Your Privacy Matters at six6d

six6d collects personal data from players in Bangladesh in order to operate the platform, process transactions, verify identities, prevent fraud, and comply with applicable legal obligations. We collect only the data that is genuinely necessary for these purposes. The categories of personal data we collect are described below.

Data You Provide Directly

When you register for an account, make a deposit or withdrawal, complete identity verification, or contact our support team, you provide us with some or all of the following information:

• Identity data: Full legal name, date of birth, gender, and National Identity Card (NID) number or passport number.
• Contact data: Email address and Bangladesh mobile phone number registered in your name.
• Authentication data: Username, hashed password, and two-factor authentication details. Passwords are never stored in plain text.
• KYC documentation: Copies of government-issued identity documents (NID, passport, birth certificate) and, where required, proof of address documents such as a utility bill or bank statement.
• Financial data: Mobile banking account references (bKash, Nagad, Rocket, Upay wallet numbers), bank account details where bank transfer is used, and records of all deposits, withdrawals, bets, and winnings on the platform.
• Communications data: Records of your correspondence with the six6d customer support team via live chat, email, or any other channel, including chat transcripts and email threads.

Data We Collect Automatically

When you access and use the six6d platform, certain technical data is collected automatically by our systems:

• Device & access data: IP address, device type, operating system, browser type and version, screen resolution, and time zone setting.
• Usage data: Pages visited, games played, bets placed, session duration, click paths, and feature interactions within the platform.
• Session data: Login timestamps, session identifiers, and logout events used for security monitoring and fraud prevention.
• Location data: Approximate geographic location derived from IP address, used to apply geo-restrictions and ensure compliant service delivery. six6d does not collect GPS or precise device location data.

Data from Third Parties

In limited circumstances, six6d may receive personal data about you from third-party sources, including:

• Payment providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) confirming transaction status and reference numbers.
• Identity verification and KYC service providers used to authenticate your identity documents electronically.
• Fraud prevention and anti-money-laundering screening services that may flag accounts or transactions for review.
• Game studios and software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) transmitting game round data and RNG-certified outcomes to our platform.

Data Category	Source	Lawful Basis
Identity & contact data	Provided by you at registration	Contract performance; legal obligation
KYC documentation	Provided by you; KYC provider	Legal obligation; legitimate interest
Financial transaction data	Payment providers; platform records	Contract performance; legal obligation
Device & usage data	Collected automatically	Legitimate interest (security, fraud prevention)
Communications data	Provided by you via support	Contract performance; legitimate interest
Game round data	Game studios / RNG providers	Contract performance; legal obligation

six6d uses the personal data described in Section 1 for the specific purposes set out below. We do not use your data for any purpose that is incompatible with these stated purposes without first obtaining your explicit consent.

Platform Operation & Account Management

• Creating and maintaining your six6d player account, including authentication and session management.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods.
• Settling bets, crediting winnings, applying bonuses, and maintaining accurate account balance records.
• Delivering customer support services and resolving account queries or disputes.

Identity Verification & Regulatory Compliance

• Conducting Know Your Customer (KYC) checks to verify your identity and age (18+) before processing withdrawals above threshold amounts.
• Complying with anti-money-laundering (AML) obligations, including transaction monitoring and source-of-funds verification.
• Maintaining records required by applicable law for the minimum statutory retention periods.
• Responding to lawful requests from competent authorities, courts, or regulatory bodies.

Security & Fraud Prevention

• Detecting, investigating, and preventing fraudulent transactions, account takeovers, and prohibited conduct as defined in the Terms and Conditions.
• Monitoring for unusual betting patterns, bonus abuse, and multi-accounting that may indicate a breach of platform rules.
• Maintaining platform integrity and protecting the interests of all players on the six6d platform.

Platform Improvement & Analytics

• Analysing aggregated, anonymised usage data to improve the layout, performance, and game selection of the six6d platform.
• Identifying technical issues, optimising page load speeds, and improving the mobile experience for players in Dhaka, Chittagong, Sylhet, and across Bangladesh.
• Understanding which sports markets and game categories are most popular with our player base to inform future content decisions.

