6yzz Privacy Policy

This Privacy Policy ("Policy") describes how 6yzz ("6yzz", "we", "us", or "our") collects, uses, stores, shares, and protects the personal data of users ("Player", "you", or "your") who access or use the 6yzz website, mobile platform, and associated services (collectively, the "Platform"). 6yzz is committed to handling your personal data with transparency, care, and respect for your privacy rights.

By registering an account on the 6yzz Platform, or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with this Policy, you must discontinue use of the Platform.

6yzz collects personal data through several channels: during registration, during ongoing platform use, through payment processing, and through automated technical systems. The categories of data we collect are as follows:

We collect only the minimum data required for each purpose. We do not collect sensitive personal data such as biometrics, health records, or political opinions unless legally required. Where you provide data voluntarily (for example, in a support message), you consent to its use for the purpose for which it was provided.

6yzz uses the personal data we collect for the following specific purposes, each of which is tied to a lawful basis for processing described in Section 4:

• Account creation and management: to register your account, verify your identity, maintain your profile, and enable login to the Platform.
• Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods; to maintain accurate financial records.
• KYC and fraud prevention: to verify age (21+), confirm identity, detect and prevent fraudulent activity, money laundering, and other financial crime.
• Customer support: to respond to your queries, complaints, and support requests, and to maintain records of those communications for quality assurance.
• Responsible Gaming compliance: to monitor gaming patterns, enforce deposit and session limits, process self-exclusion requests, and identify players who may need support.
• Platform improvement: to analyse aggregated, anonymised usage data in order to improve game offerings, site performance, and the overall player experience.
• Legal and regulatory compliance: to fulfil obligations under applicable laws, including anti-money-laundering requirements, and to respond to lawful requests from competent authorities.

We will not use your personal data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or unless we are required to do so by law.

6yzz processes your personal data on one or more of the following lawful bases, depending on the specific purpose of processing:

• Contractual necessity: processing is required to perform our contract with you — specifically, to operate your 6yzz account, process your bets and transactions, and deliver the Services you have signed up for.
• Legal obligation: processing is required for 6yzz to comply with applicable legal and regulatory requirements, including anti-money-laundering laws and age verification obligations.
• Legitimate interests: 6yzz has a legitimate interest in processing certain data to prevent fraud, protect the security of the Platform, and improve the quality of its services — provided this does not override your fundamental privacy rights.
• Consent: for certain optional processing activities (for example, promotional communications), 6yzz will seek your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

When you make a deposit or request a withdrawal on 6yzz, we collect the mobile wallet number or payment account identifier associated with the transaction. This information is used solely to process the payment, verify ownership of the payment method, and maintain accurate financial records as required by applicable regulations. 6yzz uses this data to match deposits to the correct account and to return withdrawals to the same payment source to prevent unauthorised fund movements.

6yzz does not store complete payment card numbers. For bKash, Nagad, Rocket, and Upay transactions, only the wallet account number (mobile number) and transaction reference are retained. Full mobile financial service credentials (PINs, passwords) are never requested or stored by 6yzz.

6yzz uses cookies and similar tracking technologies to operate the Platform, remember your session, and improve your experience. The types of cookies used are:

• Essential cookies: these are required for the Platform to function. They include session cookies that keep you logged in and security cookies that help protect your account. These cannot be disabled without breaking Platform functionality.
• Performance cookies: these collect anonymised data about how players use the Platform — for example, which pages are visited most frequently and whether error messages are received. This data helps us identify and fix technical issues and improve overall performance.
• Functional cookies: these remember your preferences on the Platform, such as your language setting. They are not strictly necessary but enhance your experience.

Most mobile browsers allow you to control cookie settings through your browser preferences. Disabling essential cookies may prevent certain parts of the Platform from working correctly. 6yzz does not use third-party advertising cookies or cross-site tracking cookies.

