6ddd Privacy Policy

This Privacy Policy (hereinafter "Policy") is issued by 6ddd (hereinafter "6ddd", "we", "our", or "the Operator"), the operator of the online gaming platform accessible at https://6ddd.bid (hereinafter "the Platform"). This Policy governs the collection, use, storage, sharing, and protection of personal data relating to individuals who access or use the Platform (hereinafter "you", "your", or "the User").

6ddd is committed to handling your personal data responsibly and in accordance with the data protection obligations imposed by our gaming licence and applicable data protection principles. We recognise that when Pakistani players share their personal information with us — whether during account registration, KYC verification, payment processing, or routine gaming activity — they are placing trust in us to handle that information carefully. This Policy is our formal commitment to honouring that trust.

This Policy should be read in conjunction with the 6ddd Terms and Conditions and Responsible Gaming Policy, both of which are available on the Platform. By registering an account or accessing the Platform, you confirm that you have read and understood this Policy and consent to the data processing activities described herein.

For the purposes of this Privacy Policy, the data controller — the entity that determines the purposes and means of processing your personal data — is 6ddd, the operator of the Platform.

6ddd processes personal data in its capacity as a licensed online gaming operator. The processing activities described in this Policy are carried out under the authority of, and in compliance with, the obligations imposed by 6ddd's international gaming licence, which requires the Operator to maintain a data protection programme proportionate to the sensitivity of the data handled.

If you have any questions, concerns, or requests relating to the processing of your personal data under this Policy, you may contact 6ddd's data privacy contact via the live chat facility available within your account dashboard, or by email at [email protected]. Please include "Privacy Request" in the subject line of any email correspondence relating to data protection matters.

6ddd collects the following categories of personal data in the course of operating the Platform and maintaining player accounts:

6ddd does not collect special categories of sensitive personal data (such as health information, racial or ethnic origin, religious beliefs, or political opinions) except where directly relevant to a responsible gaming assessment requested by the Player.

6ddd collects personal data through the following channels and mechanisms:

• Directly from you: Information you provide during account registration, KYC document submission, payment processing, responsible gaming tool activation, and communications with the 6ddd support team.
• Automatically through Platform use: Technical data including IP addresses, device identifiers, session logs, and game activity records are automatically generated and captured when you access and interact with the Platform.
• From third-party verification services: Where required for identity verification or fraud prevention, 6ddd may receive confirmation data from identity verification service providers. This data is used solely for verification purposes and is not retained beyond what is required for the verification process.
• From payment processors: Transaction confirmation data is received from JazzCash, EasyPaisa, participating banks (HBL, UBL, Meezan), and USDT network processors to confirm deposit and withdrawal transactions.
• From cookies and similar technologies: Session cookies and similar tracking technologies are used to maintain your login session and to analyse Platform usage in aggregated, anonymised form. See Section 11 for full details.

6ddd processes your personal data for the following specific purposes:

• Account Management: To create, maintain, and administer your 6ddd account, including managing your login credentials, account settings, and player profile.
• Payment Processing: To process your deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT TRC20, and to process your withdrawal requests back to your verified payment method.
• Identity Verification (KYC): To verify your identity and age in accordance with our gaming licence obligations, which require us to confirm that all Players are at least 21+ years of age and are who they claim to be.
• Fraud Prevention and AML Compliance: To monitor account activity for signs of fraudulent conduct, money laundering, multi-accounting, and other prohibited activities as required by our licence conditions.
• Gaming Operations: To deliver the gaming services you have requested — cricket betting markets, live dealer casino games, slot games, and all other Platform features — and to maintain accurate records of your gaming activity.
• Responsible Gaming: To administer the responsible gaming tools you activate (deposit limits, self-exclusion, etc.), to monitor for indicators of problem gambling behaviour, and to provide appropriate support and resources where required.
• Customer Support: To respond to your support queries, investigate complaints, and resolve disputes relating to your account or gaming activity.
• Security: To detect and prevent unauthorised access to your account, including monitoring for suspicious login attempts and unusual account behaviour.
• Legal and Regulatory Compliance: To fulfil the data retention, reporting, and audit obligations imposed by our gaming licence and any other applicable legal requirements.
• Marketing Communications: Where you have given your consent, to send you promotional information about 6ddd bonuses, new games, and special offers. You may withdraw this consent at any time — see Section 14.

