Your Privacy at 6sixe

1. Information We Collect

To provide a secure, personalised, and legally compliant gaming service to players across Bangladesh, 6sixe collects personal information from several sources. The categories of data we collect are described below.

1.1 Information You Provide Directly

When you create an account, complete identity verification, contact support, or interact with any feature of the 6sixe platform, you may provide us with the following categories of personal data:

1.2 Information Collected Automatically

When you access the 6sixe platform — whether via a desktop browser or a mobile browser — our systems automatically collect certain technical and behavioural data:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution;
• Session data: Login timestamps, session duration, pages visited, features interacted with, games launched;
• Transaction data: Deposit amounts, withdrawal requests, game rounds played, bet amounts, win/loss records, bonus activity;
• Location data: Approximate geolocation derived from your IP address, used to verify that you are accessing the platform from an eligible location;
• Referral data: The URL from which you arrived at the 6sixe platform (where applicable), used to measure the effectiveness of our promotional activities.

1.3 Information from Third Parties

We may receive additional personal data about you from third parties in certain circumstances, including:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) — transaction confirmation data and fraud signals;
• Identity verification service providers — verification outcome (pass/fail), document authenticity signals;
• Game providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi) — game round data, RNG certification data, and in rare cases, player conduct flags raised during live dealer sessions.

2. How We Use Your Information

6sixe processes your personal data only for specific, documented purposes. We do not use your data in ways that are incompatible with the purposes described at the time of collection. The primary purposes for which we use your personal data are set out below.

2.1 Account Management and Service Delivery

The most fundamental use of your personal data is to operate your 6sixe account and deliver the services you have requested. This includes creating and maintaining your account, processing deposits and withdrawals in Bangladeshi Taka via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, authenticating your identity at login, crediting bonuses and processing wagering activity, and providing customer support via live chat and email.

2.2 Identity Verification and Fraud Prevention

We are required to verify the identity of every player before processing withdrawals and at other key account milestones. Your identity data and document data are used to confirm that you are who you say you are, that you meet the minimum age requirement of 18 years, and that your account is not being used for fraudulent, money-laundering, or other prohibited purposes. Automated fraud detection systems analyse transaction patterns and behavioural signals to flag activity that is inconsistent with normal play.

2.3 Legal and Regulatory Compliance

Certain processing of your personal data is required to comply with applicable legal obligations. This includes maintaining transaction records for audit purposes, responding to lawful requests from competent authorities, implementing responsible gaming obligations (including self-exclusion and deposit limit enforcement), and retaining documentation required under anti-money-laundering frameworks.

2.4 Platform Improvement and Analytics

Aggregated and anonymised data derived from player behaviour is used to understand how the platform is used, identify technical issues, improve the user interface, and develop new features. Where analytics processing involves personal data, it is carried out on the basis of our legitimate interests and is subject to appropriate safeguards. We do not use individual player profiles to make automated decisions that produce legal or similarly significant effects without human review.

2.5 Marketing and Promotions

With your consent — given at registration or at any time thereafter via your account communication preferences — we may use your contact data to send you information about 6sixe promotions, bonuses, new game launches, and seasonal offers relevant to the Bangladesh market (for example, promotions tied to BPL cricket season, Eid, or Pohela Boishakh). You may withdraw your consent to marketing communications at any time by updating your preferences in your account dashboard or by contacting support at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal.

2.6 Responsible Gaming Monitoring

6sixe uses transaction and behavioural data to monitor for signs of potentially harmful gambling patterns. Where our systems or support team identify such patterns — such as rapidly escalating deposit amounts, extended session lengths, or frequent deposit-and-loss cycles — we may proactively contact the player with responsible gaming information or apply temporary protective measures in accordance with our Responsible Gaming policy.

3. Legal Basis for Processing

For each category of personal data we process, 6sixe relies on one or more of the following lawful bases:

Where we rely on legitimate interests as our legal basis, we have conducted a balancing assessment to confirm that our interests do not override your fundamental rights and freedoms. You have the right to object to processing carried out on the legitimate interests basis — see Section 7 for details.

4. Data Sharing and Disclosure

6sixe does not sell your personal data to any third party. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

4.1 Service Providers and Data Processors

We engage carefully selected third-party service providers to help us deliver and operate the 6sixe platform. These providers process your data only on our documented instructions and are contractually prohibited from using it for their own purposes. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa network processors, and Mastercard network processors — to process your deposit and withdrawal transactions in BDT;
• Identity verification providers: Third-party KYC and document verification specialists who assess the authenticity of the identity documents you submit;
• Game providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi, and other licensed studios — who receive the minimum player data required to launch and operate their games within the 6sixe platform;
• Cloud infrastructure and hosting providers: Who store and process platform data in secure data centre environments;
• Customer support tooling providers: Who power our live chat and ticketing systems;
• Fraud detection and analytics providers: Who analyse transaction and behavioural data to identify suspicious activity.

4.2 Legal and Regulatory Disclosure

We may disclose your personal data to competent authorities, law enforcement agencies, regulatory bodies, or courts where we are required to do so by applicable law, court order, or lawful regulatory direction. We will, where legally permitted and practically feasible, notify you of such a disclosure before it occurs.

