six66s Privacy Policy
At six66s, your privacy is a serious matter. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is stored and protected, and the rights you hold over your information as a player on Bangladesh's premier betting platform.
Our Core Privacy Commitments
End-to-End Encryption
All data transmitted between your browser and six66s is protected by industry-standard SSL/TLS encryption. Payment transaction data is processed through encrypted channels and never stored in plain text on our servers.
No Sale of Personal Data
six66s does not sell, rent, or trade your personal information to third parties for marketing purposes. Your data is used only to operate and improve the platform and to meet our legal obligations — nothing else.
You Control Your Data
You have the right to access, correct, and request deletion of your personal data at any time. Submit a request through the six66s support team and we will respond within the timeframe required under applicable law.
Secure Data Storage
Personal data is stored on secured servers with restricted access controls. Only authorised personnel with a legitimate business need are permitted to access player records, and all internal access is logged and audited.
Defined Retention Periods
six66s retains personal data only for as long as it is necessary for the purposes described in this policy, or as required by applicable law. Account data is retained for a minimum of five years following account closure to meet regulatory obligations.
Transparent Cookie Use
We use cookies strictly for session management, security, and platform performance analytics. We do not use behavioural advertising cookies that track you across unrelated third-party websites. Cookie settings can be managed via your browser.
Information We Collect
six66s collects personal data that is necessary to provide you with a safe, lawful, and fully functional betting and casino experience. We collect information in three main ways: directly from you when you register or use the platform, automatically through the operation of the platform, and from third parties such as payment processors and identity verification services.
1.1 Information You Provide Directly
When you register an account or interact with six66s services, you provide us with the following categories of personal information:
| Category | Data Points Collected | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, National Identity Card (NID) number, passport number | Registration and KYC verification |
| Contact Data | Email address, Bangladeshi mobile number, residential address (city, district, postal code) | Registration and account updates |
| Financial Data | bKash / Nagad / Rocket / Upay wallet numbers, bank account details, Visa / Mastercard last four digits, transaction reference numbers | Deposit, withdrawal, and KYC processes |
| Authentication Data | Username, hashed password, security question responses, two-factor authentication tokens | Account registration and login |
| Verification Documents | Scanned or photographed copies of government-issued ID, selfie photographs used for liveness checks | KYC identity verification |
| Support Communications | Live chat transcripts, email correspondence, complaint submissions, feedback forms | Any time you contact the support team |
1.2 Information Collected Automatically
When you access the six66s platform — whether via a desktop browser in Dhaka or a mobile device in Chittagong, Sylhet, or anywhere else in Bangladesh — certain technical data is recorded automatically:
- Device and Browser Data: Device type, operating system version, browser type and version, screen resolution, and language settings.
- Network Data: IP address, approximate geographic location derived from IP, internet service provider, and connection type.
- Usage and Behavioural Data: Pages visited, session duration, clickstream data, game sessions played, bet history, wagering patterns, and feature interactions.
- Performance and Error Data: Page load times, crash reports, error logs, and diagnostic data used to identify and fix technical issues.
- Cookie and Session Data: Session identifiers, authentication tokens, and preferences stored in cookies or local storage — described in detail in Article 4 of this policy.
1.3 Information Received from Third Parties
six66s may receive personal data about you from trusted third-party sources as part of normal platform operations. These sources include identity verification providers who confirm the authenticity of KYC documents, payment processors who communicate transaction status and fraud signals, and self-exclusion registries used to enforce responsible gaming obligations. We do not purchase or receive marketing lists from third parties.
How We Use Your Data
six66s processes your personal data for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was collected. Below is a clear account of how each category of data is used and the legal basis for that use.
2.1 Account Management and Service Delivery
The primary use of your personal data is to create and manage your six66s account, process deposits and withdrawals, settle bets, credit bonuses, and provide you with access to casino and sports betting products. Without this processing, the six66s service cannot function. This processing is necessary for the performance of the contract between you and six66s.
2.2 Identity Verification and Fraud Prevention
six66s is obligated to verify the identity of all players before processing withdrawals and to screen accounts against fraud and money laundering indicators. Your identity data, financial data, and verification documents are processed for this purpose. This processing is necessary for compliance with applicable legal obligations and for the legitimate interests of six66s in maintaining the integrity and security of the platform.
