Privacy Policy — a6wim

1. Introduction

a6wim ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or uses our platform. a6wim is an English-language online betting and casino information platform serving Pakistani users. This Privacy Policy sets out, in clear and transparent terms, the basis on which we collect, use, store, share and protect personal data in connection with the operation of our platform.

This Policy is drafted in accordance with internationally recognised data protection principles, including those reflected in the European Union's General Data Protection Regulation (GDPR) as a global best-practice standard, and other applicable data protection frameworks. We apply these standards as a matter of operational commitment regardless of whether they are legally mandated in Pakistan.

This Privacy Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference.

2. Definitions

• "Personal Data" means any information that identifies or can identify a natural person, directly or indirectly, including name, CNIC number, email address, IP address or financial account details.
• "Processing" means any operation performed on personal data — including collection, recording, storage, use, transmission, restriction, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. For users of a6wim, the Data Controller is a6wim as described in Section 3.
• "Data Processor" means any third party that processes personal data on behalf of the Data Controller under a contractual arrangement.
• "User" / "You" means any individual who accesses, registers with or otherwise uses the a6wim platform.
• "Cookies" means small text files placed on your device by web servers to store preference and session information.
• "KYC" means Know Your Customer — the identity and age verification process.
• "AML" means Anti-Money Laundering — procedures applied to detect and prevent financial crime.
• "Special Category Data" means sensitive personal data including health information, which we do not routinely collect but may handle in the context of responsible gambling self-exclusion requests.

3. Data Controller

a6wim acts as the Data Controller in respect of all personal data collected through the a6wim platform. As Data Controller, a6wim determines the purposes for which your personal data is collected and the means by which it is processed. We are responsible for ensuring that all processing activities under our control comply with this Privacy Policy and applicable data protection standards.

For all data protection enquiries, requests to exercise your rights, or complaints relating to personal data handling, please contact us at: [email protected] (plain text — not a clickable link).

4. Data We Collect

4.1 Data You Provide Directly

When you register an account, use our services or contact support, we may collect the following categories of personal data:

• Identity Data: Full name, date of birth, CNIC number or passport number (collected during KYC verification).
• Contact Data: Email address, phone number and residential address (city and country, e.g., Karachi, Lahore, Islamabad).
• Account Credentials: Username and encrypted password hash. We never store passwords in plain text.
• Financial Data: Payment method identifiers, transaction amounts in PKR, deposit and withdrawal history. Full bank account numbers and mobile wallet credentials are not stored by a6wim — these are handled by payment processors.
• Verification Documents: Copies of CNIC, passport, proof of address documents and selfie/liveness images submitted during KYC.
• Communication Records: Correspondence sent to our support team via email or live chat, including timestamps and message content.

4.2 Data Collected Automatically

When you access a6wim, we automatically collect certain technical and behavioural data:

• Device & Technical Data: IP address, browser type and version, operating system, device type and screen resolution.
• Usage Data: Pages visited, features used, session duration, referring URLs and click-path data within the platform.
• Cookie Data: Session identifiers, preference settings and analytics identifiers. See Section 10 for full details.
• Log Data: Server-side logs recording access times, error events and security-relevant requests.

4.3 Data From Third Parties

In limited circumstances, we may receive personal data from third parties, including:

• Identity verification service providers used to validate KYC documents;
• Fraud detection and AML screening services;
• Payment processors confirming transaction outcomes.

All third-party data sources are subject to contractual data protection obligations consistent with this Policy.

5. Lawful Basis for Processing

We process your personal data only where we have a lawful basis to do so. The applicable bases are:

Processing Activity	Lawful Basis
Account registration and management	Performance of contract
KYC identity and age verification	Legal obligation / legitimate interests
Processing deposits and withdrawals (PKR)	Performance of contract
AML transaction monitoring	Legal obligation
Fraud prevention and security monitoring	Legitimate interests
Sending transactional communications	Performance of contract
Sending marketing communications (where opted in)	Consent
Platform analytics and improvement	Legitimate interests
Responsible gambling interventions	Legitimate interests / legal obligation
Compliance with court orders or regulatory requests	Legal obligation

6. How We Use Your Personal Data

a6wim uses personal data strictly for the purposes set out below. We do not use your data for purposes incompatible with those listed:

• To create, manage and administer your user account on the a6wim platform;
• To verify your identity and age in compliance with KYC requirements;
• To process PKR deposits and withdrawals through available payment methods;
• To detect and prevent fraud, money laundering and account abuse;
• To send you transactional communications such as deposit confirmations, withdrawal notifications and security alerts;
• To respond to support queries and complaints submitted via email or live chat;
• To deliver responsible gambling interventions — such as limit confirmations, self-exclusion notices or cooling-off alerts — where applicable;
• To analyse platform usage patterns and improve our content, navigation and services;
• To comply with our legal and regulatory obligations;
• To send marketing communications where you have provided explicit consent — you may withdraw this consent at any time.

7. Data Sharing & Disclosure

a6wim does not sell, rent or trade your personal data to any third party for commercial purposes. We may share personal data in the following limited circumstances:

7.1 Service Providers (Data Processors)

We engage third-party service providers to assist with platform operations — including KYC verification providers, payment processors, fraud detection services, cloud hosting providers and customer support technology vendors. These processors act under written data processing agreements and are permitted to use your data only for the specific purpose for which it was disclosed.