4.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the 6sixe business, your personal data may be transferred to the acquiring or successor entity as part of that transaction. You will be notified of any such transfer and of any material change to the way your data is processed as a result, with reasonable advance notice.

4.4 What We Never Do

• We never sell, rent, or license your personal data to third-party advertisers, marketing agencies, or data brokers;
• We never share your financial data (wallet numbers, card details) with any party other than the relevant payment processor for the purpose of completing your transaction;
• We never share your identity document scans with game providers — game providers receive only the minimum session data required to operate their games.

5. Cookies and Tracking Technologies

The 6sixe platform uses cookies and similar technologies to operate core platform functionality, remember your preferences, and analyse how the platform is used. This section explains what we use, why, and what choices you have.

5.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store information about your preferences or session state. In addition to cookies, we may use local storage, session storage, and pixel tags for similar purposes.

5.2 Categories of Cookies We Use

5.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block third-party cookies, clear existing cookies, and receive notifications when a new cookie is set. Please note that disabling strictly necessary cookies will impair or prevent your ability to log in and use the 6sixe platform. Instructions for managing cookies in the most commonly used browsers are available in each browser's help documentation.

6. Data Retention

6sixe retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. Our general retention periods are as follows:

When personal data reaches the end of its retention period and there is no ongoing legal obligation requiring its preservation, it is securely deleted or anonymised in accordance with our internal data destruction procedures. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and research purposes.

7. Your Rights Over Your Data

As a 6sixe player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact our Data Privacy team at [email protected] with the subject line "Data Privacy Request". We will respond within 30 days of receiving a valid request.

7.1 Right of Access

You have the right to request a copy of the personal data that 6sixe holds about you, together with information about how it is being used. This is commonly referred to as a Subject Access Request (SAR). We will provide this information in a clear, structured format within 30 days, free of charge for the first request in any 12-month period.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. For basic account information (email address, phone number), you can make updates directly through your account profile settings. For identity and document data, please contact support to initiate the correction process.

7.3 Right to Erasure

In certain circumstances, you have the right to request that we delete your personal data. However, this right is not absolute — we may be required to retain certain data to comply with legal obligations (such as transaction records and KYC documentation required under anti-money-laundering rules). Where erasure is not possible in full, we will inform you of what data must be retained and the legal basis for that retention.

7.4 Right to Restriction of Processing

You may request that we restrict the processing of your personal data in specific circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing and we are considering whether our legitimate interests override your rights.

7.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format. You may also request that we transmit this data directly to another service provider where technically feasible.

7.6 Right to Object

You have the right to object to processing of your personal data that is carried out on the basis of our legitimate interests, including profiling for responsible gaming monitoring purposes. On receipt of a valid objection, we will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or that the processing is necessary for the establishment, exercise, or defence of legal claims.

7.7 Right to Withdraw Consent

Where processing is based on your consent — primarily marketing communications — you may withdraw that consent at any time via your account communication preferences or by emailing [email protected]. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

8. Data Security Measures

6sixe implements a comprehensive set of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following key controls.

8.1 Encryption

All data transmitted between your browser and the 6sixe platform is encrypted using TLS 1.2 or TLS 1.3 (the protocol behind HTTPS). Passwords are never stored in plain text — they are processed using a strong one-way hashing algorithm with per-user salting before storage. Payment credentials (wallet numbers, card data) are encrypted at rest using AES-256 encryption.

8.2 Access Controls

Access to personal data within 6sixe's internal systems is governed by the principle of least privilege — staff members are granted access only to the data categories necessary for their specific role. All internal access to player data is logged and subject to periodic audit. Privileged access to backend systems requires multi-factor authentication.

8.3 Incident Response

6sixe maintains a documented data breach response procedure. In the event of a security incident that is likely to result in a risk to your rights and freedoms, we will notify affected players without undue delay and, where required, report the incident to the relevant supervisory authority. Notification will include a description of the nature of the incident, the categories of data affected, and the steps we have taken or propose to take to address it.

8.4 Third-Party Security Standards

All third-party service providers with access to personal data are required to demonstrate equivalent or higher security standards as a condition of engagement. Our payment partners (bKash, Nagad, Visa, Mastercard) operate under their own regulated security frameworks, including PCI DSS compliance for card-based transactions. Game providers are subject to security and fairness certification requirements from their respective licensing authorities.

8.5 Your Role in Security

While 6sixe takes extensive measures to protect your data on our end, the security of your account also depends on your own practices. We strongly recommend that you use a strong, unique password for your 6sixe account, enable two-factor authentication (2FA) from your account security settings, never share your login credentials with any other person, and contact support immediately if you suspect your account has been compromised.

8.6 Changes to This Privacy Policy

6sixe may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes, we will notify registered players via the email address associated with their account and post the revised policy on this page with an updated effective date. We encourage you to review this page periodically. Your continued use of the 6sixe platform following notification of a material change constitutes your acknowledgement of the revised policy.