s6six Privacy Policy —
How We Protect Your Personal Data

1 Introduction

This Privacy Policy is issued by s6six (referred to as "s6six", "we", "us" or "our") and applies to all personal data collected through the s6six platform accessible at https://s6six.bio, including all associated services, account management tools, gaming products, payment processing functions, and customer support channels.

s6six is committed to handling the personal data of all registered players — particularly our Pakistani player base — with transparency, care and strict compliance with applicable data protection principles. We recognise that Pakistani players entrust s6six with sensitive personal information including identity documents, mobile numbers and payment account details. This Policy explains precisely what we do with that information and why.

2 Who We Are — Data Controller

For the purposes of this Privacy Policy, s6six — operating the platform at https://s6six.bio — acts as the data controller in respect of personal data collected from players using the platform. As data controller, s6six determines the purposes for which personal data is collected and the means by which it is processed.

s6six operates under an international gaming licence. The platform serves players in markets where access to online gaming is not expressly prohibited, including players based in Pakistan who access the platform via https://s6six.bio.

For all data protection queries, requests and complaints, players may contact the s6six data protection team at: [email protected] — please note this is a plain text address only and is not formatted as a clickable link. Type this address directly into your email client.

3 Categories of Personal Data We Collect

s6six collects the following categories of personal data from players who register and use the platform:

4 How We Collect Your Personal Data

s6six collects personal data through the following channels and mechanisms:

• Direct Provision by You: Information you actively provide during account registration (mobile number, password), KYC submission (CNIC images, selfie), payment method setup (JazzCash/EasyPaisa account numbers, bank details), and any communications you initiate with the s6six support team.
• Automated Technical Collection: Data collected automatically when you access and use the s6six platform, including IP address, device identifiers, browser characteristics, session timing, page navigation patterns and gameplay data — generated by cookies, server logs and embedded analytics tools.
• Payment Processing Partners: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay and USDT TRC20 blockchain networks when you deposit or withdraw funds via s6six.
• Identity Verification Services: In certain circumstances, s6six may use third-party identity verification services to cross-reference CNIC data provided during KYC verification. These services process data under strict contractual data processing agreements with s6six.
• Game Providers: s6six's game studio partners (who provide slot games, live casino content and fishing games) may pass back technical and gameplay data as part of their game delivery infrastructure. This data is used for game performance monitoring and dispute resolution.

5 How s6six Uses Your Personal Data

s6six processes personal data for the following specific and documented purposes:

• Account Operation: Creating, managing and maintaining your s6six account, authenticating your identity at login (including OTP delivery to your registered Pakistani mobile), and providing access to the full suite of s6six gaming services.
• KYC Identity Verification: Verifying your identity and age (21+) as required by our gaming licence obligations and anti-money laundering compliance framework. Your CNIC data is used solely for this purpose and is not used for any marketing or profiling activity.
• Payment Processing: Executing your deposit and withdrawal requests through your chosen payment method — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay or USDT TRC20. Financial transaction records are maintained for the periods required by AML regulations.
• Responsible Gaming: Monitoring your gaming activity patterns to identify behaviours that may indicate problem gambling and to apply the deposit limits, loss limits, session controls and self-exclusion settings you configure in your s6six account.
• Fraud Prevention & Security: Detecting and preventing unauthorised account access, fraudulent transactions, bonus abuse, money laundering and any other prohibited conduct defined in the s6six Terms & Conditions.
• Customer Support: Responding to your queries, resolving disputes, investigating complaints and providing technical support via live chat and email.
• Legal Compliance: Fulfilling obligations under the gaming licence under which s6six operates, responding to lawful regulatory or law enforcement requests, and maintaining records as required by applicable AML legislation.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the s6six platform, optimise game performance for Pakistani mobile networks, and enhance the overall player experience.
• Marketing Communications: Sending you information about s6six promotions, bonuses and new game launches — exclusively where you have given explicit consent to receive such communications. You may withdraw marketing consent at any time via your account settings.

6 Legal Basis for Processing

s6six processes your personal data on the following legal bases:

• Performance of Contract: Processing necessary to deliver the s6six gaming services you have contracted for — account management, payment processing, game access and customer support.
• Legal Obligation: Processing required to comply with s6six's obligations under its gaming licence, anti-money laundering regulations and applicable data retention laws — including CNIC-based KYC verification and transaction record-keeping.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring and technical platform improvement — where these interests are not overridden by your fundamental privacy rights.
• Consent: Processing for marketing communications and optional data collection activities — which you may withdraw at any time by updating your s6six account preferences or contacting [email protected].

