Privacy Policy —
How 6k999 Protects Your Data

1 Introduction

This Privacy Policy ("Policy") sets out the basis on which 6k999 ("we", "us", "our") collects, processes, stores, and shares personal data relating to individuals ("you", "your", "Player") who access or use the 6k999 platform at https://6k999.io (the "Platform"). This Policy applies to all users of the Platform, including registered account holders, visitors who browse without registering, and any individual who interacts with our customer support channels.

By accessing the Platform or creating an account, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2 Data We Collect

Depending on how you interact with the Platform, we may collect and process the following categories of personal data:

Category	Examples	Purpose
Identity Data	Full name, date of birth, national ID number, passport number, photograph	Account registration, KYC age and identity verification
Contact Data	Mobile number, email address, city/district (e.g., Dhaka, Chittagong, Sylhet)	Account communication, support, transaction alerts
Financial Data	bKash/Nagad/Rocket account numbers, bank account details, transaction history, deposit and withdrawal amounts in BDT	Payment processing, AML compliance, fraud prevention
Technical Data	IP address, device type, operating system, browser type, session timestamps, geolocation (city level)	Platform security, fraud detection, performance optimisation
Usage Data	Games played, bets placed, win/loss records, session duration, feature interactions	Responsible gaming monitoring, personalisation, product improvement
Communications Data	Live chat transcripts, email correspondence, support ticket content	Customer support, complaint resolution, training, quality assurance
Marketing Preferences	Opt-in/opt-out records for promotional emails, SMS, and in-platform notifications	Managing communications consent, delivering opted-in promotions

We do not collect sensitive special-category data (such as racial or ethnic origin, religious beliefs, health data, or biometric data) except where expressly required for identity verification and only to the minimum extent necessary.

3 How We Collect Data

6k999 collects personal data through the following channels:

• Direct Interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting our support team, or responding to promotional surveys.
• Automated Technologies: When you access the Platform, we automatically collect Technical Data via server logs, cookies, pixel tags, and similar tracking technologies. See Section 7 (Cookies & Tracking) for full details.
• Payment Processors: When you complete a financial transaction via bKash, Nagad, Rocket, Upay, or a partner bank, those providers transmit transaction confirmation data to 6k999 for reconciliation and fraud prevention purposes.
• KYC and Identity Verification Partners: We work with accredited identity verification providers who process your submitted documents and return a verification outcome (pass/fail) and extracted identity fields to 6k999.
• Game Providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi supply aggregated game session data that feeds into our usage analytics and responsible gaming monitoring systems.
• Publicly Available Sources: In certain circumstances, 6k999 may supplement account data with information from publicly available databases for AML screening and sanctions checking purposes.

4 Legal Basis for Processing

6k999 processes your personal data under one or more of the following legal bases:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary to create and maintain your account, process transactions, and fulfil our obligations to you under the Terms & Conditions.
• Legal Obligation: We are required to process certain data — particularly for KYC verification and AML screening — in order to comply with applicable financial crime prevention laws and regulatory requirements.
• Legitimate Interests: We process Technical Data and Usage Data on the basis of our legitimate interest in maintaining platform security, preventing fraud, monitoring for problem gambling behaviour, and improving our products. This processing does not override your rights as a data subject.
• Consent: Where we rely on consent as the legal basis — specifically for marketing communications — you retain the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

5 How We Use Your Data

Personal data collected by 6k999 is used solely for the following purposes:

• Creating, verifying, and maintaining your player account on the Platform.
• Processing deposits and withdrawals in Bangladeshi Taka (BDT) via approved payment methods including bKash, Nagad, Rocket, and Upay.
• Conducting mandatory KYC age and identity verification prior to processing withdrawals or as otherwise required by our compliance programme.
• Screening transactions and account activity against AML, counter-terrorism financing, and sanctions requirements.
• Detecting, preventing, and investigating fraud, collusion, account takeover, and other prohibited conduct as defined in our Terms & Conditions.
• Operating responsible gaming monitoring systems that identify patterns of play associated with problem gambling and enabling the proactive tools available to players (deposit limits, self-exclusion, session reminders).
• Providing customer support through live chat and email, and maintaining records of your support history to deliver consistent service.
• Sending transactional communications such as deposit confirmations, withdrawal status updates, and security alerts. These communications are not marketing and cannot be opted out of while your account is active.
• Sending promotional communications — including offers, bonuses, and seasonal promotions relevant to players in Bangladesh — where you have opted in to receive them.
• Analysing aggregated, anonymised usage data to improve the Platform's performance, game selection, and user experience.
• Complying with any lawful request from a competent authority or court of jurisdiction.

6 Data Sharing & Disclosure

6k999 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We may share your data only in the following limited circumstances:

• Payment Service Providers: Transaction data is shared with bKash, Nagad, Rocket, Upay, and partner banks (including Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank) solely to process deposits and withdrawals.
• KYC and Identity Verification Providers: Identity documents and personal details are transmitted to our accredited verification partner for the sole purpose of age and identity confirmation. Verification providers are contractually prohibited from using your data for any other purpose.
• Game Technology Providers: Minimum necessary session data is shared with our game studio partners (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) to facilitate game delivery, resolve disputes, and conduct RNG audits.
• Fraud and AML Screening Services: Transaction and account data is processed by our fraud-detection and sanctions-screening partners to fulfil our legal obligations. These providers act as data processors under strict contractual controls.
• Legal and Regulatory Disclosure: We may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by a lawful order, subpoena, or applicable regulation, without prior notice to you where prohibited by law.
• Business Transfers: In the event of a merger, acquisition, or sale of the business, player data may be transferred to the acquiring entity as part of the transaction, subject to the acquiring entity providing equivalent privacy protections. You will be notified of any such transfer in advance.

