Privacy Policy — six6x

Introduction

This Privacy Policy ("Policy") describes how six6x ("we", "us", "our") collects, uses, stores, shares, and protects personal data when you access or use the six6x platform at six6x.vu (the "Platform"). This Policy applies to all players, registered users, and visitors to the Platform, regardless of the device or connection method used to access it. By registering an account, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein.

This Policy should be read alongside our Terms and Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference. Together these three documents form the complete agreement between you and six6x governing your use of the Platform. If you do not agree with this Policy, you should not access or use the Platform.

Data We Collect

six6x collects personal data through several channels: directly from you when you register or contact us, automatically when you use the Platform, and in limited cases from third-party service providers involved in operating the Platform. The categories of personal data we collect include the following.

• Identity data: full name, date of birth, gender, and a copy of identity documentation provided during KYC verification.
• Contact data: mobile phone number, email address, and the district or city of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
• Account data: username, encrypted password, account creation date, account status, and login history.
• Financial data: deposit and withdrawal transaction history, payment method identifiers (mobile wallet account references for bKash, Nagad, Rocket, or bank account references), and account balance records. We do not store full payment card numbers.
• Gaming activity data: game history, bet amounts, wager outcomes, session durations, and responsible gaming tool usage (deposit limits, time-outs, self-exclusion records).
• Technical data: IP address, device type and operating system, browser type and version, screen resolution, time zone, referring URL, and session activity logs generated automatically when you access the Platform.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless this is strictly required for a specific legal compliance purpose (such as processing a self-exclusion request on medical grounds). Where such data is provided voluntarily, it will be processed only for the stated purpose and will not be used for any other reason.

How We Use Your Data

six6x uses the personal data it collects for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent.

Where we send you marketing communications (such as promotional offers, bonus notifications, or tournament updates), we will only do so with your prior explicit consent, obtained at the time of registration or through your account communication preferences. You may withdraw your marketing consent at any time by updating your account settings or by contacting six6x support. Withdrawal of marketing consent does not affect communications that are strictly necessary for account management (such as transaction confirmations and security alerts).

Legal Basis for Processing

six6x processes personal data on one or more of the following legal bases, depending on the specific processing activity involved.

• Contractual necessity: processing required to fulfil our contract with you — including account creation, game provision, payment processing, and customer support.
• Legal obligation: processing required for compliance with anti-money laundering regulations, age verification requirements, and other applicable legal obligations.
• Legitimate interests: processing carried out for fraud prevention, platform security, responsible gaming oversight, and improving our services — provided these interests are not overridden by your rights and interests.
• Consent: processing for marketing communications and non-essential cookies, where we have obtained your prior explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Sharing Your Data

six6x does not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances. We share personal data only in the following limited circumstances, and only to the extent strictly necessary for each purpose.

• Payment processors: financial data is shared with mobile financial service providers (bKash, Nagad, Rocket) and bank partners to process your deposits and withdrawals. These providers are contractually bound to process your data only for payment purposes.
• KYC and identity verification providers: identity data is shared with third-party verification services to confirm your age and identity. These providers operate under strict data processing agreements and are not permitted to use your data for any other purpose.
• Game software providers: aggregated and anonymised gaming activity data may be shared with game studios such as Pragmatic Play, Evolution Gaming, Spribe, and others for the purpose of game performance monitoring, RNG certification, and game audit compliance. No personally identifiable data is shared with game providers.
• Legal authorities: where required by applicable law, court order, or regulatory authority, we may disclose personal data to law enforcement or regulatory bodies. We will only make such disclosures where we are legally required to do so and will notify you where permitted by law.

All third-party service providers with whom we share personal data are required to maintain appropriate technical and organisational security measures and to process data only in accordance with our instructions and this Policy. We do not permit them to use your data for their own purposes beyond the scope of the service they provide to six6x.

Cookies and Tracking Technologies

six6x uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device when you visit the Platform. They help us deliver a functional, secure, and personalised experience. The categories of cookies we use are as follows.

