Privacy Policy — How 6kdb Protects Your Data

This Privacy Policy ("Policy") describes the practices of 6kdb ("6kdb", "the Platform", "we", "us", "our") regarding the collection, use, storage, and disclosure of personal data submitted by or collected from users ("Player", "User", "you") who access or use the 6kdb website at https://6kdb.app. By registering an account, making a deposit, placing a bet, or otherwise using the 6kdb platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy applies to all personal data collected through the 6kdb website, mobile browser experience, customer support channels, and any other touchpoint through which you interact with 6kdb. It should be read together with our Terms & Conditions and Responsible Gaming Policy.

1 Introduction & Scope

6kdb is an online casino and sports betting platform operating in the Bangladesh market. We are committed to handling all personal data with transparency, integrity, and full respect for the privacy rights of our players. This Policy has been drafted to reflect best-practice data protection principles, including the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and accountability.

This Policy covers:

• Personal data you provide directly to 6kdb during registration, KYC verification, payment processing, and customer support interactions.
• Data we collect automatically when you use the 6kdb platform, such as device information, IP address, and browsing behaviour on our site.
• Data received from third-party partners — including payment processors (bKash, Nagad, Rocket, Upay) and game content providers (Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, Microgaming) — to the extent such data relates to your use of the 6kdb platform.

This Policy does not apply to third-party websites or services that may be referenced or linked elsewhere. 6kdb is not responsible for the privacy practices of any third-party operator.

2 Data We Collect

6kdb collects personal data in two primary ways: data you provide directly, and data collected automatically through your use of the platform. The categories and specific data points collected are detailed below.

Data You Provide Directly

Data Collected Automatically

• Technical identifiers: IP address, device type, operating system, browser type and version, unique device identifiers.
• Session data: Pages visited, time spent on each page, games played, bet amounts, game session duration, login timestamps, logout timestamps.
• Geolocation data: Country-level geolocation derived from your IP address, used to confirm eligibility and enforce any applicable geographic restrictions.
• Cookies and tracking technologies: See Section 5 (Cookies & Tracking) for full details.

3 How We Use Your Data

6kdb processes personal data for the following specific and documented purposes. We do not process personal data for any purpose that is incompatible with the purposes listed here without first obtaining your separate consent.

• Account management: Creating and maintaining your 6kdb player account, authenticating your identity at each login, and managing your preferences and settings.
• Transaction processing: Processing deposits, withdrawals, and bonus credits via your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer), and maintaining accurate financial records for each transaction.
• Identity and age verification (KYC): Verifying that you meet the minimum age requirement of 18 years and that your identity matches the details provided during registration, in accordance with our anti-money-laundering obligations.
• Customer support: Responding to your queries, complaints, and support tickets; providing assistance via live chat and email; and maintaining a record of communications for quality assurance and dispute resolution purposes.
• Platform security and fraud prevention: Detecting and preventing unauthorised account access, fraudulent transactions, bonus abuse, multi-accounting, money laundering, and any other activity prohibited under our Terms & Conditions.
• Responsible gaming compliance: Monitoring betting patterns to identify indicators of problem gambling; enforcing self-exclusions, deposit limits, and cooling-off periods; and contacting you if our system flags a concern.
• Legal and regulatory compliance: Meeting our obligations under applicable anti-money-laundering, counter-terrorism financing, and data protection requirements; responding to lawful requests from competent authorities.
• Platform improvement and analytics: Understanding how players navigate and use the 6kdb platform so that we can improve the user experience, optimise game lobby layout, and refine promotional strategies — using anonymised or aggregated data wherever possible.
• Marketing communications: Sending you promotional emails and platform notifications about bonuses, new games, and seasonal offers, subject to your marketing preferences. You may opt out at any time by contacting [email protected].

4 Legal Basis for Processing

Every processing activity carried out by 6kdb rests on at least one of the following legal bases:

Where 6kdb relies on legitimate interests as a legal basis, we have conducted a balancing assessment to confirm that our interests are not overridden by your fundamental rights and freedoms.

5 Cookies & Tracking Technologies

The 6kdb website uses cookies and similar tracking technologies (including local storage and session storage) to support platform functionality, measure performance, and improve your experience. Below is a breakdown of the cookie categories used:

No Third-Party Advertising Cookies

6kdb does not place third-party advertising or retargeting cookies on your device. We do not permit advertising networks to set tracking cookies through the 6kdb platform. The analytics cookies we use are first-party only and are processed solely for internal platform improvement purposes.

