6six6 Privacy Policy — How We Handle Your Data

Introduction

6six6 ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the 6six6 online gaming and sports betting platform ("Platform"). This Privacy Policy ("Policy") describes our practices with respect to the collection, use, storage, disclosure, and protection of personal information in connection with your use of the Platform.

This Policy applies to all users of the 6six6 Platform regardless of how they access it — whether via mobile browser on an Android or iOS device, desktop browser, or any other means. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

Please read this Policy carefully. If you have questions about how 6six6 handles your personal data, you may contact our support team at any time using the contact details set out in Section 12 of this Policy.

Our Six Privacy Principles

The core commitments that shape how 6six6 treats your personal data

1Information We Collect

The categories of personal data 6six6 collects and how we receive them

6six6 collects personal data through several means: directly from you when you register an account or use the platform, automatically when you interact with the platform (such as through cookies and log data), and in limited cases from third parties such as payment processors and identity verification services. The categories of personal data we collect are described below.

2How We Use Your Information

The purposes for which 6six6 processes your personal data

6six6 uses the personal data it collects for the following purposes. Where processing requires your consent, we will request that consent separately and clearly at the relevant point of collection. Where processing is necessary for the performance of our contract with you or for compliance with legal obligations, no additional consent is required.

• Account creation, maintenance, and management: to register your account, verify your identity and age, process your deposits and withdrawals, and provide you with access to the full range of platform features.
• Customer support: to respond to queries, complaints, account disputes, and technical issues submitted through our support channels.
• Fraud prevention and security: to monitor account activity for suspicious behaviour, detect and investigate potential fraud, money laundering, or Terms & Conditions violations, and to protect the integrity of the platform and the security of all players.
• Legal and regulatory compliance: to meet our obligations under applicable anti-money laundering legislation, age verification requirements, and other regulatory requirements applicable to online gaming platforms operating in or serving Bangladesh.
• Platform improvement: to analyse aggregated and anonymised usage data in order to improve the performance, reliability, and user experience of the 6six6 platform. This analysis does not use individually identifiable personal data.
• Promotional communications: to send you information about bonuses, promotions, and new features on 6six6, where you have opted in to receive such communications. You may opt out at any time by contacting support.

6six6 does not use personal data for automated decision-making that produces significant legal or similarly significant effects on players without human oversight. Where any automated process flags an account for investigation, a human review is conducted before any account action (such as suspension or closure) is taken.

3Legal Basis for Processing

Why 6six6 is lawfully entitled to process your personal data

6six6 processes personal data on the basis of one or more of the following lawful grounds, depending on the specific processing activity:

• Performance of a contract: processing that is necessary to create your account, process your bets and transactions, and deliver the services you have requested.
• Legal obligation: processing that is required for compliance with applicable law, including KYC and anti-money laundering obligations.
• Legitimate interests: processing carried out for fraud prevention, security monitoring, and platform improvement, where those interests are not overridden by your privacy rights.
• Consent: where we process personal data for promotional communications or for purposes beyond those described above, we will obtain your explicit consent prior to processing.

4Sharing of Your Information

The limited circumstances in which 6six6 may share your personal data with third parties

6six6 does not sell your personal data. We share personal data with third parties only where strictly necessary and only for the specific purposes described below. All third parties with whom we share data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any independent purpose.

• Payment processors: mobile money operators (bKash, Nagad, Rocket, Upay) and bank transfer systems require the minimum information necessary to execute your deposit or withdrawal transaction. These providers process payment data under their own privacy policies and regulatory obligations.
• Identity verification providers: where KYC verification is required, we may share the relevant identification documents with third-party identity verification service providers. These providers are contractually bound to use the data solely for verification purposes.
• Regulatory and law enforcement authorities: where required by applicable law, regulation, court order, or a lawful request from a governmental or regulatory authority, 6six6 may disclose personal data to the relevant authority. We will endeavour to notify affected players where legally permissible to do so.
• Fraud prevention and AML screening services: we may share limited data with industry-standard fraud prevention and anti-money laundering screening databases where there is reasonable suspicion of fraudulent or illegal activity associated with an account.

6six6 does not share personal data with advertising networks, social media platforms, data brokers, or any other party for marketing, profiling, or commercial purposes beyond the operation of the 6six6 platform itself.

5Payment Data and Mobile Money Privacy

How 6six6 handles your bKash, Nagad, Rocket, and bank transaction data

Deposits and withdrawals on 6six6 are processed via bKash, Nagad, Rocket, Upay, and selected bank transfers. When you initiate a transaction, the relevant payment details (such as your registered bKash or Nagad mobile number) are shared with the respective payment provider solely to execute the transaction. 6six6 does not store your mobile money PIN, password, or OTP at any point. You should never share your mobile banking PIN or OTP with any third party, including 6six6 staff.