Responsible Gaming

• Monitoring your gaming activity to identify patterns that may indicate problem gambling, such as rapidly escalating deposits, extended session durations, or frequent late-night activity.
• Administering self-exclusion requests, deposit limits, session timers, and reality checks as set out in the Responsible Gaming Policy.
• Contacting you with responsible gaming information if our monitoring systems flag your account for a welfare check.

Marketing Communications

Where you have provided consent to receive marketing communications during registration or at any subsequent point, six6d may contact you by email or SMS with information about promotions, bonus offers, and new game launches on the platform. You may withdraw your marketing consent at any time by updating your communication preferences within your account dashboard or by emailing [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to withdrawal.

six6d does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

Payment Processors

To process deposits and withdrawals, six6d shares the minimum necessary transaction data (account reference, amount, currency) with the relevant payment provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard. These providers are independently regulated and operate under their own privacy frameworks. six6d is not responsible for the data handling practices of third-party payment providers once data is transmitted to their systems.

KYC & Identity Verification Providers

To fulfil our age verification and anti-money-laundering obligations, six6d engages third-party KYC service providers who electronically verify identity documents submitted by players. These providers are contractually bound to use your data exclusively for the verification services they provide to six6d and may not retain or re-use your documents for any other purpose.

Game Studios & Software Providers

Game round data (bet amounts, game outcomes, session identifiers) is shared with the relevant game studio (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) to the extent necessary for game delivery, outcome verification, and technical support. Game studios do not receive your full name, contact details, or financial account information.

Fraud Prevention & AML Services

six6d may share transaction data and account identifiers with third-party fraud prevention and AML screening services to fulfil its legal obligations and protect the platform's integrity. These services are bound by strict contractual confidentiality obligations.

Legal & Regulatory Disclosure

six6d will disclose personal data to law enforcement agencies, regulatory authorities, courts, or other competent bodies where required to do so by applicable law, court order, or lawful regulatory instruction. Where legally permitted, we will endeavour to notify you of any such disclosure in advance.

Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of six6d's assets, player personal data may be transferred to the acquiring entity as part of the transaction. In such circumstances, we will notify affected players in advance and ensure that the acquiring entity is bound to the same or equivalent data protection obligations as set out in this Privacy Policy.

six6d uses cookies and similar tracking technologies on its platform to ensure proper functionality, maintain security, and understand how players interact with the site. This section explains the types of cookies used and how you can manage your preferences.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, remember your preferences, and track certain aspects of your behaviour on the site. Cookies do not contain your name, password, or financial information in plain text.

Types of Cookies Used by six6d

Cookie Type	Purpose	Can Be Disabled?
Strictly Necessary	Session management, authentication, CSRF protection, load balancing. Required for the platform to function.	No — platform cannot function without these.
Security	Fraud detection, bot prevention, suspicious login detection.	No — required for account security.
Analytical	Aggregated, anonymised usage statistics to improve platform performance and game selection.	Yes — via account settings.
Preference	Remembering your language preference, odds format, and display settings.	Yes — via account settings (note: preferences will reset on each visit if disabled).

Managing Your Cookie Preferences

You can manage non-essential cookie preferences through your six6d account settings dashboard. Additionally, most web browsers allow you to view, block, and delete cookies through the browser's built-in settings. Please be aware that blocking strictly necessary or security cookies will impair or prevent your ability to log in and use the six6d platform.

Third-Party Cookies

Certain game content delivered by third-party studios (Pragmatic Play, Evolution Gaming, etc.) may set their own cookies on your device for the purpose of game session management and RNG auditing. These cookies are governed by the respective studio's own privacy policies and are not within six6d's direct control.

six6d implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure.

Technical Security Measures

• Encryption in transit: All data exchanged between your device and six6d's servers is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser confirms this protection is active.
• Encryption at rest: Sensitive fields including passwords (hashed with a strong one-way algorithm), NID numbers, and financial account references are encrypted at rest in our database.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. All staff who access personal data are subject to confidentiality obligations and receive data protection training.
• Infrastructure security: six6d's platform infrastructure is hosted in data centres with physical security controls, redundant power, and regular independent security audits.
• Vulnerability management: Regular penetration testing and vulnerability scanning are conducted to identify and remediate potential security weaknesses before they can be exploited.

