Privacy Policy — six6bet Data & Security Commitment

six6bet collects personal data only when it is necessary to provide you with a secure, compliant, and high-quality betting and casino experience. The categories of personal data we collect, and the circumstances in which we collect them, are set out below.

Registration Data: When you create an account on six6bet, we collect your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to establish your identity, verify your eligibility to use the platform, and maintain accurate account records.

Identity Verification (KYC) Data: As part of our Know Your Customer process, we may request copies of government-issued identity documents such as a National Identity Card (NID), passport, or driver's licence, as well as proof of address documents such as a recent utility bill or bank statement. These documents are used exclusively for identity verification and fraud prevention purposes.

Financial Data: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a Bangladeshi bank transfer, we collect transaction reference numbers, payment method identifiers (e.g., mobile wallet numbers), and transaction amounts. Full payment account credentials are processed directly by the relevant payment provider and are not stored on six6bet servers.

Technical & Usage Data: We automatically collect certain technical data when you access the platform, including your IP address, browser type and version, operating system, device type, referring URL, pages visited, session duration, and in-game activity logs. This data is used for platform security, fraud detection, and service optimisation.

Communications Data: If you contact our support team via email or live chat, we retain records of that correspondence, including the content of your messages and any attachments, for the purpose of resolving your query and improving our customer service quality.

Responsible Gaming Data: If you use any of our responsible gaming tools — including deposit limits, session time limits, or self-exclusion requests — we record these preferences to ensure they are enforced correctly and consistently across your account.

six6bet processes your personal data only for the purposes set out in this Privacy Policy. We do not use your data for purposes incompatible with those stated here without first obtaining your explicit consent. The primary purposes for which we use your personal data are as follows:

Account Management: We use your registration data to create, maintain, and secure your player account on six6bet. This includes processing login requests, enabling account recovery, and updating account information when you request a change.

Identity Verification & Compliance: We are required to verify the identity and age of all players as part of our anti-money laundering (AML) and responsible gaming obligations. Your KYC documents are used solely for this purpose. Verified identity data is retained for the period required by applicable compliance obligations.

Payment Processing: Financial data is used to process your deposit and withdrawal requests via bKash, Nagad, Rocket, Upay, and Bangladeshi bank transfers, to reconcile your account balance, and to detect and investigate any suspicious or fraudulent transactions.

Personalisation & Promotions: With your consent, we may use your gameplay history and account preferences to personalise promotional offers, including bonus notifications relevant to cricket, slots, table tennis, and casino products. You may opt out of promotional communications at any time by contacting support@six6bet.

Platform Security & Fraud Prevention: Technical and usage data — including IP addresses, device identifiers, and session logs — is used to detect unauthorised access attempts, identify multiple account violations, investigate suspected fraud, and protect the integrity of the platform.

Customer Support: Communications data is used to respond to your queries, resolve disputes, and improve the quality of our customer support service. Support correspondence is retained for a period of 24 months from the date of the last interaction.

Legal & Regulatory Obligations: In certain circumstances, we are required by law to process and retain your personal data for the purpose of fulfilling regulatory reporting requirements, responding to lawful requests from competent authorities, or defending legal claims.

six6bet uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to gather anonymised analytics that help us improve the user experience for players across Bangladesh. This section explains the types of cookies we use and how you can manage them.

What Are Cookies? Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device on subsequent visits, remember your preferences, and track certain usage patterns. Cookies cannot execute code or deliver viruses; they are not harmful to your device.

Essential Cookies: These cookies are strictly necessary for the platform to function. They maintain your login session, remember your language and display preferences, and ensure that security tokens remain valid. Essential cookies cannot be disabled without breaking core platform functionality.

Analytics Cookies: We use anonymised analytics cookies to understand how players navigate the six6bet platform — which pages are most visited, where users commonly exit, and how long sessions typically last. This data is aggregated and does not identify individual users. Analytics cookies help us improve platform layout, game discovery, and customer support resources.

Preference Cookies: These cookies remember settings you have configured on the platform, such as your preferred deposit method or display options, so that you do not need to reconfigure them on every visit.

What We Do NOT Use: six6bet does not use third-party advertising cookies, cross-site tracking cookies, behavioural profiling cookies, or any tracking technology that monitors your activity on external websites outside the six6bet domain.

Managing Cookies: You can configure your browser to refuse all cookies or to alert you when a cookie is being placed. However, disabling essential cookies will prevent you from logging in and using the platform. Please consult your browser's help documentation for instructions on cookie management. Note that clearing your cookies will log you out of your six6bet session and remove saved preferences.

six6bet does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own marketing or commercial purposes. Your data may, however, be shared with the following carefully selected categories of third parties, and only to the extent necessary for the stated purpose:

Payment Service Providers: When you make a deposit or withdrawal, your relevant payment data is shared with the applicable payment provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, or Sonali Bank — to process the transaction. Each provider operates under its own privacy policy and data protection obligations. six6bet is not responsible for how these providers handle data shared with them in the course of payment processing.

Game Content Providers: six6bet integrates games from third-party studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. These providers may receive limited technical data (such as a pseudonymised player identifier and session token) to facilitate gameplay. Game providers are contractually prohibited from using this data for any purpose other than delivering the game service.

