dcc6 Privacy Policy — How We Protect Your Personal Data as a Pakistani Player

1.1 dcc6 is the data controller responsible for personal data collected through the dcc6 platform at dcc6.bid. As data controller, dcc6 determines the purposes and means of processing your personal data and is accountable for ensuring that processing is conducted lawfully, fairly, and transparently.

1.2 dcc6 is Pakistan's dedicated online casino and sports betting platform, serving players across major cities including Karachi, Lahore, Faisalabad, Islamabad, Rawalpindi, Multan, and Peshawar. Our platform supports Pakistani Rupees (PKR) natively and integrates with local payment providers including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.

1.3 dcc6 operates under international gaming licensing standards and is subject to data protection and AML (anti-money laundering) obligations under those licensing frameworks, which inform the scope of personal data we are required to collect and retain.

2.1 dcc6 collects the following categories of personal data from Pakistani players during the account lifecycle:

2.2 Data Not Collected. dcc6 does not collect biometric data (fingerprints, facial recognition) for purposes other than document verification. dcc6 does not collect or store full card numbers or complete banking PINs — payment transactions are processed through certified third-party payment gateways.

2.3 Automatically Collected Data. When you visit dcc6.bid or use the dcc6 platform, certain technical data is automatically collected through cookies and similar technologies. See Section 9 (Cookies) for full details.

3.1 dcc6 processes your personal data for the following specific purposes:

• Account Administration: Creating, maintaining, verifying, and closing your dcc6 account; authenticating your identity at each login; delivering account-specific notifications and balance alerts.
• Service Delivery: Enabling your participation in cricket betting, live casino games, slot games, and all other dcc6 platform products; processing game outcomes; resolving disputes relating to bets or game results.
• Payment Processing: Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank; reconciling your dcc6 account balance; issuing refunds where applicable.
• KYC & AML Compliance: Verifying your identity, age (21+), and source of funds in compliance with our licensing obligations; conducting ongoing transaction monitoring for AML purposes; submitting mandatory reports to relevant regulatory authorities.
• Responsible Gaming: Monitoring gaming behaviour for indicators of harmful play; operating responsible gaming tools (deposit limits, self-exclusion, session controls); fulfilling obligations under international gaming licensing standards relating to player protection.
• Customer Support: Responding to enquiries submitted via live chat, email, or other support channels; investigating complaints; escalating issues to relevant internal teams.
• Security & Fraud Prevention: Detecting and preventing unauthorised access, bonus abuse, multi-accounting, payment fraud, and other prohibited conduct as defined in the dcc6 Terms & Conditions.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience for Pakistani players.
• Marketing Communications: Sending promotional emails, bonus notifications, and platform updates to players who have opted in to marketing communications. You may opt out at any time.

4.1 dcc6 processes your personal data on the following legal grounds, depending on the specific processing activity:

• Performance of Contract: Processing is necessary to fulfil our contractual obligations to you under the dcc6 Terms & Conditions — including account creation, game participation, and payment processing. Without this processing, dcc6 cannot provide its services to you.
• Legal Obligation: Processing is required to comply with mandatory legal and regulatory obligations, including KYC identity verification, AML transaction monitoring, and mandatory reporting to regulatory authorities. dcc6 cannot waive these requirements regardless of your preferences.
• Legitimate Interests: Processing is carried out for dcc6's legitimate business interests where those interests are not overridden by your rights and interests — including platform security, fraud detection, abuse prevention, and platform analytics.
• Consent: Where dcc6 relies on your consent as the legal basis for processing — principally for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on other grounds. Withdrawal of marketing consent does not affect your dcc6 account status.

