six6d Privacy Policy — How We Protect Your Personal Data

six6d is an online betting and casino platform operating at https://six6d.io, serving adult players aged 21 and above across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. For the purposes of this Privacy Policy, "six6d", "we", "us", and "our" refer to the operator of the six6d platform. References to "you" or "your" refer to the individual user accessing the six6d platform as a registered account holder or visitor.

six6d acts as the data controller in respect of the personal data you provide to us when registering an account, making deposits or withdrawals, engaging with our games and betting markets, or otherwise interacting with the platform. As data controller, six6d determines the purposes and means of processing your personal data in accordance with this Privacy Policy.

six6d collects and processes several categories of personal data in the course of providing its platform and services to you. These categories include, but are not limited to, the following:

• Identity Data: Your full legal name, date of birth, gender, nationality, and copies of government-issued identification documents (such as a National ID card or passport) provided during account verification.
• Contact Data: Your email address, mobile phone number, and residential postal address in Bangladesh.
• Financial Data: Payment method details (such as your registered bKash, Nagad, or Rocket mobile wallet numbers, or bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, or other supported institutions), transaction histories, deposit and withdrawal records.
• Technical Data: Your Internet Protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access the six6d platform.
• Usage Data: Information about how you use the six6d platform, including your betting history, game activity records, session durations, pages visited, wagering patterns, and deposit frequency.
• Communications Data: Records of your correspondence with six6d's support team, including live chat transcripts, email exchanges, and complaint records.
• Marketing and Preferences Data: Your preferences regarding receiving marketing communications from six6d, including whether you have opted in to email promotions, SMS notifications, or platform push notifications.

six6d does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or criminal records, except where specifically required by applicable law or regulatory compliance obligations (such as self-exclusion records maintained for responsible gaming purposes).

six6d collects personal data through the following primary channels:

• Direct Interactions: Data you actively provide when registering an account, completing identity verification, making a deposit or withdrawal, placing a bet, contacting customer support, responding to surveys, or participating in promotions.
• Automated Technologies: As you interact with the six6d platform, we automatically collect Technical Data and Usage Data using cookies, server logs, web beacons, and similar tracking technologies. Please refer to Section 5 (Cookies and Tracking Technologies) for further detail.
• Third-Party Sources: We may receive data about you from third parties, including identity verification service providers, fraud detection partners, payment processors, and credit reference agencies, where permitted by applicable law. Such data is used solely to supplement our own records for the purposes stated in this Policy.

six6d uses the personal data we collect about you for the following purposes, each of which is supported by an identified lawful basis for processing:

• To register and maintain your six6d account, including verifying your identity and age eligibility (21+). (Lawful basis: contractual necessity)
• To process deposits, withdrawals, and other financial transactions via your selected payment method, including bKash, Nagad, and Rocket. (Lawful basis: contractual necessity)
• To detect and prevent fraud, money laundering, and other prohibited activities, in compliance with applicable anti-money-laundering and counter-terrorism financing regulations. (Lawful basis: legal obligation; legitimate interests)
• To administer and enforce our responsible gaming tools, including deposit limits, cooling-off periods, and self-exclusion records. (Lawful basis: legal obligation; legitimate interests)
• To deliver customer support and respond to your queries, complaints, and disputes in a timely manner. (Lawful basis: contractual necessity; legitimate interests)
• To personalise your platform experience, including displaying relevant game recommendations and promotional offers where you have consented to receive them. (Lawful basis: consent)
• To analyse platform usage patterns and improve the functionality, design, and security of the six6d platform. (Lawful basis: legitimate interests)
• To send you transactional and service-related communications, such as deposit confirmations, withdrawal notifications, and security alerts. (Lawful basis: contractual necessity)
• To send you marketing communications about promotions, bonuses, and platform updates, where you have opted in to receive such communications. (Lawful basis: consent)

six6d uses cookies and similar technologies (such as web beacons, pixel tags, and local storage objects) to operate and improve the platform, maintain session security, and understand how users interact with our services. A cookie is a small data file placed on your device when you visit a website.

six6d uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the six6d platform to function correctly. They enable core functions such as user authentication, session management, load balancing, and fraud prevention. These cookies cannot be disabled as they are integral to platform operation.
• Analytical and Performance Cookies: These cookies allow us to measure and analyse how users interact with the platform — for example, which pages are visited most frequently and whether users encounter any errors. The information collected is aggregated and anonymised. These cookies help us improve the platform over time.
• Functionality Cookies: These cookies remember your preferences and settings (such as language preference, display settings, and previously entered details) to provide a more personalised experience on return visits.
• Targeting and Marketing Cookies: Where you have consented, these cookies track your browsing activity to enable the delivery of relevant promotional content. They are also used to measure the effectiveness of marketing campaigns.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may impact the functionality and user experience of the six6d platform. For detailed guidance on managing cookies in your specific browser, consult your browser's help documentation.

six6d does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your personal data with the following categories of third parties where necessary and in accordance with this Privacy Policy:

• Payment Processors: We share financial data with payment service providers (including mobile wallet operators such as bKash, Nagad, and Rocket, and banking partners) as necessary to process your transactions securely.
• Identity Verification Providers: We may share identity and contact data with KYC and age-verification service providers to fulfil our regulatory obligations and verify player eligibility.
• Game Content Providers: Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive limited technical and usage data necessary to deliver their game content and audit game outcomes.
• Fraud and Security Partners: We may share technical and usage data with anti-fraud, cybersecurity, and AML compliance service providers to detect and prevent prohibited activity on the platform.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or judicial authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of six6d, our users, or the public.
• Professional Advisers: We may share data with legal advisers, auditors, and accountants where required for the conduct of legal proceedings, regulatory compliance, or financial auditing.

