This Privacy Policy describes how six6x ("the platform", "we", "us") collects, uses, stores and protects the personal information of players and visitors who use six6x.im. By registering an account or using any part of the six6x platform, you acknowledge that you have read and understood this Privacy Policy. This policy should be read alongside our Terms and Conditions.
Plain language commitment: We've written this policy to be readable, not to bury the important parts in legal language. If something isn't clear, contact us at support@six6x.im and we'll explain it directly.
Introduction
six6x is an online gaming and sports betting platform operating at six6x.im. As part of running the platform, we process personal data about the players who register and use our services. This is unavoidable — you can't run a legitimate gaming platform that processes real PKR transactions without collecting certain identity and payment information.
What we can control — and what this policy describes — is exactly what we collect, why we collect it, how long we keep it, who else can access it, and what security measures protect it. six6x is committed to handling personal data responsibly, collecting only what is genuinely necessary for the platform to operate and comply with its legal and licensing obligations.
This policy applies to all six6x services including sports betting, casino games, live dealer tables, esports betting, the VIP Club and any future services added to the platform. It applies to data collected via the website, mobile browsers and any six6x app.
Data We Collect
six6x collects personal data through different interactions with the platform. Below is a breakdown of the main categories of data we collect and the specific data points within each category.
| Category | Data Collected | When Collected |
|---|---|---|
| Identity | Full name, date of birth, national identity number (where required for KYC) | Registration & verification |
| Contact | Mobile number, email address | Registration |
| Financial | Transaction history (deposits, withdrawals, bets), PKR amounts, payment method type (not credentials) | Every transaction |
| Technical | IP address, device type, browser, operating system, session timestamps | Every platform visit |
| Behavioural | Games played, betting patterns, session duration, feature usage | Active platform use |
| Communications | Support chat transcripts, email correspondence | When you contact support |
| KYC Documents | Government ID images, proof of address documents (where verification requested) | When identity verification is triggered |
Payment credentials: six6x does not store complete payment credentials — your Easypaisa PIN, JazzCash account password or card numbers. Payment transactions are processed directly through the payment provider. We retain only the transaction record (amount, time, method type, outcome) in our system.
Why We Collect Your Data
six6x collects personal data for specific, defined purposes. We do not collect data speculatively or for purposes beyond what is listed below. Each purpose has a legal basis — either contractual necessity (running your account), legal obligation (compliance with licensing and financial regulations) or legitimate interest (fraud prevention and platform security).
- Account creation and management: To create and maintain your six6x account, verify your identity, manage your balance and process your login sessions.
- Transaction processing: To process PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer and card, and to maintain accurate transaction records.
- Identity verification (KYC): To comply with our licensing obligations, which require us to verify player identity before processing withdrawals above certain thresholds and when fraud indicators are present.
- Fraud and abuse prevention: To detect and prevent multi-account abuse, bonus exploitation, money laundering, underage gambling and other prohibited activities. This includes device fingerprinting and IP analysis.
- Responsible gaming: To identify and support players showing signs of problematic gambling behaviour, including monitoring deposit frequency, loss patterns and session duration.
- Customer support: To respond to support queries, resolve disputes and improve support quality through review of interaction records.
- Platform improvement: To understand how the platform is used, identify technical issues and improve game performance and user experience.
- Legal and regulatory compliance: To meet our obligations under applicable licensing, anti-money laundering regulations and any lawful requests from regulatory authorities.
- Marketing communications: To send you relevant promotions and offers — only where you have opted in to receive these. You can opt out at any time from your account settings or by contacting support.
Storage and Security
six6x uses industry-standard technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration or destruction. Security is not an afterthought — it is built into how we handle data from the moment it is collected.
- Encryption in transit: All data transmitted between your device and six6x servers is encrypted using TLS (Transport Layer Security). The six6x.im website operates exclusively over HTTPS.
- Encryption at rest: Sensitive personal data stored in six6x databases is encrypted at rest using AES-256 or equivalent standard encryption.
- Access controls: Personal data is accessible only to six6x staff and contractors who need it for legitimate operational purposes. Access is role-restricted and logged.
- No full payment credential storage: As noted above, complete payment credentials (PINs, card numbers) are not stored on six6x servers. Payment processing happens through the provider's own secured infrastructure.
- Regular security reviews: six6x conducts periodic reviews of security practices and infrastructure to identify and address potential vulnerabilities.
