s6six Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how s6six ("s6six", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "Player", "User") who access or use the s6six online gaming platform available at https://s6six.biz and all associated mobile interfaces and sub-domains (collectively, the "Platform").

s6six is committed to handling your personal data responsibly and transparently. We operate in accordance with applicable international data protection principles, and we implement robust technical and organisational measures to safeguard the information you entrust to us.

By registering an account, accessing the Platform, or using any s6six service, you acknowledge that you have read and understood this Policy. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference.

2 Data Controller

s6six acts as the data controller in respect of the personal data collected through and in connection with the Platform. As data controller, s6six determines the purposes and means by which your personal data is processed.

If you have any questions, concerns, or requests relating to this Policy or the processing of your personal data, you may contact our Data Protection team directly. Contact details are provided in Section 14 of this Policy.

3 Data We Collect

s6six collects personal data in several categories depending on your interaction with the Platform. The following table summarises the types of data we may collect and hold:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification purposes (e.g., CNIC photograph).

4 How We Collect Data

4.1 Directly from You

The majority of the personal data we hold is provided directly by you when you register an account on s6six, complete identity verification, make a deposit or withdrawal, contact our support team, respond to a survey, or participate in a promotion. You are in control of the information you provide at these touchpoints.

4.2 Automatically via the Platform

When you access and use the s6six Platform, we automatically collect certain technical and usage data through cookies, web beacons, server logs, and similar technologies. This data helps us maintain platform security, understand how players use s6six, and improve the overall experience. Please refer to Section 9 for full details on our cookie practices.

4.3 From Third Parties

In limited circumstances, s6six may receive personal data about you from third parties, including:

• Payment processors (e.g., JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) confirming transaction status and account ownership;
• Identity verification and KYC service providers who validate your CNIC or passport details;
• Fraud prevention and AML screening databases;
• Affiliate partners who referred you to s6six, limited to referral source data only.

5 Purpose & Legal Basis for Processing

s6six processes your personal data only where we have a lawful basis for doing so. The primary legal bases on which we rely are:

5.1 Contract Performance

Processing your data is necessary to fulfil our contractual obligations to you under the s6six Terms & Conditions. This includes creating and managing your account, processing PKR deposits and withdrawals, settling wagers, and providing customer support.

5.2 Legal Obligation

s6six is required to process certain personal data to comply with applicable legal and regulatory obligations. This includes Know Your Customer (KYC) identity verification, Anti-Money Laundering (AML) screening, age verification (confirming players are 21 or older), and record-keeping requirements imposed by our gaming licence conditions.

5.3 Legitimate Interests

We process certain data on the basis of our legitimate business interests, provided that those interests are not overridden by your data protection rights. This includes fraud detection and prevention, platform security monitoring, responsible gaming compliance, and analytics to improve our services.

5.4 Consent

Where we process data for marketing communications or non-essential cookies, we rely on your explicit consent. You may withdraw consent at any time by updating your communication preferences in your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Data

s6six does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We may share your data with trusted third parties only in the following circumstances:

6.1 Service Providers

We engage vetted third-party service providers who process data on our behalf under strict data processing agreements. These include payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, cryptocurrency wallet providers), KYC and identity verification platforms, IT infrastructure and hosting providers, customer support software providers, and analytics platforms. All service providers are contractually prohibited from using your data for any purpose beyond the specific service they provide to s6six.

6.2 Legal and Regulatory Disclosure

s6six may disclose personal data to law enforcement agencies, regulatory bodies, gaming authorities, financial intelligence units, or other government bodies where required by applicable law, court order, or regulatory demand. We will notify you of such disclosures where we are legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of s6six's business assets, your personal data may be transferred as part of that transaction. We will provide reasonable notice to affected players before any such transfer takes place and will ensure that the receiving entity is bound by privacy obligations no less protective than those in this Policy.

