six8s Privacy Policy

This Privacy Policy ("Policy") applies to all personal data collected and processed by six8s ("we", "us", "our") through the six8s platform, accessible at https://six8s.io (the "Platform"), in connection with the online betting, casino, and related services we provide to players located primarily in Bangladesh.

The Policy is written in formal English and is intended to be read together with our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference into this document.

By registering an account on the Platform, depositing funds, or otherwise using our services, you acknowledge that you have read and understood this Policy and consent to the collection, processing, and use of your personal data as described herein. If you do not agree to the terms of this Policy, you must not use the Platform.

six8s may update this Policy from time to time. The date of the most recent revision is always displayed at the top of this document. We will notify registered users of any material changes via the email address on file prior to the changes taking effect.

six8s collects personal data in the following categories. We collect only what is necessary for the purposes described in this Policy and do not retain data beyond the periods set out in Section 8.

We do not collect special category data (such as health data, biometric data, religious affiliation, or political opinions) unless you voluntarily provide it to our responsible gaming team in the context of a self-exclusion or problem gambling support request, in which case it is processed solely for the purpose of delivering that support.

We collect personal data through the following methods:

• Direct interactions: Data you provide when creating an account, completing KYC verification, making deposits or withdrawals, contacting our support team, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, server logs, pixel tags, and similar tracking technologies (see Section 7).
• Third-party payment providers: Transaction confirmation data shared by payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard when you conduct financial transactions on the Platform.
• Identity verification partners: Data returned by third-party KYC and document verification services when we verify your identity documents.
• Fraud prevention services: Risk signals and device fingerprinting data from fraud detection partners used to identify suspicious activity and protect player accounts.
• Publicly available sources: In limited circumstances, we may cross-reference publicly available records to verify the accuracy of information you have provided, particularly in connection with anti-money-laundering obligations.

six8s uses your personal data for the following purposes, each of which is underpinned by a specific legal basis as described in Section 5:

• Account management: Creating, maintaining, and closing your account; verifying your identity and age (21+ requirement); communicating account-related notices.
• Service delivery: Processing bets, casino game rounds, and tournament entries; displaying accurate odds and game results; crediting wins to your account balance.
• Payment processing: Processing deposits and withdrawal requests through your chosen payment method; preventing duplicate or fraudulent transactions.
• Legal and compliance obligations: Fulfilling know-your-customer (KYC), anti-money-laundering (AML), and counter-terrorism financing (CTF) obligations; responding to lawful requests from regulatory or law enforcement bodies.
• Responsible gaming: Monitoring gaming patterns for indicators of problem gambling; enforcing deposit limits, session limits, and self-exclusion restrictions you have set; proactively reaching out to players who show signs of harm.
• Fraud prevention and security: Detecting and preventing unauthorised account access, collusion, bonus abuse, and financial fraud; protecting the integrity of betting markets.
• Platform improvement: Analysing usage patterns to fix bugs, improve navigation, and develop new features that better serve players in Bangladesh.
• Personalisation: Displaying content, promotions, and game recommendations that are relevant to your interests and gameplay history, within the constraints of responsible gaming guidelines.
• Marketing communications: Sending promotional offers, bonus notifications, and event updates (such as BPL season promotions and Eid special offers) to registered players who have opted in to marketing communications. You may opt out at any time by contacting [email protected].
• Dispute resolution: Maintaining records of bets, game outcomes, and communications necessary to investigate and resolve disputes fairly.

six8s processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform the contract between you and six8s — including account creation, bet processing, payment handling, and support services. Without this processing, we cannot provide the Platform services.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC, AML, CTF, and data retention obligations under applicable law.
• Legitimate interests: Processing carried out for our legitimate business interests, including fraud prevention, platform security, analytics, and improvement of our services — provided those interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and certain cookie-based tracking, where we have obtained your prior consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

six8s does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. We share your data only in the following limited circumstances:

• Payment processors: We share financial data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard solely to the extent necessary to process your deposit and withdrawal transactions. These processors operate under their own privacy policies and are responsible for how they handle data shared with them.
• KYC and identity verification providers: We share identity documents and personal details with third-party verification partners to fulfil our legal KYC obligations. These providers are contractually bound to process data only for verification purposes.
• Game studio and platform providers: Technical data (including session tokens and IP addresses) may be shared with game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to the extent required to deliver the relevant game experience. These providers receive only what is technically necessary and are subject to data processing agreements.
• Fraud prevention and security partners: Device and technical data may be shared with fraud detection services that help us identify and prevent unauthorised access and financial fraud.
• Legal and regulatory authorities: We will disclose personal data to law enforcement, regulatory bodies, or courts when required to do so by a lawful request, court order, or where we determine in good faith that disclosure is necessary to protect the rights, property, or safety of six8s, our players, or the public.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or substantially all of the assets of six8s, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify registered users via email before such a transfer takes effect and before your data becomes subject to a different privacy policy.

