sixs6 Privacy Policy

Introduction

This Privacy Policy is published by sixs6 ("we", "us", "our", "the Platform") and applies to all individuals who register an account, visit the sixs6 website, or otherwise interact with sixs6 services ("you", "the Player", "the User"). It sets out the principles and practices governing how sixs6 collects, uses, stores, shares, and protects personal data in connection with the operation of the sixs6 online casino and sports betting platform.

sixs6 is committed to handling personal data with transparency, integrity, and respect for player privacy. This policy is written in plain English to ensure every player — regardless of technical background — can clearly understand how their data is being managed. We encourage you to read this document in full before registering an account or making a deposit on the sixs6 platform.

This Privacy Policy should be read alongside the sixs6 Terms and Conditions and Responsible Gaming Policy, which together form the complete agreement governing your relationship with sixs6. By registering an account or using the platform, you confirm that you have read and understood this Privacy Policy and consent to the data practices described herein.

Personal Data We Collect

sixs6 collects the following categories of personal data from Players, either directly or through automated systems during platform use:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information unless it is directly relevant to a responsible gaming assessment and you have provided it voluntarily in that specific context.

How We Collect Your Data

sixs6 collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when completing the registration form, submitting a KYC verification request, contacting support, responding to surveys, or entering a promotion.
• Automated collection: Technical and usage data collected automatically by our platform systems when you visit the sixs6 website or use any feature of the platform, including cookies, server logs, and analytics tools.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank when you make a deposit or initiate a withdrawal.
• Identity verification partners: Results and risk scores from third-party KYC and anti-fraud service providers used to verify the identity and age of Players, particularly for accounts seeking to withdraw funds above specified thresholds.
• Anti-money laundering (AML) screening services: Publicly available watchlist data matched against Player identity information as part of our legal compliance obligations.
• Responsible gaming monitoring: Behavioural data generated by platform-side responsible gaming monitoring tools that analyse gameplay patterns for signs of problem gambling.

Purpose of Data Processing

sixs6 processes personal data only for specific, documented purposes. The following table maps each processing activity to the data categories it uses and the purpose it serves:

• Account registration and management: Identity, contact, and technical data are used to create and maintain your Player account, authenticate your login sessions, and communicate account-related information to you.
• Age and identity verification (KYC): Identity data and verification documents are used to confirm that you are at least 21 years of age and that the account is being operated by the registered individual, as required by our responsible gaming and anti-fraud obligations.
• Payment processing: Financial data is used to process deposits and withdrawals via your chosen payment method, to match incoming payments to your account, and to investigate and resolve payment disputes.
• Fraud prevention and security: Technical, financial, and usage data are used to detect and prevent unauthorised access, fraudulent activity, chargeback abuse, multi-accounting, and other platform security threats.
• Anti-money laundering compliance: Identity and financial data are used to screen transactions and account activity against AML risk indicators and applicable watchlists, and to report suspicious activity to competent authorities where legally required.
• Responsible gaming monitoring: Usage and responsible gaming data are used to identify Players who may be experiencing gambling-related harm and to offer appropriate intervention tools or support resources.
• Customer support: Communications and account data are used to respond to your enquiries, resolve disputes, process complaints, and improve support quality.
• Platform improvement: Aggregated and anonymised usage data are used to analyse platform performance, identify technical issues, and improve the overall player experience.
• Marketing communications: Contact data and usage data are used — where you have opted in — to send promotional offers, bonus notifications, and personalised recommendations. You may opt out at any time.

Legal Basis for Processing

Every data processing activity carried out by sixs6 is grounded in one of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and sixs6 — specifically, to operate your account, process your transactions, and deliver the gaming services you have requested.
• Legal obligation: Processing required to comply with applicable laws and regulations, including age verification requirements, anti-money laundering obligations, and fraud reporting duties.
• Legitimate interests: Processing that serves the legitimate operational and security interests of sixs6, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided these interests are not overridden by your privacy rights.
• Consent: Processing activities for which you have given explicit, informed consent — most notably, the sending of marketing communications and the use of non-essential tracking cookies. You may withdraw your consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

Data Sharing and Disclosure

sixs6 does not sell, rent, or trade your personal data to third parties for their own commercial purposes under any circumstances. Personal data is shared only in the following limited and controlled circumstances:

• Payment service providers: Financial and identity data is shared with bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank solely to facilitate the processing of your deposits and withdrawals. Each provider is bound by its own privacy obligations and data processing agreements with sixs6.
• KYC and identity verification providers: Identity data and verification documents are shared with our approved third-party identity verification partners to perform age checks and document authentication. These providers act as data processors under strict contractual data protection obligations.
• Game content providers: Limited technical data (such as session tokens and game round identifiers) is shared with third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to enable the delivery of their game content through the sixs6 platform.
• Anti-fraud and AML service providers: Identity and financial data is shared with AML screening and fraud prevention services that help sixs6 identify suspicious activity and meet its legal compliance obligations.
• Legal authorities: Personal data may be disclosed to regulatory authorities, law enforcement agencies, or courts where sixs6 is legally required or compelled to do so, or where disclosure is necessary to protect the rights, safety, or property of sixs6 or its players.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of the assets of sixs6, Player personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material change to data processing practices that may result from it.

Cookies & Tracking Technologies

sixs6 uses cookies and similar tracking technologies on the platform to support the proper functioning of the website, maintain your login session, and — where you have consented — to analyse usage patterns and deliver relevant promotions. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, preferred payment method, and last visited game category, so you do not need to re-enter these on each visit.
• Analytical cookies: Used — with your consent — to collect aggregated information about how Players navigate and use the sixs6 platform, helping us identify areas for improvement. This data is anonymised before analysis.
• Marketing cookies: Used — with your consent — to track whether you arrived at sixs6 through a promotional link or affiliate referral, and to deliver personalised promotional content based on your activity on the platform.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling functional or analytical cookies may affect the quality of your experience on the sixs6 platform. Withdrawing consent for marketing cookies will not affect your access to any games or account features.

