xis6s Privacy Policy

xis6s ("we", "us", "our", "the Company") is committed to protecting the privacy and personal data of all players who register and use the xis6s online gaming platform. This Privacy Policy sets out the basis on which any personal data we collect from you — or that you provide to us — will be processed by xis6s.

This Policy applies to all personal data collected through the xis6s website at xis6s.org, the xis6s mobile platform, and any related services including customer support interactions, payment processing communications, and promotional activity. It applies to all registered players regardless of their location, with specific acknowledgement of the rights and expectations of players based in Pakistan.

xis6s takes a straightforward position on privacy: we collect only what we genuinely need to operate a safe, compliant, and high-quality gaming platform. We do not sell your personal data to third parties. We do not share your information beyond the clearly defined purposes set out in this Policy. And we give you real, exercisable rights over the data we hold about you.

This Privacy Policy should be read together with the xis6s Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and xis6s.

For the purposes of applicable data protection legislation, xis6s is the data controller responsible for the personal data of players using the xis6s platform. xis6s operates under an international gaming licence and processes personal data in accordance with the obligations imposed by that licence as well as internationally recognised data protection standards.

All queries, requests, and complaints relating to the processing of your personal data by xis6s should be directed to our Data Protection contact, details of which are provided in Section 15 of this Policy.

When you create your xis6s account, we collect the information you provide directly, including:

• Full legal name as it appears on your government-issued identification;
• Date of birth (for mandatory 21+ age verification);
• Residential address, including city (Karachi, Lahore, Islamabad, Faisalabad, or otherwise) and postcode;
• Valid mobile phone number;
• Email address;
• CNIC (Computerised National Identity Card) number, provided during KYC verification;
• Username and encrypted password.

To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20, xis6s collects:

• Mobile wallet numbers (JazzCash, EasyPaisa, SadaPay);
• Bank account details where bank transfer is the chosen payment method;
• Cryptocurrency wallet addresses for USDT TRC20 transactions;
• Transaction records including deposit and withdrawal amounts, dates, and reference numbers.

xis6s does not store full card numbers or CVV codes. Payment card data, where applicable, is handled exclusively by certified payment processors and is not retained by xis6s systems.

As part of our platform operations, responsible gaming monitoring, and fraud prevention, xis6s automatically records:

• Betting history — all wagers placed, games played, stakes, and outcomes;
• Session data — login times, session duration, and logout events;
• Game interaction data — game categories accessed, features used, and in-play betting activity;
• Responsible gaming tool usage — any deposit limits, cool-off periods, or self-exclusion requests made through your xis6s account.

When you access xis6s, we collect standard technical information including:

• IP address and approximate geolocation derived from it;
• Device type, operating system, and browser version;
• Referring URL and pages visited within the xis6s platform;
• Cookie identifiers and similar tracking data as described in Section 10.

When you contact xis6s support — via live chat, email, or any other channel — we retain records of those communications including the content of messages, timestamps, and any attachments provided. This data is used to resolve your queries, improve our support quality, and maintain accurate account records.

xis6s collects personal data through the following channels:

• Directly from you — when you register your xis6s account, complete KYC verification, make deposits or withdrawals, use responsible gaming tools, or contact our support team;
• Automatically — through cookies, server logs, and platform analytics tools as you use the xis6s website and mobile platform;
• From third parties — from identity verification service providers during KYC checks, from payment processors to confirm transaction status, and from fraud prevention agencies where applicable.

xis6s does not purchase personal data lists or acquire personal data from social media platforms without your explicit consent.

xis6s uses the personal data we collect for the following purposes:

xis6s will not use your personal data for any purpose not described in this Policy without first obtaining your explicit consent, except where required to do so by law or regulatory obligation.

xis6s processes your personal data on one or more of the following legal bases:

• Contractual necessity — processing required to register your account, deliver gaming services, and process payments under the xis6s Terms & Conditions;
• Legal obligation — processing required to comply with anti-money laundering regulations, licensing conditions, age verification requirements, and tax reporting obligations;
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where those interests are not overridden by your data protection rights;
• Consent — processing for direct marketing communications, where you have explicitly opted in to receiving such communications from xis6s.

Where xis6s relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

xis6s does not sell, rent, or trade your personal data to any third party. We share personal data only in the following strictly defined circumstances:

xis6s engages carefully selected third-party service providers who process personal data on our behalf under binding data processing agreements. These include KYC and identity verification providers, payment processors (including JazzCash, EasyPaisa, and banking partners), fraud detection services, IT infrastructure providers, and customer support platform operators. These providers are only permitted to process your data for the specific purpose for which they have been engaged by xis6s.

xis6s may disclose personal data to licensing authorities, financial intelligence units, law enforcement agencies, or courts where we are legally required to do so — for example, under anti-money laundering legislation, a court order, or a lawful request from a regulatory authority. Such disclosures will be made only to the extent required by law.