7 Cookies & Technical Tracking

The s6six platform uses cookies and similar technical tracking technologies to deliver its services and improve the player experience. The following types of cookies are used:

• Essential Cookies: Strictly necessary for the operation of the s6six platform — including session management, authentication tokens, and security features such as CSRF protection. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your platform preferences — such as language settings, responsible gaming limit configurations and display preferences — so you do not need to reset them on each visit.
• Analytics Cookies: Collect aggregated and anonymised data about how players interact with the s6six platform — page load times, game loading performance on Pakistani mobile networks, navigation paths and session durations. This data is used exclusively to improve the platform.
• Security Cookies: Support s6six's fraud detection infrastructure by maintaining session integrity and detecting unusual access patterns that may indicate unauthorised account access.

8 Data Sharing with Third Parties

s6six does not sell your personal data. We share personal data with third parties only in the following limited and documented circumstances:

• Payment Processing Partners: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank and SadaPay receive the transaction data necessary to process your deposits and withdrawals. Each payment partner operates under their own privacy policy and is bound by applicable Pakistani financial regulations.
• Game Technology Providers: s6six's certified game studio partners receive the minimum technical data necessary to deliver their gaming content — typically a pseudonymous player identifier and session token. Game providers do not receive your name, CNIC or payment information.
• Identity Verification Services: Third-party KYC service providers process your CNIC data for identity verification purposes under strict contractual data processing agreements and are prohibited from using this data for any purpose beyond the verification service.
• Regulatory and Law Enforcement Authorities: s6six will disclose personal data to competent regulatory bodies or law enforcement authorities where required to do so by law, court order or legitimate regulatory request. s6six will notify affected players of such disclosures where legally permitted to do so.
• Cloud Infrastructure Providers: s6six uses cloud server infrastructure to host the platform. Our infrastructure providers process data solely as processors under s6six's instructions and are bound by data processing agreements requiring them to maintain appropriate security standards.

9 KYC & AML Data Processing

The collection and processing of KYC (Know Your Customer) data — including your CNIC number, CNIC images, date of birth and selfie photograph — is a mandatory requirement of s6six's gaming licence and anti-money laundering compliance programme.

KYC data is processed specifically for:

• Confirming that you are a real individual and are at least 21 years of age;
• Verifying that your identity matches the Pakistani mobile number and payment accounts associated with your s6six account;
• Screening your identity against sanctions lists and politically exposed persons (PEP) databases as required by AML regulations;
• Maintaining records of identity verification as required by our gaming licence for the retention periods specified in Section 12 of this Policy.

10 Payment Data Processing

When you make a deposit or request a withdrawal at s6six, your payment account details are collected and processed solely for the purpose of executing the transaction. The following applies to payment data at s6six:

• JazzCash and EasyPaisa account numbers associated with your s6six profile are stored in encrypted form and are linked to your account to facilitate instant deposits and the 5–15 minute withdrawal process for verified accounts.
• Bank account details (account number, IBAN) provided for HBL, UBL, Meezan Bank or Allied Bank withdrawals are retained only for the period during which they remain the active withdrawal method on your account.
• USDT TRC20 wallet addresses are recorded as part of transaction history for AML record-keeping purposes and are retained for the period required under applicable regulations.
• All deposit and withdrawal transaction records are maintained in PKR denomination and are retained for a minimum of five years following the transaction date as required by AML record-keeping obligations.
• s6six does not store full payment card numbers. s6six does not currently accept credit card deposits.

11 Data Security Measures

s6six implements the following technical and organisational security measures to protect your personal data against unauthorised access, loss, disclosure, alteration or destruction:

• Encryption in Transit: All data exchanged between your device and the s6six platform is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all pages of the platform, including the s6six login interface, payment pages and KYC upload screens.
• Encryption at Rest: Sensitive personal data — including CNIC images, payment account details and account passwords — is stored in encrypted form on s6six servers. Passwords are stored as one-way cryptographic hashes and cannot be recovered or read by s6six staff.
• Access Controls: Access to systems holding personal data is restricted to s6six employees and contractors who require access to perform their specific role. All access is logged and subject to periodic access review.
• Two-Factor Authentication: The s6six platform supports two-factor authentication via SMS OTP to your registered Pakistani mobile number, providing an additional layer of security for your account beyond the username and password combination.
• Fraud Detection Systems: s6six operates automated fraud detection systems that monitor for unusual login activity, payment patterns and gameplay anomalies that may indicate account compromise or fraudulent use.
• Security Auditing: s6six's platform infrastructure and data security practices are subject to periodic independent security review.