Managing Your Cookie Preferences

You can control cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Please note that blocking strictly necessary cookies will impair or entirely prevent your ability to use the 6kdb platform. Blocking functional cookies may result in certain preferences not being saved between sessions.

6 Data Sharing & Third Parties

6kdb does not sell or rent your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

Service Providers and Data Processors

We engage the following categories of third-party service providers who process personal data on our behalf, strictly in accordance with our instructions:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank — to process deposits and withdrawals. These providers receive only the transaction data required to execute your payment.
• Game content providers: Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, Microgaming, and other certified game studios — to deliver game content. These providers may receive anonymised session identifiers necessary to track game round outcomes.
• Identity verification (KYC) providers: Specialist third-party KYC platforms that verify the authenticity of identity documents submitted by players. Your NID or passport data is transmitted to these providers over encrypted channels and is used solely for verification.
• Cloud infrastructure providers: Hosting and database services that store platform data in encrypted form on secure servers.
• Analytics providers: First-party analytics solutions used to process anonymised usage statistics.

Legal and Regulatory Disclosures

6kdb may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies when required to do so by applicable law or in response to a lawful court order or official government request. We will notify you of any such disclosure unless we are prohibited from doing so by law.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 6kdb's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the identity of the new data controller prior to the transfer taking effect, and you will retain the right to request deletion of your data if you do not consent to the transfer.

7 Data Retention

6kdb retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required to meet legal, regulatory, or contractual obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with any individual. If you request deletion of your data before a mandatory retention period has elapsed, we will delete all data that is not subject to a legal retention obligation and will restrict the processing of the remaining data to the minimum necessary to meet that obligation.

8 Your Privacy Rights

As a 6kdb player, you hold the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [Your Username]". We will respond within 30 days of receipt.

• Right of Access: You have the right to request a copy of all personal data that 6kdb holds about you, including the categories of data, the purposes for which it is processed, and the identity of any third parties with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay. You may also update certain account details directly through your account dashboard.
• Right to Erasure ("Right to be Forgotten"): You have the right to request that we delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to any overriding legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you object to processing based on legitimate interests and a balancing assessment is pending.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object at any time to the processing of your personal data for direct marketing purposes (including profiling for marketing). You may also object to processing based on legitimate interests, in which case we will carry out a fresh balancing assessment.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place prior to withdrawal.

9 Data Security

6kdb implements a comprehensive suite of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and 6kdb servers is protected using TLS 1.3, the current industry standard for transport layer security.
• Encryption at rest: All personal data stored in 6kdb databases is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to 6kdb staff and authorised service providers who have a genuine operational need. Access is governed by role-based permissions and is logged for audit purposes.
• Password security: Player passwords are hashed using a modern cryptographic hashing algorithm (bcrypt). Plain-text passwords are never stored or transmitted.
• OTP verification: New device logins trigger an OTP (one-time password) challenge sent to your registered mobile number to prevent unauthorised account access.
• Penetration testing: The 6kdb platform undergoes regular security assessments to identify and remediate vulnerabilities.
• Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, 6kdb will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach.

While 6kdb takes all reasonable steps to protect your personal data, no system is entirely immune to risk. You are responsible for maintaining the security of your account credentials. If you suspect that your account has been compromised, contact [email protected] immediately.

10 Contact & DPO

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 6kdb processes your personal data, please contact our support team using the details below. All privacy-related inquiries are handled with strict confidentiality.

Data Controller

The data controller responsible for your personal data is 6kdb, the operator of the platform at https://6kdb.app. The platform is operated for the Bangladesh market and all data processing activities are carried out in accordance with the principles described in this Policy.

How to Reach Us

• Email (support): [email protected]
• Subject line for data requests: "Data Rights Request — [Your Username]"
• Subject line for general privacy queries: "Privacy Inquiry — [Your Username]"
• Response time: Within 30 days of receipt (Bangladesh Standard Time, UTC+6)
• Support hours: 24/7, with live chat average response of 2 – 5 minutes

Policy Updates

6kdb reserves the right to update or modify this Privacy Policy at any time. When material changes are made, we will notify registered players by email or via a prominent notice on the platform at least 14 days before the changes take effect. The "Last Updated" date at the top of this Policy will always reflect the most recent revision. Continued use of the 6kdb platform after a policy update constitutes acceptance of the revised Policy.

Complaints

If you believe that 6kdb has not handled your personal data in accordance with this Policy or applicable law, you have the right to raise a formal complaint. We encourage you to contact us directly in the first instance so that we may attempt to resolve the matter. If you remain dissatisfied after we have responded, you may escalate the matter to the relevant supervisory authority in your jurisdiction.