six66s Privacy Policy

six66s operates as the data controller for all personal data collected through the Platform at https://six66s.app. As data controller, six66s determines the purposes and means by which your personal data is processed.

If you have any questions about this Policy or wish to exercise your data rights, you may contact our support team at [email protected]. All privacy-related enquiries will be acknowledged within 5 business days (Bangladesh Standard Time, UTC+6) and resolved within 30 days wherever practicable.

six66s collects personal data from you in the following circumstances: when you register an Account, when you make a deposit or withdrawal, when you contact support, and automatically as you interact with the Platform. The categories of data we collect include:

Category	Examples	When Collected
Identity Data	Full name, date of birth, gender, nationality	Registration & KYC verification
Contact Data	Email address, mobile phone number, residential address	Registration & account updates
Financial Data	bKash/Nagad/Rocket account reference, transaction amounts, deposit/withdrawal history	Payment processing
Verification Data	Government-issued ID scans, proof of address documents, selfies for liveness checks	KYC & AML compliance
Technical Data	IP address, device type, browser, operating system, session timestamps	Automatically on Platform access
Usage Data	Games played, bets placed, wagering patterns, page views, session duration	Automatically during Platform use
Communications Data	Support chat logs, email correspondence, feedback submissions	When you contact six66s

six66s does not knowingly collect personal data from individuals under 21 years of age. If we become aware that data has been collected from an underage user, we will delete that data promptly and close the associated Account.

We use the personal data we collect for the following purposes, each supported by an appropriate legal basis:

• Account creation and management: To register your Account, verify your identity, and provide ongoing access to the Platform. Legal basis: performance of a contract.
• Payment processing: To facilitate deposits and withdrawals via your chosen payment method, and to maintain accurate financial records. Legal basis: performance of a contract.
• Identity and age verification (KYC): To comply with anti-money laundering (AML) obligations and to confirm that all players are aged 21 or older. Legal basis: legal obligation.
• Fraud prevention and security: To detect and prevent fraudulent activity, unauthorised access, and other security threats. Legal basis: legitimate interests.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling and to administer self-exclusion, deposit limit, and cooling-off requests. Legal basis: legal obligation and legitimate interests.
• Customer support: To respond to your enquiries, complaints, and feedback. Legal basis: performance of a contract and legitimate interests.
• Platform improvement: To analyse usage patterns, identify bugs, and improve the performance and content of the Platform. Legal basis: legitimate interests.
• Marketing communications: To send you relevant promotional offers and updates, where you have opted in to receive such communications. Legal basis: consent. You may withdraw consent at any time by contacting [email protected].
• Legal and regulatory compliance: To meet our obligations under applicable law, respond to lawful requests from authorities, and maintain records as required by regulations. Legal basis: legal obligation.

We do not use your personal data for fully automated decision-making that produces significant legal effects without human oversight. Where automated tools are used (for example, to flag potentially unusual account activity), a member of our compliance team reviews the output before any action is taken on your Account.

six66s shares personal data only in the limited circumstances described below. We do not sell your data to any third party.

• Payment service providers: Data necessary to complete your requested transaction is shared with bKash, Nagad, Rocket, Upay, Visa, Mastercard, or other relevant payment processors. These providers are contractually obligated to handle your data securely and only for the purpose of processing the payment.
• Identity verification providers: When KYC checks are required, your identity documents and related data may be shared with specialist third-party verification services. These providers operate under strict data processing agreements.
• Technology and hosting providers: Our Platform infrastructure relies on hosting, analytics, and security partners who may process technical and usage data on our behalf. All such partners are bound by data processing agreements that restrict their use of your data to the purposes we specify.
• Regulatory and law enforcement authorities: Where required by applicable law or by a valid legal order, six66s will disclose personal data to competent authorities. We will not disclose data beyond what is strictly required by the legal obligation.
• Business transfers: If six66s undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and the applicable privacy arrangements will be maintained.

In all cases where data is shared with third parties, six66s ensures that appropriate contractual, technical, and organisational safeguards are in place to protect your information.

The six66s Platform uses cookies and similar tracking technologies to operate core site functionality, remember your preferences, and analyse how the Platform is used. The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in during your visit. They cannot be disabled without impacting core functionality.
• Functional cookies: Store your preferences such as language settings and responsible gaming limits so they are applied consistently across your sessions.
• Analytics cookies: Collect aggregated, anonymised data about how visitors interact with the Platform — pages visited, time spent, errors encountered. This data helps us improve Platform performance. No individual player is identified in analytics reports.
• Security cookies: Used to detect fraudulent activity, prevent automated abuse, and protect the integrity of the login process.

