Privacy Policy — six6es Data Practices

1 Information We Collect

six6es collects personal data from players at various points throughout the account lifecycle — from initial registration through to ongoing gameplay, deposits, withdrawals, and support interactions. The categories of data collected are outlined below.

1.1 Registration Data

When you create a six6es account, we collect the following information which you provide directly:

• Full legal name as it appears on your government-issued identification;
• Date of birth (used for mandatory 18+ age verification);
• Valid email address (used for account communication and verification);
• Bangladeshi mobile number (used for OTP authentication and WhatsApp support);
• Preferred username and a password of your choosing (stored in encrypted form);
• Residential address within Bangladesh (city and district, used for regional compliance and service personalisation).

1.2 Identity Verification (KYC) Data

Prior to processing any withdrawal, six6es is required to conduct Know Your Customer (KYC) verification. This process involves collecting:

• A copy of a valid government-issued photo identification — National Identity Card (NID), passport, or driving licence;
• A screenshot or confirmation document of your registered bKash, Nagad, Rocket, or Upay wallet showing your registered mobile number;
• In some cases, a utility bill, bank statement, or other address-confirmation document dated within the last 90 days.

KYC documents are stored securely and accessed only by authorised compliance personnel. They are never sold, rented, or shared with third parties outside the circumstances described in Section 5 of this policy.

1.3 Financial Transaction Data

Every deposit and withdrawal made through six6es generates a transaction record. We retain the following financial data:

• Transaction type (deposit or withdrawal), amount in BDT (৳), date, and time;
• Payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer);
• Mobile wallet number or masked card/account number associated with the transaction;
• Transaction reference numbers provided by the relevant payment provider.

Full card numbers, CVV codes, and mobile banking PINs are never stored on six6es servers. Payment tokenisation and secure gateway protocols are used for all card transactions.

1.4 Gameplay and Betting Activity Data

six6es records data relating to your activity on the platform, including:

• Bets placed, wager amounts, game selections, bet results, and associated timestamps;
• Account balance history and bonus credit/debit records;
• Sessions during which responsible gaming tools (deposit limits, time-outs, or self-exclusion) were activated or modified.

1.5 Technical and Device Data

When you access the six6es platform via any device or browser, we automatically collect certain technical information:

• IP address and approximate geolocation derived from it;
• Device type, operating system, and browser version;
• Referring URL (the page or search result from which you arrived at six6es);
• Pages visited, session duration, click patterns, and feature usage (collected via analytics tools — see Section 4);
• Device fingerprint data used for fraud prevention and multi-account detection.

1.6 Communications Data

If you contact six6es via live chat, email, or WhatsApp, we retain a record of the conversation for quality assurance, dispute resolution, and compliance purposes. This includes the content of messages, the date and time of contact, and any attachments provided (such as screenshots or documents).

2 How We Use Your Data

six6es processes personal data only for legitimate, specified purposes. We do not use your data for purposes incompatible with those stated at the time of collection. The primary purposes for which we use your data are as follows:

Purpose	Data Used
Account creation and authentication	Name, email, mobile number, password (hashed)
Age and identity verification (KYC)	Date of birth, NID/passport copy, wallet confirmation
Processing deposits and withdrawals	Payment method details, transaction records, KYC documents
Delivering and improving platform services	Gameplay data, session data, device data
Preventing fraud and money laundering	IP address, device fingerprint, transaction patterns, KYC data
Responsible gaming monitoring	Betting history, deposit frequency, self-exclusion records
Customer support and dispute resolution	Communications data, account history, transaction records
Sending promotional communications (with consent)	Email address, mobile number, preferences
Platform analytics and service optimisation	Technical data, session data, feature usage statistics
Compliance with legal and regulatory obligations	All categories as required by applicable law

3 Legal Basis for Processing

six6es processes personal data on one or more of the following recognised legal grounds, applied on a purpose-by-purpose basis:

• Contractual Necessity: Processing is required to fulfil our obligations under the account agreement you entered into when registering with six6es. This covers account management, deposit and withdrawal processing, and delivery of the gaming services you have requested.
• Legal Obligation: Certain processing activities — particularly KYC identity verification, anti-money-laundering checks, and retention of financial records — are required by applicable international compliance standards and the internal governance policies of six6es as an internationally operated platform.
• Legitimate Interests: six6es processes technical and behavioural data on the basis of its legitimate interest in maintaining platform security, preventing fraud, detecting multi-account abuse, and improving the quality of its services — provided that this processing does not override your fundamental privacy rights.
• Consent: Where processing is based on consent — most notably, for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent does not affect your right to continue using the six6es platform.

