six6ss Privacy Policy
Your privacy matters to us. This policy explains exactly what personal data six6ss collects, why we collect it, how it is used, and the rights you hold over your information.
Our Privacy Principles
Six commitments that shape how six6ss handles your data
1. Personal Data We Collect
The categories of information gathered when you use six6ss
When you create a six6ss account, we collect the information you provide directly to us. This includes, but is not limited to:
- Full legal name as it appears on your national identity document.
- Date of birth — used to verify that you meet the 21+ age requirement.
- Residential address in Bangladesh (city, district, postal code).
- Mobile number linked to your nominated bKash, Nagad, Rocket, or Upay wallet.
- Email address (if provided) used for account communications and marketing preferences.
- Username and hashed password — passwords are never stored in plain text.
- Identity documents — copies of your NID, passport, or other government-issued documents submitted during Know Your Customer (KYC) verification.
Providing accurate registration information is a condition of your account. Submitting false or misleading data constitutes a breach of our Terms & Conditions and may result in account suspension.
To process deposits, withdrawals, and to comply with anti-money laundering (AML) obligations, six6ss collects and retains the following financial data:
- Payment method type and associated identifier (e.g., the last four digits of a bKash or Nagad wallet number).
- Transaction amounts, timestamps, and reference numbers for all deposits and withdrawals.
- Bonus redemption records, wagering history, and win/loss summaries.
- Source-of-funds declarations where requested under AML compliance procedures.
Full payment credentials (e.g., complete wallet PINs or full bank account numbers) are never stored on six6ss servers. Financial transactions are processed via secure, PCI-compliant payment gateways operated by our payment partners.
When you access six6ss.org, our servers and analytics tools automatically collect certain technical information about your device and browsing behaviour. This data helps us maintain platform stability, detect fraud, and improve user experience:
- IP address — used for geolocation, fraud detection, and session management.
- Device type, operating system, and browser version — used for compatibility and performance optimisation.
- Session data — pages visited, time on site, click paths, game sessions opened, and features interacted with.
- Cookies and similar technologies — see Section 6 for a full explanation of our cookie use.
- Log data — error logs, access logs, and server-side event logs retained for security and debugging purposes.
Technical and usage data is collected automatically and does not require your active input. It is used solely for the purposes described in this Privacy Policy.
2. How We Use Your Personal Data
The lawful purposes for which six6ss processes your information
six6ss processes your personal data for the following primary purposes, each grounded in a legitimate legal basis:
- Account creation and management: To register your account, authenticate your identity, and maintain your player profile throughout your relationship with six6ss.
- Service delivery: To enable you to browse, play, deposit funds, place bets, and withdraw winnings on the six6ss platform.
- Payment processing: To facilitate secure financial transactions via bKash, Nagad, Rocket, Upay, and partner banks, and to maintain accurate transaction records.
- Identity verification (KYC): To verify your age (21+), identity, and residential address in compliance with responsible gaming and AML obligations.
- Fraud prevention and security: To detect and prevent fraudulent activity, unauthorised account access, bonus abuse, money laundering, and other prohibited conduct.
- Customer support: To respond to your queries, complaints, and requests submitted via live chat or email, and to maintain a record of those interactions for quality assurance.
- Legal and regulatory compliance: To meet our obligations under applicable laws, including anti-money laundering regulations, responsible gaming requirements, and any lawful requests from competent authorities.
- Service improvement: To analyse aggregated usage patterns, fix bugs, test new features, and optimise the platform experience for players across Dhaka, Chittagong, Sylhet, Khulna, and elsewhere in Bangladesh.
- Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. You may opt out at any time by contacting [email protected].
We do not use automated decision-making or profiling in a way that produces legal or similarly significant effects on you without your knowledge and consent.
3. Sharing Your Personal Data
Who may receive your data, and under what circumstances
six6ss does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We may share your data with the following categories of recipients strictly for the purposes described in this Privacy Policy:
- Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other nominated payment partners receive the minimum data required to process your deposit or withdrawal transactions. These partners operate under their own privacy policies and are independently regulated.
- Game technology providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may process technical session data to deliver their game content within the six6ss platform. They act as data processors under contractual agreements with six6ss.
- Identity verification services: Third-party KYC providers may process copies of your identity documents to complete age and identity verification on our behalf. These providers are bound by strict confidentiality obligations.
- Analytics and platform tools: Aggregated, anonymised usage data may be shared with analytics service providers to help us understand platform performance. No personally identifiable information is included in these aggregated data sets.
- Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, financial intelligence units, or other competent regulatory bodies where we are legally required to do so, or where we reasonably believe disclosure is necessary to prevent crime, protect the safety of users, or enforce our Terms & Conditions.