6ddd processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and 6ddd (as set out in our Terms and Conditions). This covers account management, payment processing, game delivery, and customer support.
• Legal Obligation: Processing is required to comply with legal obligations applicable to 6ddd as a licensed gaming operator. This includes KYC verification, AML monitoring, regulatory reporting, and the administration of responsible gaming tools.
• Legitimate Interests: Processing is necessary for the legitimate interests of 6ddd, including fraud prevention, platform security, abuse detection, and improving Platform functionality — provided that these interests are not overridden by your fundamental rights and freedoms.
• Consent: Certain processing activities — specifically the sending of direct marketing communications — are carried out only where you have given your explicit, freely-given consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6ddd does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

• Payment Service Providers: Transaction data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT network providers solely to process your deposits and withdrawals. These providers are subject to their own privacy obligations and are not authorised to use your data for any purpose beyond processing your transaction.
• Identity Verification Providers: CNIC and identity document data may be shared with accredited identity verification service providers to complete the KYC process required by our gaming licence.
• Game Software Providers: Your gaming session data (but not your identity information) is shared with the third-party game studios and software providers whose games are available on the 6ddd Platform, to the extent required to deliver and settle the games you play.
• Regulatory and Legal Authorities: We may be required to disclose personal data to our licensing authority, law enforcement agencies, financial intelligence units, or courts of competent jurisdiction where required by law, regulation, or court order.
• Fraud Prevention Services: Aggregated or anonymised data, or in serious cases identifiable data, may be shared with cross-operator fraud prevention systems where required to detect and prevent money laundering, fraud, or multi-accounting across the industry.
• Professional Advisers: Personal data may be disclosed to our legal, financial, or audit advisers where necessary for the conduct of their professional services, subject to binding confidentiality obligations.

As 6ddd operates under an international gaming licence, some of your personal data may be processed or stored on infrastructure located outside Pakistan. Where personal data is transferred to service providers or partners located in other countries, 6ddd ensures that appropriate safeguards are in place to protect your data.

Safeguards may include contractual data transfer agreements (incorporating standard contractual clauses or equivalent protections), transfers to jurisdictions that maintain an adequate level of data protection as assessed by recognised international standards, or other legally recognised transfer mechanisms.

By using the 6ddd Platform and accepting this Privacy Policy, you consent to the transfer of your personal data to other countries as described above, where such transfers are necessary for the purposes set out in Section 5 of this Policy.

6ddd retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal and regulatory obligations. The following retention periods apply as general guidelines:

• Active Account Data: Retained for the duration of your active account, plus a minimum period of five years following account closure, as required by our gaming licence for AML and audit compliance.
• KYC and Identity Documents: Retained for a minimum of five years from the date of submission or account closure (whichever is later), in accordance with anti-money-laundering record-keeping requirements.
• Transaction Records: All deposit and withdrawal transaction records are retained for a minimum of five years from the date of the transaction.
• Gaming Activity Logs: Game history and betting records are retained for a minimum of three years, or longer where required for dispute resolution or regulatory audit purposes.
• Support Communications: Live chat transcripts and email correspondence are retained for a minimum of two years.
• Marketing Consent Records: Records of your marketing consent preferences are retained for the duration of the consent, plus evidence of the withdrawal of consent where applicable.

Where retention beyond these periods is not required by legal obligation, 6ddd will securely delete or anonymise the relevant personal data.

6ddd implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS 1.3 Encryption: All data transmitted between your device and the 6ddd Platform is encrypted using TLS 1.3, the current industry-standard transport layer security protocol.
• Access Controls: Internal access to personal data is restricted on a need-to-know basis. Only 6ddd staff members with a legitimate operational reason to access specific data categories are authorised to do so.
• Two-Factor Authentication: Players are encouraged to enable 2FA on their 6ddd accounts. Internally, access to systems containing personal data requires multi-factor authentication.
• Regular Security Assessments: 6ddd undergoes periodic security assessments and penetration testing as part of its ongoing licence compliance programme.
• Incident Response: In the event of a data security incident that may affect your personal data, 6ddd will investigate promptly and notify affected Players and relevant regulatory authorities in accordance with applicable obligations.

