six77 Privacy Policy

01 Introduction

six77 ("the Company", "we", "us", "our") operates the online casino and sports betting platform accessible at six77.vip. In the course of providing our services to players based in Pakistan and internationally, we collect and process certain personal data. This Privacy Policy sets out what data we collect, why we collect it, how we use it, who we share it with, and what rights you have in relation to it.

The Company acts as the data controller in respect of the personal data of registered players and website visitors. We are committed to handling all personal data in a manner consistent with the data protection obligations imposed under our international gaming license and applicable privacy frameworks.

By registering for a six77 account or using the Platform in any way, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform immediately.

02 Data We Collect

six77 collects personal data across several touchpoints during your interaction with the Platform. The categories of data we collect include the following:

We collect only the minimum data necessary to fulfil the purposes outlined in this Policy. We do not knowingly collect sensitive personal data — such as health information or political opinions — unless specifically required by applicable law or regulatory obligation.

03 How We Use Your Data

six77 uses personal data for the following purposes:

• Account management: To create and maintain your registered account, process your login credentials, and communicate account-related information such as balance updates, transaction confirmations, and security alerts.
• Identity and age verification: To confirm that you are at least 21 years of age and to verify your identity as part of our KYC obligations under our international gaming license. This is a legal requirement and cannot be waived.
• Payment processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency channels, and to maintain accurate transaction records.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the features, performance, and overall experience of the six77 Platform.
• Responsible gaming compliance: To monitor player behaviour for indicators of problematic gambling, apply deposit limits or self-exclusion as requested, and fulfil our obligations under our gaming license's responsible gaming requirements.
• Marketing communications: To send you promotional offers, bonus updates, and news about six77 — but only where you have consented to receive such communications. You may withdraw consent at any time.
• Legal compliance: To comply with applicable laws, respond to regulatory enquiries, and fulfil obligations imposed under our international gaming license.

04 Legal Basis for Processing

six77 processes personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and six77, including account management, payment processing, and game access.
• Legal obligation: Processing required to comply with applicable law, regulatory requirements, or the conditions of our international gaming license — including KYC verification, anti-money laundering checks, and age verification.
• Legitimate interests: Processing carried out in the legitimate interests of six77, such as fraud detection, platform security, and internal analytics — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — in particular, the sending of marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

05 Data Sharing & Third Parties

six77 does not sell your personal data. We share personal data with third parties only where necessary and on a strictly controlled basis. Categories of third-party recipients include:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processing partners, for the purpose of executing deposits and withdrawals. These providers are bound by their own privacy and data security obligations.
• KYC and identity verification providers: Third-party services engaged to assist with document verification, liveness checks, and fraud screening during the KYC process. All such providers are contractually required to process data only as directed by six77.
• Game content providers: Licensed game studios and live dealer operators whose games are hosted on the six77 Platform. Certain technical data — such as session identifiers and bet activity — is shared with these providers for the purpose of delivering game functionality.
• IT infrastructure and hosting providers: Companies that provide server infrastructure, database management, and cybersecurity services to six77. These providers access personal data only as necessary to maintain and secure the Platform.
• Regulatory and law enforcement authorities: Government bodies, regulators, or law enforcement agencies where disclosure is required by applicable law, court order, or the terms of our gaming license.

06 Cookies & Tracking Technologies

six77 uses cookies and similar technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function, including maintaining your login session, remembering your language and currency preferences, and enabling secure access to your account. These cookies cannot be disabled.
• Performance and analytics cookies: Used to collect anonymised data about how players navigate the Platform, which pages are visited most frequently, and where technical errors occur. This data is used solely to improve Platform performance.
• Functional cookies: Used to remember your personalisation settings, such as game display preferences and notification configurations, to provide a more tailored experience on return visits.

You can manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. six77 does not use third-party advertising cookies or cross-site tracking technologies.