5.1 dcc6 does not sell, rent, or trade your personal data to any third party for any commercial purpose. Personal data is shared with third parties only in the following limited circumstances:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processors require your payment details to process transactions. These providers are contractually obligated to maintain the security of your data and use it only for the purpose of processing your dcc6 transactions.
• Identity Verification Providers: dcc6 uses certified third-party identity verification services to conduct KYC checks. These providers receive only the minimum data necessary to verify your identity and age.
• Game Technology Providers: Third-party game studios and platform providers that supply games available on dcc6 may receive anonymised session data necessary for game delivery and outcome verification. Game providers do not receive your name, CNIC, or financial data.
• Fraud & AML Compliance: dcc6 may share data with specialist fraud detection services and, where legally required, with law enforcement agencies, financial intelligence units, or regulatory authorities.
• Customer Support Technology: Third-party live chat and helpdesk platforms used to deliver dcc6 support services handle communication data in accordance with their own certified data protection frameworks.
• Professional Advisers: dcc6 may share your data with legal counsel, auditors, or compliance consultants on a confidential basis where necessary for the conduct of dcc6's legal and regulatory affairs.

5.2 All third parties with whom dcc6 shares personal data are required by contract to process that data only for specified, compatible purposes and to maintain appropriate technical and organisational security measures.

6.1 dcc6 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply as general guidelines:

• Account and Identity Data: Retained for the duration of your active dcc6 account and for a minimum of five (5) years following account closure, in compliance with AML regulatory requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with applicable financial record-keeping obligations under dcc6's licensing framework.
• Gaming Activity Records: Retained for a minimum of three (3) years from the date of activity, for dispute resolution and regulatory audit purposes.
• Support Communications: Retained for three (3) years from the date of the communication, to support ongoing account management and dispute resolution.
• Marketing Data: Retained until you withdraw consent or unsubscribe, after which your preference data is retained for suppression purposes only.
• Responsible Gaming Records: Retained for a minimum of five (5) years from the date of the relevant responsible gaming intervention, in compliance with international licensing responsible gaming standards.

6.2 Following expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

7.1 dcc6 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and dcc6 servers is encrypted using industry-standard transport layer security, the same protocol used by Pakistan's major commercial banks.
• Password Hashing: dcc6 stores your account password only as a cryptographic hash using a bcrypt or equivalent industry-standard one-way hashing algorithm. Plaintext passwords are never stored on dcc6 systems.
• Two-Factor Authentication (2FA): All dcc6 accounts may enable 2FA to require a secondary verification code in addition to a password at login, significantly reducing the risk of unauthorised access.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. dcc6 employees access personal data only to the extent required by their specific role and are bound by contractual confidentiality obligations.
• Intrusion Detection and Monitoring: dcc6 systems are subject to continuous security monitoring and intrusion detection. Anomalous access patterns trigger automatic alerts reviewed by our security team.
• Regular Security Audits: dcc6's platform and data handling practices are subject to regular independent security and compliance audits.

7.2 Data Breach Response. In the event of a personal data breach that poses a risk to your rights and freedoms, dcc6 will notify affected individuals without undue delay following discovery of the breach, in accordance with applicable regulatory requirements.

8.1 As a dcc6 player, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a request via live chat or email to [email protected] (plain text — not a clickable link). dcc6 will acknowledge all requests within 48 hours and respond substantively within 30 calendar days.

8.2 Right of Access (Subject Access Request). You have the right to request a copy of all personal data held by dcc6 about you, together with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed.

8.3 Right to Rectification. If any personal data held by dcc6 about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. Most contact data can be updated directly from your dcc6 account settings.

8.4 Right to Erasure ("Right to Be Forgotten"). You may request deletion of your personal data where: the data is no longer necessary for the purpose for which it was collected; you have withdrawn consent and there is no other legal basis for processing; or the data has been processed unlawfully. This right is subject to dcc6's legal obligations to retain certain data under AML regulations and our licensing framework — dcc6 cannot delete data that it is legally required to retain.

8.5 Right to Restriction of Processing. You may request that dcc6 temporarily restrict processing of your personal data in certain circumstances, including where you contest the accuracy of the data or have objected to processing.

8.6 Right to Data Portability. You have the right to receive personal data that you have provided to dcc6 in a structured, commonly used, machine-readable format, and to request that dcc6 transmit that data directly to another controller where technically feasible.

8.7 Right to Object. You have the right to object at any time to processing of your personal data for direct marketing purposes. Upon receipt of such an objection, dcc6 will cease marketing processing immediately. You may also object to processing based on legitimate interests, subject to dcc6 demonstrating compelling legitimate grounds that override your interests.