6ddd uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you access a website. The following types of cookies are used on the 6ddd Platform:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your language preferences, and ensure the security of your connection. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: These cookies remember your preferences and settings (such as your preferred game lobby view or notification settings) to improve your experience on return visits.
• Analytics Cookies: Aggregated, anonymised analytics cookies help 6ddd understand how Players use the Platform — which features are most popular, where navigation issues arise — so that improvements can be made. These cookies do not identify you individually.
• Security Cookies: Short-lived cookies used to support fraud detection and account security monitoring during your session.

6ddd does not use third-party advertising cookies to serve targeted advertising on external websites. Your gaming activity data is not shared with advertising networks.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform normally.

Subject to applicable legal limitations (including those arising from our regulatory obligations), you hold the following rights in respect of your personal data held by 6ddd:

To exercise any of these rights, contact the 6ddd support team via live chat within your account dashboard or at [email protected] with the subject line "Privacy Request". 6ddd will respond within 30 days of receiving your request. Identity verification may be required before we can action a request.

Please note that certain rights may be limited or overridden by our obligations as a licensed gaming operator — for example, we cannot delete gaming transaction records that we are required to retain for AML compliance, and we cannot delete self-exclusion records during an active exclusion period.

The 6ddd Platform is strictly intended for adults aged 21+ and above. 6ddd does not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory step in the 6ddd account registration and KYC process.

If 6ddd becomes aware that personal data has been collected from an individual under the age of 21 — whether through a failed age verification, a complaint, or any other means — the relevant account will be immediately suspended and all personal data associated with the underage registration will be deleted as quickly as is legally permissible, with the exception of records that must be retained to report the underage access attempt to our licensing authority.

Parents and guardians who believe that a minor in their care may have created an account on 6ddd should contact our support team immediately via live chat or at [email protected]. We will investigate promptly and take appropriate action. We also strongly encourage the use of parental control software tools to restrict minors' access to online gaming platforms.

Where you have given your explicit consent during or after account registration, 6ddd may send you marketing communications regarding promotions, bonuses, new games, and special offers available on the Platform. Marketing communications may be sent via SMS to your registered Pakistani mobile number, or by push notification if you have enabled notifications for the Platform in your browser.

You may withdraw your consent to marketing communications at any time by:

• Updating your notification and communication preferences in your 6ddd account settings panel.
• Replying to any SMS marketing message with "STOP" to unsubscribe from SMS marketing.
• Contacting the 6ddd support team via live chat and requesting removal from marketing lists.

Withdrawal of marketing consent will not affect your ability to use the Platform or receive account-related communications (such as deposit confirmations, withdrawal notifications, security alerts, or responses to your support queries). These operational communications are not marketing and cannot be opted out of while your account is active.

6ddd reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable legal requirements, or changes in our gaming licence conditions. The date of the most recent update is indicated at the top of this Policy.

Where changes to this Policy are material — meaning they significantly affect your rights or the way in which we process your personal data — 6ddd will provide advance notice by posting a prominent notice on the Platform and, where reasonably practicable, by contacting you via your registered mobile number. Non-material amendments (such as clarifications or formatting updates) will take effect immediately upon publication without specific notification.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree to an amended Policy, you should stop using the Platform and request closure of your account in accordance with the procedure described in the Terms and Conditions.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, want to report a privacy concern, or need to report a suspected data breach, please contact the 6ddd privacy team through one of the following channels:

• Live Chat: Available 24 hours a day, seven days a week, via the live chat facility within your 6ddd account dashboard. This is the fastest way to reach us for any privacy query.
• Email: [email protected] — please use the subject line "Privacy Request" for data rights requests or "Privacy Concern" for reporting concerns.

6ddd aims to acknowledge all privacy-related contacts within 24 hours and to provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.