Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how sox6s ("sox6s", "we", "us" or "our"), the operator of the online betting and casino platform accessible at https://sox6s.cam (the "Platform"), collects, uses, stores, shares and protects the personal data of individuals ("Users", "you" or "your") who register, browse or otherwise interact with the Platform.

sox6s is committed to handling personal data responsibly and in accordance with applicable data-protection principles informed by internationally recognised standards, including the General Data Protection Regulation (GDPR) where applicable, and the operator's licensing obligations.

This Policy should be read alongside the sox6s Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference. By using the Platform, you acknowledge that you have read and understood this Policy.

2 Definitions

For the purposes of this Policy, the following terms have the meanings assigned below:

3 Personal Data We Collect

sox6s collects Personal Data through several channels: directly from Users during registration and account management; automatically through your use of the Platform; and, where necessary, from third-party verification providers.

3.1 Registration & Account Data

• Full legal name;
• Date of birth (for age verification);
• Email address;
• Residential address (including city — e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Peshawar or Multan);
• Username and encrypted password hash;
• Phone number (where provided).

3.2 Identity Verification (KYC) Data

• Government-issued identification documents (National Identity Card, Passport or equivalent);
• Proof of address documents;
• Selfie or biometric verification data, where required by the KYC provider;
• Source-of-funds documentation, where required by licensing obligations.

3.3 Financial & Transaction Data

• Deposit and withdrawal records, including amounts in PKR;
• Payment method identifiers (e.g., partial account numbers, wallet IDs associated with familiar Pakistan payment services referenced by the operator's cashier);
• Transaction timestamps and reference numbers;
• Betting history, game play records and account balance movements.

3.4 Technical & Usage Data

• IP address and approximate geolocation data;
• Device type, operating system and browser version;
• Session duration, pages visited and features accessed;
• Cookie identifiers and similar tracking technologies (see Section 9).

3.5 Communications Data

• Records of support chat conversations and email correspondence;
• Feedback submitted via the Platform;
• Marketing preferences and communication opt-in or opt-out records.

4 Lawful Basis for Processing

sox6s processes Personal Data on one or more of the following lawful bases, depending on the specific Processing activity:

5 How We Use Your Personal Data

sox6s uses the Personal Data it collects for the following purposes:

• Account Administration: Creating and managing your Account, authenticating logins and processing Account settings changes;
• Service Delivery: Processing deposits in PKR, settling bets, crediting winnings and processing withdrawal requests;
• Identity Verification: Conducting KYC checks in compliance with licensing and anti-money-laundering obligations;
• Responsible Gambling: Monitoring account activity to identify potential problem-gambling indicators, enforcing deposit limits, session timers and self-exclusions;
• Fraud Prevention & Security: Detecting and investigating suspicious transactions, collusion, multi-accounting and other prohibited conduct;
• Customer Support: Responding to queries, complaints and data subject requests submitted via email or live chat;
• Platform Improvement: Analysing usage patterns to improve navigation, performance and feature development — on an aggregated, where possible anonymised, basis;
• Legal Compliance: Meeting reporting obligations to licensing authorities, financial intelligence units or courts where required by law;
• Marketing: Sending promotional communications where you have opted in — subject to Section 13 of this Policy.

6 Data Sharing with Third Parties

sox6s does not sell your Personal Data to third parties. We may share Personal Data with the following categories of recipient, strictly on a need-to-know basis and under contractual data-processing safeguards:

• Payment Processors: To facilitate deposits and withdrawals. Payment data is shared only to the extent necessary to complete the transaction;
• KYC & Identity Verification Providers: Third-party services used to verify identity, age and address documents in compliance with licensing requirements;
• Fraud & AML Screening Services: Data may be checked against sanctions lists and shared with fraud-prevention networks as required by applicable law;
• Game Providers: Technical identifiers (not full Personal Data) may be passed to third-party game suppliers to support game delivery, RNG auditing and responsible-gambling checks;
• Licensing Authorities: sox6s may be required to provide player data to the applicable licensing regulator upon request, as a condition of the operating license;
• Legal & Regulatory Bodies: Where required by a court order, law enforcement request or applicable regulation;
• Business Transfers: In the event of a merger, acquisition or asset sale, Personal Data held by sox6s may be transferred to the acquiring entity, subject to equivalent privacy protections.

