6kdb Privacy Policy
— Your Data, Our Responsibility

1 Introduction & Scope

This Privacy Policy ("Policy") is issued by 6kdb ("6kdb", "we", "us", "our") and applies to all personal data collected from individuals ("you", "your", "Player") who access, register with, or otherwise interact with the 6kdb platform, accessible at 6kdb.io and its associated subdomains.

6kdb is Bangladesh's leading online betting and casino platform, offering cricket betting, live casino, slots, fishing games, and crash titles to players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and beyond. In delivering this service, we necessarily collect and process certain personal data about our players. This Policy explains that process in full.

This Policy should be read in conjunction with the 6kdb Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By creating an account on 6kdb, you acknowledge that you have read, understood, and accepted the practices described in this Policy.

2 Data We Collect

6kdb collects personal data from players through several channels: directly via the registration and account management process, automatically through platform usage, and indirectly through third-party service providers such as payment processors and KYC verification partners. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify the minimum age requirement of 21 years)
• Residential address, including district and division within Bangladesh
• Email address and mobile phone number
• Username and encrypted password credentials

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (National ID Card, passport, or driving licence)
• Proof of residential address documents
• Confirmation of payment method ownership (e.g., screenshot of bKash or Nagad account registered in your name)
• Facial verification data where required by our KYC partner's liveness check process

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts in BDT and timestamps
• Mobile financial service identifiers associated with bKash, Nagad, Rocket, or Upay accounts used for transactions
• Bonus and promotional credit issuance and redemption records
• Account balance history

2.4 Gaming & Behavioural Data

• Betting history, including game types, stakes, odds, and outcomes
• Session duration, login timestamps, and frequency of platform use
• Responsible gaming tool preferences and self-exclusion or limit-setting activity
• In-platform communications with customer support

2.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser information
• Cookie identifiers and session tokens (see Section 8 for full cookie details)
• Referring URL and pages visited within the platform

3 How We Use Your Data

6kdb processes personal data only for specified, explicit, and legitimate purposes. The table below summarises the primary purposes for which your data is used and the corresponding data categories involved:

6kdb does not use automated decision-making or profiling in any manner that produces legal or similarly significant effects on players without human oversight and review.

4 Legal Basis for Processing

6kdb relies on the following legal bases for the processing of personal data, depending on the specific purpose:

• Contractual necessity — processing required to fulfil our obligations under the Terms & Conditions you accepted at registration, including account management, payment processing, and game delivery.
• Legal obligation — processing required to comply with applicable law, including KYC and anti-money laundering requirements, fraud reporting obligations, and data retention mandates.
• Legitimate interests — processing undertaken for purposes of fraud prevention, platform security, responsible gaming monitoring, customer support, and internal analytics, where such interests are not overridden by your privacy rights.
• Consent — processing based on your freely given, specific, and informed consent, such as the receipt of optional promotional communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5 Data Sharing & Recipients

6kdb does not sell, rent, or trade your personal data to any third party. Data is shared only in the following strictly controlled circumstances:

• Payment processors — bKash, Nagad, Rocket, Upay, and other mobile financial service providers receive transaction-level data necessary to execute your deposit and withdrawal instructions. These providers operate under their own privacy frameworks and are not permitted to use your data for any purpose beyond transaction fulfilment.
• KYC and identity verification partners — specialised third-party verification services receive KYC documents and identity data solely for the purpose of completing the verification process required to activate full account functionality.
• Fraud prevention and security providers — technical data including IP addresses and device identifiers may be shared with fraud detection services to identify and prevent account abuse, multi-accounting, and financial crime.
• Platform technology providers — game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Spribe, Ezugi, and Microgaming) and platform infrastructure providers may receive anonymised or pseudonymised session data necessary for game delivery and technical support.
• Legal and regulatory authorities — where required by applicable law, court order, or lawful request from a competent authority, 6kdb will disclose personal data to the extent required and legally permitted.

All third-party service providers who process personal data on behalf of 6kdb are required to do so under written data processing agreements that impose obligations equivalent to those under which 6kdb itself operates. We do not permit sub-processors to use your data for their own purposes.

6 International Data Transfers

Some of the third-party service providers used by 6kdb may process personal data in countries outside Bangladesh. Where personal data is transferred internationally, 6kdb takes the following measures to ensure an adequate level of protection:

• Transfers are made only to recipients located in countries or on the basis of frameworks that provide a recognised level of data protection.
• Where no adequacy determination exists, transfers are governed by appropriate contractual safeguards, such as standard contractual clauses or equivalent contractual protections.
• All international recipients of 6kdb player data are subject to strict contractual obligations regarding data security, confidentiality, and use limitation.

If you have concerns about the international transfer of your personal data, you may submit a query to [email protected] and we will provide details of the relevant transfer mechanism applicable to your data.

7 Data Retention

6kdb retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any applicable legal retention obligations. The following general retention periods apply:

• Account and identity data — retained for the duration of your active account plus a minimum of five (5) years following account closure, in compliance with anti-money laundering and financial record-keeping obligations.
• KYC documents — retained for a minimum of five (5) years following account closure or the date of the last relevant transaction, whichever is later.
• Transaction records — retained for a minimum of five (5) years for financial regulatory compliance purposes.
• Customer support communications — retained for a period of two (2) years from the date of the last communication, unless the matter remains unresolved or is subject to ongoing legal proceedings.
• Technical and device data — session-level technical data is retained for up to twelve (12) months for security and fraud prevention purposes, after which it is aggregated or deleted.
• Gaming and behavioural data — detailed betting history is retained for the duration of account activity and for two (2) years following account closure. Anonymised aggregate data may be retained indefinitely for analytics purposes.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data cannot be immediately deleted due to system architecture constraints, it is placed in a restricted archive and marked for deletion at the next scheduled purge cycle.