8.8 Right to Withdraw Consent. Where dcc6 relies on your consent as the legal basis for processing (principally marketing), you may withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

9.1 dcc6 uses cookies and similar tracking technologies (collectively "cookies") on the dcc6.bid platform. Cookies are small data files placed on your device by your browser when you access the platform. dcc6 uses cookies for the purposes described below.

9.2 The types of cookies used by dcc6 are as follows:

9.3 Managing Cookies. You can control cookie placement through your browser settings. However, disabling essential cookies will impair or prevent your ability to use the dcc6 platform, including logging into your account. Disabling functional or analytics cookies will not affect your ability to play but may reduce the quality of your dcc6 experience.

9.4 dcc6 does not use cookies for cross-site advertising networks or third-party behavioural advertising targeting without your explicit consent. Where marketing cookies are deployed, your consent is obtained via dcc6's cookie consent mechanism at your first platform visit.

10.1 The dcc6 platform is strictly restricted to individuals aged twenty-one (21) years and above. dcc6 does not knowingly collect, process, or store personal data from persons under the age of 21.

10.2 Where dcc6 has reason to believe that a registered account holder is under 21 years of age, dcc6 will immediately suspend the account, freeze any balance pending age verification, and initiate enhanced KYC procedures. If the account holder cannot provide satisfactory documentation confirming they are aged 21 or above, the account will be permanently terminated and all deposits refunded.

10.3 If dcc6 discovers that it has inadvertently collected personal data from an individual under the age of 21, that data will be deleted immediately upon discovery, subject only to any mandatory data retention obligations arising from the need to record and report the underage access incident in compliance with licensing requirements.

11.1 The dcc6 platform operates under international gaming licensing standards, and certain data processing activities may involve the transfer of personal data to servers or service providers located outside Pakistan. Where such transfers occur, dcc6 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Policy.

11.2 Data transfers to international third-party service providers are governed by contractual data protection agreements that require those providers to maintain security standards and data handling practices consistent with dcc6's obligations under this Policy.

11.3 dcc6 does not transfer your personal data to jurisdictions that do not maintain adequate data protection frameworks without implementing appropriate contractual and technical safeguards to protect your information.

12.1 The dcc6 platform may contain references to third-party services (such as payment providers) whose own privacy practices are governed by their respective privacy policies. dcc6 is not responsible for the privacy practices or content of any third-party website, application, or service accessed from or referenced by the dcc6 platform.

12.2 When you initiate a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, you are also subject to that provider's terms of service and privacy policy in relation to the specific payment transaction. dcc6 recommends reviewing those policies to understand how your payment data is handled by each provider.

12.3 Game content provided by third-party studios on the dcc6 platform is subject to limited, session-specific data transmission necessary for game delivery. dcc6 does not grant game providers access to your personal profile, financial information, or identity documents.

13.1 dcc6 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Material changes will be communicated to registered account holders via email notification to the address associated with your dcc6 account, with not less than fourteen (14) days' advance notice before the revised Policy takes effect.

13.2 The current version of this Privacy Policy is always available at dcc6.bid/privacy-policy. The effective date at the top of this document indicates when the current version came into force. We recommend reviewing this Policy periodically to remain informed about how dcc6 handles your personal data.

13.3 Where a Policy amendment materially reduces your privacy rights or involves a new processing purpose that requires your consent, dcc6 will seek fresh consent before commencing processing under the new terms.

14.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by dcc6, please contact us through the following channels:

• Live Chat Support: Available 24/7 from within your logged-in dcc6 account. For urgent data matters, live chat is the fastest channel. Average response time: 3–5 minutes.
• Email (plain text — not clickable): [email protected]
• Subject Line for Data Requests: Please use "Privacy / Data Request — [Your Username]" as the subject line for all formal data requests to ensure prompt routing to our data team.
• Support Languages: English and Urdu. Pakistani-fluent agents are available at all times.

14.2 dcc6 aims to acknowledge all privacy-related enquiries within forty-eight (48) hours and provide a full response within thirty (30) calendar days. For complex requests requiring extensive data retrieval, we may notify you of the need for an extension of up to an additional thirty (30) days, with an explanation of the reason for the delay.