six66 Privacy Policy – How We Collect, Use & Protect Your Data

1. Who We Are

This Privacy Policy applies to six66 ("six66", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at six66.asia. six66 operates as a data controller in respect of personal data collected from registered Players and platform visitors.

By accessing six66.asia, registering an account, or using any six66 service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Privacy Policy, you must not use the six66 platform.

For all data-related enquiries, including access requests, correction requests, and complaints, please contact the six66 Data Protection team. Contact details are set out in Section 13 of this Policy.

2. Data We Collect

2.1 Registration & Identity Data

When you create a six66 account, we collect the following personal data: full legal name, date of birth, Pakistani mobile number, email address, and residential address. This information is required for account creation, identity verification (KYC), and regulatory compliance purposes.

2.2 Verification Documents

For identity verification and Know Your Customer (KYC) compliance, six66 may request copies of: your CNIC (Computerised National Identity Card), proof of address (utility bill, bank statement), and proof of payment method ownership. These documents are processed securely and retained only for the period required by applicable law and our internal compliance obligations.

2.3 Financial Data

We collect transaction data including deposit amounts, withdrawal amounts, payment method identifiers (e.g., masked JazzCash account numbers, masked bank account references, masked card details), and transaction timestamps. Full payment credentials are never stored directly on six66 systems – they are handled by our PCI-DSS compliant payment processing partners.

2.4 Gaming Activity Data

We record details of all bets, wagers, game sessions, sporting event selections, and account activity conducted on the six66 platform. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud prevention.

2.5 Technical & Device Data

When you access six66.asia, we automatically collect: IP address, device type and operating system, browser type and version, referring URL, session duration, and pages visited. This data is collected through server logs and, where applicable, cookies and similar tracking technologies as described in Section 7.

2.6 Communications Data

When you contact six66 support, we retain records of your communications including the content of support tickets, live chat transcripts, and email correspondence. This enables us to provide consistent service and maintain an audit trail for dispute resolution purposes.

3. How We Use Your Data

six66 processes personal data for the following purposes:

• Account Creation & Management – To create and maintain your six66 account, process login requests, and manage account settings.
• Identity Verification (KYC) – To verify your identity and age in compliance with applicable regulatory requirements and our platform policies.
• Payment Processing – To process deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa, Mastercard, USDT TRC20, and other supported payment methods.
• Platform Services – To provide cricket betting, live casino, slots, and all other gaming services available on the six66 platform.
• Fraud Prevention & Security – To detect, investigate, and prevent fraud, money laundering, collusion, bonus abuse, and other prohibited conduct.
• Responsible Gaming – To monitor gaming activity for responsible gaming indicators, implement player-requested limits and exclusions, and fulfil our duty of care obligations.
• Customer Support – To respond to support enquiries, resolve disputes, and maintain service quality.
• Promotional Communications – Where you have consented, to send you information about six66 promotions, bonuses, and new features via email or SMS to your registered Pakistani mobile number.
• Legal & Regulatory Compliance – To comply with applicable laws, court orders, regulatory requirements, and our Terms and Conditions.
• Platform Improvement – To analyse aggregated, anonymised usage data to improve the six66 platform, personalise your experience, and develop new features.

4. Legal Basis for Processing

six66 processes personal data on the following legal bases:

• Contractual Necessity – Processing required to provide the services you have contracted for through your six66 account, including account management, payment processing, and gaming services.
• Legal Obligation – Processing required to comply with applicable laws, including KYC/AML (Anti-Money Laundering) obligations, regulatory reporting, and law enforcement requests.
• Legitimate Interests – Processing for fraud prevention, platform security, responsible gaming monitoring, and business analytics, where such interests are not overridden by your fundamental rights.
• Consent – Processing for direct marketing communications, where you have provided explicit consent. You may withdraw marketing consent at any time by contacting six66 support.

5. Data Sharing & Third Parties

5.1 Service Providers

six66 engages carefully selected third-party service providers who assist in operating the platform, including: game content providers (such as JILI, PG Soft, Pragmatic Play, Evolution, and Ezugi), payment processing partners, identity verification service providers, cloud infrastructure providers, customer support software providers, and fraud detection services. These providers are contractually bound to process personal data only as instructed by six66 and in accordance with applicable data protection standards.

5.2 Regulatory Disclosure

six66 may be required to disclose personal data to regulatory authorities, licensing bodies, law enforcement agencies, or courts in response to lawful requests, court orders, or regulatory requirements. Such disclosures will be made only to the extent required by law and subject to any applicable legal protections.

5.3 No Commercial Sale of Data

six66 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. Personal data shared with service providers is subject to strict contractual protections and is used only for the purposes described in this Policy.