2.3 Responsible Gaming Monitoring
six66s uses behavioural and usage data to identify patterns that may indicate problem gambling, such as rapid increases in bet frequency, repeated late-night sessions, or unusual deposit patterns following a loss sequence. This processing supports the six66s commitment to player welfare and is conducted in accordance with the Responsible Gaming Policy. Players identified as showing signs of harmful gambling behaviour may be contacted by the support team or have temporary limits applied to their account.
2.4 Customer Support
Support communications, including live chat transcripts and email correspondence, are processed to resolve your queries, investigate complaints, and improve the quality of the six66s support service. Support records are retained for a period of three years to allow us to reference prior interactions in the event of a recurring issue or dispute.
2.5 Platform Improvement and Analytics
Aggregated and anonymised usage data is analysed to understand how players interact with the six66s platform, which games and features are most popular, where technical issues occur, and how the user experience can be improved. This analytics processing uses data in a form that cannot be linked back to individual players.
2.6 Promotional Communications
If you have opted in to marketing communications during registration or via your account settings, six66s may send you information about new games, promotions, seasonal offers (such as Eid bonuses, Pohela Boishakh specials, or BPL betting offers), and platform updates by email or SMS. You may withdraw your consent to marketing communications at any time by updating your account preferences or contacting the support team. Withdrawal of marketing consent does not affect the lawfulness of processing that occurred before the withdrawal.
2.7 Legal and Regulatory Compliance
six66s may be required to process and disclose personal data to comply with court orders, regulatory investigations, anti-money laundering obligations, or other legal requirements. In such cases, processing occurs under the legal basis of compliance with a legal obligation and is limited strictly to the data required by the relevant authority.
Data Sharing and Disclosure
six66s does not sell or rent your personal data. We share data only with trusted parties where it is strictly necessary to operate the platform, meet legal obligations, or protect the security of the platform and its players.
3.1 Payment Processors and Financial Partners
To process deposits and withdrawals, six66s must share relevant financial and identity data with payment processing partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card processing networks. These partners receive only the minimum data required to complete the transaction and are contractually bound to use it solely for that purpose.
3.2 Game Providers
Game Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate the games accessible through the six66s platform. When you play a game, your account identifier, session token, and bet data are shared with the relevant Game Provider to facilitate the game session. Game Providers do not receive your full name, contact details, or payment information.
3.3 Identity Verification Services
To complete KYC verification, six66s works with specialist identity verification providers. Your submitted identity documents and, where applicable, liveness check photographs are processed by these providers using their secure verification platforms. Results are returned to six66s as a pass/fail outcome along with a confidence score; raw document images are not retained by six66s beyond the period required for regulatory recordkeeping.
3.4 Legal and Regulatory Authorities
six66s may disclose personal data to law enforcement agencies, financial intelligence units, sporting integrity bodies, or courts when required to do so by law, court order, or a formal request from a competent authority. We will not disclose data in response to informal requests without appropriate legal authority.
3.5 Business Transfers
In the event that six66s undergoes a merger, acquisition, or sale of all or part of its business, player data may be transferred to the acquiring entity as part of that transaction. In such circumstances, you will be notified via your registered email address and the acquiring entity will be required to process your data in accordance with this Privacy Policy or an equivalent standard of protection.
Data Security and Retention
5.1 Security Measures
six66s implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures in place include:
- Transport Layer Security (TLS): All data in transit between your device and the six66s platform is encrypted using TLS 1.2 or higher.
- Data Encryption at Rest: Sensitive personal data fields — including identity document references, financial account numbers, and authentication credentials — are encrypted at the database level using AES-256 encryption.
- Access Controls: Access to player data is restricted to authorised personnel on a need-to-know basis. All internal access is logged, and access rights are reviewed periodically.
- Two-Factor Authentication: Administrative access to systems holding player data requires two-factor authentication. Players are also encouraged to enable 2FA on their own accounts.
- Penetration Testing and Vulnerability Scanning: The six66s platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
- Incident Response: six66s maintains a documented data breach response procedure. In the event of a breach affecting player data, affected players will be notified without undue delay in accordance with applicable law.
