Privacy Policy
sixbaji — How We Handle Your Data

1. Information We Collect

sixbaji collects personal information from players through several channels: directly during account registration and verification, automatically through your use of the platform, and occasionally from trusted third-party sources such as payment processors and identity verification providers. The categories of data we collect are described in detail below.

1.1 Registration Data

When you create a sixbaji account, we collect the following information: your full legal name, date of birth, email address, Bangladeshi mobile number, residential address, and a username of your choosing. This information is required to open and maintain your account and to comply with our Know Your Customer (KYC) obligations.

1.2 Identity Verification Documents

To satisfy anti-money-laundering requirements and confirm that you are aged 18 or above, we may ask you to submit copies of official Bangladeshi identity documents. Acceptable documents include your National Identity Card (NID), passport, or birth certificate. Document images are stored securely and are only accessed by authorised personnel conducting verification checks.

1.3 Financial Data

We collect details of your deposit and withdrawal transactions, including the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), transaction amounts in Bangladeshi Taka (৳), transaction timestamps in Bangladesh Standard Time (BST, UTC+6), and the status of each transaction. We do not store full mobile wallet PINs or full bank account passwords; these are handled exclusively by your payment provider.

1.4 Usage and Device Data

When you visit sixbaji, our servers automatically record technical information about your session. This includes your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, time spent on each page, and game activity logs. This data is used for platform security, fraud detection, and service improvement purposes.

1.5 Communications Data

If you contact our support team via live chat, email, or any other channel, we retain a record of that communication including the content of messages, timestamps, and the outcome of any support request. These records allow us to provide consistent service and to review interactions in the event of a dispute.

2. How We Use Your Information

sixbaji processes your personal data only for clearly defined, lawful purposes. We do not use your data in ways that are incompatible with the purposes stated at the time of collection. The primary purposes for which your data is used are set out in the table below.

2.1 Marketing Communications

sixbaji will only send you promotional emails, SMS notifications, or in-platform messages if you have explicitly opted in to receive marketing communications during registration or via your account settings. You may withdraw consent for marketing communications at any time by updating your notification preferences in the account dashboard or by contacting support. Withdrawal of marketing consent does not affect your ability to use the Services.

2.2 Automated Decision-Making

sixbaji uses automated systems to detect unusual account activity, flag potential fraud, and enforce responsible gaming limits. In some cases, these systems may place a temporary hold on your account without prior human review. If your account is affected by an automated decision, you have the right to request a manual review by a member of the sixbaji compliance team by contacting support@sixbaji.

3. Sharing & Disclosure of Data

sixbaji does not sell your personal data. We share personal information with third parties only in the limited circumstances described in this section, and only to the extent necessary to fulfil the stated purpose.

3.1 Payment Processors

To process your deposits and withdrawals, sixbaji shares the minimum necessary transaction data with your chosen payment provider — bKash, Nagad, Rocket, Upay, or the relevant Bangladeshi bank. Each payment processor operates under its own privacy policy and data-processing terms. sixbaji is not responsible for how third-party payment providers handle data once it has been transmitted to them.

3.2 Identity Verification Providers

Where automated KYC checks are used, your identity document images and personal details may be transmitted to a third-party verification service. These providers are contractually required to process your data solely for verification purposes and are prohibited from using it for any other purpose.

3.3 Game Studio Providers

Games on sixbaji are supplied by third-party studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi. When you launch a game, your session token and a pseudonymous player identifier may be shared with the relevant studio to initialise the game session. Full personal details such as your name and mobile number are not transmitted to game studios.

3.4 Legal and Regulatory Disclosure

sixbaji may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts in response to a lawful request, court order, or legal process. In such cases, sixbaji will disclose only the data specifically requested and will, where permitted by law, notify the affected player of the disclosure.

3.5 Business Transfers

In the event that sixbaji undergoes a merger, acquisition, or sale of substantially all of its assets, player data held at the time of the transaction may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any material change to data-controller identity and of any change to this Privacy Policy that results from such a transaction.

4. Cookies & Tracking Technologies

sixbaji uses cookies and similar tracking technologies to operate the platform correctly, remember your preferences, and analyse how the site is used. This section explains what types of cookies we use, what they do, and how you can control them.

4.1 What Are Cookies?

A cookie is a small text file that is placed on your device by a website when you visit it. Cookies allow the website to recognise your device on subsequent visits, remember your preferences, and maintain a session while you are logged in. Cookies do not contain executable code and cannot install software on your device.

4.2 Types of Cookies Used by sixbaji

• Strictly Necessary Cookies: These are essential for the platform to function. They maintain your login session, remember items in your account dashboard, and prevent cross-site request forgery. These cookies cannot be disabled without impairing core platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised information about how visitors use sixbaji — which pages are most visited, where users drop off, and how quickly pages load. This data helps us improve the platform experience for all players.
• Functional Cookies: These cookies remember your preferences such as your preferred language display, last-used payment method, and notification settings, so you do not have to re-enter them on every visit.
• Targeting and Marketing Cookies: If you have consented to marketing communications, these cookies help us display relevant promotions on the platform. They record whether you have seen a particular promotion and prevent the same message from being shown repeatedly.

4.3 Managing Your Cookie Preferences

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block third-party cookies, clear existing cookies, or be notified when a new cookie is set. Please note that disabling certain cookies may affect the functionality of sixbaji — for example, blocking strictly necessary cookies will prevent you from remaining logged in during a session.