Whilst s6six implements robust security measures, no internet-based platform can guarantee absolute security. Players are strongly encouraged to use a strong, unique password for their s6six account and to enable two-factor authentication through the account security settings.

12 Data Retention Periods

s6six retains personal data only for as long as necessary to fulfil the specific purpose for which it was collected, or for the periods required by applicable regulatory and legal obligations:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player.

13 Your Data Protection Rights

As a player whose personal data is processed by s6six, you have the following data protection rights, exercisable by contacting s6six at [email protected] (plain text — not a clickable link):

• Right of Access: You may request a copy of all personal data held about you by s6six, together with information about the purposes for which it is processed.
• Right to Rectification: You may request correction of any inaccurate personal data held about you by s6six. This right is subject to the constraint that KYC data must accurately reflect your real identity as evidenced by your CNIC.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. This right is subject to overriding obligations — for example, s6six cannot delete financial transaction records that must be retained for AML compliance purposes.
• Right to Restrict Processing: You may request that s6six restrict its processing of your personal data in certain circumstances — for example, while a dispute regarding data accuracy is being investigated.
• Right to Data Portability: Where processing is based on your consent or performance of a contract, you may request that your personal data be provided to you in a structured, commonly used and machine-readable format.
• Right to Object: You may object to processing of your personal data where it is based on s6six's legitimate interests, including processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

s6six will respond to all verified data rights requests within 30 days. Where a request is complex or numerous, s6six may extend this period by a further 60 days, with notification provided to you within the initial 30-day period.

14 Children's Privacy — 21+ Strict Policy

Age verification is enforced through mandatory CNIC-based KYC verification. CNIC documents confirm both identity and date of birth. Any player who provides false date of birth information or misrepresents their age during registration or KYC verification will have their account permanently suspended and associated funds forfeited, irrespective of the platform activity conducted on the account prior to discovery.

Parents and guardians who believe their minor child may have accessed the s6six platform should contact s6six immediately at [email protected] (plain text only). s6six will investigate and take immediate remedial action upon receipt of such a report.

15 Responsible Gaming Data Processing

s6six processes gaming activity data — including session durations, bet volumes, win/loss patterns and deposit frequency — for the purpose of responsible gaming monitoring. This processing is conducted to:

• Apply the deposit limits, loss limits and session timers that you configure in your s6six account responsible gaming settings;
• Identify patterns in your gaming behaviour that may be consistent with problem gambling and, where identified, initiate welfare contact in line with s6six's responsible gaming programme;
• Enforce self-exclusion periods that you request through the s6six account self-exclusion tools — preventing access to the platform for the duration of the selected exclusion period;
• Maintain records of responsible gaming interventions and communications in connection with your account for audit and regulatory purposes.

Responsible gaming data is treated with the same level of confidentiality as all other personal data at s6six and is not disclosed to third parties except where required for regulatory compliance. For more information on s6six's responsible gaming programme, please visit the Responsible Gaming page.

16 Changes to This Privacy Policy

s6six reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the features and services offered on the s6six platform. The current version of the Privacy Policy, together with its effective date, is always accessible at https://s6six.bio/privacy-policy.

Continued use of the s6six platform following the posting of an updated Privacy Policy constitutes acceptance of the revised Policy.

17 Contact Us — Privacy Queries

For all privacy-related queries, data subject rights requests, complaints or concerns regarding the processing of your personal data by s6six, please contact us through the following channels:

• Privacy Email: [email protected] — plain text only, not a clickable link. Please include "Privacy Request" in the subject line of your email.
• Live Chat: Available 24 hours a day through the s6six platform after logging in to your account. Our support team can take initial details of privacy queries and escalate to the data protection team.
• Platform: https://s6six.bio

s6six aims to respond to all privacy queries within 5 business days and to resolve formal data subject rights requests within 30 days.

This Privacy Policy was last reviewed and updated: 1 January 2026. Version 2.1. © 2026 s6six. All rights reserved. s6six is operated under an international gaming licence. All gaming at s6six is for adults aged 21 and above and is for entertainment purposes only. Play responsibly.