6ddd Privacy Policy — How We Handle Your Personal Data

Who We Are

6ddd is an online casino and sports betting platform accessible at 6ddd.pro, operated for the benefit of adult users aged 21 and over who wish to engage in real-money gaming and sports wagering entertainment, including cricket betting markets covering the Pakistan Super League (PSL) and international fixtures.

For the purposes of this Privacy Policy, "6ddd", "we", "us", and "our" refer to the operating entity behind the 6ddd platform. "You" and "your" refer to any natural person who accesses, registers on, or interacts with the 6ddd platform in any capacity, including visitors who have not yet completed registration.

6ddd acts as the data controller in respect of the personal information collected through the platform. This means we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers to process data on our behalf — such as KYC verification partners or payment processors — those parties act as data processors under our instruction and are subject to contractual data protection obligations.

Data We Collect

6ddd collects only the personal data that is necessary to provide you with a secure, compliant, and fully functional gaming experience. The categories of personal data we collect are set out in the table below:

We do not intentionally collect sensitive personal data beyond what is required for KYC compliance. We do not collect data on religious beliefs, political opinions, health status, or racial or ethnic origin. If you voluntarily provide such information during a support interaction, it will be used solely to resolve your query and will not be stored as a permanent profile attribute.

How We Collect Your Data

6ddd collects your personal data through the following channels and mechanisms:

• Direct submission: Information you provide actively during account registration, the KYC verification process, deposit and withdrawal forms, support chat conversations, email correspondence, and any feedback or survey responses you choose to complete.
• Automated technical collection: Data collected passively as you use the 6ddd platform, including your IP address, session data, device identifiers, and usage behaviour, gathered via server logs, session management systems, and first-party cookies.
• Third-party verification partners: Identity and age verification data processed by our KYC service providers, who confirm the authenticity of your CNIC documents and biometric comparison results. These partners operate under strict data processing agreements and may not use your data for any purpose other than the verification service they provide to 6ddd.
• Payment processors: Transaction confirmation data returned by JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa payment networks in connection with your deposits and withdrawals. 6ddd receives transaction reference numbers and confirmation status — full financial account credentials remain within the payment processor's systems.
• Fraud and AML screening services: Risk signals and screening outcomes from anti-fraud and anti-money-laundering monitoring services, used to protect the platform and comply with applicable regulatory obligations.

Why We Use Your Data

6ddd uses the personal data it collects for the following clearly defined purposes. We do not use your data for any purpose incompatible with the purposes listed below without seeking your fresh consent:

• Account registration and management: To create and maintain your 6ddd Account, verify your identity and age (21+ requirement), and provide you with access to platform features;
• KYC and regulatory compliance: To fulfil our obligations under applicable anti-money-laundering legislation, including verifying your identity, screening your transactions, and retaining records as required by law;
• Payment processing: To process PKR deposits and withdrawals via your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan, Visa) and to match payment records to your account for balance accuracy;
• Game and platform delivery: To operate the casino games, sports betting markets, and associated platform features you use during your sessions;
• Responsible gaming: To monitor betting patterns for signs of problem gambling, enforce deposit limits and self-exclusion requests, and maintain cooling-off periods you have requested;
• Customer support: To respond to your support queries, investigate complaints, and resolve disputes about transactions or game outcomes;
• Security and fraud prevention: To detect and prevent unauthorised account access, bonus abuse, collusion, money laundering, and any other fraudulent or prohibited conduct;
• Marketing communications (consent-based only): To send you promotional information about bonuses, PSL betting offers, new game releases, and platform updates — only where you have explicitly opted in to receive such communications;
• Platform improvement: To analyse aggregated, anonymised usage data to improve platform performance, user experience design, and product development.

Legal Basis for Processing

6ddd processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and 6ddd — including account management, payment processing, and game delivery — is carried out on the basis that it is necessary for the contract you entered into when registering your account;
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC identity verification, AML transaction monitoring, and record retention obligations, is carried out on the basis of legal obligation;
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and anonymised analytics is carried out on the basis of 6ddd's legitimate interests in operating a secure and commercially viable gaming platform, provided those interests are not overridden by your fundamental rights;
• Consent: Processing for marketing communications is carried out solely on the basis of your explicit, freely given, and withdrawable consent. You may withdraw marketing consent at any time through your account settings without affecting any other aspect of your account.

