6u666 Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how 6u666 ("we", "us", "our", "the Platform") collects, uses, stores, and shares personal information relating to registered Account Holders and visitors to the 6u666 website at 6u666.io. This Policy applies to all users of the platform, including those accessing 6u666 from Bangladesh via desktop browsers and mobile devices.

This Policy should be read alongside the 6u666 Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference. Where any conflict exists between this Policy and a more specific data handling notice provided at the point of data collection, the specific notice will take precedence to the extent of that conflict.

We are committed to handling your personal data with integrity and transparency. If you have questions about how 6u666 handles your information at any time, please contact us using the details in Section 15 of this Policy. We are happy to explain our practices in plain language — this document is intended to be clear and accessible, not just a legal formality.

Data Controller

For the purposes of this Privacy Policy, 6u666 is the data controller in respect of personal data processed in connection with the operation of the 6u666 online casino and sports betting platform. As the data controller, 6u666 determines the purposes and means by which personal data is processed.

If you have any queries about data controllership, or if you wish to understand how responsibility is allocated between 6u666 and its third-party service providers (such as game studios and payment processors), please contact us at the address listed in Section 15. We will respond to data controller queries within five (5) business days measured in Bangladesh Standard Time (BST, UTC+6).

Data We Collect

6u666 collects the following categories of personal data. Not all categories apply to every user — the data collected depends on how you interact with the platform:

How We Collect Your Data

6u666 collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a promotional offer.
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and analytics tools when you visit and interact with the 6u666 platform. See Section 8 for full details on cookies and tracking technologies.
• Third-party sources: Identity verification data from KYC providers; payment confirmation data from bKash, Nagad, Rocket, Upay, and banking partners; fraud screening results from anti-fraud service providers. Data from third-party sources is used exclusively to validate information you have already provided directly to 6u666.
• Game and betting activity: Bet history, game session data, cricket betting selections, slot game activity, and live casino participation data generated through normal use of the 6u666 platform.

How We Use Your Data

6u666 uses personal data collected from Account Holders for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed below:

• Account management: Creating and maintaining your 6u666 account, verifying your identity, processing your login credentials, and managing your account settings and preferences.
• Service delivery: Processing deposits and withdrawals in BDT, settling bets, distributing winnings, crediting bonuses, and delivering customer support.
• KYC and compliance: Verifying your age (21+ requirement), confirming your identity, and meeting anti-money-laundering (AML) obligations including transaction monitoring and suspicious activity reporting.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and applying responsible gaming tools such as deposit limits or account restrictions at your request or where required by our responsible gaming policy.
• Fraud prevention and security: Detecting and preventing fraudulent activity, bonus abuse, duplicate accounts, collusion, and other prohibited conduct as defined in the Terms & Conditions.
• Platform improvement: Analysing aggregated and anonymised usage data to improve the platform, personalise your experience, and develop new features and game offerings.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates via email or SMS, but only where you have provided consent to receive such communications. See Section 13 for opt-out details.
• Legal obligations: Retaining records as required by applicable law and responding to lawful requests from regulatory or law enforcement authorities.

Legal Basis for Processing

Each processing activity carried out by 6u666 rests on one of the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to when registering — including operating your account, processing transactions, and settling bets.
• Legal obligation: Processing required to comply with AML regulations, age verification requirements, and other applicable legal obligations — including KYC document retention.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where these interests do not override your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, carried out only where you have given freely-given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Third Parties

6u666 does not sell your personal data to third parties under any circumstances. We share personal data with the following categories of third-party recipients only to the extent strictly necessary for the stated purpose, and always under contractual data protection obligations:

• Payment processors: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, City Bank, BRAC Bank, Dutch-Bangla Bank, Visa, and Mastercard — for the sole purpose of processing your deposit and withdrawal transactions in BDT.
• KYC and identity verification providers: Third-party services used to verify the authenticity of identity documents submitted during the verification process. These providers process identity data on our behalf under strict confidentiality obligations.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session identifiers and wallet balance data necessary to load and operate their games within the 6u666 platform. These providers do not receive your full identity data.
• Anti-fraud and security providers: Services that help us detect bot activity, duplicate accounts, and fraudulent transactions. These providers process technical and usage data only.
• Analytics providers: We may use anonymised and aggregated analytics data to understand platform usage. No personally identifiable information is shared with analytics providers.
• Legal and regulatory authorities: We may disclose personal data to law enforcement or regulatory bodies when required by a lawful order, warrant, or mandatory legal process. We will notify you of such disclosures where permitted by law.

Cookies & Tracking Technologies

The 6u666 platform uses cookies and similar tracking technologies to operate core platform functions, improve user experience, and support security measures. The categories of cookies used are as follows:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cookies cannot be disabled without breaking the platform.
• Functional cookies: Remember your preferences such as language settings, bet slip configuration, and responsible gaming limit settings across sessions. Disabling these cookies may reduce platform functionality.
• Analytics cookies: Used to collect anonymised data about how visitors interact with the platform — including pages visited, session duration, and navigation paths. This helps us identify and resolve usability issues.
• Security cookies: Help detect and prevent fraudulent activity, bot traffic, and account takeover attempts by analysing browser fingerprint and behavioural signals.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from using the 6u666 platform. Disabling analytics or functional cookies will not prevent access but may affect your experience. Most modern browsers allow you to view, block, and delete cookies through the browser's privacy or security settings menu.

