Cookie Policy: GDPR-compliant usage, consent, and controls
This page preserves the legacy Cookie Policy while modernizing clarity and structure for 2025. It explains how 6 Club uses essential, functional, analytics, and marketing cookies; how long we retain them; lawful bases; your rights; and how to manage consent. All names, categories, and retention values from the original policy are retained for SEO and compliance continuity.
Last updated date, GDPR alignment, consent banner behavior, 90-day attribution windows, and consent logging remain intact. We include first-party cookies like 6club_session and 6club_token, third-party analytics (Google Analytics, Hotjar), and marketing pixels (Facebook, DoubleClick, Google Ads, Microsoft Ads) as previously disclosed.
Essential, Functional, Analytics, Marketing
Cookie categories
90 days
Consent window
Session to 2 years
Retention
Consent & Legitimate Interest
Lawful bases
Compliance snapshot
GDPR, consent, control
Essential only by default
Non-essential cookies fire only after consent.
Granular choices
Accept all, reject all, or toggle categories.
Retention clarity
Session to 2-year lifetimes disclosed.
Rights respected
Access, delete, withdraw consent anytime.
Quick Summary
What this Cookie Policy covers
We restate the legacy summary: essential cookies are required for security and login; functional cookies remember language, currency, timezone, and interface choices; analytics cookies measure usage, performance, and behavior; marketing cookies deliver relevant promotions with your consent. Cookies may be first-party (set by 6 Club) or third-party (analytics, ad platforms, payment helpers). Similar technologies include local storage, session storage, web beacons, and device fingerprinting—collectively referred to as cookies in this policy.
Essential
Security, authentication, session continuity, load balancing, consent state.
Functional
Language, currency, timezone, favorites, theme, sound, layout preferences.
Analytics
Usage, performance, bounce, heatmaps, funnel insights.
Marketing
Attribution, frequency capping, personalization with consent.
Consent banner offers accept all, reject all, and granular toggles. You can withdraw at any time via the Manage Cookies section.
Definitions
What cookies are and how they work
Cookies are small text files placed on your device. We also use local storage, session storage, web beacons, and device fingerprinting. Session cookies expire when you close your browser; persistent cookies last for defined periods. First-party cookies are set by 6 Club; third-party cookies by trusted vendors (analytics, ads, payment performance). This section preserves the legacy explanation to maintain SEO signals.
Duration
Session cookies clear on browser close. Persistent cookies remain until their expiry or manual deletion.
Origins
First-party: set by 6 Club. Third-party: set by analytics/ad vendors under contract and DPAs.
Similar tech
Local storage, session storage, beacons, device fingerprinting. All managed under this policy.
Purpose
Why we use cookies
- Authenticate sessions and keep accounts secure.
- Remember preferences: language, currency, timezone, theme, favorites.
- Enhance security and fraud detection, including CSRF/XSS protections.
- Optimize performance, load times, and routing.
- Personalize content and promotions when permitted.
- Measure usage, funnels, bounce, and performance metrics.
- Deliver relevant advertising and cap frequency with consent.
- Support payments and withdrawal flows with consistent session context.
- Assist support with context to resolve issues faster.
- Meet legal and responsible gaming obligations.
Categories
Types of cookies we use
Below are the cookie families from the legacy policy, with purposes and retention preserved. Essential cookies cannot be disabled; others require consent or can be toggled.
Essential (Strictly Necessary)
Required for security, authentication, routing, and consent storage.
- 6club_session — Session — Maintains login session across pages.
- PHPSESSID — Session — Preserves session state for auth/security.
- 6club_token — 30 days — Security token for CSRF and auth integrity.
- 6club_remember — 30 days — Remember-me for returning logins (encrypted).
- 6club_secure — Session — Mitigates XSS/CSRF by binding to secure context.
- load_balancer — Session — Routes traffic to optimal node for performance.
- cookie_consent — 1 year — Stores consent choices to respect preferences.
Functional (Preference)
Improve experience by remembering choices and UI states.
- 6club_lang — 1 year — Stores preferred language.
- 6club_currency — 1 year — Stores preferred currency display.
- 6club_timezone — 1 year — Aligns times for events and tournaments.
- 6club_game_view — 90 days — Remembers grid/list game layout.
- 6club_sound — 1 year — Stores sound on/off and volume preferences.
- 6club_theme — 1 year — Stores display theme selection.
- 6club_favorites — 1 year — Keeps favorite games shortlist.
- chat_widget_minimized — Session — Remembers chat widget state.
Analytics & Performance
Anonymous, aggregated metrics to improve performance and UX.
- _ga (Google Analytics) — 2 years — Distinct users and site interactions.
- _gid (Google Analytics) — 24 hours — Session-level user distinction.
- _gat (Google Analytics) — 1 minute — Throttle request rate on high traffic.
- 6club_analytics — 1 year — Internal analytics for views, bounce, navigation.
