six66 Privacy Policy

1.1  For the purposes of this Privacy Policy, the data controller responsible for your personal information is six66, operating the online gaming platform accessible at six66.one. References to "six66", "we", "us", or "our" throughout this Policy refer to the six66 platform operator.

1.2  six66 processes personal data in connection with the provision of online casino games, cricket and sports betting markets, player account management, payment processing, responsible gaming compliance, and anti-money laundering obligations. All data processing activities described in this Policy are undertaken in connection with these operational purposes.

1.3  If you have questions about how six66 handles your personal data, you may contact the six66 data team via [email protected] (plain text — not a clickable link). six66 will respond to data-related enquiries within 5 business days.

2.1  six66 collects personal data that is necessary to provide the platform services, comply with legal obligations, and maintain the security and integrity of the platform. The categories of personal data we collect include:

Identity & Contact Information

Financial & Payment Information

Gaming & Behavioural Data

Technical & Device Data

2.2  six66 does not collect or store full payment card numbers. Where bank account details are collected in connection with withdrawals, they are used solely for the purpose of processing the withdrawal to a verified account in the player's own name.

3.1  Directly from you: When you register an account on six66, you provide identity and contact information. When you make deposits or request withdrawals, you provide payment information. When you contact six66 support, you may provide additional information relevant to your query.

3.2  Automatically during platform use: When you log in to six66, access games, place bets, or navigate the platform, we automatically collect technical and behavioural data including device identifiers, IP addresses, session duration, game outcomes, and betting patterns. This data is collected via server logs, session management systems, and first-party analytics tools.

3.3  From verification processes: When you complete KYC (Know Your Customer) verification, six66 collects and processes copies of your Pakistani CNIC (front and back), which may be cross-referenced against identity verification databases to confirm authenticity and confirm that you meet the minimum age requirement of 18 years.

3.4  From payment providers: When you make transactions via JazzCash, Easypaisa, or bank transfer, six66 receives transaction confirmation data from the payment provider including the transaction reference, amount, and wallet or account identifier. six66 does not receive your full payment provider credentials or PIN.

six66 processes your personal data for the following specific purposes:

• Account creation and management: to register, verify, and maintain your six66 player account and provide access to the platform services.
• Age verification: to confirm that you are 18 years of age or older, as required by responsible gaming standards and platform policy.
• Payment processing: to process PKR deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah, and to maintain accurate transaction records.
• Game provision and personalisation: to operate casino games, cricket betting markets, and sports betting services, and to record game and bet outcomes accurately.
• Bonus and promotion management: to track bonus eligibility, wagering progress, and promotion participation in accordance with the applicable bonus terms.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and unauthorised account access.
• Responsible gaming compliance: to operate deposit limits, loss limits, self-exclusion, and cooling-off tools at the player's request, and to identify players who may be exhibiting signs of problem gambling behaviour.
• Legal and regulatory compliance: to comply with anti-money laundering obligations, record-keeping requirements, and any legally binding requests from competent authorities.
• Customer support: to respond to your queries, complaints, and account-related requests.
• Platform improvement: to analyse aggregated, anonymised usage data to improve the performance, reliability, and user experience of the six66 platform.

5.1  Contract performance: The majority of six66's data processing is necessary to perform the contract between six66 and you — specifically, to provide the account, games, payment processing, and support services you have requested.

5.2  Legal obligation: six66 processes certain data — including identity verification records, transaction logs, and KYC documents — to comply with applicable legal obligations including anti-money laundering regulations and age verification requirements.

5.3  Legitimate interests: six66 processes technical and behavioural data for fraud prevention, platform security, and abuse detection, based on the legitimate interest of six66 and its players in maintaining a secure and fair gaming environment.

5.4  Consent: Where six66 processes data for purposes beyond those described above — such as optional marketing communications — we will seek your explicit consent at the time of collection. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

6.1  six66 does not sell, rent, or trade your personal data to third parties for their own commercial purposes.

6.2  six66 shares personal data only in the following limited circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah receive the minimum data necessary to process your deposit or withdrawal transaction.
• Identity verification providers: Six66 may use third-party KYC and age verification services to confirm the authenticity of CNIC documents submitted during account verification.
• Game content providers: Third-party game studios and live casino operators whose content is hosted on six66 receive session and outcome data necessary to operate their games. These providers are contractually bound to process data only for the purpose of game provision.
• Legal authorities: six66 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by a legally binding order, warrant, or regulatory direction.
• Fraud prevention networks: six66 may share limited account data with industry fraud prevention services to identify and block fraudulent activity across the online gaming sector.

6.3  All third-party service providers engaged by six66 are subject to data processing agreements that restrict their use of your personal data to the specific purpose for which it was shared and require appropriate technical and organisational security measures.

