six6 Privacy Policy — How We Collect, Use, and Protect Your Data

1. Introduction and Scope

This Privacy Policy ("Policy") is published by six6, an online entertainment and betting platform accessible at https://six6.win ("the Platform", "We", "Us", "Our"). This Policy applies to all personal data collected from individuals ("Members", "Users", "You") who visit, register on, or otherwise interact with the six6 platform, including through the website, any associated mobile interface, customer support channels, and promotional communications.

By registering an account on six6 or continuing to use the platform after this Policy takes effect, you acknowledge that you have read and understood how your personal data is handled as described herein. If you do not agree with any part of this Policy, you should discontinue use of the platform and contact us to arrange closure of your account.

This Policy should be read alongside the six6 Terms & Conditions, which together form the complete agreement governing your use of the platform. In the event of a conflict between this Policy and the Terms & Conditions on matters of data handling, this Policy shall prevail.

2. Data Controller Information

six6 acts as the data controller in respect of the personal data it collects from members through the platform. As data controller, six6 is responsible for determining the purposes and means by which your personal data is processed.

All data protection enquiries, access requests, and complaints should be directed to the six6 Data Protection contact at [email protected]. six6 will acknowledge data-related requests within 5 business days and provide a substantive response within 30 calendar days of receipt.

3. Information We Collect

six6 collects personal data through several channels and for distinct purposes. The categories of personal data we collect are set out below.

3.1 Registration and Account Data

When you create a six6 account, we collect the following information:

• Full legal name;
• Date of birth (to verify you are 21 years of age or older);
• Email address;
• Mobile telephone number;
• Residential address (city and district within Bangladesh);
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

To comply with anti-money-laundering obligations and our age verification requirements, six6 may collect and verify:

• Government-issued photo identification (National ID card, passport, or driving licence);
• Proof of address documents (utility bill, bank statement);
• Selfie or live photograph for facial comparison purposes.

KYC documents are processed via our vetted identity verification partner and are retained in encrypted storage. They are never used for any purpose other than identity and age verification and fraud prevention.

3.3 Financial and Transaction Data

When you make a deposit or request a withdrawal on six6, we collect:

• Payment method type (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer);
• Transaction reference numbers and amounts in BDT;
• Account numbers or wallet identifiers associated with your payment method (stored in masked/tokenised form only — we do not store full card numbers).

3.4 Betting and Gaming Activity Data

six6 records full details of all wagering activity on your account, including:

• Bet type, stake amount, odds accepted, and settlement outcome;
• Casino and slot game sessions, including game title, bet size, and result;
• Bonus claims, wagering progress, and reward history.

This data is used for account management, dispute resolution, fraud detection, and responsible gaming monitoring.

3.5 Technical and Device Data

When you access the six6 platform, our servers automatically collect certain technical data:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Pages visited, session duration, and click-stream data;
• Referring URL (the page from which you arrived at six6).

3.6 Communications Data

If you contact six6 via live chat, email, or any other channel, we retain records of that correspondence, including the content of messages and any attachments. This data is used for support delivery, quality assurance, and dispute resolution.

4. How We Use Your Information

The table below summarises the primary purposes for which six6 uses the personal data it collects, together with the categories of data involved in each purpose.

six6 does not use your personal data for automated profiling that produces legal or similarly significant effects without human review. Analytics conducted for platform improvement use aggregated, anonymised data sets that cannot be used to identify individual members.

5. Legal Basis for Processing

six6 processes personal data under the following legal bases:

• Contractual necessity: Processing required to perform the contract with you — that is, to operate your account, accept wagers, and process payments.
• Legal obligation: Processing necessary to comply with applicable laws, including anti-money-laundering regulations, age verification requirements, and financial record-keeping obligations.
• Legitimate interests: Processing necessary for the legitimate interests of six6 or third parties, such as fraud prevention, platform security, and improving service quality, provided those interests are not overridden by your rights.
• Consent: Where you have given explicit consent, such as for receiving promotional emails or push notifications. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

6. Cookies and Tracking Technologies

six6 uses cookies and similar tracking technologies to provide a functional, secure, and personalised platform experience. Cookies are small text files stored on your device by your browser.

6.1 Essential Cookies are required for the platform to function correctly. They maintain your session state, store authentication tokens, and enable security features. These cookies cannot be disabled without impairing platform functionality.

6.2 Analytics Cookies allow six6 to measure aggregate usage patterns — such as which pages are visited most frequently, how long sessions last, and where users encounter errors. The data collected is anonymised and used solely for platform improvement. You may opt out of analytics cookies by adjusting your browser settings.

