6l999 Privacy Policy

This Privacy Policy describes how 6l999 ("we", "us", "our") collects, uses, stores, and protects personal data belonging to users ("you", "your") who access or use the 6l999 platform at https://6l999.io, including any associated mobile-optimised pages, support channels, and promotional communications operated under the 6l999 brand.

This policy applies to all registered account holders, visitors who browse the platform without registering, and individuals who contact 6l999 support or engage with 6l999 promotional communications. It covers personal data collected through the website, through third-party payment integrations (bKash, Nagad, Rocket, Upay, and banking partners), and through any electronic communication between you and 6l999.

By creating an account on 6l999 or continuing to use the platform after this policy has been published or updated, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein to the extent that consent is the applicable legal basis for processing.

6l999 is the data controller responsible for the personal data processed under this Privacy Policy. The platform operates under an international gaming licence. For all data protection enquiries, corrections, deletion requests, and formal complaints, please contact the 6l999 Data Protection contact point using the details in Section 15 of this policy.

Where 6l999 engages third-party processors (such as payment gateways, KYC verification services, or cloud infrastructure providers) to process personal data on its behalf, 6l999 remains responsible as the data controller for the lawfulness of that processing and the security of the data shared with those processors. Data processing agreements are in place with all third-party processors to ensure data is handled in accordance with this policy.

6l999 collects personal data across the following categories. The specific data collected depends on how you interact with the platform:

We do not intentionally collect special category data (such as health data, religious beliefs, or political opinions). If you voluntarily disclose such information in a support interaction, it will be treated with the highest level of confidentiality and will not be used for any purpose beyond resolving the specific support matter.

6l999 collects personal data through the following methods:

• Direct submission: Data you provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal, filling in a support request, or opting into promotional communications.
• Automated technical collection: Data collected automatically when you access the platform, including IP address, device fingerprint, browser metadata, and session logs via server-side logging and first-party analytics tools.
• Cookies and local storage: First-party cookies and local storage entries used for session management, preference retention, and platform analytics. See Section 8 for full details of cookie use.
• Payment processor data: Transaction confirmation data, mobile wallet reference numbers, and payment status updates received from bKash, Nagad, Rocket, Upay, and banking partners when you initiate a deposit or withdrawal.
• KYC service providers: Identity verification results, document authenticity scores, and age confirmation data returned by third-party KYC verification services engaged by 6l999 to meet its compliance obligations.
• Fraud and AML monitoring: Risk scores and flags generated by automated fraud detection and anti-money laundering systems that analyse transaction patterns and account behaviour against known risk indicators.

6l999 processes personal data only where a valid legal basis exists. The primary legal bases relied upon are as follows:

• Contractual necessity: Processing required to fulfil the account registration agreement, process deposits and withdrawals, provide access to games and betting markets, and deliver support services.
• Legal obligation: Processing required to meet anti-money laundering (AML) requirements, KYC identity verification obligations, age verification requirements, and record-keeping mandated by our international gaming licence conditions.
• Legitimate interests: Processing carried out for fraud prevention, platform security, detection of prohibited conduct, responsible gambling monitoring, and internal analytics used to improve platform quality — where these interests are not overridden by your fundamental rights.
• Consent: Processing of data for direct marketing communications and non-essential cookies, where you have provided clear, freely given, specific, and informed consent. You may withdraw consent for marketing at any time by contacting support at [email protected].

6l999 uses the personal data it collects for the following specific purposes:

• Creating, verifying, and administering your player account on the 6l999 platform.
• Processing deposits and withdrawals through bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Bangladeshi banking partners.
• Verifying your identity and age as required by KYC obligations and responsible gaming policy, including the 21+ age restriction enforced by 6l999.
• Providing access to sports betting markets (including cricket BPL, IPL, T20 World Cup, Bangladesh Tigers fixtures), live casino tables, slot games, fishing games, and basketball betting.
• Detecting, investigating, and preventing fraud, money laundering, collusion, match-fixing, bonus abuse, and other prohibited conduct outlined in the Terms & Conditions.
• Monitoring platform activity in accordance with responsible gaming obligations — including identifying patterns that may indicate problem gambling behaviour and applying protective account restrictions where appropriate.
• Responding to support enquiries, formal complaints, and account management requests.
• Sending transactional communications such as deposit confirmations, withdrawal status updates, and security alerts — these are not promotional and cannot be unsubscribed from while your account is active.
• Sending promotional communications including bonus offers, seasonal promotions (Eid, Pohela Boishakh, Victory Day), and tournament notifications — only to users who have opted in to such communications.
• Maintaining internal analytics to monitor platform performance, identify technical issues, and improve the user experience for players in Bangladesh.
• Meeting record-keeping, audit, and reporting obligations under our international gaming licence conditions.

6l999 does not sell, rent, or trade your personal data. Data is shared only with the categories of recipient listed below and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, City Bank, and Islami Bank receive payment reference data necessary to process your deposit or withdrawal instructions.
• KYC and identity verification providers: Third-party KYC services receive copies of identity documents and facial images for age and identity verification purposes only. These providers operate under strict data processing agreements with 6l999.
• Game studios: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios receive a session token and anonymised player identifier required to launch game sessions. They do not receive your full identity or financial data.
• Fraud and AML monitoring services: Automated risk-scoring tools receive transaction and behavioural data to generate fraud and money laundering risk assessments. These services do not make final decisions about your account — human review is applied where risk flags are raised.
• Cloud infrastructure providers: Platform data including account and transaction records is stored on secure cloud servers operated by reputable providers under data processing agreements with 6l999. These providers act solely as data processors and do not use your data for their own purposes.
• Regulatory and legal authorities: 6l999 may disclose personal data to its gaming licence authority, law enforcement agencies, or financial intelligence units where legally required to do so or where disclosure is necessary to prevent serious harm.

