handled with extra care.
• Payment information: Payment method details used when depositing or withdrawing funds — for example your Easypaisa or JazzCash mobile number, bank account details for IBFT, or masked card details for Visa/Mastercard. Full payment credentials are processed by PCI-compliant third-party providers and are not stored on six6e's own servers.
• Communications: Messages you send to six6e via support chat, email or any other communication channel. These are retained for quality assurance and to maintain a record of any commitments made to you.
• Responsible gaming preferences: Any deposit limits, session limits, self-exclusion requests or other responsible gaming settings you configure in your account. These are treated as sensitive data and handled with additional care.

Information Collected Automatically

• Device and browser data: Your device type, operating system, browser version and screen resolution. Used to optimise the six6e platform for the devices our Pakistani users actually have.
• IP address and approximate location: Your IP address is logged when you access six6e. We use this to detect potentially fraudulent access patterns and for compliance purposes. six6e does not track your GPS location.
• Session and usage data: Pages visited, time spent, games played, bets placed, features used and navigation paths within the six6e platform. This data helps us understand how the platform is being used and improve the user experience.
• Cookies and similar tracking: See Section 8 for full details on how six6e uses cookies.

Information from Third Parties

• Payment providers: When you make a deposit or withdrawal, our payment partners (Easypaisa, JazzCash, NayaPay, SadaPay, banks, Visa/Mastercard networks) confirm transaction status to six6e. We receive confirmation and reference data but not full credential details.
• Identity verification services: In some cases, six6e uses third-party identity verification providers to check the authenticity of identity documents submitted during verification. These providers operate under their own privacy policies and are bound by contractual data protection obligations when working with six6e.
• Fraud detection services: six6e uses third-party fraud detection tools that may process device fingerprinting or behavioural signals to identify potentially fraudulent account activity. No individually identifiable data is shared with these providers beyond what is operationally necessary.

2How six6e Uses Your Information

six6e uses the information it collects for specific, legitimate purposes. We do not use your data for anything beyond what is described here, and we do not sell your personal information to any third party under any circumstances.

You can withdraw consent for promotional communications at any time by updating your preferences in your six6e account settings or contacting support@six6e.ws.

3Who We Share Your Information With

six6e does not sell, rent or trade your personal information to third parties. Period. The only situations in which six6e shares your information with outside parties are those listed below, all of which are operationally necessary or legally required.

• Payment service providers: Easypaisa, JazzCash, NayaPay, SadaPay, banking partners and card networks receive only the information necessary to process your specific transaction. They are not given access to your full account profile, betting history or any information beyond what the transaction requires.
• Identity and KYC verification providers: Where six6e uses third-party identity verification services, your identity documents are shared with those providers solely for the purpose of verification. These providers are bound by data processing agreements and are not permitted to use your data for any purpose other than the verification service.
• Fraud and risk management providers: Six6e works with fraud detection partners who process device and behavioural signals to identify suspicious activity. Data shared is minimised to what is operationally necessary for this purpose.
• Regulatory and law enforcement authorities: six6e is required by law to provide information to competent authorities in certain circumstances — for example, suspected money laundering, fraud investigations, or regulatory audits. six6e will comply with valid legal requests and will notify affected users where legally permitted to do so.
• Gaming platform and software providers: Live casino and game providers who supply software and dealer services to six6e may receive certain session data necessary to operate those games. These providers operate under contractual data protection obligations.
• Professional advisers: six6e may share information with legal counsel, auditors or compliance advisers when necessary for business operations. Such sharing is subject to professional confidentiality obligations.

4How six6e Protects Your Data

six6e applies multiple layers of technical and operational security to protect the data of all Pakistani users registered on the platform. The following measures are in place at all times.

• SSL/TLS encryption in transit: All data transmitted between your browser or device and the six6e platform is encrypted using 256-bit TLS. This applies to every page, login, bet placement, deposit and withdrawal on six6e — not just the login page.
• PCI-DSS compliant payment processing: Payment credentials — card numbers, bank account details, mobile wallet details — are processed exclusively through PCI-DSS certified third-party payment gateways. six6e's own servers never receive or store raw payment credentials.
• Encrypted data storage: Sensitive personal data stored on six6e's servers — including identity documents and verification data — is encrypted at rest using industry-standard encryption.
• Role-based internal access: Access to personal data within six6e is restricted on a need-to-know basis. Staff members only have access to the categories of data necessary for their specific role. Access permissions are reviewed periodically and revoked when no longer required.
• Intrusion detection and monitoring: six6e's infrastructure is monitored continuously for suspicious activity, unauthorised access attempts and anomalous data patterns. Security events trigger alerts and rapid response procedures.
• Regular security assessments: six6e conducts periodic security assessments of its platform and infrastructure, including vulnerability scanning and penetration testing by qualified security professionals.
• Incident response plan: six6e maintains a documented data breach response procedure. In the event of a breach that poses risk to user data, affected users will be notified within the timeframe required by applicable law.