- 6club_performance — 30 days — Monitor page load and tech metrics.
- _hjid (Hotjar) — 1 year — Unique Hotjar ID for heatmaps.
- _hjIncludedInPageviewSample (Hotjar) — 30 minutes — Sampling flag for Hotjar.
Marketing & Advertising
Personalization, attribution, frequency capping, and campaign measurement with consent.
- 6club_marketing_id — 90 days — Unique marketing identifier for personalization.
- 6club_campaign — 30 days — Tracks campaign source attribution.
- _fbp (Facebook) — 90 days — Stores and tracks visits for ad delivery.
- fr (Facebook) — 90 days — Ad delivery and effectiveness.
- IDE (DoubleClick) — 1 year — Ad impressions/interactions for retargeting.
- test_cookie (DoubleClick) — 15 minutes — Checks browser support for cookies.
- _gcl_au (Google Ads) — 90 days — Stores ad click info for conversion tracking.
- _uetsid (Microsoft Ads) — 1 day — Session ID for ad attribution.
- _uetvid (Microsoft Ads) — 16 days — Visitor ID for ad attribution.
We carefully select third-party providers and execute DPAs. Cookies are limited to stated purposes and durations.
Manage
How to control cookies
You can accept all, reject all, or toggle categories via the consent banner or preferences center. You can also delete or block cookies in your browser. Opting out of non-essential cookies does not affect essential site functionality, but may reduce personalization or analytics accuracy.
In-product controls
- Consent banner on first visit with accept/reject and category toggles.
- Preferences center accessible via footer link or banner link.
- Withdraw consent anytime; changes apply going forward.
Browser controls
- Clear cookies and site data in browser settings.
- Block third-party cookies or all cookies (may impact login/session).
- Use private/incognito modes to limit persistence.
If you delete cookies, previously set preferences (including opt-outs) may be removed and you may need to set them again.
Lawful Basis
Consent, legitimate interest, and necessity
Essential cookies rely on legitimate interest or contractual necessity (security, authentication, service delivery). Functional, analytics, and marketing cookies rely on your consent. You can withdraw consent at any time without affecting the lawfulness of prior processing.
Retention disclosure
Durations range from session to two years, as listed above. We do not extend retention without notifying you. Logs of consent choices may be retained to demonstrate compliance.
Data minimization
Identifiers are limited to what is necessary for stated purposes. Analytics data is aggregated; marketing IDs are pseudonymous. Sensitive categories are not inferred from cookies.
Your Rights
Access, delete, restrict, and withdraw consent
Under GDPR and applicable laws, you can request access to your data, correction, deletion, restriction, portability (where applicable), and withdraw consent for non-essential cookies. You may object to processing based on legitimate interests. Exercising these rights will not affect your ability to use essential services, though some features may degrade without optional cookies.
How to exercise
- Use the cookie preferences center to withdraw consent.
- Submit a data rights request via the contact page or support email.
- Specify the scope (access, delete, restrict, object) for faster handling.
Verification & response
- We may request proof of identity for security.
- Responses target statutory timelines (usually 30 days).
- We log and honor opt-outs, including marketing withdrawals.
To raise concerns, contact support@6club.ai. You may also lodge a complaint with your data protection authority.
Third Parties
Vendors, transfers, and safeguards
We use reputable providers (Google Analytics, Hotjar, Facebook, Google Ads, Microsoft Ads, payment performance vendors). Data may transfer internationally with safeguards such as SCCs or equivalent. We do not sell personal data; marketing IDs are pseudonymous. Access is limited to need-to-know personnel and vendors under contract.
Security
TLS in transit, encryption at rest where applicable, access controls, monitoring, and periodic reviews of vendor compliance.
Retention and deletion
We honor vendor-level deletion windows and remove or anonymize data upon request where feasible, consistent with the legacy policy commitments.
Updates
Changes to this Cookie Policy
We will update this policy when cookie practices change (new vendors, new durations, new categories) or when legal requirements evolve. We maintain the legacy commitment to notify users of material changes and to display the last updated date clearly.
Last updated
December 15, 2025 (aligned with legacy page). Future updates will be stamped and communicated through the banner or site notice.
Control Your Experience
Manage cookies, stay informed, play securely
Review and adjust your cookie settings anytime. Essential cookies keep the platform secure and functional. Functional, analytics, and marketing cookies enhance your experience and help us improve—enabled only with your consent.
This page retains the legacy structure, terminology, and disclosures to protect SEO value while delivering clearer design, SVG visuals, and modern accessibility.
18+ • GDPR-aligned • Transparent consent controls • No emojis used
Next steps
Set preferences now
- Accept or reject non-essential cookies.
- Toggle categories individually.
- Reopen settings anytime from the footer link.
- Contact us for data rights requests.
Settings persist via the consent cookie (1 year). Deleting cookies may reset preferences.