6www Privacy Policy

1. Introduction

1.1 This Privacy Policy applies to all personal data processed by 6www in connection with the operation of the 6www online casino and sportsbook platform, accessible at https://6www.org and through any associated mobile applications or services.

1.2 6www is committed to protecting the privacy and personal data of all registered members and website visitors, including Pakistani users accessing the platform from Karachi, Lahore, Islamabad, Faisalabad, and all other cities across Pakistan.

1.3 This policy has been drafted in accordance with internationally recognised data protection principles and the applicable obligations imposed by 6www's international gaming licence. It is written in English — the primary language of the 6www platform — for clarity and accessibility to our Pakistani membership base.

1.4 By registering an Account on 6www or continuing to use the Platform after any update to this policy, you acknowledge that you have read, understood, and agreed to the data processing practices described herein. If you do not agree, you must not create an account or continue using 6www.

2. Data Controller

2.1 For the purposes of this Privacy Policy, 6www acts as the data controller in respect of all personal data collected from registered members and platform visitors. As data controller, 6www determines the purposes for which personal data is processed and the means by which that processing takes place.

2.2 Where 6www engages third-party service providers — such as payment processors, KYC verification tools, or fraud detection systems — those providers act as data processors under contractual arrangements that bind them to process your data only in accordance with 6www's documented instructions and this Privacy Policy.

2.3 All data protection enquiries and requests to exercise your privacy rights should be directed to the 6www support team, as set out in Section 16 of this policy.

3. Personal Data We Collect

3.1 Identity & Verification Data

To comply with our Know Your Customer (KYC) obligations and to enforce the mandatory 21+ age restriction on 6www, we collect your full legal name, date of birth, and a copy of your National Identity Card (CNIC) issued by NADRA. For members who are not Pakistani nationals, an equivalent government-issued identification document is accepted. CNIC data is treated as a special category of identity documentation and handled under the heightened security measures described in Section 9.

3.2 Contact Data

We collect your email address, mobile phone number, and — optionally — your city of residence (for example, Karachi, Lahore, or Islamabad) during the registration process. These details are used for account communication, security alerts, and support interactions. Your mobile number may also be used for two-factor authentication (2FA) where you have enabled this feature on your account.

3.3 Financial & Transaction Data

When you make a deposit or request a withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, or USDT TRC20, 6www records transaction reference numbers, amounts in PKR (or crypto equivalent), timestamps, and the payment method type. Full payment account credentials are not stored by 6www — they are processed directly by your chosen payment provider.

3.4 Technical & Device Data

As is standard for online platforms, 6www automatically collects certain technical data when you access the platform: IP address, device type and operating system, browser type and version, referral URL, and session timestamps. This data is used for platform security, duplicate account detection, and fraud prevention — not for commercial profiling.

3.5 Gaming & Betting Activity Data

6www maintains a complete log of your in-platform activity, including cricket bets placed on PSL and international matches, casino game sessions, slot spins, Kalaka Bingo rounds, table tennis wagers, and all win and loss records. This data is used for dispute resolution, responsible gaming monitoring, and compliance with our licensing obligations.

3.6 Communications Data

If you contact 6www support via live chat, email, or any other channel, the content of that communication — together with your account identifier and a timestamp — is stored. This allows us to maintain a complete support history for your account and to audit complaint handling for quality and compliance purposes.

4. How We Collect Your Data

4.1 Directly from You: The majority of your personal data is provided directly by you during registration, KYC verification, deposit/withdrawal transactions, support interactions, and when you update your account profile settings.

4.2 Automatically: Technical and device data — including IP address, session logs, and device fingerprints — is collected automatically by 6www's platform infrastructure each time you access the site or mobile application. This collection is unavoidable for the secure functioning of any online platform.

4.3 From Third Parties: Where you register via a referral link, 6www may receive limited referral data (such as a referral code) from the referring party. 6www may also receive identity confirmation data from third-party KYC verification service providers used to cross-check CNIC details submitted during registration. In all such cases, data received from third parties is subject to this Privacy Policy from the moment of receipt.