4.4 Third-Party Analytics

sixbaji may use privacy-respecting analytics tools to understand aggregate user behaviour on the platform. Any such tools are configured to anonymise IP addresses and are prohibited from using data collected on sixbaji for their own commercial purposes. No personally identifiable information is shared with analytics providers.

5. Data Retention & Storage

sixbaji retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The retention periods described below reflect our current data management schedule.

5.1 Active Account Data

While your sixbaji account remains active, we retain all registration data, transaction records, game history, and communications data associated with your account. This data is necessary to operate your account, resolve disputes, and fulfil our legal obligations as a financial services platform operating in Bangladesh.

5.2 Post-Closure Retention

Following account closure — whether voluntary or enforced — sixbaji retains account records, transaction history, and identity verification documents for a period of five (5) years. This retention period is required to meet financial record-keeping obligations and to facilitate the investigation of any retrospective fraud or money-laundering concerns.

5.3 Marketing Data

If you have consented to marketing communications, your email address and marketing preferences are retained until you withdraw consent. Following withdrawal of consent, your contact details are removed from our active marketing lists within 30 days, though a suppression record may be retained to ensure you are not inadvertently re-subscribed.

5.4 Data Storage Location

Player data is stored on servers located in jurisdictions that maintain adequate data-protection standards. sixbaji takes appropriate contractual and technical measures to ensure that data transferred outside Bangladesh for storage or processing purposes is afforded a level of protection equivalent to that required under applicable Bangladeshi law.

6. Your Privacy Rights

As a sixbaji player, you hold a number of rights in relation to the personal data we hold about you. sixbaji is committed to honouring these rights promptly and without undue restriction. All rights requests should be submitted to support@sixbaji with the subject line "Privacy Rights Request".

6.1 Right of Access

You have the right to request a copy of all personal data that sixbaji holds about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of receiving a valid request. We may ask you to verify your identity before fulfilling an access request to ensure that data is not disclosed to unauthorised parties.

6.2 Right to Rectification

If any of the personal information we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as your email address or mobile number, you may update these directly in the account dashboard. For identity document data, please contact support to initiate a correction request.

6.3 Right to Erasure

You may request that sixbaji delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. Please note that erasure requests may not be fulfilled in full where retention is required by law — for example, transaction records that must be kept for five years under financial regulations cannot be deleted on request during that period.

6.4 Right to Restrict Processing

You have the right to request that sixbaji restricts the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved. During a restriction period, we will store your data but will not actively process it for any purpose other than those you have consented to.

6.5 Right to Object to Marketing

You have an unconditional right to object to the processing of your personal data for direct marketing purposes. You may exercise this right at any time by updating your communication preferences in the account dashboard or by contacting support. All marketing will cease within 30 days of a valid objection being received.

6.6 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, machine-readable format and to have it transmitted to another data controller where technically feasible. Contact our support team to submit a portability request.

7. Security Measures

sixbaji implements a multi-layered security framework to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security programme is reviewed regularly and updated in line with industry best practices.

7.1 Encryption in Transit and at Rest

All data transmitted between your browser or mobile device and sixbaji's servers is encrypted using TLS 1.2 or higher. Sensitive data stored in our databases — including identity document references, financial records, and hashed passwords — is encrypted at rest using AES-256 encryption. Passwords are stored exclusively as salted cryptographic hashes; no plain-text passwords are retained at any point.

7.2 Access Controls

Access to personal data within sixbaji's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal data access events are logged, and access privileges are reviewed quarterly. Staff who handle personal data are required to complete data-protection training and are bound by confidentiality obligations.

7.3 Fraud and Intrusion Detection

sixbaji operates real-time fraud detection and intrusion detection systems that monitor platform activity for anomalous behaviour. These systems may automatically flag or temporarily restrict accounts that exhibit unusual login patterns, unexpected payment activity, or signs of unauthorised access. Players will be notified by email if a security event affects their account.

7.4 Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, sixbaji will take immediate steps to contain the breach, assess its scope, and notify affected players without undue delay. Notifications will be sent to the email address registered on your account and will include a description of the breach, the categories of data affected, and the steps taken to mitigate harm.

8. Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to report a data-related concern, please contact the sixbaji data management team using the details below. All privacy-related enquiries are handled in English and will receive a response within 30 calendar days.

8.1 How to Reach Us

You may contact sixbaji's data management team by emailing support@sixbaji with the subject line "Privacy Rights Request" or "Data Enquiry". Please include your registered username and the email address associated with your account so that we can locate your records efficiently and verify your identity before processing your request.

8.2 Response Timeframes

We aim to acknowledge all privacy-related requests within two (2) business days and to provide a substantive response within 30 calendar days of receipt. In cases where a request is particularly complex or where a high volume of requests are received simultaneously, we may extend this period by a further 30 days, in which case you will be notified of the extension and the reason for it before the initial 30-day period expires.

8.3 Updates to This Privacy Policy

sixbaji reviews and updates this Privacy Policy periodically to reflect changes in our data-processing practices, platform features, or applicable law. When material changes are made, we will notify registered players via the email address on their account at least 14 days before the new version comes into effect. The "Effective Date" at the top of this document will be updated to reflect the date on which the current version became operative. Continued use of sixbaji after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms.

8.4 Children's Privacy

sixbaji is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a player under 18 has provided personal data, we will close the relevant account, delete the data as soon as practicable, and return any deposits made during the period of underage use. If you believe that a minor has accessed sixbaji, please contact us immediately at support@sixbaji.