7 International Data Transfers

sox6s and some of its Data Processors operate from, or store data in, jurisdictions outside Pakistan. Where Personal Data is transferred to a country that may not provide the same level of data protection as the User's home jurisdiction, sox6s will implement appropriate safeguards, which may include:

• Standard Contractual Clauses (SCCs) or equivalent contractual protections with the receiving entity;
• Adequacy decisions applicable to the destination country;
• Binding corporate rules where transfers occur within a corporate group.

By using the Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Pakistan. sox6s will take reasonable steps to ensure such transfers comply with applicable data-protection obligations.

8 Data Retention

sox6s retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

Following the applicable retention period, Personal Data will be securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

9 Cookies & Similar Technologies

sox6s uses cookies and similar tracking technologies (such as web beacons and local storage objects) to operate and improve the Platform. The following categories of cookies are used:

You may manage cookie preferences through your browser settings. Blocking certain cookies may affect Platform functionality. For analytics cookies, consent can be withdrawn at any time through your Account settings.

10 Data Security

sox6s implements a range of technical and organisational security measures to protect Personal Data against unauthorised access, loss, alteration or disclosure. These measures include, but are not limited to:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the Platform;
• Encryption at rest for sensitive Personal Data categories including KYC documents and financial records;
• Role-based access controls limiting staff access to Personal Data on a strict need-to-know basis;
• Multi-factor authentication requirements for administrative Platform access;
• Regular security assessments, vulnerability scanning and penetration testing;
• Incident response procedures to detect, contain and notify of Personal Data breaches within required timeframes.

While sox6s takes data security seriously, no system is completely immune from risk. Users are reminded to keep their own login credentials secure, avoid accessing the Platform over unsecured public Wi-Fi networks and report any suspected Account compromise immediately to [email protected].

11 Your Data Protection Rights

Depending on applicable law and your jurisdiction of residence, you may have some or all of the following rights in relation to your Personal Data:

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Subject Request". Please include your full name, registered email address and a description of your request. sox6s will respond within thirty (30) days, or notify you if an extension is required.

12 Minors

The sox6s Platform is intended solely for individuals who are at least 18 years of age, or the higher minimum age required by the operator's license jurisdiction. sox6s does not knowingly collect or process Personal Data from individuals under the applicable minimum age.

If sox6s becomes aware that Personal Data has been collected from a minor, the relevant Account will be closed immediately, any funds returned to the source of deposit where possible, and the associated Personal Data securely deleted in compliance with applicable law.

If you believe a minor has registered an Account on the Platform, please contact [email protected] immediately.

13 Marketing Communications

sox6s may send promotional communications — including bonus offers, sports promotions relating to Pakistan cricket fixtures, PSL events, ICC tournaments and other platform promotions — only where you have provided explicit opt-in consent during registration or subsequently through Account settings.

You may withdraw consent for marketing communications at any time by:

• Updating your marketing preferences in Account Settings;
• Using the unsubscribe link included in any marketing email;
• Contacting support at [email protected] with the subject "Marketing Opt-Out".

Withdrawal of marketing consent does not affect the lawfulness of prior Processing or your ability to receive service communications that are necessary for the operation of your Account (such as withdrawal confirmations, KYC requests or security alerts).

14 Changes to This Policy

sox6s may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or Platform features. Material changes will be communicated to registered Users via email or a prominent notice on the Platform, with a minimum of fourteen (14) days' advance notice before the revised Policy takes effect.

The "Effective Date" at the top of this Policy will be updated to reflect the date of the latest revision. Where changes are minor or do not materially affect User rights, sox6s reserves the right to update the Policy without a formal notice period. We encourage Users to review this page periodically.

15 Contact Us

For any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact sox6s using the details below. All communications should be submitted in English.

sox6s aims to respond to all data-related queries within thirty (30) calendar days. For complex requests, we will notify you if additional time is required.