Privacy Policy – How 6zzz Protects Your Data in Pakistan

1. Introduction

6zzz operates an online entertainment platform offering Casino games, Live Casino tables, Slot games, and Sports Betting — including Cricket, PSL, T20, and Football markets — accessible to adult players in Pakistan. As part of running this platform, we process certain personal data about the people who use it.

This Privacy Policy sets out, in plain English, what data we collect, how we use it, who we share it with, how long we keep it, and what you can do if you want to access, correct, or delete it. We have written this for Pakistani players, so there are no unnecessary legal loops to jump through — if something is unclear after reading, our support team is available around the clock.

By registering a 6zzz account or continuing to use the platform after this policy has been updated, you acknowledge that you have read and understood how your personal data is handled. If you do not agree with how your data is used, please do not register or continue using the platform, and contact support if you wish to close your account.

2. Data We Collect

We collect data in three main ways: information you provide directly when registering or using the platform, information generated automatically when you interact with the site or app, and information we receive from third-party services you use to transact with us.

Information You Provide Directly

Information Generated Automatically

Information From Payment Providers

We do not store full debit card numbers, CVV codes, or complete payment credentials. Payment processing is handled by the payment provider directly. We only retain the reference data needed to verify that a withdrawal is going to the correct, verified account in your name.

3. Why We Collect Your Data

Every piece of data we collect has a specific, defined purpose. The table below maps what we collect to why we need it.

We only collect what we actually need. We do not collect data "just in case" it might be useful later. If a new data collection need arises, this policy will be updated to reflect it before collection begins.

4. Payment Data and PKR Transactions

All deposits and withdrawals on 6zzz are processed in PKR through Pakistani payment methods: JazzCash, Easypaisa, Raast, bank transfer, and debit card. When you make a deposit or request a withdrawal, a transaction record is created in our system. This record includes:

• The PKR amount transacted.
• The date and time of the transaction.
• The payment method used (e.g., JazzCash, Easypaisa, Raast).
• A reference identifier from the payment provider confirming the transfer.
• The account balance before and after the transaction.

Transaction records are retained for a minimum of five years to comply with standard financial record-keeping practices and to support dispute resolution if a transaction is queried at a later date. If you believe a transaction record is incorrect, contact support with your transaction reference number and the issue will be investigated.

Payment data is never shared with third parties for marketing or commercial purposes. It is used solely for processing your transactions, verifying payments, and conducting security checks on unusual transaction patterns.

5. Cookies and Device Data

6zzz uses cookies and similar technologies to make the platform work correctly, keep you logged in between sessions, and monitor for security issues. Here is a breakdown of the types of cookies in use:

• Essential cookies: Required for the platform to function. These handle session management, keeping you logged in, and ensuring secure page navigation. You cannot opt out of essential cookies without stopping the platform from working.
• Security cookies: Used to detect and prevent fraudulent activity including bot access, unusual login patterns, and duplicate account attempts from the same device.
• Performance cookies: Collect anonymous data about how players navigate the platform — which pages load slowly, where errors occur, and how the mobile layout performs on different devices. This data is aggregated and not linked to individual accounts.
• Preference cookies: Remember your platform settings such as language preference and display options so you do not have to reset them each visit.

Most browsers allow you to manage cookie settings from the browser's privacy or settings menu. Blocking all cookies will prevent the platform from functioning correctly, particularly login and payment flows. Selectively blocking non-essential cookies is possible without affecting core platform functionality.

Device data — including your operating system, browser version, screen resolution, and approximate location derived from IP address — is collected automatically when you access the platform. This data is used for security monitoring and platform optimisation only. Location data is used at city or region level — not precise GPS tracking.

6. When We Share Your Data

6zzz does not sell, rent, or trade your personal data with any third party. Data sharing is limited to the following specific, necessary circumstances:

• Payment processors: JazzCash, Easypaisa, Raast, and banking partners receive the minimum data needed to complete a transaction — typically a reference amount and account identifier. They do not receive your full account profile.
• Identity verification services: When you submit your CNIC for verification, the document images are processed by a verification service provider operating under strict data handling obligations. Verified status is returned to 6zzz; the document images are not retained by the verification provider beyond the immediate check.
• Game software providers: Third-party Casino, Slot, and Live Casino providers receive a session token and stake data to run game rounds. They do not receive your name, CNIC, or payment details.
• Fraud and security services: Aggregated, anonymised activity data may be shared with security partners for pattern analysis to detect platform-level abuse. No personally identifiable data leaves the platform for this purpose.
• Legal requirements: If 6zzz is required to disclose data under a valid legal process or to prevent serious harm, we will comply with the minimum disclosure necessary. We will notify you if such a disclosure occurs unless legally prevented from doing so.

All third-party service providers that handle any portion of player data are contractually required to maintain data security standards consistent with the protections described in this policy. We review these arrangements periodically.