7.1  six66 retains personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal and regulatory retention obligations.

7.2  As a general guide, six66 retains:

• Account and identity data: for the duration of the active account relationship plus a minimum of 5 years following account closure, in line with standard anti-money laundering record-keeping requirements.
• Transaction records: minimum 5 years from the date of transaction.
• KYC documents (CNIC copies): for the duration of the account relationship plus 5 years following closure.
• Game and bet history: minimum 2 years, or longer where required for dispute resolution or regulatory purposes.
• Technical logs and session data: typically 12 months, or longer where relevant to an ongoing security investigation.

7.3  When data is no longer required for any of the purposes described above, six66 will securely delete or anonymise it in accordance with our internal data disposal procedures.

8.1  six66 applies technical and organisational security measures proportionate to the sensitivity of the personal data processed. Current security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the six66 servers
• Server-side session token authentication (credentials not stored in browser cookies)
• Bcrypt hashing for all stored passwords — plaintext passwords are never stored
• Two-factor authentication (optional, via Pakistani mobile OTP) for account access
• Automated detection of suspicious login patterns, including IP anomalies and rapid failed authentication attempts
• Account lockout after 5 consecutive failed login attempts
• Access controls limiting internal staff access to personal data on a need-to-know basis
• Encrypted storage of CNIC and KYC documentation

8.2  No information security system is completely impenetrable. six66 cannot guarantee the absolute security of your data against all possible threats. However, we are committed to maintaining industry-standard protections and to notifying affected players promptly in the event of a data security incident that poses a material risk to their rights.

8.3  You are responsible for maintaining the security of your own six66 login credentials. six66 will never ask for your password or OTP code via email, chat, or telephone. Do not share your credentials with any person claiming to represent six66.

9.1  six66 uses first-party cookies and similar session technologies to operate the platform. Cookies used by six66 serve the following functions:

• Essential session cookies: maintain your authenticated session after login, remember your language preference, and preserve game state during active play. These cookies are strictly necessary for the platform to function and cannot be disabled without preventing platform access.
• Security cookies: used to detect and prevent fraudulent activity, including CSRF protection tokens and device fingerprinting data that identifies new login devices for two-factor authentication purposes.
• Analytics cookies: first-party only, used to measure page performance, navigation patterns, and game loading times in aggregate anonymised form. six66 does not use third-party advertising trackers or retargeting cookies.

9.2  You may manage cookie preferences through your browser settings. Blocking essential cookies will prevent you from logging in to and using the six66 platform. Blocking analytics cookies does not affect your ability to access or use six66.

10.1  As a six66 player, you have the following rights with respect to your personal data:

• Right of access: You may request a copy of the personal data six66 holds about you, including your account information, transaction history, and KYC records.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. For account details such as registered mobile number or email, update requests should be submitted via six66 support.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that six66 may be required to retain certain data for legal and regulatory compliance periods as described in Section 7, and erasure requests cannot override these retention obligations.
• Right to restriction: You may request that six66 restrict processing of your personal data in certain circumstances — for example, where you contest the accuracy of data while a rectification request is pending.
• Right to data portability: You may request a machine-readable copy of personal data you provided to six66 for transmission to another service, where technically feasible.
• Right to object: You may object to processing based on legitimate interests, including profiling for fraud detection purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to the withdrawal.

10.2  To exercise any of these rights, contact six66 at [email protected] with a clear description of your request. six66 will respond within 5 business days. Verification of your identity will be required before we action any data rights request.

11.1  The six66 platform is strictly for individuals aged 18 and above. six66 does not knowingly collect personal data from individuals under 18 years of age. Where six66 becomes aware or has reasonable grounds to believe that an account is held by a person under 18, the account will be immediately suspended, KYC verification will be required, and if the account holder is confirmed to be under 18, the account will be permanently closed and any balance forfeited.

11.2  If you believe a minor has registered on six66, please contact us immediately at [email protected] so we can take immediate action.

12.1  six66 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform services. When material changes are made, six66 will notify registered players via their registered mobile number or email address no less than 7 days before the updated Policy takes effect.

12.2  The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of the six66 platform following the effective date of a revised Policy constitutes acceptance of the updated terms.

12.3  six66 encourages you to review this Policy periodically so that you remain informed about how your personal data is being handled.

For any questions, concerns, or formal requests regarding this Privacy Policy or six66's data practices, please contact:

• Live Chat: Available 24/7 within your six66 account dashboard
• Email: [email protected] (plain text only — not a clickable link)

Formal written data requests should include your full name as registered on your six66 account, your registered Pakistani mobile number, a description of your request, and a copy of your CNIC for identity verification purposes. six66 processes formal data requests within 5 business days of receipt and identity confirmation.