Privacy Policy

2.1 Information you provide

• Registration: name, date of birth, gender, email, mobile, address, username, encrypted password, preferences.
• KYC: government ID (Aadhaar, PAN, Passport, Driving License), proof of address, selfies, biometric data if required.
• Financial: bank account and IFSC, UPI IDs, wallet details, card last four digits/expiry/type, transaction history, crypto wallet addresses.
• Communications: support inquiries, surveys, feedback, chat transcripts, emails, recorded calls with notice.

2.2 Information collected automatically

• Device/technical: IP, device ID, MAC, OS, model, browser, language, screen, time zone.
• Usage: login timestamps, pages visited, features used, game history, betting patterns, bonuses claimed, search queries, click-throughs.
• Location: approximate IP-based location; precise location only with explicit permission.

2.3 Information from third parties

• KYC verification results and sanctions screening outcomes.
• Payment confirmations from gateways and processors.
• Fraud signals from security vendors; AML risk scores.
• Marketing analytics with consent; public social data if accounts are connected.

4.1 Service providers

• Payment processors for deposits and withdrawals.
• KYC/AML vendors for verification.
• Cloud and hosting providers for infrastructure.
• Game studios to deliver content and track play.
• Support and ticketing tools.
• Analytics and marketing partners (with consent).
• Security vendors for fraud detection.

All vendors are bound by data protection agreements and purpose limitations.

4.2 Legal, transfers, and consent

• Disclosures required by law, court order, or regulators.
• Cooperation with law enforcement and AML reporting.
• Business transfers (merger, acquisition); protections remain in place.
• Aggregated/anonymized insights that do not identify individuals.
• Any other sharing only with your explicit consent.

6.1 Technical controls

• TLS/SSL 256-bit in transit; AES-256 at rest for sensitive data.
• PCI DSS Level 1 gateways; card tokenization; no full PAN storage.
• Firewalls, intrusion detection, and rate limiting.
• Role-based access and least-privilege enforcement.
• Password hashing with strong algorithms.
• Optional 2FA for account access and withdrawals.

6.2 Organizational controls

• Staff training and confidentiality agreements.
• Vendor security assessments and DPAs.
• Incident response runbooks and breach notification procedures.
• Periodic audits and penetration testing.

6.3 Your responsibilities

• Use strong unique passwords; enable 2FA.
• Do not share 6 Club Login credentials.
• Log out on shared devices; avoid risky networks without protection.
• Report suspicious activity promptly.

6.4 Breach notification

If a breach affects your data, we will notify you and regulators as required, describing scope, impact, and mitigations.

8.1 Rights you may exercise

• Access: obtain a copy of personal data and processing details.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion where permissible.
• Restriction: limit processing in specific contexts.
• Portability: receive data in a structured, machine-readable format.
• Object: to processing based on legitimate interests or direct marketing.
• Withdraw consent: where consent is the basis; past processing remains lawful.
• Complaint: lodge with a supervisory authority.

8.2 How to exercise

• Contact the DPO via email with subject "Privacy/Data Protection Inquiry".
• Provide full name, registered email, and request details.
• Verify identity; response target is 30 days or as required by law.

8.3 Limitations

• Legal obligations and retention requirements may restrict deletion.
• Ongoing investigations, fraud prevention, or rights of others may limit fulfillment.

8.4 Marketing choices

• Unsubscribe links in emails.
• Account notification preferences where available.
• Support can adjust preferences on request.
• Transactional messages will still be sent as needed.

Transfer safeguards

• Standard Contractual Clauses where applicable.
• Adequacy decisions and equivalent protections.
• Binding rules and contractual security requirements.
• Encryption during transfer; vetted vendors.

Locations and consent

Service providers may operate in India, the EU, the United States, and other jurisdictions. By using 6 Club, you consent to such transfers with the described safeguards.

• We update the Last Updated date when changes occur.
• Material changes may be announced via email, in-app notices, login banners, or required acknowledgment.
• Continued use after updates implies acceptance; discontinue use and close your account if you disagree.

Prior versions

Archived versions are available upon request for compliance or reference.