six6s 365 Privacy Policy

01 Information We Collect

six6s 365 collects personal information from you in order to operate the platform, provide you with a safe and personalised gaming experience, comply with applicable legal obligations, and protect the integrity of our services. The categories of information we collect are described below.

1.1 Information You Provide Directly

When you register an account, make a deposit, request a withdrawal, contact customer support, or interact with any feature on the six6s 365 platform, you may provide us with the following types of personal information:

• Identity Data: Your full name, date of birth, gender, and national identity (NID) number or passport number as submitted during KYC verification.
• Contact Data: Your email address, mobile phone number, and residential address (including district, city, and division within Bangladesh).
• Account Credentials: Your chosen username and encrypted password. We do not store your password in plain text — it is hashed using industry-standard cryptographic methods.
• Financial Data: Your bKash wallet number, Nagad account number, Rocket account number, bank account details, or card details (where applicable) as submitted during deposit or withdrawal transactions. Full payment credentials are processed securely by our payment partners and are not stored on six6s 365 servers.
• Verification Documents: Copies of identity documents (NID, passport, utility bills, bank statements) submitted as part of our Know Your Customer (KYC) process.
• Communications: The content of messages, emails, live chat transcripts, and any other communications you send to six6s 365 support.

1.2 Information Collected Automatically

When you visit or use the six6s 365 platform, certain technical and behavioural data is automatically collected by our systems:

• Device & Technical Data: Your IP address, browser type and version, operating system, device model, screen resolution, and device language settings.
• Usage Data: Pages and sections of the platform you visit, the games you play, bet amounts and outcomes, session start and end times, features you interact with, and navigation paths through the site.
• Location Data: Approximate geographic location derived from your IP address. We do not collect precise GPS location data unless you explicitly grant that permission on a mobile device.
• Cookie & Tracking Data: Data collected via cookies, web beacons, pixel tags, and similar tracking technologies. See the Cookies & Tracking section below for full details.

1.3 Information from Third Parties

In certain circumstances, six6s 365 may receive personal data about you from third-party sources, including:

• Payment Providers: Transaction confirmation data from bKash, Nagad, Rocket, Upay, and our bank and card processing partners.
• Identity Verification Services: Results of identity and age verification checks conducted by our third-party KYC partners.
• Fraud Prevention Services: Risk scores, device fingerprint data, and flagged activity reports from fraud detection service providers.
• Analytics Providers: Aggregated and anonymised usage statistics from analytics platforms we use to understand platform performance.

02 How We Use Your Data

six6s 365 processes your personal data only for specific, legitimate purposes. The table below summarises the primary purposes for which we use your data and the legal basis for each processing activity:

2.1 Marketing Communications

six6s 365 will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, promotions, and new game releases if you have opted in to receive such communications. You may withdraw your consent at any time by updating your notification preferences in your account settings or by contacting support at [email protected]. Opting out of marketing communications will not affect your ability to use the platform or receive service-related notifications.

2.2 Automated Decision-Making

six6s 365 uses automated processes to screen transactions for fraud, verify age eligibility, and assess responsible gaming risk indicators. Where an automated decision has a significant impact on your account (for example, a deposit being flagged or an account being temporarily restricted), you have the right to request a manual review by a member of our compliance team. Contact [email protected] to exercise this right.

03 Data Sharing & Disclosure

six6s 365 does not sell your personal data to third parties. We do not share your information with advertisers, data brokers, or unrelated businesses. We only share your data with carefully selected third-party service providers and in the circumstances described below.

3.1 Service Providers

We share personal data with trusted third-party companies that help us operate the platform. These include:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and our banking partners, to process deposits and withdrawals.
• KYC & Identity Verification Partners: Third-party services that verify your identity documents, age, and address to comply with our obligations.
• Fraud Detection & Security Services: Providers that monitor transactions and platform access for suspicious activity.
• Game Studios & Content Providers: Game providers such as Pragmatic Play, Evolution Gaming, Spribe, and others may receive limited technical data (such as player session identifiers) necessary to deliver their games. They do not receive your full personal profile.
• Customer Support Platforms: Tools that power our live chat and email support systems.
• Analytics Providers: Services that help us understand how players use the platform in aggregate and improve the user experience.
• Cloud & Hosting Infrastructure: Providers that host our servers and databases under strict data processing agreements.

All third-party service providers are contractually bound to process your data only on our instructions, to maintain appropriate security standards, and not to use your data for their own purposes.

3.2 Legal & Regulatory Disclosure

six6s 365 may disclose your personal data to law enforcement agencies, regulatory authorities, courts, or other government bodies if we are legally required to do so, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of six6s 365, our players, or the public.

3.3 Business Transfers

In the event that six6s 365 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you via the email address registered to your account in advance of any such transfer and explain your options.

04 Cookies & Tracking Technologies

six6s 365 uses cookies and similar tracking technologies to ensure the platform functions correctly, to enhance your experience, and to help us understand how players use our services. This section explains the types of cookies we use and how you can manage them.