7 Data Retention

s6six retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account relationship with s6six and for a period thereafter as required by our gaming licence conditions and AML obligations;
• Transaction Records: Financial transaction data is retained for a minimum of five (5) years following the date of the transaction in compliance with AML and financial record-keeping requirements;
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following account closure or the last transaction, whichever is later;
• Support Communications: Customer support records are retained for three (3) years following resolution of the relevant enquiry;
• Marketing Data: Retained until you withdraw consent or opt out, after which it is deleted or anonymised within thirty (30) days.

Upon expiry of the applicable retention period, data is securely deleted or anonymised such that it can no longer be linked to any individual player.

8 Security Measures

s6six implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the s6six Platform;
• Encryption at rest for stored financial and identity data using AES-256 standard;
• Multi-factor authentication options for player accounts;
• Role-based access controls ensuring that only authorised personnel can access personal data on a need-to-know basis;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Continuous intrusion detection and monitoring of our systems;
• Strict data processor agreements with all third-party service providers.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, s6six will notify affected players without undue delay and in accordance with our legal obligations.

9 Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember your actions and preferences over a period of time. s6six uses cookies and similar tracking technologies (including web beacons and local storage) to operate the Platform and improve your experience.

9.2 Types of Cookies We Use

• Essential Cookies: Strictly necessary for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing Platform functionality;
• Analytics Cookies: Help us understand how players interact with the Platform (e.g., which games are most popular, where players spend most time). Data collected is aggregated and anonymised;
• Preference Cookies: Remember your settings and preferences (e.g., language, display settings) to personalise your experience;
• Marketing Cookies: Used only with your explicit consent to track the effectiveness of promotional campaigns. You can opt out at any time.

9.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling essential cookies may prevent you from logging into and using the s6six Platform. For detailed guidance on managing cookies, consult your browser's help documentation.

10 Your Data Rights

Subject to applicable law and our legitimate interests, you have the following rights in relation to your personal data held by s6six:

• Right of Access: You may request a copy of the personal data we hold about you at any time. We will provide this within thirty (30) days of a valid request;
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct or update it;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances, for example while a correction request is being reviewed;
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format for transfer to another service provider;
• Right to Object: You may object to processing based on legitimate interests, including direct marketing, at any time;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting prior lawful processing.

To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within five (5) business days and resolve it within thirty (30) days, extendable by a further thirty (30) days where the request is complex.

11 Minors

The s6six Platform is strictly intended for individuals aged 21 years or older. We do not knowingly collect personal data from anyone under the age of 21. If you are a parent or guardian and believe that your child has registered an account or provided personal data to s6six, please contact us immediately at [email protected]. We will investigate and, where confirmed, promptly delete the relevant data and close the account.

12 International Data Transfers

As an internationally licensed gaming operator, s6six may transfer personal data to countries outside of Pakistan in the course of operating the Platform and engaging third-party service providers. Where such transfers occur, s6six takes appropriate safeguards to ensure that your personal data remains protected to a standard equivalent to that described in this Policy. These safeguards may include:

• Data processing agreements incorporating standard contractual clauses;
• Ensuring that recipient countries or organisations maintain equivalent data protection standards;
• Technical encryption measures ensuring data cannot be read in transit.

By using the s6six Platform, you acknowledge that your data may be processed in jurisdictions outside Pakistan. If you have concerns about international data transfers, please contact our Data Protection team.

13 Changes to This Policy

s6six reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect your rights or how we use your personal data — we will notify you by email to your registered address at least fourteen (14) days before the changes take effect.

For minor or non-material changes, we will update the "Effective Date" at the top of this Policy and post the revised version on the Platform. Your continued use of the s6six Platform following the effective date of any amendment constitutes your acceptance of the updated Policy. We encourage you to review this page periodically to stay informed of how we protect your data.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way s6six handles your personal data, please reach out to our dedicated Data Protection team using the details below:

For responsible gaming concerns or self-exclusion requests, please visit our Responsible Gaming page or contact support directly. All player welfare matters are handled with priority.

For full details of the rules governing your use of s6six, please also review our Terms & Conditions.