4 Cookies & Tracking

The six6es platform uses cookies and similar tracking technologies to enhance the user experience, maintain session state, and collect anonymised analytics data. Below is a summary of the cookie categories employed by the platform.

4.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They enable core functionality such as session management, login state persistence, and security token validation. The platform cannot operate correctly without these cookies, and they cannot be disabled.

4.2 Functional Cookies

Functional cookies remember your preferences — such as your selected language, display settings, and notification preferences — so that you do not need to reconfigure them on each visit. These cookies improve the usability of the platform without tracking your activity for commercial purposes.

4.3 Analytics Cookies

six6es uses anonymised analytics tools to understand how players interact with the platform — which pages are visited most frequently, how long sessions last, and which features are most used. This data is processed in aggregate and is not linked to individual player identities. Analytics data is used solely to improve platform performance and user experience.

4.4 Fraud Prevention & Security Cookies

Certain cookies and device fingerprinting technologies are used exclusively to detect and prevent fraudulent activity, including multi-account creation, bot access, and suspicious login patterns. These cookies are active during all sessions and operate silently in the background.

5 Data Sharing & Disclosure

six6es does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Your data may be shared with carefully selected third parties only under the circumstances described below, and only to the extent strictly necessary for the stated purpose.

5.1 Payment Service Providers

To process your deposits and withdrawals, six6es shares relevant transaction data with your chosen payment provider — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers receive only the minimum data required to execute the transaction and are bound by their own data protection obligations.

5.2 Game Content Providers

The games available on six6es are powered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session and gameplay identifiers to deliver game content and record RNG-certified outcomes. They do not receive your full personal profile or financial data.

5.3 Fraud Prevention and Security Partners

six6es may share device fingerprint data, IP addresses, and anonymised behavioural signals with specialist fraud-detection and identity-verification services for the purpose of protecting the platform and its players from fraudulent activity, money laundering, and underage access attempts.

5.4 Legal and Regulatory Disclosure

six6es will disclose personal data to law enforcement agencies, financial intelligence units, or other governmental bodies where we are legally required to do so by court order, regulatory requirement, or applicable law. Where permitted, we will notify you of such a disclosure.

5.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the six6es business, player personal data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified via their registered email address prior to any such transfer, and the acquiring entity will be required to honour this Privacy Policy.

6 Data Retention

six6es retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the requirements set out below.

• Active Account Data: All personal, financial, and gameplay data associated with an active account is retained for the full duration of the account's active period.
• Closed Account Data: Following voluntary account closure or platform-initiated closure, six6es retains transaction records, KYC documents, and communications data for a minimum of five years to comply with anti-money-laundering record-keeping standards.
• Self-Exclusion Records: If a player registers a self-exclusion, that record is retained indefinitely to prevent the player from re-registering during the exclusion period, even if the exclusion was for a fixed term.
• Analytics Data: Anonymised analytics data is retained for up to 24 months, after which it is aggregated and stripped of any residual identifiers.
• Support Communications: Live chat transcripts, email correspondence, and WhatsApp support records are retained for a period of three years from the date of the last interaction, unless they form part of an ongoing dispute, in which case they are retained until the dispute is fully resolved.

When data is no longer required for any of the above purposes and no legal obligation requires its continued retention, it is securely deleted or anonymised using industry-standard data destruction methods.

7 Your Privacy Rights

six6es is committed to upholding the privacy rights of all players. Depending on your circumstances and applicable law, you may have the following rights in relation to your personal data:

7.1 Right of Access

You have the right to request a copy of the personal data that six6es holds about you. We will respond to verified access requests within 30 days. Requests can be submitted via email to [email protected] with the subject line "Data Access Request".

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating your email address or mobile number) can be made directly through your account settings. Corrections to KYC-related data require the submission of updated documentation.

7.3 Right to Erasure

You may request the deletion of your personal data in certain circumstances — for example, if your account is closed and the minimum retention period has elapsed. Note that data subject to mandatory legal retention obligations (such as financial transaction records) cannot be erased until the applicable retention period has expired, even upon request.

