six77 Privacy Policy

1. Who We Are

This Privacy Policy is published by six77 ("six77", "the Platform", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://six77.app. six77 acts as the data controller in respect of personal data collected through the platform, meaning we determine the purposes and means by which your personal data is processed.

This Privacy Policy applies to all users of the six77 platform, including registered account holders, visitors who browse the platform without registering, and individuals who contact our customer support team. It governs personal data collected through the platform website, any mobile-optimised interfaces, and any direct communications between you and six77.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together form the full agreement between you and six77.

2. Personal Data We Collect

six77 collects only the personal data that is necessary to deliver our services, comply with legal obligations, and protect the security of the platform. The categories of personal data we collect include:

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless you voluntarily provide such information in the context of a responsible gaming self-assessment or support interaction.

3. How We Collect Your Data

six77 collects personal data through the following channels:

3.1 Information You Provide Directly

When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, participate in a promotion, or complete any form on the platform, you provide personal data to us directly. You are responsible for ensuring the accuracy and completeness of the information you submit.

3.2 Data Collected Automatically

When you access the six77 platform, we automatically collect technical and usage data through cookies, log files, and analytics tools. This includes your IP address, device identifiers, browser type, pages visited, and interaction patterns. This data is collected to maintain platform security, detect fraudulent activity, and improve the user experience.

3.3 Data from Third Parties

In limited circumstances, six77 may receive personal data about you from third-party sources, including identity verification service providers engaged for KYC purposes, payment processors confirming transaction details, and fraud prevention databases. All third-party data sources used by six77 operate under contractual obligations consistent with this Privacy Policy.

4. How We Use Your Personal Data

six77 uses the personal data we collect for the following purposes:

• Account Management: Creating, maintaining, and securing your six77 account, including verifying your identity and age.
• Service Delivery: Processing your bets, deposits, withdrawals, bonus claims, and all other platform transactions.
• Legal Compliance: Meeting our obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and licensing regulations, including reporting obligations to regulatory authorities.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, money laundering, and other prohibited conduct on the platform.
• Responsible Gaming: Monitoring gambling patterns to identify signs of problem gambling, applying protective measures, and administering self-exclusion requests.
• Customer Support: Responding to your enquiries, resolving complaints, and maintaining records of your support interactions.
• Marketing Communications: Sending you information about bonuses, promotions, new games, and cricket or PSL betting offers — but only where you have given consent or where we have a legitimate interest in doing so, subject always to your right to opt out.
• Platform Improvement: Analysing usage data in aggregate to improve platform performance, game selection, and the overall user experience.

5. Legal Basis for Processing

six77 processes your personal data on the following legal grounds, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to deliver the services you have signed up for, including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with AML regulations, KYC requirements, licensing conditions, tax reporting obligations, and court or regulatory orders.
• Legitimate Interests: Processing carried out to protect the security and integrity of the platform, prevent fraud, and improve our services — where these interests are not overridden by your rights and interests.
• Consent: Processing for direct marketing communications and certain non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

six77 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

6.1 Service Providers

six77 engages trusted third-party service providers to perform specific functions on our behalf, including identity verification and KYC processing, payment processing (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), game software delivery, customer support platform hosting, and IT infrastructure. These providers are bound by data processing agreements that prohibit them from using your data for any purpose beyond the specific service they provide to six77.

6.2 Regulatory & Legal Authorities

six77 is required by its licensing and regulatory obligations to share certain data with relevant authorities, including financial intelligence units, gaming regulators, and law enforcement agencies. Such disclosures are made only when legally required and in accordance with applicable legal process. six77 will not voluntarily disclose your personal data to governments or law enforcement without a valid legal requirement.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of six77's business, your personal data may be transferred to the relevant successor entity. You will be notified in advance of any such transfer and of any changes to the Privacy Policy that may result.

7. International Data Transfers

The six77 platform serves Pakistani users and is operated with servers and service providers that may be located outside Pakistan. Where personal data is transferred internationally, six77 takes appropriate steps to ensure that your data receives a level of protection consistent with this Privacy Policy and applicable data protection standards.

