6xsix Privacy Policy

6xsix ("we", "us", "our", "the Platform") operates the online betting and casino website accessible at https://6xsix.io. We are the data controller responsible for the personal information you provide when registering, depositing, playing, or otherwise interacting with any part of our platform.

This Privacy Policy applies to all users of the 6xsix platform, including registered players, visitors who browse without an account, and individuals who contact our customer support team. It covers all personal data collected through the website, mobile-optimised interface, email communications, live chat, and any other touchpoint associated with the 6xsix brand.

If you have questions about how your data is handled, you may contact our dedicated privacy support channel at any time. Contact details are provided in Section 15 of this policy.

We collect personal information in three principal ways: information you provide directly to us, information generated automatically when you use the platform, and information we receive from third parties such as payment providers and identity verification services.

• Registration data: Full legal name, date of birth, residential address (including city, e.g., Dhaka, Chittagong, Sylhet, Khulna), email address, and mobile phone number.
• Identity verification (KYC) documents: Copies of your national identity card, passport, or birth certificate; proof of address documents such as utility bills or bank statements; and payment method confirmation (e.g., bKash or Nagad account screenshots).
• Financial data: Transaction records including deposit amounts, withdrawal requests, payment method identifiers (mobile wallet numbers, bank account references), and currency (BDT). We do not store raw card numbers or full mobile banking PINs.
• Communications: Messages sent to us via live chat, email, or contact forms, including the content of support queries, complaints, and responsible gaming requests.
• Preferences and settings: Responsible gaming limits you configure, notification preferences, and language or display settings saved to your account.

• Device and browser data: IP address, device type and model, operating system, browser type and version, screen resolution, and time zone (Bangladesh Standard Time, UTC+6).
• Usage data: Pages visited, features used, games played, bets placed, session duration, click paths, search queries entered within the platform, and error logs.
• Cookie and tracking data: Session identifiers, authentication tokens, and analytics identifiers as described in Section 8.
• Geolocation data: Country and region-level location inferred from your IP address, used to apply appropriate platform rules and to detect access from restricted jurisdictions.

• Payment processors: Transaction confirmation data, payment status, and fraud screening flags from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and other payment partners.
• Identity verification providers: Verification outcomes and risk scores from KYC and AML screening services.
• Game providers: Round IDs, game session data, and RNG outcome logs from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other platform game suppliers. This data is used for dispute resolution and audit purposes.

The following table summarises the main categories of personal data we hold and the primary purpose for each:

6xsix uses the personal data we collect for the following purposes. We only process personal data where we have a valid legal basis for doing so, as described in Section 4.

• Account management: Creating, maintaining, and securing your 6xsix account, including processing login requests, managing your settings, and enabling account recovery.
• Identity and age verification: Confirming that you are aged 21 or above and that the information you have provided is accurate, in compliance with our responsible gaming obligations.
• Transaction processing: Facilitating BDT deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods, and maintaining accurate financial records.
• Platform operation and personalisation: Delivering the games, betting markets, live casino feeds, and promotional content that make up the 6xsix experience, including personalising content based on your play history and preferences where permitted.
• Customer support: Responding to your queries, resolving disputes, and handling complaints through live chat and email support.
• Fraud prevention and security: Detecting and investigating suspicious account activity, unauthorised access attempts, multi-account abuse, money laundering, and other prohibited conduct described in our Terms and Conditions.
• Responsible gaming: Monitoring play patterns for signs of problem gambling behaviour, enforcing self-exclusion requests and deposit limits, and providing targeted responsible gaming interventions where necessary.
• Legal and regulatory compliance: Fulfilling our obligations under applicable anti-money laundering, counter-terrorism financing, and data protection requirements.
• Platform improvement: Analysing aggregated usage data to understand how the platform performs, identify bugs, and develop new features and content.
• Marketing communications: Sending promotional offers, bonus announcements, and platform news to players who have opted in to receive such communications. See Section 13 for opt-out instructions.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight, except where this is strictly necessary for fraud prevention or account security purposes, in which case you have the right to request human review of any such decision.

