Privacy Policy — Your Data at 6ixs

01 Data We Collect

In the course of operating the 6ixs platform and delivering our services to players based in Bangladesh and internationally, we collect personal data across several categories. The nature of the data collected depends on your level of engagement with the platform — from first-time browsing through to full KYC-verified account status.

Registration Data: When you create a 6ixs account, you are required to provide your legal full name, date of birth, residential address, email address, and a mobile phone number registered in your name. This information forms the core of your player profile and is used for identity verification, account management, and communication purposes.

Identity Verification (KYC) Data: To comply with our obligations regarding player identity verification and age restriction enforcement, 6ixs may require you to submit copies of the following documents: a government-issued photo identification document (National Identity Card, passport, or driving licence), proof of residential address (utility bill, bank statement, or similar), and in some cases, a selfie photograph for live identity matching. KYC documents are processed by our compliance team and stored in an encrypted document management system.

Payment Data: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or a linked bank account, 6ixs records the transaction reference, payment method identifier (mobile number or account number), transaction amount in Bangladeshi Taka (৳), and timestamp. 6ixs does not store full card numbers or mobile banking PINs. Payment processing is handled by our payment service partners under their own data security protocols.

Gameplay and Betting Data: 6ixs retains a full record of all bets placed, games played, outcomes, and account balance movements associated with your registered account. This data is used for dispute resolution, fraud detection, responsible gaming monitoring, and regulatory compliance purposes.

Device and Technical Data: When you access the 6ixs platform, our servers automatically collect certain technical information including your IP address, browser type and version, operating system, device type, screen resolution, referral URL, and session duration. This information is used for security monitoring, fraud prevention, and platform performance optimisation.

Communications Data: Records of communications between you and the 6ixs customer support team — whether conducted via live chat, email, or any other supported channel — are retained for quality assurance, dispute resolution, and regulatory compliance purposes.

02 How We Use Your Data

6ixs processes your personal data only for specific, legitimate purposes. The following table summarises the primary purposes for which your data is used and the lawful basis under which each processing activity is carried out.

Where 6ixs relies on consent as the lawful basis for processing — specifically for the sending of promotional emails and marketing communications — you have the right to withdraw that consent at any time by contacting our support team at [email protected] or by using the unsubscribe mechanism in any marketing email we send. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

03 Data Sharing & Third Parties

6ixs does not sell your personal data. We do not share your information with third-party advertising networks or data brokers. However, in order to deliver the 6ixs platform and comply with our legal obligations, we share limited categories of personal data with the following categories of trusted service partners:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive transaction-level data necessary to process your deposits and withdrawals. Each payment provider operates under its own independently regulated data protection framework.
• Identity Verification Partners: Where automated KYC processing tools are used to assist our compliance team in verifying player identity documents, the relevant data is shared with our verified KYC technology partner under a strict data processing agreement. Document data is not retained by the KYC partner beyond the verification process.
• Game Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive your player session token and account identifier in order to authenticate your game session and record game outcomes. They do not receive your full personal profile or payment data.
• Analytics Providers: Anonymised and aggregated platform usage data may be shared with analytics service providers for the purpose of improving platform performance. No personally identifiable information is included in analytics data exports.
• Legal and Regulatory Authorities: 6ixs will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a valid court order, or where 6ixs has reasonable grounds to suspect that the data is relevant to a financial crime investigation.

All third-party service providers with whom 6ixs shares personal data are required to handle that data in accordance with applicable data protection principles and are contractually prohibited from using your data for any purpose other than the specific service they provide to 6ixs.

04 Cookies & Tracking

6ixs uses cookies and similar browser-based tracking technologies on the 6ixs.vip website. Cookies are small text files placed on your device that allow the platform to recognise your browser, maintain your session state, and gather aggregate usage statistics. The following categories of cookies are used on the 6ixs platform:

6ixs does not deploy advertising cookies, retargeting pixels, or any tracking technology that shares your browsing behaviour with external advertising networks. You can manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your 6ixs account.

05 Data Retention

6ixs retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as general guidance:

• Active Account Data: Registration data, gameplay history, and transaction records are retained for the lifetime of your active 6ixs account plus a minimum period of five (5) years following account closure, in order to comply with anti-money-laundering record-keeping requirements.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following account closure. In cases where a regulatory investigation was opened during the account lifecycle, relevant documents may be retained for longer as required by the investigating authority.
• Customer Support Communications: Support chat logs and email correspondence are retained for three (3) years from the date of the interaction, unless the communication relates to an open dispute or regulatory matter, in which case retention continues until the matter is fully resolved.
• Technical and Device Data: IP address logs and server access records are retained for twelve (12) months for security and fraud investigation purposes, after which they are deleted or fully anonymised.
• Marketing Consent Records: Records of your marketing communication consent or opt-out are retained for the lifetime of your account plus three (3) years, to enable 6ixs to demonstrate compliance with consent obligations.

Following the expiry of the applicable retention period, personal data is either securely deleted from 6ixs systems or anonymised in such a manner that re-identification is not reasonably possible.

06 Data Security

6ixs implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following measures:

• Transport Layer Security: All communications between your device and 6ixs servers are encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed on a strict schedule. Connections using outdated protocol versions are refused.
• Encrypted Data Storage: Sensitive data categories — including KYC documents, payment method identifiers, and account credentials — are stored using strong encryption at rest. Database-level encryption prevents exposure of sensitive fields even in the event of an infrastructure breach.
• Access Controls: Access to personal data within 6ixs systems is restricted on a strict need-to-know basis. Staff access is governed by role-based access control policies, and all access to sensitive player data is logged and audited.
• Two-Factor Authentication: 6ixs strongly recommends that all registered players enable two-factor authentication (2FA) on their accounts for an additional layer of login security. 2FA is available via authenticator app or SMS verification.
• Penetration Testing: The 6ixs platform undergoes regular independent security assessments including penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to affected players, 6ixs will notify impacted players as promptly as practicable and take immediate steps to contain and remediate the breach.

07 Your Privacy Rights

As a registered player on the 6ixs platform, you hold a number of rights in relation to the personal data we hold about you. These rights are set out below along with guidance on how to exercise them:

• Right of Access: You have the right to request a copy of all personal data that 6ixs holds about you. Access requests can be submitted to [email protected]. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data held by 6ixs is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly within your account settings. For corrections that require compliance review — such as a legal name change — please contact our support team.
• Right to Erasure: You have the right to request the deletion of your personal data, subject to 6ixs's legal obligations to retain certain records for regulatory compliance purposes. Where a deletion request is received, we will erase all data that is not subject to a mandatory retention obligation.
• Right to Restrict Processing: In certain circumstances — for example, where you contest the accuracy of data we hold, or where you object to a particular processing activity — you have the right to request that we restrict our use of your data while the matter is investigated.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of 6ixs's legitimate interests, including profiling for responsible gaming monitoring purposes. We will consider your objection and cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — including receipt of promotional communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please submit a written request to [email protected] from the email address registered on your 6ixs account. We may request additional identity verification before processing a rights request in order to protect your account security.