sis6s Privacy Policy

1 Introduction

sis6s ("we," "us," "our") operates the online casino and sports betting platform accessible at sis6s.vu (the "Platform"). This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of personal information relating to users of the sis6s Platform ("you," "your," "User").

sis6s is an internationally licensed online gaming operator. As part of our licensing obligations, we are required to collect and verify certain personal data. This Policy is designed to ensure you understand precisely what data we collect and why, and to demonstrate our commitment to handling it with care and transparency.

This Privacy Policy should be read alongside the sis6s Terms & Conditions and Responsible Gaming Policy, which together govern your use of the Platform.

2 Data Controller

For the purposes of applicable data protection legislation, sis6s is the data controller responsible for the personal data of users of the Platform. This means sis6s determines the purposes for which personal data is collected and the manner in which it is processed.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to raise a data-related concern, you may contact the sis6s Data Protection team via the contact details provided in Section 15 of this Policy.

3 Personal Data We Collect

sis6s collects the following categories of personal data in connection with your use of the Platform:

3.1 Identity & Contact Data

• Full legal name as it appears on your National Identity Card (CNIC) or passport
• Date of birth (for age verification purposes)
• Residential address (city, postal code)
• Email address
• Mobile phone number (where provided)
• CNIC number or passport number (collected during KYC verification)

3.2 Account & Transaction Data

• sis6s account username and encrypted password hash
• Account registration date and most recent login timestamp
• Deposit and withdrawal history, including PKR amounts, dates, and payment method identifiers
• Betting and gaming history, including game types, stake amounts, and outcomes
• Bonus and promotional offer usage history

3.3 Technical & Device Data

• IP address at time of registration and at each login
• Device type, operating system, and browser version
• Session duration and Platform navigation data
• Geolocation data (country and city level, derived from IP address)

3.4 KYC Documentation

• Scanned or photographed copies of government-issued identity documents
• Proof of address documents (utility bill, bank statement, or equivalent dated within 3 months)
• Proof of payment method ownership (where required)

4 How We Collect Your Data

sis6s collects personal data through the following channels:

• Direct input: Information you provide when registering an account, completing KYC verification, contacting support, or participating in promotions.
• Automated technical collection: Technical and device data collected automatically through cookies, log files, and analytics tools when you access the Platform.
• Payment processing: Transaction reference data received from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank when you make deposits or receive withdrawals.
• Third-party verification services: Identity and fraud screening data received from licensed KYC verification and anti-money-laundering (AML) service providers.
• Customer support interactions: Records of live chat conversations and email correspondence with the sis6s support team, retained for quality assurance and dispute resolution.

5 Purpose & Legal Basis for Processing

The table below sets out the purposes for which sis6s processes your personal data and the legal basis relied upon for each processing activity:

6 Data Sharing & Disclosure

sis6s does not sell, rent, or trade your personal data to any third party. We may share your personal data with the following categories of recipients, strictly to the extent necessary for the purposes described in this Policy:

6.1 Service Providers

sis6s engages third-party service providers to support Platform operations, including payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), KYC and AML verification services, cloud hosting and data storage providers, and customer support infrastructure providers. All service providers are bound by data processing agreements requiring them to process your data only on sis6s's instructions and in accordance with applicable data protection standards.

6.2 Regulatory and Law Enforcement Authorities

sis6s may disclose personal data to our licensing authority, financial intelligence units, or law enforcement agencies where required by law, court order, or regulatory mandate. Such disclosures are made to the minimum extent necessary to fulfil the relevant legal obligation.

6.3 Fraud Prevention Networks

Where required by our licensing obligations, sis6s may share identity data with fraud prevention networks and shared exclusion registers to prevent underage gambling, identify problem gamblers, and detect money laundering activity.

7 International Data Transfers

As an internationally licensed operator, sis6s may store and process personal data on servers located outside Pakistan. Where personal data is transferred internationally, sis6s ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law.

Safeguards used for international transfers include contractual clauses obligating recipient parties to maintain data protection standards consistent with our licensing requirements, and the selection of hosting and processing partners that operate within jurisdictions recognised as providing adequate data protection.