7. How Long We Keep Your Data

Data retention periods vary based on the type of data and why it was collected. The general approach is to keep data only as long as it is necessary for the purpose it was collected.

• Active account data: Retained for the full duration your account is active on the platform.
• Transaction records: Retained for a minimum of five years from the date of the transaction, consistent with standard financial record-keeping practice.
• CNIC verification data: Retained for the duration of the account and for a period after closure to support any post-closure dispute or legal query. Document images are handled with the highest security classification within our systems.
• Support communication logs: Retained for two years from the date of the last message in a thread, after which they are deleted unless linked to an active dispute or investigation.
• Session and device logs: Retained for 90 days for security monitoring purposes, then deleted on a rolling basis.
• Closed accounts: After account closure, personal data is retained in a restricted state for a period sufficient to handle any outstanding financial, legal, or responsible gaming matters, then securely deleted or anonymised.

If you request deletion of your personal data, we will action it where legally and operationally possible. Transaction records tied to financial obligations cannot be deleted before the minimum retention period expires, but all other personal data can be removed or anonymised on request.

8. How We Protect Your Data

Security is taken seriously at every layer of the 6zzz platform. The following measures are in place to protect your personal data:

• Encryption in transit: All data transmitted between your device and the 6zzz platform is encrypted using TLS. This includes login credentials, payment references, and support messages.
• Encryption at rest: Sensitive data stored in our systems — including CNIC information and payment references — is encrypted at the storage level.
• Access controls: Access to personal data within 6zzz's internal systems is restricted on a need-to-know basis. Support staff access only the account data relevant to a query they are handling. No bulk access to personal data is permitted.
• Fraud monitoring: Automated systems monitor account activity, login behaviour, and transaction patterns for anomalies. Unusual activity triggers a review before any sensitive action (such as a withdrawal) is processed.
• Two-factor authentication: Account login can be secured with two-factor authentication. Players are encouraged to enable this through their account security settings.

No system is completely immune to breach. In the unlikely event of a data security incident that affects your personal data, we will notify you through your registered email address without unnecessary delay. We will also take immediate steps to contain and investigate the incident.

You also play a role in keeping your account secure. Use a strong, unique password for your 6zzz account, do not share your login details with anyone, and contact support immediately if you notice activity on your account that you did not initiate.

9. Your Rights Over Your Data

As a player on 6zzz, you have meaningful rights over your personal data. Here is what you can request at any time by contacting our support team:

• Access: Request a copy of the personal data 6zzz holds about you. We will provide this within a reasonable timeframe and in a readable format.
• Correction: If any of your personal data is inaccurate or out of date, request a correction. Basic account details such as your email or mobile number can be updated directly from your account settings.
• Deletion: Request deletion of personal data that is no longer needed for the purposes it was collected. This does not apply to transaction records within their mandatory retention period or data required for an active legal matter.
• Restriction: Request that we limit processing of your data while a correction or deletion request is being reviewed.
• Objection to marketing: If we ever use your data for direct marketing communications, you have the right to opt out at any time through your account notification settings or by contacting support.

To exercise any of these rights, contact the 6zzz support team through the platform's live chat or messaging system. We will verify your identity before processing any data access or deletion request, to make sure we are dealing with the account holder and not a third party.

10. Minors and Under-18 Access

The 6zzz platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. Age is verified during the registration process and again at the point of identity verification before a withdrawal is processed.

If we become aware that a minor has registered an account or provided personal data through the platform, we will close that account immediately and securely delete all associated personal data as quickly as possible, retaining only the minimum needed to prevent re-registration.

If you are a parent or guardian and have reason to believe a minor under your care has accessed the platform, please contact support immediately with the account details. We will investigate and act promptly. Parents and guardians are encouraged to use device-level parental controls and to speak openly with young people about responsible online behaviour.

11. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time as the platform evolves, new services are introduced, or to reflect changes in standard data handling practices. When material changes are made, registered players will be notified via their registered email address before the changes take effect.

The "Last Updated" date at the top of this page will always reflect when the most recent revision was made. We recommend checking this page periodically, particularly when using a new platform feature for the first time. Continued use of the platform after a policy update has been notified constitutes acceptance of the revised terms.

Minor editorial changes — such as correcting a typo or clarifying wording without changing the substance — may be made without advance notice, though the "Last Updated" date will be revised.

12. Contact Us About Privacy

If you have a question about this Privacy Policy, want to exercise your data rights, or have a concern about how your personal information has been handled, please reach out to the 6zzz support team. Support is available around the clock via live chat within the platform.

When contacting us about a data matter, please include your registered email address or account username so we can locate your account and respond accurately. We aim to respond to all privacy-related queries within two business days.

You can also find more information about how we handle your data in our Terms and Conditions and our Responsible Gaming page, both of which contain data-relevant sections that complement this policy.