Privacy Policy

This Privacy Policy ("Policy") is issued by six6s ("we", "us", "our", or "the Platform") and governs the collection, use, storage, sharing, and protection of personal data relating to users ("you", "your", or "User") of the six6s website and associated services available at https://six6s.casa.

six6s is committed to protecting the privacy and security of all Users, including players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia. We process personal data only for the purposes described in this Policy and only to the extent necessary to provide the services offered on the Platform.

By creating an Account on six6s or by using any part of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including name, identification number, contact details, financial data, and online identifiers.
• "Processing" means any operation or set of operations performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, six6s.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller under a contractual arrangement.
• "KYC Data" means identity verification documents submitted by a User, including government-issued identification (e.g., MyKad, passport) and proof of address.
• "Transaction Data" means records of deposits and withdrawals processed through the Platform, including payment method details, amounts, timestamps, and reference numbers.
• "Usage Data" means information automatically collected about how a User interacts with the Platform, including IP address, browser type, session duration, pages visited, and game activity.

six6s collects the following categories of personal data from Users:

six6s does not collect or process special category data (e.g., health data, racial or ethnic origin, religious beliefs) unless specifically required by law or provided voluntarily by the User in the context of a responsible gambling request.

six6s collects personal data through the following means:

• 4.1 Direct submission: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting Customer Support, or participating in any promotion.
• 4.2 Automated collection: Technical and usage data collected automatically via cookies, session tracking technologies, server logs, and analytics tools each time you access the Platform.
• 4.3 Payment processors: Transaction reference data received from integrated payment providers when you use services such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, or Hong Leong. Note: six6s does not receive full card numbers or bank passwords.
• 4.4 Third-party identity verification providers: Where KYC verification is performed through a third-party identity verification service, six6s may receive a verification result and associated identity data from that provider.
• 4.5 Fraud detection and compliance systems: Data generated by automated risk assessment tools that monitor transactions and gameplay for suspicious patterns, in compliance with anti-money laundering (AML) obligations.

six6s processes personal data for the following specific purposes:

• 5.1 Account management: Creating, maintaining, and administering your six6s Account, including authentication and security.
• 5.2 KYC and identity verification: Verifying your identity and age (21+ requirement) in compliance with regulatory obligations applicable to gambling platforms.
• 5.3 Payment processing: Facilitating deposits and withdrawals in MYR via your chosen payment method, and maintaining records for financial reconciliation and dispute resolution.
• 5.4 Service delivery: Providing access to casino games, sports betting markets (EPL, Liga Super Malaysia, UFC, and others), live dealer tables, and all other Platform features.
• 5.5 Compliance and legal obligations: Meeting our anti-money laundering (AML), counter-terrorism financing (CTF), and KYC obligations, and cooperating with regulatory authorities as required by law.
• 5.6 Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, bonus abuse, multiple account creation, and other prohibited conduct.
• 5.7 Responsible gambling: Monitoring gaming behaviour to identify signs of problem gambling, enforcing self-exclusion requests, and administering responsible gambling tools including deposit limits and cooling-off periods.
• 5.8 Customer support: Responding to queries, processing complaints, and providing technical assistance via live chat and email.
• 5.9 Marketing communications: Sending promotional offers, bonus notifications, and platform updates to Users who have opted in to receive such communications.
• 5.10 Platform improvement: Analysing usage patterns to improve the functionality, performance, and user experience of the Platform.

six6s processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to at registration — including Account creation, game access, and payment processing.
• Legal obligation: Processing required to comply with applicable laws — including KYC/AML regulations and age verification requirements (21+).
• Legitimate interests: Processing necessary for our legitimate business interests where those interests are not overridden by your rights — including fraud detection, security monitoring, and Platform analytics.
• Consent: Processing based on your explicit consent — including marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

six6s does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your personal data with the following categories of recipient, strictly for the purposes described in this Policy:

• 7.1 Payment service providers: Including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency processing partners — to process deposits and withdrawals.
• 7.2 Identity verification providers: Third-party KYC and AML screening services engaged to verify User identities and screen against sanction lists.
• 7.3 Game content providers: Game studios and aggregators whose content is hosted on the Platform may receive session and gameplay data as required for game delivery and auditing.
• 7.4 IT and infrastructure providers: Cloud hosting providers, database administrators, and cybersecurity services that support Platform operations under strict data processing agreements.
• 7.5 Regulatory and law enforcement authorities: Where required by law, regulation, court order, or lawful request from a competent authority, six6s will disclose User data as necessary.
• 7.6 Professional advisors: Legal, financial, and audit professionals engaged by six6s where necessary, subject to professional confidentiality obligations.

