The cards below are a plain-English summary of our key privacy commitments. They do not replace the full legal text that follows. In any conflict the full clause text prevails.
We use industry-standard encryption and access controls to protect your personal data from unauthorised access, disclosure or loss.
We do not sell your personal data to third parties. Data is shared only with service providers necessary to operate the Platform and with regulators where legally required.
You have the right to access, correct, restrict or request deletion of your personal data. Submit a request through the Help Centre or via the contact details provided.
We retain data only as long as necessary for the purposes it was collected, or as required by applicable legal and regulatory obligations. Specific retention periods are detailed in this Policy.
We use cookies and similar tracking technologies to operate the Platform. You can manage cookie preferences through your browser settings. Necessary cookies cannot be disabled.
You can opt out of marketing communications at any time. Transactional and compliance communications (e.g., KYC requests, account security alerts) cannot be unsubscribed from while your account is active.
xis6s ("Platform", "we", "us", "our") is committed to protecting the privacy and personal data of all users ("User", "you", "your") who access or use the services available at https://xis6s.cam (the "Services"). This Privacy Policy ("Policy") describes the personal data we collect, the purposes for which it is processed, the parties with whom it may be shared, how long it is retained, and the rights you have in relation to your personal data.
This Policy applies to all personal data processed in connection with your use of the Services, whether provided during account registration, through the course of gameplay and betting activity, via customer support interactions, or through your use of the Platform's website and mobile interface.
By registering an account or using the Services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read together with our Terms & Conditions, which govern your use of the Services generally.
In this Policy, the following terms have the meanings set out below:
xis6s acts as the Data Controller in respect of the Personal Data of registered users and visitors to the Platform. We determine the purposes and means by which your Personal Data is processed. Where third-party service providers process Personal Data on our behalf, they do so as Data Processors operating under our instruction and are contractually bound to maintain appropriate data protection standards.
For all data protection enquiries, requests to exercise your rights, or complaints regarding the handling of your Personal Data, please refer to the contact information provided in Section 17 of this Policy.
We collect and process different categories of Personal Data depending on the nature of your interaction with the Platform. The categories are summarised in the table below.
| Category | Examples | Collection Trigger |
|---|---|---|
| Identity Data | Full name, date of birth, gender, CNIC or passport number, nationality | Account registration and KYC verification |
| Contact Data | Email address, mobile number, residential address (city, province, country) | Account registration and support communications |
| Financial Data | Payment method details (wallet identifiers, bank account names), deposit and withdrawal history, transaction amounts in PKR | Deposit processing, withdrawal requests, KYC |
| Usage Data | Games played, bets placed, session duration, login timestamps, pages visited, click paths | Automatic collection during Platform use |
| Technical Data | IP address, device type, operating system, browser type and version, device identifiers | Automatic collection via cookies and server logs |
| Communications Data | Live Chat transcripts, email correspondence, support ticket content | Customer support interactions |
| Responsible Gambling Data | Self-exclusion status, deposit and loss limits set, responsible gambling tool usage | Responsible gambling tool activation and adjustment |
| KYC Document Data | Copies of government-issued ID (CNIC, passport), proof-of-address documents, payment method verification images | Identity verification process prior to withdrawal |
We do not intentionally collect special category data (such as health, racial or ethnic origin, religious beliefs or biometric data) unless strictly necessary for a specific legal compliance purpose, such as processing a responsible gambling self-referral that references a health condition. Where such data is provided voluntarily by a User, it will be processed with appropriate safeguards and retained only for the duration necessary to fulfil the relevant purpose.
We collect Personal Data through the following means:
Data you provide directly when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, setting responsible gambling limits, or completing any form on the Platform.
Technical Data and Usage Data are collected automatically when you access the Platform, including through cookies, server logs, and similar tracking technologies as described in Section 11. This data is collected regardless of whether you are logged in to an Account.
We may receive certain data from third-party service providers in the following contexts:
Payment provider names referenced in this Policy — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are used in the context of payment processing data flows only and do not imply endorsement of gambling services by those providers.
xis6s processes Personal Data on the following legal bases depending on the specific processing activity:
We use the Personal Data we collect for the following purposes:
To create and maintain your Account, process deposits and withdrawals, settle bets and casino game results, provide customer support, and deliver all other Services described in our Terms & Conditions.
To verify your identity, age and address in compliance with applicable operator and regulatory requirements. KYC verification is mandatory before any withdrawal is processed. Documents submitted for KYC are retained in accordance with the retention periods in Section 10.
To monitor transactions and account activity for indicators of money laundering, fraud, collusion, match manipulation or other prohibited conduct. We may share data with relevant authorities where legally required or where we are obliged to do so under applicable AML regulations.
To identify patterns of play that may indicate problem gambling behaviour and to apply responsible gambling interventions — including limit notifications, account reviews and self-exclusion processing — in accordance with our responsible gambling obligations.
To send promotional offers, bonus notifications and platform updates by email or in-app messaging, where you have provided consent or where we have a legitimate interest and you have not opted out. You may withdraw consent or opt out of marketing communications at any time through your Account settings or by contacting support.
To analyse usage patterns, measure platform performance, understand user preferences, and develop new features or content. Analytics processing is carried out on aggregated or pseudonymised data where possible.
To comply with applicable laws, regulatory requirements, court orders and lawful requests from competent authorities.
xis6s does not sell Personal Data to third parties. We share Personal Data only in the following circumstances:
We engage third-party service providers to assist in operating the Platform. These providers process Personal Data only on our instruction and under written data processing agreements that bind them to appropriate data protection standards. Categories of service providers include:
We will disclose Personal Data to competent law enforcement agencies, regulatory bodies or courts where required to do so by applicable law, court order, or regulatory direction. We will notify affected Users of such disclosure where legally permissible.
