six6b Privacy Policy — Your Data, Protected

six6b collects personal data from players through several distinct channels during the course of normal platform use. The categories of data we collect, and the circumstances under which each category is gathered, are described in detail below.

1.1 Data You Provide Directly

When you register an account, complete verification procedures, contact our support team, or interact with certain features of the six6b platform, you provide us with personal information. This includes:

• Identity data: Full legal name, date of birth, and copies of government-issued identity documents such as your National ID Card (NID), passport, or driving licence
• Contact data: Email address, Bangladeshi mobile phone number, and physical address
• Financial data: Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers), bank account details submitted for withdrawal processing, and transaction history on the platform
• Account credentials: Username, hashed password, and two-factor authentication settings
• Support communications: The content of any messages, complaints, or queries you send to the six6b support team via email at [email protected]

1.2 Data Collected Automatically

When you visit or use the six6b platform, certain technical and behavioural data is collected automatically by our systems. This data is used primarily for security, fraud prevention, and platform optimisation purposes:

• Device data: Device type, operating system, browser type and version, screen resolution, and device identifiers
• Network data: IP address, approximate geographic location derived from IP, and internet service provider
• Usage data: Pages visited, games played, betting markets accessed, session duration, click patterns, and feature interactions
• Transaction metadata: Timestamps, deposit and withdrawal amounts, payment method used, and transaction status logs

1.3 Data from Third Parties

six6b may receive personal data about you from third-party sources in limited circumstances, including:

• Identity verification service providers, who return the results of document and biometric checks conducted on our behalf during the KYC process
• Payment processing partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank), who confirm transaction completion status
• Fraud prevention and anti-money laundering screening services, which may flag account activity against watchlists
• Game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), who supply aggregated game round data for responsible gaming monitoring

six6b processes personal data only for specific, clearly defined purposes. We do not use personal data for any purpose incompatible with those stated here, and we do not sell personal data to any third party for marketing or commercial purposes.

2.1 Contract Performance

The primary basis on which six6b processes most player data is the performance of the contract between six6b and the player — that is, providing the platform services the player has registered to use. Under this basis, we process data to:

• Create, maintain, and manage your player account
• Process deposit and withdrawal transactions through your chosen payment method
• Deliver the specific sports betting markets, live casino games, and slot titles you access
• Award bonuses, process wagering requirements, and track promotional eligibility
• Respond to account-related support queries and resolve disputes

2.2 Legal Compliance

six6b is obligated to process certain personal data to comply with applicable legal requirements, including anti-money laundering (AML) regulations and know-your-customer (KYC) obligations. Under this basis, we process data to:

• Verify the identity and age of all registered players
• Monitor transactions for indicators of money laundering or financial fraud
• Retain transaction records for the periods required by applicable law
• Respond to lawful requests from relevant governmental and regulatory authorities

2.3 Legitimate Interests

Where it is necessary to pursue six6b's legitimate business interests and those interests are not overridden by your privacy rights, we process data to:

• Detect, investigate, and prevent fraud, bonus abuse, multi-accounting, and other prohibited conduct
• Maintain the security and integrity of the platform and its infrastructure
• Analyse aggregated usage patterns to improve the platform's features and performance
• Monitor and enforce compliance with these Terms and our responsible gaming obligations

2.4 Marketing Communications

If you have opted in to receive promotional communications from six6b, we will use your email address and mobile phone number to send you information about bonuses, promotions, BPL and T20 tournament specials, Eid and Pohela Boishakh campaigns, and other offers. You may opt out of marketing communications at any time by contacting [email protected] or by following the unsubscribe link in any promotional email.

six6b uses cookies and similar tracking technologies to enable core platform functionality, improve the user experience, and support security and fraud prevention measures. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

3.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your login session, language preferences, and browsing activity — so that subsequent visits are faster and more personalised. Some cookies are essential for the website to function correctly; others are optional and serve analytical or marketing purposes.

3.2 Cookies We Use

3.3 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that disabling essential cookies will prevent you from logging in to your six6b account and using core platform features. Disabling functional cookies will mean that your preferences are not remembered between sessions. Disabling analytics cookies will not affect your ability to use the platform but will limit our ability to improve it based on real usage data.

For guidance on managing cookies in your specific browser, please refer to your browser's help documentation. Key browsers used commonly in Bangladesh — including Google Chrome for Android, Samsung Internet, Opera Mini, and Mozilla Firefox — all provide accessible cookie management settings within their privacy or security menus.

six6b does not share your personal data with third parties except in the specific, limited circumstances described in this section. In every case where data is shared, six6b ensures that appropriate contractual and technical safeguards are in place to protect the security and confidentiality of your information.

4.1 Service Providers and Data Processors

six6b engages certain third-party service providers to help deliver the platform's services. These providers act as data processors on six6b's behalf and are permitted to use your personal data only for the specific purpose for which they are engaged. They are contractually prohibited from using your data for their own purposes. Categories of service providers we engage include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank — for processing deposits and withdrawals
• Identity verification providers: Third-party KYC and document verification services used to confirm player identity during account registration and ongoing compliance checks
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — who receive limited player data (typically a session token and player ID) to enable game delivery and record-keeping
• Fraud and risk management providers: Specialist services that screen transactions and account activity against financial crime databases
• Cloud infrastructure providers: Hosting and data storage services that maintain the technical infrastructure on which the six6b platform runs

4.2 Legal and Regulatory Disclosure

six6b may disclose personal data to governmental authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, or where six6b has a good-faith belief that such disclosure is necessary to comply with a legal obligation, protect the rights or safety of six6b or its players, or investigate suspected fraud or prohibited conduct.