Data Retention

sixs6 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply:

• Active account data: Personal and financial data associated with an active Player account is retained for the duration of the account's active status and for a minimum of 5 years following account closure, to comply with AML record-keeping requirements.
• KYC verification documents: Identity documents and verification results are retained for a minimum of 5 years following the completion of the KYC process, or longer if required by applicable law.
• Transaction records: All deposit and withdrawal transaction records are retained for a minimum of 5 years from the date of each transaction to satisfy financial record-keeping obligations.
• Support communications: Customer support conversations and complaint records are retained for a period of 3 years from the date of the last communication in each case.
• Marketing data: Where you have opted in to marketing communications, your contact preferences and communication history are retained until you opt out, after which your marketing profile is suppressed rather than deleted, to ensure that we do not inadvertently re-add you to future campaigns.
• Technical and usage data: Server logs, IP addresses, and usage analytics data are retained for a maximum of 13 months from collection, after which they are either deleted or fully anonymised.

When personal data is no longer required for any retention purpose, it is securely deleted or anonymised using industry-standard data erasure methods.

Data Security

sixs6 applies a layered approach to data security, combining technical, organisational, and procedural controls to protect Player personal data against unauthorised access, loss, disclosure, or misuse. Our security measures include:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and the sixs6 platform is encrypted using 256-bit TLS encryption, making it unreadable to any party that might intercept the connection.
• Encryption at rest: Sensitive personal data — including identity documents, financial records, and KYC data — is encrypted when stored in sixs6's database infrastructure using AES-256 encryption.
• Access controls: Access to Player personal data within sixs6's internal systems is strictly limited to staff members whose role requires it. All internal data access is logged and subject to regular audit.
• Two-factor authentication: Player accounts are protected by SMS OTP two-factor authentication to prevent unauthorised login even if account credentials are compromised.
• Penetration testing: sixs6 commissions regular independent security assessments and penetration tests on its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a personal data breach that poses a risk to Player rights, sixs6 will notify affected Players and relevant authorities within 72 hours of becoming aware of the breach, consistent with responsible disclosure best practices.

While sixs6 takes every commercially reasonable step to secure your personal data, no digital system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials and for ensuring that your registered mobile number and email address remain under your exclusive control.

Your Data Rights

As a sixs6 Player, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request.

Marketing Communications

sixs6 may send you promotional communications — including bonus offers, seasonal promotions, new game announcements, and personalised recommendations — via SMS, email, or push notification, provided you have opted in to receive such communications at the time of registration or subsequently through your account settings.

• You may opt out of marketing communications at any time by updating your notification preferences in your account settings, by clicking the unsubscribe link in any marketing email, or by contacting support at [email protected].
• Opting out of marketing communications will not affect transactional communications such as deposit confirmations, withdrawal notifications, account security alerts, or KYC verification requests — these will continue to be sent regardless of your marketing preferences.
• sixs6 does not send unsolicited bulk marketing messages. All promotional messages are sent only to Players who have explicitly opted in and are based on your actual account activity and preferences.
• Players who have applied a self-exclusion or cool-off period are automatically removed from all marketing lists for the duration of the restriction and will not receive promotional communications during that period.

Third-Party Services and Links

The sixs6 platform integrates third-party game content from studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game provided by one of these studios, a direct connection is established between your device and the studio's game server. Each studio operates under its own privacy policy and data protection framework.

sixs6 does not control the data practices of third-party game providers once a direct connection has been established and is not responsible for how those providers handle any technical data transmitted to their servers during gameplay. We encourage you to review the privacy notices of individual game providers if you have specific concerns about in-game data handling.

Payment service providers — including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank — operate their own independent privacy frameworks and process your financial data in accordance with their own terms. sixs6 is not responsible for the data practices of any payment provider.

Protection of Minors

sixs6 is strictly an adult entertainment platform. Access is prohibited to individuals under the age of 21. We do not knowingly collect personal data from anyone under the age of 21, and we do not direct any marketing or promotional content toward minors.

Where sixs6 becomes aware — through KYC verification, responsible gaming monitoring, or any other means — that a Player account is being operated by an individual under the age of 21, the account will be immediately suspended, all activity will be reversed to the extent possible, and any funds deposited will be returned to the source payment method after verification. No winnings will be paid out on accounts found to belong to minors.

If you are a parent or guardian and believe that a minor in your care has created an account on sixs6, please contact us immediately at [email protected] so we can take immediate remedial action.

Changes to This Privacy Policy

sixs6 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or operational requirements. When material changes are made to this policy, we will notify registered Players by email and display a prominent notice on the platform at least 7 days before the updated policy takes effect.

The effective date at the top of this document will always reflect when the current version entered into force. Continued use of the sixs6 platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you may request voluntary account closure as described in the sixs6 Terms and Conditions.

We encourage you to review this page periodically to stay informed about how sixs6 protects and manages your personal data.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how sixs6 handles your personal data, please contact our Data Protection team using the following details:

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" for faster routing
• Live Chat: Available 24/7 directly on the sixs6 platform
• Response Time: We aim to acknowledge all privacy-related enquiries within 24 hours and provide a substantive response within 30 calendar days, measured in Bangladesh Standard Time (BST, UTC+6)

We take every privacy concern seriously and are committed to resolving your enquiry fairly, transparently, and promptly. Your trust in sixs6 as a safe and responsible platform is something we work hard to earn every day.