• Strictly necessary cookies: these are essential for the Platform to function. They enable core features such as login session maintenance, security token validation, and language preference storage. These cookies cannot be disabled.
• Functional cookies: these remember your preferences (such as display settings and preferred payment method) so you do not have to reconfigure them on each visit. These cookies can be disabled but doing so may reduce the quality of your experience.
• Analytics cookies: these collect aggregated, anonymised data about how players use the Platform — such as which pages are visited most frequently and where navigation errors occur. This data is used solely to improve Platform performance and user experience.
• Security and fraud-detection cookies: these help us identify suspicious behaviour, detect automated bots, and protect your account from unauthorised access attempts. They are strictly necessary from a security standpoint and cannot be disabled.

You can manage non-essential cookie preferences through your browser settings at any time. Please note that disabling cookies may affect the functionality of certain parts of the Platform. six6x does not currently use third-party advertising cookies or cross-site tracking pixels for targeted advertising purposes.

Data Retention

six6x retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The specific retention periods we apply are as follows: account data and identity verification records are retained for a minimum of five years from the date of account closure, in order to comply with applicable anti-money laundering and financial record-keeping obligations; gaming activity data and transaction records are retained for a minimum of five years from the date of the relevant transaction or gaming session; communications records (including support chat logs and email correspondence) are retained for two years from the date of the communication.

After the applicable retention period has expired, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Where data has been anonymised it may be retained indefinitely for statistical and analytical purposes. Technical data such as server logs is retained for a shorter period of 90 days unless it is required as part of an ongoing security investigation or legal matter.

Your Data Rights

As a data subject, you hold the following rights in relation to the personal data six6x holds about you. To exercise any of these rights, please contact six6x support at [email protected] with a clear description of your request. We will respond to all valid data rights requests within a reasonable timeframe and at no charge, unless a request is manifestly unfounded or excessive.

• Right of access: you may request a copy of the personal data six6x holds about you, together with information about how it is processed.
• Right to rectification: you may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing applies.
• Right to restriction: you may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to object: you may object to processing carried out on the basis of legitimate interests, including profiling for fraud prevention purposes. You may also object to the use of your data for direct marketing at any time.
• Right to data portability: where processing is based on consent or contractual necessity, and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.

six6x will verify your identity before processing any data rights request to ensure that personal data is not disclosed to an unauthorised person. We aim to respond to all requests within 30 days. Where a request is complex or numerous, we may extend this period by a further 30 days and will notify you accordingly.

Security Measures

six6x takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and our servers; encrypted storage of account credentials and sensitive personal data; role-based access controls ensuring that only authorised personnel can access player data; automated monitoring and alerting systems to detect unusual access patterns or potential security breaches; and regular security reviews of our systems and data handling practices.

While we take all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, six6x will notify affected players without undue delay and will take all necessary steps to mitigate the impact of the breach. You can help protect your account by using a strong, unique password and by not sharing your login credentials with any third party.

Third-Party Services and Links

The six6x Platform integrates with third-party game studios (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and Microgaming) and payment service providers (bKash, Nagad, Rocket, and banking partners) to deliver its services. When you interact with games or payment flows provided by these third parties, those interactions are subject to the privacy policies of those providers in addition to this Policy. six6x is not responsible for the privacy practices of third-party game providers in respect of data processed directly within their game environments.

The Platform may contain links to other websites or services for informational purposes. six6x is not responsible for the content or privacy practices of any external site. We recommend you review the privacy policy of any third-party website you visit via a link from our Platform.

Children's Privacy

The six6x Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect, use, or store personal data from anyone under the age of 21. Our registration process requires users to confirm their date of birth and to certify that they are 21 or older. Where we have reasonable grounds to suspect that a registered user is under 21, we will suspend the account pending age verification and will delete all associated personal data if the user is confirmed to be underage.

Changes to This Policy

six6x reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes to this Policy, we will update the "Last updated" date at the top of this page. We may also notify registered players of material changes via the in-platform notification system or by email where we consider the changes to be significant enough to warrant direct notification.

Your continued use of the Platform after any changes to this Policy have been posted constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how we protect your personal data. If you disagree with any changes we make, you are entitled to close your account and request deletion of your personal data in accordance with Section 8 of this Policy.

Contact Us and Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to submit a complaint about how six6x handles your personal data, please contact our support team. We are committed to resolving all privacy-related enquiries promptly and transparently.

When submitting a data rights request, please include your registered mobile number or email address and a clear description of the right you wish to exercise or the data you wish to access, correct, or delete. six6x will verify your identity before processing the request and will respond within 30 days. All communications related to data rights are treated with strict confidentiality.