Transaction records — including the amount, date, time, and payment method used — are retained on 6six6's systems as part of your account transaction history. These records are used for account management, dispute resolution, customer support, and regulatory compliance purposes. Transaction data is retained for the period described in Section 7 of this Policy. If you notice any transaction on your account that you did not authorise, please contact 6six6 support immediately.

6Cookies and Tracking Technologies

How 6six6 uses cookies and similar technologies on the platform

6six6 uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the platform and improve your experience. Cookies are small data files stored on your device. We use the following categories of cookies:

• Essential cookies: these are strictly necessary for the platform to function. They maintain your login session, remember your language preference, and ensure security features operate correctly. These cookies cannot be disabled without preventing you from using the platform.
• Analytics cookies: we use anonymised analytics data to understand how players navigate and use the platform, which helps us identify performance issues and improve the user experience. This data is aggregated and does not identify individual users.
• Security cookies: these are used to detect and prevent fraudulent activity, including session hijacking and account takeover attempts. They do not track browsing activity outside the 6six6 platform.

6six6 does not use third-party advertising cookies or behavioural tracking cookies that monitor your activity outside of the 6six6 platform. You may manage cookie preferences through your browser settings; however, disabling essential cookies may impact your ability to use the platform fully.

7Data Retention

6six6 retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Account data and transaction records are retained for a minimum of five years from the date of the last transaction on an account, or from the date of account closure, whichever is later. This retention period reflects standard compliance requirements under anti-money laundering legislation applicable to financial service providers.

KYC documents (identity and verification records) are retained for the duration of the account relationship and for a minimum of five years after account closure. Technical and usage data collected via cookies and log files is retained for a shorter period, typically no more than 12 months, unless a longer retention period is required for an ongoing investigation or regulatory matter. Once the applicable retention period has expired, personal data is securely deleted or permanently anonymised.

8Data Security

6six6 implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include SSL (Secure Socket Layer) encryption for all data in transit between your device and our servers, access controls that limit internal access to personal data to authorised personnel on a need-to-know basis, secure server infrastructure with regular security assessments, and password hashing and salting for all stored account credentials.

While we take all reasonable steps to protect your personal data, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, and we strongly recommend that you protect your account credentials by using a strong, unique password and never sharing your login details or mobile banking PINs with any third party. If you suspect your account has been compromised, contact 6six6 support immediately.

9Your Privacy Rights

What you are entitled to ask 6six6 to do with your personal data

Subject to applicable law and to certain exceptions (such as where retention is required by law, or where a request conflicts with our fraud prevention obligations), you have the following rights in respect of your personal data held by 6six6:

• Right of access: you have the right to request a copy of the personal data we hold about you, together with information about how we process it.
• Right to rectification: you have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may also update certain account details directly through your account settings.
• Right to erasure: in certain circumstances, you have the right to request that we delete personal data we hold about you. This right is subject to legal retention obligations — for example, we cannot delete transaction records that we are legally required to retain.
• Right to restriction of processing: you have the right to request that we restrict the processing of your personal data in certain circumstances, such as while the accuracy of that data is being contested.
• Right to withdraw consent: where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact 6six6 support using the details in Section 12. We will respond to valid requests within a reasonable period. We may need to verify your identity before processing a request to ensure that personal data is only disclosed to or acted upon by the account holder.

10Children's Privacy

The 6six6 platform is strictly intended for persons aged 21 and above. We do not knowingly collect personal data from persons under 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe that a person under 21 has registered an account on 6six6, please notify us immediately via our support channel so we can investigate and take appropriate action.

11Changes to This Privacy Policy

6six6 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will provide advance notice via a notification on the platform or by email to your registered address, where reasonably practicable. The "Last Updated" date at the top of this Policy reflects when the current version took effect.

Your continued use of the 6six6 platform following the publication of any amended Privacy Policy constitutes your acceptance of the revised Policy. We recommend reviewing this Policy periodically to stay informed of how your data is being handled. All previous versions of the Privacy Policy are superseded by the current version from the Last Updated date.

12Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 6six6 handles your personal data, please contact our support team. We are available 24 hours a day, 7 days a week, and aim to respond to all privacy-related enquiries within 2 Bangladesh Standard Time (BST, UTC+6) business days.

You may reach the 6six6 data privacy team by email at [email protected]. Please include your registered account username and a brief description of your query or request in your message so we can assist you as efficiently as possible. Do not include sensitive personal data such as passwords, PINs, or full payment account numbers in any communication with our support team.