8 Data Retention

sis6s retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to comply with applicable legal, regulatory, and licensing obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account relationship with sis6s plus a period of five (5) years following account closure, in accordance with our AML and licensing obligations.
• KYC documentation: Retained for a minimum of five (5) years from the date of verification, as required by anti-money-laundering regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for three (3) years from the date of each interaction.
• Technical log data: Retained for twelve (12) months from the date of collection, unless required for longer for security investigation purposes.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with sis6s's data disposal procedures.

9 Cookies & Tracking Technologies

The sis6s Platform uses cookies and similar tracking technologies to operate core Platform functionality, remember your preferences, analyse Platform usage, and support fraud prevention systems. Cookies used by sis6s fall into the following categories:

• Essential cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during an active session. These cannot be disabled without affecting Platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming limit configurations.
• Analytics cookies: Used to collect anonymised data about how users navigate the Platform, helping sis6s identify usability improvements. This data does not identify you personally.
• Security cookies: Used to detect and prevent fraudulent access attempts, bot activity, and other security threats.

You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may impair the functionality of the sis6s Platform.

10 Your Data Rights

Subject to applicable law and our legal retention obligations, you have the following rights in relation to your personal data held by sis6s:

• Right of access: You may request a copy of the personal data sis6s holds about you.
• Right of rectification: You may request correction of any inaccurate or incomplete personal data held about you.
• Right to erasure: You may request deletion of your personal data where sis6s no longer has a lawful basis for retaining it. Note that deletion requests cannot be fulfilled where data retention is required by our licensing or AML obligations.
• Right to restriction: You may request that sis6s restricts the processing of your personal data in certain circumstances, for example while a dispute regarding accuracy is resolved.
• Right to data portability: You may request that sis6s provides your personal data to you in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of sis6s's legitimate interests, subject to sis6s demonstrating compelling legitimate grounds that override your interests.

To exercise any of the above rights, please contact the sis6s support team using the details in Section 15. sis6s will respond to all data rights requests within thirty (30) calendar days of receipt. Requests may require identity verification before being actioned.

11 Children's Privacy

The sis6s Platform is strictly intended for individuals aged 21 and above. sis6s does not knowingly collect personal data from any person under the age of 21. If sis6s becomes aware that personal data has been collected from an individual below the minimum age requirement, the associated account will be immediately closed, all data will be securely deleted, and any deposited funds will be returned through the original payment method following identity verification.

12 Security Measures

sis6s implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the sis6s Platform
• Encryption at rest for all stored personal data and KYC documentation
• Access controls limiting internal access to personal data on a strict need-to-know basis
• Regular security audits and penetration testing conducted by independent third parties
• Intrusion detection and monitoring systems operating 24/7
• Staff training on data protection obligations and secure data handling procedures

While sis6s takes all reasonable measures to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials. See Section 5 of the sis6s Terms & Conditions for your account security obligations.

13 Marketing Communications

sis6s may send you promotional communications about bonuses, new games, PSL cricket betting markets, and other Platform features. Marketing communications from sis6s are subject to the following rules:

• sis6s will only send you marketing communications if you have opted in to receive them during account registration or at a later stage through your account settings.
• You may withdraw your consent to receive marketing communications at any time by updating your communication preferences in your account settings or by contacting the sis6s support team.
• Withdrawal of marketing consent does not affect the sending of service-related communications (such as account security alerts, deposit confirmations, or withdrawal notifications), which are sent regardless of marketing preference.
• sis6s does not share your contact details with third-party marketing companies. All promotional communications are sent by sis6s directly.

14 Changes to This Privacy Policy

sis6s reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, licensing obligations, or applicable law. When material changes are made, sis6s will provide reasonable notice to registered users via a prominent notification on the Platform or by email to your registered address.

The revised Privacy Policy will take effect on the date specified in the change notice. Your continued use of the sis6s Platform after that date constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you should cease using the Platform and may request account closure in accordance with Section 14 of the Terms & Conditions.

15 Contact & Data Requests

For all privacy-related enquiries, data access requests, or data rights exercises, please contact the sis6s Data Protection team using the details below. All enquiries are handled in both Urdu and English, 24 hours a day, 7 days a week.