We process your personal data on the following legal bases:

• Contract performance: Processing necessary to provide you with the services you registered for — account creation, payment processing, gameplay, and customer support — is carried out on the basis that it is required to perform our contract with you.
• Legitimate interests: We process certain data to pursue our legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and product analytics, provided these interests are not overridden by your privacy rights.
• Legal obligation: Some processing is necessary for us to comply with applicable legal and regulatory requirements, including identity verification, AML screening, and record-keeping obligations.
• Consent: Where we rely on consent — primarily for marketing communications and non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent does not affect your ability to use the platform.

6xsix does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the circumstances described below, and only to the extent necessary for the stated purpose.

We share data with carefully selected third-party service providers who assist in operating the platform. These include payment processors (bKash, Nagad, Rocket, Upay, and banking partners), identity verification and KYC providers, cloud hosting and infrastructure providers, customer support software vendors, and fraud detection services. All such providers are bound by data processing agreements that restrict their use of your data to the specific service they are contracted to perform.

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session-level identifiers and game round data necessary to render their games and process bet outcomes. These providers operate under their own privacy policies and data security standards. They do not receive your full identity or financial data except where required for the certification of fair play outcomes.

We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, court order, or regulatory direction. We will notify you of such disclosure where we are legally permitted to do so.

In the event that 6xsix undergoes a merger, acquisition, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity. We will provide notice of any such transfer and ensure that the receiving party is bound by privacy obligations no less protective than those set out in this policy.

In circumstances not covered above, we will only share your personal data with third parties where you have given your explicit prior consent to that specific disclosure.

The 6xsix platform primarily serves players in Bangladesh and processes the majority of its data through infrastructure located in Asia-Pacific regions. However, some of our service providers — including cloud hosting and game suppliers — may process data in other jurisdictions.

Where personal data is transferred outside Bangladesh, we take steps to ensure that adequate protections are in place, including contractual clauses that require the recipient to protect your data to a standard equivalent to that described in this policy. We do not transfer personal data to jurisdictions that we assess to offer materially inadequate data protection without first putting in place appropriate safeguards.

If you would like further information about the specific safeguards applied to any cross-border transfer of your personal data, please contact us at the address in Section 15.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where deletion is requested by a player before the end of a retention period, we will delete what we are legally permitted to delete and explain any data we are required to retain by law.

6xsix uses cookies and similar technologies (such as local storage and session tokens) to operate the platform and improve your experience. The following categories of cookies are used:

These cookies are essential for the platform to function and cannot be disabled. They include session authentication tokens that keep you logged in, security tokens that protect against cross-site request forgery, and cookies that remember your responsible gaming settings. No consent is required for these cookies as they are necessary for service delivery.

Functional cookies remember your preferences, such as your chosen language, display settings, and recently played games. They improve the consistency of your experience across sessions. These cookies do not track you across external websites.

With your consent, we use analytics technologies to understand how players interact with the 6xsix platform — which pages are visited most frequently, where users encounter difficulty, and how game categories perform. This data is collected in aggregated, anonymised form and is used solely to improve the platform. We do not use third-party advertising tracking cookies.

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging in or using core platform features. Disabling functional cookies may result in a less personalised experience. Changes to cookie settings take effect from the next page load.

6xsix implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security controls include:

• 256-bit SSL/TLS encryption on all connections between your device and our servers, ensuring that data in transit cannot be intercepted.
• Password hashing using industry-standard one-way algorithms. We never store your password in plain text; even our own staff cannot retrieve it.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and receive regular data protection training.
• Infrastructure security: Our hosting environment uses firewalls, intrusion detection systems, regular vulnerability scanning, and automated threat monitoring.
• Payment security: Financial transactions are processed through certified payment gateways. Raw payment credentials (bKash PINs, bank passwords) are never transmitted to or stored by 6xsix.
• Incident response: We maintain a data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, we will notify you without undue delay once the breach has been assessed and contained.

While we take all reasonable steps to protect your data, no online system is entirely immune to risk. You can contribute to your own account security by using a strong, unique password, enabling any available two-factor authentication, and logging out of your account when using shared or public devices.

As a 6xsix player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request.