In the event of a merger, acquisition, or sale of all or a substantial part of xis6s's assets, personal data held about players may be transferred to the acquiring entity, subject to that entity assuming equivalent data protection obligations. Players will be notified of any such transfer in advance where legally permissible.

xis6s retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Active account data: Retained for the full duration of the account relationship plus a minimum of five (5) years following account closure, in line with standard AML retention obligations;
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission or from the date of last transaction, whichever is later;
• Transaction and betting records: Retained for a minimum of five (5) years from the date of each transaction;
• Customer support communications: Retained for three (3) years from the date of the communication;
• Marketing consent records: Retained for three (3) years from the date consent was given or withdrawn.

Where personal data is no longer required for any of the purposes described in this Policy, xis6s will securely delete or anonymise it in a manner that prevents reconstruction or re-identification.

xis6s implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the xis6s platform;
• Encrypted storage of sensitive personal data and payment information at rest;
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access player personal data;
• Two-factor authentication (2FA) available for all xis6s player accounts;
• Regular security audits and penetration testing of the xis6s platform infrastructure;
• Incident response procedures to detect, contain, and report data breaches in accordance with applicable regulatory requirements.

Despite these measures, no internet-based platform can guarantee absolute security. If you have reason to believe that your xis6s account has been compromised, please contact our support team immediately at [email protected].

xis6s uses cookies and similar tracking technologies to operate the platform, personalise your experience, and analyse how the site is used. The types of cookies xis6s uses are as follows:

• Strictly necessary cookies: Required for the platform to function — including session management, login state, and security tokens. These cannot be disabled without breaking core functionality;
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations;
• Analytical cookies: Used to collect anonymised data about how players navigate the xis6s platform, helping us identify and fix usability issues. No personally identifiable information is included in analytical cookie data;
• Marketing cookies: Used only where you have provided explicit consent to receive personalised promotions from xis6s.

You may manage or withdraw consent to non-essential cookies at any time through your browser settings or the xis6s cookie preference centre. Please note that disabling certain cookies may affect the functionality of the xis6s platform.

xis6s respects your rights over your personal data. Depending on applicable law and the circumstances of your request, you may be entitled to exercise the following rights:

• Right of Access: Request a copy of the personal data xis6s holds about you;
• Right to Rectification: Request correction of inaccurate or incomplete personal data;
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Restriction: Request that we limit the processing of your personal data in certain circumstances;
• Right to Data Portability: Receive a copy of your personal data in a structured, machine-readable format and transmit it to another controller where technically feasible;
• Right to Object: Object to the processing of your personal data on the basis of legitimate interests, including profiling for direct marketing purposes;
• Right to Withdraw Consent: Withdraw consent for any processing activity where consent is the legal basis, without affecting the lawfulness of prior processing.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and sufficient information to verify your identity. xis6s will respond to all valid requests within thirty (30) days of receipt. Where requests are complex or numerous, we may extend this period by a further thirty (30) days with notification to you.

xis6s will not charge a fee for handling data rights requests unless they are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

The xis6s platform is strictly restricted to individuals aged 21 years and above. xis6s does not knowingly collect personal data from anyone under the age of 21. Age verification is a mandatory step during the xis6s registration and KYC process.

If xis6s discovers or is informed that personal data has been collected from an individual under the age of 21, we will:

• Immediately suspend the relevant account;
• Delete all personal data associated with the account from our active systems;
• Refund any deposited funds in accordance with applicable regulations;
• Report the incident to relevant regulatory authorities where required.

Parents and guardians who believe a minor may have accessed or registered on the xis6s platform are encouraged to contact our support team immediately at [email protected]. xis6s will investigate and act on such reports without delay.

xis6s operates as an internationally licensed platform, and your personal data may be processed by xis6s or its service providers in countries outside Pakistan. Where personal data is transferred internationally, xis6s ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this Policy.

Such safeguards may include standard contractual clauses approved by recognised data protection authorities, binding corporate rules, or transfers to countries recognised as providing adequate levels of data protection. Details of the specific safeguards applicable to any international transfer of your personal data are available upon request.

xis6s reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform functionality. Material changes to this Policy will be communicated to registered players via email or in-platform notification at least seven (7) days before taking effect.

The most current version of this Privacy Policy is always available at xis6s.org/privacy-policy. The version number and last-updated date are displayed at the top of this document. Continued use of the xis6s platform following the effective date of any update constitutes your acknowledgement of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by xis6s, please contact our Data Protection team:

• Email: [email protected] (subject line: "Privacy Request")
• Support Hours: 8 AM – 2 AM PKT, seven days a week
• Live Chat: Available within your xis6s account dashboard during support hours

xis6s will acknowledge all privacy-related enquiries within forty-eight (48) hours and provide a substantive response within thirty (30) days.

If you are not satisfied with how xis6s has handled your privacy concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction or the jurisdiction in which xis6s holds its gaming licence.