Data Sharing & Disclosure

6ddd does not sell your personal data. We do not share your personal data with third parties for their own marketing purposes. Your data may be shared with carefully selected third parties only in the following defined circumstances:

• KYC / identity verification providers: Your CNIC documents and biometric data are shared with our certified identity verification partner(s) solely for the purpose of conducting the age and identity check required to activate your account. These providers are contractually prohibited from retaining or using your data for any other purpose;
• Payment processors: Transaction data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa as necessary to process your deposit and withdrawal requests. These entities are independent data controllers in respect of their own payment processing operations and have their own privacy policies;
• Game content providers: Where games are delivered by third-party certified providers, minimum technical data (session token, stake amount, game round ID) may be transmitted to that provider's game server to operate the game. No personally identifiable data beyond a pseudonymous session identifier is shared with game providers;
• Fraud and AML screening services: Transaction and technical data may be shared with fraud monitoring and AML compliance service providers who process this data strictly as data processors under our instruction;
• Legal and regulatory authorities: 6ddd may be required to disclose your personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required by applicable law, a valid legal order, or where we reasonably believe disclosure is necessary to prevent fraud, money laundering, or other serious criminal activity;
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of 6ddd's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to how your data is used.

Data Retention

6ddd retains your personal data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is either securely and permanently deleted from all 6ddd systems and backup storage, or anonymised in a manner that prevents re-identification, in accordance with our data destruction procedures.

Security Measures

6ddd implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security controls in place include:

• Encryption in transit: All data transmitted between your device and the 6ddd platform is protected using TLS 1.3 encryption. This includes login credentials, payment transactions, KYC document uploads, and support communications;
• Encryption at rest: Sensitive personal data stored on 6ddd servers — including identity document data and payment references — is encrypted at rest using AES-256 encryption;
• Access controls: Access to personal data within 6ddd's internal systems is restricted on a strict need-to-know basis. Staff with access to sensitive data are subject to background checks and ongoing security training;
• Two-factor authentication: 6ddd offers and strongly recommends two-factor authentication (2FA) via your registered Pakistani mobile number to protect your account from unauthorised access;
• Intrusion detection: 6ddd's platform infrastructure is monitored continuously for anomalous access patterns, brute-force attempts, and other security indicators;
• Payment security: Full card numbers and mobile wallet PINs are never transmitted to or stored by 6ddd — payment credentials are tokenised by the relevant payment processor at the point of entry.

In the unlikely event of a data breach that poses a significant risk to your rights and freedoms, 6ddd will notify affected users promptly and take all necessary steps to contain the breach, assess its impact, and cooperate with relevant regulatory authorities as required.

Cookies & Tracking Technologies

6ddd uses cookies and similar tracking technologies to operate the platform, maintain your session security, and understand how users interact with the platform so we can continue to improve the experience. We do not use third-party advertising cookies or cross-site tracking technologies.

The categories of cookies used on the 6ddd platform are as follows:

• Strictly necessary cookies: These cookies are required for the platform to function. They manage your login session, maintain your authentication state, prevent cross-site request forgery (CSRF), and enable core platform features. You cannot opt out of strictly necessary cookies without losing access to the platform;
• Functional cookies: These cookies remember your preferences — such as your preferred language, remembered device status for 2FA, and notification settings — so you do not need to re-enter them on each visit;
• Analytics cookies (first-party only): 6ddd uses its own first-party analytics to understand aggregate platform usage patterns, identify popular game categories, and measure the performance of platform features. This data is collected in anonymised, aggregated form and cannot be used to identify you individually.

You may manage your cookie preferences, including withdrawing consent for functional and analytics cookies, from within your 6ddd account settings at any time. Withdrawing consent for non-essential cookies will not affect your ability to access your account or use core gaming features.

Your Data Rights

As a user of the 6ddd platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our support team via live chat or at [email protected] — we will respond within 30 calendar days of receiving a valid request.