4.4 Cookies and Tracking Technologies: 6www uses cookies and similar tracking technologies as described in Section 6 of this policy. You can manage cookie preferences through your browser settings or the 6www cookie management tool available on the platform.

5. How We Use Your Personal Data

6www uses your personal data for the following specific purposes, each supported by a lawful basis under applicable data protection law:

• Account Registration and Management: Creating your account, verifying your identity, and maintaining your player profile for the duration of your membership. Lawful basis: performance of a contract.
• KYC and Age Verification: Confirming that you are at least 21 years of age and that your identity is genuine before enabling real-money features. Lawful basis: legal obligation under gaming licence terms.
• Payment Processing: Facilitating deposits and withdrawals via supported Pakistani payment channels in PKR. Lawful basis: performance of a contract.
• Anti-Money Laundering (AML) Compliance: Monitoring deposit patterns and transaction volumes for indicators of financial crime and reporting suspicious activity as required under international AML obligations. Lawful basis: legal obligation.
• Fraud Prevention and Platform Security: Using IP addresses, device fingerprints, and session data to detect and prevent unauthorised account access, duplicate registrations, and betting fraud. Lawful basis: legitimate interest.
• Responsible Gaming: Monitoring your gaming and betting activity to identify potential problem gambling patterns and intervening where appropriate through voluntary or mandatory responsible gaming tools. Lawful basis: legal obligation / legitimate interest.
• Dispute Resolution: Using bet history, transaction records, and support communications to investigate and resolve disputes fairly and in a timely manner. Lawful basis: legitimate interest / legal obligation.
• Marketing Communications: Sending promotional offers, bonus announcements, and platform updates to members who have opted in to marketing. Lawful basis: consent (fully withdrawable at any time).
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the performance, stability, and user experience of the 6www platform. Lawful basis: legitimate interest.

5.1 6www will never use your personal data for any purpose not listed above without first obtaining your explicit consent or having an independent legal basis for the new processing activity.

6. Cookies & Tracking Technologies

6.1 6www uses cookies — small text files stored on your device — and similar tracking technologies including local storage objects and session tokens. Cookies on 6www fall into the following categories:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, load balancer cookies, and security cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences, such as your preferred language, deposit method, and responsible gaming settings. Disabling these may reduce the convenience of your experience without affecting access.
• Analytics Cookies: Collect anonymised data on how members navigate 6www — which pages are visited, how long sessions last, and where users encounter errors. This data helps 6www prioritise platform improvements. Analytics cookies are subject to your consent.
• Marketing Cookies: Used only where you have opted in to marketing, to help ensure that any promotional messages you receive are relevant to your activity on 6www. These are not used to track you across third-party websites for advertising purposes.

6.2 You can manage your cookie preferences at any time through the cookie settings panel accessible in the footer of the 6www platform or through your browser's privacy settings. Note that disabling strictly necessary cookies will prevent you from logging in to your account.

7. Sharing Your Personal Data

7.1 6www does not sell your personal data. We share data with third parties only in the following limited circumstances:

• Payment Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20 processing partners receive the minimum data necessary to process your deposit or withdrawal transaction.
• KYC and Identity Verification Partners: Third-party CNIC verification tools used to confirm identity and age receive your identity data solely for the purpose of conducting the verification check.
• Fraud Detection and AML Systems: Specialist third-party compliance tools may process your transaction data and device data for the purpose of identifying suspicious activity, operating under strict data processing agreements.
• Gaming Software Providers: Certified casino game studios and sports data providers receive session and bet data as required for game operation, RNG certification, and live odds data delivery. No personal identity data is shared with game studios beyond what is required for the specific game session.
• Legal and Regulatory Authorities: 6www will disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by law, court order, or our licensing obligations. In all such cases, disclosure is limited strictly to what is legally required.
• Business Successors: In the event of a merger, acquisition, or sale of 6www's business operations, your personal data may be transferred to the successor entity, which will be bound by this Privacy Policy or an equivalent standard.