Data Breach Response

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, six6d will notify affected players without undue delay, providing information about the nature of the breach, the categories of data affected, and the steps taken to mitigate the impact. A dedicated incident response team is on standby to respond to security events.

Data Retention Periods

six6d retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of your account plus a minimum of 5 years after account closure, to satisfy potential legal, regulatory, or audit requirements.
• KYC documents: Retained for a minimum of 5 years from the date of submission, in line with standard AML record-keeping obligations.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Support communications: Retained for 3 years from the date of the last interaction, unless a longer period is required in connection with an ongoing dispute.
• Analytical (anonymised) data: Anonymised usage data may be retained indefinitely as it no longer constitutes personal data once anonymisation is complete and irreversible.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data destruction procedures.

As a six6d player, you hold a set of rights in relation to your personal data. six6d is committed to respecting and facilitating these rights. To exercise any of the rights described below, please submit a written request to [email protected]. We will respond within 30 calendar days of receiving a verifiable request, and we will not charge a fee for reasonable requests.

• Right of access: You have the right to request a copy of all personal data six6d holds about you, along with information about how it is used, where it came from, and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other lawful basis applies. Note that this right is not absolute — six6d may retain certain data where required by law (e.g., AML record-keeping obligations) even after an erasure request.
• Right to restriction of processing: You may request that six6d restrict the processing of your personal data in certain circumstances, for example while an accuracy dispute is being resolved.
• Right to data portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to object: You have the right to object to processing of your personal data where it is based on legitimate interests, including profiling for marketing purposes. six6d will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

Please note that exercising some of these rights — in particular, requesting erasure of identity or transaction data — may result in the closure of your six6d account, as we may be unable to operate the account without the relevant data.

The six6d platform is strictly intended for adults aged 18 and above. six6d does not knowingly collect, store, or process personal data from any person under the age of 18. Age verification is conducted as part of the account registration and KYC process to enforce this restriction.

If six6d discovers or is notified that personal data has been inadvertently collected from a person under 18 years of age, we will take immediate steps to:

• Suspend the relevant account without delay.
• Permanently delete all personal data associated with the underage account from our active systems, subject to any legal retention obligations.
• Return any real-money deposits made by the underage individual, minus any winnings generated (which will be forfeited), to the payment method used.
• Refer the matter to appropriate authorities where legally required.

If you are a parent or guardian and believe that your child has created a six6d account or has otherwise provided personal data to our platform, please contact us immediately at [email protected] with the subject line "Underage Account Report". We take reports of underage access extremely seriously and will act within 24 hours of receiving a verified report.

six6d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When a material change is made — meaning a change that affects your rights or the way your data is used in a meaningful way — we will notify registered players via the email address held on their account at least 14 days before the change takes effect.

Non-material changes (such as corrections of typographical errors, improved wording for clarity, or addition of new examples) may be published without advance notice. The "Effective Date" displayed at the top of this page will be updated each time the policy is revised. We recommend reviewing this page periodically.

Your continued use of the six6d platform after a revised Privacy Policy takes effect constitutes your acceptance of the updated terms. If you do not agree with a revised policy, you may close your account in accordance with the account closure procedure described in the Terms and Conditions before the revised policy takes effect.

Contact the six6d Data Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way six6d handles your personal data, please contact us using the details below:

• Email: [email protected] — use the subject line "Privacy Enquiry" for the fastest response.
• Live Chat: Available 24/7 inside your six6d account dashboard after login. Average response time is under 90 seconds.
• Response time: Email enquiries are handled within 24 hours (Bangladesh Standard Time, UTC+6). Data subject requests (Section 6) are handled within 30 calendar days.

We take every privacy enquiry seriously. Our support team will escalate any unresolved concern to a senior data compliance officer if an initial response does not fully address your question.