Privacy Policy – 6p999

This Privacy Policy ("Policy") is issued by 6p999 ("Platform", "we", "us", "our"), the operator of the website located at https://6p999.cam ("Website"). It describes how we collect, use, store, share and protect the personal data of users ("you", "your") who access or interact with our Website and services.

6p999 is an online gaming information platform serving the Pakistan market and international users. We are committed to protecting personal privacy and to processing personal data lawfully, fairly and transparently in accordance with applicable data protection legislation.

By accessing this Website and using our services, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must cease using the Website immediately.

This Policy should be read alongside our Terms & Conditions, which govern your overall use of the Platform.

In this Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, CNIC number, email address, IP address, financial data and behavioural data.
• "Processing" — any operation performed on personal data, including collection, storage, retrieval, use, disclosure, erasure and destruction.
• "Controller" — 6p999, as the entity that determines the purposes and means of processing personal data.
• "Processor" — any third party engaged by 6p999 to process personal data on its behalf, pursuant to a data processing agreement.
• "Consent" — a freely given, specific, informed and unambiguous indication of your agreement to the processing of your personal data.
• "KYC" — Know Your Customer: identity and address verification conducted to comply with anti-money laundering and fraud-prevention obligations.
• "Cookies" — small text files placed on your device by a website to store session information, preferences and analytical data.
• "Data Subject" — the natural person whose personal data is being processed; in most cases, this is you, the user.

6p999 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

We do not intentionally collect special categories of personal data (such as health data, racial or ethnic origin, political opinions or biometric data) unless strictly required for regulatory compliance and with your explicit consent.

We collect personal data through the following methods:

• Account registration forms — name, email address, date of birth, city;
• KYC submission — identity documents and proof of address;
• Deposit and withdrawal operations — transaction amounts and payment method references;
• Live chat and email support — all correspondence related to your account or queries;
• Responsible gambling tool settings — self-exclusion requests, deposit limit configurations.

• Cookies and similar tracking technologies placed on your device when you visit the Website;
• Server logs recording your IP address, browser type, referring URL and session data;
• Analytics tools measuring page performance, feature usage and user flow patterns.

• Identity verification partners engaged for KYC and anti-fraud screening;
• Payment processors confirming transaction status and amounts;
• Fraud-prevention and security service providers.

Where applicable data protection law requires a legal basis for processing personal data, 6p999 relies on one or more of the following bases:

• Contractual Necessity: Processing required to perform the contract between you and 6p999 — including account management, transaction processing and support;
• Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money laundering (AML) requirements, KYC verification and fraud prevention;
• Legitimate Interests: Processing carried out for the Platform's legitimate business interests — such as fraud detection, security monitoring, product improvement and analytics — where such interests are not overridden by your fundamental rights;
• Consent: Processing based on your freely given, specific and informed consent — primarily for marketing communications and non-essential cookies. Consent may be withdrawn at any time without affecting prior lawful processing.

6p999 uses your personal data for the following specific purposes:

• Account Management: Creating, maintaining and administering your registered account, including authentication and account recovery;
• Transaction Processing: Facilitating deposits and withdrawals, processing payment requests and maintaining transaction records;
• Identity Verification (KYC): Verifying your identity and age to comply with applicable regulations and to prevent fraud and money laundering;
• Customer Support: Responding to your queries, complaints, self-exclusion requests and account issues via live chat and email;
• Responsible Gambling: Administering deposit limits, loss limits, session time controls and self-exclusion requests to support safe and responsible play;
• Platform Improvement: Analysing usage patterns, identifying technical issues and optimising the performance and design of the Website;
• Security & Fraud Prevention: Detecting, investigating and preventing fraudulent transactions, account abuse and other unlawful activity;
• Marketing Communications: Sending you information about promotions, new features and offers — only where you have provided consent and subject to your current marketing preferences;
• Legal Compliance: Meeting our obligations under applicable law, including record-keeping requirements and responding to lawful requests from regulatory or law enforcement authorities.

We do not use your personal data for automated decision-making that produces significant legal effects without human oversight, except where this is required by law or with your explicit consent.

7.1   6p999 does not sell, rent, lease or trade your personal data to any third party for commercial or marketing purposes.

7.2   We may share personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment Processors: To process deposit and withdrawal transactions. Data shared is limited to what is strictly necessary for transaction completion;
• KYC and Identity Verification Partners: Third-party providers engaged to verify identity documents and screen against regulatory watchlists;
• Fraud Prevention Services: Specialised security and anti-fraud technology providers used to detect and prevent account abuse;
• Analytics Providers: Anonymised or aggregated usage data may be shared with analytics platforms to support platform improvement;
• Legal and Regulatory Authorities: Where required by law, court order or a request from a competent authority, we may disclose personal data as necessary. We will notify you of such disclosure where legally permissible;
• Group Companies and Successors: In the event of a merger, acquisition or restructuring, personal data may be transferred to a successor entity, subject to equivalent data protection standards.

7.3   All third-party processors are engaged under contractual terms that require them to handle personal data securely and solely for the purposes specified by 6p999.

8.1   The 6p999 Website uses cookies and similar tracking technologies to operate effectively, improve user experience and gather analytical data. By continuing to use the Website, you consent to our use of cookies as described in this clause.

8.2   We use the following categories of cookies:

8.3   You may manage or disable non-essential cookies through your browser settings. Please be aware that disabling certain cookies may affect the functionality of the Website. Instructions for managing cookies are available in the help section of your browser.

9.1   6p999 retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law or regulatory obligations.

9.2   The following indicative retention periods apply:

• Account Data: Retained for the duration of your account and for a period of up to five (5) years following account closure, to meet regulatory record-keeping obligations;
• KYC Documents: Retained for a minimum of five (5) years following account closure, or longer if required by applicable anti-money laundering regulations;
• Transaction Records: Retained for a minimum of five (5) years in accordance with financial record-keeping requirements;
• Support Communications: Retained for up to three (3) years from the date of the most recent interaction;
• Analytics Data: Anonymised or aggregated data may be retained indefinitely for platform improvement purposes.

9.3   Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents its reconstruction or re-identification.

10.1   6p999 applies industry-standard technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data fields at rest;
• Role-based access controls limiting data access to authorised personnel only;
• Regular security audits and vulnerability assessments;
• Multi-factor authentication for administrative access to production systems;
• Incident response procedures for detecting, containing and notifying affected parties in the event of a data breach.

10.2   Notwithstanding the foregoing, no data transmission over the internet and no system can be guaranteed to be completely secure. The Platform cannot warrant the absolute security of your personal data and accepts no liability for unauthorised access resulting from circumstances beyond its reasonable control.

10.3   In the event of a personal data breach that is likely to result in a significant risk to your rights and freedoms, 6p999 will notify affected users and, where applicable, relevant regulatory authorities, in accordance with applicable data breach notification obligations.

11.1   6p999 operates internationally and your personal data may be transferred to, stored or processed in countries outside of Pakistan. Some of these countries may not have data protection laws that are equivalent to those of your home jurisdiction.

11.2   Where personal data is transferred internationally, 6p999 takes appropriate steps to ensure that such transfers are subject to adequate safeguards, which may include standard contractual clauses, binding corporate rules or other legally recognised transfer mechanisms.

11.3   By using the Website, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Pakistan for the purposes described in this Policy.

Subject to applicable law and certain limitations, you have the following rights in relation to your personal data held by 6p999. To exercise any of these rights, please contact us using the details in Clause 16.

We will respond to all verified data-rights requests within thirty (30) calendar days of receipt. Requests must be submitted in writing and accompanied by sufficient information to verify your identity before we can action them.