1. Who We Are
six6 ("six6", "we", "us", "our") is an online gaming platform operating at six6.world, designed and built exclusively for players in Pakistan. The six6 platform provides sports betting, cricket betting, card games including Poker and Teen Patti, casino-style games including the Aviator game and Jackpot Slots, and related services — all denominated in Pakistani Rupees (PKR).
This Privacy Policy describes how six6 collects, processes, stores, and shares the personal data of users who visit, register on, or otherwise interact with the six6 platform. It applies to all six6 products and services, including but not limited to the website at six6.world, any associated mobile-optimised interfaces, customer support channels, and promotional communications.
If you have any questions about this Privacy Policy or how six6 handles your personal data, please contact us at support@six6.world before registering or continuing to use the platform.
2. Personal Data We Collect
six6 collects personal data in the following categories. We collect only what is genuinely necessary for the purpose stated — we don't gather data speculatively or build profiles beyond what is needed to run the platform properly.
| Data Category |
Examples |
Required? |
| Identity Data |
Full name, CNIC/NICOP number, date of birth, gender |
Required |
| Contact Data |
Email address, Pakistani mobile number, city of residence |
Required |
| Financial Data |
Payment account details (Easypaisa, JazzCash, IBAN), transaction history |
Required |
| Technical Data |
IP address, device type, browser, OS, session timestamps |
Automatic |
| Gaming Activity Data |
Bets placed, games played, stakes, session duration, win/loss history |
Automatic |
| Communications Data |
Support chat logs, emails sent to six6, survey responses |
When used |
| Verification Documents |
CNIC/NICOP scans or photos, proof of address, selfie for liveness checks |
When requested |
six6 does not collect or process special categories of sensitive personal data such as religious beliefs, political views, health data, or biometric data beyond what is strictly required for identity verification purposes.
3. How We Collect Your Data
six6 collects personal data through three main channels:
- Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact support, or respond to a promotion.
- Automatically — as you interact with the six6 platform, technical data including your IP address, device fingerprint, session information, and gaming activity is recorded automatically through standard platform logging and cookie technologies.
- From third parties — six6 may receive limited identity verification data from regulated third-party verification providers in the course of confirming your age and identity, and may receive payment confirmation data from Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners when you make deposits or receive withdrawals.
six6 does not purchase personal data from data brokers or marketing list providers. All data we hold about you comes from your direct interactions with the platform or from regulated third-party processors involved in running the service.
4. Why We Use Your Personal Data
six6 uses the personal data it collects for the following specific purposes. We do not use personal data for any purpose not listed here without first obtaining your explicit consent or being required to do so by law.
- Account creation and management — to set up and maintain your six6 account, verify your identity and age, and provide access to all platform features.
- Payment processing — to process PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payments; to verify payment method ownership; and to maintain accurate financial records.
- Game and betting services — to operate all six6 gaming products including cricket betting, sports betting, Poker, Teen Patti, Aviator, and Jackpot Slots; to settle bets and credit winnings accurately.
- Fraud prevention and platform security — to detect and prevent fraudulent activity, money laundering, bonus abuse, account sharing, underage access, and other prohibited conduct as described in the six6 Terms and Conditions.
- Responsible gaming — to monitor gaming patterns and identify players who may be showing signs of problem gambling; to administer deposit limits, loss limits, self-exclusion, and other responsible gaming tools you have activated.
- Customer support — to respond to your enquiries, resolve disputes, process complaints, and provide ongoing account support in English and Urdu.
- Platform improvement — to analyse aggregated, anonymised usage data to improve the six6 platform, fix technical issues, optimise performance on Pakistani mobile networks, and develop new features.
- Legal and regulatory compliance — to comply with applicable laws, respond to lawful requests from authorities, and maintain records required under applicable regulations.
- Marketing communications — to send you relevant promotions, bonus offers, and platform updates, where you have given your consent to receive such communications or where six6 has a legitimate interest in doing so.