Such safeguards may include entering into standard contractual clauses with data recipients, relying on adequacy decisions where applicable, or implementing equivalent contractual protections. If you have questions about the specific safeguards applied to international transfers of your data, please contact us using the details in Section 14.

8. Data Retention

six77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and KYC Data: Retained for a minimum of five (5) years from the date of account closure, in compliance with AML and licensing obligations.
• Transaction Data: Retained for a minimum of five (5) years from the date of the transaction for financial regulatory compliance purposes.
• Support Communications: Retained for three (3) years from the date of the interaction for dispute resolution and quality assurance purposes.
• Marketing Consent Records: Retained for the duration of your account and for one (1) year following account closure, as evidence of consent.
• Technical and Usage Logs: Typically retained for twelve (12) months, unless extended due to an ongoing investigation or legal hold.

When personal data is no longer required, six77 will securely delete or anonymise it in accordance with our internal data destruction procedures.

9. Cookies & Tracking Technologies

six77 uses cookies and similar technologies such as local storage and session tokens to operate and improve the platform. Cookies are small text files placed on your device when you visit the platform. They help us keep you logged in, remember your preferences, and understand how the platform is being used.

The types of cookies used by six77 include:

• Strictly Necessary Cookies: Essential for the platform to function. These cannot be disabled as they are required for authentication, session management, and security. No consent is required for these cookies.
• Functional Cookies: Remember your preferences such as language settings, game display options, and notification choices. Disabling these may reduce the quality of your experience.
• Analytics Cookies: Used to collect aggregate data about how players navigate and use the platform. This data is used solely to improve platform performance and is not linked to advertising networks.

six77 does not use advertising or cross-site tracking cookies. You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the platform.

10. Your Data Rights

Depending on applicable law, you may have the following rights in relation to your personal data held by six77. To exercise any of these rights, please contact us using the details provided in Section 14. We will respond to all valid requests within 30 days.

• Right of Access: You may request a copy of the personal data six77 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances, for example while a dispute is being investigated.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests, including profiling, and to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11. Children & Minors

The six77 platform is strictly restricted to individuals aged 21 years and above. six77 does not knowingly collect personal data from individuals under the age of 21. Age verification is carried out during the registration process and as part of mandatory KYC procedures.

If six77 becomes aware that personal data has been collected from a person under the age of 21, the affected account will be immediately suspended, all associated balances will be forfeited, and the data will be securely deleted or retained only to the extent required for regulatory reporting purposes.

If you believe that six77 has inadvertently collected data from a minor, please contact us immediately at the details provided in Section 14 so that we can take prompt corrective action.

12. Security Measures

six77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• TLS 1.2 or higher encryption for all data in transit between your device and the six77 platform
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial data
• Role-based access controls ensuring that staff can only access personal data necessary for their specific job function
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified third-party security professionals
• Continuous monitoring of platform infrastructure for anomalous access patterns and potential security incidents
• Formal data breach response procedures, including notification to affected users and relevant authorities within legally required timeframes in the event of a confirmed breach

Despite our best efforts, no data transmission over the internet or method of electronic storage can be guaranteed to be 100% secure. You are responsible for maintaining the security of your six77 account credentials and for notifying us immediately of any suspected unauthorised access.

13. Changes to This Privacy Policy

six77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform services. The effective date at the top of this page will be updated accordingly whenever material changes are made.

Where changes are material, six77 will notify registered users via email or an in-platform notification prior to the changes taking effect. Your continued use of the six77 platform after the revised Privacy Policy takes effect constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should discontinue use of the platform and may request account closure by contacting our support team.

14. Contact Us & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a privacy-related complaint, you may contact the six77 Data Protection team through the following channel:

Email: support at six77.app

Our support team is available 24 hours a day, 7 days a week, in both English and Urdu. Privacy-related requests and complaints will be acknowledged within 48 hours and handled within 30 calendar days. Where a complaint cannot be resolved to your satisfaction through our internal process, you may have the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction.

This Privacy Policy was last reviewed and updated on 1 January 2026. © 2026 six77. All rights reserved.