Your Privacy Matters to 6lll

1 Introduction

This Privacy Policy describes how 6lll ("we", "us", "our") collects, processes, stores, shares, and protects the personal data of individuals ("you", "your", "player") who access or use the 6lll platform at 6lll.io, including all sub-pages, games, and services available thereon.

6lll is committed to handling your personal data with the highest standards of care, transparency, and security. This policy has been prepared in plain English to ensure that every player — regardless of technical background — can understand exactly how their data is managed. Where legal or technical terminology is unavoidable, we have provided plain-language explanations alongside.

This Privacy Policy forms part of the overall agreement between you and 6lll, alongside the Terms & Conditions and the Responsible Gaming Policy, all of which are published on 6lll.io. By registering an account or otherwise using the 6lll platform, you confirm that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein.

If you do not agree with any aspect of this Privacy Policy, you must not use the 6lll platform. If you have any questions before registering, please contact our support team at [email protected] — we are available 24/7 and are happy to clarify any aspect of our data practices before you commit to creating an account.

2 Personal Data We Collect

6lll collects personal data in several categories depending on your interaction with the platform. The table below summarises the types of data we collect and the primary purpose of each category:

Data Category	Examples	Primary Purpose
Identity Data	Full legal name, date of birth, national ID number, passport number, photograph	Account registration, age verification (21+), KYC compliance
Contact Data	Email address, mobile number, residential address (including city, district, postcode)	Account communications, support, fraud prevention, notifications
Financial Data	bKash/Nagad/Rocket mobile wallet numbers, bank account details, transaction history, deposit and withdrawal records	Payment processing, anti-money laundering (AML), withdrawal verification
Technical Data	IP address, device type, browser type and version, operating system, screen resolution, session tokens	Platform security, fraud detection, geo-restriction enforcement, performance optimisation
Usage Data	Pages visited, games played, bets placed, betting history, session duration, login timestamps	Platform improvement, responsible gaming monitoring, personalisation
Communications Data	Support chat transcripts, email correspondence, feedback submissions	Customer support, dispute resolution, service improvement
Marketing Preferences	Communication channel preferences, promotional opt-in/opt-out status	Consent-based marketing and promotional communications

We do not collect sensitive categories of personal data — such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data — unless you voluntarily provide such information in the context of a support interaction or responsible gaming self-assessment, and only where strictly necessary for the purpose stated at the point of collection.

3 How We Collect Your Data

6lll collects personal data through the following channels and mechanisms:

• Direct submission: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal request, submitting a support enquiry, or completing any form on the 6lll platform.
• Automated technical collection: Data collected automatically when you visit or use the platform, including IP address, device identifiers, browser fingerprint, and session data collected via server logs and cookies (see clause 7 for full cookie details).
• Payment providers: Transaction confirmation data received from payment partners including bKash, Nagad, Rocket, Upay, and card payment processors, which is used to reconcile deposits and withdrawals against your account.
• Identity verification partners: Results from third-party Know Your Customer (KYC) and age verification services, which we engage to confirm that players meet the 21+ age requirement and that their stated identity is accurate.
• Anti-fraud and AML screening: Data received from third-party fraud prevention and anti-money laundering screening tools that cross-reference account information against watchlists and risk databases.
• Responsible gaming interactions: Information collected when you use 6lll's responsible gaming tools, including deposit limit settings, session time preferences, and self-exclusion requests.

4 Why We Use Your Personal Data

6lll uses the personal data it collects for the following defined purposes. We do not use your data for any purpose that is incompatible with these stated uses without first obtaining your explicit consent:

• Account management: Creating, maintaining, and administering your 6lll player account, including processing your registration, verifying your identity, managing your preferences, and facilitating your login sessions.
• Transaction processing: Processing deposits, withdrawals, and balance adjustments; reconciling payment records; and managing the financial operation of your account in BDT via supported payment channels including bKash, Nagad, and Rocket.
• Legal and regulatory compliance: Meeting obligations under applicable anti-money laundering (AML) and counter-terrorist financing (CTF) frameworks, including player due diligence, transaction monitoring, suspicious activity reporting, and record-keeping requirements.
• Platform security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, bonus abuse, money laundering, and other prohibited conduct as defined in the 6lll Terms & Conditions.
• Customer support: Responding to your support enquiries, resolving disputes, investigating complaints, and providing technical assistance related to your account or any game on the platform.
• Responsible gaming: Monitoring betting patterns to identify potential indicators of problem gambling behaviour, administering self-exclusion and deposit limit tools, and fulfilling the obligations of 6lll's Responsible Gaming Policy.
• Platform improvement: Analysing aggregated, anonymised usage data to identify technical issues, improve game performance, optimise the user interface, and develop new platform features.
• Marketing and promotions: Sending promotional communications — including bonus offers, tournament notifications, and seasonal promotions relevant to the Bangladesh market — to players who have opted in to receive such communications. You may opt out at any time by contacting [email protected].