• Right of access: You have the right to request a copy of the personal data 6ddd holds about you, along with information about how that data is used and with whom it has been shared;
• Right to rectification: You have the right to request correction of any personal data held by 6ddd that is inaccurate or incomplete — for example, a misspelling of your name or an outdated contact number;
• Right to erasure: In certain circumstances — including where data is no longer necessary for the purposes for which it was collected — you may request that 6ddd delete your personal data. This right is subject to overriding retention obligations under AML and regulatory law;
• Right to restrict processing: You have the right to request that 6ddd restrict the processing of your personal data in defined circumstances, such as while a data accuracy dispute is under investigation;
• Right to data portability: Where technically feasible, you may request a copy of the personal data you have provided to 6ddd in a structured, machine-readable format;
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for fraud prevention purposes, where your particular circumstances warrant such an objection;
• Right to withdraw marketing consent: You may withdraw consent for marketing communications at any time through your account notification settings. Withdrawal of marketing consent does not affect any other data processing activities or your ability to use the platform.

Minors & Under-21 Users

6ddd enforces the 21+ age restriction through mandatory CNIC-based identity verification, which requires users to submit their national identity card issued by NADRA before their account is activated for real-money play. No deposits, withdrawals, or real-money gaming activity is permitted until this verification is complete and the user's age has been confirmed as 21 or above.

In the event that 6ddd discovers or is notified that an account has been registered by a person under the age of 21, the following actions will be taken without delay: the account will be immediately suspended, all pending transactions will be blocked, any deposits made will be refunded to the original payment source after verification, and all personal data associated with the account will be deleted from 6ddd's systems as promptly as is operationally possible, subject to any mandatory reporting obligations that may arise under applicable law.

Parents and guardians who are concerned that a minor in their household may be accessing online gaming platforms are encouraged to make use of parental control software and to visit our Responsible Gaming page for guidance on available tools and resources.

International Data Transfers

6ddd's platform infrastructure and certain service providers may be located outside of Pakistan. As a result, your personal data may be transferred to, stored in, or processed in countries other than Pakistan. Where such international transfers occur, 6ddd takes appropriate steps to ensure that your data receives an equivalent level of protection as it would within Pakistan.

Appropriate safeguards for international data transfers employed by 6ddd include:

• Contractual data processing agreements with all third-party processors that include data protection obligations aligned with internationally recognised standards;
• Use of service providers that maintain internationally recognised security certifications such as ISO 27001 or SOC 2 Type II;
• Restricting data transfers to jurisdictions assessed as providing adequate data protection standards.

By registering an account with 6ddd and accepting this Privacy Policy, you acknowledge and consent to the international transfer of your personal data as described in this section, subject at all times to the safeguards described above.

Changes to This Privacy Policy

6ddd reserves the right to update or modify this Privacy Policy at any time. Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — 6ddd will provide at least seven (7) calendar days' advance notice via a prominent notice on the platform and, where practicable, via a notification to your registered email address or Pakistani mobile number.

Non-material changes — such as corrections of typographical errors, structural reformatting, or clarifications that do not alter substantive meaning — may be made without prior notice and will take effect upon publication. The "Last Updated" date shown at the top of this document and in the updated badge in the sidebar will always reflect the date of the most recent revision.

Your continued use of the 6ddd platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any change to this Privacy Policy, you must stop using the platform and may request closure of your account, at which point your data will be handled in accordance with the retention schedule in Section 7.

Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of the data rights described in Section 10, or wish to make a formal privacy-related complaint, please contact 6ddd through the following channels:

• Live Chat: Available 24/7 directly within the 6ddd platform — target initial response within 3 to 5 minutes. This is the fastest channel for urgent privacy concerns such as suspected unauthorised account access;
• Email: [email protected] — please include "Privacy Request" or "Data Rights" in your subject line to ensure your message is routed to the correct team. Standard response time for email privacy requests is within 5 business days;
• Formal Data Subject Request: To submit a formal access, rectification, erasure, or portability request, email us at [email protected] with "Data Subject Request" as the subject line. We will acknowledge receipt within 3 business days and provide a full response within 30 calendar days.

When contacting 6ddd in relation to a data rights request, please include your registered account username and the mobile number associated with your account so we can verify your identity before processing the request. This verification step is necessary to protect your data from being disclosed to unauthorised third parties.