Your Privacy Matters to 6xix

When you create and use a 6xix account, we collect personal data in a number of ways. The categories of data we collect, and the circumstances in which we collect each category, are set out below.

Registration Data. When you open a 6xix account, you provide us with your full legal name, date of birth, residential address in Bangladesh, a valid mobile number, and an email address. This information forms the foundation of your player profile and is required to operate your account, verify your identity, and process financial transactions.

Identity Verification (KYC) Data. Before processing your first withdrawal, and in other circumstances where enhanced due diligence is required, we collect copies of government-issued identity documents. Acceptable documents include your National Identity Card (NID), a valid Bangladeshi passport, or a driver's licence issued by the Bangladesh Road Transport Authority (BRTA). These documents are used solely for identity verification and fraud prevention purposes.

Financial Transaction Data. We record all deposits, withdrawals, bonus credits, and wagering activity associated with your account. This includes the amounts, timestamps, payment methods used (e.g., bKash account numbers, Nagad wallet references, bank account details for Dutch-Bangla Bank, BRAC Bank, or City Bank transfers), and transaction outcomes. This data is essential for account management, dispute resolution, and compliance with anti-money-laundering (AML) regulations.

Usage and Behavioural Data. We automatically collect data about how you interact with the 6xix platform. This includes the pages you visit, the games you play, the duration of sessions, betting patterns, device type and operating system, browser type and version, IP address, and general geographic location derived from your IP address. This data helps us personalise your experience, improve platform performance, and identify unusual account activity that may indicate fraud or security threats.

Communications Data. When you contact 6xix support via live chat, email, or any other channel, we retain records of those communications, including the content of messages, timestamps, and the nature of the query. This data is used for quality assurance, dispute resolution, and to provide continuity of support across sessions.

6xix uses personal data collected from players for the following purposes. In each case, we rely on a defined legal basis for the processing activity, as described below.

Account Management and Service Delivery. The primary use of your registration and financial data is to operate your 6xix account — processing deposits, settling winning bets, applying bonuses, and facilitating withdrawals to your verified payment method. Without this processing, it is not possible to provide the services you have signed up for.

Identity Verification and Fraud Prevention. We use your KYC documents and account activity data to verify that you are who you say you are, that you meet the 18+ age requirement, and that your account is not being used for identity fraud, multi-accounting, or any other form of prohibited conduct. Fraud prevention monitoring is an ongoing activity throughout the life of your account, not a one-time check at registration.

Financial Crime Compliance (AML/CTF). As an online financial services platform operating in Bangladesh, 6xix takes its anti-money-laundering and counter-terrorism-financing obligations seriously. We monitor transaction patterns, flag unusual activity, and in some cases report suspicious transactions to the relevant authorities. This processing is a legal obligation and cannot be opted out of.

Platform Personalisation and Improvement. Usage and behavioural data is analysed to understand how players interact with 6xix, which games are most popular, where platform bottlenecks occur, and how the user experience can be improved. This analysis is conducted on an aggregated and pseudonymised basis wherever possible. Individual player data may be used to personalise game recommendations and promotional offers relevant to your demonstrated preferences.

Responsible Gaming Monitoring. 6xix takes player wellbeing seriously. We use account data — including deposit frequency, session duration, bet sizes, and self-exclusion history — to identify players who may be showing signs of problem gambling. Where our monitoring systems flag a concern, a trained member of the 6xix responsible gaming team may reach out to the player directly.

Marketing Communications. If you have opted in to receive promotional communications from 6xix, we will use your email address and mobile number to send you details of bonuses, seasonal promotions, and new game releases relevant to players in Bangladesh. You may withdraw your consent to marketing communications at any time by contacting support or updating your account communication preferences. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal.

6xix does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary to fulfil the specific purpose.

Payment Processing Partners. To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank, we share the minimum necessary transaction data with our payment processing partners. These partners operate their own privacy and security frameworks and are contractually required to handle your data in a manner consistent with this Policy.

