Privacy Policy — How 6xis Protects Your Data

6xis is an online betting and casino platform accessible at https://6xis.io, providing sports betting, live casino games, slots, and instant BDT payment services to players in Bangladesh. In this Privacy Policy, references to "6xis", "we", "us", or "our" refer to the operator of the 6xis platform, which acts as the data controller in respect of personal information collected from registered players and site visitors.

As data controller, 6xis determines the purposes and means by which your personal data is processed. If you have any questions about how your data is handled, you may contact our support team directly at [email protected] at any time.

We collect personal data in the following categories, depending on how you interact with the 6xis platform:

2.1 Account Registration Data

When you create a 6xis account, we collect the information you provide during the registration process, including your chosen username, email address, mobile phone number, date of birth, and any other details required to verify your identity and age.

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to prevent fraud and money laundering, we may ask you to submit documentary evidence of your identity and address. This may include copies of a national identity card, passport, or driver's licence, as well as proof of address documents such as a utility bill or bank statement. We may also collect a selfie photograph for biometric identity matching where required by our verification process.

2.3 Financial Data

When you make a deposit or withdrawal, we collect data relating to your chosen payment method. For mobile money transactions via bKash, Nagad, Rocket, or Upay, this includes your registered mobile number and transaction reference numbers. For bank transfers, this includes your account name, bank name, and branch details. We do not store full card numbers or banking passwords.

2.4 Transaction and Wagering Data

We maintain a record of all deposits, withdrawals, bets placed, games played, bonus redemptions, and account balance changes associated with your account. This data is used for account management, dispute resolution, responsible gambling monitoring, and regulatory compliance.

2.5 Technical and Usage Data

When you access the 6xis platform, our servers automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, referring URL, pages visited, session duration, and click-path data. This information helps us maintain platform security, diagnose technical issues, and improve the user experience.

2.6 Communications Data

If you contact our support team by email or through our on-platform messaging system, we retain the content of those communications along with your contact details and the date and time of the interaction. This enables us to track the resolution of your query and maintain a consistent service history.

6xis uses the personal data we collect for the following specific purposes:

• Account management: To create and maintain your 6xis account, authenticate your identity at login, and enable you to access the platform's full range of betting and casino features.
• Age and identity verification: To confirm that you meet the minimum age requirement of 21 years and to prevent underage gambling in accordance with our responsible gaming obligations.
• Payment processing: To facilitate deposits into and withdrawals from your 6xis wallet via bKash, Nagad, Rocket, Upay, and supported bank transfer channels denominated in Bangladeshi Taka (৳).
• Fraud prevention and security: To detect and investigate suspicious account activity, unauthorised access attempts, money laundering indicators, and any form of platform abuse or Prohibited Conduct as defined in our Terms and Conditions.
• Responsible gambling: To monitor wagering patterns that may indicate problem gambling behaviour and to administer deposit limits, loss limits, self-exclusion requests, and reality check notifications requested by players.
• Customer support: To respond to your enquiries, resolve disputes, and maintain a record of your support interactions for continuity and quality assurance purposes.
• Platform improvement: To analyse aggregated, anonymised usage data to identify technical issues, improve navigation, and enhance the overall user experience on the 6xis platform.
• Legal and regulatory compliance: To meet our obligations under applicable anti-money laundering, counter-terrorism financing, and data protection regulations.
• Service communications: To send you transactional emails relating to your account activity, such as deposit confirmations, withdrawal processing updates, and security alerts. These communications are essential to the operation of your account and cannot be opted out of while your account remains active.
• Promotional communications: Where you have provided consent, to send you information about 6xis bonuses, promotions, and new game launches. You may withdraw this consent at any time by contacting [email protected].

6xis processes your personal data on one or more of the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual necessity: Processing that is required to perform our contractual obligations to you under the 6xis Terms and Conditions — including account management, payment processing, and the provision of betting and casino services.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering regulations, age verification requirements, and any regulatory guidance applicable to the operation of online gaming services.
• Legitimate interests: Processing that is necessary for the legitimate interests of 6xis, such as fraud detection, platform security, responsible gambling monitoring, and service improvement — provided those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, informed consent, such as the sending of promotional communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6xis does not sell your personal data to any third party. We may share your data with the following categories of recipients, strictly to the extent necessary and under binding confidentiality obligations:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank receive the minimum data necessary to process your deposit and withdrawal transactions.
• KYC and identity verification partners: Third-party identity verification services that assist us in confirming the identity, age, and address of players as part of our onboarding and ongoing compliance obligations.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe may receive anonymised session data for game performance and audit purposes. These providers do not receive personally identifiable information unless required for regulatory audit.
• IT and security service providers: Cloud hosting, content delivery, cybersecurity, and fraud monitoring providers who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: Law enforcement agencies, courts, or regulatory bodies where disclosure is required by applicable law, court order, or regulatory direction.