5 Legal Bases for Processing

Every instance of personal data processing conducted by 6lll is grounded in one or more of the following legal bases:

• Contractual necessity: Processing that is required to fulfil the contract between you and 6lll — i.e., to operate your player account, process your bets, and deliver the services you have signed up for. Without this processing, 6lll cannot provide its services to you.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and any lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing necessary for 6lll's legitimate operational interests, including fraud prevention, platform security, abuse detection, and internal analytics — provided these interests do not override your fundamental privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent, particularly for marketing communications and any optional data collection beyond core operational requirements. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Third Parties

6lll does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes under any circumstances. Data sharing with third parties is limited to the following strictly defined categories of recipient, each of whom processes your data only on 6lll's documented instructions and for the specific purpose for which the data was shared:

• Payment processing partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard — solely for the purpose of processing your deposits and withdrawals. These partners operate under their own privacy policies and security frameworks.
• Identity and age verification providers: Third-party KYC service providers engaged by 6lll to verify player identity and confirm that players meet the 21+ age requirement.
• Anti-fraud and AML screening providers: Services that cross-reference player data against financial crime risk databases and watchlists to detect and prevent money laundering, fraud, and other prohibited activities.
• Game content providers: Providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, and Spribe may receive limited technical data (such as session tokens and game result logs) necessary to deliver and support their game content on the 6lll platform.
• IT infrastructure and cloud service providers: Hosting, database, and cloud infrastructure providers engaged by 6lll to operate the platform's technical systems, subject to appropriate data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or formal regulatory request, 6lll may disclose personal data to law enforcement agencies, financial regulators, or other governmental bodies. 6lll will always seek to limit such disclosures to the minimum data necessary to satisfy the legal requirement.

All third-party data processors engaged by 6lll are contractually required to implement appropriate technical and organisational security measures to protect the data entrusted to them, and are prohibited from using your data for any purpose other than the one for which it was shared.

7 Cookies & Tracking Technologies

The 6lll platform uses cookies and similar tracking technologies to operate core platform functions, enhance your user experience, and support platform security and analytics. A cookie is a small text file stored on your device by your web browser when you visit a website.

6lll uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the platform to function. They manage your login session, maintain your account authentication state, and preserve your preferences during a session. These cookies cannot be disabled without causing platform functionality to break.
• Performance and analytics cookies: These cookies collect anonymised data about how players navigate and use the platform — which pages are visited most, where errors occur, and how long sessions typically last. This data is used exclusively to improve platform performance and user experience.
• Functional cookies: These cookies remember your language preference, display settings, and other personalisation choices to provide a more consistent experience across sessions.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other forms of automated abuse. These cookies are strictly necessary for platform security and cannot be disabled.

6lll does not currently use third-party advertising or retargeting cookies. You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may impair your ability to use some features of the 6lll platform. Continued use of the platform without changing your cookie settings constitutes acceptance of 6lll's use of cookies as described in this section.

8 Data Security

6lll takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. Our current security infrastructure includes:

• 256-bit SSL/TLS encryption for all data in transit between your device and 6lll servers.
• Encryption at rest for all stored sensitive personal and financial data.
• Role-based access controls ensuring that only authorised 6lll personnel with a documented operational need may access player data.
• Multi-factor authentication requirements for all internal administrative access to player data systems.
• Regular third-party security audits and penetration testing of the 6lll platform infrastructure.
• Automated intrusion detection and real-time monitoring of system access logs for anomalous activity.
• Secure data backup procedures with off-site redundancy to protect against data loss caused by system failures or disasters.

While 6lll makes every reasonable effort to protect your data, no system connected to the internet can be guaranteed to be 100% secure against all possible attack vectors. In the event of a data breach that poses a risk to your rights and freedoms, 6lll will notify affected players as promptly as practicable and take immediate steps to contain the breach and mitigate its effects.

You are also responsible for maintaining the security of your own account. Use a strong, unique password for your 6lll account, do not share your credentials with anyone, and contact [email protected] immediately if you believe your account has been accessed without your authorisation.