Game Technology Providers. The games available on 6xix are powered by third-party game studios and platform providers, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive session data and bet history to the extent required to operate the games and validate outcomes. They do not receive your full identity profile or payment details.

Legal and Regulatory Authorities. 6xix will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where we are legally required to do so. This includes situations where we have identified or suspect financial crime, fraud, or other illegal activity involving a player account. Such disclosures are made without prior notice to the relevant player where required by law.

Business Operations and Professional Advisers. We may share personal data with our legal counsel, auditors, and IT service providers where necessary to operate the business. All such parties are bound by confidentiality obligations and are not permitted to use your data for any purpose other than the specific service they are providing to 6xix.

Business Transfers. In the event that 6xix undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the email address on your account, and you will have the opportunity to close your account before the transfer takes effect if you do not wish your data to be transferred.

Cookies are small text files stored on your device by your browser when you visit the 6xix platform. They allow the platform to remember information about your visit, making subsequent visits faster and more functional. 6xix uses cookies strictly for operational and security purposes — we do not use cookies for cross-site advertising or behavioural profiling.

The following categories of cookies are used on the 6xix platform:

• Strictly Necessary Cookies: These cookies are essential for the 6xix platform to function. They manage your login session, maintain your authentication state across page loads, and prevent cross-site request forgery (CSRF) attacks. You cannot opt out of strictly necessary cookies without also opting out of using the platform entirely.
• Performance and Analytics Cookies: These cookies collect anonymised data about how players navigate the 6xix platform — which pages are visited most frequently, how long players spend in specific game lobbies, and where technical errors occur. This data is used exclusively to improve platform performance and is not linked to your personal identity.
• Functional Cookies: These cookies remember your platform preferences, such as your preferred game lobby layout, notification settings, and language preferences. They are not strictly necessary but significantly improve the quality of your experience on the platform.
• Security Cookies: 6xix uses security cookies to detect and respond to fraudulent account access attempts, unusual login patterns, and other security threats. These cookies record device fingerprint data (such as browser type, screen resolution, and installed fonts) to identify whether a login attempt originates from a recognised device.

You can manage or delete cookies at any time through your browser settings. Most modern browsers allow you to block all third-party cookies, clear existing cookies on a schedule, or receive a notification before a cookie is stored. Please note that disabling functional or performance cookies may affect the quality of your 6xix experience, and disabling security cookies may increase the risk of unauthorised access to your account.

6xix applies a multi-layered approach to data security. Our technical and organisational security measures include, but are not limited to, the following:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the 6xix platform is encrypted using TLS 1.2 or higher. This protects your login credentials, payment details, and personal information from interception in transit.
• Encrypted Data Storage: Sensitive data fields — including identity document copies, payment references, and account credentials — are stored in encrypted form at rest. Encryption keys are held separately from the encrypted data and are rotated on a regular schedule.
• Access Controls: Access to personal data within 6xix's internal systems is governed by a strict role-based access control (RBAC) framework. Staff members can only access the data categories relevant to their specific role. All internal data access is logged and subject to periodic audit review.
• Two-Factor Authentication for Internal Systems: Staff accessing internal systems containing player data are required to use two-factor authentication (2FA) at every login. This significantly reduces the risk of internal account compromise.
• Regular Security Assessments: 6xix conducts periodic security assessments of its platform infrastructure, including vulnerability scanning and penetration testing. Identified vulnerabilities are triaged and remediated according to their severity rating.

Data Retention Periods. 6xix retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or for the period required by applicable law, whichever is longer. Our standard retention schedule is as follows:

• Active account data is retained for the full duration of the account relationship.
• Following account closure, core account data (including identity verification records and financial transaction history) is retained for a minimum of five (5) years to comply with AML and financial record-keeping obligations.
• Support communications and live chat logs are retained for a period of three (3) years following the closure of the relevant support case.
• Cookie and session data is retained for the duration of the browser session for strictly necessary cookies, and for up to twelve (12) months for performance and functional cookies.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction. If you request deletion of your data before the end of the retention period, and there is no outstanding legal obligation requiring us to retain it, we will action the deletion request within 30 days of receipt.