5. Lawful Basis for Processing
six6 relies on one or more of the following lawful bases when processing your personal data, depending on the specific purpose:
- Contract performance — processing that is necessary to fulfil the six6 Terms and Conditions you have agreed to, including account management, payment processing, and providing gaming services.
- Legal obligation — processing required to comply with applicable laws, including age verification, identity verification, anti-money laundering obligations, and responding to lawful authority requests.
- Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not outweighed by your rights and interests.
- Consent — where we send you marketing communications, use non-essential cookies, or process data for purposes beyond those listed above. Consent can be withdrawn at any time.
6. Who We Share Your Data With
six6 does not sell your personal data to any third party. We share data only where necessary to provide the platform, comply with legal obligations, or protect the integrity of our services. The categories of third parties who may receive your data are:
- Payment processors — Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer services, and Visa/Mastercard processing networks, solely to process your PKR transactions.
- Identity verification providers — regulated third-party services that verify your age and identity against your CNIC/NICOP or other official documents.
- Technical infrastructure providers — cloud hosting, database, and content delivery providers who store and process data on behalf of six6 under strict data processing agreements.
- Fraud detection and security services — specialist third-party providers that assist six6 in identifying fraudulent activity, bot behaviour, and other security threats.
- Customer support platforms — tools used to manage and respond to support tickets and live chat conversations, which may store communication records.
- Regulatory and law enforcement authorities — where required by law, court order, or equivalent legal process, six6 will disclose personal data to competent authorities.
All third-party providers with access to six6 player data are subject to binding data processing agreements requiring them to process data only as instructed by six6 and to maintain appropriate security standards.
7. Payment Data and PKR Transactions
All financial transactions on six6 are processed in Pakistani Rupees. When you make a deposit or request a withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer, or Visa/Mastercard, six6 collects and stores the following payment-related data:
- The payment method type and relevant account identifier (e.g. mobile number for Easypaisa/JazzCash, masked card number for card payments, IBAN for bank transfer)
- Transaction amounts in PKR, timestamps, reference numbers, and settlement status
- Confirmation data returned by the payment processor confirming successful processing
six6 does not store full card numbers, CVV codes, or complete bank account credentials. Card payment data is processed by PCI-DSS compliant payment processors. six6 retains transaction records for the period required by applicable financial record-keeping regulations.
Payment data is used solely for processing your transactions, preventing fraud, meeting anti-money laundering obligations, and maintaining accurate financial records. It is not used for marketing or profiling purposes beyond what is necessary for platform security.
8. Cookies and Tracking Technologies
six6 uses cookies and similar tracking technologies on the six6.world website. Cookies are small text files placed on your device when you visit the site. They help the platform function correctly, remember your preferences, and improve your experience. six6 uses the following categories of cookies:
- Strictly necessary cookies — essential for the platform to function. These include session management cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled.
- Functional cookies — remember your preferences such as preferred language, display settings, and last visited game section to provide a more personalised experience.
- Analytics cookies — collect anonymised data about how players use the six6 platform to help us understand usage patterns, identify technical issues, and improve the site. These are only placed with your consent.
- Security and fraud detection cookies — assist six6 in identifying suspicious activity, detecting bots, and preventing fraud by tracking device behaviour patterns across sessions.
You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using the platform. Disabling functional or analytics cookies may limit certain features but will not prevent core gaming functionality from working.
9. How Long We Keep Your Data
six6 retains personal data for as long as is necessary for the purposes for which it was collected, or as required by applicable laws. The general retention principles we apply are:
- Active accounts — all data associated with your active six6 account is retained for the duration of your membership plus a minimum of five years after account closure, for legal and regulatory compliance purposes.
- Financial transaction records — retained for a minimum of seven years from the date of each transaction, in line with standard financial record-keeping requirements.
- Identity verification documents — retained for a minimum of five years following account closure or the last verified transaction.