Your Data Rights

As a 6u666 Account Holder, you have the following rights in respect of your personal data. You may exercise any of these rights at any time by contacting us at the address in Section 15:

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days. Complex requests may be extended by a further 30 days with notice. Requests are processed free of charge unless manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

Data Retention

6u666 retains personal data for the periods set out below. Once a retention period expires, data is securely deleted or permanently anonymised so that it can no longer be associated with any individual.

• Active account data: Retained for the full duration of the account relationship — from registration until account closure.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, in line with standard financial record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure or the last transaction, whichever is later.
• Customer support communications: Retained for two (2) years from the date of the communication, or longer if the communication is relevant to an unresolved dispute or formal complaint.
• Marketing consent records: Retained for the duration of the consent and for two (2) years after withdrawal, as evidence of compliant marketing practices.
• Technical and usage logs: Retained for ninety (90) days for security monitoring purposes, then deleted unless flagged as part of a fraud or abuse investigation.

Where a legal hold is placed on data — for example, in connection with litigation, a regulatory inquiry, or a formal complaint — the standard retention periods above are suspended until the hold is lifted. 6u666 will notify you if a legal hold affects the deletion of your personal data where we are legally permitted to do so.

Data Security

6u666 implements a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

• Encryption in transit: All data transmitted between your device and 6u666 servers is encrypted using 256-bit TLS/SSL protocols. Look for the padlock icon in your browser address bar when accessing 6u666.io.
• Encryption at rest: Sensitive personal data stored on 6u666 servers — including identity documents, financial records, and password hashes — is encrypted at rest using industry-standard AES-256 encryption.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff access is governed by role-based permissions, and all access events are logged and auditable.
• Password security: Account passwords are stored as salted cryptographic hashes. 6u666 staff cannot view your password in plain text under any circumstances.
• Two-factor authentication (2FA): We strongly encourage all Account Holders to enable 2FA on their accounts to provide an additional layer of protection against unauthorised access.
• Infrastructure monitoring: Our platform infrastructure is monitored 24/7 for anomalous activity, intrusion attempts, and security vulnerabilities. Critical security patches are applied on an accelerated schedule.
• Data breach response: In the event of a personal data breach that poses a risk to Account Holders, 6u666 will notify affected users within 72 hours of becoming aware of the breach, providing details of what data was affected and the steps we are taking to address the situation.

Children & Minors

6u666 is strictly an adult platform. Our services are available only to individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from any person under the age of 21. This restriction is enforced through mandatory KYC age verification at the point of account creation.

If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will immediately suspend the associated account, initiate a full review, refund any deposits made (net of any withdrawals), and permanently delete all personal data associated with that account. Parents or guardians who believe a minor may have accessed 6u666 using false information are encouraged to notify us immediately at [email protected] so we can take prompt action.

6u666 also supports the use of parental control software to prevent underage access to online gambling platforms. If you are a parent or guardian concerned about a young person's access to online gambling content, we recommend exploring parental control tools available for your device and internet service provider.

Marketing Communications

6u666 may send you promotional communications — including bonus offers, cricket betting promotions, seasonal Eid and BPL special offers, and platform updates — by email or SMS, but only where you have provided explicit consent to receive such communications during registration or at a later point.

You may opt out of marketing communications at any time through any of the following methods:

• Clicking the "Unsubscribe" link included in every marketing email we send.
• Updating your communication preferences in the notification settings section of your 6u666 account dashboard.
• Sending a written opt-out request to [email protected] with the subject line "Unsubscribe".

Opt-out requests are processed within five (5) business days. After opting out, you will continue to receive essential transactional communications — such as deposit confirmations, withdrawal notifications, KYC requests, and account security alerts — as these are necessary for the operation of your account and cannot be disabled.

Changes to This Privacy Policy

6u666 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates to our data practices, changes in applicable law, new product or feature launches, or feedback from Account Holders. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision.

Where a change is material — meaning it significantly affects how we use your personal data or your rights in respect of that data — we will notify registered Account Holders by email to the address on file at least fourteen (14) days before the change takes effect. Continued use of the 6u666 platform after the effective date of a material change constitutes acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically so that you remain informed about how 6u666 handles your personal data. If you have questions about any proposed or recent change, please contact us using the details below before the effective date so we can address your concerns.

Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise your data rights, or would like to raise a privacy-related complaint, please contact the 6u666 Data Team using the details below:

• Email (privacy matters): [email protected] — use subject line "Privacy Query" or "Data Rights Request" for fastest routing.
• Response time: Acknowledgement within 48 hours; full response within 30 calendar days (Bangladesh Standard Time, UTC+6).
• Language: All privacy correspondence must be submitted in English to ensure accurate processing by our data team.
• Complaint escalation: If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint through appropriate legal or regulatory channels available in your jurisdiction. We encourage Account Holders to contact us directly first so we have the opportunity to resolve concerns at the earliest opportunity.

6u666 treats all privacy complaints seriously. Formal privacy complaints are logged, assigned a unique reference number, and reviewed by a senior member of our compliance team. We aim to resolve all formal privacy complaints within ten (10) business days of receipt of all necessary information. Where a complaint requires extended investigation, we will provide you with regular progress updates at intervals of no more than seven (7) days.