6six Privacy Policy

This Privacy Policy applies to all personal data collected by 6six ("Company", "Platform", "we", "us", "our") in connection with the operation of the 6six online betting and casino platform, accessible at https://6six.lat and all associated mobile applications and services. It applies to all users regardless of whether they are located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or any other location.

For the purposes of this Privacy Policy, "personal data" means any information relating to an identified or identifiable natural person — including your name, mobile number, email address, payment account details, device identifiers, and IP address. "Processing" refers to any operation performed on personal data, including collection, storage, use, transmission, and deletion.

6six is committed to handling your personal data responsibly, transparently, and in accordance with recognised data protection principles. We collect only the data that is strictly necessary to deliver our services, fulfil our legal obligations, and keep the platform secure. We do not sell your personal data to unaffiliated third parties for any purpose whatsoever.

This policy should be read together with our Terms & Conditions, which set out the broader contract between you and 6six, and with our Responsible Gaming Policy, which explains the player protection tools available to you on the platform.

6six collects the following categories of personal data from its users. The specific data points collected will depend on how you interact with the platform and which services you use.

6six collects personal data through the following channels:

• Direct submission: When you register an account, complete our KYC verification process, make a deposit or withdrawal request, contact our support team, or update your account profile, you directly provide us with personal data.
• Automated technical collection: When you visit or use the 6six platform, we automatically collect certain technical and usage data via server logs, cookies, and similar tracking technologies. This includes your IP address, device type, browser version, pages accessed, and session timing information.
• Payment processors: When you use bKash, Nagad, Rocket, Upay, Visa, or Mastercard to fund or withdraw from your account, the relevant payment processor shares transaction confirmation data with us, including the account or card reference used and the transaction amount.
• Identity verification partners: Where third-party KYC verification services are used to validate your identity documents, those partners may return verified identity data to us as part of the verification workflow.
• Fraud detection systems: Our automated fraud detection systems analyse patterns in usage and transaction data to flag potentially suspicious activity. This processing is performed on data already collected through the channels described above.

6six uses the personal data we collect for the following purposes. We will not use your data for any purpose that is incompatible with the purposes listed here without first obtaining your explicit consent or establishing a fresh legal basis for the new use.

• Account management: To create, maintain, verify, and close your 6six player account; to process logins; to manage your account settings and preferences.
• Service delivery: To enable you to place bets, play casino and slot games, access the live casino, and use all features of the 6six platform as described in our Terms & Conditions.
• Payment processing: To process deposits into your account and to execute withdrawal requests to your registered payment method, whether via bKash, Nagad, Rocket, Upay, Visa, or Mastercard.
• Identity and age verification: To verify that you are who you say you are and that you are at least 21 years of age, as required by our platform rules and responsible gaming obligations.
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, money laundering, and other prohibited activities that could harm the integrity of the platform or the interests of legitimate players.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling behaviour and to administer the player protection tools (deposit limits, loss limits, self-exclusion) that you activate in your account settings.
• Customer support: To respond to your enquiries, process complaints, and provide the 24/7 support service described in our Terms & Conditions.
• Legal and compliance obligations: To comply with applicable anti-money laundering requirements, to respond to lawful requests from competent authorities, and to maintain records required for financial audit purposes.
• Marketing communications: Where you have opted in, to send you promotional emails or platform notifications about bonuses, new game launches, seasonal promotions (such as BPL season offers or Eid promotions), and platform updates. You may opt out of marketing communications at any time by contacting [email protected].
• Platform improvement: To analyse aggregated and anonymised usage patterns in order to improve the platform's features, performance, user experience, and game selection.

6six processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing:

• Contractual necessity: The processing is necessary to perform the contract between you and 6six — specifically, to deliver the betting and gaming services you have signed up to use, including account management, game delivery, and payment processing.
• Legal obligation: The processing is required to comply with applicable legal and regulatory obligations, including anti-money laundering checks, record-keeping requirements, and responses to lawful authority requests.
• Legitimate interests: The processing is in the legitimate interests of 6six (or a third party), provided those interests do not override your fundamental data protection rights. This basis is used for fraud prevention, platform security monitoring, and analytical processing to improve service quality.
• Consent: Where we rely on your consent as the legal basis for processing (primarily for direct marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

6six does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing or commercial purposes. We will only share your personal data with third parties in the following strictly defined circumstances:

• Payment service providers: We share transaction data with bKash, Nagad, Rocket, Upay, and Visa/Mastercard processing partners to the extent necessary to process your deposits and withdrawals. These providers are contractually bound to use your data only for the purpose of processing the relevant transaction.
• Identity verification providers: Where a third-party KYC or document verification service is engaged to assist with the identity verification process, your identity documents and verification data may be shared with that provider under strict data processing agreements.
• Fraud detection and cybersecurity partners: We may share technical data (such as IP addresses and device fingerprints) with specialist fraud detection and cybersecurity service providers to protect the platform and its users from malicious activity.
• Game software providers: When you play a game hosted by a third-party provider such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, or Spribe, certain session and gameplay data is transmitted to that provider's servers as part of the game delivery process. Each provider's handling of that data is governed by their own privacy policies.
• Legal and regulatory authorities: We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so — for example, in response to a valid court order or regulatory investigation. We will notify you of such disclosures where permitted by law.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the 6six business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any change to this Privacy Policy that results from it.

The 6six platform uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate key platform functions, improve the user experience, and monitor platform performance. Below is a summary of the cookie categories we use:

Most web browsers allow you to control cookies through their settings, including the ability to block or delete cookies. Please note that blocking strictly necessary or security cookies may impair your ability to use the 6six platform, including logging in and accessing the cashier. Detailed instructions for managing cookies in popular browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.

