s6x6 Privacy Policy

s6x6 acts as the Personal Information Controller (PIC) in respect of all personal data collected through the s6x6 platform, as defined under Section 3(h) of the Philippine Data Privacy Act of 2012. As PIC, s6x6 determines the purposes and means of processing your personal information and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.

s6x6 has appointed a designated Data Protection Officer (DPO) who is responsible for overseeing data protection compliance, handling data subject requests, and acting as the primary point of contact with the National Privacy Commission. The DPO's contact details are provided in Section 13 of this Policy.

s6x6 is committed to the core data privacy principles enshrined in R.A. 10173: transparency, legitimate purpose, and proportionality. We collect only the personal data that is genuinely necessary for the purposes described in this Policy, and we process it only in ways that are directly connected to those purposes.

s6x6 collects several categories of personal data from players. The specific data collected will depend on the nature of your interaction with the platform. The categories we collect include:

s6x6 does not collect sensitive personal information as defined under Section 3(l) of R.A. 10173 (such as health data, religious beliefs, or political affiliations) unless strictly required for regulatory compliance purposes, in which case it will be collected only with your explicit consent.

s6x6 collects personal data through the following channels and methods:

• Direct Submission: When you register an s6x6 account, you directly provide identity and contact information. Additional information is collected when you submit KYC documents, complete your player profile, or contact customer support.
• Automated Technical Collection: When you access the s6x6 platform, our systems automatically log technical data including your IP address, device identifiers, browser information, and session timestamps. This data is collected to ensure platform security and integrity.
• Payment Processing: When you initiate a deposit or withdrawal via GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, or PESONet, s6x6 receives confirmation and reference data from the respective payment service provider to reconcile your transaction. s6x6 does not store full bank account numbers or e-wallet PINs.
• Gaming Activity: All game interactions — including bets placed, game outcomes, session start and end times, and responsible gaming tool activations — are automatically recorded by the s6x6 gaming platform as part of our regulatory obligation to maintain auditable gaming records.
• Cookies and Tracking Technologies: s6x6 uses cookies, web beacons, and similar technologies to collect browsing behaviour data on the platform. Full details are provided in Section 9 of this Policy.
• Third-Party Sources: s6x6 may receive personal data about you from identity verification service providers, fraud prevention databases, and PAGCOR-mandated exclusion registers where required for compliance purposes.

s6x6 processes your personal data for the following clearly defined and legitimate purposes:

• Account Registration and Management: To create, maintain, and administer your s6x6 player account, including password recovery, account security, and player profile updates.
• Identity and Age Verification (KYC): To verify that you are at least 21 years of age and are legally eligible to participate in online gambling activities on s6x6, as mandated by PAGCOR.
• Transaction Processing: To process deposits, credit winnings, execute withdrawal requests, and maintain accurate financial records of all PHP transactions associated with your account.
• Anti-Money Laundering (AML) Compliance: To monitor, detect, and report suspicious financial activity in accordance with the Philippine Anti-Money Laundering Act (AMLA) and PAGCOR's AML framework.
• Gaming Operations: To deliver live casino, slot, bingo, fishing arcade, and sports betting services, to resolve gaming disputes, and to maintain the integrity of all games on the platform.
• Responsible Gaming: To enforce responsible gaming tools including deposit limits, session reminders, and self-exclusion; to identify players who may be experiencing problem gambling; and to fulfil s6x6's responsible gaming obligations under PAGCOR's framework.
• Customer Support: To investigate and resolve account queries, transaction disputes, technical issues, and complaints submitted through live chat or email.
• Platform Security and Fraud Prevention: To detect and prevent fraudulent activity, multi-accounting, bot usage, and other prohibited conduct as defined in the s6x6 Terms & Conditions.
• Marketing and Promotions: To send you personalised promotional offers, bonus notifications, and platform updates — only where you have opted in to receive such communications. You may opt out at any time via your account settings.
• Regulatory Reporting: To fulfil reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities as required by law.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the s6x6 gaming experience, optimise platform performance, and develop new features.