07 Data Retention

six77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming license obligations. The following general retention principles apply:

• Active accounts: Personal data associated with active accounts is retained for the duration of the account relationship and for a period of up to five years following account closure, in accordance with our anti-money laundering and gaming license obligations.
• KYC documents: Identity verification documents are retained for a minimum of five years from the date of verification, as required under applicable gaming regulations.
• Transaction records: Financial transaction logs are retained for a minimum of five years for audit and compliance purposes.
• Marketing data: Data used solely for marketing purposes is deleted or anonymised within twelve months of your last interaction with a marketing communication, or upon withdrawal of consent, whichever is earlier.
• Technical and usage data: Anonymised or aggregated analytics data may be retained indefinitely as it cannot be used to identify individual users.

08 Your Data Rights

Depending on your jurisdiction and the applicable legal framework, you may have the following rights in relation to your personal data held by six77:

• Right of access: You may request a copy of the personal data six77 holds about you, along with information about how it is being used.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected. For minor corrections such as updating your email address or phone number, you may do this directly through your account settings.
• Right to erasure: In certain circumstances, you may request that your personal data be deleted. Please note that this right may be limited where retention is required by law — for example, for anti-money laundering compliance or to resolve an outstanding dispute.
• Right to restrict processing: You may request that six77 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to a particular use.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to six77's right to demonstrate compelling grounds.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of these rights, please contact the six77 support team at [email protected]. We will respond to all verified requests within 30 days of receipt. We may need to verify your identity before processing any request.

09 Data Security

six77 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• End-to-end encryption of data in transit using TLS 1.2 or higher across all Platform connections.
• Encryption of sensitive data at rest, including identity documents, financial records, and authentication credentials.
• Role-based access controls ensuring that internal staff can only access personal data relevant to their specific job function.
• Regular penetration testing and security audits carried out by independent cybersecurity professionals.
• Comprehensive internal logging and monitoring of all access to personal data systems, with anomaly detection alerts.
• Secure deletion protocols applied to all data upon expiry of the applicable retention period.

While six77 takes all reasonable precautions to secure your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights or freedoms, six77 will notify affected users without undue delay in accordance with our obligations under applicable law.

10 Children & Minors

The six77 Platform is strictly intended for adults aged 21 and above. six77 does not knowingly collect, store, or process personal data relating to persons under the age of 21.

If we become aware that personal data has been provided by or on behalf of a person under the age of 21, we will take immediate steps to delete that data and close the associated account. All funds deposited by an underage user will be returned to the originating payment method, net of any bonuses claimed.

six77 recommends that parents and guardians make use of internet filtering and parental control tools to help prevent minors from accessing online gambling platforms.

11 International Data Transfers

six77 operates under an international gaming license and engages certain service providers who may be located outside Pakistan. As a result, your personal data may be transferred to, stored in, or processed in countries other than Pakistan.

Where such international transfers occur, six77 ensures that appropriate safeguards are in place to protect your data to a standard consistent with this Privacy Policy. Safeguards may include:

• Contractual data processing agreements with third-party providers that impose equivalent data protection obligations.
• Transfers to jurisdictions that are subject to recognised data protection frameworks or adequacy determinations under applicable international standards.
• Technical and organisational security measures applied consistently regardless of where data is stored or processed.

By using the six77 Platform, you acknowledge that your personal data may be transferred internationally as described in this section.

12 Updates to This Privacy Policy

six77 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify registered users via email or a prominent in-platform notice prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically. Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the revised Policy, you should cease using the Platform and request account closure.

13 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which six77 handles your personal data, please contact us through the following channel:

• Email: [email protected] — please use the subject line "Privacy Request" for data-related enquiries.
• Live Support: Available 24 hours a day via the Support page.
• Response time: We aim to acknowledge all privacy-related requests within 5 business days and to resolve them within 30 days.

If you are not satisfied with our response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction, or to refer the matter to the dispute resolution body specified under the terms of our gaming license.