4.1 What Are Cookies?

Cookies are small text files placed on your device (computer, tablet, or mobile phone) by a website when you visit it. They allow the website to remember information about your visit — such as your login session, language preferences, and settings — so you do not have to re-enter them every time you return.

4.2 Types of Cookies We Use

4.3 Managing Your Cookie Preferences

Strictly necessary cookies are essential to the operation of the six6s 365 platform and cannot be disabled while you are using the service. All other cookie categories can be managed via your browser settings. Most modern browsers allow you to refuse, delete, or restrict cookies. Please note that disabling functional or analytics cookies may affect your experience on the platform. Disabling marketing cookies will not reduce the number of promotions offered to you — it will simply make them less personalised.

For guidance on managing cookies in your specific browser, please visit the help documentation provided by your browser provider (Chrome, Firefox, Safari, Edge, Samsung Internet, etc.).

05 Data Retention

six6s 365 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. The following retention periods apply:

• Active Account Data: Retained throughout the lifetime of your active account and for a minimum of 5 years after account closure to satisfy anti-money laundering (AML) record-keeping obligations.
• Transaction Records: All deposit and withdrawal records are retained for a minimum of 5 years from the date of the transaction, in compliance with financial record-keeping requirements.
• Identity Verification Documents (KYC): Retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later.
• Customer Support Communications: Email and live chat records are retained for up to 3 years from the date of the last communication in a thread.
• Marketing Consent Records: Records of your consent (or withdrawal of consent) to receive marketing communications are retained for 3 years from the relevant consent event.
• Self-Exclusion Records: Records relating to self-exclusion requests are retained for a minimum of 7 years to prevent circumvention of responsible gaming protections.
• Anonymised Analytics Data: Aggregated, anonymised usage statistics that cannot be linked back to an individual are retained indefinitely for platform improvement purposes.

When the applicable retention period expires, six6s 365 will securely delete or anonymise your personal data in accordance with our internal data destruction procedures. Where deletion is not immediately possible due to technical constraints (for example, data held in backup archives), the data will be isolated from active processing until it can be securely deleted.

06 Your Privacy Rights

As a user of the six6s 365 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request" and a description of the right you wish to exercise. We will respond within 30 days.

• Right of Access: You have the right to request a copy of the personal data we hold about you. This is sometimes called a Subject Access Request (SAR). We will provide a structured summary of your data free of charge within 30 days of receiving your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update basic account details (such as contact email or phone number) directly in your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Note that this right is subject to our legal retention obligations — we cannot delete data we are legally required to keep.
• Right to Restriction of Processing: You may request that we temporarily pause the processing of your personal data in certain circumstances, such as while you contest the accuracy of the data or while a complaint is being investigated.
• Right to Data Portability: Where processing is based on your consent or on contract performance and carried out by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format (such as CSV or JSON).
• Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis, including in the context of direct marketing. Where you object to direct marketing, we will stop processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications or optional analytics cookies), you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.
• Right Not to Be Subject to Solely Automated Decisions: Where a significant decision affecting you is made solely by automated means, you have the right to request human review of that decision.

07 Data Security

six6s 365 implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes the following controls:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the six6s 365 platform is encrypted in transit using industry-standard 256-bit SSL/TLS protocols. You can verify this by checking for the padlock icon in your browser's address bar.
• Encrypted Data at Rest: Sensitive data stored in our databases — including identity documents, financial records, and user credentials — is encrypted at rest using AES-256 encryption.
• Password Hashing: User passwords are never stored in plain text. We use bcrypt or equivalent cryptographic hashing with salt to store password credentials securely.
• Access Controls: Access to personal data by six6s 365 staff is strictly limited by role-based access control (RBAC). Only personnel with a legitimate need to access specific data categories are authorised to do so.
• Two-Factor Authentication (2FA): We encourage all players to enable two-factor authentication on their accounts. 2FA adds an additional layer of security by requiring a one-time code in addition to your password at login.
• Regular Security Audits: Our platform and infrastructure undergo regular internal and third-party security assessments, including vulnerability scanning and penetration testing.
• Incident Response: six6s 365 maintains a documented data breach response procedure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay via the email address registered to your account.

While we take every reasonable precaution to protect your data, no internet-based service can guarantee absolute security. You also play an important role in keeping your account secure — please use a strong, unique password, never share your login credentials with anyone, and contact support immediately if you suspect unauthorised access to your account.

08 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the way six6s 365 handles your personal data, please contact us using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

Email: [email protected]
Response Time: We aim to acknowledge all privacy-related queries within 2 business days and provide a full response within 30 calendar days.
Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, BST UTC+6).
Postal Address: For written privacy requests, please include your full name, registered email address, and a clear description of your request to help us locate your records efficiently.

six6s 365 has designated a Data Protection Officer (DPO) who is responsible for overseeing our compliance with data protection obligations and for handling privacy rights requests. All privacy correspondence is routed to the DPO team via [email protected]. Please include "Attn: Data Protection Officer" in the subject line of your email if your query relates specifically to a privacy rights request or a data breach concern.