Privacy Policy

SixFiveNine Interactive LLC · Version 2026-08-28

SixFiveNine Interactive LLC ("SixFiveNine," "we") operates sixfivenine.io and the SixFiveNine iOS app, a head-to-head, skill-based competition. This policy explains what information we collect, why, who we share it with, and the choices you have. Questions: support@sixfivenine.io.

What we collect

Account and profile. Email address, username, first and last name, phone number, ZIP code, your self-attested date of birth, and records of which Terms and Privacy Policy versions you accepted.

Verification and compliance state. Email and phone verification status, the status of identity verification performed by our identity vendor (not the documents themselves; see below), risk signals from that vendor, and decision records for eligibility screening. Those decision records store a truncated network prefix and cryptographic digests, not full IP addresses or raw screening payloads.

Financial records. Account balance, deposits, withdrawals, match entry fees and payouts, and the transaction records behind them.

Gameplay. Match history, in-game actions, and match replays.

Support and notifications. Messages you send us and your in-app mailbox.

Connection data. Your IP address is used in real time to verify your location and eligibility. It is transmitted to our screening vendor for that check; our own audit records keep only a truncated prefix. Standard server logs exist for operations and diagnostics.

What we deliberately never hold

The platform is designed so the most sensitive data classes are never stored on our systems; most never reach them at all:

Identity documents and biometrics. When identity verification is required, you submit your government ID and selfie directly to our identity vendor's secure flow. Document images and biometric data never transit or rest on SixFiveNine servers, and we do not create biometric identifiers.
Card numbers. Deposits happen on our payment processor's hosted payment page, or via tokenized Apple Pay. Card numbers, CVV codes, and track data are never stored, processed, or transmitted through SixFiveNine systems.
SMS verification codes. Phone verification codes are generated and checked by our phone-verification provider; we never create or store them.
Full IP addresses in audit records. Compliance audit records keep a truncated prefix only.
Social Security numbers. Not collected. If tax reporting ever requires a taxpayer identification number, it will be collected through a dedicated, secured process and we will tell you first.

How we use your information

To operate the service and run your matches; to verify age, identity, and location where the law or our compliance program requires it; to prevent fraud, collusion, and abuse; to process deposits and withdrawals; and to respond to your support requests.

Gameplay may be published. Match replays, in-game actions, match chat, results, stakes, and the username you played under may appear in our marketing and video content (highlight reels, social media, YouTube, tutorials) under the gameplay and publicity license in §14 of the Terms. Your username is public by design; choose one you are comfortable seeing published. We do not attach your legal name, email, location, or any other account or compliance information to that content.

We do not sell your personal information, and we do not share it for advertising. We currently send transactional and compliance email only; if marketing email is ever introduced, it will ship with unsubscribe handling from day one.

Who we share it with

We share data with the service providers that make the platform work:

Vesant: identity verification, geolocation and eligibility screening, and risk scoring. Receives your name, email, and IP address for screening; you submit ID documents directly to Vesant.
InovioPay: payment processing. Receives payment amounts, order identifiers, transaction-status (postback) data, and a pseudonymous account identifier that correlates your deposits. For Apple Pay, Inovio additionally receives your IP address and browser user agent, and the Apple Pay payment payload — Apple's encrypted payment token plus any billing contact details the payment sheet asked you for (name, email address, phone number, postal address) — which passes through our systems on its way to Inovio and is not stored. You enter card details directly with Inovio.
Twilio: phone verification. Receives your phone number.
Resend: transactional email. Receives your email address and the message content.
Railway: hosting infrastructure for the application and its database.

Beyond these providers, we disclose player data only: to comply with law, legal process, or a governmental request; to enforce our terms and investigate fraud, collusion, or abuse; in a merger, acquisition, or asset sale (with notice to players); or at your direction.

How long we keep it

Profile data lives for the life of your account and is scrubbed when you delete it. Financial and compliance records are kept for seven years (ten for sanctions-related records) under our compliance retention schedule, which follows financial-recordkeeping and dispute-defense standards; that retention survives account deletion. Match replays are retained for the life of your account and become eligible for deletion two years after account closure; they are kept longer only under a documented investigation or litigation hold.

Your choices

Access and correction. Your profile is viewable and correctable in-app, except your attested date of birth, which is fixed at signup (contact support to correct an error there); anything else, ask support.

Deletion. You can delete your account from Settings at any time. Deletion scrubs your personal information (email, name, date of birth, phone, ZIP, credentials, and identity-verification pointers are overwritten), revokes all sessions, and frees your email and username. Deletion is refused (with an explanation) while you are seated in a started tournament or an active real-money match, or while your account is under a regulatory compliance restriction that requires us to preserve it. Records we must keep by law (see above) are retained. Deletion also rewrites your username out of historical replays of matches you played (gameplay content already published under the Terms is not recalled), and the content of your in-app mailbox messages is erased. Each deletion of a verified account additionally queues a deletion-forwarding request to our identity vendor; the vendor offers no deletion API, so our team completes that forwarding as a tracked support request and records its completion.

Requests outside the app are verified against your registered email. We aim to answer within 45 days, and if we deny a request we tell you the specific reason in writing.

Age

SixFiveNine is for adults 18 and older. Signup rejects under-18 dates of birth before an account is even created, and government-ID identity verification is required before any cash play. We do not knowingly collect personal information from anyone under 18 and offer no child-directed service.

Security and breaches

Access to production player data is restricted, the highest-sensitivity data classes are never stored on our systems by design, and suspected incidents are handled under a written incident-response procedure. If a breach affects your personal information, we will notify you and the required regulators as applicable law requires, without unreasonable delay.

Changes

This policy is version-stamped. When it changes materially, you will be required to re-accept the latest version before starting further real-money activity: new deposits, withdrawals, and cash-match entry.