9 Data Retention

6lll retains personal data for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your account's active status on the 6lll platform, plus a minimum of five years following permanent account closure, to satisfy anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction, in accordance with standard financial record-keeping obligations.
• Identity verification records: Retained for a minimum of five years from the date of verification or account closure, whichever is later.
• Support communications: Retained for three years from the date of the last interaction, or longer where the communication forms part of an ongoing dispute or investigation.
• Marketing preference records: Retained for as long as your account is active, or until you withdraw consent for marketing communications, whichever occurs first.
• Technical and log data: Retained for up to 12 months from the date of collection, unless required for longer as part of a security investigation or legal proceeding.

When data is no longer required for any legitimate purpose, 6lll will securely delete or anonymise it. Where anonymisation is used, the resulting data set contains no information that could be used to identify you, and may be retained indefinitely for aggregated analytics purposes.

10 Your Data Rights

As a data subject, you have the following rights in relation to the personal data held by 6lll. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and include your registered email address and a brief description of your request. We will acknowledge your request within 5 business days and respond in full within 30 days.

• Right of access: You have the right to request a copy of all personal data that 6lll holds about you, along with information about how it is being used, who it has been shared with, and how long it will be retained.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to erasure: Also known as the "right to be forgotten" — you may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing is unlawful. Note that this right is subject to overriding legal retention obligations, such as AML record-keeping requirements, which may mean we cannot delete all data immediately upon request.
• Right to restriction: You may request that 6lll restrict processing of your data in certain circumstances — for example, while the accuracy of data is being contested, or while you are challenging the legitimacy of our processing.
• Right to data portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format and to have it transmitted to another controller where technically feasible.
• Right to object: You have the right to object to processing of your personal data where 6lll relies on legitimate interests as the legal basis, including profiling for responsible gaming monitoring or fraud detection. We will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

6lll will not charge a fee for responding to any data rights request unless the request is manifestly unfounded, repetitive, or excessive — in which case we may charge a reasonable administrative fee or decline to act on the request, explaining our reasons in writing.

11 Children & Minors

The 6lll platform is strictly for adults aged 21 and above. 6lll does not knowingly collect, store, or process personal data relating to any individual under the age of 21. Our registration process includes mandatory age verification steps designed to prevent underage individuals from creating an account.

If 6lll becomes aware that an account has been registered by or on behalf of a person under 21 years of age, the account will be closed immediately, all balances will be frozen pending investigation, and all personal data associated with the account will be deleted as promptly as legally permissible. If you believe that a minor has used the 6lll platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

Parents and guardians are strongly encouraged to use parental control software to prevent minors from accessing online gambling platforms. 6lll fully supports responsible online access and the protection of young people from gambling-related harm.

12 Third-Party Links

The 6lll platform may contain references to third-party services — such as payment providers, game studios, or responsible gaming organisations — that operate their own websites and privacy policies. This Privacy Policy applies only to the 6lll platform at 6lll.io and does not govern the data practices of any third-party service.

6lll is not responsible for the content, privacy practices, or security standards of any third-party website or service. We encourage you to review the privacy policy of any third party whose services you use in connection with your 6lll account — particularly the privacy policies of payment providers such as bKash, Nagad, and Rocket before using their services to transact on the platform.

13 Amendments to This Policy

6lll reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. The most current version of this policy will always be published at 6lll.io/privacy-policy and will display the effective date of the latest revision at the top of the document.

Where a change to this Privacy Policy materially affects your rights or the way your data is processed, 6lll will make reasonable efforts to notify you via email to your registered address and/or by an on-platform notification prior to the change taking effect. Your continued use of the 6lll platform after any amendment is published constitutes your acceptance of the revised policy.

We recommend bookmarking this page and reviewing the policy periodically — especially if you are an active player — so that you remain fully informed of how your data is being managed at all times.

14 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 6lll processes your personal data, please contact our Data Support team using the following details:

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate.
• Live Chat: Available directly within the 6lll platform for registered players, 24 hours a day, 7 days a week.
• Response Time: We aim to acknowledge all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6) and to provide a full response within 30 days.

We take all privacy complaints seriously and will conduct a fair and thorough investigation of any concern raised . If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.

When contacting us regarding a data privacy matter, please include your registered email address and a clear description of your concern. Do not include your account password or full financial account numbers in any correspondence — 6lll staff will never ask for these details.