The 6xis platform uses cookies and similar tracking technologies to maintain session state, remember your preferences, and collect anonymised usage analytics. The categories of cookies we use are as follows:

• Essential cookies: Required for the platform to function correctly. These cookies maintain your login session, remember your language preference, and enable core platform features. They cannot be disabled without affecting your ability to use the platform.
• Analytics cookies: Used to collect aggregated, anonymised data about how visitors navigate and use the 6xis platform. This information helps us identify areas for improvement and measure the effectiveness of platform updates.
• Security cookies: Used to detect and prevent fraudulent activity, protect against cross-site request forgery, and maintain the integrity of authenticated sessions.
• Preference cookies: Used to remember optional settings you have configured, such as odds format, notification preferences, and responsible gambling limit settings.

Most web browsers allow you to manage cookie settings through the browser's preferences panel. Disabling essential cookies will prevent you from logging in or using core platform features. Disabling analytics and preference cookies will not prevent access but may affect personalisation.

6xis retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention periods required by law. The following retention guidelines apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to any identifiable individual.

6xis implements a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal information against unauthorised access, loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and our servers.
• Encryption at rest for sensitive personal data fields, including identity documents and financial records, stored in our databases.
• Access controls restricting data access to authorised personnel on a strict need-to-know basis, with all access logged and audited.
• Two-factor authentication available to all registered players to protect account access.
• Intrusion detection and monitoring systems that continuously scan for anomalous access patterns, potential breaches, and denial-of-service activity.
• Regular security assessments conducted by internal and independent third-party security teams to identify and remediate vulnerabilities.
• Staff training ensuring that all personnel who handle personal data understand their obligations and the procedures for handling data securely and confidentially.

While 6xis takes all reasonable steps to protect your data, no system is completely immune to risk. In the event of a data breach that poses a material risk to affected individuals, we will notify impacted players and relevant authorities in accordance with our incident response procedures and applicable law.

As a data subject, you have the following rights in relation to your personal data held by 6xis. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and your registered account username.

• Right of access: You may request a copy of the personal data we hold about you, together with information about how it is being processed.
• Right to rectification: You may ask us to correct any inaccurate or incomplete personal data we hold about you. You may also update basic account details directly through your account settings.
• Right to erasure: In certain circumstances, you may ask us to delete your personal data. This right does not apply where retention is required by law or for the establishment, exercise, or defence of legal claims.
• Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes. Where you object to marketing processing, we will cease that processing immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

We will respond to all data rights requests within 14 business days of receipt. We may need to verify your identity before fulfilling a request to protect against fraudulent data access claims.

The 6xis platform is strictly restricted to adults aged 21 years and above. We do not knowingly collect personal data from any individual under the age of 21. Age verification checks are applied during the registration process and as part of the KYC procedure to enforce this restriction.

If you believe that a person under the age of 21 has registered an account on 6xis or that personal data relating to a minor has been collected without appropriate parental consent, please contact us immediately at [email protected]. Upon confirmation, we will take prompt action to close the relevant account and delete all associated personal data.

6xis reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable legal obligations. When material changes are made, we will notify registered players by email to the address associated with their account at least 14 days before the changes take effect.

The effective date at the top of this page will be updated each time a new version is published. We encourage you to review this Privacy Policy periodically to stay informed about how 6xis protects your personal data. Continued use of the platform after a revised Privacy Policy takes effect constitutes your acceptance of the updated terms.

Non-material changes — such as typographical corrections, minor clarifications, or reformatting — may be made without advance notice, provided they do not alter the substance of our data processing commitments.

If you have any questions, concerns, or complaints about this Privacy Policy or about how 6xis handles your personal data, please contact our support team using the details below. We take all privacy enquiries seriously and aim to provide a clear, helpful response within 14 business days.

• Data enquiries email: [email protected] (plain text — not a clickable link)
• Subject line for data rights requests: "Data Rights Request — [Your Username]"
• Support availability: 24 hours a day, 7 days a week, including Bangladesh public holidays
• Response target: Within 14 business days for data rights requests; within 2 hours for account and payment queries
• Time zone: Bangladesh Standard Time (BST, UTC+6)

If you are not satisfied with our response to a privacy complaint, you may have the right to refer the matter to a relevant data protection authority or seek independent legal advice.