six6r Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") sets out how six6r ("the Company", "we", "us", "our") collects, processes, stores, shares, and protects personal data submitted by users ("you", "Player") of the six6r website at six6r.app and any associated services (collectively the "Platform").

By registering an account on six6r, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Policy. This Policy forms part of the overall agreement between you and six6r and should be read alongside the Terms & Conditions.

six6r is committed to handling personal data responsibly and in accordance with applicable data protection principles. Where we act as the data controller, we determine the purposes and means of processing your personal data. Where we engage third-party processors (for example, payment gateway providers), those processors act under our instructions and are bound by data processing agreements.

2. Data We Collect

We collect personal data through several channels: information you provide directly during registration and account use, data generated automatically through your use of the Platform, and data received from third-party providers.

We do not collect unnecessary data. Fields marked optional during registration are genuinely optional and their absence will not affect your ability to use core Platform features.

3. How We Use Your Data

six6r uses your personal data strictly for the following purposes:

• Account management: Creating, maintaining, and securing your six6r account, processing your login requests, and enabling password recovery via OTP sent to your registered Pakistani mobile number.
• Transaction processing: Executing PKR deposits via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT; processing withdrawal requests; and maintaining an accurate transaction ledger within your account.
• Identity verification and fraud prevention: Conducting KYC checks required under anti-money-laundering obligations, verifying age eligibility (18+), and detecting and preventing fraudulent or suspicious activity.
• Legal compliance: Meeting obligations under applicable financial regulations, responding to lawful requests from regulatory authorities, and maintaining records as required by law.
• Responsible gaming: Monitoring account activity to identify indicators of problem gambling, implementing deposit limits and self-exclusion settings you have activated, and communicating with you regarding responsible gaming tools.
• Platform improvement: Analysing aggregated, anonymised gameplay and technical data to improve Platform performance, identify bugs, and develop new features.
• Marketing communications: Sending promotional offers, bonus notifications, and PSL or seasonal betting updates — only if you have provided separate, explicit opt-in consent. You may withdraw consent at any time from your account settings.

4. Legal Basis for Processing

six6r processes your personal data under the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and six6r — including account creation, financial transactions, and game delivery.
• Legal obligation: Processing required to comply with applicable laws — including KYC/AML verification, age checks, and responses to lawful authority requests.
• Legitimate interest: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics — where such interests are not overridden by your rights.
• Consent: Processing for optional marketing communications, which requires your affirmative opt-in and may be withdrawn at any time without affecting any other aspect of your account.

5. Payment & KYC Data

Financial and identity data receives heightened protection at six6r given its sensitivity.

JazzCash and Easypaisa: When you make a deposit or withdrawal via a Pakistani mobile wallet, the transaction is processed through the official payment gateway API of the respective provider. six6r receives a transaction reference and confirmation status — we do not store your full JazzCash or Easypaisa PIN, mobile banking credentials, or any equivalent authentication secret.

Bank transfers: Account details provided for withdrawal processing (HBL, UBL, Meezan Bank, Bank Alfalah) are encrypted at rest and in transit. These details are used solely for the specific withdrawal transaction they are provided for and are not retained beyond the statutory minimum required for financial record-keeping.

CNIC and KYC documents: Identity documents submitted during verification are stored in encrypted form with strict access controls. KYC documents are accessible only to authorised six6r compliance personnel and are never shared with marketing or commercial teams. Documents are retained for the period required under applicable anti-money-laundering regulations.

6. Cookies & Tracking Technologies

six6r uses cookies and similar technologies to operate the Platform effectively. The following categories of cookies are used:

• Strictly necessary cookies: Required for login session management, security token handling, and core Platform functionality. These cannot be disabled without breaking the Platform.
• Functional cookies: Used to remember your preferences (e.g., language setting, last visited game lobby). These improve your experience but are not essential.
• Analytics cookies: Aggregated, anonymised data about how users navigate the Platform — used to identify performance issues and prioritise feature improvements. No personally identifiable data is exported to analytics systems.
• Marketing cookies: Used only if you have consented to receive personalised promotional content. You may withdraw consent via your account settings at any time.

