Privacy Policy
for six66

1 Introduction

This Privacy Policy applies to all personal data collected and processed by six66 (referred to in this document as "six66", "we", "us", or "the Platform") in connection with your use of the six66 website, mobile interface, games, sportsbook, promotions, and all related services available at six66.vu and its subdomains.

six66 is an internationally licensed online casino and sports betting platform. As a licensed operator, we are legally required to collect, verify, and retain certain categories of personal data about our players. This is not optional — it is a mandatory component of our licensing obligations and our responsibilities under applicable anti-money laundering (AML) and know-your-customer (KYC) regulations.

six66 serves players across Pakistan — from Karachi, Lahore, Faisalabad, and Islamabad to Rawalpindi, Multan, Peshawar, Quetta, and all other cities and towns. We understand the importance of data privacy to our Pakistani players and we are committed to handling all personal information with the highest degree of transparency, security, and respect.

This Privacy Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. Together these documents govern your complete relationship with the six66 platform.

2 Data We Collect

six66 collects the following categories of personal data from players and visitors to the platform:

2.1 Identity Data

• Full legal name as it appears on your CNIC or passport
• Date of birth
• Gender (where provided)
• Copies of government-issued identity documents (CNIC, passport, or driving licence)
• Facial photographs or selfies where required for identity verification

2.2 Contact Data

• Residential address and proof of address documents (utility bill, bank statement)
• Email address
• Mobile phone number

2.3 Financial Data

• Payment method details (JazzCash account number, EasyPaisa account number, HBL / UBL / Meezan Bank account details)
• Deposit and withdrawal transaction history
• PKR account balances and wagering history

2.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Login timestamps and session durations
• Pages visited, games played, and betting activity on the platform
• Referral source and marketing channel attribution data

2.5 Communications Data

• Contents of messages sent to our customer support team
• Live chat transcripts and support ticket history
• Your marketing communication preferences

3 How We Collect Data

six66 collects personal data through the following channels:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
• Automated collection: Technical and usage data collected automatically when you visit the six66 website or use the platform, including via cookies, log files, and similar tracking technologies.
• Third-party sources: Data received from identity verification providers, payment processors, fraud prevention services, and — where applicable — publicly available sources such as sanctions screening databases. This data is used solely to verify your identity, prevent fraud, and meet our AML obligations.

4 How We Use Your Data

six66 uses your personal data for the following purposes:

six66 will not use your personal data for any purpose incompatible with those listed above without first obtaining your explicit consent or as otherwise required by law.

5 Legal Basis for Processing

six66 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing is necessary to fulfil our contract with you — i.e., to operate your account, process transactions, and provide the gaming and betting services you have registered to use.
• Legal obligation: Processing is required to comply with applicable laws and our licensing obligations, including KYC verification, AML monitoring, and regulatory reporting.
• Legitimate interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, and improving our services — provided these interests are not overridden by your rights and interests.
• Consent: Where we rely on your consent — for example, for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6 Sharing Your Data

six66 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by their respective regulatory frameworks.
• Identity verification providers: Third-party KYC and AML service providers who assist us in verifying player identities and screening against sanctions lists.
• Technology partners: Game providers, platform infrastructure partners, and cloud hosting providers who assist in delivering the six66 service. All such partners are bound by data processing agreements with six66.
• Regulatory and law enforcement authorities: Where required by our licensing obligations, applicable law, or a valid legal order — including disclosure to anti-money laundering authorities where suspicious activity is identified.
• Professional advisors: Lawyers, auditors, and accountants where necessary for the conduct of our business, all of whom are bound by duties of confidentiality.

7 Data Retention

six66 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, or licensing retention requirements.

7.1 Active Accounts

While your six66 account remains active, we retain all personal data necessary to operate your account, process transactions, and comply with our ongoing legal obligations.

7.2 Closed Accounts

Following the closure of a six66 account — whether initiated by you or by six66 — we are required to retain certain categories of personal data for a minimum period of five (5) years. This retention period is mandated by our licensing authority's AML and record-keeping requirements. After this mandatory retention period, data that is no longer necessary will be securely deleted or anonymised.