7.4 Right to Object to Processing

Where processing is based on legitimate interests, you have the right to object to that processing. six6es will review each objection and cease the relevant processing if your rights and interests override our legitimate basis — except where processing is required for the establishment, exercise, or defence of legal claims.

7.5 Right to Withdraw Consent

Where processing is based on your consent — including consent to receive marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal, and does not affect your right to continue using the six6es platform.

8 Data Security

six6es implements a layered approach to data security, employing both technical and organisational measures to protect personal and financial data against unauthorised access, loss, misuse, alteration, or disclosure.

• SSL/TLS Encryption: All data transmitted between your device and the six6es platform is encrypted using Transport Layer Security (TLS). This applies to login sessions, deposit and withdrawal requests, and all account management interactions.
• Password Hashing: Account passwords are never stored in plain text. They are hashed using a strong cryptographic algorithm before being stored, meaning that even internal staff cannot view your password.
• Two-Factor Authentication (OTP): Login and withdrawal requests require verification via a one-time password (OTP) sent to your registered mobile number, adding a second layer of identity confirmation beyond your password.
• Access Controls: Personal data is accessible only to six6es staff members whose roles require it. All internal data access is logged and subject to regular audit. Compliance documents and KYC files are restricted to authorised personnel only.
• Fraud Monitoring: Automated systems monitor account activity continuously for signs of unauthorised access, suspicious transaction patterns, or multi-account behaviour. Anomalies trigger alerts that are reviewed by the security team.
• Secure Infrastructure: six6es data is hosted on enterprise-grade servers with physical and logical security controls, including firewalls, intrusion detection systems, and regular penetration testing.

While six6es takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security against all possible threats. You are responsible for maintaining the confidentiality of your login credentials and should contact support immediately if you suspect unauthorised access to your account.

9 Third-Party Services

The six6es platform integrates with various third-party services in order to deliver its full range of features. This section describes the nature of these integrations and their implications for your data.

9.1 Game Providers

Live casino games, slots, and sports betting markets are powered by licensed third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, a session identifier is shared with the relevant provider to enable game delivery and to record certified RNG outcomes. These providers do not receive your full personal profile.

9.2 Payment Gateways

Transactions processed via bKash, Nagad, Rocket, Upay, and card payment gateways pass through those providers' own secure infrastructure. Each provider operates under its own data protection policy and is responsible for the security of data processed on its platform. six6es recommends reviewing the privacy policies of your chosen payment provider.

9.3 Analytics Platforms

six6es uses anonymised analytics tools to monitor platform performance and user behaviour in aggregate. These tools collect data such as page views, session duration, and feature engagement without linking activity to a personally identifiable player profile.

9.4 Links to External Sites

The six6es platform does not include links to external third-party websites. Should any such links appear in communications from six6es (for example, in informational email content), please be aware that six6es is not responsible for the privacy practices of any external site and recommends reviewing their privacy policies before providing personal information.

10 Policy Amendments

six6es reserves the right to update or amend this Privacy Policy at any time to reflect changes in platform services, applicable legal requirements, payment methods, or data processing practices. All amendments will be handled in accordance with the following procedure:

• Notification of Material Changes: Where an amendment materially affects how your personal data is processed — for example, introducing a new category of data sharing or changing the legal basis for processing — six6es will notify all registered players via their registered email address at least 14 days before the amendment takes effect.
• Minor and Administrative Updates: Corrections to typographical errors, clarifications that do not change the substance of the policy, and administrative updates (such as changes to contact details) may be applied without prior notification. The "Last Updated" date at the top of this page will be revised to reflect any such changes.
• Continued Use Constitutes Acceptance: By continuing to use the six6es platform after the effective date of any amendment, you acknowledge and accept the revised Privacy Policy. If you do not accept the revised terms, you must discontinue use of the platform and contact support to arrange account closure before the amendment takes effect.
• Version Archive: Previous versions of this Privacy Policy are retained internally and are available upon request by contacting the data protection team at [email protected].

six6es recommends that all players review this Privacy Policy periodically — particularly before making a deposit or withdrawal — to remain informed of how their personal data is being handled. The current version of this policy is always accessible via the six6es website footer.

11 Contact & DPO

If you have any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data by six6es, please contact the data protection team through any of the following channels. All privacy-related communications must be submitted in English to ensure timely and accurate handling.