six8s Privacy Policy

This Privacy Policy ("Policy") is published by the operator of six8s ("six8s", "we", "us", "our"), the online casino and sports betting platform accessible at six8s.bet. This Policy describes our practices with respect to the collection, use, storage, disclosure, and protection of personal data relating to individuals ("Players", "you", "your") who register accounts, access the Platform, or otherwise interact with six8s.

six8s is committed to handling personal data responsibly, transparently, and in accordance with the data protection obligations applicable under our international gaming licence and applicable privacy standards. We recognise that Pakistani players entrust us with sensitive personal and financial information, and we take that trust seriously.

This Policy should be read alongside the six8s Terms & Conditions and Responsible Gaming policy, which together govern your relationship with the Platform.

six8s collects personal data in several categories depending on the nature of your interaction with the Platform. The categories of personal data we collect include the following:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used for mandatory age verification — 21+ requirement).
• Pakistani Computerised National Identity Card (CNIC) number, where required for KYC verification.
• Residential address, including city (e.g., Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi) and province.
• Pakistani mobile phone number (used for OTP authentication and account security alerts).
• Email address.
• Account username and encrypted password.

2.2 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts (in PKR), timestamps, and payment method identifiers.
• JazzCash and EasyPaisa mobile wallet identifiers used for transactions.
• Bank account details (HBL, UBL, Meezan Bank, Allied Bank, SadaPay) used for withdrawals, to the minimum extent required to process the transaction.
• USDT TRC20 wallet addresses used for cryptocurrency transactions.
• Bonus and promotional credit history.

2.3 Gaming Activity Data

• Game session records, including games played, bet amounts, outcomes, and session durations.
• Sports betting history, including PSL cricket and other markets.
• Account balance history.
• Responsible gaming tool settings, including active deposit limits, loss limits, session time limits, and any self-exclusion records.

2.4 Technical and Device Data

• IP address and approximate geographic location derived therefrom.
• Device type, operating system, and browser information.
• Mobile network operator (relevant for JazzCash and EasyPaisa integrations).
• Platform access timestamps and session logs.
• Cookie identifiers and similar tracking data as described in Section 9.

2.5 KYC Verification Documents

• Copies of government-issued photo identification (CNIC) submitted during identity verification.
• Proof of address documentation where requested.
• Source-of-funds documentation submitted in response to compliance requests.
• Selfie or liveness check images where biometric verification is conducted.

six8s collects personal data through the following channels and mechanisms:

• Directly from you: Information you provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, contacting support, or participating in a promotion.
• Automatically during Platform use: Technical and device data collected automatically through server logs, cookies, and similar technologies when you access the six8s website or use Platform features.
• From payment service providers: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and cryptocurrency processors when you initiate deposits or withdrawals.
• From identity verification providers: Results and data outputs from third-party KYC and identity verification services used to authenticate your identity and age.
• From fraud prevention services: Data returned from fraud detection and anti-money laundering screening tools to protect the integrity of the Platform and its players.
• From game providers: Session and outcome data returned by licensed game providers whose games are accessible through the six8s Platform.

six8s uses the personal data we collect for the following clearly defined purposes:

six8s does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Responsible gaming interventions triggered by account behaviour patterns (such as deposit limit breach alerts) are reviewed by the six8s responsible gaming team before action is taken.

six8s processes personal data on the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil the Terms & Conditions agreement between six8s and the Player, including account management, game provision, and payment processing.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC verification, anti-money laundering checks, and regulatory reporting obligations under six8s's gaming licence.
• Legitimate interests: Processing conducted in pursuit of six8s's legitimate business interests, including fraud prevention, Platform security, responsible gaming monitoring, and Platform improvement — provided such interests are not overridden by the Player's fundamental privacy rights.
• Consent: Where processing is based on your freely given, specific, and informed consent — including, where applicable, direct marketing communications. You may withdraw consent at any time by contacting support.

six8s does not sell your personal data. We do not share your personal data with third parties for their own marketing purposes. Personal data is disclosed to third parties only in the following limited and necessary circumstances:

6.1 Service Providers

six8s engages trusted third-party service providers who process personal data on our behalf and under our instruction. These include:

• Payment processing providers (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and cryptocurrency processors) — for the purpose of executing PKR deposits and withdrawals.
• Identity verification and KYC technology providers — for the purpose of verifying Player age and identity in compliance with licensing requirements.
• Fraud detection and anti-money laundering service providers — for Platform integrity and regulatory compliance.
• Game technology providers — who receive session data necessary to operate certified casino games on the Platform.
• Customer support infrastructure providers — who process communication data to enable the 24/7 live chat support service.
• Cloud hosting and security providers — who store and protect Platform data under strict data processing agreements.

All third-party service providers engaged by six8s are contractually bound to process personal data only for the purposes specified, to maintain appropriate security standards, and not to disclose data to further parties without authorisation.