7.3 Marketing Data

If you have opted in to marketing communications and subsequently opt out, six66 will remove you from active marketing lists promptly. A suppression record (containing the minimum data necessary to prevent future unwanted contact) may be retained indefinitely to honour your opt-out preference.

8 Security Measures

six66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the six66 platform
• Encrypted storage of sensitive data at rest, including passwords (stored as salted hashes only — never in plain text) and financial account references
• Role-based access controls ensuring that only authorised six66 personnel can access personal data, and only to the extent necessary for their role
• Two-factor authentication available for player accounts and enforced for all six66 staff accessing internal systems
• Regular security audits and penetration testing of the six66 platform and infrastructure
• Incident response procedures including mandatory notification to affected players and relevant authorities in the event of a confirmed data breach affecting their rights and freedoms

9 Cookies Policy

six66 uses cookies and similar tracking technologies to enhance your experience on the platform, to measure the performance of our services, and to deliver relevant content. The following categories of cookies are used on the six66 platform:

You can manage your cookie preferences through your browser settings at any time. Please note that disabling essential cookies will prevent the six66 platform from functioning correctly. For detailed information on the specific cookies we use, please contact our support team at [email protected].

10 Your Rights

six66 respects your privacy rights. Depending on your circumstances, you may have the following rights in relation to the personal data we hold about you:

To exercise any of the above rights, please submit a written request to [email protected]. six66 will respond to all valid requests within 30 calendar days of receipt. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

Please note that certain rights are subject to limitations — for example, we cannot delete data that we are legally required to retain under our licensing or AML obligations. Where we are unable to fulfil a request in full, we will explain the reason clearly in our response.

11 Marketing Preferences

six66 may send you promotional communications about bonuses, new games, cricket betting markets, PSL promotions, and other offers — but only where you have provided your consent to receive such communications at the time of registration or subsequently opted in.

11.1 Opting Out

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in your six66 account settings
• Clicking the unsubscribe link in any marketing email sent by six66
• Contacting our support team at [email protected] and requesting removal from all marketing lists

Opting out of marketing communications will not affect the sending of transactional communications that are necessary for the operation of your account — such as deposit confirmations, withdrawal notifications, and security alerts.

11.2 Personalisation

Where you have consented to personalised marketing, six66 may use your gameplay history, deposit patterns, and stated preferences to tailor the promotions and content we show you. You may opt out of personalised recommendations at any time through your account settings without affecting your ability to use the platform.

12 Minors & Under-21 Policy

six66 is strictly prohibited to any person under the age of 21. We do not knowingly collect personal data from individuals under 21. Age verification is a mandatory step in the six66 registration process and is repeated at various points during the account lifecycle.

Parents and guardians in Pakistan who are concerned about a minor accessing online gaming platforms are encouraged to use parental control software and to contact our support team immediately if they believe their child has attempted to register on six66.

13 International Data Transfers

As an internationally licensed gaming platform, six66 may process and store personal data on servers located outside Pakistan. Where personal data is transferred to a country that does not provide an equivalent level of data protection to Pakistan, six66 will implement appropriate safeguards to ensure your data remains protected. These safeguards may include contractual data processing agreements with receiving parties that impose obligations equivalent to those described in this Privacy Policy.

By using the six66 platform, you acknowledge and consent to the transfer of your personal data to other countries as necessary for the operation of the platform and in accordance with this Privacy Policy.

14 Changes to This Policy

six66 reserves the right to update this Privacy Policy at any time. Where changes are material — meaning they significantly affect your rights or the way we use your data — we will provide advance notice to registered players via email or an on-platform notification before the changes take effect. The updated Privacy Policy will be published on this page with a revised "last updated" date.

Your continued use of the six66 platform after any update to this Privacy Policy constitutes your acceptance of the revised terms. We recommend bookmarking this page and reviewing it periodically.

15 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way six66 handles your personal data, please contact our dedicated support team. We are available 24 hours a day, 7 days a week, in both English and Urdu.

For urgent matters — such as reporting a suspected data breach affecting your account, or requesting immediate self-exclusion under our Responsible Gaming policy — please mark your message as urgent and our team will prioritise your request accordingly.