7.2 All third-party data processors engaged by 6www are contractually bound to process your data only for the purposes specified by 6www, to maintain appropriate security standards, and to delete data once the processing purpose has been fulfilled.

8. International Data Transfers

8.1 6www operates under an international gaming licence and its infrastructure, including data storage servers, may be located in jurisdictions outside Pakistan. When your personal data is transferred to a jurisdiction that does not have data protection laws equivalent to those applicable under 6www's licensing framework, 6www implements appropriate safeguards — including standard contractual clauses and data processing agreements — to ensure your data receives an equivalent level of protection regardless of where it is stored or processed.

8.2 CNIC data is subject to the most restrictive transfer controls: it is stored in encrypted form and access from non-designated jurisdictions is technically restricted. CNIC data is never transferred to jurisdictions without a documented legal basis and appropriate safeguard in place.

8.3 By registering an Account with 6www, you acknowledge that your data may be transferred internationally in accordance with the safeguards described in this section.

9. Data Security

9.1 6www implements a layered security architecture to protect your personal data from unauthorised access, loss, alteration, or disclosure. Our security measures include:

• AES-256 encryption for all sensitive data stored at rest, including CNIC documents and financial transaction records.
• TLS 1.2 or higher enforced on all data in transit between your device and the 6www platform.
• Role-based access controls ensuring that only authorised personnel with a documented business need can access personal data — and only to the extent necessary for their specific function.
• Multi-factor authentication required for all 6www internal system access by personnel handling personal data.
• Regular third-party penetration testing and vulnerability assessments of the 6www platform infrastructure.
• Automated anomaly detection systems that flag unusual access patterns or data exfiltration attempts in real time.

9.2 In the unlikely event of a data security incident that materially affects your personal data, 6www will notify you via your registered email address and will report the incident to the relevant regulatory authority within the timeframes required under our licensing obligations.

9.3 While 6www takes all reasonable technical and organisational measures to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account password and for using a strong, unique password for your 6www account.

10. Data Retention

10.1 6www retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law or our licensing obligations. The key retention periods applied by 6www are:

• Identity and CNIC data: Retained for 5 years following permanent account closure, as required under international AML and gaming licence obligations.
• Financial transaction records: Retained for 7 years following each transaction, consistent with standard financial record-keeping requirements.
• Gaming and betting activity logs: Retained for 5 years following account closure to support dispute resolution and responsible gaming audits.
• Technical and device data: Retained on a 12-month rolling basis and then purged, unless flagged as part of a fraud or security investigation.
• Support communications: Retained for 3 years from the date of resolution of the relevant support interaction.
• Marketing preference records: Retained for as long as your marketing consent is active; deleted promptly upon withdrawal of consent.

10.2 When data reaches the end of its retention period, it is securely deleted or anonymised such that it can no longer be attributed to any individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

11. Your Privacy Rights

11.1 As a 6www member, you have the following rights in relation to your personal data. These rights can be exercised by contacting the 6www support team as described in Section 16:

• Right of Access: You may request a copy of all personal data 6www holds about you. We will provide this in a structured, commonly used format within 30 days of your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For CNIC-related data, an updated verified document will be required.
• Right to Erasure: Subject to our legal retention obligations (Section 10), you may request deletion of your personal data following permanent account closure. Data subject to a mandatory retention period cannot be deleted until that period has expired.
• Right to Restriction: You may ask 6www to restrict the processing of your personal data in certain circumstances — for example, while a correction request is being assessed.
• Right to Data Portability: Where processing is based on your consent or a contract, you have the right to receive your personal data in a machine-readable format and, where technically feasible, to have it transferred directly to another controller.
• Right to Object: You have the right to object to processing based on legitimate interest. 6www will consider your objection and cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — in particular, marketing communications — you may withdraw that consent at any time with immediate effect. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

11.2 6www will not charge a fee for exercising any of the above rights in ordinary circumstances. If a request is manifestly unfounded or excessive, 6www reserves the right to charge a reasonable administrative fee or decline the request, with written reasons provided.