6six retains your personal data for only as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by applicable law or regulatory obligation. Our general retention periods are as follows:

• Active account data: Retained for the full duration of your account relationship with 6six, plus a minimum of five (5) years following account closure to meet our anti-money laundering record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in line with financial record-keeping requirements.
• KYC documents: Retained for five (5) years from the date of verification, or from the date of account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the last interaction, to support complaint resolution and service quality review.
• Marketing consent records: Retained for as long as you remain opted in to marketing communications, plus two (2) years following opt-out, to demonstrate compliance with your preferences.
• Technical and usage logs: Retained for up to twelve (12) months in identifiable form, after which they are aggregated and anonymised. Anonymised data may be retained indefinitely for analytical purposes.

When your personal data is no longer required and the applicable retention period has expired, 6six will securely delete or anonymise it. Secure deletion means overwriting or physically destroying the data in a manner that prevents recovery.

In addition to SSL encryption in transit, 6six employs the following technical and organisational security measures to protect your personal data at rest and within our infrastructure:

• Encryption of sensitive data fields (including identity document references and payment account identifiers) in our databases using industry-standard encryption algorithms.
• Role-based access controls ensuring that only authorised 6six personnel with a documented business need can access personal data, and only to the extent necessary for their specific role.
• Multi-factor authentication required for all administrative and system-level access to 6six infrastructure.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Continuous automated monitoring of our systems for anomalous access patterns, unusual data requests, and potential intrusion attempts.
• Formal incident response procedures to contain, investigate, and report any confirmed data breach in a timely manner.

While 6six maintains robust technical security measures, no online platform can guarantee absolute security against all possible threats. You also play an important role in keeping your account data secure: choose a strong, unique password for your 6six account, enable two-factor authentication where offered, and contact [email protected] immediately if you suspect any unauthorised access to your account.

As a user of the 6six platform, you hold the following rights in relation to your personal data. You may exercise any of these rights at any time by contacting our support team at [email protected] with the subject line "Data Rights Request — [Your Username]".

• Right of access: You have the right to request a copy of all personal data that 6six holds about you, along with an explanation of the purposes for which it is processed and the categories of third parties with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay. You can update basic profile information directly in your account settings.
• Right to erasure: In certain circumstances, you have the right to request that 6six delete your personal data. This right is subject to limitations — for example, we are not able to delete data that we are legally required to retain for anti-money laundering or financial record-keeping purposes.
• Right to restrict processing: You may request that 6six restrict the processing of your personal data in certain circumstances, such as while a dispute regarding the accuracy of your data is being investigated.
• Right to data portability: Where we process your data on the basis of your consent or contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that we transmit it to another data controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests, including the right to object to direct marketing at any time with immediate effect.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6six will respond to all data rights requests within thirty (30) days of receipt. In complex cases we may extend this period by a further two months, in which case we will notify you of the extension and the reason for it within the initial thirty-day period. We will not charge a fee for exercising your data rights unless a request is manifestly unfounded or excessive.

6six employs date-of-birth verification at the registration stage and documentary age verification as part of the KYC process to prevent underage individuals from accessing the platform. If 6six discovers that an account has been registered by or on behalf of a person under the age of 21, that account will be immediately suspended, all funds held pending investigation, and the personal data of the underage individual deleted as promptly as our legal obligations permit.

If you believe that a person under the age of 21 has registered a 6six account or has access to an account, please notify us immediately at [email protected]. We will investigate all such reports as a matter of urgency and take appropriate action.

The 6six platform integrates with a number of third-party services to deliver our full product offering. These include game software from providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe, as well as payment processing services from bKash, Nagad, Rocket, Upay, Visa, and Mastercard. When you interact with content or services delivered by these third parties, your data may be processed by them in accordance with their own privacy policies, over which 6six has no control.

6six is not responsible for the privacy practices of third-party game providers or payment processors. We encourage you to review the privacy policies of any third-party service you interact with through the 6six platform. Our data processing agreements with these providers require them to handle any data shared with them solely for the purpose of delivering the contracted service and prohibit them from using that data for their own independent commercial purposes.

The 6six platform does not contain links to external third-party websites for general browsing purposes. All navigation on the platform remains within the 6six domain. Where any integration with a third-party service requires data to be transmitted outside the 6six platform, this is disclosed in the relevant section of this Privacy Policy.

6six reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform and services. The most current version of this Privacy Policy will always be available at https://6six.lat/privacy-policy.

When we make material changes to this Privacy Policy — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify you by posting a prominent notice on the 6six platform and, where we hold a valid email address for you, by sending a notification to that address. The notice will clearly state what has changed and when the updated policy takes effect.

Your continued use of the 6six platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised policy. If you do not agree with any changes to this Privacy Policy, you should cease using the 6six platform and contact [email protected] to close your account and exercise any applicable data rights.

Minor changes — such as typographical corrections, clarifications that do not alter the substance of our data practices, or formatting improvements — may be made without individual notification. The "Effective Date" shown at the top of this page will always reflect the date of the most recent revision of any kind.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 6six handles your personal data, please contact our support team using the details below. We aim to respond to all privacy-related enquiries within five (5) business days.

When submitting a data rights request or privacy enquiry, please include your registered username and the email address associated with your 6six account so that we can locate your records and respond to you accurately. We may need to verify your identity before fulfilling certain data rights requests in order to protect your account security.