As a 6xix player, you have meaningful rights over the personal data we hold about you. These rights can be exercised at any time by contacting our support team at [email protected]. We will acknowledge your request within 24 hours and aim to complete all data requests within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data that 6xix holds about you. We will provide this in a structured, commonly used, machine-readable format (CSV or JSON) where technically feasible.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Some data corrections (such as changes to your registered name) may require you to submit supporting identity documentation.
• Right to Erasure: Subject to our legal retention obligations (described in Section 5), you have the right to request that 6xix delete your personal data. Where a legal obligation requires us to retain certain data for a defined period, we will inform you of the applicable retention period and delete the data as soon as that period has elapsed.
• Right to Restrict Processing: You may request that 6xix restricts its processing of your personal data to storage only, pending the resolution of a dispute about the accuracy of the data or the lawfulness of the processing activity.
• Right to Object to Marketing: You have an unconditional right to object to the use of your personal data for direct marketing purposes. On receipt of an objection, 6xix will cease all marketing communications to you within 2 business days.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a portable format and to transmit that data to another service provider of your choice.

Please note that exercising certain rights may affect your ability to use specific features of the 6xix platform. For example, requesting deletion of your account data will require closure of your account. Similarly, restricting certain processing activities may prevent us from fulfilling our legal compliance obligations, which could result in account suspension pending resolution.

The 6xix platform integrates with a number of third-party technology providers to deliver its full range of gaming and payment services. While these integrations are necessary for the operation of the platform, it is important that players understand the boundaries of 6xix's responsibility with respect to third-party data practices.

Game content on 6xix is delivered by licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game from one of these providers, your session data is transmitted to the relevant provider's servers to render the game and record bet outcomes. Each of these providers operates under its own privacy policy and data protection framework. 6xix selects game providers that meet a minimum standard of data security, but we are not responsible for the independent data processing activities of third-party game studios beyond what is contractually agreed in our provider agreements.

Payment services on 6xix are facilitated through local payment gateway partners and the mobile financial service operators bKash, Nagad, Rocket, and Upay. When you initiate a deposit or withdrawal, you are interacting with these providers' own platforms as part of the transaction flow. The data you submit directly to bKash, Nagad, or your bank is governed by those providers' own terms and privacy policies, which are independent of this Policy.

From time to time, 6xix may reference external organisations in informational content — such as references to the ICC for cricket results, the BCB for BPL outcomes, or responsible gaming support organisations. These references do not constitute endorsements, and 6xix is not responsible for the content or data practices of any external organisation.

6xix reviews this Privacy Policy on a regular basis and may update it from time to time to reflect changes in our data processing activities, changes in applicable law, or improvements to our platform. The "Last Updated" date at the top of this page indicates when the current version of the Policy was published.

When we make material changes to this Policy — changes that significantly affect how we collect, use, or share your personal data — we will notify all registered players by email to the address held on their account. The notification will summarise the key changes and provide a link to the updated Policy. We will also display a prominent notice on the 6xix platform for a period of at least 14 days following the publication of any material revision.

Your continued use of the 6xix platform following notification of a material policy change constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you may close your account by contacting support at [email protected] before the effective date of the revision. Accounts closed for this reason will be processed in accordance with the standard account closure procedure described in our Terms & Conditions.

Minor changes — such as corrections of typographical errors, clarifications that do not change the substance of the Policy, or updates to contact details — may be made without direct notification to players. All changes, whether material or minor, will be reflected in the updated version published on this page with a revised "Last Updated" date and version number.

If you have any questions or concerns about this Privacy Policy, or about how 6xix handles your personal data, please contact our support team at [email protected]. We are committed to addressing all data-related enquiries promptly and transparently, and we aim to respond to all privacy queries within one business day.