In all cases of third-party data sharing, six6ss requires that recipient parties maintain appropriate security standards and process your data only for the specified, limited purposes for which it was shared.
4. Data Retention
How long six6ss keeps your personal information
six6ss retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to comply with our legal and regulatory obligations. The following general retention periods apply:
- Active account data: Retained for the full duration of your registered account with six6ss, plus a post-closure period of up to five (5) years to satisfy AML record-keeping obligations.
- Transaction records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, in line with standard financial compliance requirements.
- KYC and identity documents: Copies of identity documents submitted during verification are retained for up to five (5) years following account closure or the last transaction, whichever is later.
- Support and communications records: Records of customer support interactions are retained for up to three (3) years after the interaction closes.
- Technical and usage logs: Server and access logs are retained for up to twelve (12) months for security and debugging purposes, after which they are automatically purged.
- Marketing preferences: Records of your marketing opt-in or opt-out choices are retained for as long as your account remains active, and for one (1) year following account closure.
When personal data is no longer required, it is securely deleted or anonymised in accordance with our data destruction procedures. Anonymised aggregate data (from which no individual can be identified) may be retained indefinitely for analytical purposes.
5. Your Data Rights
The rights you hold over your personal information at six6ss
As a data subject, you have the following rights with respect to the personal data that six6ss holds about you. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a verified request.
- Right of Access: You may request a copy of all personal data six6ss holds about you, along with information about how it is being processed.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
- Right to Erasure: In certain circumstances, you may request the deletion of your personal data. Note that we may be required to retain certain data to comply with our legal obligations, even following an erasure request.
- Right to Restriction: You may ask us to temporarily halt processing of your data while a correction or objection request is under review.
- Right to Data Portability: Where technically feasible, you may request that we provide your personal data in a structured, machine-readable format.
- Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. Opt-out requests for marketing emails are actioned within 5 business days.
6. Cookies and Tracking Technologies
How six6ss uses cookies to improve your experience
six6ss uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to enable core platform functionality and to improve your experience. Cookies are small text files stored on your device by your browser when you visit six6ss.org.
- Essential cookies: Required for the platform to function correctly. These include session authentication tokens, shopping cart equivalents (active game sessions), and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core site functionality.
- Functional cookies: Remember your preferences such as language setting (English) and display options. These improve usability but are not strictly essential.
- Analytics cookies: Collect anonymised data about how users navigate the platform — pages viewed, session duration, and device type. This data is aggregated and cannot be used to identify you individually. You may opt out of analytics cookies by contacting support.
- Marketing cookies: Used to track which promotional content you have been shown, to avoid showing you the same promotion repeatedly, and to measure the effectiveness of our campaigns. These are only set where you have consented to receiving marketing communications.
Most browsers allow you to manage, disable, or delete cookies through their settings menus. Please be aware that disabling essential cookies will impair your ability to log in and use key features of the six6ss platform.
7. Data Security Measures
How six6ss protects your personal information from unauthorised access
six6ss employs a range of technical and organisational measures designed to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, and destruction. These measures include:
- SSL/TLS encryption: All data transmitted between your browser or mobile device and our servers is encrypted using Transport Layer Security (TLS 1.2 or above). The presence of HTTPS in your browser's address bar confirms this encryption is active.
- Password hashing: User passwords are stored as salted cryptographic hashes. Under no circumstances are plain-text passwords ever stored or transmitted.
- Access controls: Access to personal data within six6ss's internal systems is restricted on a strict need-to-know basis. Staff handling player data receive regular data protection training.
- Fraud monitoring: Automated fraud detection systems continuously monitor account activity for anomalous behaviour, including unusual login locations, unusual transaction patterns, and signs of account takeover.
- Penetration testing: Our platform undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited.
Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights, six6ss will notify affected players promptly and take all necessary steps to contain and remediate the breach.
8. Changes to This Privacy Policy
How we communicate updates to our data practices
six6ss reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. When material changes are made, we will provide prominent notice on the six6ss platform and, where feasible, notify registered players via their registered mobile number or email address before the changes take effect.
The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed of how we are protecting your information. Your continued use of the six6ss platform after any revision constitutes your acceptance of the updated Privacy Policy.
If you have questions or concerns about any aspect of this Privacy Policy, or wish to exercise any of your data rights, please contact our team. We are available around the clock to assist players across Bangladesh, including those in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.
Your Data is Safe with six6ss
We are committed to keeping your information secure. Explore our platform with confidence — check out our games, review our FAQ, or visit your account.
Read the FAQ Explore six6ss Casino Terms & Conditions