4.3 Business Transfers

In the event that six6b undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, player personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, six6b will take reasonable steps to ensure that any transferred data continues to be protected in accordance with this Privacy Policy, and will notify affected players of any material changes to the way their data is processed.

six6b retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory retention obligations, and to resolve any disputes that may arise during or after the player's use of the platform.

5.1 Active Accounts

While your six6b account remains active, we retain all personal data associated with your account, including your identity information, transaction history, gameplay records, and support communications. This data is necessary to deliver the services you have contracted for and to fulfil our ongoing legal and compliance obligations.

5.2 Closed Accounts

Following the closure of a player account — whether initiated by the player or by six6b — we retain the following data categories for the periods specified below:

After the applicable retention period has expired, six6b will securely delete or anonymise your personal data so that it can no longer be linked to you as an individual.

six6b takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, disclosure, alteration, or destruction. No online platform can guarantee absolute security, but six6b's security architecture reflects current industry best practices.

6.1 Technical Safeguards

• SSL/TLS encryption: All data transmitted between your device and the six6b platform is encrypted using 256-bit SSL/TLS protocols, preventing interception by third parties
• Password hashing: Player passwords are never stored in plain text. six6b uses strong cryptographic hashing algorithms to store password data securely
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their accounts, adding a second layer of protection beyond the password
• Access controls: Access to player data within six6b's internal systems is restricted on a strict need-to-know basis, with role-based access controls and comprehensive audit logging
• Intrusion detection: six6b's infrastructure is monitored around the clock by automated intrusion detection systems designed to identify and respond to suspicious activity in real time

6.2 Organisational Safeguards

• All six6b personnel who handle personal data are subject to confidentiality obligations and receive training on data protection practices
• Third-party service providers who process data on six6b's behalf are subject to data processing agreements that require them to implement equivalent security standards
• six6b conducts periodic internal reviews of its data handling practices and security infrastructure

6.3 Reporting a Security Concern

If you believe that your six6b account has been compromised, or if you discover a security vulnerability on the platform, please contact the six6b security team immediately at [email protected]. Do not attempt to exploit any vulnerability you discover. Reports submitted in good faith will be handled promptly and confidentially.

As a player on the six6b platform, you have a number of rights with respect to the personal data we hold about you. six6b is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please contact the six6b data team at [email protected] with the subject line "Privacy Rights Request".

7.1 Right of Access

You have the right to request a copy of all personal data that six6b holds about you. This is sometimes referred to as a Subject Access Request (SAR). six6b will respond to verified access requests within 30 calendar days. We may request proof of identity before fulfilling an access request to ensure that data is not disclosed to an unauthorised party.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For most account details (such as contact information), you can update your data directly from within your six6b account settings. For identity documents or other KYC data, please contact our support team to initiate a formal correction process.

7.3 Right to Erasure

In certain circumstances, you have the right to request that six6b delete the personal data we hold about you. Please note that this right is not absolute — six6b is required to retain certain categories of data for defined periods in order to comply with AML regulations and other legal obligations, as described in Section 5. Where erasure is not possible in full, six6b will explain the reason and, where appropriate, restrict processing of the data in question.

7.4 Right to Restrict Processing

You may request that six6b restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where processing is unlawful but you prefer restriction over deletion. During a period of restricted processing, six6b will continue to store the data but will not actively use it for any purpose other than those required by law.

7.5 Right to Object

You have the right to object to the processing of your personal data where that processing is based on six6b's legitimate interests. You also have an unconditional right to object to the processing of your personal data for direct marketing purposes. Objections to marketing processing will be acted upon immediately; objections to other processing based on legitimate interests will be carefully assessed against six6b's grounds for processing.

7.6 Right to Withdraw Consent

Where six6b processes your personal data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of processing that took place before the consent was withdrawn. To withdraw consent, please contact [email protected] or use the unsubscribe mechanism in any promotional communication you receive from six6b.

six6b reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable law, changes in our data processing practices, or improvements to the platform. When we make material changes to this policy, we will notify registered players by email and by publishing a prominent notice on the six6b platform at least 14 days before the changes take effect.

8.1 Notification of Changes

The effective date at the top of this policy indicates when it was last updated. We encourage all players to review this policy periodically to stay informed about how six6b protects their personal data. Your continued use of the six6b platform following the effective date of any updated policy constitutes your acceptance of the revised terms.

8.2 Contact the six6b Data Team

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way six6b handles your personal data, please do not hesitate to get in touch with our dedicated data team:

• Email: [email protected]
• Subject line for privacy queries: "Privacy Rights Request" or "Privacy Policy Query"
• Response time: Within 3 business hours for general queries; within 30 calendar days for formal rights requests
• Platform: https://six6b.app

8.3 Children's Privacy

The six6b platform is strictly intended for adults aged 18 and above. six6b does not knowingly collect personal data from individuals under the age of 18. If we become aware that a player under the minimum age has registered an account and submitted personal data, we will take immediate steps to close that account and securely delete all associated data. If you are a parent or guardian and believe that a minor has registered on the six6b platform, please contact us immediately at [email protected].