s6x6 processes your personal data only where a valid legal basis exists under the Philippine Data Privacy Act of 2012. The legal bases we rely on are as follows:

• Contractual Necessity: Processing your identity, contact, financial, and gaming data is necessary for the performance of the contract between you and s6x6 — specifically, the Terms & Conditions you accept upon registration. Without this processing, s6x6 cannot provide its gaming services to you.
• Legal Obligation: Processing for KYC verification, AML monitoring, regulatory reporting to PAGCOR and AMLC, and age verification is required by Philippine law, including R.A. 9160 (AMLA), R.A. 10927 (Casino Reporting Act), and PAGCOR's licensing conditions. This processing occurs regardless of your consent.
• Legitimate Interests: Processing for fraud detection, platform security, and prevention of prohibited conduct is carried out based on s6x6's legitimate interests in maintaining a safe and fair gaming environment. These interests do not override your fundamental rights and freedoms.
• Consent: Processing for marketing and promotional communications is conducted solely on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time via your account marketing preferences, without affecting the lawfulness of prior processing.

Where s6x6 relies on consent as the legal basis for any processing activity, we maintain records of when and how consent was obtained and provide clear and accessible mechanisms for consent withdrawal.

s6x6 does not sell, rent, or otherwise disclose your personal data to unaffiliated third parties for their own commercial or marketing purposes. Personal data may be shared only in the following limited and defined circumstances:

• PAGCOR and Philippine Regulatory Authorities: s6x6 is required to share gaming activity records, player identity data, and financial transaction data with PAGCOR as a condition of our operating authorisation. This disclosure is mandatory and cannot be withheld.
• Anti-Money Laundering Council (AMLC): Suspicious transaction reports (STRs) and covered transaction reports (CTRs) involving qualifying amounts are submitted to the AMLC as required by R.A. 9160 and its amendments.
• National Privacy Commission (NPC): In the event of a personal data breach or in response to a formal NPC inquiry or investigation, s6x6 will cooperate fully and disclose relevant data as required by R.A. 10173.
• Law Enforcement and Courts: s6x6 will disclose personal data to Philippine law enforcement agencies or courts where required by a valid legal process, court order, or subpoena.
• Identity Verification Service Providers: s6x6 uses third-party KYC and identity verification partners to validate player-submitted identification documents. These providers act as Personal Information Processors (PIPs) under written agreements that require PDPA-compliant data handling.
• Payment Service Providers: Transaction reference data is shared with GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, and PESONet processors solely for the purpose of processing deposits and withdrawals.
• Game Content Providers: Aggregated, pseudonymised session data may be shared with s6x6's game studio and content providers to resolve technical issues or gaming disputes. Personal identity data is not shared with game studios.
• Cloud and Hosting Infrastructure: s6x6's platform is hosted on secure cloud infrastructure. Hosting providers have access only to encrypted data and are bound by strict data processing agreements.

s6x6 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Where data is anonymised, it may be retained indefinitely for statistical and analytical purposes without restriction.

Players who request account closure should be aware that certain categories of data — particularly financial and identity records — are required to be retained for the minimum statutory period regardless of the account closure request, due to PAGCOR and AMLA obligations.

s6x6 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• Encryption in Transit: All data transmitted between your device and the s6x6 platform is protected using TLS 1.2 or higher encryption protocols. This ensures that data cannot be intercepted during transmission.
• Encryption at Rest: Personal data and financial records stored on s6x6 servers are encrypted using AES-256 encryption standards.
• Access Controls: Access to personal data is restricted to s6x6 personnel on a strict need-to-know basis. All internal access is authenticated via multi-factor authentication (MFA) and logged for audit purposes.
• Intrusion Detection: s6x6 employs automated intrusion detection and prevention systems that continuously monitor for anomalous activity on our infrastructure.
• Vulnerability Management: Regular security assessments, penetration testing, and code audits are conducted on the s6x6 platform to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response: s6x6 maintains a formal Personal Data Breach Response Plan. In the event of a breach that poses a real risk of serious harm, s6x6 will notify the NPC within 72 hours of discovery and will notify affected players without undue delay, as required by NPC Circular 16-03.