6.2 Regulatory and Legal Disclosure

six8s may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, by our gaming licence conditions, or by a valid legal order. In such cases, six8s will disclose only the minimum data necessary to satisfy the legal requirement.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of six8s's assets, personal data held by six8s may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material changes to data processing practices that result from it.

six8s retains personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account data: Retained for the duration of your active six8s account, plus a minimum period of five (5) years following account closure — as required by anti-money laundering regulatory obligations applicable under our gaming licence.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, in compliance with anti-money laundering and regulatory record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction for regulatory and audit purposes.
• Gaming session records: Retained for a minimum of two (2) years for responsible gaming monitoring, dispute resolution, and regulatory compliance purposes.
• Responsible gaming records (including self-exclusion): Retained for the duration of any active self-exclusion period plus five (5) years, to ensure the integrity of self-exclusion enforcement if a Player attempts to re-register.
• Customer support communications: Retained for two (2) years from the date of the last communication for dispute resolution and quality assurance purposes.
• Technical logs and device data: Retained for up to twelve (12) months for security and fraud detection purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

six8s implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit AES encryption for personal data stored at rest.
• TLS 1.2/1.3 encryption for all data transmitted between your device and Platform servers.
• OTP-based two-factor authentication for Player account login and withdrawal authorisation.
• Role-based access controls limiting internal access to personal data to authorised personnel with a documented operational need.
• Regular security audits and penetration testing conducted by independent third-party security specialists.
• Secure, geographically redundant data centre infrastructure with physical access controls.
• Incident response procedures ensuring prompt investigation and notification in the event of a data security incident.

six8s uses cookies and similar browser-based tracking technologies to operate Platform functionality, maintain session security, analyse Platform usage, and improve the overall player experience. The following categories of cookies are used on the six8s Platform:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They enable core features such as account login session maintenance, security token management, and language preference storage. These cookies cannot be disabled without disrupting Platform functionality.

9.2 Functional Cookies

Functional cookies allow six8s to remember your preferences and personalise your experience — for example, your preferred deposit method or display settings. These cookies do not track activity across other websites.

9.3 Analytics Cookies

Analytics cookies collect aggregated, anonymised information about how Players use the Platform — including which games are most popular, page load performance, and navigation patterns. This data helps six8s improve the Platform experience for Pakistani players. Analytics data is processed in anonymised or pseudonymised form and is not used to identify individual players.

9.4 Managing Cookies

You can manage and control cookie preferences through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. Disabling functional or analytics cookies will not affect your ability to play games or make transactions but may result in a less personalised experience.

six8s respects your rights in relation to your personal data. The following rights are available to you as a six8s Player. To exercise any of these rights, submit a written request to [email protected] or via the live chat support channel. six8s will respond to all valid data rights requests within 30 days of receipt.

The six8s Platform integrates with third-party services including licensed game providers, payment processors, and identity verification providers. While six8s selects these providers with care and requires them to maintain appropriate data protection standards, their own privacy practices are governed by their respective privacy policies — not by this Policy.

six8s is not responsible for the privacy practices of third-party game providers or payment service providers. Players who have questions about how a specific payment provider (such as JazzCash or EasyPaisa) handles personal data should refer to that provider's published privacy policy directly.

The six8s Platform does not contain links to unaffiliated external websites. Any reference to third-party brand names (such as JazzCash, EasyPaisa, HBL, or Meezan Bank) is made for identification purposes only and does not constitute an endorsement of their data practices.

If six8s becomes aware that personal data has been collected from an individual who is under 21 years of age, the relevant account will be immediately closed, all funds will be frozen pending review, and all personal data associated with that account will be securely deleted to the extent not required to be retained for regulatory purposes.

If you have reason to believe that a minor has registered a six8s account, please contact our support team immediately via live chat so that the matter can be investigated and resolved promptly.

six8s reserves the right to update, amend, or replace this Privacy Policy at any time. Material changes to this Policy — being changes that meaningfully affect how your personal data is collected, used, or shared — will be communicated to registered Players via the mobile number or email address associated with your account, or by a prominent notice on the Platform, a minimum of 14 days before the amended Policy takes effect.

Non-material changes (such as corrections to typographical errors, formatting updates, or clarifications that do not alter the substance of our data practices) may be made without prior notice. The date of the most recent update is always displayed at the top of this page.

Continued use of the six8s Platform following notification of a material amendment constitutes your acceptance of the updated Privacy Policy. If you do not accept the amended Policy, you must discontinue use of the Platform and may request account closure in accordance with the six8s Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data six8s holds about you, please contact our support team using the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly from the six8s Platform after login. This is the fastest channel for urgent privacy concerns.
• Support Email: [email protected] — for written data subject access requests, erasure requests, or detailed privacy enquiries. Please include your registered account username and a description of your request. We respond to all email privacy requests within 30 days.

For responsible gaming concerns or to initiate self-exclusion, please visit the six8s Responsible Gaming page or contact live chat support directly. Responsible gaming requests are handled with priority and take effect immediately.