- Incident response: In the event of a data breach that affects player personal data, six6x will assess the breach, take immediate containment steps and notify affected players and relevant authorities within required timeframes.
Data Retention
six6x retains personal data for as long as is necessary for the purpose it was collected and to meet our legal and regulatory obligations. The retention periods below reflect our standard practice, though specific regulatory requirements may necessitate longer retention in certain circumstances.
| Data Type | Retention Period | Reason |
|---|---|---|
| Account information | Duration of account + 5 years post-closure | Regulatory and licensing obligations |
| Transaction records | 7 years from transaction date | Financial regulatory requirements |
| KYC / identity documents | 5 years post-account closure | Anti-money laundering compliance |
| Support correspondence | 3 years from last interaction | Quality assurance and dispute resolution |
| Technical / session logs | 12 months | Fraud detection and platform security |
| Marketing preferences | Until opt-out or account closure | Consent-based communications |
After the applicable retention period, personal data is securely deleted or anonymised. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and platform improvement purposes.
Cookies and Tracking Technologies
six6x uses cookies — small files stored on your device — and similar tracking technologies to make the platform function correctly, remember your session, and understand how the platform is being used. We do not use cookies to track you across unrelated third-party websites.
You can manage cookie preferences through your browser settings at any time. Disabling essential cookies will affect platform functionality, including your ability to stay logged in.
Your Rights Over Your Data
You have rights over your personal data held by six6x. These are not theoretical — they are practical rights that six6x is committed to honouring. Requests can be submitted to support@six6x.im with the subject line "Data Rights Request".
Right to Access
Request a copy of the personal data six6x holds about you. We will respond within 30 days with a structured summary of your data.
Right to Rectification
If personal data we hold is incorrect or out of date, you have the right to request that we correct it. Contact support with the specific correction needed.
Right to Erasure
Request deletion of your personal data. Note that data subject to mandatory regulatory retention periods cannot be deleted before those periods expire.
Right to Restrict Processing
Request that six6x limits how your data is processed in certain circumstances — for example while a data accuracy dispute is being resolved.
Right to Data Portability
Request your personal data in a structured, machine-readable format. Applicable to data you directly provided to six6x where processing was consent-based.
Right to Withdraw Consent
Where processing is based on your consent (e.g. marketing emails), you may withdraw consent at any time. Withdrawal does not affect processing already completed.
To exercise any of these rights, contact support@six6x.im with "Data Rights Request" in the subject. We will confirm receipt within 2 business days and respond substantively within 30 calendar days. Verification of your identity may be required before processing sensitive data requests.
Children's Privacy
six6x is strictly an adult platform. The minimum age to register and use six6x is 18 years. We do not knowingly collect personal data from anyone under 18. If we become aware that personal data has been collected from a person under 18, the account will be immediately closed, all data will be deleted as quickly as our compliance obligations permit, and any deposits will be returned to the originating payment method.
Parents and guardians who believe their child may have registered on six6x should contact support@six6x.im immediately. We will investigate and take action as a priority.
If you are under 18, do not register on six6x. Parental control software can be configured to block access to gambling sites on shared devices.
International Data Transfers
six6x operates as an international platform and some of the third parties we work with — particularly cloud infrastructure providers, game software providers and fraud detection services — may process data in countries outside Pakistan. Where data is transferred internationally, six6x ensures that appropriate safeguards are in place.
- We use service providers who maintain equivalent data protection standards and are bound by contractual data protection clauses.
- Personal data transferred to third-party service providers is limited to the minimum necessary for the specific service being provided.
- KYC and identity verification documents are handled by providers with documented security certifications and regulatory compliance histories.
- six6x will not transfer personal data to any country or organisation that we have reason to believe cannot provide adequate protection for that data.
Changes to This Privacy Policy
six6x may update this Privacy Policy from time to time to reflect changes in the platform, applicable law or our data practices. When we make changes, we will update the "Last updated" date at the top of this page. For material changes — such as new categories of data being collected or significant changes to how data is shared — we will notify registered players by email or by an on-platform notification.
- Continued use of six6x after a policy update constitutes acceptance of the updated policy.
- If you disagree with any changes, you should stop using the platform and contact support to close your account.
- The current version of this policy is always available at six6x.im/privacy-policy.
- Previous versions of this policy can be requested from support@six6x.im.
Contact Us
For any questions, concerns or requests relating to this Privacy Policy or the personal data six6x holds about you, please contact us directly. The support team is available 24/7 and privacy-related queries are treated as a priority.