In the event of a merger, acquisition, restructuring or sale of all or part of xis6s's business, Personal Data held by the Platform may be transferred to the acquiring entity. Users will be notified of any such transfer and the privacy terms applicable to their data will be maintained.
Where a User is self-excluded or where we are required to report to a gambling exclusion scheme under applicable licence conditions, we may share limited Personal Data with the relevant scheme operator for the purpose of enforcing exclusion across participating operators.
xis6s may transfer Personal Data to countries outside Pakistan for processing by service providers whose infrastructure or personnel are located in other jurisdictions. Where such transfers occur, we implement appropriate safeguards to ensure that your Personal Data receives a level of protection consistent with the standards described in this Policy.
Safeguards for international transfers may include: data processing agreements containing standard contractual clauses; transfers to jurisdictions with adequacy determinations; or other legally recognised transfer mechanisms.
We retain Personal Data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal, regulatory or contractual obligations. The following indicative retention periods apply:
| Data Category | Indicative Retention Period | Primary Basis |
|---|---|---|
| Account registration and identity data | Duration of account plus minimum 5 years post-closure | Legal / AML obligation |
| KYC documents | Minimum 5 years from date of submission | Regulatory compliance |
| Financial transaction records | Minimum 5 years from transaction date | Legal / AML obligation |
| Betting and gameplay records | Duration of account plus 3 years post-closure | Contractual and legitimate interest |
| Customer support communications | 2 years from last interaction | Legitimate interest |
| Marketing consent records | Until withdrawal of consent plus 12 months | Legal obligation (proof of consent) |
| Technical / log data | Up to 12 months from collection | Legitimate interest (security) |
| Self-exclusion records | Duration of exclusion plus 5 years | Legal and responsible gambling obligations |
Upon expiry of applicable retention periods, Personal Data is securely deleted or anonymised. Where anonymisation is applied, the resulting data is no longer Personal Data and may be retained indefinitely for analytical purposes.
Cookies are small text files placed on your device when you access a website. They enable the website to remember your actions and preferences, measure site performance, and deliver relevant content. xis6s uses cookies and similar technologies including local storage, session storage and pixel tags.
You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. Instructions for managing cookies are available in the help section of all major browsers. Strictly necessary cookies cannot be blocked through browser settings without preventing access to the Platform entirely.
Subject to applicable law and certain exceptions, you have the following rights in relation to your Personal Data held by xis6s:
Request a copy of the Personal Data we hold about you, along with information about how it is processed.
Request correction of inaccurate or incomplete Personal Data we hold about you.
Request deletion of your Personal Data where it is no longer necessary for the purpose collected, subject to legal retention obligations.
Request that we limit processing of your Personal Data in certain circumstances, such as while accuracy is contested.
Request a machine-readable copy of Personal Data you provided to us, where processing is based on consent or contract.
Object to processing based on legitimate interests or for direct marketing purposes. Marketing opt-out takes effect immediately.
Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
Lodge a complaint with the relevant data protection supervisory authority if you believe your rights have been infringed.
To exercise any of the rights above, submit a request through the Help Centre inside your Account or contact us at the email address provided in Section 17. We will respond to verified requests within a reasonable timeframe — typically within 30 days — and may request identity verification before processing a rights request. There is no charge for exercising your rights under this Policy, subject to requests that are manifestly unfounded or excessive.
Certain rights are subject to exceptions. For example, we cannot erase data that we are legally required to retain under AML or KYC regulations regardless of your erasure request. We will inform you of any applicable limitations when responding to your rights request.
xis6s implements technical and organisational measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, disclosure or alteration. These measures include:
While we take appropriate and reasonable security precautions, no security system is completely impenetrable and we cannot guarantee the absolute security of information transmitted over the internet. You are responsible for maintaining the security of your Account login credentials and for notifying us promptly of any suspected unauthorised access.
The Services are strictly intended for adults aged 18 or older — or the higher minimum required by the operator's licence jurisdiction. We do not knowingly collect Personal Data from individuals under the applicable minimum age. If we become aware that Personal Data has been collected from an individual under the minimum age without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated Account.
If you believe that a minor has provided Personal Data to xis6s, please contact us immediately at the contact details in Section 17 so that we can investigate and take appropriate action.
The Platform may contain references to third-party payment providers or services for informational and contextual purposes. If you navigate to a third-party service (including payment provider websites or apps such as Easypaisa or JazzCash), their own privacy policies govern the collection and processing of your data. xis6s is not responsible for the privacy practices of third-party services, and the reference to any third-party provider on this Platform does not constitute an endorsement of their data handling practices.
We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the Platform.
xis6s reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations or Platform services. Revised versions will be published on this page with an updated "Last Updated" date at the top of the document.
Where changes are material — for example, a new category of data being collected, a new purpose for processing, or a change in your rights — we will endeavour to provide advance notice to registered Users via email or a Platform notification before the changes take effect.
Your continued use of the Services following the publication of a revised Policy constitutes acceptance of the updated terms. If you do not accept the changes, you should cease use of the Services and request Account closure.
For all privacy-related enquiries, requests to exercise your data rights, or complaints about how we handle your Personal Data, please contact us through the following channels:
We aim to acknowledge all privacy requests within 5 business days and to provide a substantive response within 30 days. Where a request is complex or where we are processing a high volume of requests, this period may be extended by up to an additional 60 days, and you will be notified accordingly.
If you are dissatisfied with our response to a privacy complaint, you have the right to escalate the complaint to the relevant data protection supervisory authority in the jurisdiction under whose laws your data rights arise.