7.2 Payment Method References

Where PKR transactions are processed via familiar Pakistan-market methods such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah, the relevant payment processor receives only the transactional data necessary to complete the payment. None of these providers receive your a6wim account credentials, betting history or KYC documents. These references are purely contextual and do not imply any endorsement, partnership or affiliation between these institutions and a6wim.

7.3 Legal & Regulatory Disclosure

We may disclose personal data to competent authorities, courts, regulators or law enforcement agencies where required by applicable law, court order or regulatory obligation. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of a6wim's business, personal data may be transferred to the acquiring entity as part of that transaction. Any such transfer will be subject to equivalent data protection commitments. Users will be notified of material changes to data controllership.

8. Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory or operational obligations. The following general retention periods apply:

• Account and KYC Data: Retained for the duration of the account relationship, plus a minimum of five (5) years after account closure to comply with AML and record-keeping obligations.
• Transaction Records (PKR deposits and withdrawals): Retained for a minimum of five (5) years to satisfy financial record-keeping requirements.
• Support Communications: Retained for up to three (3) years from the date of last contact, or longer if required for ongoing dispute resolution.
• Marketing Consent Records: Retained until consent is withdrawn, plus a reasonable period thereafter to evidence the withdrawal.
• Technical and Usage Logs: Typically retained for 90 days, unless extended for security investigation purposes.
• Cookie Data: Subject to the specific expiry period of each cookie — see Section 10.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer identify you.

9. Security Measures

a6wim applies appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, disclosure, alteration or destruction. Our security measures include:

• Encryption in Transit: All data transmitted between your device and a6wim servers is protected by TLS (Transport Layer Security) encryption. Our platform operates exclusively over HTTPS.
• Encryption at Rest: Sensitive data fields — including identity document references and financial identifiers — are encrypted in our databases using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. Access is governed by role-based permissions and logged for audit purposes.
• Password Security: User passwords are stored as salted cryptographic hashes. We never store or transmit passwords in plain text.
• Security Monitoring: We operate continuous monitoring for suspicious activity, intrusion attempts and anomalous access patterns.
• Third-Party Security Assessments: Our key service providers are assessed for security compliance as part of our vendor due diligence process.

10. Cookies & Tracking Technologies

a6wim uses cookies and similar tracking technologies to operate the platform, analyse usage and — where consent is obtained — to deliver relevant information to users. The following categories of cookies are used:

Cookie Category	Purpose	Consent Required
Strictly Necessary	Essential for platform functionality — session management, authentication, security tokens and load balancing. Cannot be disabled without breaking core platform functions.	No — essential operation
Functional / Preference	Store user preferences such as language settings, display options and remembered login state. Improve the personalised experience of returning users.	Yes
Analytics	Collect aggregated, anonymised data about how users navigate the platform — pages visited, session duration, error rates. Used to improve content and technical performance.	Yes
Marketing	Track user interactions for the purpose of delivering relevant promotional content. Used only where explicit consent has been given. No third-party advertising networks are used to profile users for external marketing.	Yes — explicit opt-in only

You may manage your cookie preferences at any time through your browser settings or through a6wim's cookie consent interface. Disabling non-essential cookies will not prevent you from using core platform features. Note that disabling strictly necessary cookies may affect platform functionality.

11. Children's Privacy

a6wim does not knowingly collect personal data from individuals under the age of 18, or under the higher minimum age required by the operator's licensing jurisdiction. Our platform is strictly for adults. If we discover that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has registered on or submitted data to a6wim, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

12. International Data Transfers

a6wim's platform infrastructure may involve the storage or processing of personal data in data centres located outside Pakistan. Where personal data is transferred to countries that may not have data protection laws equivalent to internationally recognised standards, we ensure that appropriate safeguards are in place — such as contractual clauses based on standard contractual provisions, or transfers to jurisdictions recognised as offering adequate data protection.

By using a6wim, you acknowledge that your personal data may be transferred to, stored in and processed in jurisdictions outside Pakistan as described above. We take all reasonably practicable steps to ensure that any such transfers are governed by adequate protections.

13. Your Data Rights

Subject to applicable law and certain operational limitations, you hold the following rights in respect of your personal data held by a6wim:

To exercise any of these rights, please submit a written request to [email protected]. We may need to verify your identity before processing any rights request to protect against unauthorised requests. We will respond within 30 calendar days of receiving a verified request.

14. Complaints

If you believe that a6wim has not handled your personal data in accordance with this Privacy Policy, you have the right to lodge a complaint. We strongly encourage you to contact us directly in the first instance, as we are committed to resolving privacy concerns promptly and transparently.

To raise a privacy complaint, please contact: [email protected]. We will acknowledge your complaint within 5 business days and provide a substantive response within 30 calendar days. If we are unable to resolve the matter to your satisfaction within that period, we will inform you of available escalation options.

15. Policy Amendments

a6wim reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, platform features, applicable law or regulatory guidance. Any updates will be published on this page with a revised "Last Updated" date. Where changes are material — such as a change to the categories of data collected or a new purpose for processing — we will provide prominent notice through the Platform.

Your continued use of a6wim following the publication of an updated Privacy Policy constitutes your acknowledgement of those changes. We encourage you to review this page periodically.

16. Contact Us

For any questions, requests or concerns relating to this Privacy Policy or to your personal data held by a6wim, please contact us through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through the Platform interface
• Response Time: Privacy enquiries are acknowledged within 5 business days and substantively addressed within 30 calendar days
• Languages: English and Urdu

Our support team serves users across all major Pakistani cities including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.