In some circumstances, personal data processed by six6s may be transferred to, or accessed by, entities located in countries outside Malaysia. This may occur where our IT infrastructure, payment processors, KYC providers, or game studios operate from international jurisdictions.

Where personal data is transferred internationally, six6s ensures that appropriate safeguards are in place to protect your information, which may include contractual arrangements based on standard data protection clauses, or transfers to jurisdictions recognised as providing an adequate level of data protection.

If you require more information about the safeguards in place for any specific international transfer, please contact us using the details provided in Section 15 of this Policy.

six6s retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

• Account data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of submission or from the date of Account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years for financial compliance and audit purposes.
• Support communications: Retained for up to two (2) years from the date of the last interaction, unless required to be retained longer for compliance or dispute resolution purposes.
• Marketing data: Retained until you withdraw your consent to receive marketing communications, at which point your details will be suppressed from future campaigns.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our internal data destruction procedures.

six6s implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard 256-bit SSL/TLS encryption.
• Access controls: Personal data is accessible only to authorised personnel on a strict need-to-know basis. Access logs are maintained and reviewed regularly.
• Penetration testing: The Platform undergoes regular security assessments, including vulnerability scanning and penetration testing by qualified security professionals.
• Two-factor authentication: Account holders are encouraged to enable two-factor authentication (2FA) to enhance the security of their Account login.
• Incident response: six6s maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights, we will notify affected Users and relevant authorities as required by applicable law.

six6s uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us recognise you, remember your preferences, and understand how you interact with the Platform.

We use the following categories of cookies:

• Essential cookies: Necessary for the basic functionality of the Platform, including maintaining your session and processing transactions. These cannot be disabled.
• Performance cookies: Used to collect anonymised analytics data about how Users navigate the Platform — such as which games are most visited and average session durations. This data helps us improve Platform performance.
• Functional cookies: Used to remember your preferences, such as language settings and display preferences, to provide a more personalised experience.
• Marketing cookies: Used (with your consent) to deliver relevant promotional messages and track the effectiveness of marketing campaigns.

You can manage your cookie preferences through your browser settings at any time. Note that disabling performance or functional cookies may affect the quality of your experience on the Platform. Disabling essential cookies will prevent the Platform from functioning correctly.

Subject to applicable data protection laws, you have the following rights in relation to your personal data held by six6s:

• 12.1 Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• 12.2 Right to Rectification: You may request that inaccurate or incomplete personal data be corrected or updated. You can also update certain details directly through your Account settings.
• 12.3 Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any legal obligations requiring us to retain certain records.
• 12.4 Right to Restriction: You may request that processing of your data be restricted in certain circumstances, such as while the accuracy of the data is being contested.
• 12.5 Right to Data Portability: You may request a structured, machine-readable copy of the personal data you have provided to us, where technically feasible.
• 12.6 Right to Object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• 12.7 Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our Customer Support team via live chat or by email at support@six6s.casa. We will respond to all verified requests within 30 calendar days. In certain circumstances, identity verification may be required before a request can be processed.

The six6s Platform is strictly restricted to individuals aged 21 years and above. six6s does not knowingly collect, process, or retain personal data from minors. If we become aware that an Account has been registered by a person under the age of 21, that Account will be immediately suspended and all associated personal data will be deleted in accordance with applicable law.

If you are a parent or guardian and have reason to believe that a minor has registered an Account on six6s, please contact our Customer Support team immediately so that we can take appropriate action.

six6s reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. Where changes are material, we will provide reasonable notice by posting a prominent notice on the Platform and, where appropriate, by sending an email notification to the address registered to your Account.

The "Last updated" date at the top of this Policy indicates when the current version came into effect. Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically.

If you have any objection to a revised version of this Policy, please cease using the Platform and contact us to close your Account, at which point any outstanding balance will be processed for withdrawal subject to our standard Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by six6s, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the six6s Platform. Typical response time is under 5 minutes.
• Email: support@six6s.casa — for written privacy requests and formal data subject enquiries.

For formal data subject access requests (see Section 12), please include your full name, registered email address, and a description of your request. We may require verification of your identity before processing the request.

For additional information about six6s, please visit our About Us page. For questions about our gameplay rules or bonus terms, our FAQ page covers many common topics. For responsible gambling support and self-exclusion requests, please visit our Responsible Gambling page.