You can manage cookie preferences through your browser settings. Disabling certain categories of cookies may affect the availability or performance of some Platform features. Strictly necessary cookies cannot be refused without degrading your experience, as they are integral to the Platform's operation.

We do not use cookies to serve third-party advertising or to track your activity across other websites.

six66s retains personal data for as long as it is required to fulfil the purposes described in this Policy, or as mandated by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your Account and for a minimum period of 5 years after Account closure, to satisfy AML record-keeping requirements.
• Financial transaction data: Retained for a minimum of 5 years from the date of the transaction, in accordance with financial record-keeping obligations.
• KYC verification documents: Retained for the duration of your Account and for 5 years post-closure, or longer where required by applicable AML regulations.
• Technical and usage data: Typically retained for up to 24 months, after which it is aggregated and anonymised or deleted.
• Customer support communications: Retained for up to 3 years from the date of the communication, unless the matter relates to an ongoing dispute or legal proceeding, in which case data is retained until resolution.
• Marketing consent records: Retained for as long as you remain opted in, and for 2 years after you withdraw consent, as evidence of the consent and withdrawal.

When a retention period expires, personal data is securely deleted from our systems or rendered permanently anonymous so that it can no longer be attributed to any individual.

Subject to applicable law, you have the following rights in relation to the personal data six66s holds about you:

• Right of access: You may request a copy of all personal data we hold about you, together with information about how it is processed.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. You may update many details directly within your Account dashboard.
• Right to erasure: In certain circumstances, you may request that we delete your personal data. This right is subject to limitations where retention is required by law (for example, AML record-keeping obligations).
• Right to restrict processing: You may request that we temporarily restrict the processing of your personal data while a dispute about its accuracy or our use of it is resolved.
• Right to data portability: Where processing is based on your consent or on a contractual relationship, you may request a copy of your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to processing based on our legitimate interests where you believe your fundamental rights and freedoms override those interests.

To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days. We may request proof of your identity before processing the request to protect against unauthorised access to your data.

six66s implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption at rest for sensitive stored data, including identity documents and financial records.
• Role-based access controls, so that only staff members with a legitimate need can access personal data.
• Regular security assessments and penetration testing of the Platform infrastructure.
• Secure deletion protocols applied when data reaches the end of its retention period.
• Staff training on data protection obligations and secure data-handling practices.

Despite these measures, no internet transmission or electronic storage system is completely secure. In the event of a data breach that poses a risk to your rights and freedoms, six66s will notify you without undue delay and will take immediate steps to contain and remediate the breach.

You also play an important role in keeping your data secure. Please ensure your Account password is strong and unique, and do not share your login credentials with anyone. If you suspect your Account has been compromised, contact [email protected] immediately.

The six66s Platform is strictly for adults aged 21 years or older. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. All registrations require a declaration of age, and identity verification checks are used to confirm that this threshold is met.

If you are a parent or guardian and believe that a minor has provided personal data to six66s or created an Account, please contact us immediately at [email protected]. We will investigate the matter promptly, close any underage Account, and delete all associated personal data.

The six66s Platform primarily processes and stores personal data within server infrastructure servicing the Bangladesh region. However, some of our third-party service providers (such as identity verification or analytics providers) may process data in other jurisdictions.

Where personal data is transferred to a third country, six66s ensures that appropriate safeguards are in place — such as standard contractual clauses or equivalent mechanisms — to provide a level of protection for your data that is consistent with the principles set out in this Policy.

six66s reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players by email or by displaying a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this page reflects the most recent revision.

We encourage you to review this Policy periodically to stay informed about how we are protecting your information. Continued use of the Platform after any amendment has been posted constitutes your acceptance of the updated Policy. If you do not agree with the revised terms, please discontinue use of the Platform and contact us to close your Account.

If you have any questions, concerns, or complaints about this Privacy Policy or about how six66s processes your personal data, please contact us using the details below:

• Email: [email protected]
• Subject line: "Privacy Enquiry" or "Data Rights Request"
• Response time: Within 5 business days for initial acknowledgement; full response within 30 days (Bangladesh Standard Time, UTC+6)

We take all privacy complaints seriously and will work with you to reach a fair resolution. If you are dissatisfied with our response, you may have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.