11.3 Where you are dissatisfied with 6www's response to a privacy rights request, you have the right to lodge a complaint with the relevant supervisory authority under the law of your jurisdiction or the jurisdiction in which 6www holds its gaming licence.

12. Children & Minors (Under 21)

12.1 6www strictly prohibits the use of its platform by any person under the age of 21. This restriction is enforced through mandatory CNIC verification for all Pakistani members. The platform is not directed at, and does not knowingly collect personal data from, any person under the age of 21.

12.2 If 6www becomes aware that personal data has been collected from a person under 21 years of age — for example, where a fraudulent CNIC was used during registration — all data associated with that account will be securely deleted following account closure, except where retention is required for fraud reporting or legal compliance purposes.

12.3 If you are a parent or guardian and believe that a minor under your care has registered on 6www using false identity information, please contact 6www support immediately at [email protected] so that we can investigate and act promptly.

13. Marketing Communications

13.1 6www sends marketing communications — including New Year bonus offers, PSL season promotions, slot game announcements, and reload bonus alerts — exclusively to members who have provided explicit opt-in consent. No marketing messages are sent to members who have not opted in, or who have subsequently opted out.

13.2 You can update your marketing preferences at any time through your 6www account settings or by clicking the unsubscribe link in any marketing email. Opt-out requests take effect immediately and no further marketing communications will be sent following confirmation of your opt-out.

13.3 Opting out of marketing communications does not affect transactional messages — such as deposit confirmations, withdrawal notifications, security alerts, or mandatory responsible gaming communications — which are sent regardless of your marketing preference as they are required for the safe operation of your account.

13.4 6www does not share your contact details with third-party marketers. Any promotional communications you receive from 6www are sent directly by 6www or by a contracted email/SMS delivery provider acting solely on 6www's instructions.

14. Responsible Gaming & Your Data

14.1 6www uses your gaming activity data — including bet frequency, session duration, deposit patterns, and win/loss ratios — as inputs to its responsible gaming monitoring system. This processing is carried out under our licensing obligations and in your genuine interest as a player. It is not used for profiling for commercial purposes.

14.2 Where the responsible gaming system identifies patterns consistent with problem gambling behaviour, 6www may take proactive steps including sending a responsible gaming communication, offering voluntary self-exclusion tools, or — in serious cases — placing temporary account restrictions. These interventions are made in good faith and in accordance with our responsible gaming obligations.

14.3 If you choose to use 6www's self-exclusion tools — whether a temporary cooling-off period or a permanent self-exclusion — a record of that exclusion is retained for the full duration of the exclusion period and for 5 years thereafter. This record is maintained to prevent inadvertent re-registration and to comply with our licensing obligations. Self-exclusion records are never shared with third parties for commercial purposes.

14.4 Members are encouraged to visit the Responsible Gaming page on 6www for full details on available self-help tools, deposit limits, session limits, and how to request a self-exclusion.

15. Changes to This Privacy Policy

15.1 6www reserves the right to update or amend this Privacy Policy at any time. Material changes — those that significantly affect how your personal data is processed or your privacy rights — will be communicated to all registered members via email to your registered address at least 14 days before the change takes effect.

15.2 Non-material changes — such as corrections of typographical errors, clarifications that do not alter the substance of the policy, or updates to contact details — may be made without prior notice. The "Effective Date" at the top of this policy will always reflect the date of the most recent version.

15.3 Your continued use of the 6www platform following notification of a material policy change constitutes acceptance of the revised policy. If you do not accept the revised policy, you must discontinue use of the platform and may request account closure in accordance with the Terms & Conditions.

15.4 Previous versions of this Privacy Policy are available on request by contacting [email protected].

16. Contact Us

16.1 For all privacy-related enquiries, requests to exercise your data rights, or concerns about how 6www handles your personal data, please contact the 6www Data Protection team using the following details:

16.2 When submitting a data rights request, please include your registered email address, your 6www username, and a clear description of the request you are making. We may ask for additional verification to confirm your identity before processing the request — this is to protect against unauthorised access to your personal data.

16.3 This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all previous versions of the 6www Privacy Policy.