5How Long We Keep Your Data

six6e retains your personal data only for as long as it is necessary for the purposes it was collected, or as required by applicable law. The following retention periods apply as general principles — specific categories of data may be subject to different legal requirements.

• Active account data: While your six6e account remains active, all associated personal data is retained to operate your account and provide the services you have requested.
• Transaction and betting records: Financial transaction data and betting records are retained for a minimum of 5 years following the relevant transaction. This is required for anti-money-laundering compliance, financial auditing and dispute resolution purposes.
• Identity verification documents: Documents submitted for KYC and age verification are retained for the duration of the account relationship and for a period after account closure as required by applicable regulatory obligations (typically 5 years).
• Support communications: Records of support interactions are retained for 3 years from the date of the last communication to allow reference in case of follow-up disputes or quality assurance reviews.
• Closed account data: When an account is closed, most personal data is anonymised or deleted within a reasonable timeframe, with the exception of data that must be retained for legal, compliance or dispute resolution purposes as described above.
• Marketing data: If you have opted in to marketing communications, your preferences and communication history are retained until you withdraw consent. Withdrawal of consent does not affect historical records already in place.

6Your Privacy Rights

As a six6e user, you have specific rights regarding your personal data. These rights can be exercised by contacting six6e at support@six6e.ws. We will respond to valid data rights requests within 30 days.

To exercise any of these rights, contact six6e at support@six6e.ws with the subject line "Data Rights Request" and a description of your request. We will verify your identity before processing any data rights request and will respond within 30 days. If we are unable to fulfil a request, we will explain why clearly.

7Cookies and Tracking Technologies

six6e uses cookies and similar technologies on its platform. A cookie is a small text file stored on your device by your browser when you visit a website. six6e uses cookies for the following purposes.

• Essential cookies: Required for the platform to function correctly. These include session management cookies that keep you logged in, and security cookies that help protect against cross-site request forgery. These cannot be disabled without affecting platform functionality.
• Performance and analytics cookies: six6e uses analytics tools to understand how users navigate the platform — which pages are visited, how long sessions last, and where users encounter difficulties. This data is used in aggregated, anonymised form to improve the platform experience. It is not linked to individually identifiable records.
• Functional cookies: Cookies that remember your preferences — such as your preferred odds format, language settings or responsible gaming display preferences. These improve the consistency of your experience across sessions on six6e.
• No third-party advertising cookies: six6e does not use third-party advertising or tracking cookies. We do not allow ad networks to set cookies through the six6e platform or track your activity across other websites for advertising retargeting purposes.

8Children and Underage Users

six6e is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not register or use six6e in any capacity.

• All registration attempts include a date-of-birth entry that is cross-checked. Anyone entering a date of birth indicating they are under 18 cannot complete registration.
• If six6e becomes aware — through any means — that a user is under 18, the account will be immediately suspended, any balance will be returned to the originating payment method, and the account will be permanently closed.
• If you believe a person under 18 may have registered a six6e account, please contact support@six6e.ws immediately so the account can be investigated and actioned without delay.
• Parents and guardians should use parental control software to restrict access to online gambling platforms if there is any risk of underage access on shared devices.

9Changes to This Privacy Policy

six6e reserves the right to update this Privacy Policy at any time. When changes are made, the updated policy will be posted at https://six6e.ws/privacy-policy with a revised "Last Updated" date at the top of the document.

• For minor changes — such as clarifications of existing practices, corrections of typographical errors, or updates to contact details — the updated policy will be posted without individual notification.
• For material changes — changes that affect how we use your data in ways that are meaningfully different from what was previously described — six6e will notify registered account holders via email or in-platform notification at least 14 days before the new terms take effect.
• If you continue to use six6e after a Privacy Policy update has been posted, you are deemed to have accepted the updated policy. If you do not agree with the changes, you should close your account before the effective date of the new policy and contact support to request any data deletion you are entitled to.

10Contacting six6e About Privacy

If you have any questions, concerns or complaints about how six6e handles your personal data — or if you wish to exercise any of your data rights described in Section 6 — please contact us using the details below. We take privacy concerns seriously and will respond to all enquiries within the timeframes stated.