Identity Verification Partners: In some circumstances, we may use trusted third-party KYC verification services to assist with document authentication. These partners process identity documents under strict data processing agreements and are prohibited from retaining your documents beyond the verification period.

Legal & Regulatory Authorities: six6bet may be required to disclose personal data to competent legal or regulatory authorities in response to a lawful request, court order, or regulatory investigation. We will only disclose the minimum amount of data required to satisfy the legal obligation, and where legally permissible, we will notify you of any such disclosure.

Internal Group Companies: Personal data may be shared within the six6bet corporate group for the purposes of internal administration, risk management, and consolidated compliance reporting. All intra-group data transfers are subject to the same data protection standards as external transfers.

All third parties with whom personal data is shared are required to implement appropriate technical and organisational security measures to protect that data. six6bet does not permit any third party to use your personal data for their own unrelated business purposes.

six6bet retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and compliance obligations. The following retention periods apply to the main categories of personal data we hold:

• Account and Registration Data: Retained for the duration of your account's active status, plus a period of 5 years following permanent account closure. This retention is required for audit, legal, and anti-money laundering compliance purposes.
• KYC Identity Documents: Retained for a minimum of 5 years from the date of verification, or longer if required by applicable AML or regulatory obligations. Documents are stored in encrypted form and access is restricted to authorised compliance personnel only.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, as required for financial audit and regulatory reporting obligations.
• Customer Support Communications: Retained for 24 months from the date of the last interaction in the support thread, after which communications are permanently deleted unless they are part of an ongoing dispute or legal proceeding.
• Analytics and Technical Log Data: Retained in anonymised or aggregated form for up to 13 months. Raw IP address and session log data is deleted after 90 days.
• Marketing Preferences: Retained until you opt out or request deletion. Upon opt-out, your marketing preference flag is updated within 48 hours and no further promotional communications will be sent.

Data Storage Location: Personal data collected from players in Bangladesh is stored on secure servers. All data at rest is encrypted using AES-256 encryption. Access to production databases is restricted to a limited number of authorised personnel and is protected by multi-factor authentication.

Data Deletion: When personal data is no longer required and no legal retention obligation applies, six6bet will securely delete or anonymise that data in a manner that prevents reconstruction. Upon receipt of a verified deletion request, we will process the deletion within 30 days, subject to any applicable legal retention obligations that may prevent immediate deletion of certain categories of data.

As a player on six6bet, you hold specific rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, please contact us at support@six6bet with your full name, registered email address, and a clear description of your request. We will respond within 30 days of receipt of a verified request.

six6bet takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect your information against unauthorised access, accidental loss, disclosure, alteration, or destruction. The key security measures we maintain are described below.

Encryption: All data transmitted between your browser and our servers is encrypted using 256-bit TLS/SSL protocols. Data stored on our servers — including personal records, KYC documents, and financial transaction logs — is encrypted at rest using AES-256 encryption. Encryption keys are managed through a dedicated key management system with strict access controls.

Access Controls: Access to personal data stored on six6bet systems is restricted to authorised personnel whose role requires it. All internal access is protected by multi-factor authentication (MFA), and access logs are maintained and reviewed regularly. Database administrators cannot access player payment credentials in unencrypted form.

Intrusion Detection & Monitoring: Our infrastructure is monitored 24/7 by automated intrusion detection systems that flag anomalous activity in real time. Our security team reviews alerts and investigates potential incidents promptly. Identified vulnerabilities are patched on a priority basis in accordance with our internal security response policy.

Data Breach Response: In the event of a confirmed personal data breach that poses a risk to affected players, six6bet will notify impacted players as soon as reasonably practicable via the email address registered to their account. The notification will describe the nature of the breach, the categories of data affected, and the steps we have taken to mitigate the impact. We will also report the breach to the relevant competent authority as required by applicable law.

Your Responsibility: While six6bet maintains robust security measures on the platform side, you also play an important role in keeping your account secure. You are responsible for maintaining the confidentiality of your password and for logging out of your account on shared or public devices. Never share your password with anyone — six6bet support staff will never ask you for your password.

six6bet reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or the services we provide. When we make material changes to this Policy, we will update the effective date shown at the top of the page and, where appropriate, notify registered players via the email address associated with their account.

We encourage all players to review this Privacy Policy periodically to stay informed about how we are protecting your personal data. The most current version of this Policy will always be available at /privacy-policy. Your continued use of the six6bet platform following any update to this Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, your sole remedy is to cease using the platform and submit a formal account closure request.

Contact Our Data Protection Team: If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which six6bet processes your personal data, please contact us using the details below. We take all privacy enquiries seriously and will respond to your message within 5 business days.

• Email: support@six6bet (subject line: "Privacy Policy Enquiry")
• Response Time: Within 5 business days for general enquiries; within 30 days for formal data subject requests
• Operating Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant supervisory authority in your jurisdiction. six6bet is committed to resolving all privacy complaints fairly and transparently, and we will always work with you to reach a satisfactory resolution before any formal escalation becomes necessary.