6l999 uses first-party cookies and browser local storage to operate the platform. The following categories of cookie are in use:

6l999 does not use third-party advertising cookies or cross-site tracking pixels. No data collected via cookies on the 6l999 platform is shared with external advertising networks. You can manage cookie preferences through your browser settings, though disabling strictly necessary cookies will prevent you from logging in.

6l999 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable law and our gaming licence conditions. The following retention periods apply:

• Active account data: Retained for the full duration of your account relationship with 6l999, plus a minimum of five years following account closure to meet AML record-keeping requirements.
• KYC documents: Retained for a minimum of five years from the date of verification or from the date of account closure, whichever is later, in line with international AML standards.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction.
• Betting and gaming history: Retained for a minimum of three years from each recorded activity date.
• Support and complaint records: Retained for three years from the date of resolution of the relevant interaction.
• Marketing consent records: Retained for the duration of the consent plus three years as proof of consent compliance.
• Technical and device logs: Retained for up to 12 months from the date of collection for security and fraud investigation purposes, then purged.

When personal data reaches the end of its retention period and no legal obligation requires further retention, 6l999 will securely delete or irreversibly anonymise that data. Anonymised data aggregated for statistical purposes is not subject to these retention limits as it can no longer be linked to an individual.

As a data subject, you hold the following rights in relation to the personal data 6l999 holds about you. To exercise any of these rights, contact 6l999 at [email protected] with the subject line "Data Rights Request — [Your Account Username]".

• Right of Access: You may request a copy of all personal data 6l999 holds about you. We will provide this within 30 days of receiving a verified request, free of charge for the first request in any 12-month period.
• Right to Rectification: If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected. Basic account details (name, address, email) can be updated directly within your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data. This right is subject to 6l999's legal obligations — data required for AML compliance, gaming licence obligations, or active dispute resolution cannot be deleted until the applicable retention period expires.
• Right to Restriction of Processing: You may request that 6l999 restrict processing of your data in certain circumstances, for example while a rectification request is under review.
• Right to Data Portability: You may request a structured, machine-readable copy of personal data you have provided to 6l999 (registration data and transaction history) for transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests, including profiling for fraud detection. 6l999 will cease that processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on consent (marketing communications, non-essential analytics cookies), you may withdraw consent at any time without penalty.

If you are not satisfied with how 6l999 has handled a data rights request or a data protection complaint, you have the right to escalate to the relevant supervisory authority in the jurisdiction of our gaming licence.

6l999 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the 6l999 platform is encrypted using industry-standard TLS protocols. HTTPS is enforced across all pages — HTTP connections are automatically redirected.
• Encryption at rest: Sensitive data fields including payment details, identity document copies, and authentication credentials are encrypted at rest using AES-256 encryption within our cloud database infrastructure.
• Access controls: Access to personal data within 6l999's internal systems is restricted on a strict need-to-know basis. Role-based access controls ensure that staff can only access the data categories required for their specific job function.
• Two-factor authentication (2FA): 2FA is available for all player accounts and is mandatory for all internal 6l999 staff accounts that have access to personal data systems.
• Security monitoring: Automated intrusion detection and anomaly monitoring systems run continuously across the 6l999 platform infrastructure. Suspicious activity triggers immediate alerting and human review.
• Penetration testing: 6l999 conducts periodic independent security assessments of its platform to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, 6l999 will notify affected individuals promptly in accordance with our incident response procedure.

While 6l999 implements robust security measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials. Use a strong, unique password and enable two-factor authentication for the best protection.

The 6l999 platform is strictly prohibited for individuals under the age of 21. We do not knowingly collect personal data from individuals under 21. Age verification is a mandatory step in the account registration and KYC process.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing gambling platforms. 6l999 supports responsible parenting and provides information on child safety and gambling harm prevention on its Responsible Gaming page.

The 6l999 platform does not include outbound links to third-party websites for browsing or promotional purposes. Game sessions launched through the platform may involve content served by licensed third-party game studios (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and others), which operate their own data environments under separate data processing agreements with 6l999.

6l999 is not responsible for the privacy practices of game studios operating independently, payment providers' own customer data handling, or any third-party service whose interface you access outside of the 6l999 domain. We encourage you to review the privacy documentation of any third-party service you choose to use.

6l999 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, platform features, legal obligations, or regulatory requirements. When material changes are made, 6l999 will publish the updated policy on this page with a revised effective date and will notify registered account holders by email at least 14 days before the new version takes effect, where reasonably practicable.

Minor changes (such as clarifications, corrections of typographical errors, or updates to contact details) may be made without advance notice. The effective date at the top of this document will always reflect when the current version entered into force.

Your continued use of the 6l999 platform after a policy update has been published and any applicable notice period has elapsed constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you must stop using the platform and contact support at [email protected] to arrange account closure.

For all privacy-related enquiries, data rights requests, and formal data protection complaints, please use the following contact details. All contact information is provided as plain text and is not clickable.

• Email: [email protected]
• Subject Line for Data Rights Requests: "Data Rights Request — [Your Account Username]"
• Subject Line for Privacy Complaints: "Privacy Complaint — [Your Account Username]"
• Support Hours: 24 hours a day, 7 days a week
• Acknowledgement: Within 48 hours of receipt
• Substantive Response: Within 30 calendar days of receipt
• Language: English