All third-party data processors engaged by six6d are required to process personal data only on our documented instructions and are contractually bound to maintain appropriate technical and organisational security measures.

The six6d platform serves users across Bangladesh, and the majority of your personal data is processed within the region. However, some of our third-party service providers — particularly those providing cloud infrastructure, analytics, or security services — may be located outside Bangladesh and may process your data in jurisdictions with different data protection standards.

Where your personal data is transferred internationally, six6d takes appropriate steps to ensure that such transfers are carried out in a manner that provides a comparable level of protection to the standards described in this Privacy Policy. This may include executing data processing agreements with the relevant third parties incorporating standard contractual clauses or equivalent data transfer safeguards.

six6d takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information from unauthorised access, disclosure, alteration, or destruction. Our current security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the six6d platform.
• Encrypted storage of sensitive personal and financial data at rest, using industry-standard encryption protocols.
• Role-based access controls ensuring that only authorised six6d personnel with a legitimate operational need can access user personal data.
• Regular security audits, vulnerability assessments, and penetration testing conducted by qualified security professionals.
• Multi-factor authentication options available to all registered users to protect account access.
• Automated anomaly detection systems that monitor for unusual login activity, transaction patterns, or access attempts.

While six6d employs industry-standard security practices, it is important to acknowledge that no system of data transmission or storage can be guaranteed to be completely free from the risk of unauthorised interception or access. You are responsible for keeping your own account credentials confidential and for notifying six6d immediately if you suspect any unauthorised access to your account.

six6d retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with six6d, plus a minimum period of 5 years following account closure, to comply with applicable anti-money-laundering and financial record-keeping obligations.
• Transaction and Financial Records: Retained for a minimum of 5 years from the date of the relevant transaction, in accordance with applicable regulatory requirements.
• Identity Verification Documents: Retained for a minimum of 5 years following the conclusion of the account relationship, as required under applicable KYC and AML regulations.
• Responsible Gaming Records (including self-exclusion records): Retained for a minimum of 5 years following the end of the relevant self-exclusion or restriction period, to prevent re-registration in breach of the applicable restriction.
• Marketing Preferences: Retained until you withdraw your consent to receive marketing communications, at which point your marketing preference records will be updated promptly.
• Support and Communications Records: Retained for a period of 3 years from the date of the relevant communication, unless a longer retention period is required for the purposes of ongoing dispute resolution.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in such a manner that it can no longer be associated with any identifiable individual.

As a six6d account holder whose personal data is processed by us, you hold the following rights in relation to that data. You may exercise any of these rights at any time by contacting us at [email protected]:

• Right of Access: You have the right to request a copy of the personal data that six6d holds about you, along with information about how that data is used and on what legal basis.
• Right to Rectification: You have the right to request that we correct any inaccurate personal data we hold about you, or complete any incomplete records, without undue delay.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. This right is subject to any overriding legal retention obligations.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contractual necessity, you have the right to receive a structured, commonly used, and machine-readable copy of the personal data you have provided to us.
• Right to Object: You have the right to object to the processing of your personal data where six6d relies on legitimate interests as the lawful basis for that processing, including for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to your withdrawal.

six6d will respond to all valid data rights requests within 30 calendar days of receipt. In cases of complexity or volume, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it within the initial 30-day window.

The six6d platform is strictly intended for use by adults aged 21 years and above. six6d does not knowingly collect, store, or process any personal data belonging to individuals under the age of 21. If six6d becomes aware that personal data has been collected from a person under 21 years of age — whether through a misrepresentation during registration or by any other means — that data will be deleted immediately and the relevant account closed without refund of any associated balance.

If you are a parent or guardian and you believe that your child or a minor in your care has registered a six6d account or submitted personal data to the platform without your knowledge or consent, please contact us immediately at [email protected] so that we can take prompt action.

six6d actively supports responsible gaming and the protection of minors. We deploy age verification controls as part of our account registration and KYC processes to identify and remove underage users from the platform. We also strongly encourage parents and guardians to make use of parental control software to prevent unauthorised access to gambling websites by minors.

six6d may, where you have given your explicit consent during registration or via your account settings, send you promotional communications relating to six6d's products, services, bonuses, and offers. These communications may be delivered by email or SMS to the contact details registered on your account.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences within your six6d account settings.
• Clicking the unsubscribe link included in any marketing email sent by six6d.
• Contacting our support team directly at [email protected] and requesting removal from our marketing distribution list.

Please note that withdrawing consent to receive marketing communications does not affect your receipt of transactional or service-related communications — such as deposit confirmations, withdrawal notifications, security alerts, and support correspondence — which are necessary for the operation of your account and will continue regardless of your marketing preferences.

six6d does not share your contact data with third-party advertisers for the purpose of sending you unsolicited marketing communications on their behalf. Any promotional content you receive will relate solely to six6d's own platform and services.

six6d reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will notify registered account holders by posting a prominent notice on the six6d platform and, where appropriate, by sending a notification to the email address registered on your account. The updated Policy will take effect from the date indicated at the top of the document as the "Last Updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how six6d is protecting your personal data. Your continued use of the six6d platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes and your agreement to be bound by the updated terms.

If any proposed change to this Privacy Policy requires your fresh consent — for example, where we propose a new use of your personal data that was not previously covered — we will seek that consent separately and in advance of implementing the change.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which six6d processes your personal data, please contact our Data Protection team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: We aim to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).
• Postal Contact: Please refer to the contact details provided during your account registration process for written correspondence.

six6d takes all privacy-related complaints seriously. If you are not satisfied with our response to your complaint or believe that we are processing your personal data in a manner that is not consistent with this Privacy Policy, you retain the right to escalate your complaint to the relevant data protection authority or seek independent legal advice regarding your options.