5.2 Data Retention Periods
six66s retains personal data for the periods set out below. Where retention is required by law, the statutory minimum period takes precedence over a shorter operational period.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and Identity Data | Duration of account + 5 years after closure | Legal and regulatory obligation |
| Transaction and Bet History | Duration of account + 5 years after closure | Anti-money laundering compliance |
| KYC Verification Documents | Duration of account + 5 years after closure | Regulatory recordkeeping |
| Support Communication Records | 3 years from the date of the interaction | Legitimate interest (dispute resolution) |
| Analytics Data (anonymised) | Up to 24 months on a rolling basis | Legitimate interest (platform improvement) |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Legal obligation (consent audit trail) |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Deletion requests submitted by players under the right to erasure (see Article 6) are fulfilled within the retention periods described above, except where retention is required by law.
Your Privacy Rights
As a player on the six66s platform, you hold a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact the six66s support team at [email protected] with the subject line "Privacy Rights Request" and your registered account email address. We will acknowledge your request within 5 business days and fulfil it within 30 days, except where an extension is permitted under applicable law.
- Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is being used. We will provide this in a structured, commonly used format.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Basic account information such as your email address and phone number can be updated directly within your account settings.
- Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal and regulatory retention obligations described in Article 5.2.
- Right to Restriction of Processing: You may request that we pause processing of your personal data in certain circumstances, such as while the accuracy of data you have contested is being verified.
- Right to Data Portability: Where processing is based on your consent or on a contractual basis and is carried out by automated means, you may request that your data be provided to you or transmitted to a third party in a machine-readable format.
- Right to Object: You may object to processing carried out on the basis of six66s's legitimate interests, including profiling for responsible gaming purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Marketing Consent: If you have consented to receive marketing communications, you may withdraw that consent at any time by updating your account notification settings or contacting support. Withdrawal does not affect any prior lawful processing.
Third-Party Services
The six66s platform integrates with third-party services to deliver games, process payments, and support platform operations. While six66s takes care to work only with reputable and security-conscious partners, we are not responsible for the privacy practices of third-party services once data has been transmitted to them in accordance with the purposes described in this policy.
7.1 Game Providers
Games supplied by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other Game Providers are operated on their own server infrastructure. Each Game Provider maintains its own privacy policy and data security standards. six66s shares only the minimum data necessary (session token and account identifier) to establish a game session. We recommend reviewing the privacy documentation of individual Game Providers if you have specific questions about how they process game-session data.
7.2 Payment Partners
Payment transactions are processed by bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card processing partners. These providers are regulated financial institutions subject to Bangladesh Bank oversight and applicable financial services data protection requirements. Their privacy policies govern how they handle your payment data.
7.3 Content Delivery and Platform Infrastructure
six66s uses content delivery network (CDN) services to optimise platform performance for players across Bangladesh — from Dhaka and Chittagong to Sylhet, Khulna, Rajshahi, and beyond. CDN providers may process IP addresses and device data as part of request routing and DDoS protection functions. This processing is limited to technical operations and does not result in any profiling of individual players by CDN providers.
Updates to This Policy
six66s reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When a material change is made to this policy, we will update the Effective Date displayed at the top of this page and, where the change significantly affects how we process your personal data, we will notify you via your registered email address or by displaying a prominent notice on the platform.
Continued use of the six66s platform after a revised Privacy Policy has been published constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should cease using the platform and contact support to arrange account closure and a withdrawal of any remaining real-money balance.
We encourage you to review this Privacy Policy periodically to remain informed of how six66s protects and uses your personal data. The most current version of this policy is always available at six66s.net/privacy-policy.
For any questions, concerns, or requests relating to this Privacy Policy or the personal data six66s holds about you, please contact the support team at [email protected] with the subject line "Privacy Enquiry". Our team is available 24/7 and will respond to privacy-related enquiries within 5 business days.
Email: [email protected]
Subject Line: "Privacy Rights Request" or "Privacy Enquiry"
Response Time: Within 5 business days
Fulfilment Time: Within 30 days of verified request
Have Questions About Your Privacy?
Our support team is available around the clock to address any privacy concerns or data requests. You can also explore our FAQ for quick answers, or review our Responsible Gaming policy to learn how we protect player welfare.
18+ For adults aged 18 and above only. Gambling can be addictive — please play responsibly.