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is used and with whom it has been shared.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you may ask us to correct or update it. You can update basic account information directly through your account settings at any time.
• Right to erasure: You may request that we delete your personal data. This right is subject to our legal obligations to retain certain records (see Section 7). Where full deletion is not possible, we will explain what we are required to retain and why.
• Right to restrict processing: You may ask us to pause the processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to data portability: You may request your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider where technically feasible.
• Right to object: You may object to processing based on our legitimate interests at any time. We will assess whether our interests are overridden by your rights and cease processing if they are.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We will not charge a fee for handling your data rights requests in normal circumstances. If requests are manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or decline to process the request, with written explanation.

The 6xsix platform is strictly for individuals aged 21 years and above. We do not knowingly collect, process, or store personal data relating to individuals under the age of 21. Our registration process includes date-of-birth verification, and KYC procedures are used to confirm age where automated verification is inconclusive.

If you believe that a person under the age of 21 has registered an account or submitted personal data to 6xsix, please contact us immediately at [email protected]. Upon confirmation, we will delete all data associated with the minor's account and close the account without delay. Any funds held in such an account will be returned to the original payment method used, less any amounts played.

We encourage parents and guardians in Bangladesh to use parental control software to restrict access to online gambling platforms from devices used by minors.

The 6xsix platform may contain links to third-party services such as payment provider portals (bKash, Nagad), game provider interfaces (Pragmatic Play, Evolution Gaming), and informational resources. Once you leave the 6xsix platform by following such a link, this Privacy Policy no longer applies. The third-party site or service will have its own privacy policy, which we encourage you to read before providing any personal data.

6xsix does not control, and accepts no responsibility for, the privacy practices or content of third-party sites accessed through links on our platform. The inclusion of a link on our platform does not constitute an endorsement of that site's privacy practices.

With your consent, 6xsix may send you promotional communications relating to bonuses, new game launches, seasonal promotions (e.g., BPL cricket season offers, Eid specials, Pohela Boishakh promotions), and platform updates. These communications may be delivered via email, SMS, or push notification depending on your device and preferences.

Marketing consent is collected during account registration via a clearly labelled opt-in checkbox. You are never enrolled in marketing communications by default; it is always your active choice. Declining marketing communications at registration does not affect your ability to use any feature of the platform.

You may withdraw marketing consent at any time by: unchecking the marketing preferences in your account settings; clicking the unsubscribe link included in every promotional email; or contacting support at [email protected] with the request. Opt-out requests are processed within 5 business days. Please note that even after opting out of marketing, you will continue to receive transactional communications (e.g., deposit confirmations, withdrawal receipts, security alerts) as these are necessary for the operation of your account.

Where you have consented to marketing, we may use your play history and preferences to tailor promotional offers to your interests — for example, sending cricket betting promotions to players who frequently bet on BPL or T20 matches, or slot game offers to players who regularly play slots. This personalisation is based solely on your activity on the 6xsix platform and does not involve data purchased from or shared with external advertising networks.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify you by posting a prominent notice on the 6xsix platform and, where required, by sending an email to the address registered on your account.

The updated policy will display a revised "Effective Date" at the top of this page. We encourage you to review this policy periodically so that you remain informed about how 6xsix protects your personal data. Your continued use of the platform after the effective date of a revised policy constitutes your acceptance of the changes.

If a proposed change materially reduces your privacy rights, we will provide at least 14 days' advance notice before the change takes effect, giving you the opportunity to close your account if you do not wish to accept the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 6xsix handles your personal data, please contact our privacy support team using the details below. All privacy-related communications must be in English.

• Email: [email protected] (please use the subject line "Privacy Enquiry" or "Data Rights Request")
• Response time: We aim to acknowledge all privacy enquiries within 24 hours and provide a full response within 30 calendar days.
• Support hours: Our customer support team is available 24 hours a day, 7 days a week, 365 days a year — including Eid, Victory Day (16 December), and Independence Day (26 March).

If you are dissatisfied with our response to a privacy enquiry or data rights request, you have the right to escalate your complaint. We take all complaints seriously and will conduct a thorough internal review. Details of how to escalate will be provided in our response to your initial complaint.

We are committed to resolving privacy concerns promptly and transparently. Our goal is to ensure that every 6xsix player in Bangladesh — from Dhaka and Chittagong to Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh — feels confident that their personal data is handled with integrity, care, and respect.