8 Cookies & Tracking Technologies

6kdb uses cookies and similar tracking technologies to maintain platform functionality, remember your session preferences, and gather anonymised analytics data that helps us improve the platform experience for all players in Bangladesh.

The categories of cookies used by 6kdb are as follows:

• Strictly Necessary Cookies — essential for the operation of the platform. These cookies enable core functions such as maintaining your logged-in session, preserving your language and currency preferences, and ensuring platform security. These cookies cannot be disabled without materially impairing your ability to use the platform.
• Performance & Analytics Cookies — collect anonymised information about how players navigate and interact with the platform, including which pages are most visited and where technical errors occur. This data is used solely to improve platform performance and is not linked to identifiable individuals.
• Functional Cookies — remember your preferences and settings (such as responsible gaming limits and notification preferences) to provide a more personalised experience on return visits.

6kdb does not deploy third-party advertising cookies, retargeting pixels, or social media tracking technologies on the platform. You will not be subject to behavioural advertising profiling as a result of using 6kdb.

9 Security Measures

6kdb implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL encryption applied to all data in transit between player devices and 6kdb platform servers.
• Encryption at rest for sensitive data categories including KYC documents and payment identifiers stored in our databases.
• Access controls ensuring that personal data is accessible only to authorised personnel who require it for their specific operational role.
• Multi-factor authentication applied to all internal systems that handle personal data.
• Regular security audits and vulnerability assessments of platform infrastructure.
• Incident response procedures enabling rapid detection, containment, and notification in the event of a data security incident.

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, 6kdb will notify affected individuals without undue delay, providing details of the nature of the breach, the data categories affected, and the remedial steps being taken.

10 Children & Minors

The 6kdb platform is strictly intended for use by adults aged 21 years and above. 6kdb does not knowingly collect, store, or process personal data relating to individuals under the age of 21.

As part of our registration process and ongoing KYC obligations, 6kdb requires all account holders to confirm their date of birth and may request documentary proof of age at any time. Accounts where age verification cannot be completed to our satisfaction will be suspended pending resolution, and no withdrawals will be processed during any such suspension.

If 6kdb becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted promptly and the associated account will be permanently closed. Any funds deposited by an underage player will be returned in accordance with applicable law.

Parents and guardians who believe that a minor may have created a 6kdb account are encouraged to contact us immediately at [email protected] so that we can take prompt action.

11 Your Rights in Detail

As a 6kdb player, you hold the following rights in relation to your personal data. These rights are summarised in the "Your Data Rights" section above and are set out in full below:

• Right of Access (Data Subject Access Request) — you may request a copy of all personal data 6kdb holds about you, together with information about the purposes of processing, the categories of data held, the recipients to whom it has been disclosed, and the applicable retention period. Requests will be fulfilled within 30 days.
• Right to Rectification — if any personal data held by 6kdb is inaccurate or incomplete, you may request that it be corrected or supplemented. We will action valid rectification requests within 14 days.
• Right to Erasure ("Right to be Forgotten") — you may request deletion of your personal data where: (a) it is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and no other legal basis applies; (c) you object to processing and there are no overriding legitimate grounds; or (d) the data has been unlawfully processed. This right is subject to legal retention obligations that may require us to retain certain data regardless of your request.
• Right to Restrict Processing — you may request that 6kdb restricts the processing of your data in circumstances where you contest its accuracy, where processing is unlawful but you prefer restriction over deletion, or where you have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability — where processing is based on consent or contractual necessity and is carried out by automated means, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object — you may object at any time to the processing of your personal data where 6kdb relies on legitimate interests as the legal basis, including any profiling based on those interests. You also have an unconditional right to object to processing for direct marketing purposes.
• Rights Related to Automated Decision-Making — you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects. 6kdb does not currently employ fully automated decision-making of this nature without human oversight.

To exercise any of the above rights, please submit a written request to [email protected]. We may require verification of your identity before processing a request to ensure the security of your data. We will respond within 30 days of receipt of a valid request. Where a request is complex or we receive a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you accordingly.

12 Changes to This Policy

6kdb reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, we will:

• Update the "Last Updated" date displayed in the document header and hero section of this page.
• Display a prominent notice on the 6kdb platform for a period of at least 14 days following the publication of the updated Policy.
• Where required by law or where changes materially affect your rights, seek fresh consent from affected players prior to implementing the change.

Your continued use of the 6kdb platform following notification of changes constitutes acceptance of the revised Privacy Policy. If you do not agree with the updated terms, you should cease using the platform and may request account closure by contacting our support team.

We recommend reviewing this page periodically to remain informed of how 6kdb protects your personal information. The version of the Policy in force at the time of any given processing activity is the version that governs that activity.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which 6kdb processes your personal data, please contact our support team using the details below. All privacy-related correspondence is handled with strict confidentiality and will be directed to the appropriate team member.

• Email: [email protected] (plain text — not a clickable link)
• Response time: We aim to acknowledge all privacy queries within 2 business days (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 30 days.
• Support availability: Our customer support team is available 24 hours a day, 7 days a week, including Bangladesh public holidays.
• Subject line: Please include "Privacy Query" or "Data Subject Request" in the subject line of your email to ensure prompt routing to the privacy team.