Privacy Policy

This Privacy Policy ("Policy") describes how 6xsix ("6xsix", "we", "us", "our"), the operator of the online gambling and sports betting platform at https://6xsix.cam ("Platform"), collects, uses, discloses and safeguards the personal data of its users ("you", "your", "User") in connection with the Services.

This Policy forms part of the wider agreement between you and 6xsix, alongside our Terms & Conditions and Responsible Gambling Policy. Accepting the Terms & Conditions constitutes acceptance of this Policy.

6xsix is committed to transparent, lawful and responsible data practices. We do not use your data in ways that are not described in this Policy, and we do not sell your personal information to any third party for commercial purposes.

The following definitions apply throughout this Policy:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living natural person, either alone or in combination with other information.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure or destruction.
• "Data Controller" means 6xsix as the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of 6xsix in accordance with documented instructions.
• "Consent" means a freely given, specific, informed and unambiguous indication of your agreement to the processing of your Personal Data for a specified purpose.
• "KYC" means Know Your Customer — the identity and document verification process required by applicable regulations and operator policy.
• "Sensitive Data" means categories of Personal Data that attract heightened protections under applicable data-protection law, including financial information and data revealing racial or ethnic origin.

6xsix collects Personal Data from multiple sources. The categories of data we collect are set out in the table below:

6xsix processes your Personal Data only where a lawful basis exists. The applicable bases are:

6xsix uses your Personal Data for the following specific purposes:

• Account management: Creating, verifying and maintaining your account on the Platform, including processing password resets and account settings changes;
• KYC and identity verification: Complying with applicable Know Your Customer and anti-money laundering requirements before releasing withdrawals or at operator-determined risk thresholds;
• Transaction processing: Facilitating deposits and withdrawals through available payment channels, reconciling accounts and resolving payment disputes;
• Betting and gaming services: Recording, settling and displaying your wager history; delivering live odds and game content; operating real-time in-play markets on cricket (PSL, ICC), football, UFC and other sports;
• Responsible gambling monitoring: Identifying account activity patterns that may be indicative of problem gambling and applying protective measures including limit prompts or operator-initiated restrictions;
• Fraud and security: Detecting and preventing fraudulent activity, unauthorised access, money laundering, match-fixing and other prohibited conduct;
• Customer support: Responding to enquiries, resolving complaints and managing the formal complaints process;
• Platform improvement: Analysing aggregated usage data to improve the performance, design and content of the Platform;
• Marketing (consent-based): Where you have opted in, sending promotional emails, SMS notifications or on-platform messages about relevant offers, bonuses and promotions from 6xsix.

6xsix does not sell your Personal Data. We share Personal Data only in the circumstances described below:

6xsix retains Personal Data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and transaction data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering and regulatory obligations;
• KYC verification documents: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later;
• Communications and support records: Retained for a minimum of three (3) years from the date of the last communication;
• Marketing preference data: Retained until you withdraw consent or close your account, whichever is earlier;
• Technical and log data: Typically retained for up to twelve (12) months unless a longer retention period is required for security or legal purposes.

Where data is no longer required and no legal retention obligation applies, it is securely deleted or irreversibly anonymised.

Subject to applicable law and our legal obligations, you have the following rights in relation to your Personal Data held by 6xsix:

To exercise any of the above rights, contact us at [email protected] (plain text — not a link) with the subject line "Data Rights Request". We will respond within 30 days, or notify you if additional time is required under applicable law. We may request proof of identity before processing a rights request.

6xsix uses cookies and similar tracking technologies (such as pixel tags and local storage objects) to operate the Platform and improve your experience. The categories of cookies we use are:

You can manage cookies through your browser settings. Please note that disabling essential cookies will affect the functionality of the Platform. For detailed instructions, refer to your browser's help documentation.

6xsix implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, alteration, disclosure or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption at rest for sensitive stored data, including KYC documents;
• Access controls ensuring that employee access to Personal Data is restricted to those with a legitimate operational need;
• Regular internal security reviews and vulnerability assessments;
• Two-factor authentication available to all registered users for account login protection;
• Incident response procedures for identifying, containing and notifying affected parties of data security incidents.

No system can guarantee absolute security. If you suspect that your account has been compromised, please contact our support team immediately at [email protected]. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, 6xsix will notify you without undue delay.

6xsix operates internationally and may transfer your Personal Data to service providers or infrastructure located in countries outside Pakistan. Where such transfers occur, 6xsix ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to the protections described in this Policy.

Safeguards for international transfers may include contractual data-protection clauses with Data Processors, reliance on adequacy determinations, or other lawful transfer mechanisms recognised under applicable data-protection law. You may request details of the safeguards applicable to transfers of your data by contacting [email protected].

If we become aware that Personal Data has been collected from a person under the applicable minimum age, we will take prompt steps to delete that data and close the associated account. If you have reason to believe that a minor has registered on the Platform, please notify us at [email protected] immediately.

We employ age-verification measures as part of the KYC process. Users who fail age verification will have their accounts suspended pending resolution or permanently closed where the minimum age requirement cannot be confirmed.

6xsix sends marketing communications — such as promotional emails, SMS notifications and on-platform messages about bonuses, free bets and platform updates — only where you have given your explicit consent to receive them at the time of registration or subsequently via your account settings.

You may withdraw consent for marketing communications at any time by:

• Using the unsubscribe link in any marketing email;
• Updating your communication preferences in the notification settings section of your account;
• Contacting our support team directly at [email protected] with the subject "Marketing Opt-Out".

Withdrawal of marketing consent will not affect the lawfulness of prior communications sent while consent was in place, nor will it affect our ability to send you service communications that are necessary for account management (e.g., transaction confirmations, KYC requests, security alerts or policy update notifications).

Pakistan does not currently have a comprehensive standalone data-protection law equivalent to the GDPR. The Prevention of Electronic Crimes Act 2016 (PECA) and the Personal Data Protection Bill (at various stages of legislative progress at the time of this Policy's publication) are relevant frameworks. 6xsix applies data-protection principles consistent with internationally recognised standards regardless of jurisdiction.

6xsix is not regulated, licensed, endorsed or approved by the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan or any provincial authority. References to familiar payment providers such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah in this Policy or on the Platform are for contextual familiarity only and do not imply those providers endorse or support online gambling.

Users in Pakistan access the Platform at their own risk and are solely responsible for understanding and complying with applicable local law. This Policy does not constitute legal advice, and users should seek independent counsel where required.

6xsix reserves the right to amend this Privacy Policy at any time. Where amendments are material — meaning they substantively change how we collect, use or share your Personal Data — we will notify registered users via email or an on-platform notification at least 7 days before the changes take effect, where operationally practicable.

The "Last Updated" date at the top of this page reflects the most recent revision. Non-material amendments (such as typographical corrections or clarifications that do not change our data-processing practices) may be made without advance notice. Your continued use of the Platform after any amendment takes effect constitutes your acceptance of the updated Policy.

If you have any questions about this Privacy Policy, wish to exercise a data-subject right, or have a complaint about how your Personal Data has been handled, please contact the 6xsix support team:

When submitting a data-rights request, please include your full name, registered email address and a clear description of your request. We may require proof of identity before processing your request to ensure we respond only to the data subject or an authorised representative.

If you are unsatisfied with our response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. For Pakistani users, this may include the Federal Investigation Agency (FIA) Cybercrime Wing for data-related offences under PECA 2016, subject to the specific circumstances of the complaint.