You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies may prevent you from logging in or using certain Platform features.

7. Data Sharing

six6r does not sell, rent, or trade your personal data to third parties. Data is shared only in the following limited circumstances:

• Payment processors: Transaction data is shared with JazzCash, Easypaisa, and bank payment gateways solely to execute financial transactions you have initiated.
• KYC verification providers: Identity documents may be processed by accredited third-party verification services that assist with CNIC authentication and liveness checking. These providers are contractually bound to process data only for the purposes specified by six6r.
• Regulatory and legal authorities: Where required by law, court order, or regulatory instruction, six6r may disclose account data to competent authorities. We will not disclose more data than legally required and will notify you of such disclosure where legally permitted to do so.
• Anti-fraud networks: In cases of suspected fraud or money laundering, relevant transaction data may be shared with fraud prevention networks in which six6r participates.

All third-party processors engaged by six6r are required to maintain equivalent data protection standards and are prohibited from using your data for any purpose beyond the specific service they provide to six6r.

8. Data Retention

six6r retains personal data for the minimum period necessary to fulfil the purposes outlined in this Policy, subject to any longer retention required by law:

• Active account data: Retained for the lifetime of your six6r account.
• Financial transaction records: Retained for a minimum of five (5) years following the transaction date, in accordance with anti-money-laundering record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years following account closure or the last transaction, whichever is later.
• Communication data (support tickets): Retained for two (2) years from the date of resolution unless a longer period is required for legal dispute purposes.
• Marketing consent records: Retained for as long as you remain opted-in, plus one (1) year following withdrawal of consent as evidence of the prior consent status.

Upon expiry of the applicable retention period, data is securely deleted or anonymised so that it can no longer be attributed to any individual.

9. Your Rights

Subject to applicable law, you have the following rights regarding your personal data held by six6r:

• Right of access: You may request a copy of the personal data six6r holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain records.
• Right to restrict processing: You may request that we limit how we use your personal data in certain circumstances.
• Right to object: You may object to processing based on legitimate interest. We will assess whether our interests override your rights in each case.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact six6r at [email protected]. We will respond within 30 days. We may need to verify your identity before processing any rights request.

10. Data Security

six6r implements technical and organisational security measures proportionate to the sensitivity of the data held:

• All data in transit is protected by 256-bit SSL/TLS encryption.
• Personal data at rest is encrypted using industry-standard symmetric encryption.
• Access to production databases containing personal data is restricted to authorised personnel on a need-to-know basis, protected by multi-factor authentication.
• Security incident response procedures are in place. In the event of a data breach affecting your personal data in a manner likely to cause you harm, six6r will notify you without undue delay.

No security system is impenetrable. Players are responsible for maintaining the security of their own account credentials and must not share passwords or OTP codes with any third party.

11. Children's Privacy

six6r is strictly an adult platform. The collection of personal data from persons under 18 years of age is expressly prohibited. If six6r becomes aware that personal data of a minor has been collected, that data will be deleted immediately and the associated account closed.

Parents and guardians who suspect that a minor has accessed six6r should contact [email protected] immediately so that appropriate action can be taken without delay.

12. Policy Changes

six6r may update this Privacy Policy periodically to reflect changes in data processing practices, legal requirements, or Platform features. When material changes are made, we will notify registered Players via in-account notification or via the registered mobile number or email address on file.

The "Last updated" date at the top of this page indicates when the Policy was most recently revised. Your continued use of the Platform after notification of changes constitutes acceptance of the revised Policy.

13. Contact

For all privacy-related queries, data access requests, or concerns regarding how six6r handles your personal data, please contact the six6r Data team at the address below. All communications are handled in English, 24/7, with priority handling for players from Karachi, Lahore, Islamabad, Rawalpindi, and Faisalabad.

Email: [email protected] (plain text — not a clickable link)