6yzz does not sell your personal data. We share personal data only in the following limited circumstances, and only to the minimum extent necessary for the relevant purpose:

• Payment processors: we share transaction data with bKash, Nagad, Rocket, Upay, and other payment service providers solely to process your deposits and withdrawals. These providers process data under their own privacy policies and are contractually bound to handle your data securely.
• KYC and identity verification partners: where identity verification is conducted via a third-party KYC provider, we share the minimum necessary identity data. These partners are bound by strict confidentiality obligations and data processing agreements.
• Regulatory and law enforcement authorities: 6yzz may disclose personal data to competent governmental, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or lawful regulatory request. We will, where legally permitted, notify you of such disclosure.
• Technology and infrastructure providers: we use third-party hosting, content delivery, and security services to operate the Platform. These providers act as data processors on our behalf and are contractually prohibited from using your data for any independent purpose.

In all cases where data is shared with third parties, 6yzz takes reasonable steps to ensure those parties maintain appropriate technical and organisational safeguards to protect your personal data. We do not transfer your personal data to countries outside Bangladesh unless adequate data protection safeguards are in place.

6yzz retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. In practice, this means: account and identity data is retained for the duration of your active account plus a minimum of five (5) years after account closure, in line with standard anti-money-laundering record-keeping requirements; financial transaction records are retained for a minimum of five (5) years from the date of each transaction; support communications are retained for three (3) years from the date of the final communication in each support case; technical and session data (logs) are retained for up to twelve (12) months from collection, after which they are deleted or anonymised.

Once a retention period has expired, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to any individual. Where you request deletion of your data before the end of the applicable retention period, 6yzz will delete all data that is not subject to a mandatory legal retention requirement and will communicate clearly which data must be retained and why.

As a player using the 6yzz Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and include your registered mobile number (do not include passwords or PINs):

• Right of access: you have the right to request a copy of the personal data 6yzz holds about you, along with information about how and why it is being processed.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to erasure: you have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful — subject to legal retention requirements.
• Right to restriction: in certain circumstances, you have the right to request that 6yzz restricts its processing of your personal data — for example, while the accuracy of data is being verified following a rectification request.
• Right to data portability: where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another service provider.
• Right to object: you have the right to object to processing that is based on 6yzz's legitimate interests, including processing for direct marketing purposes. Where you object to direct marketing, 6yzz will cease that processing immediately.

6yzz will respond to all verified data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further two months, in which case we will notify you of the extension and the reason for it within the initial thirty-day period.

6yzz implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include: SSL/TLS encryption for all data in transit between your device and the 6yzz Platform; encrypted storage for sensitive personal and financial data at rest; access controls ensuring that only authorised 6yzz personnel with a genuine business need can access personal data, and only to the minimum extent required; regular security assessments and vulnerability testing of the Platform; and secure audit logging of all access to personal data records.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, 6yzz will notify you without undue delay and will take all reasonable steps to contain and remediate the breach.

The 6yzz Platform is strictly intended for adults aged 21 years and above. 6yzz does not knowingly collect, process, or store personal data from individuals under the age of 21. If we become aware that a person under 21 has registered an account or provided personal data, we will immediately suspend that account, delete the associated personal data, and void any transactions.

If you are a parent or guardian and you believe that a minor in your care has created a 6yzz account or provided personal data to 6yzz, please contact us immediately at [email protected]. We will investigate and take appropriate action promptly. We encourage parents and guardians in Bangladesh to use parental control tools to prevent underage access to online gaming platforms.

The 6yzz Platform may contain references to third-party payment providers (bKash, Nagad, Rocket, Upay) and game content suppliers (Pragmatic Play, Evolution Gaming, and others). These third-party services operate under their own privacy policies, and 6yzz has no control over and accepts no responsibility for how those parties collect, use, or protect your data. We recommend reviewing the privacy policies of any third-party service you use in connection with 6yzz.

6yzz may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the Services we offer. When we make material changes, we will update the "Last updated" date at the top of this page and, where practicable, notify registered players by displaying a notice on the Platform or by sending a notification to your registered mobile number.

Your continued use of the 6yzz Platform after any update to this Policy constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you should stop using the Platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 6yzz handles your personal data, please contact our support team. We take privacy enquiries seriously and will aim to respond within 24 hours Bangladesh Standard Time (BST, UTC+6).

Email us at [email protected] with the subject line that best describes your query (for example: "Privacy Query", "Data Access Request", "Data Deletion Request"). Please include your registered mobile number — but never your password, OTP, or mobile wallet PIN — so we can verify your identity before responding.