7 Cookies & Tracking Technologies

6k999 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we deploy are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session authentication tokens, CSRF protection cookies, and load-balancer routing cookies. No personal data is transmitted to third parties via these cookies.
• Performance and Analytics Cookies: These cookies collect anonymised information about how Players interact with the Platform — such as pages visited, session duration, and error events — to help us identify and fix performance issues and improve the user experience.
• Functional Cookies: These cookies remember your preferences — such as display language, preferred payment method, and responsible gaming settings — so you do not need to re-enter them on each visit.
• Targeting and Marketing Cookies: These cookies are deployed only where you have provided explicit consent and are used to deliver personalised promotional content within the Platform. They do not track your activity on third-party websites.

8 Data Retention

6k999 retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods driven by legal and compliance obligations:

• Account and Identity Data: Retained for a minimum of 5 years from the date of account closure, in accordance with applicable AML record-keeping requirements.
• Financial Transaction Data: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial crime prevention regulations.
• Communications and Support Records: Retained for 3 years from the date of the interaction for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of your account and for 3 years following account closure, to demonstrate compliance with consent requirements.
• Technical and Log Data: Retained for 12 months from the date of collection for security and fraud investigation purposes, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely and permanently deleted from all 6k999 systems and data backups, unless a longer retention period is required by a specific legal obligation that arises before the standard period elapses.

9 Data Security

6k999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit TLS encryption for all data in transit between your device and 6k999 servers.
• AES-256 encryption for sensitive data at rest, including stored payment credentials and identity documents.
• Multi-factor authentication options for player accounts and mandatory MFA for all internal 6k999 administrative access.
• Role-based access controls ensuring that staff members can only access the minimum data necessary for their specific job function.
• Regular third-party penetration testing and security audits of the Platform infrastructure.
• Intrusion detection and anomaly-monitoring systems operating 24 hours a day, 7 days a week, 365 days a year.
• A formal incident response plan that ensures affected Players are notified of any data breach within 72 hours of discovery where the breach is likely to result in high risk to their rights and freedoms.

10 Your Data Rights

As a data subject, you hold the following rights with respect to your personal data processed by 6k999. To exercise any of these rights, contact our support team via live chat or email at [email protected]:

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this within 30 days of a verified request at no charge.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Updates to core identity data may require re-submission of KYC documents.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data, subject to our legal retention obligations. Where deletion is not immediately possible due to a mandatory retention period, we will suppress your data from active use and confirm the scheduled deletion date.
• Right to Restriction of Processing: You may request that we restrict processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You may request a machine-readable export of the personal data you have provided to us directly, in a structured, commonly used format such as JSON or CSV.
• Right to Object: You may object to processing carried out on the basis of legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

We will respond to all verifiable data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

11 Children & Minors

The 6k999 Platform is strictly intended for individuals aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. If you are under 21, you must not access the Platform or submit any personal information to us.

If we discover or are notified that we have inadvertently collected personal data from an individual under the age of 21, we will immediately close the associated account, delete all related data from our systems, and reverse any financial transactions where legally and technically possible.

12 International Data Transfers

Certain data processors engaged by 6k999 — including cloud infrastructure providers, KYC verification partners, and game technology suppliers — may process personal data on servers located outside Bangladesh. Where such transfers occur, 6k999 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses (SCCs) that legally bind the recipient to process your data to a standard equivalent to the protections described in this Policy.
• Adequacy assessments confirming that the recipient jurisdiction provides a level of data protection substantially equivalent to the standards applicable in Bangladesh.
• Binding corporate rules where data is transferred within a corporate group.

By using the Platform, you acknowledge that your data may be processed in jurisdictions outside Bangladesh for the purposes described in this Policy, subject always to the safeguards described above.

13 Third-Party Links

The Platform may contain references to third-party payment services (bKash, Nagad, Rocket, Upay) and game providers whose own privacy policies govern the data they collect independently of 6k999. 6k999 is not responsible for the privacy practices of any third party and encourages you to review the privacy policy of any external service before providing personal data directly to that service.

14 Updates to This Policy

6k999 reserves the right to update this Privacy Policy at any time. When we make material changes, we will notify registered Players via email and/or a prominent notice on the Platform at least 7 days before the change takes effect. The updated Policy will carry a revised effective date at the top of the document.

Continued use of the Platform after the effective date of an updated Policy constitutes your acceptance of the revised terms. We recommend reviewing this Policy periodically to stay informed about how we protect your data.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 6k999, please contact our support team through any of the following channels:

• Live Chat: Available 24/7 directly on the Platform. Average response time under 2 minutes.
• Email: [email protected] (plain text — not a clickable link). Please include your registered username and a clear description of your request.
• Postal / Service Area: Serving players across Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, and Mymensingh.

All privacy-related requests will be acknowledged within 2 business days and resolved within 30 calendar days of receipt.