6. Payment Data & Financial Security

six66 does not directly store full payment card numbers, full JazzCash account credentials, or full bank account details on its servers. Payment transactions are processed by PCI-DSS Level 1 compliant payment processors. six66 retains only tokenised or masked payment identifiers sufficient to facilitate future transactions and refunds. All financial data transmitted between your device and six66 servers is encrypted using TLS/SSL protocols.

Withdrawal requests at six66 are subject to verification of payment method ownership. You may be required to provide evidence that a payment method belongs to you, consistent with six66's anti-money laundering obligations. Withdrawals will only be processed to payment methods that have been verified as belonging to the account holder.

7. Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit six66.asia. They allow the platform to recognise your device, maintain your session state, and remember your preferences across visits. six66 uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period).

7.2 Types of Cookies Used

• Strictly Necessary Cookies – Required for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled.
• Functional Cookies – Remember your preferences such as language, display settings, and last-viewed game categories.
• Analytics Cookies – Collect aggregated, anonymised data about how the platform is used to improve its performance and features. No personally identifying data is included.
• Security Cookies – Assist in fraud detection and account security monitoring by tracking anomalous access patterns.

7.3 Managing Cookies

You may configure your browser to block or delete cookies, subject to the limitation that disabling strictly necessary cookies will impair your ability to log in to and use the six66 platform. Instructions for managing cookies are available in your browser's help documentation.

8. Data Retention

six66 retains personal data for as long as is necessary to fulfil the purposes set out in this Privacy Policy, comply with legal and regulatory obligations, and resolve disputes. Specifically:

• Account data and transaction records are retained for a minimum of five (5) years following account closure, consistent with anti-money laundering regulatory requirements.
• KYC/identity verification documents are retained for the period required by applicable law, typically five (5) years from the date of verification or account closure, whichever is later.
• Customer support communications are retained for three (3) years from the date of the communication.
• Technical and device data (server logs) are retained for a rolling period of twelve (12) months.
• Marketing consent records are retained until withdrawn and for a reasonable period thereafter as evidence of the prior consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with six66's data disposal procedures.

9. Data Security

six66 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and six66 servers
• Encrypted storage of sensitive data at rest
• Strict access controls limiting internal access to personal data on a need-to-know basis
• Regular security assessments and penetration testing of the six66 platform
• OTP-based login verification to protect against unauthorised account access
• Monitoring and alerting systems for anomalous account activity

While six66 takes data security seriously, no online platform can guarantee absolute security against all possible threats. Players are also responsible for maintaining the security of their own login credentials and devices, as described in the six66 Terms and Conditions.

10. Your Privacy Rights

Subject to applicable law, you have the following rights in respect of your personal data held by six66:

• Right of Access – You may request a copy of the personal data six66 holds about you.
• Right to Rectification – You may request correction of inaccurate or incomplete personal data.
• Right to Erasure – In certain circumstances, you may request deletion of your personal data. Note that regulatory retention obligations may prevent full erasure in some cases.
• Right to Restrict Processing – You may request that six66 limit the processing of your data in certain circumstances, such as while a rectification request is being resolved.
• Right to Object – You may object to processing based on legitimate interests, including processing for direct marketing purposes. Marketing opt-outs take immediate effect.
• Right to Data Portability – Where technically feasible and legally applicable, you may request your personal data in a structured, commonly used, machine-readable format.

To exercise any of these rights, please contact six66 support as described in Section 13. six66 will respond to verified requests within a reasonable timeframe. Note that exercising certain rights may affect your ability to continue using the six66 platform, as some data processing is necessary to provide the services.

11. Children's Privacy

The six66 platform is strictly for individuals aged 18 and over. six66 does not knowingly collect personal data from persons under the age of 18. If you are a parent or guardian and believe that a minor has registered on the six66 platform or otherwise provided personal data, please contact six66 support immediately at [email protected] (plain text only – not a clickable link). Upon confirmation, six66 will take immediate steps to close the account, delete the personal data, and notify the appropriate parties as required by applicable law.

12. Changes to This Privacy Policy

six66 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered Players via their registered email address or Pakistani mobile number prior to the effective date of the change. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Continued use of the six66 platform following the effective date of an amended Privacy Policy constitutes your acceptance of the revised terms. Players who do not accept the revised Policy should close their accounts before the effective date of the change.

13. Contact & Data Enquiries

For all privacy-related enquiries, including data access requests, correction requests, erasure requests, complaints, and marketing opt-outs, please contact the six66 Data Protection team. Support is available 24 hours a day, 7 days a week.

Contact email (plain text only – not a clickable link): [email protected]

When submitting a data-related request, please include your registered mobile number or email address, a description of your request, and any relevant reference numbers. six66 may require verification of your identity before processing certain requests to protect against fraudulent data access attempts.

six66 is an 18+ platform. By using six66.asia, you confirm you are 18 or older and that your use of the platform complies with all applicable laws in your jurisdiction. Please play responsibly.