6.3 Preference Cookies remember your platform settings (such as language preferences) between sessions to improve your experience.

six6 does not use third-party advertising cookies or permit ad-network tracking technologies on the platform. You can manage cookie preferences through your browser settings at any time. Note that disabling essential cookies may prevent certain platform features from operating correctly.

7. Data Sharing and Third Parties

six6 does not sell, rent, or trade your personal data to third parties for commercial purposes. Personal data is shared only in the circumstances described below.

7.1 Payment Processors. Transaction data is shared with payment processing partners (including mobile financial service providers such as bKash, Nagad, and Rocket, and card networks Visa and Mastercard) solely to process deposits and withdrawals on your behalf. These processors act under strict data processing agreements and may not use your data for any other purpose.

7.2 Identity Verification Partners. KYC data including identity documents and photographs is shared with our vetted identity verification service provider solely for the purpose of age and identity verification. This provider operates under a data processing agreement with six6 and is bound by confidentiality obligations.

7.3 Game Technology Providers. Game session data is transmitted to game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi as technically necessary to deliver casino and slot game functionality. These providers do not receive personal identification data beyond what is technically required to run the game session.

7.4 Legal and Regulatory Disclosure. six6 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or legal process. Where possible, six6 will notify you of such disclosure before it occurs unless prohibited by law from doing so.

7.5 Business Transfers. In the event of a merger, acquisition, or sale of substantially all assets of six6, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to data handling practices that result from it.

8. International Data Transfers

six6 operates primarily within the Bangladesh market and stores member data on infrastructure located in secure data centres. Where data is transferred to or processed by service providers located outside Bangladesh (for example, game technology providers with global infrastructure), six6 ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to that applied within Bangladesh.

If you have questions about the specific safeguards applied to any international data transfer, please contact us at [email protected].

9. Data Retention

six6 retains personal data for as long as is necessary for the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The general retention schedule applied by six6 is as follows:

• Active account data: Retained for the duration of your account and for a minimum of 5 years following account closure, in compliance with financial record-keeping requirements.
• KYC and identity documents: Retained for a minimum of 5 years following account closure.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Customer support communications: Retained for 3 years from the date of the last correspondence.
• Technical and device logs: Retained for up to 12 months, after which they are deleted or anonymised.
• Marketing consent records: Retained for 3 years from the date consent was last confirmed or withdrawn.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.

10. Your Rights

As a member of the six6 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with your request. We will respond within 30 calendar days.

• Right of Access: You may request a copy of the personal data six6 holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: If any of the personal data six6 holds about you is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations.
• Right to Restrict Processing: You may request that six6 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and carried out by automated means, you may request your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data where that processing is based on legitimate interests. You also have an absolute right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

11. Children and Minors

The six6 platform is strictly intended for adults aged 21 and above. six6 does not knowingly collect personal data from any person under the age of 21. If six6 discovers that personal data has been collected from a person below the minimum age, that data will be deleted immediately and the associated account closed without notice.

If you believe that a person under 21 has created a six6 account, please notify us immediately at [email protected] so that we can take appropriate action. six6 takes the protection of minors from gambling harm extremely seriously and applies age verification checks at account registration and prior to processing any withdrawal.

12. Security Measures

six6 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the six6 platform;
• Encryption of sensitive data at rest, including identity documents and payment method details;
• Role-based access controls, ensuring that only authorised personnel can access personal data on a strict need-to-know basis;
• Regular security assessments and vulnerability testing of platform infrastructure;
• Multi-factor authentication options for member accounts;
• Automatic session timeout after a period of inactivity;
• Continuous monitoring of platform systems for unusual activity or potential security incidents.

While six6 takes all reasonable steps to protect your data, no digital platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, six6 will notify affected members and relevant authorities as promptly as reasonably practicable.

13. Changes to This Policy

six6 reserves the right to amend this Privacy Policy at any time to reflect changes in law, regulation, platform functionality, or data processing practices. Where changes are material — meaning they affect the nature, scope, or purpose of data processing in a way that could significantly impact your rights — six6 will provide at least 7 days' prior notice via the platform or by email to your registered address.

Minor, non-material changes (such as clarifications of existing practices, corrections to typographical errors, or formatting updates) may be made without advance notice. The "Last Updated" date shown at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how six6 handles your personal data.

14. Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how six6 has handled your personal data, please contact us using the details below:

• Data Protection Enquiries: [email protected] (plain text — not a link)
• Response Timeframe: Acknowledgement within 5 business days; full response within 30 calendar days
• Live Chat: Available 24/7 on the six6 platform for general support queries
• Support Hours: Live Chat 24/7 · Email responses: 9am–12am BST (UTC+6)

six6 is committed to resolving all privacy-related enquiries fairly and promptly. If you are not satisfied with our response to your complaint, you may have the right to escalate the matter to the appropriate data protection authority in your jurisdiction.