All third parties with whom we share personal data are required to maintain appropriate technical and organisational security measures and to process data only in accordance with our instructions.

six8s uses cookies and similar tracking technologies on the Platform to provide essential functionality, improve performance, and — with your consent — deliver personalised content and analytics. The following categories of cookies are in use:

You can manage your cookie preferences at any time through your browser settings. Disabling strictly necessary cookies will affect the functionality of the Platform. Withdrawing consent for analytics or marketing cookies does not affect your ability to use the core betting and gaming features.

six8s retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods driven by legal and regulatory obligations:

• Account and identity data: Retained for the duration of your account's active status and for a minimum of five (5) years following permanent account closure, to satisfy AML and KYC record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with applicable financial record-keeping requirements.
• Gaming activity records: Retained for a minimum of three (3) years to support dispute resolution, responsible gaming reviews, and regulatory audits.
• Support communications: Retained for two (2) years following the resolution of the relevant support interaction, for quality assurance and dispute purposes.
• Marketing consent records: Retained for the duration of your account and for one (1) year after you withdraw consent, to demonstrate compliance with consent obligations.
• Technical and usage logs: Typically retained for up to ninety (90) days for operational purposes, after which they are anonymised or deleted.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an identifiable individual.

The specific security measures in place on the six8s Platform include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption at rest for all databases containing personal, financial, and identity data.
• Multi-factor authentication enforced for all internal staff accounts with access to user data.
• Role-based access controls limiting which team members can access which categories of personal data.
• Regular security audits and penetration testing conducted by qualified third-party security professionals.
• Automated intrusion detection systems that monitor for unusual access patterns in real time.
• Incident response procedures that ensure prompt containment and notification in the event of a data breach.

While we take all reasonable steps to protect your data, no system is completely immune to security risks. You are responsible for maintaining the security of your account credentials. If you suspect that your account has been compromised, please notify us immediately at [email protected] so that we can take prompt action.

As a user of the six8s Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team via live chat or by emailing [email protected]. We will respond to all verified requests within thirty (30) days.

• Right of access: You have the right to request a copy of the personal data six8s holds about you, including the categories of data, the purposes of processing, and the recipients with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update most account information directly from your account settings panel.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where: (a) the data is no longer necessary for the purposes for which it was collected; (b) you withdraw consent and no other legal basis applies; or (c) the data has been unlawfully processed. Note that this right is subject to our legal retention obligations — we cannot erase data that we are required by law to retain.
• Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is disputed or while an objection is pending review.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including for direct marketing purposes. Where you object to marketing, we will cease processing your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

If you are a parent or guardian and believe that a minor in your care has registered an account on the six8s Platform without your knowledge, please contact us immediately at [email protected]. We will investigate and take appropriate action within 24 hours of receiving a verified report.

Age verification is a core component of our KYC process. We require documentary proof of age from all players and employ automated age-estimation tools as an additional safeguard during the registration flow. Players who fail to verify their age within the required timeframe will have their accounts suspended until verification is complete.

The six8s Platform integrates third-party services including game content from studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. While these integrations are embedded within the six8s Platform interface, the underlying game content is served and operated by the respective studios under their own data processing terms.

six8s is not responsible for the privacy practices or data handling of any third-party game provider, payment processor, or external service accessible through the Platform. We recommend that you review the privacy policies of any third-party provider whose services you use in conjunction with six8s, particularly in respect of data they collect independently through embedded game interfaces.

We do not include outbound links to unaffiliated third-party websites on the six8s Platform. Any external URL you encounter that purports to be associated with six8s should be treated with caution — please verify authenticity by contacting our support team before sharing personal information with any site other than https://six8s.io.

six8s reviews this Privacy Policy at least annually and whenever there is a material change to how we collect or process personal data. When we make changes, the updated Policy will be published at https://six8s.io/privacy-policy with a revised "Last updated" date at the top of the document.

For material changes — such as a new category of data being collected, a new category of third party receiving your data, or a change in the legal basis for processing — we will notify registered users by email at least seven (7) days before the changes take effect. For non-material clarifications and formatting updates, the revised Policy will be published without individual notification.

Your continued use of the Platform following the effective date of any updated Policy constitutes your acknowledgement of the revised terms. If you do not agree with the updated Policy, you must cease using the Platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data six8s holds about you, please reach out to our support team through the following channels:

• Live Chat: Available 24/7 directly from your six8s account dashboard. Average response time under 2 minutes.
• Email: [email protected] — responses within 4 hours during standard operating hours (Bangladesh Standard Time, UTC+6).

When submitting a data rights request, please include your registered username, the email address on file, and a clear description of your request. We may ask for additional verification before processing requests that involve access to or deletion of personal data.

Our support team operates year-round, including during Eid, Victory Day, and other Bangladeshi public holidays, and is fully equipped to assist with privacy-related enquiries in English.