Despite s6x6's best efforts, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. s6x6 cannot warrant the absolute security of any information you transmit to us. In the unlikely event that a breach occurs, s6x6 will fulfil all notification obligations under R.A. 10173 and NPC regulations.

s6x6 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how players interact with our services. A cookie is a small text file placed on your device when you visit the s6x6 platform. The types of cookies we use are as follows:

s6x6 does not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving targeted advertisements from external advertisers.

You may control cookie settings through your browser preferences. Note that disabling strictly necessary cookies will impair the functionality of the s6x6 platform and may prevent you from logging in or completing transactions. Disabling functional or analytical cookies will not affect your ability to play but may result in a less personalised experience.

Under the Philippine Data Privacy Act of 2012, you have the following rights as a data subject. s6x6 is committed to honouring these rights promptly and without unnecessary barriers.

To exercise any of the above rights, please submit a written request to s6x6's Data Protection Officer via live chat or email. s6x6 will acknowledge your request within five (5) business days and provide a substantive response within fifteen (15) business days. For complex requests, the response period may be extended by a further fifteen (15) business days, in which case s6x6 will notify you of the extension and the reason for the delay.

s6x6 may request that you verify your identity before processing a data subject request to ensure that personal data is not disclosed to or acted upon at the request of an unauthorised party.

The s6x6 platform is strictly intended for persons who are 21 years of age or older, as mandated by PAGCOR for casino-style and online gaming activities in the Philippines. s6x6 does not knowingly collect, process, or store any personal data belonging to individuals under the age of 21.

As part of the account registration and KYC process, all applicants are required to submit valid government-issued identification confirming they meet the 21+ age requirement. Accounts where age verification cannot be completed or where the player is found to be under 21 are immediately suspended and any associated funds are held pending investigation.

If s6x6 becomes aware or reasonably suspects that personal data of a person under the age of 21 has been collected on the platform — whether through fraudulent registration or any other means — s6x6 will:

• Immediately suspend the account in question;
• Delete all personal data associated with the underage individual as soon as it is no longer required for the purpose of the investigation;
• Report the incident to PAGCOR as required by our operating conditions;
• Where appropriate, report the matter to relevant Philippine child protection authorities.

Parents and guardians who believe their child has registered on the s6x6 platform should contact s6x6 support immediately at [email protected]. s6x6 will treat such notifications with the highest priority and act immediately to investigate and, where confirmed, close the account and delete the relevant data.

s6x6 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, updates to applicable Philippine law or NPC regulations, changes to PAGCOR's regulatory requirements, or improvements to our platform and services.

When a material change is made to this Policy, s6x6 will notify registered players via email to the address on file and via a prominent notice on the s6x6 platform, no fewer than seven (7) days before the amendment takes effect. For minor, non-material changes — such as typographical corrections or clarifications that do not affect the substance of your rights — s6x6 may update this Policy without advance notice.

The effective date at the top of this page will always reflect the date on which the current version came into force. The most current version of this Privacy Policy is always accessible at s6x6.com/privacy-policy. We encourage you to review this Policy periodically to stay informed about how s6x6 protects your personal data.

Your continued use of the s6x6 platform after the effective date of any amendment to this Policy constitutes your acknowledgement of the updated Policy. If you do not agree with any changes, you may request account closure by contacting s6x6 customer support.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by s6x6, you may contact our Data Protection Officer through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly accessible from any page on the s6x6 platform. Live chat is the fastest way to reach the s6x6 support and DPO team.
• Email: [email protected] — Please include "Privacy Request" or "Data Subject Rights" in the subject line so your message is routed directly to the DPO team. Email responses are provided within 24 hours on business days.

For formal data subject rights requests — including access, correction, erasure, or portability requests — please submit your request in writing via email to the DPO address above. Include your registered s6x6 account email address and a description of the right you wish to exercise. s6x6 will acknowledge receipt within five (5) business days.

If you believe that s6x6 has not adequately addressed your data privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines through NPC's official government channels. s6x6 will cooperate fully with any NPC inquiry or investigation.