- Support communications — retained for three years from the date of the conversation, or longer where the communication relates to a complaint, dispute, or investigation that remains open.
- Analytics and technical data — retained in anonymised or aggregated form indefinitely for platform improvement purposes; individual session data is typically deleted after 13 months.
Where you request deletion of your data, six6 will delete or anonymise personal records that are not subject to a legal retention obligation. We will inform you clearly of any records that must be retained and the reason why.
10. How We Protect Your Data
six6 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:
- TLS encryption for all data transmitted between your device and six6 servers
- Encryption at rest for sensitive personal and financial data stored in our databases
- Role-based access controls ensuring that only authorised six6 staff can access player data, and only to the extent required for their specific function
- Regular security assessments, penetration testing, and vulnerability scanning of the six6 platform infrastructure
- Secure audit logging of all access to personal data, reviewed regularly by our Trust & Safety team
- Incident response procedures to detect and respond to data security incidents promptly
In the event of a data security incident that poses a risk to your personal data, six6 will notify affected players and relevant authorities as required by applicable law, without undue delay.
You play an important role in keeping your account secure. Use a strong, unique password for your six6 account, do not share your login credentials with anyone, and contact six6 support immediately if you suspect unauthorised access to your account.
11. Minors and Under-18 Access
six6 is strictly for adults aged 18 and over. The platform does not knowingly collect personal data from persons under the age of 18. Age verification is performed during registration and may be repeated at any point during your membership.
If six6 becomes aware that personal data belonging to a minor has been collected — for example, where a user has provided a false date of birth during registration — the account will be immediately suspended, all associated data will be deleted in accordance with applicable law, and any deposited funds will be returned to the payment source used.
Parents and guardians who believe that a minor may have registered on six6 should contact us immediately at support@six6.world. We will investigate and respond within 48 hours.
12. Marketing Communications
six6 may send you marketing communications about new games, promotions, bonus offers, PSL cricket betting specials, and other platform updates. We send marketing communications only where:
- You have given your explicit consent to receive such communications during registration or subsequently through your account settings; or
- You are an existing six6 player and the communication relates to products or services similar to those you have already used on the platform, and you have not opted out.
You can opt out of marketing communications from six6 at any time by clicking the "Unsubscribe" link in any marketing email, or by contacting our support team. Opting out of marketing does not affect essential service communications such as account security alerts, deposit confirmations, withdrawal notifications, and support responses — these will continue regardless of your marketing preference.
six6 does not share your contact details with third-party marketing companies for them to send you communications on their own behalf.
13. Exercising Your Privacy Rights
Every registered six6 player has the right to:
- Access — request a copy of the personal data six6 holds about you
- Rectification — ask us to correct any inaccurate or incomplete data in your profile
- Erasure — request deletion of your personal data, subject to legal retention obligations
- Restriction — ask us to restrict processing of your data in certain circumstances
- Portability — receive a copy of certain data in a structured, machine-readable format
- Objection — object to processing based on legitimate interests or for direct marketing
- Withdraw consent — where processing is based on your consent, withdraw that consent at any time
To exercise any of these rights, email support@six6.world with the subject line "Privacy Request" and describe the specific action you are requesting. six6 will acknowledge your request within 2 business days and provide a substantive response within 30 days. There is no charge for any privacy rights request.
You may submit your privacy rights request in English or Urdu. Our team handles data requests in both languages. Simply indicate your preferred language at the start of your message.
14. Changes to This Privacy Policy
six6 may update this Privacy Policy from time to time to reflect changes in our services, applicable laws, or data processing practices. When material changes are made, we will:
- Update the "Effective" date shown at the top of this page
- Notify all registered players by email to the address on file with their account, at least 14 days before the changes take effect
- Display a prominent notice on the six6 platform for at least 14 days following any material update
Continued use of the six6 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should stop using six6 and may request account closure and deletion of your data at any time.
